Function at 0x100033f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x48
mov eax, 0x100720ed
call fcn.1003bfa0
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x28]
and dword [ebp - 0x54], 0
push 0x100847ef
mov dword [ebp - 0x2c], ebx
call fcn.10004179
xor edx, edx
mov dword [ebp - 4], edx
mov esi, dword [0x10099bc0]
test esi, esi
jne 0x10003433
mov dword [ebx + 0x14], 0xf
mov dword [ebx + 0x10], edx
mov byte [ebx], dl
jmp 0x10003b4b
cmp byte [0x10099bdb], dl
je 0x1000347c
mov ecx, 0x10b8134
call fcn.1000dfae
mov edi, eax
test edi, edi
je 0x1000347a
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push edi
call ebx
test eax, eax
jne 0x10003477
push 4
add edi, 0xc88
push edi
call ebx
mov ebx, dword [ebp - 0x2c]
xor edx, edx
test eax, eax
jne 0x1000347c
mov ax, word [edi]
mov word [esi + 0x40], ax
jmp 0x1000347c
mov ebx, dword [ebp - 0x2c]
xor edx, edx
movzx eax, word [esi + 0x40]
cmp eax, 0x37
ja 0x100037fe
je 0x100037e2
cmp eax, 0x21
ja 0x10003683
je 0x10003653
cmp eax, 0x15
ja 0x100035bf
je 0x10003585
sub eax, 1
je 0x10003563
sub eax, 1
je 0x10003544
sub eax, 9
je 0x10003500
sub eax, 1
jne 0x10003b3d
movaps xmm0, xmmword [0x1008a990]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x100034dd
mov byte [ebp - 0x3c], dl
lea eax, [ebp - 0x4b]
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0x4b]
jmp 0x10003b34
mov cl, 0x14
mov dword [ebp - 0x38], 0x66755f14
mov dword [ebp - 0x34], 0x51346761
mov eax, edx
mov dword [ebp - 0x30], 0x7a757867
mov word [ebp - 0x2c], 0x60
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000352e
mov cl, byte [ebp - 0x38]
jmp 0x1000351f
mov byte [ebp - 0x2b], dl
lea eax, [ebp - 0x37]
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0x37]
jmp 0x10003b34
movaps xmm0, xmmword [0x1008b280]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003554
jmp 0x100034ea
movaps xmm0, xmmword [0x1008b150]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003573
jmp 0x100034ea
mov cl, 0x13
mov dword [ebp - 0x34], 0x617c5e13
mov dword [ebp - 0x30], 0x7d7c7772
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100035a9
mov cl, byte [ebp - 0x34]
jmp 0x1000359a
mov byte [ebp - 0x2c], dl
lea eax, [ebp - 0x33]
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0x33]
jmp 0x10003b34
sub eax, 0x1e
je 0x10003621
sub eax, 1
je 0x100035fd
sub eax, 1
jne 0x10003b3d
movaps xmm0, xmmword [0x1008b0e0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x6464
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x11
jb 0x100035e8
mov byte [ebp - 0x3a], dl
jmp 0x100034ed
mov cl, 0x66
mov dword [ebp - 0x34], 0x4b3066
mov dword [ebp - 0x30], 0x12150914
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100035a9
mov cl, byte [ebp - 0x34]
jmp 0x10003612
mov cl, 0x2f
mov dword [ebp - 0x38], 0x434a6b2f
mov dword [ebp - 0x34], 0x6c0f5c40
mov eax, edx
mov dword [ebp - 0x30], 0x435b5c4e
mov word [ebp - 0x2c], 0x4a
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000352e
mov cl, byte [ebp - 0x38]
jmp 0x10003640
mov cl, 0x76
mov dword [ebp - 0x34], 0x1a133e76
mov dword [ebp - 0x30], 0x1437561a
mov eax, edx
mov dword [ebp - 0x2c], 0x5050f
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 0xa
jae 0x1000367b
mov cl, byte [ebp - 0x34]
jmp 0x1000366c
mov byte [ebp - 0x29], dl
jmp 0x100035ac
sub eax, 0x22
je 0x100037b7
sub eax, 1
je 0x10003795
sub eax, 0xd
je 0x10003762
sub eax, 3
je 0x10003730
sub eax, 1
je 0x1000370e
sub eax, 1
je 0x100036dc
sub eax, 1
jne 0x10003b3d
movaps xmm0, xmmword [0x1008a6e0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x100036ca
jmp 0x100034ea
mov cl, 0x56
mov dword [ebp - 0x38], 0x34391156
mov dword [ebp - 0x34], 0x76383f3a
mov eax, edx
mov dword [ebp - 0x30], 0x38332417
mov word [ebp - 0x2c], 0x37
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000352e
mov cl, byte [ebp - 0x38]
jmp 0x100036fb
movaps xmm0, xmmword [0x1008b120]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x1000371e
jmp 0x100034ea
mov cl, 0x5e
mov dword [ebp - 0x34], 0x3d2c115e
mov dword [ebp - 0x30], 0x3b2c1f7e
mov eax, edx
mov word [ebp - 0x2c], 0x3f30
mov byte [ebp - 0x2a], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 9
jae 0x1000375a
mov cl, byte [ebp - 0x34]
jmp 0x1000374b
mov byte [ebp - 0x2a], dl
jmp 0x100035ac
mov cl, 0x25
mov dword [ebp - 0x38], 0x51446725
mov dword [ebp - 0x34], 0x43404951
mov eax, edx
mov dword [ebp - 0x30], 0x4149404c
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x1000378d
mov cl, byte [ebp - 0x38]
jmp 0x1000377e
mov byte [ebp - 0x2c], dl
jmp 0x10003531
movaps xmm0, xmmword [str.6rSZYE]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x100037a2
mov byte [ebp - 0x29], dl
jmp 0x10003531
mov cl, 0x6a
mov dword [ebp - 0x38], 0xb182e6a
mov dword [ebp - 0x34], 0x4a04050d
mov eax, edx
mov dword [ebp - 0x30], 0xf1c0b29
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x1000378d
mov cl, byte [ebp - 0x38]
jmp 0x100037d3
movaps xmm0, xmmword [0x1008a190]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x100037ef
jmp 0x100037af
cmp eax, 0x51
ja 0x100039b6
je 0x1000398a
cmp eax, 0x45
ja 0x100038f8
je 0x100038c9
sub eax, 0x3d
je 0x10003897
sub eax, 1
je 0x10003875
sub eax, 1
je 0x10003856
sub eax, 1
jne 0x10003b3d
movaps xmm0, xmmword [0x1008af10]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003844
jmp 0x100034ea
movaps xmm0, xmmword [0x1008a360]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x10003863
jmp 0x100037af
movaps xmm0, xmmword [0x1008b270]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003885
jmp 0x100034ea
mov cl, 0x1e
mov dword [ebp - 0x38], 0x6e7f501e
mov dword [ebp - 0x34], 0x3e6d7b77
mov eax, edx
mov dword [ebp - 0x30], 0x796c7159
mov word [ebp - 0x2c], 0x7b
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000352e
mov cl, byte [ebp - 0x38]
jmp 0x100038b6
mov cl, 0x1b
mov dword [ebp - 0x34], 0x7475481b
mov dword [ebp - 0x30], 0x7a4c3b6c
mov eax, edx
mov word [ebp - 0x2c], 0x69
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 8
jae 0x100038f0
mov cl, byte [ebp - 0x34]
jmp 0x100038e1
mov byte [ebp - 0x2b], dl
jmp 0x100035ac
sub eax, 0x47
je 0x1000395b
sub eax, 1
je 0x10003933
sub eax, 1
jne 0x10003b3d
movaps xmm0, xmmword [0x1008ab70]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x2b
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x10
jb 0x1000391e
mov byte [ebp - 0x3b], dl
jmp 0x100034ed
mov cl, 0x56
mov dword [ebp - 0x34], 0x32241756
mov dword [ebp - 0x30], 0x3b373324
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100035a9
mov cl, byte [ebp - 0x34]
jmp 0x10003948
mov cl, 0x21
mov dword [ebp - 0x38], 0x4f4e7321
mov dword [ebp - 0x34], 0x14a5340
mov eax, edx
mov dword [ebp - 0x30], 0x454f406d
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x1000378d
mov cl, byte [ebp - 0x38]
jmp 0x10003977
movaps xmm0, xmmword [0x1008a420]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x3f561217
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x13
jb 0x100039a1
mov byte [ebp - 0x3c], dl
jmp 0x10003b26
sub eax, 0x52
je 0x10003afc
sub eax, 1
je 0x10003acd
sub eax, 1
je 0x10003aa7
sub eax, 3
je 0x10003a7f
sub eax, 5
je 0x10003a48
sub eax, 1
je 0x10003a0f
sub eax, 1
jne 0x10003b3d
movaps xmm0, xmmword [0x1008a3b0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xe
jb 0x100039fa
mov byte [ebp - 0x3d], dl
jmp 0x100034ed
mov cl, 0x6e
mov dword [ebp - 0x38], 0x71d276e
mov dword [ebp - 0x34], 0x10102
mov eax, edx
mov dword [ebp - 0x30], 0xb1c2f4e
mov word [ebp - 0x2c], 0xf00
mov byte [ebp - 0x2a], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xd
jae 0x10003a40
mov cl, byte [ebp - 0x38]
jmp 0x10003a31
mov byte [ebp - 0x2a], dl
jmp 0x10003531
mov cl, 0x59
mov dword [ebp - 0x30], 0x302b0959
mov dword [ebp - 0x2c], 0x37362a
mov eax, edx
xor byte [ebp + eax - 0x2f], cl
inc eax
cmp eax, 6
jae 0x10003a69
mov cl, byte [ebp - 0x30]
jmp 0x10003a5a
lea eax, [ebp - 0x2f]
mov byte [ebp - 0x29], dl
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0x2f]
jmp 0x10003b34
movaps xmm0, xmmword [0x1008acf0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x580c
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x11
jb 0x10003a95
jmp 0x100035f5
movaps xmm0, xmmword [0x1008aaf0]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x6a794f
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x12
jb 0x10003abb
mov byte [ebp - 0x3d], dl
jmp 0x10003b26
movaps xmm0, xmmword [0x1008aa20]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x8612520
mov word [ebp - 0x3c], 0x808
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x15
jb 0x10003aea
mov byte [ebp - 0x3a], dl
jmp 0x10003b26
movaps xmm0, xmmword [0x1008a640]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x28410500
mov word [ebp - 0x3c], 0x28
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x14
jb 0x10003b16
mov byte [ebp - 0x3b], dl
lea eax, [ebp - 0x4f]
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0x4f]
push eax
lea ecx, [ebp - 0x28]
call fcn.100040e3
and dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.10003bc8
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.1000402e
mov eax, ebx
call fcn.1003bf4a
ret 4