Function at 0x10022a70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100702f6
mov eax, dword fs:[0]
push eax
sub esp, 0x270
mov eax, dword [0x1008a748]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3c], 0
xor eax, eax
mov word [ebp - 0x38], ax
xor ecx, ecx
mov dword [ebp - 0x36], ecx
mov dword [ebp - 0x32], ecx
mov dword [ebp - 0x2e], ecx
mov word [ebp - 0x2a], cx
lea edx, [ebp - 0x38]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
call fcn.10040b68
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.10022a10
add esp, 8
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 4], 0
movzx edx, word [ebp - 0x2c]
push edx
lea eax, [ebp - 0x24c]
push eax
call fcn.1000cd30
add esp, 8
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x44], ecx
mov byte [ebp - 4], 1
movzx edx, word [ebp - 0x2e]
push edx
lea eax, [ebp - 0x21c]
push eax
call fcn.1000cd30
add esp, 8
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0xc0], ecx
mov byte [ebp - 4], 2
movzx edx, word [ebp - 0x30]
push edx
lea eax, [ebp - 0x1ec]
push eax
call fcn.1000cd30
add esp, 8
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x88], ecx
mov byte [ebp - 4], 3
movzx edx, word [ebp - 0x32]
push edx
lea eax, [ebp - 0x1bc]
push eax
call fcn.1000cd30
add esp, 8
mov dword [ebp - 0x8c], eax
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0xb4], ecx
mov byte [ebp - 4], 4
movzx edx, word [ebp - 0x36]
push edx
lea eax, [ebp - 0x18c]
push eax
call fcn.1000cd30
add esp, 8
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x60], ecx
mov byte [ebp - 4], 5
movzx edx, word [ebp - 0x38]
push edx
lea eax, [ebp - 0x15c]
push eax
call fcn.1000cd30
add esp, 8
mov dword [ebp - 0x94], eax
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x58], ecx
mov byte [ebp - 4], 6
push 0x1007e898
mov edx, dword [ebp - 0x58]
push edx
lea eax, [ebp - 0x12c]
push eax
call fcn.10013730
add esp, 0xc
mov dword [ebp - 0x9c], eax
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x60]
push edx
mov eax, dword [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xfc]
push ecx
call fcn.100134e0
add esp, 0xc
mov dword [ebp - 0x68], eax
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0xac], edx
mov byte [ebp - 4], 8
push 0x1007e894
mov eax, dword [ebp - 0xac]
push eax
lea ecx, [ebp - 0x264]
push ecx
call fcn.10013730
add esp, 0xc
mov dword [ebp - 0x70], eax
mov edx, dword [ebp - 0x70]
mov dword [ebp - 0x78], edx
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0xb4]
push eax
mov ecx, dword [ebp - 0x78]
push ecx
lea edx, [ebp - 0x1a4]
push edx
call fcn.100134e0
add esp, 0xc
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 0xa
push 0x1007e890
mov ecx, dword [ebp - 0x80]
push ecx
lea edx, [ebp - 0x204]
push edx
call fcn.10013730
add esp, 0xc
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x88]
push ecx
mov edx, dword [ebp - 0xcc]
push edx
lea eax, [ebp - 0x174]
push eax
call fcn.100134e0
add esp, 0xc
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0x90]
mov dword [ebp - 0xb0], ecx
mov byte [ebp - 4], 0xc
push 0x1007e88c
mov edx, dword [ebp - 0xb0]
push edx
lea eax, [ebp - 0x234]
push eax
call fcn.10013730
add esp, 0xc
mov dword [ebp - 0x98], eax
mov ecx, dword [ebp - 0x98]
mov dword [ebp - 0xa0], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0xc0]
push edx
mov eax, dword [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x144]
push ecx
call fcn.100134e0
add esp, 0xc
mov dword [ebp - 0xb8], eax
mov edx, dword [ebp - 0xb8]
mov dword [ebp - 0x40], edx
mov byte [ebp - 4], 0xe
push 0x1007e888
mov eax, dword [ebp - 0x40]
push eax
lea ecx, [ebp - 0x1d4]
push ecx
call fcn.10013730
add esp, 0xc
mov dword [ebp - 0xc8], eax
mov edx, dword [ebp - 0xc8]
mov dword [ebp - 0x4c], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x114]
push edx
call fcn.100134e0
add esp, 0xc
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0x10
push 0x1007e884
mov ecx, dword [ebp - 0x5c]
push ecx
lea edx, [ebp - 0xe4]
push edx
call fcn.10013730
add esp, 0xc
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x6c]
push ecx
mov edx, dword [ebp - 0x74]
push edx
lea eax, [ebp - 0x28]
push eax
call fcn.100134e0
add esp, 0xc
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xe4]
call fcn.10005300
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x114]
call fcn.10005300
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1d4]
call fcn.10005300
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x144]
call fcn.10005300
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x234]
call fcn.10005300
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x174]
call fcn.10005300
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x204]
call fcn.10005300
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1a4]
call fcn.10005300
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x264]
call fcn.10005300
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xfc]
call fcn.10005300
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x12c]
call fcn.10005300
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x15c]
call fcn.10005300
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x18c]
call fcn.10005300
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1bc]
call fcn.10005300
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1ec]
call fcn.10005300
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x21c]
call fcn.10005300
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x24c]
call fcn.10005300
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x27c]
call fcn.10005300
lea ecx, [ebp - 0x28]
push ecx
mov ecx, dword [ebp + 8]
call fcn.100052b0
mov edx, dword [ebp - 0x3c]
or edx, 1
mov dword [ebp - 0x3c], edx
lea ecx, [ebp - 0x28]
call fcn.10005300
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1003fec6
mov esp, ebp
pop ebp
ret