Function at 0x10003eb0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1019da01
mov eax, dword fs:[0]
push eax
sub esp, 0x370
mov eax, dword [0x1026e004]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x358], edx
mov edi, ecx
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x344], 0
mov dword [ebp - 0x340], 0
mov dword [ebp - 4], 0
mov eax, dword [0x102a8048]
push 0
push ecx
lea ecx, [ebp - 0x34c]
mov eax, dword [eax + 0x2fc]
push ecx
push 0xf015
call eax
mov esi, eax
add esp, 0x10
test esi, esi
jns 0x10004026
mov edi, dword [edi + 0x6c]
mov edx, 0xe871
mov dword [ebp - 0x314], 0xe809
mov eax, 0xe83a
mov word [ebp - 0x310], dx
mov ecx, 0xe829
mov word [ebp - 0x30e], ax
mov eax, 0xe86b
mov word [ebp - 0x30c], ax
mov eax, 0xe833
mov word [ebp - 0x30a], ax
mov word [ebp - 0x308], ax
mov eax, 0xe864
mov word [ebp - 0x306], cx
mov word [ebp - 0x304], ax
mov eax, 0xe86f
mov word [ebp - 0x302], ax
mov eax, 0xe86c
mov word [ebp - 0x300], ax
mov eax, 0xe82c
mov word [ebp - 0x2fe], cx
mov word [ebp - 0x2fc], ax
mov eax, 0xe839
mov word [ebp - 0x2fa], ax
mov eax, 0xe831
mov word [ebp - 0x2f8], ax
xor eax, eax
mov word [ebp - 0x2f6], dx
xor edx, edx
mov word [ebp - 0x2f4], ax
mov ax, word [ebp - 0x310]
mov ax, word [ebp + edx*2 - 0x310]
movzx ecx, ax
movzx eax, word [ebp - 0x314]
xor ecx, eax
mov word [ebp + edx*2 - 0x310], cx
inc edx
cmp edx, 0xe
jb 0x10003fe5
xor eax, eax
lea ecx, [ebp - 0x310]
mov word [ebp - 0x2f4], ax
mov eax, dword [edi]
push esi
push ecx
push edi
call dword [eax + 0x10]
add esp, 0xc
jmp 0x10004a4e
push 0x10007800
push dword [ebp - 0x34c]
lea ecx, [ebp - 0x344]
call fcn.10007060
mov byte [ebp - 0x224], 0x7a
xor ecx, ecx
mov byte [ebp - 0x223], 0x75
mov byte [ebp - 0x222], 0x76
mov byte [ebp - 0x221], 0x30
mov byte [ebp - 0x220], 0x7a
mov byte [ebp - 0x21f], 0x67
mov byte [ebp - 0x21e], 0x6f
mov byte [ebp - 0x21d], 0
mov al, byte [ebp - 0x224]
nop dword [eax]
mov al, byte [ebp + ecx - 0x224]
movsx eax, al
sub eax, 2
mov byte [ebp + ecx - 0x224], al
inc ecx
cmp ecx, 7
jb 0x10004080
mov eax, dword [ebp - 0x344]
lea edx, [ebp - 0x348]
push edx
lea edx, [ebp - 0x224]
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov esi, eax
test esi, esi
jns 0x100041b2
mov edi, dword [edi + 0x6c]
mov edx, 0x2244
mov dword [ebp - 0x338], 0x223c
mov eax, 0x220f
mov word [ebp - 0x334], dx
mov ecx, 0x221c
mov word [ebp - 0x332], ax
mov eax, 0x225e
mov word [ebp - 0x330], ax
mov eax, 0x2206
mov word [ebp - 0x32e], ax
mov word [ebp - 0x32c], ax
mov eax, 0x225b
mov word [ebp - 0x32a], cx
mov word [ebp - 0x328], ax
mov eax, 0x225a
mov word [ebp - 0x326], ax
mov eax, 0x2219
mov word [ebp - 0x324], dx
mov word [ebp - 0x322], cx
mov word [ebp - 0x320], ax
mov eax, 0x220c
mov word [ebp - 0x31e], ax
mov eax, 0x2204
mov word [ebp - 0x31c], ax
xor eax, eax
mov word [ebp - 0x31a], dx
xor edx, edx
mov word [ebp - 0x318], ax
mov ax, word [ebp - 0x334]
mov ax, word [ebp + edx*2 - 0x334]
movzx ecx, ax
movzx eax, word [ebp - 0x338]
xor ecx, eax
mov word [ebp + edx*2 - 0x334], cx
inc edx
cmp edx, 0xe
jb 0x10004171
xor eax, eax
lea ecx, [ebp - 0x334]
mov word [ebp - 0x318], ax
mov eax, dword [edi]
push esi
push ecx
push edi
call dword [eax + 0x10]
add esp, 0xc
jmp 0x10004a4e
mov byte [ebp - 0x238], 0x83
xor ecx, ecx
mov byte [ebp - 0x237], 0x3e
mov byte [ebp - 0x236], 0x6a
mov byte [ebp - 0x235], 0x70
mov byte [ebp - 0x234], 0x72
mov byte [ebp - 0x233], 0x72
mov byte [ebp - 0x232], 0x39
mov byte [ebp - 0x231], 0x83
mov byte [ebp - 0x230], 0x70
mov byte [ebp - 0x22f], 0x78
mov byte [ebp - 0x22e], 0
mov al, byte [ebp - 0x238]
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x238]
movsx eax, al
sub eax, 0xb
mov byte [ebp + ecx - 0x238], al
inc ecx
cmp ecx, 0xa
jb 0x10004210
mov eax, dword [ebp - 0x344]
lea edx, [ebp - 0x348]
push edx
lea edx, [ebp - 0x238]
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov esi, eax
test esi, esi
jns 0x10004332
mov edx, dword [edi + 0x6c]
mov ebx, 0x7d
mov word [ebp - 0x2d0], bx
mov edi, 0x38
mov word [ebp - 0x2ce], di
mov eax, 0x67
mov word [ebp - 0x2cc], ax
mov ecx, 0x25
mov eax, 0x3f
mov word [ebp - 0x2ca], ax
mov word [ebp - 0x2c8], ax
mov eax, 0x6c
mov word [ebp - 0x2c6], cx
mov word [ebp - 0x2c4], ax
mov eax, 0x6b
mov word [ebp - 0x2c2], ax
mov eax, 0x2a
mov word [ebp - 0x2c0], di
mov word [ebp - 0x2be], cx
mov word [ebp - 0x2bc], ax
mov eax, 0x35
mov word [ebp - 0x2ba], ax
mov eax, 0x3d
mov word [ebp - 0x2b8], ax
xor eax, eax
mov word [ebp - 0x2b6], bx
xor ecx, ecx
mov word [ebp - 0x2b4], ax
mov ax, word [ebp - 0x2d0]
nop word [eax + eax]
mov ax, word [ebp + ecx*2 - 0x2d0]
movzx eax, ax
add eax, 0xfffffffb
mov word [ebp + ecx*2 - 0x2d0], ax
inc ecx
cmp ecx, 0xe
jb 0x10004300
mov eax, dword [edx]
lea ecx, [ebp - 0x2d0]
push esi
push ecx
push edx
call dword [eax + 0x10]
add esp, 0xc
jmp 0x10004a4e
mov dword [ebp - 0x24c], 0x19
xor edx, edx
mov byte [ebp - 0x248], 0x61
mov byte [ebp - 0x247], 0x74
mov byte [ebp - 0x246], 0x76
mov byte [ebp - 0x245], 0x6b
mov byte [ebp - 0x244], 0x69
mov byte [ebp - 0x243], 0x71
mov byte [ebp - 0x242], 0x7c
mov byte [ebp - 0x241], 0x6c
mov byte [ebp - 0x240], 0x6a
mov byte [ebp - 0x23f], 0x37
mov byte [ebp - 0x23e], 0x61
mov byte [ebp - 0x23d], 0x7c
mov byte [ebp - 0x23c], 0x74
mov al, byte [ebp - 0x248]
mov byte [ebp - 0x23b], 0
nop word [eax + eax]
mov al, byte [ebp + edx - 0x248]
movsx ecx, byte [ebp - 0x24c]
movsx eax, al
xor eax, ecx
mov byte [ebp + edx - 0x248], al
inc edx
cmp edx, 0xd
jb 0x100043b0
mov eax, dword [ebp - 0x344]
lea edx, [ebp - 0x348]
push edx
mov byte [ebp - 0x23b], 0
lea edx, [ebp - 0x248]
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov esi, eax
test esi, esi
jns 0x100044e2
mov edx, dword [edi + 0x6c]
mov eax, 0x3b
mov edi, 0x80
mov ecx, 0x28
mov word [ebp - 0x2f0], di
mov word [ebp - 0x2ee], ax
mov eax, 0x6a
mov word [ebp - 0x2ec], ax
mov eax, 0x42
mov word [ebp - 0x2ea], ax
mov word [ebp - 0x2e8], ax
mov eax, 0x6f
mov word [ebp - 0x2e6], cx
mov word [ebp - 0x2e4], ax
mov eax, 0x6e
mov word [ebp - 0x2e2], ax
mov eax, 0x75
mov word [ebp - 0x2e0], ax
mov eax, 0x2d
mov word [ebp - 0x2de], cx
mov word [ebp - 0x2dc], ax
mov eax, 0x38
mov word [ebp - 0x2da], ax
mov eax, 0x40
mov word [ebp - 0x2d8], ax
xor eax, eax
mov word [ebp - 0x2d6], di
xor ecx, ecx
mov word [ebp - 0x2d4], ax
mov ax, word [ebp - 0x2f0]
nop dword [eax]
mov ax, word [ebp + ecx*2 - 0x2f0]
movzx eax, ax
add eax, 0xfffffff8
mov word [ebp + ecx*2 - 0x2f0], ax
inc ecx
cmp ecx, 0xe
jb 0x100044b0
mov eax, dword [edx]
lea ecx, [ebp - 0x2f0]
push esi
push ecx
push edx
call dword [eax + 0x10]
add esp, 0xc
jmp 0x10004a4e
mov byte [ebp - 0x22c], 0x7d
xor ecx, ecx
mov byte [ebp - 0x22b], 0x78
mov byte [ebp - 0x22a], 0x79
mov byte [ebp - 0x229], 0x33
mov byte [ebp - 0x228], 0x7d
mov byte [ebp - 0x227], 0x6a
mov byte [ebp - 0x226], 0x72
mov byte [ebp - 0x225], 0
mov al, byte [ebp - 0x22c]
mov al, byte [ebp + ecx - 0x22c]
movsx eax, al
sub eax, 5
mov byte [ebp + ecx - 0x22c], al
inc ecx
cmp ecx, 7
jb 0x10004522
mov edx, dword [edi + 0x28]
lea eax, [ebp - 0x22c]
push eax
push dword [ebp - 0x344]
lea eax, [ebp - 0x33c]
push eax
call fcn.10004aa0
mov esi, eax
test esi, esi
jns 0x100046d2
mov edi, dword [edi + 0x6c]
mov dword [ebp - 0x270], 0x4e9
mov eax, dword [ebp - 0x270]
xor eax, 0x78
mov word [ebp - 0x26c], ax
mov eax, dword [ebp - 0x270]
inc eax
xor eax, 0x33
mov word [ebp - 0x26a], ax
mov eax, dword [ebp - 0x270]
add eax, 2
xor eax, 0x62
mov word [ebp - 0x268], ax
mov eax, dword [ebp - 0x270]
add eax, 3
xor eax, 0x3a
mov word [ebp - 0x266], ax
mov eax, dword [ebp - 0x270]
add eax, 4
xor eax, 0x3a
mov word [ebp - 0x264], ax
mov eax, dword [ebp - 0x270]
add eax, 5
xor eax, 0x20
mov word [ebp - 0x262], ax
mov eax, dword [ebp - 0x270]
add eax, 6
xor eax, 0x6c
mov word [ebp - 0x260], ax
mov eax, dword [ebp - 0x270]
add eax, 7
xor eax, 0x64
mov word [ebp - 0x25e], ax
mov eax, dword [ebp - 0x270]
add eax, 8
xor eax, 0x66
mov word [ebp - 0x25c], ax
mov eax, dword [ebp - 0x270]
add eax, 9
xor eax, 0x20
mov word [ebp - 0x25a], ax
mov eax, dword [ebp - 0x270]
add eax, 0xa
xor eax, 0x25
mov word [ebp - 0x258], ax
mov eax, dword [ebp - 0x270]
add eax, 0xb
xor eax, 0x30
mov word [ebp - 0x256], ax
mov eax, dword [ebp - 0x270]
add eax, 0xc
xor eax, 0x38
mov word [ebp - 0x254], ax
mov eax, dword [ebp - 0x270]
add eax, 0xd
xor eax, 0x78
mov word [ebp - 0x252], ax
xor eax, eax
mov word [ebp - 0x250], ax
xor edx, edx
mov ax, word [ebp - 0x26c]
nop word [eax + eax]
mov ax, word [ebp + edx*2 - 0x26c]
mov ecx, dword [ebp - 0x270]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x26c], cx
inc edx
cmp edx, 0xe
jb 0x10004690
xor eax, eax
lea ecx, [ebp - 0x26c]
mov word [ebp - 0x250], ax
mov eax, dword [edi]
push esi
push ecx
push edi
call dword [eax + 0x10]
add esp, 0xc
jmp 0x10004a4e
lea eax, [ebp - 0x33c]
mov dword [ebp - 0x368], edi
lea edx, [ebp - 0x368]
mov dword [ebp - 0x364], eax
lea ecx, [ebp - 0x374]
call fcn.100066f0
mov byte [ebp - 4], 1
mov eax, dword [edi + 0x28]
push 1
push dword [ebp - 0x33c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
test eax, eax
jne 0x100047e5
mov esi, dword [edi + 0x6c]
mov eax, 0x1e02
mov dword [ebp - 0x2b0], 0x1e7a
mov word [ebp - 0x2ac], ax
mov eax, 0x1e49
mov word [ebp - 0x2aa], ax
mov eax, 0x1e18
mov word [ebp - 0x2a8], ax
mov eax, 0x1e40
mov word [ebp - 0x2a6], ax
mov word [ebp - 0x2a4], ax
mov eax, 0x1e5a
mov word [ebp - 0x2a2], ax
mov eax, 0x1e1d
mov word [ebp - 0x2a0], ax
mov eax, 0x1e0a
mov word [ebp - 0x29e], ax
mov eax, 0x1e1c
mov word [ebp - 0x29c], ax
xor eax, eax
mov word [ebp - 0x29a], ax
xor edx, edx
mov ax, word [ebp - 0x2ac]
nop dword [eax + eax]
mov ax, word [ebp + edx*2 - 0x2ac]
movzx ecx, ax
movzx eax, word [ebp - 0x2b0]
xor ecx, eax
mov word [ebp + edx*2 - 0x2ac], cx
inc edx
cmp edx, 9
jb 0x100047a0
xor eax, eax
lea ecx, [ebp - 0x2ac]
mov word [ebp - 0x29a], ax
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x10]
add esp, 8
mov esi, 0xe0010001
jmp 0x10004a36
call eax
mov esi, dword [edi + 0x6c]
mov ebx, eax
mov dword [ebp - 0x298], 0xd0ab
mov eax, dword [ebp - 0x298]
xor eax, 0x78
mov dword [ebp - 0x350], esi
mov word [ebp - 0x294], ax
mov eax, dword [ebp - 0x298]
inc eax
xor eax, 0x33
mov word [ebp - 0x292], ax
mov eax, dword [ebp - 0x298]
add eax, 2
xor eax, 0x62
mov word [ebp - 0x290], ax
mov eax, dword [ebp - 0x298]
add eax, 3
xor eax, 0x3a
mov word [ebp - 0x28e], ax
mov eax, dword [ebp - 0x298]
add eax, 4
xor eax, 0x3a
mov word [ebp - 0x28c], ax
mov eax, dword [ebp - 0x298]
add eax, 5
xor eax, 0x20
mov word [ebp - 0x28a], ax
mov eax, dword [ebp - 0x298]
add eax, 6
xor eax, 0x78
mov word [ebp - 0x288], ax
mov eax, dword [ebp - 0x298]
add eax, 7
xor eax, 0x73
mov word [ebp - 0x286], ax
mov eax, dword [ebp - 0x298]
add eax, 8
xor eax, 0x74
mov word [ebp - 0x284], ax
mov eax, dword [ebp - 0x298]
add eax, 9
xor eax, 0x20
mov word [ebp - 0x282], ax
mov eax, dword [ebp - 0x298]
add eax, 0xa
xor eax, 0x25
mov word [ebp - 0x280], ax
mov eax, dword [ebp - 0x298]
add eax, 0xb
xor eax, 0x70
mov word [ebp - 0x27e], ax
mov eax, dword [ebp - 0x298]
add eax, 0xc
xor eax, 0x20
mov word [ebp - 0x27c], ax
mov eax, dword [ebp - 0x298]
add eax, 0xd
xor eax, 0x25
mov word [ebp - 0x27a], ax
mov eax, dword [ebp - 0x298]
add eax, 0xe
xor eax, 0x6c
mov word [ebp - 0x278], ax
mov eax, dword [ebp - 0x298]
add eax, 0xf
xor eax, 0x73
mov word [ebp - 0x276], ax
xor eax, eax
mov word [ebp - 0x274], ax
xor edx, edx
mov ax, word [ebp - 0x294]
nop dword [eax]
mov ax, word [ebp + edx*2 - 0x294]
mov ecx, dword [ebp - 0x298]
add ecx, edx
movzx eax, ax
xor ecx, eax
mov word [ebp + edx*2 - 0x294], cx
inc edx
cmp edx, 0x10
jb 0x10004940
xor eax, eax
mov word [ebp - 0x274], ax
lea eax, [ebp - 0x21c]
mov esi, dword [esi]
push 0x208
push eax
mov eax, dword [ebx + 0x48c]
call eax
push eax
push dword [ebp - 0x33c]
lea eax, [ebp - 0x294]
push eax
push dword [ebp - 0x350]
call dword [esi + 0x10]
mov eax, dword [ebx]
add esp, 0x10
call eax
cmp eax, 0x55
jae 0x100049af
mov esi, 0xe0010001
jmp 0x10004a36
mov edx, ebx
mov ecx, edi
call fcn.100059d0
lea eax, [edi + 0x30]
push eax
push ebx
call fcn.10003b80
mov esi, eax
test esi, esi
js 0x10004a36
mov eax, dword [ebp - 0x33c]
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x360]
mov dword [edi + 0x88], eax
mov dword [edi + 0x90], ebx
mov dword [ebp - 0x354], edi
call fcn.10006750
mov byte [ebp - 4], 2
mov ecx, edi
push dword [ebp - 0x344]
mov edx, dword [ebp - 0x358]
call fcn.10003a10
mov esi, eax
test esi, esi
js 0x10004a1e
mov byte [ebp - 0x360], 1
xor esi, esi
mov byte [ebp - 0x374], 1
mov byte [ebp - 4], 1
cmp byte [ebp - 0x360], 0
jne 0x10004a36
lea ecx, [ebp - 0x35c]
call fcn.10006930
mov byte [ebp - 4], 0
cmp byte [ebp - 0x374], 0
jne 0x10004a4e
lea ecx, [ebp - 0x370]
call fcn.100069b0
mov dword [ebp - 4], 0xffffffff
mov edi, dword [ebp - 0x340]
test edi, edi
je 0x10004a80
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [edi + 4], eax
jne 0x10004a80
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
lock xadd dword [edi + 8], ebx
dec ebx
jne 0x10004a80
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 4]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100e04a9
mov esp, ebp
pop ebp
ret 4