Function at 0x1003a58a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.1002fb2f
add esp, 0xc
jno 0x1003a5a5
rol ecx, 0x16
ror ecx, 0x16
push edx
pop edx
ror ebx, 0x1b
rol ebx, 0x1b
js 0x1003a5c2
pushf
mov esp, esp
push ecx
pop ecx
popf
xchg ecx, ecx
jns 0x1003a5c2
mov edi, 0x48e445c6
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6a
mov byte [ebp - 0x19], 0x57
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xf], 0
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x58
and esp, 0xffffffff
xor edi, dword [esp]
xor edi, dword [esp]
test dword [esp], edi
stc
je 0x1003a61d
lea eax, [eax + 0x61b0]
lea eax, [eax - 0x61b0]
mov eax, eax
jne 0x1003a619
jne 0x1003a61d
mov esp, 0xe44d8ae0
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x1b]
sub al, 1
mov byte [ebp - 0x1b], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
jmp 0x1003a690
lea edi, [edi]
lea esp, [esp]
js 0x1003a6a7
pushf
inc ecx
dec ecx
or esp, 0
popf
jbe 0x1003a6a2
jbe 0x1003a6a4
jns 0x1003a6a7
mov edi, 0xff04f0e8
dec dword [ecx + 0x7d83f845]
clc
add byte [ebp + 7], dh
call fcn.1002ab9c
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x1003a6bc
xor eax, eax
jmp 0x1003a920
jb 0x1003a6be
mov eax, eax
add ecx, dword [esp]
sub ecx, dword [esp]
std
cld
jo 0x1003a6d0
jle 0x1003a6cc
jno 0x1003a6d0
mov esi, 0xe4558d18
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 8]
push eax
call fcn.1004edc3
mov dword [ebp - 4], eax
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.1002fb2f
add esp, 0xc
je 0x1003a6f2
cmp esp, 0x7465
jnp 0x1003a707
jne 0x1003a6fc
jb 0x1003a6fe
jo 0x1003a700
jbe 0x1003a702
jp 0x1003a707
mov edi, 0x7d8328c3
cld
add byte [ebp + 7], dh
cmp dword [ebp - 4], 0
jne 0x1003a714
xor eax, eax
jmp 0x1003a920
push esi
pop esi
jb 0x1003a718
jl 0x1003a71a
xchg edx, esi
xchg edx, esi
jns 0x1003a74c
pushf
test dword [esp + 8], edi
add esi, 0x78f7
sub esi, 0x78f7
lea ebx, [ebx + 0x36dd]
lea ebx, [ebx - 0x36dd]
sub eax, 0
popf
jle 0x1003a745
xchg edx, edi
xchg edx, edi
js 0x1003a74c
mov esp, 0x52fc558b
mov edx, dword [ebp - 4]
push edx
call fcn.100389b2
add esp, 4
mov ecx, ecx
stc
or edx, edx
xor esi, dword [esp]
xor esi, dword [esp]
jle 0x1003a76a
mov esi, esi
jg 0x1003a76a
add eax, 0x6a0e6a
push 0xe
push 0
lea eax, [ebp - 0x1c]
push eax
call fcn.1002fb2f
add esp, 0xc
jl 0x1003a77c
rol esp, 0
shl esp, 0
jo 0x1003a79a
pushf
jns 0x1003a788
not ebx
not ebx
sub edi, 0
neg edi
neg edi
popf
jne 0x1003a797
jno 0x1003a79a
mov ebp, 0x48e445c6
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x12], 0x46
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], 0x6a
mov byte [ebp - 0x19], 0x57
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x6f
mov byte [ebp - 0xf], 0
mov byte [ebp - 0x11], 0x79
mov byte [ebp - 0x10], 0x42
inc ecx
dec ecx
test esp, 0x385a
rol edx, 0
stc
jp 0x1003a7e5
lea edi, [edi]
jnp 0x1003a7e5
mov edi, 0x80e44d8a
jmp 0xf4512fef
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x1b]
sub al, 1
mov byte [ebp - 0x1b], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
test dword [esp], esi
jae 0x1003a868
pushf
lea ecx, [ecx]
popf
mov edx, edx
jnp 0x1003a865
jb 0x1003a868
mov eax, 0x19183d83
add dl, byte [eax]
add byte [edi + edi + 0x23], dh
sar byte [ebx], 4
and al, 0x85
retf 0xe6c1
cmp dword [0x10021918], 0
je 0x1003a8b0
and eax, eax
cmp eax, dword [esp]
test edx, ecx
shl esi, 0
jne 0x1003a89e
pushf
xchg edx, ebx
xchg edx, ebx
test esi, 0xda2
xor eax, 0x7595
xor eax, 0x7595
popf
mov esp, esp
js 0x1003a899
xchg ebx, ebx
je 0x1003a89e
mov edx, 0x52e4558d
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [0x10021918]
push eax
call fcn.1004edc3
mov dword [ebp - 0xc], eax
shl edx, 0
je 0x1003a8be
xchg edi, esi
xchg edi, esi
jbe 0x1003a8bb
jne 0x1003a8be
jmp 0x106db72c
push 0xe
push 0
lea ecx, [ebp - 0x1c]
push ecx
call fcn.1002fb2f
add esp, 0xc
je 0x1003a8d0
xor eax, dword [esp]
xor eax, dword [esp]
ror ecx, 0x1f
ror ecx, 1
jo 0x1003a8e5
jb 0x1003a8df
xchg esp, esp
jno 0x1003a8e5
call 0x4812c34
add byte [edx - 0x7f], dh
stc
pop ss
inc eax
add byte [eax], al
cmp dword [ebp - 0xc], 0
je 0x1003a90d
cmp ecx, 0x4017
jg 0x1003a901
pushf
and esi, 0xffffffff
nop
cmc
popf
jb 0x1003a8fe
jle 0x1003a901
mov esi, 0x52f4558b
mov edx, dword [ebp - 0xc]
push edx
call fcn.100389b2
add esp, 4
stc
jle 0x1003a919
jp 0x1003a912
mov ecx, ecx
lea edi, [edi]
jg 0x1003a919
lcall 0x55ff, 0x5008458b
cld
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4