Function at 0x100c0150
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8cc
mov eax, dword [0x100cf614]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
mov dword [0x100de298], eax
mov ecx, dword [ebp + 0x10]
mov dword [0x100de2a0], ecx
mov edx, dword [ebp + 0xc]
mov dword [0x100de29c], edx
mov dword [ebp - 0x8a8], 0
mov dword [ebp - 0x89c], 0
mov byte [ebp - 0x87c], 0
push 0x3ff
push 0
lea eax, [ebp - 0x87b]
push eax
call fcn.1001d530
add esp, 0xc
lea ecx, [ebp - 0x87c]
push ecx
call fcn.1000bca0
add esp, 4
mov byte [ebp - 0x47c], 0
push 0x3ff
push 0
lea edx, [ebp - 0x47b]
push edx
call fcn.1001d530
add esp, 0xc
lea eax, [ebp - 0x47c]
push eax
call fcn.1000bca0
add esp, 4
lea ecx, [ebp - 0x47c]
push ecx
call fcn.100be040
add esp, 4
test eax, eax
jne 0x100c0201
jmp 0x100c0c32
push 4
lea ecx, [ebp - 0x884]
call fcn.1000e180
lea ecx, [ebp - 0x884]
call fcn.1000e890
mov edx, 1
shl edx, 2
mov byte [ebp + edx - 0x48], 0x73
mov eax, 1
shl eax, 3
mov byte [ebp + eax - 0x48], 0x65
mov ecx, 1
imul edx, ecx, 0xa
mov byte [ebp + edx - 0x48], 0x20
mov eax, 1
imul ecx, eax, 5
mov byte [ebp + ecx - 0x48], 0x79
mov edx, 1
imul eax, edx, 0xb
mov byte [ebp + eax - 0x48], 0x2d
mov ecx, 1
imul edx, ecx, 0xc
mov byte [ebp + edx - 0x48], 0x74
mov eax, 1
imul ecx, eax, 7
mov byte [ebp + ecx - 0x48], 0x74
mov edx, 1
imul eax, edx, 3
mov byte [ebp + eax - 0x48], 0x2d
mov ecx, 1
imul edx, ecx, 0x13
mov byte [ebp + edx - 0x48], 0x73
mov eax, 1
imul ecx, eax, 9
mov byte [ebp + ecx - 0x48], 0x6d
mov edx, 1
imul eax, edx, 0xd
mov byte [ebp + eax - 0x48], 0x6f
mov ecx, 1
imul edx, ecx, 0x12
mov byte [ebp + edx - 0x48], 0x25
mov eax, 1
imul ecx, eax, 0
mov byte [ebp + ecx - 0x48], 0x25
mov edx, 1
imul eax, edx, 0x14
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 0x15
jae 0x100c02db
jmp 0x100c02e0
call fcn.1001d926
mov ecx, dword [ebp - 0x8c4]
mov byte [ebp + ecx - 0x48], 0
mov edx, 1
shl edx, 1
mov byte [ebp + edx - 0x48], 0x20
mov eax, 1
imul ecx, eax, 0xf
mov byte [ebp + ecx - 0x48], 0x65
mov edx, 1
imul eax, edx, 0x11
mov byte [ebp + eax - 0x48], 0x20
mov ecx, 1
shl ecx, 0
mov byte [ebp + ecx - 0x48], 0x73
mov edx, 1
imul eax, edx, 0xe
mov byte [ebp + eax - 0x48], 0x6b
mov ecx, 1
imul edx, ecx, 6
mov byte [ebp + edx - 0x48], 0x73
mov eax, 1
shl eax, 4
mov byte [ebp + eax - 0x48], 0x6e
push 4
lea ecx, [ebp - 0x888]
call fcn.1000e180
lea ecx, [ebp - 0x888]
call fcn.1000e890
push 4
lea ecx, [ebp - 0x88c]
call fcn.1000e180
lea ecx, [ebp - 0x87c]
push ecx
lea ecx, [ebp - 0x88c]
call fcn.1000e8d0
mov edx, 1
imul eax, edx, 3
mov byte [ebp + eax - 0xc], 0x73
mov ecx, 1
shl ecx, 1
mov byte [ebp + ecx - 0xc], 0x25
mov edx, 1
shl edx, 0
mov byte [ebp + edx - 0xc], 0x73
mov eax, 1
shl eax, 2
mov dword [ebp - 0x8b4], eax
cmp dword [ebp - 0x8b4], 5
jae 0x100c03bb
jmp 0x100c03c0
call fcn.1001d926
mov ecx, dword [ebp - 0x8b4]
mov byte [ebp + ecx - 0xc], 0
mov edx, 1
imul eax, edx, 0
mov byte [ebp + eax - 0xc], 0x25
push 3
push 0x1d
lea ecx, [ebp - 0x8cc]
push ecx
lea ecx, [ebp - 0x88c]
call fcn.1000ee60
mov edx, dword [eax]
push edx
push 3
push 0
lea eax, [ebp - 0x8c8]
push eax
lea ecx, [ebp - 0x88c]
call fcn.1000ee60
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 0x888]
push eax
call fcn.10011dc0
add esp, 0x10
lea ecx, [ebp - 0x8c8]
call fcn.1000e950
lea ecx, [ebp - 0x8cc]
call fcn.1000e950
mov ecx, dword [ebp - 0x888]
push ecx
lea edx, [ebp - 0x47c]
push edx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x884]
push ecx
call fcn.10011dc0
add esp, 0x10
push 4
lea ecx, [ebp - 0x880]
call fcn.1000e180
lea edx, [ebp - 0x47c]
push edx
call fcn.100b9a60
add esp, 4
push eax
lea ecx, [ebp - 0x880]
call fcn.1000e8d0
lea ecx, [ebp - 0x880]
call fcn.1000f270
push eax
call fcn.100b6d30
add esp, 4
push 0xffffffffffffffff
lea ecx, [ebp - 0x880]
call fcn.1000f350
push 4
lea ecx, [ebp - 0x890]
call fcn.1000e180
lea eax, [ebp - 0x880]
push eax
lea ecx, [ebp - 0x890]
call fcn.1000e8b0
mov ecx, 1
imul edx, ecx, 0xa
mov byte [ebp + edx - 0x1c], 0x6c
mov eax, 1
imul ecx, eax, 0xb
mov byte [ebp + ecx - 0x1c], 0x6c
mov edx, 1
shl edx, 1
mov byte [ebp + edx - 0x1c], 0x76
mov eax, 1
shl eax, 3
mov byte [ebp + eax - 0x1c], 0x2e
mov ecx, 1
imul edx, ecx, 0
mov byte [ebp + edx - 0x1c], 0x41
mov eax, 1
imul ecx, eax, 0xc
mov dword [ebp - 0x8c0], ecx
cmp dword [ebp - 0x8c0], 0xd
jae 0x100c0515
jmp 0x100c051a
call fcn.1001d926
mov edx, dword [ebp - 0x8c0]
mov byte [ebp + edx - 0x1c], 0
mov eax, 1
imul ecx, eax, 5
mov byte [ebp + ecx - 0x1c], 0x69
mov edx, 1
imul eax, edx, 6
mov byte [ebp + eax - 0x1c], 0x33
mov ecx, 1
shl ecx, 0
mov byte [ebp + ecx - 0x1c], 0x64
mov edx, 1
shl edx, 2
mov byte [ebp + edx - 0x1c], 0x70
mov eax, 1
imul ecx, eax, 7
mov byte [ebp + ecx - 0x1c], 0x32
mov edx, 1
imul eax, edx, 3
mov byte [ebp + eax - 0x1c], 0x61
mov ecx, 1
imul edx, ecx, 9
mov byte [ebp + edx - 0x1c], 0x64
lea eax, [ebp - 0x1c]
push eax
call fcn.100bda10
add esp, 4
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 0x8ac], 0
cmp dword [ebp - 0x8a0], 0
je 0x100c06d2
mov ecx, 1
shl ecx, 0
mov byte [ebp + ecx - 0x30], 0x6c
mov edx, 1
imul eax, edx, 0
mov byte [ebp + eax - 0x30], 0x43
mov ecx, 1
shl ecx, 1
mov byte [ebp + ecx - 0x30], 0x6f
mov edx, 1
imul eax, edx, 0xf
mov byte [ebp + eax - 0x30], 0x64
mov ecx, 1
imul edx, ecx, 5
mov byte [ebp + edx - 0x30], 0x53
mov eax, 1
imul ecx, eax, 0x11
mov byte [ebp + ecx - 0x30], 0x65
mov edx, 1
imul eax, edx, 0xa
mov byte [ebp + eax - 0x30], 0x63
mov ecx, 1
imul edx, ecx, 0xe
mov byte [ebp + edx - 0x30], 0x6e
mov eax, 1
shl eax, 3
mov byte [ebp + eax - 0x30], 0x76
mov ecx, 1
imul edx, ecx, 6
mov byte [ebp + edx - 0x30], 0x65
mov eax, 1
shl eax, 2
mov byte [ebp + eax - 0x30], 0x65
mov ecx, 1
imul edx, ecx, 7
mov byte [ebp + edx - 0x30], 0x72
mov eax, 1
shl eax, 4
mov byte [ebp + eax - 0x30], 0x6c
mov ecx, 1
imul edx, ecx, 0x12
mov dword [ebp - 0x8bc], edx
cmp dword [ebp - 0x8bc], 0x13
jae 0x100c066a
jmp 0x100c066f
call fcn.1001d926
mov eax, dword [ebp - 0x8bc]
mov byte [ebp + eax - 0x30], 0
mov ecx, 1
imul edx, ecx, 0xd
mov byte [ebp + edx - 0x30], 0x61
mov eax, 1
imul ecx, eax, 3
mov byte [ebp + ecx - 0x30], 0x73
mov edx, 1
imul eax, edx, 0xc
mov byte [ebp + eax - 0x30], 0x48
mov ecx, 1
imul edx, ecx, 0xb
mov byte [ebp + edx - 0x30], 0x65
mov eax, 1
imul ecx, eax, 9
mov byte [ebp + ecx - 0x30], 0x69
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x8a0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x8ac], eax
cmp dword [ebp - 0x8ac], 0
jne 0x100c072f
cmp dword [ebp - 0x8a0], 0
je 0x100c06f3
mov ecx, dword [ebp - 0x8a0]
push ecx
call fcn.100bc340
add esp, 4
lea ecx, [ebp - 0x890]
call fcn.1000e950
lea ecx, [ebp - 0x880]
call fcn.1000e950
lea ecx, [ebp - 0x88c]
call fcn.1000e950
lea ecx, [ebp - 0x888]
call fcn.1000e950
lea ecx, [ebp - 0x884]
call fcn.1000e950
jmp 0x100c0c32
push 2
push 0
push 0
call fcn.100bf7c0
add esp, 0xc
mov dword [ebp - 0x8a8], eax
cmp dword [ebp - 0x8a8], 0
jne 0x100c07a0
cmp dword [ebp - 0x8a0], 0
je 0x100c0764
mov edx, dword [ebp - 0x8a0]
push edx
call fcn.100bc340
add esp, 4
lea ecx, [ebp - 0x890]
call fcn.1000e950
lea ecx, [ebp - 0x880]
call fcn.1000e950
lea ecx, [ebp - 0x88c]
call fcn.1000e950
lea ecx, [ebp - 0x888]
call fcn.1000e950
lea ecx, [ebp - 0x884]
call fcn.1000e950
jmp 0x100c0c32
call fcn.100bb580
movzx eax, al
test eax, eax
je 0x100c0b15
push 4
lea ecx, [ebp - 0x894]
call fcn.1000e180
lea ecx, [ebp - 0x894]
call fcn.1000e890
mov ecx, 1
shl ecx, 3
mov byte [ebp + ecx - 0x7c], 0x65
mov edx, 1
shl edx, 5
mov byte [ebp + edx - 0x7c], 0x72
mov eax, 1
imul ecx, eax, 0xd
mov byte [ebp + ecx - 0x7c], 0x73
mov edx, 1
imul eax, edx, 0x18
mov byte [ebp + eax - 0x7c], 0x65
mov ecx, 1
imul edx, ecx, 5
mov byte [ebp + edx - 0x7c], 0x65
mov eax, 1
imul ecx, eax, 0x2d
mov byte [ebp + ecx - 0x7c], 0x22
mov edx, 1
imul eax, edx, 0x11
mov byte [ebp + eax - 0x7c], 0x74
mov ecx, 1
imul edx, ecx, 0x13
mov byte [ebp + edx - 0x7c], 0x61
mov eax, 1
imul ecx, eax, 0xa
mov byte [ebp + ecx - 0x7c], 0x25
mov edx, 1
shl edx, 2
mov byte [ebp + edx - 0x7c], 0x72
mov eax, 1
imul ecx, eax, 0xf
mov byte [ebp + ecx - 0x7c], 0x61
mov edx, 1
imul eax, edx, 0x2b
mov byte [ebp + eax - 0x7c], 0x68
mov ecx, 1
shl ecx, 4
mov byte [ebp + ecx - 0x7c], 0x72
mov edx, 1
imul eax, edx, 0x2a
mov byte [ebp + eax - 0x7c], 0x74
mov ecx, 1
imul edx, ecx, 0x1e
mov byte [ebp + edx - 0x7c], 0x6e
mov eax, 1
imul ecx, eax, 0x26
mov byte [ebp + ecx - 0x7c], 0x69
mov edx, 1
imul eax, edx, 0x21
mov byte [ebp + eax - 0x7c], 0x6d
mov ecx, 1
imul edx, ecx, 0x1f
mov byte [ebp + edx - 0x7c], 0x6f
mov eax, 1
imul ecx, eax, 0x30
mov byte [ebp + ecx - 0x7c], 0x22
mov edx, 1
imul eax, edx, 3
mov byte [ebp + eax - 0x7c], 0x63
mov ecx, 1
imul edx, ecx, 0x22
mov byte [ebp + edx - 0x7c], 0x61
mov eax, 1
imul ecx, eax, 0x14
mov byte [ebp + ecx - 0x7c], 0x75
mov edx, 1
imul eax, edx, 0x12
mov byte [ebp + eax - 0x7c], 0x3d
mov ecx, 1
imul edx, ecx, 6
mov byte [ebp + edx - 0x7c], 0x61
mov eax, 1
imul ecx, eax, 0x2f
mov byte [ebp + ecx - 0x7c], 0x73
mov edx, 1
imul eax, edx, 0x17
mov byte [ebp + eax - 0x7c], 0x20
mov ecx, 1
imul edx, ecx, 0xb
mov byte [ebp + edx - 0x7c], 0x73
mov eax, 1
imul ecx, eax, 0x15
mov byte [ebp + ecx - 0x7c], 0x74
mov edx, 1
imul eax, edx, 0x24
mov byte [ebp + eax - 0x7c], 0x20
mov ecx, 1
imul edx, ecx, 0xc
mov byte [ebp + edx - 0x7c], 0x20
mov eax, 1
imul ecx, eax, 0xe
mov byte [ebp + ecx - 0x7c], 0x74
mov edx, 1
imul eax, edx, 0
mov byte [ebp + eax - 0x7c], 0x73
mov ecx, 1
imul edx, ecx, 0x2e
mov byte [ebp + edx - 0x7c], 0x25
mov eax, 1
imul ecx, eax, 7
mov byte [ebp + ecx - 0x7c], 0x74
mov edx, 1
imul eax, edx, 0x27
mov byte [ebp + eax - 0x7c], 0x6e
mov ecx, 1
imul edx, ecx, 0x25
mov byte [ebp + edx - 0x7c], 0x62
mov eax, 1
imul ecx, eax, 0x31
mov dword [ebp - 0x8b8], ecx
cmp dword [ebp - 0x8b8], 0x32
jae 0x100c09b5
jmp 0x100c09ba
call fcn.1001d926
mov edx, dword [ebp - 0x8b8]
mov byte [ebp + edx - 0x7c], 0
mov eax, 1
shl eax, 1
mov byte [ebp + eax - 0x7c], 0x20
mov ecx, 1
imul edx, ecx, 0x1a
mov byte [ebp + edx - 0x7c], 0x72
mov eax, 1
imul ecx, eax, 0x1d
mov byte [ebp + ecx - 0x7c], 0x3d
mov edx, 1
shl edx, 0
mov byte [ebp + edx - 0x7c], 0x63
mov eax, 1
imul ecx, eax, 0x23
mov byte [ebp + ecx - 0x7c], 0x6c
mov edx, 1
imul eax, edx, 0x28
mov byte [ebp + eax - 0x7c], 0x70
mov ecx, 1
imul edx, ecx, 9
mov byte [ebp + edx - 0x7c], 0x20
mov eax, 1
imul ecx, eax, 0x19
mov byte [ebp + ecx - 0x7c], 0x72
mov edx, 1
imul eax, edx, 0x1b
mov byte [ebp + eax - 0x7c], 0x6f
mov ecx, 1
imul edx, ecx, 0x16
mov byte [ebp + edx - 0x7c], 0x6f
mov eax, 1
imul ecx, eax, 0x2c
mov byte [ebp + ecx - 0x7c], 0x3d
mov edx, 1
imul eax, edx, 0x1c
mov byte [ebp + eax - 0x7c], 0x72
mov ecx, 1
imul edx, ecx, 0x29
mov byte [ebp + edx - 0x7c], 0x61
mov eax, dword [ebp - 0x884]
push eax
mov ecx, dword [ebp - 0x880]
push ecx
lea edx, [ebp - 0x7c]
push edx
lea eax, [ebp - 0x894]
push eax
call fcn.10011dc0
add esp, 0x10
mov dword [ebp - 0x8b0], 0
jmp 0x100c0aa9
mov ecx, dword [ebp - 0x8b0]
add ecx, 1
mov dword [ebp - 0x8b0], ecx
cmp dword [ebp - 0x8b0], 5
jge 0x100c0b08
push 0
lea ecx, [ebp - 0x894]
call fcn.1000f1f0
push eax
call fcn.1000ba60
add esp, 8
push 0x3e8
call fcn.100bdee0
add esp, 4
push 0xf01ff
lea ecx, [ebp - 0x880]
call fcn.1000f1f0
push eax
mov edx, dword [ebp - 0x8a8]
push edx
call fcn.1000bd00
add esp, 0xc
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x89c], 0
je 0x100c0b06
jmp 0x100c0b08
jmp 0x100c0a9a
lea ecx, [ebp - 0x894]
call fcn.1000e950
jmp 0x100c0b63
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x884]
call fcn.1000f1f0
push eax
push 1
push 2
push 0x10
push 0xf01ff
lea ecx, [ebp - 0x890]
call fcn.1000f1f0
push eax
lea ecx, [ebp - 0x880]
call fcn.1000f1f0
push eax
mov eax, dword [ebp - 0x8a8]
push eax
call fcn.100bc870
add esp, 0x34
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x89c], 0
je 0x100c0bd6
lea ecx, [ebp - 0x890]
call fcn.1000f270
mov dword [ebp - 0x898], eax
lea ecx, [ebp - 0x898]
push ecx
push 1
mov edx, dword [ebp - 0x89c]
push edx
call fcn.10001760
add esp, 0xc
mov byte [ebp - 0x8a1], 0
push 0
push 0
mov eax, dword [ebp - 0x89c]
push eax
call fcn.100b8cf0
add esp, 0xc
test eax, eax
je 0x100c0bba
mov byte [ebp - 0x8a1], 1
mov ecx, dword [ebp - 0x89c]
push ecx
call fcn.100b9160
add esp, 4
mov edx, dword [ebp - 0x89c]
push edx
call dword [ebp - 0x8ac]
mov eax, dword [ebp - 0x8a8]
push eax
call dword [ebp - 0x8ac]
cmp dword [ebp - 0x8a0], 0
je 0x100c0bfb
mov ecx, dword [ebp - 0x8a0]
push ecx
call fcn.100bc340
add esp, 4
lea ecx, [ebp - 0x890]
call fcn.1000e950
lea ecx, [ebp - 0x880]
call fcn.1000e950
lea ecx, [ebp - 0x88c]
call fcn.1000e950
lea ecx, [ebp - 0x888]
call fcn.1000e950
lea ecx, [ebp - 0x884]
call fcn.1000e950
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10019cf8
mov esp, ebp
pop ebp
ret