Function at 0x100022fe
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 8
push 0x178
mov eax, 0x1003db55
call fcn.1003d83f
mov edi, ecx
mov dword [ebp - 0x140], edi
lea eax, [ebp - 0xe0]
push eax
call fcn.10039570
pop ecx
push 0
push 0x989680
push dword [eax + 4]
push dword [eax]
call fcn.1003cff0
mov dword [edi + 8], eax
mov dword [edi + 0xc], edx
cmp byte [edi], 0
je 0x100029f3
cmp dword [0x10057860], 0
je 0x10002a0a
mov cl, 0xf
mov dword [ebp - 0xd8], 0x63605c0f
mov word [ebp - 0xd4], 0x60
xor eax, eax
xor byte [ebp + eax - 0xd7], cl
inc eax
cmp eax, 4
jae 0x1000237d
mov cl, byte [ebp - 0xd8]
jmp 0x10002368
lea eax, [ebp - 0xd7]
mov byte [ebp - 0xd3], 0
push eax
lea ecx, [ebp - 0x2c]
call fcn.10003d99
xor edx, edx
mov dword [ebp - 4], edx
cmp byte [edi + 1], 1
jne 0x10002443
mov al, byte [edi + 3]
test al, al
jne 0x10002400
mov cl, 0x66
mov dword [ebp - 0xec], 0x14032b66
mov dword [ebp - 0xe8], 0x8070e05
mov eax, edx
mov word [ebp - 0xe4], 0x12
xor byte [ebp + eax - 0xeb], cl
inc eax
cmp eax, 8
jae 0x100023df
mov cl, byte [ebp - 0xec]
jmp 0x100023ca
lea ecx, [ebp - 0xeb]
mov byte [ebp - 0xe3], dl
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100023ee
lea eax, [ebp - 0xeb]
jmp 0x10002496
jle 0x10002443
movups xmm0, xmmword [str.pXOUSI]
mov ecx, edx
movups xmmword [ebp - 0x134], xmm0
mov al, byte [ebp - 0x134]
xor byte [ebp + ecx - 0x133], al
inc ecx
cmp ecx, 0xe
jb 0x10002412
lea ecx, [ebp - 0x133]
mov byte [ebp - 0x125], dl
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10002434
lea eax, [ebp - 0x133]
jmp 0x10002496
cmp byte [edi + 3], dl
jle 0x100024a2
mov cl, 0x73
mov dword [ebp - 0xe0], 0x1122373
mov word [ebp - 0xdc], 0xa07
mov eax, edx
mov byte [ebp - 0xda], dl
xor byte [ebp + eax - 0xdf], cl
inc eax
cmp eax, 5
jae 0x1000247a
mov cl, byte [ebp - 0xe0]
jmp 0x10002465
lea ecx, [ebp - 0xdf]
mov byte [ebp - 0xda], dl
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10002489
lea eax, [ebp - 0xdf]
sub ecx, edx
push ecx
push eax
lea ecx, [ebp - 0x2c]
call fcn.10003b04
cmp dword [ebp - 0x18], 0xf
lea eax, [ebp - 0x118]
lea esi, [ebp - 0x2c]
mov ecx, edi
cmova esi, dword [ebp - 0x2c]
push eax
call fcn.100031e1
mov byte [ebp - 4], 1
cmp dword [eax + 0x14], 0xf
jbe 0x100024c7
mov eax, dword [eax]
push esi
push eax
mov cl, 1
mov dword [ebp - 0xf8], 0x21722401
mov dword [ebp - 0xf4], 0x7224217d
xor eax, eax
mov byte [ebp - 0xf0], 0
xor byte [ebp + eax - 0xf7], cl
inc eax
cmp eax, 7
jae 0x100024fd
mov cl, byte [ebp - 0xf8]
jmp 0x100024e8
sub esp, 0x18
mov byte [ebp - 0xf0], 0
lea eax, [ebp - 0xf7]
mov ecx, esp
push eax
call fcn.10003d99
lea eax, [ebp - 0xbc]
push eax
call fcn.100039e2
add esp, 0x24
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 3
call fcn.10003b97
cmp byte [0x100578dc], 0
mov edi, dword [0x10057860]
je 0x10002577
mov ecx, 0x10b8134
call fcn.1000d24b
mov esi, eax
test esi, esi
je 0x10002577
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002577
push 4
add esi, 0x6e8
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10002577
mov al, byte [esi]
mov byte [edi + 0x3c], al
cmp byte [0x100578dc], 0
movzx ecx, byte [edi + 0x3c]
mov edi, dword [0x10057860]
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0xc0], edi
je 0x100025f6
mov ecx, 0x10b8134
call fcn.1000d24b
mov esi, eax
test esi, esi
je 0x100025f0
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100025f0
push 4
lea edi, [esi + 0x6bc]
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100025ea
cmp dword [esi + 0x6d0], 0x10
jb 0x100025d1
mov edi, dword [edi]
mov eax, dword [ebp - 0xc0]
add eax, 0x20
cmp dword [eax + 0x14], 0xf
jbe 0x100025e2
mov eax, dword [eax]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edi, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xfc]
lea eax, [edi + 0x20]
cmp dword [eax + 0x14], 0xf
jbe 0x10002601
mov eax, dword [eax]
movups xmm0, xmmword [0x1004d230]
push ecx
push eax
movups xmmword [ebp - 0x13c], xmm0
mov dword [ebp - 0x12c], 0xd4c4953
xor ecx, ecx
mov byte [ebp - 0x128], 0
mov al, byte [ebp - 0x13c]
xor byte [ebp + ecx - 0x13b], al
inc ecx
cmp ecx, 0x13
jb 0x10002624
sub esp, 0x18
mov byte [ebp - 0x128], 0
lea eax, [ebp - 0x13b]
mov ecx, esp
push eax
call fcn.10003d99
lea eax, [ebp - 0xa4]
push eax
call fcn.100039e2
add esp, 0x24
mov edi, dword [ebp - 0x140]
lea eax, [ebp - 0x118]
push eax
mov ecx, edi
mov byte [ebp - 4], 4
call fcn.10002a13
mov byte [ebp - 4], 5
cmp dword [eax + 0x14], 0xf
jbe 0x10002682
mov eax, dword [eax]
push eax
mov cl, 0x13
mov dword [ebp - 0xc4], 0x603613
xor eax, eax
xor byte [ebp + eax - 0xc3], cl
inc eax
cmp eax, 2
jae 0x100026a6
mov cl, byte [ebp - 0xc4]
jmp 0x10002691
sub esp, 0x18
mov byte [ebp - 0xc1], 0
lea eax, [ebp - 0xc3]
mov ecx, esp
push eax
call fcn.10003d99
lea eax, [ebp - 0x8c]
push eax
call fcn.100039e2
add esp, 0x20
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 7
call fcn.10003b97
lea eax, [ebp - 0x13c]
mov ecx, edi
push eax
call fcn.10002ca2
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 0xf
jbe 0x100026f6
mov eax, dword [eax]
push eax
mov cl, 0x45
mov dword [ebp - 0xc8], 0x366045
xor eax, eax
xor byte [ebp + eax - 0xc7], cl
inc eax
cmp eax, 2
jae 0x1000271a
mov cl, byte [ebp - 0xc8]
jmp 0x10002705
sub esp, 0x18
mov byte [ebp - 0xc5], 0
lea eax, [ebp - 0xc7]
mov ecx, esp
push eax
call fcn.10003d99
lea eax, [ebp - 0x74]
push eax
call fcn.100039e2
add esp, 0x20
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0xa
call fcn.10003b97
lea eax, [ebp - 0x118]
mov ecx, edi
push eax
call fcn.10002f21
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 0xf
jbe 0x10002767
mov eax, dword [eax]
push eax
mov cl, 0x6a
mov dword [ebp - 0xcc], 0x194f6a
xor eax, eax
xor byte [ebp + eax - 0xcb], cl
inc eax
cmp eax, 2
jae 0x1000278b
mov cl, byte [ebp - 0xcc]
jmp 0x10002776
sub esp, 0x18
mov byte [ebp - 0xc9], 0
lea eax, [ebp - 0xcb]
mov ecx, esp
push eax
call fcn.10003d99
lea eax, [ebp - 0x5c]
push eax
call fcn.100039e2
add esp, 0x20
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xd
call fcn.10003b97
lea eax, [ebp - 0x13c]
mov ecx, edi
push eax
call fcn.1000308c
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 0xf
jbe 0x100027d8
mov eax, dword [eax]
push eax
mov cl, 0x24
mov dword [ebp - 0xd0], 0x570124
xor eax, eax
xor byte [ebp + eax - 0xcf], cl
inc eax
cmp eax, 2
jae 0x100027fc
mov cl, byte [ebp - 0xd0]
jmp 0x100027e7
sub esp, 0x18
mov byte [ebp - 0xcd], 0
lea eax, [ebp - 0xcf]
mov ecx, esp
push eax
call fcn.10003d99
lea eax, [ebp - 0x44]
push eax
call fcn.100039e2
add esp, 0x20
lea ecx, [ebp - 0x13c]
call fcn.10003b97
mov ecx, dword [edi + 0xc]
lea eax, [ebp - 0xbc]
xor edx, edx
mov dword [ebp - 0x17c], ecx
cmp dword [ebp - 0xa8], 0xf
xorps xmm0, xmm0
push 0xf
cmova eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x90], 0xf
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0xa4]
cmova eax, dword [ebp - 0xa4]
mov dword [ebp - 0x184], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x180], eax
lea eax, [ebp - 0x8c]
pop ecx
cmp dword [ebp - 0x78], ecx
movlpd qword [ebp - 0x14c], xmm0
cmova eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x60], ecx
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x74]
cmova eax, dword [ebp - 0x74]
cmp dword [ebp - 0x48], ecx
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x5c]
cmova eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x30], ecx
mov ecx, edx
movlpd qword [ebp - 0x178], xmm0
movups xmm0, xmmword [0x1004d1d0]
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x44]
cmova eax, dword [ebp - 0x44]
movups xmmword [ebp - 0x124], xmm0
mov dword [ebp - 0x154], edx
movups xmm0, xmmword [0x1004cc70]
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x164], eax
movups xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0x104], 0x4744434b
mov word [ebp - 0x100], 0x45
mov al, byte [ebp - 0x124]
xor byte [ebp + ecx - 0x123], al
inc ecx
cmp ecx, 0x24
jb 0x1000290c
movups xmm0, xmmword [0x1004d8d0]
lea eax, [ebp - 0x123]
mov dword [ebp - 0x158], 8
mov dword [ebp - 0x160], eax
mov ecx, edx
movsx eax, byte [edi + 3]
mov dword [ebp - 0x15c], eax
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0x110], 0x7b404e61
mov dword [ebp - 0x10c], 0x597e596c
mov dword [ebp - 0x108], 0x597e596c
mov word [ebp - 0x104], 0x3429
mov byte [ebp - 0x102], dl
mov al, byte [ebp - 0x120]
xor byte [ebp + ecx - 0x11f], al
inc ecx
cmp ecx, 0x1d
jb 0x1000297c
lea eax, [ebp - 0x11f]
mov byte [ebp - 0x102], dl
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x150], eax
call fcn.10033080
lea ecx, [ebp - 0x44]
call fcn.10003b97
lea ecx, [ebp - 0x5c]
call fcn.10003b97
lea ecx, [ebp - 0x74]
call fcn.10003b97
lea ecx, [ebp - 0x8c]
call fcn.10003b97
lea ecx, [ebp - 0xa4]
call fcn.10003b97
lea ecx, [ebp - 0xbc]
call fcn.10003b97
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.10003b97
jmp 0x100029fa
xor ecx, ecx
call fcn.10033080
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1000233b
mov ecx, dword [ebp - 0x14]
call fcn.1003d81d
ret