Function at 0x10013c10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x840
mov eax, dword [0x100e7260]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
mov dword [0x100f484c], eax
mov eax, dword [ebp + 0x10]
mov dword [0x100f4850], eax
mov eax, dword [ebp + 0xc]
mov dword [0x100f4854], eax
call fcn.100024b5
mov ecx, eax
test ecx, ecx
je 0x10013f40
mov eax, dword [ecx]
push esi
call dword [eax + 0xc]
mov ecx, 1
sub ecx, dword [eax + 0xc]
lea esi, [eax + 0x10]
mov eax, dword [esi - 8]
sub eax, 0x400
mov dword [ebp - 0x820], esi
or ecx, eax
jge 0x10013c83
push 0x400
lea ecx, [ebp - 0x820]
call fcn.10002b53
mov esi, dword [ebp - 0x820]
push esi
call fcn.10010f40
push dword [esi - 8]
push esi
call fcn.1003acb5
add esp, 0xc
test eax, eax
js 0x10013f54
cmp eax, dword [esi - 8]
jg 0x10013f54
mov dword [esi - 0xc], eax
mov byte [eax + esi], 0
call fcn.1000afc0
test eax, eax
mov byte [ebp - 0x831], 0
setne al
mov byte [ebp - 0x832], al
mov byte [ebp - 0x83c], al
call fcn.100024b5
mov ecx, eax
test ecx, ecx
je 0x10013f4a
mov eax, dword [ecx]
push ebx
push edi
call dword [eax + 0xc]
add eax, 0x10
xor edi, edi
mov dword [ebp - 0x830], eax
or ebx, 0xffffffff
mov edi, edi
call fcn.100024b5
test eax, eax
je 0x10013f40
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x820], eax
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x830]
push eax
lea eax, [ebp - 0x820]
push eax
lea eax, [ebp - 0x833]
push eax
push dword [ebp - 0x83c]
call fcn.1000d820
add esp, 0x14
test al, al
jne 0x10013d6f
push 0x3e8
call fcn.10018880
mov edx, dword [ebp - 0x820]
add esp, 4
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10013d67
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
inc edi
cmp edi, 5
jl 0x10013cf0
jmp 0x10013da1
mov edx, dword [ebp - 0x820]
mov ecx, ebx
mov al, byte [ebp - 0x833]
add edx, 0xfffffff0
mov byte [ebp - 0x832], al
mov byte [ebp - 0x831], 1
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10013da1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x831], 0
mov ecx, 0x100ddd28
mov eax, 0x100d0730
mov word [ebp - 0x12], 0x4f53
cmove eax, ecx
mov word [ebp - 0x19], 0x7774
push eax
lea ecx, [ebp - 0x838]
mov dword [ebp - 0x17], 0x5c657261
mov byte [ebp - 0x10], 0
mov word [ebp - 0x1c], 0x6f53
mov byte [ebp - 0x13], 0x53
mov byte [ebp - 0x1a], 0x66
mov dword [ebp - 0x838], 0
call fcn.10001fd6
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0xc], 0x69726863
mov dword [ebp - 8], 0x74736e
push dword [eax - 0xc]
push eax
push 1
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x1c]
push eax
push reloc.WS2_32.dll_bind
call fcn.100187e0
push 0x3ff
lea eax, [ebp - 0x81b]
mov byte [ebp - 0x81c], 0
push 0
push eax
call fcn.1003e130
cmp byte [ebp - 0x832], 0
lea ecx, [ebp - 0x828]
lea eax, [ebp - 0x82c]
mov word [ebp - 0x823], 0x73
cmove eax, ecx
mov byte [ebp - 0x824], 0x25
push eax
lea eax, [ebp - 0x824]
mov dword [ebp - 0x82c], 0x343678
push eax
lea eax, [ebp - 0x81c]
mov dword [ebp - 0x828], 0x323378
push 0x400
push eax
call fcn.1003c36b
lea eax, [ebp - 0x81c]
push eax
call fcn.10011080
push 0x3ff
lea eax, [ebp - 0x41b]
mov byte [ebp - 0x41c], 0
push 0
push eax
call fcn.1003e130
mov edi, dword [ebp - 0x830]
lea eax, [ebp - 0x824]
add esp, 0x44
push edi
push eax
lea eax, [ebp - 0x41c]
push 0x400
push eax
call fcn.1003c36b
lea eax, [ebp - 0x41c]
push eax
call fcn.10011080
mov edx, dword [ebp - 0x838]
add esp, 0x14
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10013eff
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov ecx, ebx
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10013f18
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
lea eax, [esi + 0xc]
lock xadd dword [eax], ebx
dec ebx
pop edi
test ebx, ebx
pop ebx
jg 0x10013f31
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.1003d588
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.10002d1a
push 0x80004005
call fcn.10002d1a
push 0x80070057
call fcn.10002d1a
int3