Function at 0x1000148d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
push ebx
push esi
lea eax, [ebp - 0x50]
push edi
push eax
lea eax, [ebp - 0x60]
xor ebx, ebx
push eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x60], 0x5f325357
mov dword [ebp - 0x5c], 0x642e3233
mov dword [ebp - 0x58], 0x6c6c
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], 0x6e6e6f63
mov dword [ebp - 0x4c], 0x746365
mov dword [ebp - 0x48], ebx
call fcn.10002c3a
pop ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
add eax, 5
push ebx
mov dword [0x1000622c], eax
call fcn.10002c3a
mov esi, eax
push esi
call fcn.10002ca5
pop ecx
cmp esi, ebx
pop ecx
mov edi, eax
je 0x100016e8
cmp edi, ebx
je 0x100016e8
push ebx
lea eax, [ebp - 0x44]
push 0xb
push eax
push edi
push esi
mov byte [ebp - 0x44], 0x8d
mov byte [ebp - 0x43], 0x94
mov byte [ebp - 0x42], 0x24
mov byte [ebp - 0x41], 0x88
mov byte [ebp - 0x40], bl
mov byte [ebp - 0x3f], bl
mov byte [ebp - 0x3e], bl
mov byte [ebp - 0x3d], 0x8d
mov byte [ebp - 0x3c], 0x4c
mov byte [ebp - 0x3b], 0x24
mov byte [ebp - 0x3a], 0x74
call fcn.10002dea
add esp, 0x14
cmp eax, 0xffffffff
je 0x1000154b
add eax, esi
mov dword [0x10006144], eax
jmp 0x10001558
mov dword [ebp - 4], 1
mov dword [0x10006144], ebx
push ebx
lea eax, [ebp - 0x1c]
push 6
push eax
push edi
push esi
mov byte [ebp - 0x1c], 0x89
mov byte [ebp - 0x1b], 0x8e
mov byte [ebp - 0x1a], 0xae
mov byte [ebp - 0x19], 0x34
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], bl
call fcn.10002dea
add esp, 0x14
cmp eax, 0xffffffff
je 0x1000158d
add eax, esi
mov dword [0x100061f4], eax
jmp 0x10001596
inc dword [ebp - 4]
mov dword [0x100061f4], ebx
push ebx
lea eax, [ebp - 0xc]
push 5
push eax
push edi
push esi
mov byte [ebp - 0xc], 0x83
mov byte [ebp - 0xb], 0xc2
mov byte [ebp - 0xa], 6
mov byte [ebp - 9], 0x6a
mov byte [ebp - 8], 0x1f
call fcn.10002dea
add esp, 0x14
cmp eax, 0xffffffff
je 0x100015c9
add eax, esi
mov dword [0x100050b4], eax
jmp 0x100015d2
inc dword [ebp - 4]
mov dword [0x100050b4], ebx
push ebx
lea eax, [ebp - 0x24]
push 7
push eax
push edi
push esi
mov byte [ebp - 0x24], 0x83
mov byte [ebp - 0x23], 0xc4
mov byte [ebp - 0x22], 8
mov byte [ebp - 0x21], 0x8d
mov byte [ebp - 0x20], 0x4c
mov byte [ebp - 0x1f], 0x24
mov byte [ebp - 0x1e], 0x34
call fcn.10002dea
add esp, 0x14
cmp eax, 0xffffffff
je 0x1000160d
add eax, esi
mov dword [0x10006138], eax
jmp 0x10001616
inc dword [ebp - 4]
mov dword [0x10006138], ebx
push ebx
lea eax, [ebp - 0x38]
push 0xa
push eax
push edi
push esi
mov byte [ebp - 0x38], 0xc7
mov byte [ebp - 0x37], 0x83
mov byte [ebp - 0x36], 0x64
mov byte [ebp - 0x35], 1
mov byte [ebp - 0x34], 1
mov byte [ebp - 0x33], bl
mov byte [ebp - 0x32], 1
mov byte [ebp - 0x31], bl
mov byte [ebp - 0x30], bl
mov byte [ebp - 0x2f], bl
call fcn.10002dea
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001659
add eax, esi
mov dword [0x10005060], eax
jmp 0x10001662
inc dword [ebp - 4]
mov dword [0x10005060], ebx
push ebx
lea eax, [ebp - 0x14]
push 5
push eax
push edi
push esi
mov byte [ebp - 0x14], 0x8b
mov byte [ebp - 0x13], 1
mov byte [ebp - 0x12], 0x89
mov byte [ebp - 0x11], 0x5d
mov byte [ebp - 0x10], 0xfc
call fcn.10002dea
add esp, 0x14
cmp eax, 0xffffffff
je 0x10001697
lea eax, [eax + esi + 8]
mov dword [0x10006134], eax
jmp 0x100016a0
inc dword [ebp - 4]
mov dword [0x10006134], ebx
push ebx
lea eax, [ebp - 0x2c]
push 8
push eax
push edi
push esi
mov byte [ebp - 0x2c], 0x83
mov byte [ebp - 0x2b], 0xc4
mov byte [ebp - 0x2a], 8
mov byte [ebp - 0x29], 0x6a
mov byte [ebp - 0x28], 1
mov byte [ebp - 0x27], 0x50
mov byte [ebp - 0x26], 0x8b
mov byte [ebp - 0x25], 0xce
call fcn.10002dea
add esp, 0x14
cmp eax, 0xffffffff
je 0x100016df
add eax, esi
mov dword [0x10006140], eax
jmp 0x100016e8
inc dword [ebp - 4]
mov dword [0x10006140], ebx
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
leave
ret