Function at 0x3011816d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x8c
mov eax, dword [section..cdata]
push ebx
movzx ebx, word [0x301de06e]
push esi
push edi
mov dword [ebp + 0x68], eax
mov eax, dword [0x301de06a]
shr eax, 0xd
push 0xffffffffffffffff
xor edi, edi
inc edi
and eax, edi
xor esi, esi
push esi
or al, 0x50
push edi
push esi
push esi
push esi
shr ebx, 0xf
or ebx, 0x4a
mov dword [ebp - 0x20], eax
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.30117c1c
push esi
push eax
lea eax, [ebp - 0x18]
push eax
push 0x24
call fcn.300040b8
push 0xffffffffffffffff
push 2
push edi
push esi
push esi
push esi
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.30117c1c
push esi
push eax
lea eax, [ebp - 0x18]
push eax
push 0x25
call fcn.300040b8
push 0xffffffffffffffff
push esi
push 4
push esi
push esi
push edi
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.30117c1c
push esi
push eax
lea eax, [ebp - 0x18]
push eax
push 0x26
call fcn.300040b8
push 0xffffffffffffffff
push 2
push 4
push esi
push esi
push edi
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.30117c1c
push esi
push eax
lea eax, [ebp - 0x18]
push eax
push 0x27
call fcn.300040b8
mov edi, dword [ebp + 0x74]
push esi
push esi
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
push edi
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.30117b14
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x28
call fcn.300040b8
and byte [eax + 0xc], 0xfe
mov cl, byte [ebp - 0x1c]
sub cl, byte [edi]
lea edx, [ebp - 0x18]
mov byte [eax + 8], cl
mov cl, byte [edi]
sub cl, dl
push esi
mov byte [eax + 0xa], cl
mov byte [eax + 9], cl
mov byte [eax + 4], cl
mov eax, edx
push 1
mov dword [ebp - 0x1c], eax
push edi
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.30117b14
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x29
call fcn.300040b8
mov cx, word [eax + 0xc]
and cl, 0xfe
lea edx, [ebp - 0x18]
push 2
push esi
push edi
or ecx, 0x10
mov word [eax + 0xc], cx
mov cl, byte [ebp - 0x1c]
sub cl, byte [edi]
mov byte [eax + 8], cl
mov cl, byte [edi]
sub cl, dl
mov byte [eax + 0xa], cl
mov byte [eax + 9], cl
mov byte [eax + 4], cl
mov eax, edx
mov dword [ebp - 0x1c], eax
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.30117b14
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x2a
call fcn.300040b8
and byte [eax + 0xc], 0xfe
mov cl, byte [ebp - 0x1c]
sub cl, byte [edi]
lea edx, [ebp - 0x18]
mov byte [eax + 8], cl
mov cl, byte [edi]
sub cl, dl
push 2
mov byte [eax + 0xa], cl
mov byte [eax + 9], cl
mov byte [eax + 4], cl
mov eax, edx
push 1
mov dword [ebp - 0x1c], eax
push edi
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.30117b14
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x2b
call fcn.300040b8
mov cx, word [eax + 0xc]
and cl, 0xfe
lea edx, [ebp - 0x18]
or ecx, 0x10
mov word [eax + 0xc], cx
mov cl, byte [ebp - 0x1c]
sub cl, byte [edi]
mov byte [eax + 8], cl
mov cl, byte [edi]
sub cl, dl
mov byte [eax + 0xa], cl
mov byte [eax + 9], cl
mov byte [eax + 4], cl
mov eax, edx
mov dword [ebp - 0x1c], eax
mov eax, dword [0x301de0a4]
shr eax, 1
xor edi, edi
inc edi
and eax, edi
push eax
push esi
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.30117df2
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x2c
call fcn.300040b8
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x301de0a4]
shr eax, 1
and eax, edi
push eax
push 2
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.30117df2
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x2d
call fcn.300040b8
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov ax, word [0x301de0a8]
push esi
push edi
push eax
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.30117d58
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x2e
call fcn.300040b8
add eax, 0xc
or byte [eax], 0x40
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov ax, word [0x301de0a8]
push esi
push 2
push eax
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.30117d58
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x2f
call fcn.300040b8
add eax, 0xc
or byte [eax], 0x40
push esi
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
movzx eax, byte [0x301de070]
push esi
push 0x58
push eax
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.30003baa
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x3a
call fcn.300040b8
add eax, 0xc
or byte [eax], 4
push esi
push esi
push dword [ebp - 0x20]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
movzx eax, byte [0x301de070]
push eax
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.3011774e
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x30
call fcn.300040b8
push dword [ebp + 0x7c]
add eax, 0xc
or byte [eax], 4
push edi
push edi
push dword [ebp + 0x78]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.301177ff
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x31
call fcn.300040b8
push dword [ebp + 0x7c]
add eax, 0xc
or byte [eax], 4
push esi
push edi
push dword [ebp + 0x78]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.301177ff
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x32
call fcn.300040b8
push dword [ebp + 0x7c]
add eax, 0xc
or byte [eax], 4
push edi
push esi
push dword [ebp + 0x78]
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], eax
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.301177ff
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
push 0x33
call fcn.300040b8
add eax, 0xc
or byte [eax], 4
push esi
lea eax, [ebp - 0x15]
push eax
lea eax, [ebp - 0x18]
push eax
push 0x34
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], 0x25
mov byte [ebp - 0x16], 0x4d
call fcn.300040b8
add eax, 0xc
or byte [eax], 2
push esi
lea eax, [ebp - 0x13]
push eax
lea eax, [ebp - 0x18]
push eax
push 0x35
mov byte [ebp - 0x18], bl
mov byte [ebp - 0x17], 0x25
mov byte [ebp - 0x16], 0x4d
mov byte [ebp - 0x15], 0x25
mov byte [ebp - 0x14], 0x4f
call fcn.300040b8
add eax, 0xc
or byte [eax], 2
push esi
lea eax, [ebp - 0x18]
push esi
push dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
movzx eax, byte [0x301de070]
push eax
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.3011774e
push edi
lea eax, [ebp + 0x68]
push eax
push dword [ebp - 0x1c]
call fcn.30004998
mov byte [eax], bl
inc eax
mov byte [eax], 0x25
inc eax
mov byte [eax], 0x4d
push esi
inc eax
push eax
lea eax, [ebp - 0x18]
push eax
push 0x36
call fcn.300040b8
or byte [eax + 0xc], 6
push esi
lea eax, [ebp - 0x15]
push eax
lea eax, [ebp - 0x18]
push eax
push 0x38
mov byte [ebp - 0x18], 0x4d
mov byte [ebp - 0x17], 0x25
mov byte [ebp - 0x16], 0x4f
call fcn.300040b8
add eax, 0xc
or byte [eax], 2
push esi
lea eax, [ebp - 0x11]
push eax
lea eax, [ebp - 0x18]
push eax
push 0x39
mov byte [ebp - 0x18], 0x2f
mov byte [ebp - 0x17], 1
mov byte [ebp - 0x16], 0x4d
mov byte [ebp - 0x15], 0x25
mov byte [ebp - 0x14], 0x4f
mov byte [ebp - 0x13], 0x2e
mov byte [ebp - 0x12], 1
call fcn.300040b8
add eax, 0xc
or byte [eax], 2
push esi
lea eax, [ebp - 0x12]
push eax
lea eax, [ebp - 0x18]
push eax
push 0x37
mov byte [ebp - 0x18], 0x5e
mov byte [ebp - 0x17], 1
mov byte [ebp - 0x16], 0x25
mov byte [ebp - 0x15], 0x4d
mov byte [ebp - 0x14], 0x25
mov byte [ebp - 0x13], 0x4f
call fcn.300040b8
mov ecx, dword [ebp + 0x68]
pop edi
add eax, 0xc
or byte [eax], 2
pop esi
pop ebx
call fcn.30056b36
add ebp, 0x6c
leave
ret 0xc