Function at 0x100033f8
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x48
mov eax, 0x10077947
call fcn.10040a5d
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x28]
and dword [ebp - 0x54], 0
push 0x1008ae93
mov dword [ebp - 0x2c], ebx
call fcn.10004181
xor edx, edx
mov dword [ebp - 4], edx
mov esi, dword [0x100a6048]
test esi, esi
jne 0x1000343b
mov dword [ebx + 0x14], 0xf
mov dword [ebx + 0x10], edx
mov byte [ebx], dl
jmp 0x10003b53
cmp byte [0x100a610a], dl
je 0x10003484
mov ecx, 0x10b8134
call fcn.10010043
mov edi, eax
test edi, edi
je 0x10003482
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push edi
call ebx
test eax, eax
jne 0x1000347f
push 4
add edi, 0xc88
push edi
call ebx
mov ebx, dword [ebp - 0x2c]
xor edx, edx
test eax, eax
jne 0x10003484
mov ax, word [edi]
mov word [esi + 0x40], ax
jmp 0x10003484
mov ebx, dword [ebp - 0x2c]
xor edx, edx
movzx eax, word [esi + 0x40]
cmp eax, 0x37
ja 0x10003806
je 0x100037ea
cmp eax, 0x21
ja 0x1000368b
je 0x1000365b
cmp eax, 0x15
ja 0x100035c7
je 0x1000358d
sub eax, 1
je 0x1000356b
sub eax, 1
je 0x1000354c
sub eax, 9
je 0x10003508
sub eax, 1
jne 0x10003b45
movaps xmm0, xmmword [0x10095d10]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x100034e5
mov byte [ebp - 0x3c], dl
lea eax, [ebp - 0x4b]
push eax
call fcn.10004164
pop ecx
push eax
lea eax, [ebp - 0x4b]
jmp 0x10003b3c
mov cl, 0x53
mov dword [ebp - 0x38], 0x21321853
mov dword [ebp - 0x34], 0x16732026
mov eax, edx
mov dword [ebp - 0x30], 0x3d323f20
mov word [ebp - 0x2c], 0x27
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x10003536
mov cl, byte [ebp - 0x38]
jmp 0x10003527
mov byte [ebp - 0x2b], dl
lea eax, [ebp - 0x37]
push eax
call fcn.10004164
pop ecx
push eax
lea eax, [ebp - 0x37]
jmp 0x10003b3c
movaps xmm0, xmmword [0x10095d80]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x1000355c
jmp 0x100034f2
movaps xmm0, xmmword [0x10095f60]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x1000357b
jmp 0x100034f2
mov cl, 0x58
mov dword [ebp - 0x34], 0x2a371558
mov dword [ebp - 0x30], 0x36373c39
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100035b1
mov cl, byte [ebp - 0x34]
jmp 0x100035a2
mov byte [ebp - 0x2c], dl
lea eax, [ebp - 0x33]
push eax
call fcn.10004164
pop ecx
push eax
lea eax, [ebp - 0x33]
jmp 0x10003b3c
sub eax, 0x1e
je 0x10003629
sub eax, 1
je 0x10003605
sub eax, 1
jne 0x10003b45
movaps xmm0, xmmword [0x100960d0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x7474
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x11
jb 0x100035f0
mov byte [ebp - 0x3a], dl
jmp 0x100034f5
mov cl, 0x12
mov dword [ebp - 0x34], 0x743f4412
mov dword [ebp - 0x30], 0x66617d60
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100035b1
mov cl, byte [ebp - 0x34]
jmp 0x1000361a
mov cl, 0x1d
mov dword [ebp - 0x38], 0x7178591d
mov dword [ebp - 0x34], 0x5e3d6e72
mov eax, edx
mov dword [ebp - 0x30], 0x71696e7c
mov word [ebp - 0x2c], 0x78
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x10003536
mov cl, byte [ebp - 0x38]
jmp 0x10003648
mov cl, 0x4b
mov dword [ebp - 0x34], 0x272e034b
mov dword [ebp - 0x30], 0x290a6b27
mov eax, edx
mov dword [ebp - 0x2c], 0x383832
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 0xa
jae 0x10003683
mov cl, byte [ebp - 0x34]
jmp 0x10003674
mov byte [ebp - 0x29], dl
jmp 0x100035b4
sub eax, 0x22
je 0x100037bf
sub eax, 1
je 0x1000379d
sub eax, 0xd
je 0x1000376a
sub eax, 3
je 0x10003738
sub eax, 1
je 0x10003716
sub eax, 1
je 0x100036e4
sub eax, 1
jne 0x10003b45
movaps xmm0, xmmword [0x10095430]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x100036d2
jmp 0x100034f2
mov cl, 0x5c
mov dword [ebp - 0x38], 0x3e331b5c
mov dword [ebp - 0x34], 0x7c323530
mov eax, edx
mov dword [ebp - 0x30], 0x32392e1d
mov word [ebp - 0x2c], 0x3d
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x10003536
mov cl, byte [ebp - 0x38]
jmp 0x10003703
movaps xmm0, xmmword [0x10095cc0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003726
jmp 0x100034f2
mov cl, 0x52
mov dword [ebp - 0x34], 0x31201d52
mov dword [ebp - 0x30], 0x37201372
mov eax, edx
mov word [ebp - 0x2c], 0x333c
mov byte [ebp - 0x2a], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 9
jae 0x10003762
mov cl, byte [ebp - 0x34]
jmp 0x10003753
mov byte [ebp - 0x2a], dl
jmp 0x100035b4
mov cl, 0x53
mov dword [ebp - 0x38], 0x27321153
mov dword [ebp - 0x34], 0x35363f27
mov eax, edx
mov dword [ebp - 0x30], 0x373f363a
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x10003795
mov cl, byte [ebp - 0x38]
jmp 0x10003786
mov byte [ebp - 0x2c], dl
jmp 0x10003539
movaps xmm0, xmmword [str.C_a__0c]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x100037aa
mov byte [ebp - 0x29], dl
jmp 0x10003539
mov cl, 0x4a
mov dword [ebp - 0x38], 0x2b380e4a
mov dword [ebp - 0x34], 0x6a24252d
mov eax, edx
mov dword [ebp - 0x30], 0x2f3c2b09
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x10003795
mov cl, byte [ebp - 0x38]
jmp 0x100037db
movaps xmm0, xmmword [0x10095060]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x100037f7
jmp 0x100037b7
cmp eax, 0x51
ja 0x100039be
je 0x10003992
cmp eax, 0x45
ja 0x10003900
je 0x100038d1
sub eax, 0x3d
je 0x1000389f
sub eax, 1
je 0x1000387d
sub eax, 1
je 0x1000385e
sub eax, 1
jne 0x10003b45
movaps xmm0, xmmword [0x10095b80]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x1000384c
jmp 0x100034f2
movaps xmm0, xmmword [str._lGKFQ]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x1000386b
jmp 0x100037b7
movaps xmm0, xmmword [0x10095b90]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x1000388d
jmp 0x100034f2
mov cl, 0x3a
mov dword [ebp - 0x38], 0x4a5b743a
mov dword [ebp - 0x34], 0x1a495f53
mov eax, edx
mov dword [ebp - 0x30], 0x5d48557d
mov word [ebp - 0x2c], 0x5f
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x10003536
mov cl, byte [ebp - 0x38]
jmp 0x100038be
mov cl, 0x20
mov dword [ebp - 0x34], 0x4f4e7320
mov dword [ebp - 0x30], 0x41770057
mov eax, edx
mov word [ebp - 0x2c], 0x52
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 8
jae 0x100038f8
mov cl, byte [ebp - 0x34]
jmp 0x100038e9
mov byte [ebp - 0x2b], dl
jmp 0x100035b4
sub eax, 0x47
je 0x10003963
sub eax, 1
je 0x1000393b
sub eax, 1
jne 0x10003b45
movaps xmm0, xmmword [0x10095e80]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x71
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x10
jb 0x10003926
mov byte [ebp - 0x3b], dl
jmp 0x100034f5
mov cl, 0x48
mov dword [ebp - 0x34], 0x2c3a0948
mov dword [ebp - 0x30], 0x25292d3a
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100035b1
mov cl, byte [ebp - 0x34]
jmp 0x10003950
mov cl, 0x7c
mov dword [ebp - 0x38], 0x12132e7c
mov dword [ebp - 0x34], 0x5c170e1d
mov eax, edx
mov dword [ebp - 0x30], 0x18121d30
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x10003795
mov cl, byte [ebp - 0x38]
jmp 0x1000397f
movaps xmm0, xmmword [0x10095490]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x2f460207
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x13
jb 0x100039a9
mov byte [ebp - 0x3c], dl
jmp 0x10003b2e
sub eax, 0x52
je 0x10003b04
sub eax, 1
je 0x10003ad5
sub eax, 1
je 0x10003aaf
sub eax, 3
je 0x10003a87
sub eax, 5
je 0x10003a50
sub eax, 1
je 0x10003a17
sub eax, 1
jne 0x10003b45
movaps xmm0, xmmword [0x10094f70]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xe
jb 0x10003a02
mov byte [ebp - 0x3d], dl
jmp 0x100034f5
mov cl, 0x63
mov dword [ebp - 0x38], 0xa102a63
mov dword [ebp - 0x34], 0xd0c0c0f
mov eax, edx
mov dword [ebp - 0x30], 0x6112243
mov word [ebp - 0x2c], 0x20d
mov byte [ebp - 0x2a], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xd
jae 0x10003a48
mov cl, byte [ebp - 0x38]
jmp 0x10003a39
mov byte [ebp - 0x2a], dl
jmp 0x10003539
mov cl, 0x22
mov dword [ebp - 0x30], 0x4b507222
mov dword [ebp - 0x2c], 0x4c4d51
mov eax, edx
xor byte [ebp + eax - 0x2f], cl
inc eax
cmp eax, 6
jae 0x10003a71
mov cl, byte [ebp - 0x30]
jmp 0x10003a62
lea eax, [ebp - 0x2f]
mov byte [ebp - 0x29], dl
push eax
call fcn.10004164
pop ecx
push eax
lea eax, [ebp - 0x2f]
jmp 0x10003b3c
movaps xmm0, xmmword [0x10096000]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x6f3b
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x11
jb 0x10003a9d
jmp 0x100035fd
movaps xmm0, xmmword [0x10095300]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x554670
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x12
jb 0x10003ac3
mov byte [ebp - 0x3d], dl
jmp 0x10003b2e
movaps xmm0, xmmword [0x100953f0]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x325b1f1a
mov word [ebp - 0x3c], 0x3232
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x15
jb 0x10003af2
mov byte [ebp - 0x3a], dl
jmp 0x10003b2e
movaps xmm0, xmmword [0x10095390]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x30591d18
mov word [ebp - 0x3c], 0x30
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x14
jb 0x10003b1e
mov byte [ebp - 0x3b], dl
lea eax, [ebp - 0x4f]
push eax
call fcn.10004164
pop ecx
push eax
lea eax, [ebp - 0x4f]
push eax
lea ecx, [ebp - 0x28]
call fcn.100040eb
and dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.10003bd0
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.10004036
mov eax, ebx
call fcn.10040a07
ret 4