Function at 0x1003d3d7
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
push edi
mov dword [ebp - 8], 0
push 0x19
push 0
lea eax, [ebp - 0x24]
push eax
call fcn.100220b2
add esp, 0xc
mov ebx, ebx
xor eax, 0
jns 0x1003d3fe
cmp edx, dword [esp + 0xc]
jbe 0x1003d424
pushf
cmp edx, dword [esp]
jns 0x1003d40b
lea edx, [edx + 0x3abd]
lea edx, [edx - 0x3abd]
popf
xchg ebx, ebx
jge 0x1003d41d
xchg ecx, edi
xchg ecx, edi
ja 0x1003d424
mov edi, 0x44dc45c6
mov byte [ebp - 0x24], 0x44
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x69
mov byte [ebp - 0x15], 0x33
mov byte [ebp - 0x10], 0x74
mov byte [ebp - 0x23], 0x73
mov byte [ebp - 0x1e], 0x55
mov byte [ebp - 0x19], 0x66
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x69
mov byte [ebp - 0x22], 0x66
mov byte [ebp - 0x1d], 0x70
mov byte [ebp - 0x18], 0x6d
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xe], 0x70
lea ebx, [ebx]
test dword [esp + 4], ecx
jo 0x1003d46e
ja 0x1003d46a
jno 0x1003d46e
mov esi, 0xdf45c606
invalid
mov byte [ebp - 0x21], 0x62
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x62
mov byte [ebp - 0xd], 0x75
mov byte [ebp - 0x20], 0x75
mov byte [ebp - 0x1b], 0x6d
mov byte [ebp - 0x16], 0x34
mov byte [ebp - 0x11], 0x71
mov byte [ebp - 0xc], 0
mov cl, byte [ebp - 0x24]
sub cl, 1
mov byte [ebp - 0x24], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0x23]
sub al, 1
mov byte [ebp - 0x23], al
mov cl, byte [ebp - 0x1e]
sub cl, 1
mov byte [ebp - 0x1e], cl
mov dl, byte [ebp - 0x19]
sub dl, 1
mov byte [ebp - 0x19], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x22]
sub dl, 1
mov byte [ebp - 0x22], dl
mov al, byte [ebp - 0x1d]
sub al, 1
mov byte [ebp - 0x1d], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
cmp edx, 0x649
add ebx, 0
or edx, edx
test esp, 0x1eb
jae 0x1003d532
jns 0x1003d52d
jge 0x1003d52f
jb 0x1003d532
mov ecx, 0x80df4d8a
jmp 0xef515d3c
mov cl, byte [ebp - 0x21]
sub cl, 1
mov byte [ebp - 0x21], cl
mov dl, byte [ebp - 0x1c]
sub dl, 1
mov byte [ebp - 0x1c], dl
mov al, byte [ebp - 0x17]
sub al, 1
mov byte [ebp - 0x17], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0x20]
sub al, 1
mov byte [ebp - 0x20], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
cmp edi, dword [esp + 4]
xor ebx, dword [esp]
xor ebx, dword [esp]
push edx
add edx, 0x1f2b
ror edx, 0x1a
pop edx
jle 0x1003d5b6
pushf
cmp eax, 0x3c61
xchg ebx, edx
xchg ebx, edx
popf
nop
lea eax, [eax + 0x6fd8]
lea eax, [eax - 0x6fd8]
xchg esp, esp
jg 0x1003d5b6
mov edi, 0xfe75cbe8
dec dword [ecx + 0x7d83f845]
clc
add byte [ebp + 8], dh
call fcn.10024b86
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x1003d5cc
or eax, 0xffffffff
jmp 0x1003d650
test esp, 0x479d
js 0x1003d5ea
pushf
jb 0x1003d5d8
shr esp, 0
cmp edx, 0x4310
popf
jno 0x1003d5e5
js 0x1003d5e7
jns 0x1003d5ea
mov ecx, 0x51dc4d8d
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.10043d83
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x1003d605
or eax, 0xffffffff
jmp 0x1003d650
push 0x19
push 0
lea eax, [ebp - 0x24]
push eax
call fcn.100220b2
add esp, 0xc
xor edx, edi
xor edx, edi
jg 0x1003d61b
dec eax
inc eax
ror esp, 0
jnp 0x1003d629
jbe 0x1003d624
mov ecx, ecx
jp 0x1003d629
or dword [ebx - 0x17ae03b3], 0x21e0
mov ecx, dword [ebp - 4]
push ecx
call fcn.1003f812
add esp, 4
inc esi
dec esi
jae 0x1003d645
nop
xchg ebx, ecx
xchg ebx, ecx
jne 0x1003d640
jns 0x1003d642
jb 0x1003d645
mov edi, 0x520c558b
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8