Function at 0x10003341
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x48
mov eax, 0x1003999d
call fcn.10039093
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x28]
and dword [ebp - 0x54], 0
push 0x1004633c
mov dword [ebp - 0x2c], ebx
call fcn.100040a5
xor edx, edx
mov dword [ebp - 4], edx
mov esi, dword [0x100500a0]
test esi, esi
jne 0x10003384
mov dword [ebx + 0x14], 0xf
mov dword [ebx + 0x10], edx
mov byte [ebx], dl
jmp 0x10003a97
cmp byte [0x100500bb], dl
je 0x100033cd
mov ecx, 0x10b8134
call fcn.1000ba22
mov edi, eax
test edi, edi
je 0x100033cb
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push edi
call ebx
test eax, eax
jne 0x100033c8
push 4
add edi, 0xc88
push edi
call ebx
mov ebx, dword [ebp - 0x2c]
xor edx, edx
test eax, eax
jne 0x100033cd
mov ax, word [edi]
mov word [esi + 0x40], ax
jmp 0x100033cd
mov ebx, dword [ebp - 0x2c]
xor edx, edx
movzx eax, word [esi + 0x40]
cmp eax, 0x37
ja 0x1000374e
je 0x10003732
push 0x21
pop ecx
cmp eax, ecx
ja 0x100035d3
je 0x100035a0
cmp eax, 0x15
ja 0x1000350c
je 0x100034d4
sub eax, 1
je 0x100034b2
sub eax, 1
je 0x10003493
sub eax, 9
je 0x10003451
sub eax, 1
jne 0x10003a89
movaps xmm0, xmmword [0x10047640]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003430
mov byte [ebp - 0x3c], dl
lea ecx, [ebp - 0x4b]
call fcn.1000408d
push eax
lea eax, [ebp - 0x4b]
jmp 0x10003a80
mov cl, 0x3e
mov dword [ebp - 0x38], 0x4c5f753e
mov dword [ebp - 0x34], 0x7b1e4d4b
mov eax, edx
mov dword [ebp - 0x30], 0x505f524d
mov word [ebp - 0x2c], 0x4a
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000347f
mov cl, byte [ebp - 0x38]
jmp 0x10003470
mov byte [ebp - 0x2b], dl
lea ecx, [ebp - 0x37]
call fcn.1000408d
push eax
lea eax, [ebp - 0x37]
jmp 0x10003a80
movaps xmm0, xmmword [0x10047870]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x100034a3
jmp 0x1000343d
movaps xmm0, xmmword [0x100476f0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x100034c2
jmp 0x1000343d
mov cl, 0xe
mov dword [ebp - 0x34], 0x7c61430e
mov dword [ebp - 0x30], 0x60616a6f
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100034f8
mov cl, byte [ebp - 0x34]
jmp 0x100034e9
mov byte [ebp - 0x2c], dl
lea ecx, [ebp - 0x33]
call fcn.1000408d
push eax
lea eax, [ebp - 0x33]
jmp 0x10003a80
sub eax, 0x1e
je 0x1000356e
sub eax, 1
je 0x1000354a
sub eax, 1
jne 0x10003a89
movaps xmm0, xmmword [0x100475f0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0xe0e
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x11
jb 0x10003535
mov byte [ebp - 0x3a], dl
jmp 0x10003440
mov cl, 0x12
mov dword [ebp - 0x34], 0x743f4412
mov dword [ebp - 0x30], 0x66617d60
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100034f8
mov cl, byte [ebp - 0x34]
jmp 0x1000355f
mov cl, 0x3f
mov dword [ebp - 0x38], 0x535a7b3f
mov dword [ebp - 0x34], 0x7c1f4c50
mov eax, edx
mov dword [ebp - 0x30], 0x534b4c5e
mov word [ebp - 0x2c], 0x5a
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000347f
mov cl, byte [ebp - 0x38]
jmp 0x1000358d
mov byte [ebp - 0x34], cl
mov eax, edx
mov dword [ebp - 0x33], 0x4d4d4469
mov dword [ebp - 0x2f], 0x58436001
mov word [ebp - 0x2b], 0x5252
mov byte [ebp - 0x29], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 0xa
jae 0x100035cb
mov cl, byte [ebp - 0x34]
jmp 0x100035bc
mov byte [ebp - 0x29], dl
jmp 0x100034fb
sub eax, 0x22
je 0x10003707
sub eax, 1
je 0x100036e5
sub eax, 0xd
je 0x100036b2
sub eax, 3
je 0x10003680
sub eax, 1
je 0x1000365e
sub eax, 1
je 0x1000362c
sub eax, 1
jne 0x10003a89
movaps xmm0, xmmword [0x10047c90]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x1000361a
jmp 0x1000343d
mov cl, 0x2e
mov dword [ebp - 0x38], 0x4c41692e
mov dword [ebp - 0x34], 0xe404742
mov eax, edx
mov dword [ebp - 0x30], 0x404b5c6f
mov word [ebp - 0x2c], 0x4f
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000347f
mov cl, byte [ebp - 0x38]
jmp 0x1000364b
movaps xmm0, xmmword [0x10047cf0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x1000366e
jmp 0x1000343d
mov cl, 0x77
mov dword [ebp - 0x34], 0x14053877
mov dword [ebp - 0x30], 0x12053657
mov eax, edx
mov word [ebp - 0x2c], 0x1619
mov byte [ebp - 0x2a], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 9
jae 0x100036aa
mov cl, byte [ebp - 0x34]
jmp 0x1000369b
mov byte [ebp - 0x2a], dl
jmp 0x100034fb
mov cl, 0x7d
mov dword [ebp - 0x38], 0x91c3f7d
mov dword [ebp - 0x34], 0x1b181109
mov eax, edx
mov dword [ebp - 0x30], 0x19111814
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x100036dd
mov cl, byte [ebp - 0x38]
jmp 0x100036ce
mov byte [ebp - 0x2c], dl
jmp 0x10003482
movaps xmm0, xmmword [0x10047340]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x100036f2
mov byte [ebp - 0x29], dl
jmp 0x10003482
mov cl, 0x5f
mov dword [ebp - 0x38], 0x3e2d1b5f
mov dword [ebp - 0x34], 0x7f313038
mov eax, edx
mov dword [ebp - 0x30], 0x3a293e1c
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x100036dd
mov cl, byte [ebp - 0x38]
jmp 0x10003723
movaps xmm0, xmmword [str.F_r___f]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x1000373f
jmp 0x100036ff
cmp eax, 0x51
ja 0x10003906
je 0x100038da
cmp eax, 0x45
ja 0x10003848
je 0x10003819
sub eax, 0x3d
je 0x100037e7
sub eax, 1
je 0x100037c5
sub eax, 1
je 0x100037a6
sub eax, 1
jne 0x10003a89
movaps xmm0, xmmword [0x10047e60]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003794
jmp 0x1000343d
movaps xmm0, xmmword [0x10047360]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x100037b3
jmp 0x100036ff
movaps xmm0, xmmword [0x10047800]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x100037d5
jmp 0x1000343d
mov cl, 0x29
mov dword [ebp - 0x38], 0x59486729
mov dword [ebp - 0x34], 0x95a4c40
mov eax, edx
mov dword [ebp - 0x30], 0x4e5b466e
mov word [ebp - 0x2c], 0x4c
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000347f
mov cl, byte [ebp - 0x38]
jmp 0x10003806
mov cl, 0x60
mov dword [ebp - 0x34], 0xf0e3360
mov dword [ebp - 0x30], 0x1374017
mov eax, edx
mov word [ebp - 0x2c], 0x12
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 8
jae 0x10003840
mov cl, byte [ebp - 0x34]
jmp 0x10003831
mov byte [ebp - 0x2b], dl
jmp 0x100034fb
sub eax, 0x47
je 0x100038ab
sub eax, 1
je 0x10003883
sub eax, 1
jne 0x10003a89
movaps xmm0, xmmword [0x100481e0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x7a
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x10
jb 0x1000386e
mov byte [ebp - 0x3b], dl
jmp 0x10003440
mov cl, 0x76
mov dword [ebp - 0x34], 0x12043776
mov dword [ebp - 0x30], 0x1b171304
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100034f8
mov cl, byte [ebp - 0x34]
jmp 0x10003898
mov cl, 0x41
mov dword [ebp - 0x38], 0x2f2e1341
mov dword [ebp - 0x34], 0x612a3320
mov eax, edx
mov dword [ebp - 0x30], 0x252f200d
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x100036dd
mov cl, byte [ebp - 0x38]
jmp 0x100038c7
movaps xmm0, xmmword [0x10047a40]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x157c383d
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x13
jb 0x100038f1
mov byte [ebp - 0x3c], dl
jmp 0x10003a74
sub eax, 0x52
je 0x10003a4a
sub eax, 1
je 0x10003a1b
sub eax, 1
je 0x100039f5
sub eax, 3
je 0x100039cd
sub eax, 5
je 0x10003998
sub eax, 1
je 0x1000395f
sub eax, 1
jne 0x10003a89
movaps xmm0, xmmword [str._kHALCFB__rl_HCL]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xe
jb 0x1000394a
mov byte [ebp - 0x3d], dl
jmp 0x10003440
mov cl, 0x23
mov dword [ebp - 0x38], 0x4a506a23
mov dword [ebp - 0x34], 0x4d4c4c4f
mov eax, edx
mov dword [ebp - 0x30], 0x46516203
mov word [ebp - 0x2c], 0x424d
mov byte [ebp - 0x2a], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xd
jae 0x10003990
mov cl, byte [ebp - 0x38]
jmp 0x10003981
mov byte [ebp - 0x2a], dl
jmp 0x10003482
mov cl, 0x35
mov dword [ebp - 0x30], 0x5c476535
mov dword [ebp - 0x2c], 0x5b5a46
mov eax, edx
xor byte [ebp + eax - 0x2f], cl
inc eax
cmp eax, 6
jae 0x100039b9
mov cl, byte [ebp - 0x30]
jmp 0x100039aa
lea ecx, [ebp - 0x2f]
mov byte [ebp - 0x29], dl
call fcn.1000408d
push eax
lea eax, [ebp - 0x2f]
jmp 0x10003a80
movaps xmm0, xmmword [0x100478b0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x256
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x11
jb 0x100039e3
jmp 0x10003542
movaps xmm0, xmmword [0x10047d60]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x110234
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x12
jb 0x10003a09
mov byte [ebp - 0x3d], dl
jmp 0x10003a74
movaps xmm0, xmmword [0x10047e20]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x761f5b5e
mov word [ebp - 0x3c], 0x7676
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x15
jb 0x10003a38
mov byte [ebp - 0x3a], dl
jmp 0x10003a74
movaps xmm0, xmmword [0x10048440]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x422b6f6a
mov word [ebp - 0x3c], 0x42
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x14
jb 0x10003a64
mov byte [ebp - 0x3b], dl
lea ecx, [ebp - 0x4f]
call fcn.1000408d
push eax
lea eax, [ebp - 0x4f]
push eax
lea ecx, [ebp - 0x28]
call fcn.1000401e
and dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.10003b15
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.10003f51
mov eax, ebx
call fcn.1003903d
ret 4