Function at 0x1003b5aa
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov byte [ebp - 0x14], 0x53
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0x12], 0x68
mov byte [ebp - 0x11], 0x54
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0xf], 0x75
mov byte [ebp - 0xe], 0x57
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 0xc], 0x6d
mov byte [ebp - 0xb], 0x76
mov byte [ebp - 0xa], 0x66
mov byte [ebp - 9], 0x46
mov byte [ebp - 8], 0x79
mov byte [ebp - 7], 0x42
mov byte [ebp - 6], 0
push esi
pop esi
je 0x1003b600
pushf
not esi
not esi
ror esp, 0
ror edi, 0x1d
rol edi, 0x1d
popf
mov edi, edi
jne 0x1003b600
mov ebx, 0x80ec4d8a
jmp 0xfc513e0a
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 9]
sub al, 1
mov byte [ebp - 9], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
cmc
je 0x1003b686
xchg esp, esp
jne 0x1003b681
jg 0x1003b683
jne 0x1003b686
xor eax, 0xff3157e8
dec dword [ecx + 0x7d83fc45]
cld
add byte [ebp + 0xa], dh
call fcn.1002e7e2
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x1003b69e
mov eax, 1
jmp 0x1003b905
je 0x1003b6a0
or esp, 0
rol esi, 0xf
ror esi, 0xf
cmp edi, edx
js 0x1003b6c6
pushf
not esi
not esi
or edx, edx
rol edi, 7
ror edi, 7
popf
jmp 0x1003b6bf
lea ebx, [ebx]
lea edx, [edx]
jns 0x1003b6c6
ljmp 0x4d8b:0x50ec458d
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.10043d83
mov dword [ebp - 0x1c], eax
push 0xf
push 0
lea edx, [ebp - 0x14]
push edx
call fcn.100220b2
add esp, 0xc
cmp dword [ebp - 0x1c], 0
jne 0x1003b6f6
mov eax, 1
jmp 0x1003b905
mov esp, esp
sub edi, 0
je 0x1003b70f
pushf
jne 0x1003b701
xchg ecx, ecx
popf
lea esp, [esp]
mov esp, esp
jg 0x1003b70c
jne 0x1003b70f
mov esi, 0x50e4458b
mov eax, dword [ebp - 0x1c]
push eax
call fcn.1003f812
add esp, 4
push 0xf
push 0
lea ecx, [ebp - 0x14]
push ecx
call fcn.100220b2
add esp, 0xc
ror edx, 0xd
rol edx, 0xd
je 0x1003b733
jae 0x1003b744
pushf
xchg ebx, eax
xchg ebx, eax
popf
jns 0x1003b73d
jne 0x1003b73f
lea ecx, [ecx]
jb 0x1003b744
ljmp 0x45c6:0x53ec45c6
mov byte [ebp - 0x14], 0x53
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0x12], 0x68
mov byte [ebp - 0x11], 0x54
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0xf], 0x75
mov byte [ebp - 0xe], 0x57
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 0xc], 0x6d
mov byte [ebp - 0xb], 0x76
mov byte [ebp - 0xa], 0x66
mov byte [ebp - 9], 0x46
mov byte [ebp - 8], 0x79
mov byte [ebp - 7], 0x58
mov byte [ebp - 6], 0
nop
shr esp, 0
ror esi, 0x14
ror esi, 0xc
jg 0x1003b79b
pushf
dec ecx
inc ecx
popf
lea ebx, [ebx]
jg 0x1003b796
jle 0x1003b798
jle 0x1003b79b
sub eax, 0x80ec558a
ljmp 0x458a
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xa]
sub cl, 1
mov byte [ebp - 0xa], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 7]
sub cl, 1
mov byte [ebp - 7], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
cmp edx, dword [esp]
stc
or esp, 0
mov ecx, ecx
je 0x1003b835
jne 0x1003b821
xchg edi, esi
xchg edi, esi
lea edi, [edi + 0x18e3]
lea edi, [edi - 0x18e3]
jne 0x1003b835
mov edx, 0xfc7d83f8
add byte [edx + ebp + 0x40], dh
cmp dword [ebp - 4], 0
je 0x1003b865
inc eax
dec eax
xor ebx, dword [esp]
xor ebx, dword [esp]
jnp 0x1003b855
lea esi, [esi + 0x3957]
lea esi, [esi - 0x3957]
jp 0x1003b855
add eax, 0xec4d8d3d
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.10043d83
mov dword [ebp - 0x18], eax
push edi
add edi, 0x13de
ror edi, 0x19
pop edi
jno 0x1003b886
pushf
and esp, 0xffffffff
je 0x1003b879
popf
jo 0x1003b87d
xchg edi, esi
xchg edi, esi
jns 0x1003b883
jo 0x1003b886
mov eax, 0x6a0f6a
push 0xf
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.100220b2
add esp, 0xc
nop
clc
xor esi, 0x1ec6
xor esi, 0x1ec6
je 0x1003b8b2
mov edx, edx
ja 0x1003b8aa
jle 0x1003b8ac
js 0x1003b8ae
jne 0x1003b8b2
add eax, 0xe87d8345
add byte [ebp + ebx - 0x15], dh
add byte [edi + 0xd], bh
cmp dword [ebp - 0x18], 0
je 0x1003b8d5
jmp 0x1003b8ba
jg 0x1003b8c9
pushf
js 0x1003b8c0
jle 0x1003b8c2
popf
jnp 0x1003b8c6
jle 0x1003b8c9
mov ebx, 0x51e84d8b
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.1003f812
add esp, 4
jl 0x1003b8d7
call 0x1003b8dc
lea esp, [esp + 4]
jne 0x1003b8ea
mov esp, esp
jo 0x1003b8e6
je 0x1003b8ea
mov ebp, 0x1c558bdf
mov edx, dword [ebp + 0x1c]
push edx
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18