Function at 0x103ef5b
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
cmp ecx, 0x3a14
jnp 0x103ef97
pushf
clc
xor ebx, 0x2d7c
xor ebx, 0x2d7c
cmp ebx, 0x52ed
add ebx, 0x3c8c
sub ebx, 0x3c8c
popf
lea esp, [esp]
jns 0x103ef94
jp 0x103ef97
add dword [ebx + 0x2944c3d], 0x850f0101
add dword ss:[eax], eax
add byte [edx + 0xc], ch
cmp dword [0x102944c], 1
jne 0x103f0da
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.010399d6
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
jns 0x103efe6
rol esp, 0
je 0x103f000
pushf
ror ecx, 0
jbe 0x103eff2
ror esp, 0
popf
mov ecx, ecx
jle 0x103effb
je 0x103effd
jne 0x103f000
xor eax, 0x80f04d8a
jmp 0xf151780a
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
xchg esi, eax
xchg esi, eax
jbe 0x103f064
jns 0x103f066
jp 0x103f073
jne 0x103f06a
mov esp, esp
jns 0x103f06e
jmp 0x103f070
jnp 0x103f073
jmp 0x95342dfa
cmp dword [0x1029430], 0
jne 0x103f084
or eax, 0xffffffff
jmp 0x103f2e7
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x1029430]
push ecx
call fcn.0103a999
mov dword [ebp - 4], eax
stc
lea esp, [esp]
jl 0x103f0b0
pushf
xor edi, dword [esp + 0xc]
xor edi, dword [esp + 0xc]
popf
lea edi, [edi]
jno 0x103f0ad
jge 0x103f0b0
mov esp, 0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.010399d6
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x103f0d0
mov eax, dword [ebp - 4]
mov dword [0x102944c], eax
jmp 0x103f0d8
or eax, 0xffffffff
jmp 0x103f2e7
jmp 0x103f0e3
mov ecx, dword [0x102944c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
lea ebx, [ebx + 0x727f]
lea ebx, [ebx - 0x727f]
jae 0x103f10c
jne 0x103f0f9
je 0x103f0fb
jl 0x103f0fd
lea ecx, [ecx + 0x38f8]
lea ecx, [ecx - 0x38f8]
jb 0x103f10c
mov esp, 0x50ec458b
mov eax, dword [ebp - 0x14]
push eax
call fcn.01036c45
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.010399d6
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
jo 0x103f15a
call 0x103f15f
lea esp, [esp + 4]
shr ecx, 0
shr ebx, 0
jbe 0x103f182
pushf
cmp edi, dword [esp + 8]
add eax, dword [esp]
sub eax, dword [esp]
popf
xchg ebx, edi
xchg ebx, edi
jnp 0x103f17f
ja 0x103f182
ljmp 0x1ea:0x80f0558a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jo 0x103f1e3
lea ebx, [ebx + 0x5cac]
sub ebx, 0x5cac
jp 0x103f1f1
jle 0x103f203
pushf
xchg edx, esi
xchg edx, esi
shl esp, 0
popf
lea eax, [eax]
jg 0x103f203
mov ebx, 0x94303d83
add al, byte [ecx]
add byte [ebx + esi - 0x7d], dh
into
add bh, dh
xlatb
cmp dword [0x1029430], 0
je 0x103f23f
or esi, 0
not edi
not edi
xor eax, ebx
xor eax, ebx
test esi, 0x5d6d
jns 0x103f22c
pushf
jb 0x103f223
popf
jbe 0x103f227
jp 0x103f229
js 0x103f22c
mov eax, 0x51f04d8d
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x1029430]
push edx
call fcn.0103a999
mov dword [ebp - 4], eax
xor edx, 0
mov esi, esi
jbe 0x103f257
xchg ecx, edi
xchg ecx, edi
jae 0x103f24c
xchg ebx, esi
xchg ebx, esi
xchg esi, esi
ja 0x103f257
mov ecx, 0xc6acdbf
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.010399d6
add esp, 0xc
and esi, 0xffffffff
ror esi, 0x1d
ror esi, 3
ja 0x103f290
pushf
cmp ecx, 0x1441
lea eax, [eax]
shl ebx, 0
popf
lea ecx, [ecx + 0x175d]
lea ecx, [ecx - 0x175d]
jbe 0x103f290
xor eax, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x103f2ad
mov esi, esi
jne 0x103f2a1
jg 0x103f29c
jp 0x103f29e
je 0x103f2a1
mov edi, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.01036c45
add esp, 4
not ebx
not ebx
xchg ebx, edi
xchg ebx, edi
shl edi, 0
test dword [esp], ecx
jle 0x103f2c8
pushf
jns 0x103f2c1
popf
jg 0x103f2c5
jg 0x103f2c8
mov eax, 0x5220558b
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c