Function at 0x10003331
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push 0x48
mov eax, 0x10021ed7
call fcn.100215d1
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x28]
and dword [ebp - 0x54], 0
push 0x10028d6c
mov dword [ebp - 0x2c], ebx
call fcn.10004090
xor edx, edx
mov dword [ebp - 4], edx
mov esi, dword [0x10031080]
test esi, esi
jne 0x10003374
mov dword [ebx + 0x14], 0xf
mov dword [ebx + 0x10], edx
mov byte [ebx], dl
jmp 0x10003a82
cmp byte [0x100310b9], dl
je 0x100033bd
mov ecx, 0x10b8134
call fcn.1000939a
mov edi, eax
test edi, edi
je 0x100033bb
mov ebx, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 4
push edi
call ebx
test eax, eax
jne 0x100033b8
push 4
add edi, 0xc88
push edi
call ebx
mov ebx, dword [ebp - 0x2c]
xor edx, edx
test eax, eax
jne 0x100033bd
mov ax, word [edi]
mov word [esi + 0x40], ax
jmp 0x100033bd
mov ebx, dword [ebp - 0x2c]
xor edx, edx
movzx eax, word [esi + 0x40]
cmp eax, 0x37
ja 0x10003739
je 0x1000371d
cmp eax, 0x21
ja 0x100035be
je 0x1000358e
cmp eax, 0x15
ja 0x100034fa
je 0x100034c2
sub eax, 1
je 0x100034a0
sub eax, 1
je 0x10003481
sub eax, 9
je 0x1000343f
sub eax, 1
jne 0x10003a74
movaps xmm0, xmmword [0x1002a640]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x1000341e
mov byte [ebp - 0x3c], dl
lea ecx, [ebp - 0x4b]
call fcn.10004078
push eax
lea eax, [ebp - 0x4b]
jmp 0x10003a6b
mov cl, 0x7c
mov dword [ebp - 0x38], 0xe1d377c
mov dword [ebp - 0x34], 0x395c0f09
mov eax, edx
mov dword [ebp - 0x30], 0x121d100f
mov word [ebp - 0x2c], 8
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000346d
mov cl, byte [ebp - 0x38]
jmp 0x1000345e
mov byte [ebp - 0x2b], dl
lea ecx, [ebp - 0x37]
call fcn.10004078
push eax
lea eax, [ebp - 0x37]
jmp 0x10003a6b
movaps xmm0, xmmword [0x1002a180]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003491
jmp 0x1000342b
movaps xmm0, xmmword [0x10029f70]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x100034b0
jmp 0x1000342b
mov cl, 0xd
mov dword [ebp - 0x34], 0x7f62400d
mov dword [ebp - 0x30], 0x6362696c
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100034e6
mov cl, byte [ebp - 0x34]
jmp 0x100034d7
mov byte [ebp - 0x2c], dl
lea ecx, [ebp - 0x33]
call fcn.10004078
push eax
lea eax, [ebp - 0x33]
jmp 0x10003a6b
sub eax, 0x1e
je 0x1000355c
sub eax, 1
je 0x10003538
sub eax, 1
jne 0x10003a74
movaps xmm0, xmmword [0x1002a710]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x7676
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x11
jb 0x10003523
mov byte [ebp - 0x3a], dl
jmp 0x1000342e
mov cl, 0x74
mov dword [ebp - 0x34], 0x12592274
mov dword [ebp - 0x30], 0x71b06
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100034e6
mov cl, byte [ebp - 0x34]
jmp 0x1000354d
mov cl, 0x60
mov dword [ebp - 0x38], 0xc052460
mov dword [ebp - 0x34], 0x2340130f
mov eax, edx
mov dword [ebp - 0x30], 0xc141301
mov word [ebp - 0x2c], 5
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000346d
mov cl, byte [ebp - 0x38]
jmp 0x1000357b
mov cl, 0x6c
mov dword [ebp - 0x34], 0x9246c
mov dword [ebp - 0x30], 0xe2d4c00
mov eax, edx
mov dword [ebp - 0x2c], 0x1f1f15
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 0xa
jae 0x100035b6
mov cl, byte [ebp - 0x34]
jmp 0x100035a7
mov byte [ebp - 0x29], dl
jmp 0x100034e9
sub eax, 0x22
je 0x100036f2
sub eax, 1
je 0x100036d0
sub eax, 0xd
je 0x1000369d
sub eax, 3
je 0x1000366b
sub eax, 1
je 0x10003649
sub eax, 1
je 0x10003617
sub eax, 1
jne 0x10003a74
movaps xmm0, xmmword [0x1002a160]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003605
jmp 0x1000342b
mov cl, 0x1e
mov dword [ebp - 0x38], 0x7c71591e
mov dword [ebp - 0x34], 0x3e707772
mov eax, edx
mov dword [ebp - 0x30], 0x707b6c5f
mov word [ebp - 0x2c], 0x7f
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000346d
mov cl, byte [ebp - 0x38]
jmp 0x10003636
movaps xmm0, xmmword [0x1002a0a0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x10003659
jmp 0x1000342b
mov cl, 0x42
mov dword [ebp - 0x34], 0x21300d42
mov dword [ebp - 0x30], 0x27300362
mov eax, edx
mov word [ebp - 0x2c], 0x232c
mov byte [ebp - 0x2a], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 9
jae 0x10003695
mov cl, byte [ebp - 0x34]
jmp 0x10003686
mov byte [ebp - 0x2a], dl
jmp 0x100034e9
mov cl, 0x51
mov dword [ebp - 0x38], 0x25301351
mov dword [ebp - 0x34], 0x37343d25
mov eax, edx
mov dword [ebp - 0x30], 0x353d3438
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x100036c8
mov cl, byte [ebp - 0x38]
jmp 0x100036b9
mov byte [ebp - 0x2c], dl
jmp 0x10003470
movaps xmm0, xmmword [str._fHi_c]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x100036dd
mov byte [ebp - 0x29], dl
jmp 0x10003470
mov cl, 0xc
mov dword [ebp - 0x38], 0x6d7e480c
mov dword [ebp - 0x34], 0x2c62636b
mov eax, edx
mov dword [ebp - 0x30], 0x697a6d4f
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x100036c8
mov cl, byte [ebp - 0x38]
jmp 0x1000370e
movaps xmm0, xmmword [0x10029dd0]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x1000372a
jmp 0x100036ea
cmp eax, 0x51
ja 0x100038f1
je 0x100038c5
cmp eax, 0x45
ja 0x10003833
je 0x10003804
sub eax, 0x3d
je 0x100037d2
sub eax, 1
je 0x100037b0
sub eax, 1
je 0x10003791
sub eax, 1
jne 0x10003a74
movaps xmm0, xmmword [0x1002a120]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x1000377f
jmp 0x1000342b
movaps xmm0, xmmword [str._jAM_W]
mov ecx, edx
movups xmmword [ebp - 0x38], xmm0
mov al, byte [ebp - 0x38]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 0xe
jb 0x1000379e
jmp 0x100036ea
movaps xmm0, xmmword [0x1002a1c0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xf
jb 0x100037c0
jmp 0x1000342b
mov cl, 0x71
mov dword [ebp - 0x38], 0x1103f71
mov dword [ebp - 0x34], 0x51021418
mov eax, edx
mov dword [ebp - 0x30], 0x16031e36
mov word [ebp - 0x2c], 0x14
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xc
jae 0x1000346d
mov cl, byte [ebp - 0x38]
jmp 0x100037f1
mov cl, 0x10
mov dword [ebp - 0x34], 0x7f7e4310
mov dword [ebp - 0x30], 0x71473067
mov eax, edx
mov word [ebp - 0x2c], 0x62
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 8
jae 0x1000382b
mov cl, byte [ebp - 0x34]
jmp 0x1000381c
mov byte [ebp - 0x2b], dl
jmp 0x100034e9
sub eax, 0x47
je 0x10003896
sub eax, 1
je 0x1000386e
sub eax, 1
jne 0x10003a74
movaps xmm0, xmmword [0x1002a1b0]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0x31
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x10
jb 0x10003859
mov byte [ebp - 0x3b], dl
jmp 0x1000342e
mov cl, 0x5f
mov dword [ebp - 0x34], 0x3b2d1e5f
mov dword [ebp - 0x30], 0x323e3a2d
mov eax, edx
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x33], cl
inc eax
cmp eax, 7
jae 0x100034e6
mov cl, byte [ebp - 0x34]
jmp 0x10003883
mov cl, 0x68
mov dword [ebp - 0x38], 0x6073a68
mov dword [ebp - 0x34], 0x48031a09
mov eax, edx
mov dword [ebp - 0x30], 0xc060924
mov byte [ebp - 0x2c], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xb
jae 0x100036c8
mov cl, byte [ebp - 0x38]
jmp 0x100038b2
movaps xmm0, xmmword [0x1002a390]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x7d145055
mov byte [ebp - 0x3c], dl
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x13
jb 0x100038dc
mov byte [ebp - 0x3c], dl
jmp 0x10003a5f
sub eax, 0x52
je 0x10003a35
sub eax, 1
je 0x10003a06
sub eax, 1
je 0x100039e0
sub eax, 3
je 0x100039b8
sub eax, 5
je 0x10003983
sub eax, 1
je 0x1000394a
sub eax, 1
jne 0x10003a74
movaps xmm0, xmmword [0x10029e20]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0xe
jb 0x10003935
mov byte [ebp - 0x3d], dl
jmp 0x1000342e
mov cl, 0x23
mov dword [ebp - 0x38], 0x4a506a23
mov dword [ebp - 0x34], 0x4d4c4c4f
mov eax, edx
mov dword [ebp - 0x30], 0x46516203
mov word [ebp - 0x2c], 0x424d
mov byte [ebp - 0x2a], dl
xor byte [ebp + eax - 0x37], cl
inc eax
cmp eax, 0xd
jae 0x1000397b
mov cl, byte [ebp - 0x38]
jmp 0x1000396c
mov byte [ebp - 0x2a], dl
jmp 0x10003470
mov cl, 0x6f
mov dword [ebp - 0x30], 0x61d3f6f
mov dword [ebp - 0x2c], 0x1001c
mov eax, edx
xor byte [ebp + eax - 0x2f], cl
inc eax
cmp eax, 6
jae 0x100039a4
mov cl, byte [ebp - 0x30]
jmp 0x10003995
lea ecx, [ebp - 0x2f]
mov byte [ebp - 0x29], dl
call fcn.10004078
push eax
lea eax, [ebp - 0x2f]
jmp 0x10003a6b
movaps xmm0, xmmword [0x1002a080]
mov ecx, edx
movups xmmword [ebp - 0x4c], xmm0
mov word [ebp - 0x3c], 0xf5b
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x4c]
xor byte [ebp + ecx - 0x4b], al
inc ecx
cmp ecx, 0x11
jb 0x100039ce
jmp 0x10003530
movaps xmm0, xmmword [0x1002a620]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x342711
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x12
jb 0x100039f4
mov byte [ebp - 0x3d], dl
jmp 0x10003a5f
movaps xmm0, xmmword [0x1002a610]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0x5f367277
mov word [ebp - 0x3c], 0x5f5f
mov byte [ebp - 0x3a], dl
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x15
jb 0x10003a23
mov byte [ebp - 0x3a], dl
jmp 0x10003a5f
movaps xmm0, xmmword [0x1002a280]
mov ecx, edx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x40], 0xc652124
mov word [ebp - 0x3c], 0xc
mov al, byte [ebp - 0x50]
xor byte [ebp + ecx - 0x4f], al
inc ecx
cmp ecx, 0x14
jb 0x10003a4f
mov byte [ebp - 0x3b], dl
lea ecx, [ebp - 0x4f]
call fcn.10004078
push eax
lea eax, [ebp - 0x4f]
push eax
lea ecx, [ebp - 0x28]
call fcn.10004009
and dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0xf
mov byte [ebx], 0
lea eax, [ebp - 0x28]
mov ecx, ebx
push eax
call fcn.10003b00
push 0
push 1
lea ecx, [ebp - 0x28]
call fcn.10003f3c
mov eax, ebx
call fcn.1002157b
ret 4