Function at 0x10006130
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10034b6a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2a8
push ebx
push esi
push edi
push 0x10036750
lea ecx, [ebp - 0x144]
mov dword [ebp - 0xfc], 0
call fcn.100091f0
lea ecx, [ebp - 0xf8]
mov dword [ebp - 4], 0
call fcn.10009230
mov eax, 0x6e
mov word [ebp - 0x66], ax
mov eax, 0x76
mov edi, 0x5c
mov word [ebp - 0x60], ax
lea eax, [ebp - 0x80]
lea ebx, [edi + 5]
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
mov dword [ebp - 0x6a], 0x690061
mov dword [ebp - 0x72], 0x650073
mov dword [ebp - 0x80], 0x44005c
mov dword [ebp - 0x78], 0x620061
mov dword [ebp - 0x7c], 0x740061
mov dword [ebp - 0x64], 0x63002e
mov dword [ebp - 0x5e], 0x64
mov dword [ebp - 0x6e], 0x6d005c
mov word [ebp - 0x74], bx
call fcn.10009330
mov esi, eax
push 0x100603c8
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 2
call fcn.10009330
push esi
push eax
lea eax, [ebp - 0x174]
push eax
mov byte [ebp - 4], 3
call fcn.10007b70
add esp, 0xc
lea ecx, [ebp - 0xc8]
call fcn.10009780
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 6
call fcn.10009780
lea ecx, [ebp - 0x174]
call fcn.1000c5a0
push eax
call fcn.1000ee70
add esp, 4
lea ecx, [edi + 0x10]
test eax, eax
jne 0x100062f3
lea eax, [ebp - 0x4c]
mov word [ebp - 0x2c], cx
push eax
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x42], 0x610062
mov dword [ebp - 0x2a], 0x64
mov dword [ebp - 0x38], 0x61006d
mov dword [ebp - 0x3e], 0x650073
mov dword [ebp - 0x30], 0x63002e
mov dword [ebp - 0x4a], 0x610044
mov dword [ebp - 0x34], 0x6e0069
mov dword [ebp - 0x46], 0x610074
mov word [ebp - 0x3a], di
mov word [ebp - 0x4c], di
call fcn.10009330
mov esi, eax
push 0x100603c8
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 7
call fcn.10009330
push esi
push eax
lea eax, [ebp - 0xe0]
push eax
mov byte [ebp - 4], 8
call fcn.10007b70
add esp, 0xc
lea ecx, [ebp - 0x174]
push eax
call fcn.10009950
lea ecx, [ebp - 0xe0]
call fcn.10009780
lea ecx, [ebp - 0x12c]
call fcn.10009780
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 6
call fcn.10009780
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
lea ecx, [ebp - 0x174]
call fcn.1000c5a0
push eax
call fcn.1000edb0
mov esi, eax
add esp, 0x1c
cmp esi, 0xffffffff
je 0x100063d4
push 0
lea eax, [ebp - 0xb0]
push eax
push pe_nt_image_headers32
lea eax, [ebp - 0x2b4]
push eax
push esi
call dword [0x1006066c]
push esi
call fcn.1000ecf0
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x291]
push 0x100367f4
push eax
call fcn.1001262c
mov edi, eax
add esp, 0x10
test edi, edi
je 0x100063cf
push 0x1003675c
lea ecx, [ebp - 0xe0]
call fcn.100091f0
mov esi, eax
push edi
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 9
call fcn.100091f0
push esi
push eax
lea eax, [ebp - 0x114]
push eax
mov byte [ebp - 4], 0xa
call fcn.100079b0
add esp, 0xc
lea ecx, [ebp - 0xf8]
push eax
call fcn.100098c0
lea ecx, [ebp - 0x114]
call fcn.10009770
lea ecx, [ebp - 0x12c]
call fcn.10009770
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 6
call fcn.10009770
mov edi, 0x5c
mov eax, 0x73
mov word [ebp - 0x9a], ax
mov eax, 0x2e
mov ecx, 0x64
mov word [ebp - 0x8a], ax
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x84], ecx
mov word [ebp - 0x94], cx
push eax
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x8e], 0x79006c
mov dword [ebp - 0x92], 0x690061
mov dword [ebp - 0xa2], 0x610074
mov dword [ebp - 0xa8], 0x44005c
mov dword [ebp - 0x88], 0x6c0063
mov dword [ebp - 0x98], 0x5c0065
mov dword [ebp - 0x9e], 0x610062
mov word [ebp - 0xa4], bx
call fcn.10009330
mov esi, eax
push 0x100603c8
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0xb
call fcn.10009330
push esi
push eax
lea eax, [ebp - 0x15c]
push eax
mov byte [ebp - 4], 0xc
call fcn.10007b70
add esp, 0xc
lea ecx, [ebp - 0x114]
call fcn.10009780
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xf
call fcn.10009780
lea ecx, [ebp - 0x15c]
call fcn.1000c5a0
push eax
call fcn.1000ee70
add esp, 4
test eax, eax
jne 0x10006575
mov word [ebp - 0x26], ax
mov eax, 0x73
mov word [ebp - 0x3e], ax
lea eax, [ebp - 0x4c]
mov edx, 0x69
push eax
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x3c], 0x5c0065
mov dword [ebp - 0x2e], 0x63002e
mov dword [ebp - 0x32], 0x79006c
mov dword [ebp - 0x42], 0x610062
mov dword [ebp - 0x4a], 0x610044
mov dword [ebp - 0x46], 0x610074
mov dword [ebp - 0x2a], 0x640076
mov dword [ebp - 0x38], 0x610064
mov word [ebp - 0x4c], di
mov word [ebp - 0x34], dx
call fcn.10009330
mov esi, eax
push 0x100603c8
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x10
call fcn.10009330
push esi
push eax
lea eax, [ebp - 0xe0]
push eax
mov byte [ebp - 4], 0x11
call fcn.10007b70
add esp, 0xc
lea ecx, [ebp - 0x15c]
push eax
call fcn.10009950
lea ecx, [ebp - 0xe0]
call fcn.10009780
lea ecx, [ebp - 0xc8]
call fcn.10009780
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xf
call fcn.10009780
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
lea ecx, [ebp - 0x15c]
call fcn.1000c5a0
push eax
call fcn.1000edb0
mov esi, eax
add esp, 0x1c
cmp esi, 0xffffffff
je 0x100066f2
push 0
lea eax, [ebp - 0xb0]
push eax
push pe_nt_image_headers32
lea eax, [ebp - 0x2b4]
push eax
push esi
call dword [0x1006066c]
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x291]
push 0x100367f4
push eax
call fcn.1001262c
add esp, 0xc
test eax, eax
je 0x1000662e
push eax
lea ecx, [ebp - 0xc8]
call fcn.100091f0
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xe0]
push eax
mov byte [ebp - 4], 0x12
call fcn.10007a30
add esp, 0xc
lea ecx, [ebp - 0xf8]
push eax
call fcn.100098c0
lea ecx, [ebp - 0xe0]
call fcn.10009770
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0xf
call fcn.10009770
lea eax, [ebp - 0x58]
push eax
push esi
call fcn.1000ed40
add esp, 8
test eax, eax
je 0x100066e9
push 0x3f
lea eax, [ebp - 0x1b3]
push 0
push eax
mov byte [ebp - 0x1b4], 0
call fcn.10014a20
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.1000fab0
movzx eax, word [ebp - 0xc0]
sub eax, 0x7d0
push eax
movzx eax, word [ebp - 0xba]
push eax
movzx eax, word [ebp - 0xbe]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x1b4]
push 0x40
push eax
mov word [ebp - 0x15], 0x6432
mov word [ebp - 0x18], 0x252f
mov word [ebp - 0x1b], 0x3230
mov dword [ebp - 0x13], 0x3230252f
mov word [ebp - 0xf], 0x64
mov byte [ebp - 0x1c], 0x25
mov byte [ebp - 0x19], 0x64
mov byte [ebp - 0x16], 0x30
call fcn.1000aaf0
add esp, 0x2c
lea ecx, [ebp - 0xf8]
push 0x100367f8
call fcn.1000c020
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0xf8]
call fcn.1000c020
push esi
call fcn.1000ecf0
add esp, 4
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.10007a70
add esp, 0xc
lea ecx, [ebp - 0x144]
push eax
call fcn.100098c0
lea ecx, [ebp - 0xe0]
call fcn.10009770
lea ecx, [ebp - 0x144]
call fcn.1000c590
mov esi, dword [ebp + 8]
push eax
push esi
call fcn.10007380
add esp, 8
lea ecx, [ebp - 0x15c]
call fcn.10009780
lea ecx, [ebp - 0x174]
call fcn.10009780
lea ecx, [ebp - 0xf8]
call fcn.10009770
lea ecx, [ebp - 0x144]
call fcn.10009770
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4