Function at 0x1006f620
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x1017b4cb
mov eax, dword fs:[0]
push eax
sub esp, 0x374
mov eax, dword [0x101cf40c]
xor eax, esp
mov dword [esp + 0x370], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x101cf40c]
xor eax, esp
push eax
lea eax, [esp + 0x388]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x398]
mov esi, dword [esp + 0x39c]
lea ecx, [esp + 0x18]
call fcn.101096f4
xor ebx, ebx
mov dword [esp + 0x390], ebx
mov al, al
push ebx
lea eax, [esp + 0x1c]
push eax
push 0x10183570
push esi
call fcn.1005dbd0
add esp, 0x10
mov dword [esp + 0x2c], eax
mov ebp, ebp
cmp eax, ebx
jne 0x1006f6b6
mov dword [esp + 0x390], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.10109a3c
xor eax, eax
jmp 0x1006fa3e
mov ecx, ecx
mov ecx, ecx
mov byte [esp + 0x17c], 0x2a
mov byte [esp + 0x17d], 0x2e
mov byte [esp + 0x17e], 0x62
mov byte [esp + 0x17f], 0x6d
mov byte [esp + 0x180], 0x70
mov byte [esp + 0x181], bl
mov cl, cl
mov byte [esp + 0x174], 0x2a
mov byte [esp + 0x175], 0x2e
mov byte [esp + 0x176], 0x67
mov byte [esp + 0x177], 0x69
mov byte [esp + 0x178], 0x66
mov byte [esp + 0x179], bl
mov ch, ch
xor edi, edi
cmp eax, ebx
jle 0x1006fa25
cmp edi, ebx
jl 0x1006fa66
cmp edi, dword [esp + 0x20]
jge 0x1006fa66
mov esi, dword [esp + 0x1c]
mov ecx, dword [esi + edi*4]
lea eax, [esp + 0x17c]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006f766
cmp dl, bl
je 0x1006f762
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006f766
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1006f746
xor eax, eax
jmp 0x1006f76b
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x1006f77f
push ebp
call fcn.1005aef0
add esp, 4
mov dl, dl
jmp 0x1006fa18
mov ecx, dword [esi + edi*4]
lea eax, [esp + 0x174]
lea esp, [esp]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1006f7b0
cmp dl, bl
je 0x1006f7ac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1006f7b0
add eax, 2
add ecx, 2
cmp dl, bl
jne 0x1006f790
xor eax, eax
jmp 0x1006f7b5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
jne 0x1006f7c9
push ebp
call fcn.1005afb0
add esp, 4
push ecx
pop ecx
jmp 0x1006fa18
mov eax, dword [esi + edi*4]
push 0x10183a70
push eax
call fcn.10055e20
add esp, 8
test eax, eax
jne 0x1006f83e
cmp edi, dword [esp + 0x20]
jge 0x1006fa66
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + edi*4]
push 0x10183894
push eax
call fcn.10055e20
add esp, 8
test eax, eax
jne 0x1006f83e
cmp edi, dword [esp + 0x20]
jge 0x1006fa66
mov edx, dword [esp + 0x1c]
mov ecx, dword [edx + edi*4]
push ebp
call fcn.1006f320
add esp, 4
mov ch, ch
cmp edi, dword [esp + 0x20]
jge 0x1006fa66
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + edi*4]
push ebp
call fcn.1006f4a0
add esp, 4
mov dl, dl
jmp 0x1006fa18
push ecx
pop ecx
push ecx
pop ecx
lea eax, [ebp + 0x23d8]
lea edx, [eax + 1]
jmp 0x1006f850
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x1006f850
sub eax, edx
je 0x1006f8c3
push 0x1ff
lea ecx, [esp + 0x189]
push ebx
push ecx
mov byte [esp + 0x190], bl
call fcn.101184b0
add esp, 0xc
mov al, al
mov byte [esp + 0x14], 0x2a
mov byte [esp + 0x15], 0x2e
mov byte [esp + 0x16], 0x2a
mov byte [esp + 0x17], bl
mov ah, ah
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x188]
push eax
push ebp
call fcn.10056990
add esp, 0xc
nop
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x188]
push edx
call fcn.101185b0
add esp, 8
mov esi, eax
mov ah, ah
jmp 0x1006f90d
mov byte [esp + 0x16c], 0x2e
mov byte [esp + 0x16d], 0x2f
mov byte [esp + 0x16e], 0x2a
mov byte [esp + 0x16f], 0x2e
mov byte [esp + 0x170], 0x2a
mov byte [esp + 0x171], bl
push ecx
pop ecx
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x170]
push ecx
call fcn.101185b0
add esp, 8
mov esi, eax
push edx
pop edx
cmp esi, 0xffffffff
je 0x1006fa18
jmp 0x1006f920
test byte [esp + 0x34], 0x10
jne 0x1006f9f5
cmp edi, dword [esp + 0x20]
jge 0x1006fa66
mov edx, dword [esp + 0x1c]
mov eax, dword [edx + edi*4]
push ebx
push eax
lea eax, [esp + 0x60]
push eax
call fcn.100f0c90
add esp, 0xc
test al, al
je 0x1006f9f5
mov byte [esp + 0x15c], 0x2e
mov byte [esp + 0x15d], 0x62
mov byte [esp + 0x15e], 0x6d
mov byte [esp + 0x15f], 0x70
mov byte [esp + 0x160], bl
mov al, al
mov byte [esp + 0x164], 0x2e
mov byte [esp + 0x165], 0x67
mov byte [esp + 0x166], 0x69
mov byte [esp + 0x167], 0x66
mov byte [esp + 0x168], bl
push eax
pop eax
lea ecx, [esp + 0x15c]
push ecx
lea edx, [esp + 0x5c]
push edx
call fcn.10055e20
add esp, 8
test eax, eax
je 0x1006f9cd
push ebp
lea ecx, [esp + 0x5c]
call fcn.1006f320
add esp, 4
xchg ebx, eax
xchg ebx, eax
lea eax, [esp + 0x164]
push eax
lea ecx, [esp + 0x5c]
push ecx
call fcn.10055e20
add esp, 8
test eax, eax
je 0x1006f9f5
push ebp
lea ecx, [esp + 0x5c]
call fcn.1006f4a0
add esp, 4
push ecx
pop ecx
lea edx, [esp + 0x34]
push edx
push esi
call fcn.101186e0
add esp, 8
test eax, eax
je 0x1006f920
push edx
pop edx
push esi
call fcn.1011852a
add esp, 4
mov al, al
add edi, 1
cmp edi, dword [esp + 0x2c]
jl 0x1006f726
mov dword [esp + 0x390], 0xffffffff
lea ecx, [esp + 0x18]
call fcn.10109a3c
mov eax, 1
mov ecx, dword [esp + 0x388]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x370]
xor ecx, esp
call fcn.101179ba
add esp, 0x380
ret
jmp fcn.10106489