Function at 0x1003d460
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008f148
mov eax, dword fs:[0]
push eax
sub esp, 0x614
mov eax, dword [0x100bc570]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.debug::modloader::usingmods::check
mov dword [ebp - 0x61c], 0
call fcn.100407f0
add esp, 4
lea eax, [ebp - 0x110]
push 0x100
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
mov dword [ebp - 0x494], 0
movups xmmword [ebp - 0x4a4], xmm0
mov dword [ebp - 0x490], 0xf
mov byte [ebp - 0x4a4], 0
mov byte [ebp - 0x434], 0x70
xor ecx, ecx
mov byte [ebp - 0x433], 0x7d
mov byte [ebp - 0x432], 0x6a
mov byte [ebp - 0x431], 0x68
mov byte [ebp - 0x430], 0x7c
mov byte [ebp - 0x42f], 0x6a
mov byte [ebp - 0x42e], 0x37
mov byte [ebp - 0x42d], 0x6e
mov byte [ebp - 0x42c], 0x81
mov byte [ebp - 0x42b], 0x6e
mov byte [ebp - 0x42a], 0
mov al, byte [ebp - 0x434]
mov dword [ebp - 4], 0
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x434]
sub al, 9
mov byte [ebp + ecx - 0x434], al
inc ecx
cmp ecx, 0xa
jb 0x1003d540
xorps xmm0, xmm0
mov dword [ebp - 0x47c], 0
lea ecx, [ebp - 0x434]
mov dword [ebp - 0x478], 0
movups xmmword [ebp - 0x48c], xmm0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d580
sub ecx, edx
lea eax, [ebp - 0x434]
push ecx
push eax
lea ecx, [ebp - 0x48c]
call fcn.100049e0
lea eax, [ebp - 0x4a4]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x48c]
xorps xmm0, xmm0
push eax
sub esp, 0x18
lea ecx, [ebp - 0x110]
mov edx, esp
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d5d0
sub ecx, esi
lea eax, [ebp - 0x110]
push ecx
push eax
mov ecx, edx
call fcn.100049e0
lea eax, [ebp - 0x4bc]
push eax
call fcn.10062860
add esp, 0x24
mov ecx, dword [ebp - 0x478]
mov byte [ebp - 4], 3
cmp ecx, 0x10
jb 0x1003d635
mov edx, dword [ebp - 0x48c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003d62b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003df61
push ecx
push edx
call fcn.10064ac2
add esp, 8
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x478], 0xf
mov byte [ebp - 0x48c], 0
mov ecx, dword [ebp - 0x490]
mov byte [ebp - 4], 4
cmp ecx, 0x10
jb 0x1003d68e
mov edx, dword [ebp - 0x4a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003d684
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003df61
push ecx
push edx
call fcn.10064ac2
add esp, 8
mov dword [ebp - 0x494], 0
xor edx, edx
mov dword [ebp - 0x490], 0xf
mov byte [ebp - 0x4a4], 0
mov dword [ebp - 0x444], 0x1b
mov byte [ebp - 0x440], 0x3e
mov byte [ebp - 0x43f], 0x68
mov byte [ebp - 0x43e], 0x76
mov byte [ebp - 0x43d], 0x74
mov byte [ebp - 0x43c], 0x7f
mov byte [ebp - 0x43b], 0x77
mov byte [ebp - 0x43a], 0x74
mov byte [ebp - 0x439], 0x7a
mov byte [ebp - 0x438], 0x7f
mov byte [ebp - 0x437], 0x7e
mov byte [ebp - 0x436], 0x69
mov al, byte [ebp - 0x440]
mov byte [ebp - 0x435], 0
nop
mov al, byte [ebp + edx - 0x440]
mov ecx, dword [ebp - 0x444]
xor cl, al
mov byte [ebp + edx - 0x440], cl
inc edx
cmp edx, 0xb
jb 0x1003d710
movups xmm0, xmmword [ebp - 0x4bc]
sub esp, 0x18
mov byte [ebp - 0x435], 0
mov eax, esp
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x4ac]
movq qword [eax + 0x10], xmm0
lea eax, [ebp - 0x440]
push eax
lea eax, [ebp - 0x418]
push eax
call fcn.1000f5b0
lea eax, [ebp - 0x418]
push eax
call fcn.10061e70
add esp, 0x24
test eax, eax
je 0x1003df11
mov dword [ebp - 0x428], 0x39
mov eax, dword [ebp - 0x428]
xor al, 0x6d
mov byte [ebp - 0x424], al
mov eax, dword [ebp - 0x428]
inc al
xor al, 0x6f
mov byte [ebp - 0x423], al
mov eax, dword [ebp - 0x428]
add al, 2
xor al, 0x64
mov byte [ebp - 0x422], al
mov eax, dword [ebp - 0x428]
add al, 3
xor al, 0x6c
mov byte [ebp - 0x421], al
mov eax, dword [ebp - 0x428]
add al, 4
xor al, 0x6f
mov byte [ebp - 0x420], al
mov eax, dword [ebp - 0x428]
add al, 5
xor al, 0x61
mov byte [ebp - 0x41f], al
mov eax, dword [ebp - 0x428]
add al, 6
xor al, 0x64
mov byte [ebp - 0x41e], al
mov eax, dword [ebp - 0x428]
add al, 7
xor al, 0x65
mov byte [ebp - 0x41d], al
mov eax, dword [ebp - 0x428]
add al, 8
xor al, 0x72
mov byte [ebp - 0x41c], al
mov eax, dword [ebp - 0x428]
add al, 9
mov byte [ebp - 0x41a], 0
xor al, 0x5c
xor edx, edx
mov byte [ebp - 0x41b], al
mov al, byte [ebp - 0x424]
mov al, byte [ebp + edx - 0x424]
mov ecx, dword [ebp - 0x428]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x424], cl
inc edx
cmp edx, 0xa
jb 0x1003d830
lea ecx, [ebp - 0x424]
mov byte [ebp - 0x41a], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d860
sub ecx, edx
mov eax, 0x7fffffff
mov edx, dword [ebp - 0x4ac]
sub eax, edx
cmp eax, ecx
jb 0x1003df66
cmp dword [ebp - 0x4a8], 0x10
lea eax, [ebp - 0x4bc]
push ecx
cmovae eax, dword [ebp - 0x4bc]
lea ecx, [ebp - 0x424]
push ecx
push edx
push eax
lea eax, [ebp - 0x4bc]
push eax
push dword [ebp - 0x61c]
lea ecx, [ebp - 0x534]
call fcn.1000fce0
mov eax, 0x80
mov dword [ebp - 0x618], eax
lea eax, [ebp - 0x534]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x4d4]
call fcn.10035110
push 0
lea eax, [ebp - 0x4d4]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x5dc]
call fcn.10037cc0
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 8
call fcn.100109c0
lea eax, [ebp - 0x5dc]
push eax
lea ecx, [ebp - 0x58c]
call fcn.10037c20
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x614]
push eax
call fcn.1004d270
add esp, 8
mov byte [ebp - 4], 0xa
nop dword [eax + eax]
mov eax, dword [ebp - 0x614]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x58c]
mov ecx, dword [ecx + 8]
mov eax, dword [eax]
mov eax, dword [eax + 8]
test eax, eax
je 0x1003d954
test ecx, ecx
je 0x1003d95c
mov eax, dword [eax]
cmp eax, dword [ecx]
jmp 0x1003d956
test ecx, ecx
je 0x1003de8e
cmp dword [ebp - 0x570], 8
lea ecx, [ebp - 0x620]
lea eax, [ebp - 0x584]
cmovae eax, dword [ebp - 0x584]
push ecx
push eax
call fcn.1006455d
add esp, 8
cmp eax, 1
jne 0x1003de7e
xorps xmm0, xmm0
mov dword [ebp - 0x4dc], 0
movups xmmword [ebp - 0x4ec], xmm0
mov dword [ebp - 0x4d8], 0xf
mov byte [ebp - 0x4ec], 0
cmp dword [ebp - 0x570], 8
lea ecx, [ebp - 0x214]
lea eax, [ebp - 0x584]
mov byte [ebp - 4], 0xb
cmovae eax, dword [ebp - 0x584]
push ecx
push eax
call fcn.100645ed
add esp, 8
test eax, eax
je 0x1003df6b
lea ecx, [ebp - 0x214]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003d9e7
sub ecx, edx
lea eax, [ebp - 0x214]
push ecx
push eax
lea ecx, [ebp - 0x4ec]
call fcn.1001f500
mov dword [ebp - 0x464], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x474], xmm0
mov dword [ebp - 0x460], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x474], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x464], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov eax, dword [ebp - 0x618]
mov ecx, dword [ebp - 0x4d8]
or eax, 0x40
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x61c], eax
mov byte [ebp - 4], 0xa
cmp ecx, 0x10
jb 0x1003daa2
mov edx, dword [ebp - 0x4ec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003da92
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003df61
push ecx
push edx
call fcn.10064ac2
mov eax, dword [ebp - 0x618]
add esp, 8
mov ecx, dword [ebp - 0x574]
xorps xmm0, xmm0
test ecx, ecx
jne 0x1003dadb
movups xmmword [ebp - 0x504], xmm0
mov dword [ebp - 0x4f4], ecx
mov dword [ebp - 0x4f0], 7
mov word [ebp - 0x504], cx
lea ecx, [ebp - 0x504]
or eax, 2
jmp 0x1003db6b
lea eax, [ebp - 0x584]
mov dword [ebp - 0x540], 0
mov dword [ebp - 0x554], eax
xor eax, eax
movups xmmword [ebp - 0x550], xmm0
mov dword [ebp - 0x53c], 7
mov word [ebp - 0x550], ax
mov dword [ebp - 0x538], ecx
lea ecx, [ebp - 0x554]
mov dword [ebp - 4], 0xe
call fcn.100467b0
mov eax, dword [ebp - 0x618]
or eax, 0x20
or eax, 4
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x554]
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x61c], eax
call fcn.10039910
add eax, 4
lea ecx, [ebp - 0x5a4]
push eax
call fcn.1000fd80
mov eax, dword [ebp - 0x618]
lea ecx, [ebp - 0x5a4]
or eax, 8
movups xmm0, xmmword [ecx]
xor edx, edx
or eax, 0x10
movups xmmword [ebp - 0x4d4], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x4c4], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], dx
mov dword [ebp - 0x618], eax
test al, 8
je 0x1003dbbc
and eax, 0xfffffff7
lea ecx, [ebp - 0x5a4]
mov dword [ebp - 0x618], eax
call fcn.100109c0
mov eax, dword [ebp - 0x618]
test al, 4
je 0x1003dbda
and eax, 0xfffffffb
lea ecx, [ebp - 0x554]
mov dword [ebp - 0x618], eax
call fcn.10038030
mov eax, dword [ebp - 0x618]
mov dword [ebp - 4], 0xc
test al, 2
je 0x1003dc2e
mov ecx, dword [ebp - 0x4f0]
and eax, 0xfffffffd
mov dword [ebp - 0x618], eax
cmp ecx, 8
jb 0x1003dc2e
mov edx, dword [ebp - 0x504]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1003dc24
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003df61
push ecx
push edx
call fcn.10064ac2
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0x50c], 0
movups xmmword [ebp - 0x51c], xmm0
mov dword [ebp - 0x508], 0xf
mov byte [ebp - 0x51c], 0
cmp dword [ebp - 0x4c0], 8
lea ecx, [ebp - 0x318]
lea eax, [ebp - 0x4d4]
mov byte [ebp - 4], 0x11
cmovae eax, dword [ebp - 0x4d4]
push ecx
push eax
call fcn.100645ed
add esp, 8
test eax, eax
je 0x1003df6b
lea ecx, [ebp - 0x318]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1003dc90
sub ecx, edx
lea eax, [ebp - 0x318]
push ecx
push eax
lea ecx, [ebp - 0x51c]
call fcn.1001f500
mov dword [ebp - 0x44c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x45c], xmm0
mov dword [ebp - 0x448], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x45c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x44c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
or dword [ebp - 0x618], 1
mov ecx, dword [ebp - 0x508]
mov byte [ebp - 4], 0x10
cmp ecx, 0x10
jb 0x1003dd37
mov edx, dword [ebp - 0x51c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003dd2d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003df61
push ecx
push edx
call fcn.10064ac2
add esp, 8
mov ecx, dword [ebp - 0x4c0]
mov byte [ebp - 4], 0xc
cmp ecx, 8
jb 0x1003dd7b
mov edx, dword [ebp - 0x4d4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1003dd71
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003df61
push ecx
push edx
call fcn.10064ac2
add esp, 8
xor esi, esi
nop dword [eax]
cmp dword [ebp - 0x448], 0x10
lea eax, [ebp - 0x45c]
push dword [esi + 0x100bbe38]
cmovae eax, dword [ebp - 0x45c]
push eax
call fcn.1006f5bf
add esp, 8
test eax, eax
jne 0x1003dde3
cmp dword [ebp - 0x460], 0x10
lea eax, [ebp - 0x474]
cmovae eax, dword [ebp - 0x474]
push eax
call fcn.10074d4f
cmp dword [ebp - 0x460], 0x10
lea eax, [ebp - 0x474]
cmovae eax, dword [ebp - 0x474]
push eax
push str.debug::modloader::usingmods::delete::_s
call fcn.100407f0
add esp, 0xc
add esi, 4
cmp esi, 0x44
jb 0x1003dd80
mov ecx, dword [ebp - 0x448]
cmp ecx, 0x10
jb 0x1003de25
mov edx, dword [ebp - 0x45c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003de1b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003df61
push ecx
push edx
call fcn.10064ac2
add esp, 8
mov ecx, dword [ebp - 0x460]
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0xf
mov byte [ebp - 0x45c], 0
mov byte [ebp - 4], 0xa
cmp ecx, 0x10
jb 0x1003de7e
mov edx, dword [ebp - 0x474]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003de74
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003df61
push ecx
push edx
call fcn.10064ac2
add esp, 8
lea ecx, [ebp - 0x58c]
call fcn.100395c0
jmp 0x1003d930
lea ecx, [ebp - 0x614]
call fcn.100384c0
lea ecx, [ebp - 0x58c]
call fcn.100384c0
lea ecx, [ebp - 0x5dc]
call fcn.100384c0
push str.debug::modloader::usingmods::end
call fcn.100407f0
mov ecx, dword [ebp - 0x520]
add esp, 4
cmp ecx, 0x10
jb 0x1003def6
mov edx, dword [ebp - 0x534]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003deec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003df75
push ecx
push edx
call fcn.10064ac2
add esp, 8
mov dword [ebp - 0x524], 0
mov dword [ebp - 0x520], 0xf
mov byte [ebp - 0x534], 0
mov ecx, dword [ebp - 0x4a8]
cmp ecx, 0x10
jb 0x1003df47
mov edx, dword [ebp - 0x4bc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003df3d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003df75
push ecx
push edx
call fcn.10064ac2
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10064a7b
mov esp, ebp
pop ebp
ret
call fcn.10069c71
call fcn.100053d0
push str.invalid_wchar_t_filename_argument
call fcn.1006393f
call fcn.10069c71
int3