Function at 0x1004ce30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101eb6e1
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x3c8
mov eax, dword [0x10275008]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x3d8], 0
cmp byte [edi + 9], 0
je 0x1004d7a5
cmp byte [edi + 8], 0
jne 0x1004d7a5
xor eax, eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x30]
push 0xa
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
push str.2345PCSafe
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.10005390
cmp dword [ebp - 0x1c], 8
lea eax, [ebp - 0x30]
push dword [ebp - 0x20]
cmovae eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x48]
push eax
mov dword [ebp - 0x3d8], 1
call fcn.10005390
mov esi, 1
mov dword [ebp - 0x3d8], esi
and esi, 0xfffffffe
mov dword [ebp - 0x3d8], esi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x30]
call fcn.10005300
lea ecx, [ebp - 0x48]
call fcn.100866a0
test al, al
je 0x1004d08b
push ecx
lea ecx, [ebp - 0x2a8]
call fcn.10055bf0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2a8]
call fcn.10056120
test al, al
jne 0x1004d033
push 4
mov ecx, 0x102794b4
call fcn.1010b510
mov esi, eax
test esi, esi
je 0x1004cfd6
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
push 0x13
push 0x10233c94
call fcn.10005390
push 0x107
push str.RC::RCStatSendCtrl::SendData
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_framework_src_framework_src_statistic_rcstatsendctrl.cpp
lea eax, [ebp - 0x30]
mov ecx, 0x102794b4
push eax
push 4
call fcn.1010b550
cmp esi, 1
jbe 0x1004cfca
lea eax, [ebp - 0x30]
mov ecx, 0x102794b4
push eax
call fcn.1010b870
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x30]
call fcn.10005300
mov byte [ebp - 4], 2
lea eax, [ebp - 0x2a8]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x248]
call fcn.10005300
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x260]
call fcn.10005300
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x278]
call fcn.10005300
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x290]
call fcn.10005300
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2a8]
call fcn.10005300
jmp 0x1004d84a
mov byte [ebp - 4], 2
lea eax, [ebp - 0x2a8]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x248]
call fcn.10005300
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x260]
call fcn.10005300
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x278]
call fcn.10005300
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x290]
call fcn.10005300
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2a8]
call fcn.10005300
push ecx
lea ecx, [ebp - 0xf8]
call fcn.10056b30
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x378]
call fcn.10055fb0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0xf8]
cmp dword [ebp - 0xe4], 8
lea ecx, [ebp - 0x378]
push dword [ebp - 0xe8]
cmovae eax, dword [ebp - 0xf8]
push eax
call fcn.10005390
cmp dword [ebp - 0xcc], 8
lea eax, [ebp - 0xe0]
push dword [ebp - 0xd0]
cmovae eax, dword [ebp - 0xe0]
lea ecx, [ebp - 0x360]
push eax
call fcn.10005390
cmp dword [ebp - 0xb4], 8
lea eax, [ebp - 0xc8]
push dword [ebp - 0xb8]
cmovae eax, dword [ebp - 0xc8]
lea ecx, [ebp - 0x348]
push eax
call fcn.10005390
cmp dword [ebp - 0x9c], 8
lea eax, [ebp - 0xb0]
push dword [ebp - 0xa0]
cmovae eax, dword [ebp - 0xb0]
lea ecx, [ebp - 0x330]
push eax
call fcn.10005390
cmp dword [ebp - 0x84], 8
lea eax, [ebp - 0x98]
push dword [ebp - 0x88]
cmovae eax, dword [ebp - 0x98]
lea ecx, [ebp - 0x318]
push eax
call fcn.10005390
push 1
mov dword [ebp - 0x18], 0
call fcn.101c838c
add esp, 4
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x378]
push eax
call fcn.1008b250
test al, al
je 0x1004d2d5
lea eax, [ebp - 0x378]
push eax
call fcn.1008b250
test al, al
jne 0x1004d1ac
mov byte [ebp - 0x3d1], al
jmp 0x1004d1bf
push ecx
lea eax, [ebp - 0x378]
push eax
call fcn.1008aa00
mov byte [ebp - 0x3d1], al
mov byte [ebp - 4], 0x14
push 1
push dword [ebp - 0x18]
call fcn.101c8702
add esp, 8
mov dword [ebp - 0x18], 0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x378]
call fcn.10056080
cmp byte [ebp - 0x3d1], 0
jne 0x1004d2fc
push 4
mov ecx, 0x102794b4
call fcn.1010b510
mov esi, eax
test esi, esi
je 0x1004d278
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x30]
push 0x18
push 0x10233dbc
call fcn.10005390
push 0x10f
push str.RC::RCStatSendCtrl::SendData
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_framework_src_framework_src_statistic_rcstatsendctrl.cpp
lea eax, [ebp - 0x30]
mov ecx, 0x102794b4
push eax
push 4
call fcn.1010b550
cmp esi, 1
jbe 0x1004d26c
lea eax, [ebp - 0x30]
mov ecx, 0x102794b4
push eax
call fcn.1010b870
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x30]
call fcn.10005300
mov byte [ebp - 4], 2
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x98]
call fcn.10005300
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xb0]
call fcn.10005300
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xc8]
call fcn.10005300
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xe0]
call fcn.10005300
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xf8]
call fcn.10005300
jmp 0x1004d84a
mov byte [ebp - 4], 0x14
push 1
push dword [ebp - 0x18]
call fcn.101c8702
add esp, 8
mov dword [ebp - 0x18], 0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x378]
call fcn.10056080
mov ecx, dword [edi + 0x30]
test ecx, ecx
je 0x1004d308
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.1004cad0
push 0x54
lea eax, [ebp - 0x3d0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3d0]
call fcn.10048200
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x7c]
call fcn.10047340
mov byte [ebp - 4], 0x1f
xor eax, eax
push 9
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
push str.ClickStat
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.10005390
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x3d0]
call fcn.100489f0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x30]
call fcn.10005300
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x7c]
call fcn.10005300
push 0x2c
lea eax, [ebp - 0x2d4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x2d4]
call fcn.10052410
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x2d4]
call fcn.10052950
push 0xa0
lea eax, [ebp - 0x230]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x230], 0
lea ecx, [ebp - 0x228]
call fcn.1001ee40
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x230]
push 1
call fcn.10046070
lea ecx, [ebp - 0x230]
call fcn.10046510
lea ecx, [ebp - 0x230]
call fcn.100464b0
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], 0
call fcn.100593c0
xorps xmm0, xmm0
mov dword [ebp - 0x4c], 0
movq qword [ebp - 0x54], xmm0
movups xmmword [ebp - 0x64], xmm0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
xor eax, eax
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x64]
call fcn.100576a0
lea ecx, [ebp - 0x190]
call fcn.1001ee40
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x7c]
call fcn.10047340
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x190]
push eax
call fcn.10008620
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x7c]
call fcn.10005300
push 0xe
push str.SafePeriodStat
lea ecx, [ebp - 0x178]
call fcn.10005390
lea ecx, [ebp - 0x7c]
mov byte [ebp - 0x107], 0
call fcn.1004b2a0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x160]
cmp ecx, eax
je 0x1004d4ec
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x1004d4dd
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x160]
call fcn.10005390
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x7c]
call fcn.10005300
mov byte [ebp - 4], 0x29
xor eax, eax
push 0x16
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], 0
push str._safe_period_index.php
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
call fcn.10005390
or esi, 2
lea eax, [ebp - 0x30]
mov dword [ebp - 0x3d8], esi
lea ecx, [ebp - 0x148]
cmp dword [ebp - 0x1c], 8
push dword [ebp - 0x20]
cmovae eax, dword [ebp - 0x30]
push eax
call fcn.10005390
and esi, 0xfffffffd
mov dword [ebp - 0x3d8], esi
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x30]
call fcn.10005300
cmp dword [ebp - 0x17c], 8
lea eax, [ebp - 0x190]
push dword [ebp - 0x180]
cmovae eax, dword [ebp - 0x190]
lea ecx, [ebp - 0x228]
push eax
call fcn.10005390
cmp dword [ebp - 0x164], 8
lea eax, [ebp - 0x178]
push dword [ebp - 0x168]
cmovae eax, dword [ebp - 0x178]
lea ecx, [ebp - 0x210]
push eax
call fcn.10005390
cmp dword [ebp - 0x14c], 8
lea eax, [ebp - 0x160]
push dword [ebp - 0x150]
cmovae eax, dword [ebp - 0x160]
lea ecx, [ebp - 0x1f8]
push eax
call fcn.10005390
cmp dword [ebp - 0x134], 8
lea eax, [ebp - 0x148]
push dword [ebp - 0x138]
cmovae eax, dword [ebp - 0x148]
lea ecx, [ebp - 0x1e0]
push eax
call fcn.10005390
cmp dword [ebp - 0x11c], 8
lea eax, [ebp - 0x130]
push dword [ebp - 0x120]
cmovae eax, dword [ebp - 0x130]
lea ecx, [ebp - 0x1c8]
push eax
call fcn.10005390
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x1a4], eax
mov al, byte [ebp - 0x108]
mov byte [ebp - 0x1a0], al
mov al, byte [ebp - 0x107]
mov byte [ebp - 0x19f], al
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x194], eax
push 1
lea ecx, [ebp - 0x230]
call fcn.10046070
lea ecx, [ebp - 0x230]
call fcn.10046510
lea ecx, [ebp - 0x230]
call fcn.100464b0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x190]
call fcn.10020570
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x60]
call fcn.10005300
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x228]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x1c8]
call fcn.10005300
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1e0]
call fcn.10005300
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x1f8]
call fcn.10005300
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x210]
call fcn.10005300
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x228]
call fcn.10005300
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x2d4]
call fcn.10052580
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3d0]
call fcn.100485e0
mov byte [ebp - 4], 2
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x98]
call fcn.10005300
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xb0]
call fcn.10005300
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xc8]
call fcn.10005300
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xe0]
call fcn.10005300
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xf8]
call fcn.10005300
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.10005300
mov al, 1
jmp 0x1004d85b
cmp dword [0x102794b4], 0
je 0x1004d859
push 0
mov ecx, 0x102794b4
call fcn.1010abf0
mov eax, dword [0x102794b4]
cmp byte [eax + 0x54], 0
je 0x1004d859
cmp dword [eax + 0x58], 4
jb 0x1004d859
mov al, byte [eax + 0x5c]
mov byte [ebp - 0x3d1], al
xor eax, eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x48]
push 0x16
push 0x10233c64
call fcn.10005390
push 0xfb
push str.RC::RCStatSendCtrl::SendData
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_framework_src_framework_src_statistic_rcstatsendctrl.cpp
lea eax, [ebp - 0x48]
mov ecx, 0x102794b4
push eax
push 4
call fcn.1010b550
cmp byte [ebp - 0x3d1], 0
je 0x1004d84a
lea eax, [ebp - 0x48]
mov ecx, 0x102794b4
push eax
call fcn.1010b870
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.10005300
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.101c837b
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret