Function at 0x100032a6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x34
lea eax, [ecx + 4]
mov ebp, dword [esp + 0x48]
mov esi, ecx
mov edi, 0xf5a25799
mov dword [esp], eax
mov eax, dword [esp]
mov eax, dword [eax]
mov dword [esp + 0x30], eax
lea eax, [ebp + 1]
mov dword [esp + 0x2c], eax
lea eax, [ebp + 2]
mov dword [esp + 0x28], eax
mov eax, 0x1e2560a4
cmp eax, 0x2bce2de2
jg 0x100032fb
cmp eax, 0xd683184
je 0x10003337
cmp eax, 0x1e2560a4
je 0x10003343
cmp eax, 0x222e21cb
jne 0x100032da
jmp 0x10003639
cmp eax, 0x2bce2de3
je 0x10003357
cmp eax, 0x4b35316d
je 0x100033a4
cmp eax, 0x4b5fa21e
jne 0x100032da
mov eax, dword [esp + 0x24]
xor ebx, ebx
mov dword [eax], ebp
mov eax, dword [esp]
mov eax, dword [eax]
mov byte [eax + ebp], bl
mov eax, dword [esp]
mov ecx, dword [esp + 0x2c]
mov eax, dword [eax]
mov byte [eax + ecx], bl
mov eax, 0x222e21cb
jmp 0x100032da
mov eax, 0x222e21cb
mov ebx, 8
jmp 0x100032da
cmp dword [esp + 0x30], 0
mov eax, 0x4b35316d
mov ecx, 0x2bce2de3
cmove eax, ecx
jmp 0x100032da
lea eax, [esp + 0x22]
mov ecx, 0x68aad165
mov dword [esp + 0x18], 0x7f6f6448
mov dword [esp + 0x1c], 0x6466614d
mov byte [esp + 0x20], 0x6b
mov dword [esp + 8], eax
lea eax, [esp + 0x21]
cmp ecx, 0x5b6e95d8
je 0x100033f5
cmp ecx, 0x68aad165
jne 0x1000337d
mov byte [eax], 0
inc eax
mov ecx, 0x68aad165
mov edx, 0x5b6e95d8
cmp eax, dword [esp + 8]
cmove ecx, edx
jmp 0x1000337d
lea eax, [esp + 0x12]
mov ecx, 0x68aad165
mov dword [esp + 8], 0x6e6d6e4c
mov dword [esp + 0xc], 0x6e784b60
mov byte [esp + 0x10], 0x6d
mov dword [esp + 0x18], eax
lea eax, [esp + 0x11]
cmp ecx, 0x5b6e95d8
je 0x10003465
cmp ecx, 0x68aad165
jne 0x100033ca
mov byte [eax], 0
inc eax
mov ecx, 0x68aad165
mov edx, 0x5b6e95d8
cmp eax, dword [esp + 0x18]
cmove ecx, edx
jmp 0x100033ca
xor eax, eax
mov ecx, 0xcc4ca22a
cmp ecx, 0x399adcba
je 0x100034d1
cmp ecx, 0xf5a25799
je 0x1000342d
cmp ecx, 0xcc4ca22a
jne 0x100033fc
mov dword [esp + 8], eax
mov ecx, dword [esp + 8]
cmp ecx, 9
mov ecx, 0x399adcba
cmovb ecx, edi
jmp 0x100033fc
mov ecx, dword [esp + 8]
mov dl, byte [esp + ecx + 0x18]
mov dh, dl
and dl, 0x30
not dh
mov al, dh
and dh, 0x89
and al, 0x46
or dl, al
mov eax, dword [esp + 8]
or dh, dl
mov dl, 0xb9
sub dl, al
add al, 0x46
and dl, 0x89
and al, 0x76
or al, dl
xor al, dh
mov byte [esp + ecx + 0x18], al
mov eax, dword [esp + 8]
inc eax
jmp 0x100033f7
xor eax, eax
mov ecx, 0xcc4ca22a
cmp ecx, 0x399adcba
je 0x10003538
cmp ecx, 0xf5a25799
je 0x1000349d
cmp ecx, 0xcc4ca22a
jne 0x1000346c
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
cmp ecx, 9
mov ecx, 0x399adcba
cmovb ecx, edi
jmp 0x1000346c
mov ecx, dword [esp + 0x18]
mov dl, byte [esp + ecx + 8]
mov eax, edx
and dl, 0x70
not al
and al, 0x8f
or dl, al
mov eax, dword [esp + 0x18]
mov dh, dl
xor dl, 0x36
xor dh, 0xc9
add al, 0x46
and dl, al
not al
and al, dh
or al, dl
mov byte [esp + ecx + 8], al
mov eax, dword [esp + 0x18]
inc eax
jmp 0x10003467
lea ecx, [esp + 0x18]
mov byte [esp + 0x21], 0
call fcn.10003781
mov edi, eax
lea eax, [esp + 0x17]
mov ecx, 0x13cf620b
mov dword [esp + 8], 0x5f7a6447
mov dword [esp + 0xc], 0x6e69627e
mov dword [esp + 0x10], 0x725e7a7b
mov word [esp + 0x14], 0x6575
mov dword [esp + 4], eax
lea eax, [esp + 0x16]
cmp ecx, 0x6c0f6aea
je 0x10003569
cmp ecx, 0x13cf620b
jne 0x10003511
mov byte [eax], 0
inc eax
mov ecx, 0x13cf620b
mov edx, 0x6c0f6aea
cmp eax, dword [esp + 4]
cmove ecx, edx
jmp 0x10003511
lea ecx, [esp + 8]
mov byte [esp + 0x11], 0
call fcn.10003781
mov ecx, dword [esp]
push dword [ecx]
call eax
mov eax, dword [esp]
xor ecx, ecx
mov dword [eax], ecx
mov dword [esi + 0xc], ecx
mov eax, dword [esp]
mov eax, dword [eax]
mov dword [esi + 8], eax
mov eax, 0x2bce2de3
jmp 0x100032da
xor eax, eax
mov ecx, 0xdb39052a
cmp ecx, 0x90bcb720
je 0x100035a2
cmp ecx, 0xa779bab7
je 0x100035e0
cmp ecx, 0xdb39052a
jne 0x10003570
mov dword [esp + 4], eax
mov edx, 0x90bcb720
mov ecx, dword [esp + 4]
cmp ecx, 0xe
mov ecx, 0xa779bab7
cmovb ecx, edx
jmp 0x10003570
mov eax, dword [esp + 4]
mov dl, byte [esp + eax + 8]
mov ecx, edx
mov dh, dl
and dl, 0x10
not cl
and dh, 0xe2
and cl, 0xd
or dh, cl
mov ecx, dword [esp + 4]
xor dh, 0xa4
or dl, dh
add cl, 0x46
mov dh, cl
and cl, 0x10
not dh
and dh, 0xef
or cl, dh
xor cl, dl
mov byte [esp + eax + 8], cl
mov eax, dword [esp + 4]
inc eax
jmp 0x1000356b
lea ecx, [esp + 8]
mov byte [esp + 0x16], 0
call fcn.10003781
call eax
push dword [esp + 0x28]
push 8
push eax
call edi
mov ecx, dword [esp]
mov edi, 0xf5a25799
mov dword [ecx], eax
mov ecx, 0xd683184
mov eax, dword [esp]
mov eax, dword [eax]
mov dword [esi + 0xc], eax
mov eax, dword [esp]
mov eax, dword [eax]
mov dword [esi + 8], eax
mov dword [esp + 0x24], esi
mov eax, dword [esp + 0x24]
mov dword [eax], 0
mov eax, dword [esp]
cmp dword [eax], 0
mov eax, 0x4b5fa21e
cmove eax, ecx
jmp 0x100032da
mov eax, ebx
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret 4