Function at 0x10000364
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov ecx, dword [0x1000233c]
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov al, byte [esi + 1]
push edi
mov edi, dword [ebp + 8]
mov byte [ebp - 0x44], al
push 0x4a
xor ebx, ebx
pop eax
mov byte [ebp - 0x4f], 0x48
mov word [ecx + 0x18], ax
mov eax, dword [0x1000233c]
lea ecx, [eax + 0x18]
shr ecx, 4
and ecx, 0xf000
add eax, 0x18
push edi
mov byte [ebp - 0x24], 1
mov byte [ebp - 0x23], 9
mov byte [ebp - 0x22], 0x4f
mov byte [ebp - 0x21], 1
mov byte [ebp - 0x20], 0x12
mov byte [ebp - 0x1f], 0x4f
mov byte [ebp - 0x1e], bl
mov byte [ebp - 0x1d], 1
mov byte [ebp - 0x1c], bl
mov byte [ebp - 0x1b], 1
mov byte [ebp - 0x1a], 0x24
mov byte [ebp - 0x19], 0x4f
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], 1
mov byte [ebp - 0x16], bl
mov byte [ebp - 0x15], bl
mov byte [ebp - 0x14], 1
mov byte [ebp - 0x13], bl
mov byte [ebp - 0x12], bl
mov byte [ebp - 0x11], 1
mov byte [ebp - 0x10], bl
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xe], 1
mov byte [ebp - 0xd], bl
mov byte [ebp - 0xc], bl
mov byte [ebp - 0xb], 1
mov byte [ebp - 0xa], bl
mov byte [ebp - 9], 1
mov byte [ebp - 8], 9
mov byte [ebp - 7], 0x27
mov byte [ebp - 6], 1
mov byte [ebp - 5], 0xf
mov byte [ebp - 4], 0x4f
mov word [ebp - 0x2e], cx
mov word [ebp - 0x40], ax
call fcn.10000263
mov eax, dword [edi + 0x60]
lea ecx, [ebp - 0x50]
push ecx
push 0x13
push eax
call dword [eax]
add esp, 0x10
test byte [ebp - 0x38], 1
jne 0x1000054d
cmp byte [ebp - 0x4f], bl
jne 0x1000054d
push ebx
lea eax, [esi + 0x18]
push 0x4a
push eax
mov eax, dword [0x10002304]
call dword [eax + pe_nt_image_headers32]
mov eax, dword [0x1000233c]
add eax, 0x18
movzx ecx, word [eax]
push ecx
push eax
lea eax, [esi + 0x18]
push eax
mov eax, dword [0x10002304]
call dword [eax + 0xbc]
add esp, 0x18
cmp byte [esi + 0x11], bl
je 0x1000052b
mov al, byte [esi + 1]
lea ecx, [ebp - 0x50]
push ecx
mov byte [ebp - 0x44], al
mov eax, dword [edi + 0x60]
push 0x13
push eax
mov byte [ebp - 0x4f], 0x20
call dword [eax]
add esp, 0xc
test byte [ebp - 0x38], 1
je 0x100004bd
test byte [esi + 0x1a], 2
je 0x100004fa
mov al, byte [esi + 0x20]
dec al
mov byte [esi + 0x12], al
mov al, byte [esi + 0x24]
mov byte [esi + 0x13], al
mov ax, word [esi + 0x1c]
dec ax
jmp 0x10000503
xor eax, eax
mov word [esi + 0x14], ax
mov al, byte [ebp - 0x50]
mov byte [esi + 0x12], bl
mov byte [esi + 0x13], 1
cmp al, 0xa
je 0x100004a1
mov cl, al
sub cl, 3
cmp cl, 0xa
ja 0x10000507
sub al, 3
mov cl, 3
imul cl
movzx eax, al
mov cl, byte [ebp + eax - 0x24]
mov byte [esi + 0x12], cl
mov cl, byte [ebp + eax - 0x23]
movzx ax, byte [ebp + eax - 0x22]
mov byte [esi + 0x13], cl
jmp 0x10000503
xor eax, eax
mov byte [esi + 0x13], 1
mov byte [esi + 0x12], bl
mov word [esi + 0x14], ax
movzx eax, byte [esi + 0x12]
movzx ecx, word [esi + 0x14]
inc eax
inc ecx
imul eax, ecx
movzx ecx, byte [esi + 0x13]
imul eax, ecx
cdq
mov dword [esi + 0x28], eax
mov eax, 0x200
mov dword [esi + 0x2c], edx
mov word [esi + 0x30], ax
mov eax, dword [esi + 0x32]
movzx ecx, word [esi + 0x32]
shr eax, 4
and eax, 0xf000
shl eax, 4
add eax, ecx
push edi
mov dword [esi + 0xc], eax
call fcn.10000293
pop ecx
mov al, 1
jmp 0x10000574
push edi
call fcn.10000293
mov al, byte [ebp - 0x4f]
mov byte [esi + 8], al
mov eax, dword [0x10002304]
push 0xaf
push 0x4a
add esi, 0x18
push esi
call dword [eax + pe_nt_image_headers32]
add esp, 0x10
xor al, al
pop edi
pop esi
pop ebx
leave
ret