Function at 0x1000c350
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10012d8b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x2ebc
call fcn.10012250
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2c], 1
call fcn.1000afa0
mov ecx, 0x18
xor eax, eax
lea edi, [ebp - 0x9f]
mov byte [ebp - 0xa0], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, 0x53
mov ecx, 0x40
mov byte [ebp - 0x27], al
mov byte [ebp - 0x1d], al
mov al, byte [0x100171bc]
lea edi, [ebp - 0x2c7]
mov byte [ebp - 0x2c8], al
xor eax, eax
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 4], 0
mov byte [ebp - 4], 1
stosb byte es:[edi], al
mov byte [ebp - 0x28], 0x48
mov byte [ebp - 0x26], 0x49
mov byte [ebp - 0x25], 0x5a
mov byte [ebp - 0x24], 0x5d
mov byte [ebp - 0x23], 0x52
mov byte [ebp - 0x22], 0x5b
mov byte [ebp - 0x21], 0x57
mov byte [ebp - 0x20], 0x59
mov byte [ebp - 0x1f], 0x12
mov byte [ebp - 0x1e], 0x5f
mov byte [ebp - 0x1c], 0x51
xor eax, eax
cmp eax, 0xd
jge 0x1000c41a
mov cl, byte [ebp + eax - 0x28]
xor cl, 0x3c
mov byte [ebp + eax - 0xa0], cl
inc eax
jmp 0x1000c404
lea edx, [ebp - 0xa0]
mov byte [ebp + eax - 0xa0], 0
push edx
lea eax, [ebp - 0x2c8]
push str.re._s
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0xc
lea ecx, [ebp - 0x2c8]
push str.Mozilla_4.0__compatible___
push 0
push 0
push 0x50
push ecx
lea ecx, [ebp - 0x144]
call fcn.1000c9b0
test eax, eax
jne 0x1000c474
lea edx, [ebp - 0x38]
push 0x10014260
push edx
mov dword [ebp - 0x38], str.connect_failed...
call sub.MSVCRT.dll__CxxThrowException
mov dl, byte [0x100171bc]
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0xac7]
mov byte [ebp - 0xac8], dl
mov byte [ebp - 0x1c4], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0x1f
xor eax, eax
lea edi, [ebp - 0x1c3]
mov byte [ebp - 0xec8], dl
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0xec7]
mov edx, dword [ebp + 0x18]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x1c4]
push 0
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
mov ecx, esi
call fcn.1000c8b0
mov edx, dword [ebp + 0x24]
lea ecx, [ebp - 0xec8]
push 0
push ecx
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
mov ecx, esi
call fcn.1000c8b0
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x6c7]
mov byte [ebp - 0x6c8], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, 0xf
xor eax, eax
lea edi, [ebp - 0xdf]
mov byte [ebp - 0xe0], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, pe_nt_image_headers32
xor eax, eax
lea edi, [ebp - 0x6c8]
mov byte [ebp - 0x18], 4
mov byte [ebp - 0x17], 0xf
mov byte [ebp - 0x16], 5
mov byte [ebp - 0x15], 0xe
mov byte [ebp - 0x14], 4
rep stosd dword es:[edi], eax
cmp eax, 5
jge 0x1000c56f
mov dl, byte [ebp + eax - 0x18]
xor dl, 0x3c
mov byte [ebp + eax - 0xa0], dl
inc eax
jmp 0x1000c559
mov esi, dword [ebp + 0x28]
mov ebx, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x20]
mov byte [ebp + eax - 0xa0], 0
lea eax, [ebp - 0xa0]
push eax
mov eax, dword [ebp + 0x14]
push esi
push ebx
push ecx
mov ecx, dword [ebp + 8]
push edx
mov edx, dword [ebp + 0x1c]
push eax
push ecx
push edx
lea eax, [ebp - 0x6c8]
push str._s_d_s_s_d_d_d_s
push eax
call dword [sym.imp.MSVCRT.dll_sprintf]
lea ecx, [ebp - 0xe0]
lea edi, [ebp - 0x6c8]
push ecx
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp - 0x6c8]
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
call fcn.1001158d
add esp, 0x34
mov edx, dword [ebp + 0xc]
lea eax, [ebp - 0xec8]
lea ecx, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x1c4]
push eax
mov eax, dword [ebp + 0x20]
push ecx
mov ecx, dword [ebp + 0x14]
push esi
push ebx
push edx
mov edx, dword [ebp + 8]
push eax
mov eax, dword [ebp + 0x1c]
push ecx
push edx
push eax
lea ecx, [ebp - 0xac8]
push str._re.php_version_sfid_dmac_suuid_skid_dcnt_dshow_dcheck_skw_surl_s
push ecx
call dword [sym.imp.MSVCRT.dll_sprintf]
add esp, 0x30
lea edx, [ebp - 0xac8]
lea ecx, [ebp - 0x144]
push edx
call fcn.1000afc0
test eax, eax
jne 0x1000c63e
lea eax, [ebp - 0x34]
push 0x10014260
push eax
mov dword [ebp - 0x34], str.Request_failed...
call sub.MSVCRT.dll__CxxThrowException
mov cl, byte [0x100171bc]
xor eax, eax
mov byte [ebp - 0x2ec8], cl
mov ecx, 0x3ff
lea edi, [ebp - 0x2ec7]
lea edx, [ebp - 0x2ec8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x1000
push edx
lea ecx, [ebp - 0x144]
stosb byte es:[edi], al
call fcn.1000cae0
test eax, eax
jne 0x1000c68c
lea eax, [ebp - 0x3c]
push 0x10014260
push eax
mov dword [ebp - 0x3c], str.Response_failed...
call sub.MSVCRT.dll__CxxThrowException
mov cl, byte [ebp - 0x2ec8]
cmp cl, 0x31
je 0x1000c6c1
cmp cl, 0x32
je 0x1000c6cc
cmp eax, 2
jle 0x1000c6ac
lea ecx, [ebp - 0x2ec6]
mov dword [ebp - 0x30], ecx
jmp 0x1000c6b3
mov dword [ebp - 0x30], str.return_0_but_no_info
lea edx, [ebp - 0x30]
push 0x10014260
push edx
call sub.MSVCRT.dll__CxxThrowException
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], 1
jmp 0x1000c6d5
mov ebx, dword [ebp + 0x2c]
mov dword [ebx], 2
mov al, byte [0x100171bc]
mov ecx, 0x3ff
mov byte [ebp - 0x1ec8], al
xor eax, eax
lea edi, [ebp - 0x1ec7]
push 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x2ec6]
lea edx, [ebp - 0x1ec8]
push ecx
push edx
stosb byte es:[edi], al
call fcn.100108b0
mov edi, dword [sym.imp.MSVCRT.dll_strncpy]
mov edx, eax
add esp, 0xc
xor esi, esi
xor eax, eax
xor ecx, ecx
mov dword [ebp + 0xc], edx
mov byte [ebp + edx - 0x1ec8], 9
mov dword [ebp + 0x2c], ecx
cmp esi, edx
jg 0x1000c7e9
cmp byte [ebp + eax - 0x1ec8], 9
jne 0x1000c739
inc eax
cmp byte [ebp + esi - 0x1ec8], 9
jne 0x1000c7cd
cmp esi, eax
jle case.default.0x1000c750
cmp ecx, 4
ja case.default.0x1000c750
jmp dword [ecx*4 + 0x1000c824]
mov ecx, esi
lea edx, [ebp + eax - 0x1ec8]
sub ecx, eax
lea eax, [ebx + 4]
push ecx
push edx
jmp 0x1000c7bb
mov ecx, esi
lea edx, [ebp + eax - 0x1ec8]
sub ecx, eax
lea eax, [ebx + 0x404]
push ecx
push edx
jmp 0x1000c7bb
mov ecx, esi
lea edx, [ebp + eax - 0x1ec8]
sub ecx, eax
lea eax, [ebx + 0x804]
push ecx
push edx
jmp 0x1000c7bb
mov ecx, esi
lea edx, [ebp + eax - 0x1ec8]
sub ecx, eax
lea eax, [ebx + 0xc04]
push ecx
push edx
jmp 0x1000c7bb
mov ecx, esi
lea edx, [ebp + eax - 0x1ec8]
sub ecx, eax
lea eax, [ebx + 0x1004]
push ecx
push edx
push eax
call edi
add esp, 0xc
mov ecx, dword [ebp + 0x2c]
mov edx, dword [ebp + 0xc]
inc ecx
mov eax, esi
mov dword [ebp + 0x2c], ecx
inc esi
jmp 0x1000c726
lea ecx, [ebp - 0x144]
mov dword [ebp - 4], 0
call fcn.1000caa0
lea ecx, [ebp - 0x144]
mov dword [ebp - 4], 0xffffffff
call fcn.1000afb0
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x2c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x28