Function at 0x100c0ebf
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c
mov eax, dword [0x10110164]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov dword [ebp - 0x58], 0x7ad6
lea ecx, [ebp - 0x58]
mov eax, 0x7ab7
mov word [ebp - 0x54], ax
add eax, 2
mov word [ebp - 0x52], ax
mov eax, 0x7aa5
mov word [ebp - 0x50], ax
inc eax
mov word [ebp - 0x4e], ax
mov word [ebp - 0x4c], ax
mov eax, 0x7af8
mov word [ebp - 0x4a], ax
add eax, 0xffffffba
mov word [ebp - 0x48], ax
mov eax, 0x7aba
mov word [ebp - 0x46], ax
mov word [ebp - 0x44], ax
xor eax, eax
mov word [ebp - 0x42], ax
mov ax, word [ebp - 0x54]
mov edi, dword [ebp + 8]
call fcn.100498b1
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call esi
test eax, eax
je 0x100c10ca
mov dword [ebp - 0x70], 0xf3eb
mov ecx, 0xf38f
mov eax, 0xf385
mov word [ebp - 0x6c], ax
add eax, 0x1a
mov word [ebp - 0x6a], ax
mov word [ebp - 0x68], cx
lea edx, [ecx - 8]
mov word [ebp - 0x66], dx
lea eax, [ecx + 0x36]
mov word [ebp - 0x64], dx
mov word [ebp - 0x62], ax
xor eax, eax
mov word [ebp - 0x60], cx
lea ecx, [ebp - 0x70]
mov word [ebp - 0x5e], dx
mov word [ebp - 0x5c], dx
mov word [ebp - 0x5a], ax
mov ax, word [ebp - 0x6c]
push ebx
call fcn.100498b1
push eax
call esi
mov dword [ebp - 0x18], 0x1e
lea ecx, [ebp - 0x18]
mov byte [ebp - 0x14], 0x50
mov esi, eax
push 0x6a
pop eax
mov byte [ebp - 0x13], al
mov byte [ebp - 0x12], 0x51
mov byte [ebp - 0x11], 0x6e
mov byte [ebp - 0x10], 0x7b
mov byte [ebp - 0xf], 0x70
mov byte [ebp - 0xe], 0x4e
mov byte [ebp - 0xd], 0x6c
mov byte [ebp - 0xc], 0x71
mov byte [ebp - 0xb], 0x7d
mov byte [ebp - 0xa], 0x7b
mov byte [ebp - 9], 0x6d
mov byte [ebp - 8], 0x6d
mov al, byte [ebp - 0x14]
mov byte [ebp - 7], 0
call fcn.10039f0f
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
and dword [ebp - 0x74], 0
mov ebx, eax
lea eax, [ebp - 0x74]
push eax
push 0xf020
call fcn.10001ea3
test eax, eax
js 0x100c10c9
push 0x74
pop eax
mov word [ebp - 0x40], ax
push 0x7a
pop eax
mov word [ebp - 0x3e], ax
push 0x6a
pop edx
mov word [ebp - 0x3c], dx
push 0x72
pop eax
mov word [ebp - 0x3a], ax
mov word [ebp - 0x38], ax
push 0x34
pop ecx
mov word [ebp - 0x36], cx
lea ecx, [ebp - 0x40]
mov word [ebp - 0x34], dx
mov word [ebp - 0x32], ax
mov word [ebp - 0x30], ax
xor eax, eax
mov word [ebp - 0x2e], ax
mov ax, word [ebp - 0x40]
mov eax, dword [ebp - 0x74]
mov esi, dword [eax]
call fcn.1006ae3f
push eax
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x74]
call dword [esi + 0x18]
test eax, eax
js 0x100c10c9
mov dword [ebp - 0x2c], 0x47
lea ecx, [ebp - 0x2c]
mov byte [ebp - 0x28], 9
mov byte [ebp - 0x27], 0x33
mov byte [ebp - 0x26], 8
mov byte [ebp - 0x25], 0x37
mov byte [ebp - 0x24], 0x22
mov byte [ebp - 0x23], 0x29
mov byte [ebp - 0x22], 0x17
mov byte [ebp - 0x21], 0x35
mov byte [ebp - 0x20], 0x28
mov byte [ebp - 0x1f], 0x24
mov byte [ebp - 0x1e], 0x22
mov byte [ebp - 0x1d], 0x34
mov byte [ebp - 0x1c], 0x34
mov al, byte [ebp - 0x28]
mov eax, dword [ebp - 0x74]
mov byte [ebp - 0x1b], 0
mov esi, dword [eax]
call fcn.10039f0f
push eax
push dword [ebp - 0x78]
lea eax, [ebp - 0x7c]
push eax
push dword [ebp - 0x74]
call dword [esi + 0x1c]
test eax, eax
js 0x100c10c9
mov eax, dword [edi]
push 0xa
push dword [ebp - 0x7c]
push ebx
push edi
call dword [eax + 0x28]
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.100cc9b8
leave
ret