Function at 0x10003ab0
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10113bab
mov eax, dword fs:[0]
push eax
mov eax, 0x72e4
call fcn.100f7e00
mov eax, dword [0x10167410]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
fldz
mov ecx, 0x703
lea eax, [ebp - 0x72a8]
fst dword [eax - 8]
add eax, 0x10
dec ecx
fst dword [eax - 0x14]
fst dword [eax - 0x10]
fst dword [eax - 0xc]
jns 0x10003aef
fstp st(0)
lea esi, [ebp - 0x72b0]
fld dword [0x10121d50]
mov edi, 0x704
fstp dword [ebp - 0x72e8]
mov ebx, dword [ebp - 0x72e8]
call fcn.100f8ad3
cdq
mov ecx, 0x306
idiv ecx
inc edx
mov dword [ebp - 0x72dc], edx
fild dword [ebp - 0x72dc]
fstp dword [ebp - 0x72d8]
call fcn.100f8ad3
cdq
mov ecx, 0x79
idiv ecx
add esi, 0x10
inc edx
dec edi
mov dword [ebp - 0x72dc], edx
fild dword [ebp - 0x72dc]
fstp dword [ebp - 0x72dc]
fld dword [ebp - 0x72d8]
fstp dword [ebp - 0x72f0]
mov edx, dword [ebp - 0x72f0]
fld dword [ebp - 0x72dc]
mov dword [esi - 0x10], edx
fst dword [ebp - 0x72ec]
mov eax, dword [ebp - 0x72ec]
fdivr qword [0x10121d48]
mov dword [esi - 0xc], eax
mov dword [esi - 8], ebx
fstp dword [ebp - 0x72e4]
mov ecx, dword [ebp - 0x72e4]
mov dword [esi - 4], ecx
jne 0x10003b20
xor ebx, ebx
push ebx
call fcn.100f812c
push eax
call fcn.100f8ac1
mov eax, dword [0x10176e9c]
lea esi, [edi + 1]
add esp, 8
cmp eax, esi
jl 0x10003be4
lea esp, [esp]
call fcn.100f8ad3
call fcn.100f8ad3
mov eax, dword [0x10176e9c]
inc esi
cmp esi, eax
jle 0x10003bd0
mov esi, 1
cmp eax, esi
jl 0x10003c04
lea ecx, [ecx]
call fcn.100f8ad3
call fcn.100f8ad3
mov eax, dword [0x10176e9c]
inc esi
cmp esi, eax
jle 0x10003bf0
mov dword [ebp - 0x72f0], ebx
mov dword [ebp - 0x72ec], ebx
mov dword [ebp - 0x72e8], ebx
mov esi, 1
mov dword [ebp - 4], ebx
cmp eax, esi
jl 0x10003c35
call fcn.100f8ad3
call fcn.100f8ad3
inc esi
cmp esi, dword [0x10176e9c]
jle 0x10003c22
call fcn.100f8ad3
cdq
mov ecx, 0x4a
idiv ecx
mov dword [ebp - 0x72d8], edx
fild dword [ebp - 0x72d8]
fmul qword [0x10121e50]
fdiv qword [0x10121e48]
call fcn.100f8c00
fmul qword [0x10121e40]
fdiv qword [0x10121e38]
fldz
fld st(0)
fxch st(1)
fcomp st(2)
fnstsw ax
test ah, 0x41
jp 0x10003cc2
fld qword [0x10121e30]
jmp 0x10003c84
fxch st(1)
fadd st(1), st(0)
fxch st(1)
fcom st(2)
fnstsw ax
test ah, 0x41
jnp 0x10003c82
fstp st(0)
fstp st(1)
push ebx
fstp st(0)
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
cmp esi, ebx
je 0x1000443c
push ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
push ebx
push esi
call fcn.10004805
test eax, eax
jne 0x10003cc6
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
fstp st(0)
jmp 0x10003c95
mov dword [ebp - 0x1f0], 0x4034b50
mov dword [ebp - 0x1ec], 0x8002d
mov dword [ebp - 0x1e8], 0x9db50000
mov dword [ebp - 0x1e4], 0x516c
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 0x1d8], 0x80000
mov dword [ebp - 0x1d4], 0x6f6c0000
mov dword [ebp - 0x1d0], 0x702e6f67
mov dword [ebp - 0x1cc], 0x5089676e
mov dword [ebp - 0x1c8], 0xa0d474e
mov dword [ebp - 0x1c4], 0xa1a
mov dword [ebp - 0x1c0], 0x48490d00
mov dword [ebp - 0x1bc], 0x5244
mov dword [ebp - 0x1b8], 0x1000
mov dword [ebp - 0x1b4], 0x6081000
mov dword [ebp - 0x1b0], 0x1f000000
mov dword [ebp - 0x1ac], 0x61fff3
mov dword [ebp - 0x1a8], 0x73010000
mov dword [ebp - 0x1a4], 0x424752
mov dword [ebp - 0x1a0], 0xe91cceae
mov dword [ebp - 0x19c], 0x4000000
mov dword [ebp - 0x198], 0x414d4167
mov dword [ebp - 0x194], 0x8fb10000
mov dword [ebp - 0x190], 0x561fc0b
mov dword [ebp - 0x18c], 0x9000000
mov dword [ebp - 0x188], 0x73594870
mov dword [ebp - 0x184], 0xc40e0000
mov dword [ebp - 0x180], 0xc40e0000
mov dword [ebp - 0x17c], 0xe2b9501
mov dword [ebp - 0x178], 0x100001b
mov dword [ebp - 0x174], 0x41444998
mov dword [ebp - 0x170], 0x634f3854
mov dword [ebp - 0x16c], 0xc040ffc
mov dword [ebp - 0x168], 0xa260014
mov dword [ebp - 0x164], 0xeb582f4
mov dword [ebp - 0x160], 0xb08c01bc
mov dword [ebp - 0x15c], 0x5a2b3030
mov dword [ebp - 0x158], 0xa52220c8
mov dword [ebp - 0x154], 0xa7d6760e
mov dword [ebp - 0x150], 0x8e194fd7
mov dword [ebp - 0x14c], 0xf8a30674
mov dword [ebp - 0x148], 0x166ac2ae
mov dword [ebp - 0x144], 0x9ff8cf98
mov dword [ebp - 0x140], 0x2b860929
mov dword [ebp - 0x13c], 0x7c30ce67
mov dword [ebp - 0x138], 0xac13f6fd
mov dword [ebp - 0x134], 0x91998581
mov dword [ebp - 0x130], 0x825a5641
mov dword [ebp - 0x12c], 0x845f8b81
mov dword [ebp - 0x128], 0x6bf36581
mov dword [ebp - 0x124], 0x3fcff786
mov dword [ebp - 0x120], 0x88890833
mov dword [ebp - 0x11c], 0xb188f031
mov dword [ebp - 0x118], 0xbfe11c30
mov dword [ebp - 0x114], 0x5d7c60cd
mov dword [ebp - 0x110], 0x8f4a419e
mov dword [ebp - 0x10c], 0x9bfde19f
mov dword [ebp - 0x108], 0xfa8c0cef
mov dword [ebp - 0x104], 0xbffecb59
mov dword [ebp - 0x100], 0x819d7c7f
mov dword [ebp - 0xfc], 0xe19d8b9b
mov dword [ebp - 0xf8], 0xb86a8ada
mov dword [ebp - 0xf4], 0x57aabc2b
mov dword [ebp - 0xf0], 0xf13dbc33
mov dword [ebp - 0xec], 0xebe78199
mov dword [ebp - 0xe8], 0x126061f
mov dword [ebp - 0xe4], 0x9c7b864e
mov dword [ebp - 0xe0], 0xaeee1877
mov dword [ebp - 0xdc], 0x7cb046f
mov dword [ebp - 0xd8], 0xd305cea9
mov dword [ebp - 0xd4], 0xc2ceade
mov dword [ebp - 0xd0], 0xfd5eff4c
mov dword [ebp - 0xcc], 0x6466b06
mov dword [ebp - 0xc8], 0xdeafcd20
mov dword [ebp - 0xc4], 0xc17863bc
mov dword [ebp - 0xc0], 0xbfe180fd
mov dword [ebp - 0xbc], 0x53c32083
mov dword [ebp - 0xb8], 0xcd704781
mov dword [ebp - 0xb4], 0x93df7520
mov dword [ebp - 0xb0], 0x3b5e19d5
lea edx, [ebp - 0x1ef]
push edx
lea eax, [ebp - 0x1f0]
push eax
mov dword [ebp - 0xac], 0xca30f440
mov dword [ebp - 0xa8], 0x1382d6f9
mov dword [ebp - 0xa4], 0x359db992
mov dword [ebp - 0xa0], 0x3f2f97c3
mov dword [ebp - 0x9c], 0x1ecf82c0
mov dword [ebp - 0x98], 0xff78663f
mov dword [ebp - 0x94], 0xb28315fa
mov dword [ebp - 0x90], 0xddc32e96
mov dword [ebp - 0x8c], 0x62c1976b
mov dword [ebp - 0x88], 0xa6da1730
mov dword [ebp - 0x84], 0x55e0612e
mov dword [ebp - 0x80], 0x7d906157
mov dword [ebp - 0x7c], 0xecc197f1
mov dword [ebp - 0x78], 0xa0601dc6
mov dword [ebp - 0x74], 0x5fbc8102
mov dword [ebp - 0x70], 0xbc98831d
mov dword [ebp - 0x6c], 0xc32b032a
mov dword [ebp - 0x68], 0xc5f860f
mov dword [ebp - 0x64], 0x8ff6601c
mov dword [ebp - 0x60], 0xf6198f37
mov dword [ebp - 0x5c], 0x35828475
mov dword [ebp - 0x58], 0x622d06db
mov dword [ebp - 0x54], 0x4e35560
mov dword [ebp - 0x50], 0x26300587
mov dword [ebp - 0x4c], 0x667fdc83
mov dword [ebp - 0x48], 0xcb8468d4
mov dword [ebp - 0x44], 0xf818c190
mov dword [ebp - 0x40], 0xbb14ca4
mov dword [ebp - 0x3c], 0x986c1400
mov dword [ebp - 0x38], 0xfbc2e932
mov dword [ebp - 0x34], 0xef
mov dword [ebp - 0x30], 0x4e454900
mov dword [ebp - 0x2c], 0x6042ae44
mov dword [ebp - 0x28], 0x74b5082
mov dword [ebp - 0x24], 0x6838da08
mov dword [ebp - 0x20], 0x2031e
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0x20300
mov dword [ebp - 0x14], ebx
call sym.PhysCore.dll_AgPmEventEnabled
push 0x7f
lea ecx, [ebp - 0x26f]
push ebx
push ecx
mov byte [ebp - 0x270], al
call fcn.100f7540
push 0x404
call fcn.1000456e
add esp, 0x18
mov edi, eax
call fcn.10003830
lea eax, [ebp - 0x270]
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10004157
sub eax, esi
push eax
lea edx, [ebp - 0x270]
push edx
push edi
call fcn.10001b30
fldz
add esp, 0xc
mov esi, 0xf
lea ecx, [ebp - 0x72a8]
mov edx, 0x1c1
fcom dword [ecx]
fnstsw ax
test ah, 5
jp 0x100041aa
fld dword [ecx]
fsub dword [ecx - 4]
fstp dword [ebp - 0x72d8]
fld dword [ebp - 0x72d8]
fst dword [ecx]
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x100041aa
fst dword [ecx]
fcom dword [ecx + 0x10]
fnstsw ax
test ah, 5
jp 0x100041d5
fld dword [ecx + 0x10]
fsub dword [ecx + 0xc]
fstp dword [ebp - 0x72d8]
fld dword [ebp - 0x72d8]
fst dword [ecx + 0x10]
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x100041d5
fst dword [ecx + 0x10]
fcom dword [ecx + 0x20]
fnstsw ax
test ah, 5
jp 0x10004200
fld dword [ecx + 0x20]
fsub dword [ecx + 0x1c]
fstp dword [ebp - 0x72d8]
fld dword [ebp - 0x72d8]
fst dword [ecx + 0x20]
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x10004200
fst dword [ecx + 0x20]
fcom dword [ecx + 0x30]
fnstsw ax
test ah, 5
jp 0x1000422b
fld dword [ecx + 0x30]
fsub dword [ecx + 0x2c]
fstp dword [ebp - 0x72d8]
fld dword [ebp - 0x72d8]
fst dword [ecx + 0x30]
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x1000422b
fst dword [ecx + 0x30]
add ecx, 0x40
dec edx
jne 0x10004183
dec esi
jne 0x10004178
push 0x493d38
fstp st(0)
push section.text
push edi
call fcn.10003200
fldz
add esp, 0xc
mov esi, 7
lea ecx, [ebp - 0x72a8]
mov edx, 0x1c1
fcom dword [ecx]
fnstsw ax
test ah, 5
jp 0x1000428a
fld dword [ecx]
fsub dword [ecx - 4]
fstp dword [ebp - 0x72d8]
fld dword [ebp - 0x72d8]
fst dword [ecx]
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x1000428a
fst dword [ecx]
fcom dword [ecx + 0x10]
fnstsw ax
test ah, 5
jp 0x100042b5
fld dword [ecx + 0x10]
fsub dword [ecx + 0xc]
fstp dword [ebp - 0x72d8]
fld dword [ebp - 0x72d8]
fst dword [ecx + 0x10]
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x100042b5
fst dword [ecx + 0x10]
fcom dword [ecx + 0x20]
fnstsw ax
test ah, 5
jp 0x100042e0
fld dword [ecx + 0x20]
fsub dword [ecx + 0x1c]
fstp dword [ebp - 0x72d8]
fld dword [ebp - 0x72d8]
fst dword [ecx + 0x20]
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x100042e0
fst dword [ecx + 0x20]
fcom dword [ecx + 0x30]
fnstsw ax
test ah, 5
jp 0x1000430b
fld dword [ecx + 0x30]
fsub dword [ecx + 0x2c]
fstp dword [ebp - 0x72d8]
fld dword [ebp - 0x72d8]
fst dword [ecx + 0x30]
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x1000430b
fst dword [ecx + 0x30]
add ecx, 0x40
dec edx
jne 0x10004263
dec esi
jne 0x10004258
push ebx
fstp st(0)
call fcn.100f812c
mov dword [ebp - 0x72e0], eax
lea eax, [ebp - 0x72e0]
push eax
lea ecx, [ebp - 0x72d4]
push ecx
mov dword [ebp - 0x72dc], edx
call fcn.100f7ea4
add esp, 0xc
cmp dword [ebp - 0x72cc], ebx
jne 0x1000435d
cmp dword [ebp - 0x72d0], ebx
jne 0x1000435d
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
fldz
mov esi, 0x437
lea ecx, [ebp - 0x72a8]
mov edx, 0x1c1
fcom dword [ecx]
fnstsw ax
test ah, 5
jp 0x10004396
fld dword [ecx]
fsub dword [ecx - 4]
fstp dword [ebp - 0x72d8]
fld dword [ebp - 0x72d8]
fst dword [ecx]
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x10004396
fst dword [ecx]
fcom dword [ecx + 0x10]
fnstsw ax
test ah, 5
jp 0x100043c1
fld dword [ecx + 0x10]
fsub dword [ecx + 0xc]
fstp dword [ebp - 0x72d8]
fld dword [ebp - 0x72d8]
fst dword [ecx + 0x10]
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x100043c1
fst dword [ecx + 0x10]
fcom dword [ecx + 0x20]
fnstsw ax
test ah, 5
jp 0x100043ec
fld dword [ecx + 0x20]
fsub dword [ecx + 0x1c]
fstp dword [ebp - 0x72d8]
fld dword [ebp - 0x72d8]
fst dword [ecx + 0x20]
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x100043ec
fst dword [ecx + 0x20]
fcom dword [ecx + 0x30]
fnstsw ax
test ah, 5
jp 0x10004417
fld dword [ecx + 0x30]
fsub dword [ecx + 0x2c]
fstp dword [ebp - 0x72d8]
fld dword [ebp - 0x72d8]
fst dword [ecx + 0x30]
fcomp st(1)
fnstsw ax
test ah, 0x41
jp 0x10004417
fst dword [ecx + 0x30]
add ecx, 0x40
dec edx
jne 0x1000436f
dec esi
jne 0x10004364
push 0xc8f78
fstp st(0)
push 0x10549dc0
call fcn.10003920
add esp, 8
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]