Function at 0x10071710
Capabilities:
Contain obfuscated stackstrings
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009c300
mov eax, dword fs:[0]
push eax
sub esp, 0x144
mov eax, dword [0x100b1010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp dword [0x100bc9e4], 0x10
lea edx, [ebp - 0x114]
mov eax, dword [ebp + 8]
mov ecx, 0x100bc9d0
cmovae ecx, dword [0x100bc9d0]
mov dword [ebp - 0x150], eax
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x10071762
lea edx, [ebp - 0x114]
lea ecx, [ebp - 0x148]
call fcn.10071530
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x148]
mov edi, dword [0x100bca14]
mov eax, 0x100bca00
mov ebx, dword [0x100bca00]
cmp edi, 0x10
push dword [0x100bca10]
mov esi, dword [ebp - 0x148]
cmovae eax, ebx
cmp dword [ebp - 0x134], 0x10
mov edx, dword [ebp - 0x138]
cmovae ecx, esi
push eax
push ecx
call fcn.1003d3a0
add esp, 0xc
cmp eax, 0xffffffff
je 0x1007182e
mov ecx, dword [0x100bcc60]
cmp edi, 0x10
mov eax, 0x100bca00
mov esi, 0x100bca00
cmovae eax, ebx
mov edx, 0x100bcc50
add eax, dword [0x100bca10]
cmp edi, 0x10
cmovae esi, ebx
cmp dword [0x100bcc64], 0x10
jb 0x10071809
mov edx, dword [0x100bcc50]
add ecx, edx
jmp 0x10071810
add ecx, edx
mov edx, 0x100bcc50
sub eax, esi
sub ecx, edx
push eax
push esi
push ecx
call fcn.10071b40
mov esi, dword [ebp - 0x148]
mov edi, dword [0x100bca14]
mov ebx, dword [0x100bca00]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x134]
cmp eax, 0x10
jb 0x10071879
lea ecx, [eax + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x10071863
mov esi, dword [eax - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10071863
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.1009827d
mov edi, dword [0x100bca14]
add esp, 8
mov ebx, dword [0x100bca00]
mov eax, dword [ebp + 0xc]
sub eax, 0
je 0x10071b17
sub eax, 1
jne 0x10071b1c
push dword [0x100bca10]
mov edx, dword [0x100bcc60]
cmp edi, 0x10
mov eax, 0x100bca00
mov ecx, 0x100bcc50
cmovae eax, ebx
cmp dword [0x100bcc64], 0x10
push eax
cmovae ecx, dword [0x100bcc50]
push ecx
call fcn.1003d3a0
add esp, 0xc
cmp eax, 0xffffffff
je 0x10071b1c
mov cl, 0x19
mov dword [ebp - 0x130], 0x6d7c4a19
mov dword [ebp - 0x12c], 0x6a6b6c5a
xor eax, eax
mov dword [ebp - 0x128], 0x76496b76
mov word [ebp - 0x124], 0x6a
nop word [eax + eax]
xor byte [ebp + eax - 0x12f], cl
inc eax
cmp eax, 0xc
jae 0x10071915
mov cl, byte [ebp - 0x130]
jmp 0x10071900
mov byte [ebp - 0x120], 0x36
mov al, 0x43
xor al, byte [ebp - 0x120]
mov cl, 0x45
xor cl, byte [ebp - 0x120]
mov ah, 5
mov byte [ebp - 0x11f], al
mov dl, 0x53
mov byte [ebp - 0x11e], cl
mov ch, 4
mov cl, byte [ebp - 0x120]
mov dh, 0x18
mov byte [ebp - 0x149], 0x5a
xor ah, cl
mov al, byte [ebp - 0x149]
mov bl, 0x44
xor al, cl
mov byte [ebp - 0x14a], 0x5a
mov byte [ebp - 0x117], al
mov bh, 0x52
mov al, byte [ebp - 0x14a]
xor dl, cl
xor al, cl
mov byte [ebp - 0x11b], ah
mov byte [ebp - 0x116], al
xor bl, cl
push 0x10071470
lea eax, [ebp - 0x12f]
mov byte [ebp - 0x115], 0
push eax
lea eax, [ebp - 0x11f]
mov byte [ebp - 0x123], 0
xor ch, cl
mov byte [ebp - 0x11d], dl
xor dh, cl
mov byte [ebp - 0x11c], bl
xor bh, cl
mov byte [ebp - 0x11a], ch
push eax
mov byte [ebp - 0x119], dh
mov byte [ebp - 0x118], bh
mov byte [ebp - 0x115], 0
call fcn.10001750
push eax
call fcn.100010f0
mov dword [0x100b7e94], eax
mov cl, 8
mov dword [ebp - 0x130], 0x7c6d4f08
xor eax, eax
mov dword [ebp - 0x12c], 0x7b7a7d4b
mov dword [ebp - 0x128], 0x67587a67
mov word [ebp - 0x124], 0x7b
nop word [eax + eax]
xor byte [ebp + eax - 0x12f], cl
inc eax
cmp eax, 0xc
jae 0x10071a25
mov cl, byte [ebp - 0x130]
jmp 0x10071a10
mov byte [ebp - 0x120], 0x40
mov al, 0x35
xor al, byte [ebp - 0x120]
mov cl, 0x33
xor cl, byte [ebp - 0x120]
mov ah, 0x73
mov byte [ebp - 0x11f], al
mov dl, 0x25
mov byte [ebp - 0x11e], cl
mov ch, 0x72
mov cl, byte [ebp - 0x120]
mov dh, 0x6e
mov byte [ebp - 0x14a], 0x2c
xor ah, cl
mov al, byte [ebp - 0x14a]
mov bl, 0x32
xor al, cl
mov byte [ebp - 0x149], 0x2c
mov byte [ebp - 0x117], al
mov bh, 0x24
mov al, byte [ebp - 0x149]
xor dl, cl
xor al, cl
mov byte [ebp - 0x11b], ah
mov byte [ebp - 0x116], al
xor bl, cl
push 0x100714c0
lea eax, [ebp - 0x12f]
mov byte [ebp - 0x115], 0
push eax
lea eax, [ebp - 0x11f]
mov byte [ebp - 0x123], 0
xor ch, cl
mov byte [ebp - 0x11d], dl
xor dh, cl
mov byte [ebp - 0x11c], bl
xor bh, cl
mov byte [ebp - 0x11a], ch
push eax
mov byte [ebp - 0x119], dh
mov byte [ebp - 0x118], bh
mov byte [ebp - 0x115], 0
call fcn.10001750
push eax
call fcn.100010f0
push 0
push 0
push dword [ebp - 0x150]
mov dword [0x100b7e90], eax
push 0x100713d0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1f4
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Beep]
jmp 0x10071b1c
call fcn.100712f0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1009823a
mov esp, ebp
pop ebp
ret 0xc