Function at 0x100351e0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
mov esi, ecx
push edi
mov edi, dword [esi]
test edi, edi
je 0x1003520a
push 4
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003520a
mov ecx, edi
call dword [0x100ad8a0]
mov edi, eax
jmp 0x1003520c
xor edi, edi
mov ebx, dword [esi]
test ebx, ebx
je 0x1003522b
push 4
push ebx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1003522b
or edi, 0x20
mov ecx, ebx
push edi
call dword [0x100ad8a4]
mov byte [ebp - 0x14], 0x64
mov al, 6
xor al, byte [ebp - 0x14]
mov dl, 0xa
mov byte [ebp - 0x13], al
mov dh, 0xb
mov al, byte [ebp - 0x14]
mov cl, 0x10
xor dl, al
mov byte [ebp - 0xa], 0
xor dh, al
mov byte [ebp - 0x11], dl
mov byte [ebp - 0xd], dh
xor cl, al
mov bl, 0x3b
mov byte [ebp - 1], 1
xor bl, al
mov byte [ebp - 0x12], cl
mov ah, 7
mov byte [ebp - 0x10], bl
xor ah, al
mov byte [ebp - 0xa], 0
mov ch, 8
mov byte [ebp - 0xf], ah
xor ch, al
mov bh, 0x17
xor bh, al
mov byte [ebp - 0xe], ch
mov al, byte [ebp - 1]
sub esp, 0x18
xor al, byte [ebp - 0x14]
mov edx, esp
mov byte [ebp - 0xc], bh
mov byte [ebp - 0xb], al
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x100352ab
mov eax, dword [edx]
jmp 0x100352ad
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x13], 0
jne 0x100352ba
xor ecx, ecx
jmp 0x100352c9
lea ecx, [ebp - 0x13]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100352c0
sub ecx, edi
push ecx
lea eax, [ebp - 0x13]
mov ecx, edx
push eax
call fcn.10004a40
mov ecx, dword [esi]
call fcn.10014550
add esp, 0x18
mov dword [esi + 4], eax
mov cl, 0x3f
mov dword [ebp - 0x18], 0x514b5d3f
mov dword [ebp - 0x14], 0x4d5e4860
xor eax, eax
mov dword [ebp - 0x10], 0x4d50564d
mov byte [ebp - 0xc], 0
nop
xor byte [ebp + eax - 0x17], cl
inc eax
cmp eax, 0xb
jae 0x1003530f
mov cl, byte [ebp - 0x18]
jmp 0x10035300
sub esp, 0x18
mov byte [ebp - 0xc], 0
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x1003533e
mov eax, dword [edx]
jmp 0x10035340
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x17], 0
jne 0x1003534d
xor ecx, ecx
jmp 0x1003535c
lea ecx, [ebp - 0x17]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035353
sub ecx, edi
push ecx
lea eax, [ebp - 0x17]
mov ecx, edx
push eax
call fcn.10004a40
mov ecx, dword [esi]
call fcn.10014550
mov dword [esi + 8], eax
mov dl, 0x52
mov byte [ebp - 0x14], 0x3c
mov al, 0x5e
xor al, byte [ebp - 0x14]
mov dh, 0x5b
mov byte [ebp - 0x13], al
mov cl, 0x48
mov al, byte [ebp - 0x14]
mov bl, 0x63
xor dl, al
mov byte [ebp - 0xa], 0
xor dh, al
mov byte [ebp - 0x11], dl
mov byte [ebp - 0xd], dh
xor cl, al
xor bl, al
mov byte [ebp - 1], 0x59
mov edx, esp
mov byte [ebp - 0x12], cl
mov ah, 0x4e
mov byte [ebp - 0x10], bl
xor ah, al
mov byte [ebp - 0xa], 0
mov ch, 0x53
mov byte [ebp - 0xf], ah
xor ch, al
mov bh, 0x49
xor bh, al
mov byte [ebp - 0xe], ch
mov al, byte [ebp - 1]
xor al, byte [ebp - 0x14]
mov byte [ebp - 0xc], bh
mov byte [ebp - 0xb], al
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x100353ef
mov eax, dword [edx]
jmp 0x100353f1
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x13], 0
jne 0x100353fe
xor ecx, ecx
jmp 0x1003540d
lea ecx, [ebp - 0x13]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035404
sub ecx, edi
push ecx
lea eax, [ebp - 0x13]
mov ecx, edx
push eax
call fcn.10004a40
mov ecx, dword [esi]
call fcn.10014550
mov dword [esi + 0xc], eax
mov dl, 0xe
mov byte [ebp - 0x14], 0x60
mov al, 2
xor al, byte [ebp - 0x14]
mov dh, 7
mov byte [ebp - 0x13], al
mov cl, 0x14
mov al, byte [ebp - 0x14]
mov bl, 0x3f
xor dl, al
mov byte [ebp - 0xb], 0
mov byte [ebp - 0x11], dl
xor dh, al
mov byte [ebp - 0xd], dh
mov ah, 0xd
mov edx, esp
mov byte [ebp - 0xb], 0
mov ch, 1
mov bh, 5
xor cl, al
xor bl, al
mov byte [ebp - 0x12], cl
xor ah, al
mov byte [ebp - 0x10], bl
xor ch, al
mov byte [ebp - 0xf], ah
xor bh, al
mov byte [ebp - 0xe], ch
mov byte [ebp - 0xc], bh
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x10035493
mov eax, dword [edx]
jmp 0x10035495
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x13], 0
jne 0x100354a2
xor ecx, ecx
jmp 0x100354b1
lea ecx, [ebp - 0x13]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100354a8
sub ecx, edi
push ecx
lea eax, [ebp - 0x13]
mov ecx, edx
push eax
call fcn.10004a40
mov ecx, dword [esi]
call fcn.10014550
mov dword [esi + 0x10], eax
mov cl, 0x1a
mov byte [ebp - 0x14], 0x6e
mov al, 0xc
xor al, byte [ebp - 0x14]
xor dl, dl
mov byte [ebp - 0x13], al
mov dh, 7
mov byte [ebp - 2], cl
mov bl, 0x31
xor cl, byte [ebp - 0x14]
mov ah, 0x1e
mov byte [ebp - 9], dl
mov ch, 0x1c
mov byte [ebp - 0x12], cl
mov bh, 0xb
mov cl, byte [ebp - 0x14]
mov byte [ebp - 1], 0x1d
xor dl, cl
mov al, byte [ebp - 1]
xor dh, cl
mov byte [ebp - 0x11], dl
xor al, cl
mov byte [ebp - 0xb], al
xor bl, cl
mov al, byte [ebp - 2]
xor ah, cl
mov byte [ebp - 0xd], dh
xor ch, cl
mov edx, esp
mov byte [ebp - 0x10], bl
mov byte [ebp - 0xf], ah
xor bh, cl
mov byte [ebp - 0xe], ch
xor al, cl
mov byte [ebp - 0xc], bh
mov byte [ebp - 0xa], al
mov byte [ebp - 9], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x1003554e
mov eax, dword [edx]
jmp 0x10035550
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x13], 0
jne 0x1003555d
xor ecx, ecx
jmp 0x1003556c
lea ecx, [ebp - 0x13]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035563
sub ecx, edi
push ecx
lea eax, [ebp - 0x13]
mov ecx, edx
push eax
call fcn.10004a40
mov ecx, dword [esi]
call fcn.10014550
movaps xmm0, xmmword [0x100afb20]
add esp, 0x18
mov dword [esi + 0x14], eax
xor ecx, ecx
movups xmmword [ebp - 0x1c], xmm0
mov dword [ebp - 0xc], 0x70787c
nop dword [eax]
mov al, byte [ebp - 0x1c]
xor byte [ebp + ecx - 0x1b], al
inc ecx
cmp ecx, 0x12
jb 0x100355a0
sub esp, 0x18
mov byte [ebp - 9], 0
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x100355dc
mov eax, dword [edx]
jmp 0x100355de
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x1b], 0
jne 0x100355eb
xor ecx, ecx
jmp 0x100355fa
lea ecx, [ebp - 0x1b]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100355f1
sub ecx, edi
push ecx
lea eax, [ebp - 0x1b]
mov ecx, edx
push eax
call fcn.10004a40
mov ecx, dword [esi]
call fcn.10014550
movaps xmm0, xmmword [0x100af770]
add esp, 0x18
mov dword [esi + 0x18], eax
xor ecx, ecx
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x7368727e
mov word [ebp - 0xc], 0x69
nop dword [eax]
mov al, byte [ebp - 0x20]
xor byte [ebp + ecx - 0x1f], al
inc ecx
cmp ecx, 0x14
jb 0x10035630
sub esp, 0x18
mov byte [ebp - 0xb], 0
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x1003566c
mov eax, dword [edx]
jmp 0x1003566e
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x1f], 0
jne 0x1003567b
xor ecx, ecx
jmp 0x1003568a
lea ecx, [ebp - 0x1f]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035681
sub ecx, edi
push ecx
lea eax, [ebp - 0x1f]
mov ecx, edx
push eax
call fcn.10004a40
mov ecx, dword [esi]
call fcn.10014550
movaps xmm0, xmmword [0x100af1b0]
add esp, 0x18
mov dword [esi + 0x1c], eax
xor ecx, ecx
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0xc3003
mov dword [ebp - 0xc], 0x1b011a
nop
mov al, byte [ebp - 0x20]
xor byte [ebp + ecx - 0x1f], al
inc ecx
cmp ecx, 0x16
jb 0x100356c0
sub esp, 0x18
mov byte [ebp - 9], 0
mov edx, esp
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x1f], 0
jne 0x100356f1
xor ecx, ecx
jmp 0x10035700
lea ecx, [ebp - 0x1f]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100356f7
sub ecx, edi
push ecx
lea eax, [ebp - 0x1f]
mov ecx, edx
push eax
call fcn.10004a40
mov ecx, dword [esi]
call fcn.10014550
add esp, 0x18
mov dword [esi + 0x20], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret