Function at 0x10033392
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x1011460c]
sub esp, 0x1c
push ebx
push esi
push edi
test al, 1
jne 0x10033128
or eax, 1
mov dword [0x1011460c], eax
mov eax, dword [0x1010e764]
mov ecx, dword [eax + 0x30]
jmp 0x1003311c
mov edi, dword [ecx + 0xc]
mov ebx, 0x811c9dc5
xor edx, edx
nop
inc edx
cmp byte [edi + edx], 0
jne 0x100330f0
xor esi, esi
test edx, edx
je 0x10033119
nop dword [eax]
movsx eax, byte [edi + esi]
inc esi
xor eax, ebx
imul ebx, eax, 0x1000193
cmp esi, edx
jb 0x10033100
cmp ebx, 0xe6a08fc9
je 0x10033120
mov ecx, dword [ecx + 4]
test ecx, ecx
jne 0x100330e4
mov dword [0x10114614], ecx
jmp 0x1003312e
mov ecx, dword [0x10114614]
cmp byte [0x100f6f0c], 0
je case.default.0x10033149
mov eax, dword [0x100f6fc0]
cmp eax, 0x12
ja case.default.0x10033149
jmp dword [eax*4 + 0x100334b0]
mov eax, dword [ecx]
lea edx, [ebp - 0xc]
push edx
mov dword [ebp - 0xc], 0x745f7363
mov dword [ebp - 8], 0x74656269
mov eax, dword [eax + 0x38]
mov byte [ebp - 4], 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 8]
push edx
mov dword [ebp - 8], 0x61626d65
mov dword [ebp - 4], 0x797373
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 8]
push edx
mov dword [ebp - 8], 0x6c617469
mov word [ebp - 4], 0x79
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
vmovdqa xmm0, xmmword [str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_nheghcgox_8N_nheghxcgox_9N_nellyixoodUgeno__nzfksoxUmcodUi__noxcmeHf]
vpxor xmm0, xmm0, xmmword [0x100dd390]
mov dword [ebp - 8], 0x553b3a7e
mov eax, 0x10
mov dword [ebp - 4], 0xa786e62
vmovdqu xmmword [ebp - 0x18], xmm0
nop dword [eax + eax]
xor byte [ebp + eax - 0x18], 0xa
inc eax
cmp eax, 0x18
jb 0x100331e0
mov eax, dword [ecx]
lea edx, [ebp - 0x18]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
vmovdqa xmm0, xmmword [str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_nheghcgox_8N_nheghxcgox_9N_nellyixoodUgeno__nzfksoxUmcodUi__noxcmeHf]
vpxor xmm0, xmm0, xmmword [0x100dd1b0]
mov word [ebp - 4], 0xa3b
mov eax, 0x10
vmovdqu xmmword [ebp - 0x14], xmm0
nop dword [eax]
xor byte [ebp + eax - 0x14], 0xa
inc eax
cmp eax, 0x12
jb 0x10033220
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
vmovdqa xmm0, xmmword [str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_nheghcgox_8N_nheghxcgox_9N_nellyixoodUgeno__nzfksoxUmcodUi__noxcmeHf]
vpxor xmm0, xmm0, xmmword [0x100dd130]
mov byte [ebp - 4], 0xa
mov eax, dword [eax + 0x38]
push edx
vmovdqu xmmword [ebp - 0x14], xmm0
mov byte [ebp - 4], 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
vmovdqa xmm0, xmmword [str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_nheghcgox_8N_nheghxcgox_9N_nellyixoodUgeno__nzfksoxUmcodUi__noxcmeHf]
vpxor xmm0, xmm0, xmmword [0x100dd130]
mov word [ebp - 4], 0xa68
mov eax, 0x10
vmovdqu xmmword [ebp - 0x14], xmm0
nop dword [eax]
xor byte [ebp + eax - 0x14], 0xa
inc eax
cmp eax, 0x12
jb 0x10033290
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
vmovdqa xmm0, xmmword [str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_nheghcgox_8N_nheghxcgox_9N_nellyixoodUgeno__nzfksoxUmcodUi__noxcmeHf]
vpxor xmm0, xmm0, xmmword [0x100dd4e0]
mov dword [ebp - 4], 0xa7e6b66
mov eax, 0x10
vmovdqu xmmword [ebp - 0x14], xmm0
nop
xor byte [ebp + eax - 0x14], 0xa
inc eax
cmp eax, 0x14
jb 0x100332d0
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
vmovdqa xmm0, xmmword [str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_nheghcgox_8N_nheghxcgox_9N_nellyixoodUgeno__nzfksoxUmcodUi__noxcmeHf]
vpxor xmm0, xmm0, xmmword [0x100dd690]
mov byte [ebp - 4], 0xa
mov eax, dword [eax + 0x38]
push edx
vmovdqu xmmword [ebp - 0x14], xmm0
mov byte [ebp - 4], 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x10], 0x55736179
xor eax, eax
mov dword [ebp - 0xc], 0x3a736b6e
mov dword [ebp - 8], 0x3f3a5538
mov byte [ebp - 4], 0xa
xor byte [ebp + eax - 0x10], 0xa
inc eax
cmp eax, 0xd
jb 0x10033337
mov eax, dword [ecx]
lea edx, [ebp - 0x10]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
vmovdqa xmm0, xmmword [str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_nheghcgox_8N_nheghxcgox_9N_nellyixoodUgeno__nzfksoxUmcodUi__noxcmeHf]
vpxor xmm0, xmm0, xmmword [0x100dd350]
mov dword [ebp - 4], 0xa786e66
mov eax, 0x10
vmovdqu xmmword [ebp - 0x14], xmm0
xor byte [ebp + eax - 0x14], 0xa
inc eax
cmp eax, 0x14
jb 0x10033375
mov eax, dword [ecx]
lea edx, [ebp - 0x14]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0xc], 0x7e786f7c
xor eax, eax
mov dword [ebp - 8], 0x55656d63
mov dword [ebp - 4], 0xa786e62
nop dword [eax]
xor byte [ebp + eax - 0xc], 0xa
inc eax
cmp eax, 0xc
jb 0x100333b0
mov eax, dword [ecx]
lea edx, [ebp - 0xc]
push edx
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 0x10]
vmovdqa xmm0, xmmword [str._n_n_n_n_n_n_n_n_n_n_n_n_n_n_n_nheghcgox_8N_nheghxcgox_9N_nellyixoodUgeno__nzfksoxUmcodUi__noxcmeHf]
vpxor xmm0, xmm0, xmmword [0x100dd000]
push edx
mov eax, dword [eax + 0x38]
vmovdqu xmmword [ebp - 0x10], xmm0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 8]
push edx
mov dword [ebp - 8], 0x74726576
mov dword [ebp - 4], 0x6f6769
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 8]
push edx
mov dword [ebp - 8], 0x74656976
mov dword [ebp - 4], 0x6d616e
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx]
lea edx, [ebp - 0xc]
push edx
mov dword [ebp - 0xc], 0x5f796b73
mov dword [ebp - 8], 0x74737564
mov eax, dword [eax + 0x38]
mov byte [ebp - 4], 0
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 8], 0x676e756a
mov word [ebp - 4], 0x656c
jmp 0x1003349a
mov eax, dword [ecx]
lea edx, [ebp - 0xc]
push edx
mov dword [ebp - 0xc], 0x656b756e
mov dword [ebp - 8], 0x6e616c62
mov eax, dword [eax + 0x38]
mov word [ebp - 4], 0x6b
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 8], 0x6966666f
mov word [ebp - 4], 0x6563
mov eax, dword [ecx]
lea edx, [ebp - 8]
push edx
mov byte [ebp - 2], 0
mov eax, dword [eax + 0x38]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret