Function at 0x3864f610
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf0
mov eax, dword [0x7076dbc]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
lea ebx, [eax + 0x1400]
mov dword [ebp - 0xec], eax
push 0x800
push ebx
push dword [eax + 0x9485]
mov dword [ebp - 0xf0], ebx
push eax
call 0x37e6b7f0
add esp, 0x10
cmp eax, 0x800
jne 0x3864f9ac
mov edi, ebx
xor esi, esi
xor ebx, ebx
cmp byte [edi], 0x68
jne 0x3864f777
mov ecx, dword [ebp - 0xec]
mov eax, dword [edi + 1]
sub eax, dword [ecx + 0x34]
push eax
push ecx
call 0x37ea3270
mov esi, eax
add esp, 8
mov eax, dword [ebp - 0xec]
mov edx, dword [eax + 0x9485]
cmp esi, edx
jb 0x3864f777
mov ecx, dword [eax + 0x9481]
add ecx, edx
cmp esi, ecx
ja 0x3864f777
push 2
lea ecx, [ebp - 0xe8]
mov word [ebp - 0xe8], 0xffff
push ecx
push esi
push eax
call 0x37e6b7f0
mov al, byte [ebp - 0xe8]
add esp, 0x10
sub al, 0x41
cmp al, 0x3c
ja 0x3864f777
mov al, byte [ebp - 0xe7]
sub al, 0x41
cmp al, 0x3c
ja 0x3864f777
push 0x50
lea eax, [ebp - 0xa4]
push 0
push eax
call 0x37ac3010
push 0x50
lea eax, [ebp - 0xa4]
push eax
push esi
push dword [ebp - 0xec]
call 0x37e6b7f0
add esp, 0x1c
xor eax, eax
xor ecx, ecx
mov edi, edi
mov dl, byte [ebp + ecx - 0xa4]
cmp dl, 0x41
jb 0x3864f721
cmp dl, 0x7d
jbe 0x3864f722
inc eax
mov dl, byte [ebp + ecx - 0xa3]
cmp dl, 0x41
jb 0x3864f733
cmp dl, 0x7d
jbe 0x3864f734
inc eax
mov dl, byte [ebp + ecx - 0xa2]
cmp dl, 0x41
jb 0x3864f745
cmp dl, 0x7d
jbe 0x3864f746
inc eax
mov dl, byte [ebp + ecx - 0xa1]
cmp dl, 0x41
jb 0x3864f757
cmp dl, 0x7d
jbe 0x3864f758
inc eax
mov dl, byte [ebp + ecx - 0xa0]
cmp dl, 0x41
jb 0x3864f769
cmp dl, 0x7d
jbe 0x3864f76a
inc eax
add ecx, 5
cmp ecx, 0x50
jb 0x3864f710
cmp eax, 0x40
jbe 0x3864f785
inc ebx
inc edi
cmp ebx, 0x800
jb 0x3864f661
push 0x800
push dword [ebp - 0xf0]
lea eax, [esi - 0x400]
push eax
push dword [ebp - 0xec]
call 0x37e6b7f0
add esp, 0x10
cmp eax, 0x800
jne 0x3864f9ac
mov eax, dword [0x7c095b0]
lea edi, [ebp - 0xc0]
mov dword [ebp - 0x18], eax
mov ecx, 6
mov eax, dword [0x7c095b4]
mov esi, 0x7c0a7ac
mov dword [ebp - 0x14], eax
mov ebx, 1
movzx eax, byte [0x7c095b8]
mov byte [ebp - 0x10], al
mov eax, dword [0x7c0952c]
mov dword [ebp - 0x24], eax
mov eax, dword [0x7c09530]
mov dword [ebp - 0x20], eax
movzx eax, byte [0x7c09534]
mov byte [ebp - 0x1c], al
mov eax, dword [0x7c0905c]
mov dword [ebp - 0xc], eax
movzx eax, word [0x7c09060]
mov word [ebp - 8], ax
mov eax, dword [0x7c09d90]
mov dword [ebp - 0x54], eax
mov eax, dword [0x7c09d94]
mov dword [ebp - 0x50], eax
mov eax, dword [0x7c09d98]
mov dword [ebp - 0x4c], eax
movzx eax, word [0x7c09d9c]
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x18]
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x24]
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0x2c]
mov dword [ebp - 0xdc], eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0xd8], eax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0xc0]
movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0xec]
mov dword [ebp - 0x2c], 0x73303633
mov dword [ebp - 0x28], 0x656661
mov dword [ebp - 0x34], 0x74303633
mov dword [ebp - 0x30], 0x796172
mov dword [ebp - 0x3c], 0x6f6c7171
mov dword [ebp - 0x38], 0x6e6967
mov dword [ebp - 0x44], 0x67327868
mov dword [ebp - 0x40], 0x656d61
mov dword [ebp - 0xc4], eax
jmp 0x3864f8d0
cmp byte [ebx + esi + 0x13ff], 0
jne 0x3864f99f
lea eax, [esi + 0x1400]
add eax, ebx
cmp byte [eax], 0
je 0x3864f99f
mov edx, ebx
xor ecx, ecx
cmp byte [eax], 0
je 0x3864f900
inc ecx
inc edx
inc eax
cmp ecx, 0x40
jb 0x3864f8f3
cmp ebx, edx
jae 0x3864f921
lea ecx, [esi + 0x1400]
add ecx, ebx
sub edx, ebx
mov edi, edi
or byte [ecx], 0x20
cmp byte [ecx], 0x2a
jne 0x3864f91b
mov byte [ecx], 0x2e
inc ecx
sub edx, 1
jne 0x3864f910
xor edi, edi
mov edx, dword [ebp + edi*4 - 0xe4]
mov eax, edx
lea esi, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x3864f930
sub eax, esi
mov esi, dword [ebp - 0xec]
add esi, 0x1400
add esi, ebx
sub eax, 4
jb 0x3864f961
lea esp, [esp]
mov ecx, dword [edx]
cmp ecx, dword [esi]
jne 0x3864f966
add edx, 4
add esi, 4
sub eax, 4
jae 0x3864f950
cmp eax, 0xfffffffc
je 0x3864f9bf
mov cl, byte [edx]
cmp cl, byte [esi]
jne 0x3864f993
cmp eax, 0xfffffffd
je 0x3864f9bf
mov cl, byte [edx + 1]
cmp cl, byte [esi + 1]
jne 0x3864f993
cmp eax, 0xfffffffe
je 0x3864f9bf
mov cl, byte [edx + 2]
cmp cl, byte [esi + 2]
jne 0x3864f993
cmp eax, 0xffffffff
je 0x3864f9bf
mov al, byte [edx + 3]
cmp al, byte [esi + 3]
je 0x3864f9bf
inc edi
cmp edi, 9
jb 0x3864f923
mov esi, dword [ebp - 0xec]
inc ebx
cmp ebx, 0x7c1
jb 0x3864f8d0
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call 0x37ac2614
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call 0x37ac2614
mov esp, ebp
pop ebp
ret