Function at 0x1000c3f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d5593
mov eax, dword fs:[0]
push eax
sub esp, 0x36c
mov eax, dword [0x10117d48]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x31c], 0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1c0]
call fcn.10002230
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x15c]
call fcn.10002230
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x188]
call fcn.10002230
mov byte [ebp - 4], 4
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x1000c479
push 0x10105524
lea ecx, [ebp - 0x1c0]
call fcn.10002a70
jmp 0x1000c489
push 0x10105528
lea ecx, [ebp - 0x1c0]
call fcn.10002a70
mov ecx, dword [ebp - 0x320]
cmp dword [ecx + 0x3fc], 0xffffffff
je 0x1000c53d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edx, edx
mov ecx, dword [ebp - 0x320]
sub eax, dword [ecx + 0x400]
sbb edx, dword [ecx + 0x404]
push 0
push 0x3e8
push edx
push eax
call fcn.10094d40
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1d0], edx
mov edx, dword [ebp - 0x320]
mov eax, dword [edx + 0x3fc]
xor ecx, ecx
add eax, dword [ebp - 0x1d4]
adc ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1c8], ecx
mov byte [ebp - 0x2d4], 0
push 0xff
push 0
lea edx, [ebp - 0x2d3]
push edx
call fcn.10092830
add esp, 0xc
push 0xa
lea eax, [ebp - 0x2d4]
push eax
mov ecx, dword [ebp - 0x1cc]
push ecx
call fcn.100c2d01
add esp, 0xc
lea edx, [ebp - 0x2d4]
push edx
lea ecx, [ebp - 0x15c]
call fcn.10002a70
lea ecx, [ebp - 0x16c]
call fcn.10017550
mov byte [ebp - 4], 5
lea eax, [ebp + 0xc]
push eax
push 0x1010552c
lea ecx, [ebp - 0x30]
push ecx
call fcn.1001e970
add esp, 0xc
mov dword [ebp - 0x324], eax
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x328], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x328]
push eax
lea ecx, [ebp - 0x2dc]
push ecx
lea ecx, [ebp - 0x16c]
call fcn.1001e930
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.1000c990
mov edx, dword [ebp - 0x320]
add edx, 0x268
push edx
push 0x10105530
lea eax, [ebp - 0x50]
push eax
call fcn.1001e970
add esp, 0xc
mov dword [ebp - 0x32c], eax
mov ecx, dword [ebp - 0x32c]
mov dword [ebp - 0x330], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x330]
push edx
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x16c]
call fcn.1001e930
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x50]
call fcn.1000c990
lea ecx, [ebp - 0x15c]
push ecx
push 0x10105534
lea edx, [ebp - 0x70]
push edx
call fcn.1001e970
add esp, 0xc
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x338], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x338]
push ecx
lea edx, [ebp - 0x2ec]
push edx
lea ecx, [ebp - 0x16c]
call fcn.1001e930
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x70]
call fcn.1000c990
mov eax, dword [ebp - 0x320]
add eax, 0x148
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2f0], esp
push eax
call fcn.100029f0
mov dword [ebp - 0x33c], eax
mov ecx, dword [ebp - 0x33c]
mov dword [ebp - 0x340], ecx
mov byte [ebp - 4], 9
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x2f4], esp
lea edx, [ebp - 0x16c]
push edx
call fcn.10017580
mov dword [ebp - 0x344], eax
lea eax, [ebp - 0x8c]
push eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x320]
call fcn.100160f0
mov dword [ebp - 0x348], eax
mov ecx, dword [ebp - 0x348]
mov dword [ebp - 0x34c], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x34c]
push edx
lea ecx, [ebp - 0x188]
call fcn.10001ef0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x8c]
call fcn.100018b0
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
call fcn.100249e0
add esp, 8
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x16c]
call fcn.10017df0
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0xc4]
push ecx
call fcn.1001e9b0
add esp, 0xc
mov dword [ebp - 0x350], eax
mov edx, dword [ebp - 0x350]
mov dword [ebp - 0x354], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x354]
push eax
lea ecx, [ebp - 0x2fc]
push ecx
lea ecx, [ebp - 0x16c]
call fcn.1001e9f0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xc4]
call fcn.10021430
mov edx, dword [ebp - 0x320]
add edx, 0x268
push edx
push 0x10105538
lea eax, [ebp - 0xe4]
push eax
call fcn.1001e970
add esp, 0xc
mov dword [ebp - 0x358], eax
mov ecx, dword [ebp - 0x358]
mov dword [ebp - 0x35c], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x35c]
push edx
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp - 0x16c]
call fcn.1001e930
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xe4]
call fcn.1000c990
lea ecx, [ebp - 0x15c]
push ecx
push 0x1010553c
lea edx, [ebp - 0x104]
push edx
call fcn.1001e970
add esp, 0xc
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x364], eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x364]
push ecx
lea edx, [ebp - 0x30c]
push edx
lea ecx, [ebp - 0x16c]
call fcn.1001e930
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x104]
call fcn.1000c990
lea eax, [ebp - 0x188]
push eax
push 0x10105540
lea ecx, [ebp - 0x124]
push ecx
call fcn.1001e970
add esp, 0xc
mov dword [ebp - 0x368], eax
mov edx, dword [ebp - 0x368]
mov dword [ebp - 0x36c], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x36c]
push eax
lea ecx, [ebp - 0x314]
push ecx
lea ecx, [ebp - 0x16c]
call fcn.1001e930
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x124]
call fcn.1000c990
sub esp, 0x10
mov ecx, esp
mov dword [ebp - 0x318], esp
lea edx, [ebp - 0x16c]
push edx
call fcn.10017580
mov dword [ebp - 0x370], eax
lea eax, [ebp - 0x140]
push eax
mov ecx, dword [ebp - 0x320]
call fcn.10016260
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x374]
mov dword [ebp - 0x378], ecx
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x378]
push edx
lea ecx, [ebp - 0x1c0]
call fcn.10001ef0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x140]
call fcn.100018b0
lea eax, [ebp - 0x1c0]
push eax
mov ecx, dword [ebp + 8]
call fcn.10002160
mov ecx, dword [ebp - 0x31c]
or ecx, 1
mov dword [ebp - 0x31c], ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1a4]
call fcn.100018b0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x16c]
call fcn.1000c970
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x188]
call fcn.100018b0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x15c]
call fcn.100018b0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c0]
call fcn.100018b0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0xc]
call fcn.100018b0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1008efb4
mov esp, ebp
pop ebp
ret 0x24