Function at 0x384e3bd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
mov eax, dword [0x7076dbc]
xor eax, ebp
mov dword [ebp - 4], eax
mov edx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x64], eax
mov ecx, dword [edx + 0x94d5]
add ecx, 0x2000
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x60], eax
push ebx
lea eax, [ecx + 0x200]
mov dword [ebp - 0x4c], edx
xor ebx, ebx
mov dword [ebp - 0x20], 0x696e7572
mov dword [ebp - 0x1c], 0x652e7065
mov word [ebp - 0x18], 0x6578
mov dword [ebp - 0x48], 0x66617274
mov dword [ebp - 0x44], 0x6d636966
mov dword [ebp - 0x40], 0x6f636e6f
mov dword [ebp - 0x3c], 0x63656e6e
mov dword [ebp - 0x38], 0x6e6f6974
mov dword [ebp - 0x34], 0x6d726574
mov dword [ebp - 0x30], 0x65646573
mov dword [ebp - 0x2c], 0x70677562
mov dword [ebp - 0x28], 0x69766972
mov dword [ebp - 0x24], 0x6567656c
mov dword [ebp - 0x50], 0x2e707661
mov dword [ebp - 0x14], 0x7078766b
mov dword [ebp - 0x10], 0x70786b2e
mov dword [ebp - 0xc], 0x37323323
mov word [ebp - 8], 0x3037
mov dword [ebp - 0x54], 0x25766172
cmp eax, dword [edx + 0xdc14]
ja 0x384e3f1d
push 0x200
lea eax, [edx + 0x1400]
push eax
push ecx
push edx
call 0x37e827f0
add esp, 0x10
cmp eax, 0x200
je 0x384e3cd0
lea eax, [ebx + 7]
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call 0x37ad9614
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ecx + 0x1420]
or eax, 0x20202020
cmp eax, 0x736d6f63
jne 0x384e3f1d
push esi
push edi
mov esi, 0x30
lea edi, [ecx + 0x1430]
jmp 0x384e3d00
mov eax, dword [edi]
or eax, 0x20202020
cmp eax, 0x65646573
ja 0x384e3e35
je 0x384e3df5
cmp eax, 0x25766172
je 0x384e3db5
cmp eax, 0x2e707661
je 0x384e3d75
cmp eax, 0x37323323
jne 0x384e3ef4
cmp dword [ebp - 0x58], 0
jne 0x384e3ef4
push 0x200
push esi
lea eax, [ecx + 0x1400]
push eax
push 6
lea eax, [ebp - 0xc]
push eax
push ecx
call fcn.384e3b50
mov ecx, dword [ebp - 0x4c]
add esp, 0x18
cmp eax, 1
jne 0x384e3ef4
add esi, 6
mov dword [ebp - 0x58], eax
add edi, 6
jmp 0x384e3ef3
cmp dword [ebp - 0x5c], 0
jne 0x384e3ef4
push 0x200
push esi
lea eax, [ecx + 0x1400]
push eax
push 4
lea eax, [ebp - 0x50]
push eax
push ecx
call fcn.384e3b50
mov ecx, dword [ebp - 0x4c]
add esp, 0x18
cmp eax, 1
jne 0x384e3ef4
add esi, 4
mov dword [ebp - 0x5c], eax
add edi, 4
jmp 0x384e3ef3
cmp dword [ebp - 0x60], 0
jne 0x384e3ef4
push 0x200
push esi
lea eax, [ecx + 0x1400]
push eax
push 4
lea eax, [ebp - 0x54]
push eax
push ecx
call fcn.384e3b50
mov ecx, dword [ebp - 0x4c]
add esp, 0x18
cmp eax, 1
jne 0x384e3ef4
add esi, 4
mov dword [ebp - 0x60], eax
add edi, 4
jmp 0x384e3ef3
cmp dword [ebp - 0x64], 0
jne 0x384e3ef4
push 0x200
push esi
lea eax, [ecx + 0x1400]
push eax
push 0x10
lea eax, [ebp - 0x30]
push eax
push ecx
call fcn.384e3b50
mov ecx, dword [ebp - 0x4c]
add esp, 0x18
cmp eax, 1
jne 0x384e3ef4
add esi, 0x10
mov dword [ebp - 0x64], eax
add edi, 0x10
jmp 0x384e3ef3
cmp eax, 0x66617274
je 0x384e3ec0
cmp eax, 0x696e7572
je 0x384e3e8b
cmp eax, 0x7078766b
jne 0x384e3ef4
cmp dword [ebp - 0x68], 0
jne 0x384e3ef4
push 0x200
push esi
lea eax, [ecx + 0x1400]
push eax
push 8
lea eax, [ebp - 0x14]
push eax
push ecx
call fcn.384e3b50
mov ecx, dword [ebp - 0x4c]
add esp, 0x18
cmp eax, 1
jne 0x384e3ef4
add esi, 8
mov dword [ebp - 0x68], eax
add edi, 8
jmp 0x384e3ef3
cmp dword [ebp - 0x6c], 0
jne 0x384e3ef4
push 0x200
push esi
lea eax, [ecx + 0x1400]
push eax
push 0xa
lea eax, [ebp - 0x20]
push eax
push ecx
call fcn.384e3b50
mov ecx, dword [ebp - 0x4c]
add esp, 0x18
cmp eax, 1
jne 0x384e3ef4
add esi, 0xa
mov dword [ebp - 0x6c], eax
add edi, 0xa
jmp 0x384e3ef3
cmp dword [ebp - 0x70], 0
jne 0x384e3ef4
push 0x200
push esi
lea eax, [ecx + 0x1400]
push eax
push 0x18
lea eax, [ebp - 0x48]
push eax
push ecx
call fcn.384e3b50
mov ecx, dword [ebp - 0x4c]
add esp, 0x18
cmp eax, 1
jne 0x384e3ef4
add esi, 0x18
mov dword [ebp - 0x70], eax
add edi, 0x18
inc ebx
inc esi
inc edi
cmp esi, 0x200
jb 0x384e3d00
pop edi
pop esi
cmp ebx, 3
jb 0x384e3f1d
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call 0x37ad9614
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
xor ecx, ebp
pop ebx
call 0x37ad9614
mov esp, ebp
pop ebp
ret