Function at 0x3f224f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c0
push ebx
push esi
push edi
jmp 0x3f2757
mov byte [ebp - 0x78], cl
sub edx, dword [ebp - 0x78]
neg eax
lea edx, [ecx + 0xb5]
mov word [ebp - 0x78], 0x97
mov edx, 0xbb
mov word [ebp - 0x34], 0x42
mov ecx, edx
mov ax, word [ebp - 0x34]
mov edx, ecx
sub cl, byte [ebp - 0x34]
jmp 0x3f2419
mov byte [ebp - 0x104], ch
lea edx, [eax*2 + 0x7c]
mov ch, ch
xor ax, 0x5b
mov dx, word [ebp - 0x104]
mov word [ebp - 0x104], si
push dword [section..data]
call dword [ebp - 0x84]
mov dword [ebp - 0x194], eax
jmp 0x3f28b6
lea eax, [ebp - 0x74]
rcl cx, 0xa
lea eax, [edx]
mov word [ebp - 0xc4], 0xbf
sub dword [ebp - 0xc4], edx
or dx, 0xb1
mul al
lea edx, [eax + esi*2 + 0x22]
lea eax, [ecx]
mov byte [ebp - 0xc0], dh
mul byte [ebp - 0x120]
sub al, 0xe1
mul dl
lea esi, [eax + edx*2 + 0xcf]
mov word [ebp - 0x54], si
sub bh, 0xfe
lea ecx, [eax*2 + 0xfa]
not dword [ebp - 0x54]
mov esi, 0x5c
mul byte [ebp - 0x100]
mov al, dl
rcr dword [ebp - 0x170], 7
lea esi, [edi + 0xe0]
lea edx, [ebp - 0x170]
shl byte [ebp - 0x170], 5
push dword [ebp - 0x1b0]
jmp 0x3f2b98
xor cl, byte [ebp - 0x14]
mov byte [ebp - 0x14], 0xe3
mov cx, cx
lea edx, [eax + 0xb3]
lea edi, [ecx + edi*2 + 0xfb]
sub si, word [ebp - 0x4c]
mov si, di
mov ecx, 0x21
mov byte [ebp - 0x4c], 0x17
shr byte [ebp - 0x4c], 3
jmp 0x3f25e1
mov word [ebp - 0xfc], 0x3e
add bl, cl
push dword [0x3f4018]
jmp 0x3f23b2
sub word [ebp - 0x1ac], dx
mov ecx, dword [ebp - 0x1ac]
mov word [ebp - 0x1ac], cx
mov di, word [ebp - 0x1ac]
mul word [ebp - 0x1ac]
lea edi, [edi]
lea ecx, [eax + edi*2 + 0x34]
mov dh, byte [ebp - 0x48]
mov dl, 0xce
lea ecx, [ebp - 0x48]
mov dh, 0x6f
sub al, byte [ebp - 0x98]
lea ecx, [edi*2 + 0xd0]
mov dword [ebp - 0x98], 0x5e
add edx, 0xa9
sub byte [ebp - 0x98], 0x9c
sub ecx, ecx
lea eax, [ebp - 0x180]
lea eax, [edx + 0x2a]
mov cx, 0x82
mov dword [ebp - 0x180], edi
mov cl, al
shr byte [ebp - 0xf8], 3
lea edi, [esi*2 + 0x22]
lea ecx, [ecx + 0xef]
lea ecx, [ecx + 0xc5]
mov byte [ebp - 0x94], ah
lea eax, [ebp - 0x94]
mul dx
mov dword [ebp - 0x94], edi
call fcn.003f1757
jmp 0x3f2c2a
mov byte [ebp - 0x134], 0x65
mov byte [ebp - 0xdf], 0x69
lea eax, [ebp - 0x24]
mov dword [ebp - 0x1b0], eax
mov byte [ebp - 0x12e], 0x6c
mov byte [ebp - 0x136], 0x72
mov byte [ebp - 0x12d], 0x6c
mov byte [ebp - 0xda], 0x6c
mov byte [ebp - 0x135], 0x6e
mov byte [ebp - 0xd3], 0x74
mov byte [ebp - 0xd7], 0x6f
mov byte [ebp - 0xdb], 0x61
mov byte [ebp - 0x132], 0x33
mov byte [ebp - 0xd9], 0x50
mov byte [ebp - 0xd6], 0x74
mov byte [ebp - 0x12c], 0
mov byte [ebp - 0xd5], 0x65
mov byte [ebp - 0xe0], 0x56
mov byte [ebp - 0x130], 0x2e
mov byte [ebp - 0x12f], 0x64
mov byte [ebp - 0x138], 0x6b
mov byte [ebp - 0xd4], 0x63
mov byte [ebp - 0xd2], 0
mov byte [ebp - 0x131], 0x32
mov byte [ebp - 0x137], 0x65
mov byte [ebp - 0x133], 0x6c
mov byte [ebp - 0xd8], 0x72
mov byte [ebp - 0xde], 0x72
mov byte [ebp - 0xdd], 0x74
mov byte [ebp - 0xdc], 0x75
lea ecx, [ebp - 0x138]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x28], eax
lea eax, [esi*2 + 0x40]
xchg byte [ebp - 0x118], bh
lea eax, [ecx]
lea edx, [ecx*2 + 0xda]
mul dh
lea ecx, [esi*2 + 0x37]
mul dword [ebp - 0xf4]
mul dx
lea edx, [eax]
lea edx, [ebp - 0x1a8]
or ax, ax
mov edi, dword [ebp - 0x1a8]
lea eax, [ebp - 0x1a8]
imul esi
shr byte [ebp - 0x1c0], 2
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1c0], 0xc8
lea edi, [ecx*2 + 0x84]
mul ch
lea edx, [ebp - 0xe8]
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0xe8], 0x80
mov ecx, eax
jmp 0x3f29c2
mov byte [ebp - 0x15c], ah
or byte [ebp - 0x15c], al
mul si
mov byte [ebp - 0x15c], cl
or dword [ebp - 0x15c], ecx
mov word [ebp - 0x15c], 0x83
mul word [ebp - 0x90]
mul byte [ebp - 0x90]
mov word [ebp - 0xb8], 0x62
mov byte [ebp - 0xb8], 0xf7
lea edx, [edx]
mov word [ebp - 0x114], 0xb9
mov cx, 0xe
lea edx, [edx]
mov di, word [ebp - 0xc]
sub esi, dword [ebp - 0xc]
lea edi, [edx]
mov dword [ebp - 0xe4], eax
mov byte [ebp - 0xe4], 0x6c
shr ch, 2
cmp dword [ebp - 0x194], 0
jne 0x3f292f
jmp 0x3f2c2a
jmp 0x3f26ac
lea edx, [ebp - 0xe0]
push edx
mov eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x84], eax
jmp 0x3f2451
lea eax, [esi]
mul edi
lea esi, [edx*2 + 0xd9]
lea eax, [ebp - 0xac]
neg edi
mov byte [ebp - 0x198], al
imul si
mul ax
mul dword [ebp - 0x198]
add si, cx
mov ax, ax
xchg byte [ebp - 0x178], cl
lea edi, [esi*2 + 0x2a]
inc edx
mov byte [ebp - 0x64], 0x22
mul bl
mov dx, dx
mov dword [ebp - 0xec], eax
shl dword [ebp - 0xec], 0x19
mov si, 0x8e
lea edi, [ebp - 0xec]
lea edx, [ecx + 0xd6]
or byte [ebp - 0x60], 0x1d
lea esi, [eax + ecx*2 + 0xad]
mov byte [ebp - 0xa8], 0x20
lea eax, [ebp - 0xa8]
mov word [ebp - 0xa8], 0x76
lea edi, [esi + esi*2 + 0x73]
mul word [ebp - 0xa8]
push 0x40
jmp 0x3f2586
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret