Function at 0x10008bfe
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x364
mov eax, 0x100efdc7
call fcn.100deb00
mov esi, ecx
lea ecx, [ebp - 0x328]
mov dword [ebp - 0x33c], esi
mov edi, edx
call fcn.1009c270
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x360]
mov dword [ebp - 4], ebx
call fcn.10093240
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 1
call fcn.10002d18
push 1
lea eax, [ebp - 0x360]
push eax
push edi
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 2
call fcn.1009dc70
test al, al
jne 0x10008ca3
mov byte [ebp - 0x329], 1
push ebx
push 1
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 1
call fcn.100015c0
lea ecx, [ebp - 0x60]
call fcn.10002740
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], bl
call fcn.10093640
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x328]
call fcn.10006ef6
mov al, byte [ebp - 0x329]
call fcn.100deb60
ret
lea eax, [ebp - 0x1c0]
push eax
push 0x1012beb0
lea ecx, [ebp - 0x360]
call fcn.10097b50
mov ecx, eax
call fcn.100937f0
lea eax, [esi + 0x194]
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 3
call fcn.1000ca0e
lea eax, [ebp - 0x160]
push eax
push 0x1012beb4
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 4
call fcn.10097b50
mov ecx, eax
call fcn.100937f0
lea eax, [ebp - 0x140]
push eax
push 0x1012beb8
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 5
call fcn.10097b50
mov ecx, eax
call fcn.100937f0
lea eax, [ebp - 0x1a0]
push eax
push 0x1012bebc
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 6
call fcn.10097b50
mov ecx, eax
call fcn.100937f0
lea eax, [ebp - 0x200]
push eax
push 0x1012bec0
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 7
call fcn.10097b50
mov ecx, eax
call fcn.100937f0
lea eax, [ebp - 0x240]
push eax
push 0x1012bec4
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 8
call fcn.10097b50
mov ecx, eax
call fcn.100937f0
lea eax, [ebp - 0xe0]
push eax
push 0x1012bec8
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 9
call fcn.10097b50
mov ecx, eax
call fcn.100937f0
push str._pa_:_
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xa
call fcn.10002600
or edi, 0xffffffff
push edi
push ebx
lea eax, [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0x60]
call fcn.10002827
push str.___pc_:_
lea ecx, [ebp - 0x60]
call fcn.10002600
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x160]
call fcn.10014b0b
pop ecx
push edi
push ebx
push eax
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xb
call fcn.10002827
push ebx
push 1
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xa
call fcn.100015c0
lea ecx, [ebp - 0x40]
call fcn.10002740
push str.___pd_:_
lea ecx, [ebp - 0x60]
call fcn.10002600
push edi
push ebx
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x60]
call fcn.10002827
push str.___pe_:_
lea ecx, [ebp - 0x60]
call fcn.10002600
push edi
push ebx
lea eax, [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x60]
call fcn.10002827
push str.___pf_:_
lea ecx, [ebp - 0x60]
call fcn.10002600
push edi
push ebx
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x60]
call fcn.10002827
push str.___ph_:_
lea ecx, [ebp - 0x60]
call fcn.10002600
push edi
push ebx
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x60]
call fcn.10002827
push dword [ebp - 0x12c]
push dword [ebp - 0x14c]
push str.CStatisticsInfo::SendHistoryData_f3:_d__f4:_d
push 1
push dword [0x101466d8]
call fcn.100814a0
add esp, 0x14
cmp dword [esi + 0xc0], ebx
je 0x10008efb
mov esi, dword [esi + 0xc0]
xor eax, eax
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
sub eax, dword [esi + 8]
sbb ecx, dword [esi + 0xc]
add eax, dword [esi]
adc ecx, dword [esi + 4]
push ecx
push eax
lea eax, [ebp - 0x20]
push str._I64d
push eax
call fcn.10011963
add esp, 0x10
push str.___pg_:_
lea ecx, [ebp - 0x60]
call fcn.10002600
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x60]
call fcn.10002600
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x338], esp
push 0x1012bde4
call fcn.1000151a
sub esp, 0x20
mov byte [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0x334], esp
push 0x1012bde0
call fcn.1000151a
lea eax, [ebp - 0xe0]
push eax
mov byte [ebp - 4], 0xa
call fcn.100149a3
sub esp, 0x20
lea eax, [ebp - 0xe0]
mov ecx, esp
mov dword [ebp - 0x334], esp
push eax
call fcn.1000ca0e
lea esi, [ebp - 0x274]
call fcn.100145b5
sub esp, 0x20
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x334], esp
push 0x1012bc38
call fcn.1000151a
sub esp, 0x20
mov byte [ebp - 4], 0xe
mov ecx, esp
mov dword [ebp - 0x338], esp
push 0x1012bc3c
call fcn.1000151a
mov eax, esi
push eax
mov byte [ebp - 4], 0xd
call fcn.100149a3
lea eax, [ebp - 0x40]
push eax
mov eax, esi
push eax
call fcn.1001496c
push eax
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0xf
call fcn.10002c71
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0xd
call fcn.100015c0
lea ecx, [ebp - 0x40]
call fcn.10002740
lea ecx, [ebp - 0x120]
call fcn.10002d18
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x10
call fcn.10002d18
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x11
call fcn.10002d18
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x12
call fcn.10002d18
push str._data_:_
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x13
call fcn.10002600
lea eax, [ebp - 0x40]
mov esi, dword [ebp - 0x33c]
push eax
push esi
lea ecx, [ebp - 0xe0]
call fcn.1000aef0
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x14
call fcn.10002827
push ebx
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x13
call fcn.100015c0
lea ecx, [ebp - 0x40]
call fcn.10002740
push 0x1012bc60
lea ecx, [ebp - 0x80]
call fcn.10002600
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x80]
call fcn.10014b0b
pop ecx
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x15
call fcn.10002c71
push ebx
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x13
call fcn.100015c0
lea ecx, [ebp - 0x40]
call fcn.10002740
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x120]
call fcn.100011ec
sub esp, 0x20
add esi, 0x170
mov ecx, esp
mov dword [ebp - 0x334], esp
push esi
call fcn.1000ca0e
sub esp, 0x20
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x120]
mov ecx, esp
mov dword [ebp - 0x338], esp
push eax
call fcn.1000ca0e
sub esp, 0x20
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x370], esp
push eax
call fcn.1000151a
sub esp, 0x20
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x200]
mov ecx, esp
mov dword [ebp - 0x368], esp
push eax
call fcn.1000ca0e
sub esp, 0x20
mov byte [ebp - 4], 0x19
mov ecx, esp
mov dword [ebp - 0x36c], esp
lea eax, [ebp - 0x1a0]
push eax
call fcn.1000ca0e
sub esp, 0x20
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x140]
mov ecx, esp
mov dword [ebp - 0x364], esp
push eax
call fcn.1000ca0e
sub esp, 0x20
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x160]
mov ecx, esp
mov dword [ebp - 0x344], esp
push eax
call fcn.1000ca0e
sub esp, 0x20
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x220]
mov ecx, esp
mov dword [ebp - 0x340], esp
push eax
call fcn.1000ca0e
sub esp, 0x20
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x1c0]
mov ecx, esp
mov dword [ebp - 0x330], esp
push eax
call fcn.1000ca0e
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x13
call fcn.10006c9e
push eax
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x1e
call fcn.10002c71
push ebx
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x13
call fcn.100015c0
lea ecx, [ebp - 0x40]
call fcn.10002740
push str.___pj_:
lea ecx, [ebp - 0x60]
call fcn.10002600
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x60]
call fcn.10002827
push str.__pi_:_
lea ecx, [ebp - 0x60]
call fcn.10002600
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x1e0]
push eax
lea ecx, [ebp - 0x60]
call fcn.10002827
push 0x1012bcd0
lea ecx, [ebp - 0x180]
call fcn.1000151a
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x1f
call fcn.10002827
push 0x1012bcd4
lea ecx, [ebp - 0x180]
call fcn.10002600
push str.params
lea ecx, [ebp - 0x100]
call fcn.1000151a
sub esp, 0x20
mov byte [ebp - 4], 0x20
mov ecx, esp
mov dword [ebp - 0x330], esp
push esi
call fcn.1000ca0e
sub esp, 0x20
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x180]
mov ecx, esp
mov dword [ebp - 0x340], esp
push eax
call fcn.1000ca0e
lea esi, [ebp - 0xa0]
mov byte [ebp - 4], 0x20
call fcn.1000c707
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x22
call fcn.10014c06
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x23
call fcn.10002827
push ebx
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x22
call fcn.100015c0
lea ecx, [ebp - 0x40]
call fcn.10002740
push ebx
push edi
mov ecx, esi
mov byte [ebp - 4], 0x20
call fcn.100015c0
mov ecx, esi
call fcn.10002740
push 0x1012bce0
lea ecx, [ebp - 0x100]
call fcn.10002600
mov esi, dword [ebp - 0x33c]
push 0xffffffffffffffff
push ebx
lea eax, [esi + 0x2b4]
push eax
lea ecx, [ebp - 0x100]
call fcn.10002827
sub esp, 0x20
lea eax, [ebp - 0x100]
mov ecx, esp
mov dword [ebp - 0x330], esp
push eax
call fcn.1000ca0e
sub esp, 0x20
mov byte [ebp - 4], 0x24
lea eax, [esi + 0x2f4]
mov ecx, esp
mov dword [ebp - 0x340], esp
push eax
call fcn.1000ca0e
sub esp, 0x20
mov byte [ebp - 4], 0x25
lea eax, [esi + 0x2d4]
mov ecx, esp
mov dword [ebp - 0x344], esp
push eax
call fcn.1000ca0e
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x20
call fcn.100039c3
push eax
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x26
call fcn.10002c71
push ebx
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x20
call fcn.100015c0
lea ecx, [ebp - 0x40]
call fcn.10002740
push esi
lea ecx, [ebp - 0xc0]
call fcn.10007cfd
cmp eax, 0xffffffff
jne 0x100095fc
push 0x1012bd28
lea ecx, [ebp - 0xa0]
call fcn.10005438
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0x27
call fcn.10014650
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x28
call fcn.1000ffd3
push ebx
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x27
call fcn.100031be
lea ecx, [ebp - 0x40]
call fcn.10002740
push 0x1012bd70
lea ecx, [ebp - 0xa0]
call fcn.1000e4d2
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.10014650
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x29
call fcn.1000ffd3
push ebx
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x27
call fcn.100031be
lea ecx, [ebp - 0x40]
call fcn.10002740
sub esp, 0x20
lea eax, [ebp - 0xa0]
mov ecx, esp
mov dword [ebp - 0x330], esp
push eax
call fcn.10014492
push ebx
push esi
call fcn.1000aa53
push ebx
push edi
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x20
call fcn.100031be
lea ecx, [ebp - 0xa0]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x1f
call fcn.100015c0
lea ecx, [ebp - 0x100]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x13
call fcn.100015c0
lea ecx, [ebp - 0x180]
call fcn.10002740
mov byte [ebp - 4], 0x12
push ebx
push edi
lea ecx, [ebp - 0x80]
call fcn.100015c0
lea ecx, [ebp - 0x80]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x11
call fcn.100015c0
lea ecx, [ebp - 0xc0]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x10
call fcn.100015c0
lea ecx, [ebp - 0x1e0]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0xd
call fcn.100015c0
lea ecx, [ebp - 0x120]
call fcn.10002740
lea eax, [ebp - 0x274]
push eax
mov byte [ebp - 4], 0xa
call fcn.10014617
push ebx
push edi
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 9
call fcn.100015c0
lea ecx, [ebp - 0xe0]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 8
call fcn.100015c0
lea ecx, [ebp - 0x240]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 7
call fcn.100015c0
lea ecx, [ebp - 0x200]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 6
call fcn.100015c0
lea ecx, [ebp - 0x1a0]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 5
call fcn.100015c0
lea ecx, [ebp - 0x140]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 4
call fcn.100015c0
lea ecx, [ebp - 0x160]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 3
call fcn.100015c0
lea ecx, [ebp - 0x220]
call fcn.10002740
mov byte [ebp - 4], 2
push ebx
push edi
lea ecx, [ebp - 0x1c0]
call fcn.100015c0
lea ecx, [ebp - 0x1c0]
call fcn.10002740
mov byte [ebp - 0x329], bl
jmp 0x10008c63
push 0x1012bd84
lea ecx, [ebp - 0x40]
call fcn.10005438
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0xa0]
push eax
mov byte [ebp - 4], 0x2a
call fcn.10014650
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2b
call fcn.1000ffd3
push ebx
push edi
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x2a
call fcn.100031be
lea ecx, [ebp - 0xa0]
call fcn.10002740
push 0x1012bd70
lea ecx, [ebp - 0x40]
call fcn.1000e4d2
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.10014650
pop ecx
pop ecx
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x2c
call fcn.1000ffd3
push ebx
push edi
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x2a
call fcn.100031be
lea ecx, [ebp - 0x294]
call fcn.10002740
sub esp, 0x20
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x330], esp
push eax
call fcn.10014492
push edi
push esi
call fcn.1000aa53
push ebx
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x20
call fcn.100031be
lea ecx, [ebp - 0x40]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x1f
call fcn.100015c0
lea ecx, [ebp - 0x100]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x13
call fcn.100015c0
lea ecx, [ebp - 0x180]
call fcn.10002740
mov byte [ebp - 4], 0x12
push ebx
push edi
lea ecx, [ebp - 0x80]
call fcn.100015c0
lea ecx, [ebp - 0x80]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x11
call fcn.100015c0
lea ecx, [ebp - 0xc0]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x10
call fcn.100015c0
lea ecx, [ebp - 0x1e0]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0xd
call fcn.100015c0
lea ecx, [ebp - 0x120]
call fcn.10002740
lea eax, [ebp - 0x274]
push eax
mov byte [ebp - 4], 0xa
call fcn.10014617
push ebx
push edi
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 9
call fcn.100015c0
lea ecx, [ebp - 0xe0]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 8
call fcn.100015c0
lea ecx, [ebp - 0x240]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 7
call fcn.100015c0
lea ecx, [ebp - 0x200]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 6
call fcn.100015c0
lea ecx, [ebp - 0x1a0]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 5
call fcn.100015c0
lea ecx, [ebp - 0x140]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 4
call fcn.100015c0
lea ecx, [ebp - 0x160]
call fcn.10002740
push ebx
push edi
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 3
call fcn.100015c0
lea ecx, [ebp - 0x220]
call fcn.10002740
mov byte [ebp - 4], 2
push ebx
push edi
lea ecx, [ebp - 0x1c0]
call fcn.100015c0
lea ecx, [ebp - 0x1c0]
call fcn.10002740
jmp 0x10008c5c