Function at 0x100033f0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x48
mov eax, 0x100734dd
call fcn.1003d3a0
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x28]
and dword [ebp - 0x54], 0
push 0x1008e652
mov dword [ebp - 0x2c], ebx
call fcn.10004179
xor edx, edx
mov dword [ebp - 4], edx
mov esi, dword [0x1009ec60]
test esi, esi
jne 0x10003433
mov dword [ebx + 0x14], 0xf
mov dword [ebx + 0x10], edx
mov byte [ebx], dl
jmp 0x10003b4b
cmp byte [0x1009ec7b], dl
je 0x1000347c
mov ecx, 0x10b8134
call fcn.1000df8f
mov edi, eax
test edi, edi
je 0x1000347a
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push edi
call ebx
test eax, eax
jne 0x10003477
push 4
add edi, 0xc88
push edi
call ebx
mov ebx, dword [ebp - 0x2c]
xor edx, edx
test eax, eax
jne 0x1000347c
mov ax, word [edi]
mov word [esi + 0x40], ax
jmp 0x1000347c
mov ebx, dword [ebp - 0x2c]
xor edx, edx
movzx eax, word [esi + 0x40]
cmp eax, 0x37
ja 0x100037fe
je 0x100037e2
cmp eax, 0x21
ja 0x10003683
je 0x10003653
cmp eax, 0x15
ja 0x100035bf
je 0x10003585
sub eax, 1
je 0x10003563
sub eax, 1
je 0x10003544
sub eax, 9
je 0x10003500
sub eax, 1
jne 0x10003b3d
movaps xmm0, xmmword [0x1008fbf0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x100034dd
mov byte [ebp - 0x3c], dl
lea eax, [ebp - 0x4b]
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0x4b]
jmp 0x10003b34
mov cl, 0x44
mov dword [ebp - 0x38], 0x36250f44
mov dword [ebp - 0x34], 0x1643731
mov eax, edx
mov dword [ebp - 0x30], 0x2a252837
mov word [ebp - 0x2c], 0x30
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000352e
mov cl, byte [ebp - 0x38]
jmp 0x1000351f
mov byte [ebp - 0x2b], dl
lea eax, [ebp - 0x37]
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0x37]
jmp 0x10003b34
movaps xmm0, xmmword [0x1008faf0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003554
jmp 0x100034ea
movaps xmm0, xmmword [0x1008fde0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003573
jmp 0x100034ea
mov cl, 0x59
mov dword [ebp - 0x34], 0x2b361459
mov dword [ebp - 0x30], 0x37363d38
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100035a9
mov cl, byte [ebp - 0x34]
jmp 0x1000359a
mov byte [ebp - 0x2c], dl
lea eax, [ebp - 0x33]
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0x33]
jmp 0x10003b34
sub eax, 0x1e
je 0x10003621
sub eax, 1
je 0x100035fd
sub eax, 1
jne 0x10003b3d
movaps xmm0, xmmword [0x1008fff0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x4d4d
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x11
jb 0x100035e8
mov byte [ebp - 0x3a], dl
jmp 0x100034ed
mov cl, 1
mov dword [ebp - 0x34], 0x672c5701
mov dword [ebp - 0x30], 0x75726e73
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100035a9
mov cl, byte [ebp - 0x34]
jmp 0x10003612
mov cl, 0x30
mov dword [ebp - 0x38], 0x5c557430
mov dword [ebp - 0x34], 0x7310435f
mov eax, edx
mov dword [ebp - 0x30], 0x5c444351
mov word [ebp - 0x2c], 0x55
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000352e
mov cl, byte [ebp - 0x38]
jmp 0x10003640
mov cl, 0x6b
mov dword [ebp - 0x34], 0x70e236b
mov dword [ebp - 0x30], 0x92a4b07
mov eax, edx
mov dword [ebp - 0x2c], 0x181812
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 0xa
jae 0x1000367b
mov cl, byte [ebp - 0x34]
jmp 0x1000366c
mov byte [ebp - 0x29], dl
jmp 0x100035ac
sub eax, 0x22
je 0x100037b7
sub eax, 1
je 0x10003795
sub eax, 0xd
je 0x10003762
sub eax, 3
je 0x10003730
sub eax, 1
je 0x1000370e
sub eax, 1
je 0x100036dc
sub eax, 1
jne 0x10003b3d
movaps xmm0, xmmword [0x1008fb30]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x100036ca
jmp 0x100034ea
mov cl, 0x47
mov dword [ebp - 0x38], 0x25280047
mov dword [ebp - 0x34], 0x67292e2b
mov eax, edx
mov dword [ebp - 0x30], 0x29223506
mov word [ebp - 0x2c], 0x26
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000352e
mov cl, byte [ebp - 0x38]
jmp 0x100036fb
movaps xmm0, xmmword [0x1008fc90]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x1000371e
jmp 0x100034ea
mov cl, 0x3c
mov dword [ebp - 0x34], 0x5f4e733c
mov dword [ebp - 0x30], 0x594e7d1c
mov eax, edx
mov word [ebp - 0x2c], 0x5d52
mov byte [ebp - 0x2a], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 9
jae 0x1000375a
mov cl, byte [ebp - 0x34]
jmp 0x1000374b
mov byte [ebp - 0x2a], dl
jmp 0x100035ac
mov cl, 7
mov dword [ebp - 0x38], 0x73664507
mov dword [ebp - 0x34], 0x61626b73
mov eax, edx
mov dword [ebp - 0x30], 0x636b626e
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x1000378d
mov cl, byte [ebp - 0x38]
jmp 0x1000377e
mov byte [ebp - 0x2c], dl
jmp 0x10003531
movaps xmm0, xmmword [str.yXQRN]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x100037a2
mov byte [ebp - 0x29], dl
jmp 0x10003531
mov cl, 0x55
mov dword [ebp - 0x38], 0x34271155
mov dword [ebp - 0x34], 0x753b3a32
mov eax, edx
mov dword [ebp - 0x30], 0x30233416
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x1000378d
mov cl, byte [ebp - 0x38]
jmp 0x100037d3
movaps xmm0, xmmword [0x1008f600]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x100037ef
jmp 0x100037af
cmp eax, 0x51
ja 0x100039b6
je 0x1000398a
cmp eax, 0x45
ja 0x100038f8
je 0x100038c9
sub eax, 0x3d
je 0x10003897
sub eax, 1
je 0x10003875
sub eax, 1
je 0x10003856
sub eax, 1
jne 0x10003b3d
movaps xmm0, xmmword [str.eUir]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003844
jmp 0x100034ea
movaps xmm0, xmmword [0x1008f6d0]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x10003863
jmp 0x100037af
movaps xmm0, xmmword [0x100905d0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003885
jmp 0x100034ea
mov cl, 0x2a
mov dword [ebp - 0x38], 0x5a4b642a
mov dword [ebp - 0x34], 0xa594f43
mov eax, edx
mov dword [ebp - 0x30], 0x4d58456d
mov word [ebp - 0x2c], 0x4f
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000352e
mov cl, byte [ebp - 0x38]
jmp 0x100038b6
mov cl, 0x5a
mov dword [ebp - 0x34], 0x3534095a
mov dword [ebp - 0x30], 0x3b0d7a2d
mov eax, edx
mov word [ebp - 0x2c], 0x28
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 8
jae 0x100038f0
mov cl, byte [ebp - 0x34]
jmp 0x100038e1
mov byte [ebp - 0x2b], dl
jmp 0x100035ac
sub eax, 0x47
je 0x1000395b
sub eax, 1
je 0x10003933
sub eax, 1
jne 0x10003b3d
movaps xmm0, xmmword [0x1008fc20]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x3e
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x10
jb 0x1000391e
mov byte [ebp - 0x3b], dl
jmp 0x100034ed
mov cl, 0x38
mov dword [ebp - 0x34], 0x5c4a7938
mov dword [ebp - 0x30], 0x55595d4a
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100035a9
mov cl, byte [ebp - 0x34]
jmp 0x10003948
mov cl, 0x6d
mov dword [ebp - 0x38], 0x3023f6d
mov dword [ebp - 0x34], 0x4d061f0c
mov eax, edx
mov dword [ebp - 0x30], 0x9030c21
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x1000378d
mov cl, byte [ebp - 0x38]
jmp 0x10003977
movaps xmm0, xmmword [0x1008ff70]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x7f165257
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x13
jb 0x100039a1
mov byte [ebp - 0x3c], dl
jmp 0x10003b26
sub eax, 0x52
je 0x10003afc
sub eax, 1
je 0x10003acd
sub eax, 1
je 0x10003aa7
sub eax, 3
je 0x10003a7f
sub eax, 5
je 0x10003a48
sub eax, 1
je 0x10003a0f
sub eax, 1
jne 0x10003b3d
movaps xmm0, xmmword [0x1008f710]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xe
jb 0x100039fa
mov byte [ebp - 0x3d], dl
jmp 0x100034ed
mov cl, 0x10
mov dword [ebp - 0x38], 0x79635910
mov dword [ebp - 0x34], 0x7e7f7f7c
mov eax, edx
mov dword [ebp - 0x30], 0x75625130
mov word [ebp - 0x2c], 0x717e
mov byte [ebp - 0x2a], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xd
jae 0x10003a40
mov cl, byte [ebp - 0x38]
jmp 0x10003a31
mov byte [ebp - 0x2a], dl
jmp 0x10003531
mov cl, 0x69
mov dword [ebp - 0x30], 0x1b3969
mov dword [ebp - 0x2c], 0x7061a
mov eax, edx
xor byte [ebp + eax - 0x2f], cl
inc eax
cmp eax, 6
jae 0x10003a69
mov cl, byte [ebp - 0x30]
jmp 0x10003a5a
lea eax, [ebp - 0x2f]
mov byte [ebp - 0x29], dl
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0x2f]
jmp 0x10003b34
movaps xmm0, xmmword [0x1008fcf0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x2d79
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x11
jb 0x10003a95
jmp 0x100035f5
movaps xmm0, xmmword [0x100906b0]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x283b0d
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x12
jb 0x10003abb
mov byte [ebp - 0x3d], dl
jmp 0x10003b26
movaps xmm0, xmmword [0x100903e0]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x5e377376
mov word [ebp - 0x3c], 0x5e5e
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x15
jb 0x10003aea
mov byte [ebp - 0x3a], dl
jmp 0x10003b26
movaps xmm0, xmmword [0x10090220]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x6a034742
mov word [ebp - 0x3c], 0x6a
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x14
jb 0x10003b16
mov byte [ebp - 0x3b], dl
lea eax, [ebp - 0x4f]
push eax
call fcn.1000415c
pop ecx
push eax
lea eax, [ebp - 0x4f]
push eax
lea ecx, [ebp - 0x28]
call fcn.100040e3
and dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.10003bc8
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.1000402e
mov eax, ebx
call fcn.1003d34a
ret 4