Function at 0x10003021
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
or edx, 0x668
add edx, 0x1150b
pop edx
mov eax, dword [ebp - 0x378]
add eax, 0xe
mov dword [ebp - 0x1c68], eax
push ecx
add ecx, 0xcda7
call 0x10002f25
add byte [edi + edi], bh
dec ebx
dec edi
aaa
dec ebx
dec ebp
cmp eax, dword ds:[ebx - 0x3e7efb3c]
pop ebp
add dword [bx + si], eax
call 0x10002f3c
add byte [ebp + 0x42], cl
dec edx
xor eax, 0x3543404c
add esp, 4
pop ecx
cmp dword [ebp - 0x378], 0
je 0x10002f52
cmp dword [ebp - 0xa50], 0
jne 0x10002f98
push ecx
jmp 0x10002f5b
pop ecx
push ebx
jmp 0x10002f64
call 0x10002f74
add byte [ecx + 0x45], cl
xor eax, dword [edi + 0x4c]
inc esp
inc ebx
inc ebx
push eax
dec edi
add esp, 4
or ebx, 0xa197
and ebx, 0x15975
pop ebx
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x1c1c], ecx
push 0
call dword [ebp - 0x1c1c]
mov dword [ebp - 0x1d38], 0xa
push ecx
sub ecx, 0x79d2
jmp 0x10002faf
pop ecx
push eax
push esi
add esp, 4
or eax, 0xba04
add eax, 0x11d6b
xor eax, 0xe870
pop eax
push ebx
push edi
add esp, 4
xor ebx, 0x744e
pop ebx
mov edx, dword [ebp - 0x378]
mov al, byte [edx + 0xa]
mov byte [ebp - 0x3b9], al
mov ecx, dword [ebp - 0xa50]
sub ecx, dword [ebp - 0x378]
mov dword [ebp - 0x1580], ecx
mov dword [ebp - 0xc6c], 0
push ebx
xor ebx, 0xcb4e
pop ebx
push ecx
push eax
add esp, 4
xor ecx, 0x2891
call 0x10003021
add byte [edi + 0x36], al
push eax
dec ecx
cmp cl, byte [eax + 0x35]
add esp, 4
add ecx, 0x601c
sub ecx, 0x8d54
pop ecx
mov byte [ebp - 0x974], 0x56
mov byte [ebp - 0x973], 0x69
mov byte [ebp - 0x972], 0x72
mov byte [ebp - 0x971], 0x74
mov byte [ebp - 0x970], 0x75
mov byte [ebp - 0x96f], 0x61
mov byte [ebp - 0x96e], 0x6c
mov byte [ebp - 0x96d], 0x50
mov byte [ebp - 0x96c], 0x72
mov byte [ebp - 0x96b], 0x6f
mov byte [ebp - 0x96a], 0x74
mov byte [ebp - 0x969], 0x65
mov byte [ebp - 0x968], 0x63
mov byte [ebp - 0x967], 0x74
mov byte [ebp - 0x966], 0
push ebx
push eax
add esp, 4
xor ebx, 0x15cba
or ebx, 0x430c
and ebx, 0x5e36
pop ebx
push ecx
xor ecx, 0x152c1
sub ecx, 0x39e2
and ecx, 0x38aa
or ecx, 0x1184d
pop ecx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1c20], edx
mov eax, dword [ebp - 0x1c20]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1c24], ecx
mov edx, dword [ebp - 0x1c24]
mov dword [ebp - 0x1544], edx
push edx
sub edx, 0xe1c9
xor edx, 0x4e0a
pop edx
push edx
or edx, 0x11e62
or edx, 0x85a9
and edx, 0x7e67
call 0x10003122
add byte [ecx + 0x39], al
inc ebx
inc esi
cmp byte [esi + 0x3b], cl
add esp, 4
pop edx
cmp dword [ebp - 0x1544], 0
jne 0x1000313e
mov dword [ebp - 0x2a0], 0
jmp 0x100033e5
mov eax, dword [ebp - 0x1544]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc48], edx
push edx
and edx, 0xcdd7
sub edx, 0x3d55
or edx, 0x849
jmp 0x10003168
pop edx
push esi
and esi, 0x2977
or esi, 0xc54b
pop esi
push esi
push edi
add esp, 4
jmp 0x10003181
pop esi
cmp dword [ebp - 0xc48], 0
jne 0x1000319a
mov dword [ebp - 0x2a0], 0
jmp 0x100033e5
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0x4cc], eax
push ebx
push ecx
add esp, 4
add ebx, 0x7061
or ebx, 0xd270
pop ebx
push esi
and esi, 0xc109
sub esi, 0x776
pop esi
push ebx
push esi
add esp, 4
xor ebx, 0x5064
and ebx, 0x11685
pop ebx
lea ecx, [ebp - 0x15d0]
mov dword [ebp - 0xc44], ecx
mov edx, dword [ebp - 0x4cc]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc40], eax
invalid
invalid
push dword [ebx]
leave
mov word [ebp - 0x1b8], cx
xor edx, edx
mov word [ebp - 0x2c], dx
push ecx
call 0x10003212
add byte [eax + 0x47], al
dec esp
cmp dword [edx + 0x42], ecx
cmp dword [edx], edi
cmp al, byte [ebx - 0x167efb3c]
dec esp
push ecx
add dword [eax], eax
sub ecx, 0x124e2
sub ecx, 0xffee
pop ecx
push esi
push edi
add esp, 4
xor esi, 0x12395
pop esi
mov eax, dword [ebp - 0xc40]
mov cx, word [eax]
mov word [ebp - 0xfc2], cx
mov edx, dword [ebp - 0xc40]
add edx, 2
mov dword [ebp - 0xc40], edx
mov ax, word [ebp - 0xfc2]
mov word [ebp - 0x1b8], ax
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xfc4], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xfc4]
mov word [ebp - 0x2c], cx
push edi
or edi, 0x12635
and edi, 0xd069
or edi, 0x2e3b
add edi, 0xe903
pop edi
push edi
push eax
add esp, 4
jmp 0x100032b0
add edi, 0x40a3
xor edi, 0xd373
pop edi
movzx edx, word [ebp - 0x2c]
test edx, edx
jne 0x100032da
movzx eax, word [ebp - 0x1b8]
movzx ecx, word [ebp - 0x2c]
sub eax, ecx
mov dword [ebp - 0x154c], eax
jmp 0x10003334
movzx edx, word [ebp - 0x1b8]
movzx eax, word [ebp - 0x2c]
cmp edx, eax
je 0x10003202
movzx ecx, word [ebp - 0x1b8]
xor ecx, 0x20
movzx edx, word [ebp - 0x2c]
cmp ecx, edx
je 0x10003202
movzx eax, word [ebp - 0x1b8]
movzx ecx, word [ebp - 0x2c]
cmp eax, ecx
jge 0x1000331e
mov dword [ebp - 0x1548], 0xffffffff
jmp 0x10003328
mov dword [ebp - 0x1548], 1
mov edx, dword [ebp - 0x1548]
mov dword [ebp - 0x154c], edx
cmp dword [ebp - 0x154c], 0
jne 0x1000337d
push esi
and esi, 0x2547
xor esi, 0xab7a
pop esi
push ebx
push ebx
add esp, 4
add ebx, 0x138fb
and ebx, 0x19fb
jmp 0x10003362
pop ebx
push ecx
push ebx
add esp, 4
or ecx, 0x12e15
pop ecx
mov eax, dword [ebp - 0x4cc]
test dword [ebx + edi*8], esi
invalid
dec dword [ecx - 0x29f7b]
invalid
jmp 0x100033e5
push ecx
and ecx, 0x47d6
call 0x10003391
add byte [ebx], dh
dec edi
dec ebp
inc esi
inc ecx
xor al, 0x44
add esp, 4
sub ecx, 0x648d
pop ecx
push eax
or eax, 0xcb46
add eax, 0x537
or eax, 0x13de3
pop eax
mov ecx, dword [ebp - 0x4cc]
mov edx, dword [ecx]
mov dword [ebp - 0x4cc], edx
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0xc48]
je 0x100033db
mov ecx, dword [ebp - 0x4cc]
cmp dword [ecx + 0x30], 0
jne 0x100031a6
mov dword [ebp - 0x2a0], 0
push ebx
xor ebx, 0x1433b
and ebx, 0x12cef
or ebx, 0x7254
sub ebx, 0x8d80
pop ebx
push ecx
push esi
add esp, 4
sub ecx, 0x11b3d
and ecx, 0x15ac6
sub ecx, 0x15c60
pop ecx
cmp dword [ebp - 0x2a0], 0
jne 0x10003d1b
mov edx, 0x6b
mov word [ebp - 0x166c], dx
mov eax, 0x65
mov word [ebp - 0x166a], ax
mov ecx, 0x72
mov word [ebp - 0x1668], cx
mov edx, 0x6e
mov word [ebp - 0x1666], dx
mov eax, 0x65
mov word [ebp - 0x1664], ax
mov ecx, 0x6c
mov word [ebp - 0x1662], cx
mov edx, 0x33
mov word [ebp - 0x1660], dx
mov eax, 0x32
mov word [ebp - 0x165e], ax
mov ecx, 0x2e
mov word [ebp - 0x165c], cx
mov edx, 0x64
mov word [ebp - 0x165a], dx
mov eax, 0x6c
mov word [ebp - 0x1658], ax
mov ecx, 0x6c
mov word [ebp - 0x1656], cx
xor edx, edx
mov word [ebp - 0x1654], dx
push edi
jmp 0x100034c4
pop edi
push edx
push esi
add esp, 4
call 0x100034d9
add byte [ecx + 0x33], al
inc esp
aas
inc eax
dec edx
inc esp
dec ecx
dec esi
add esp, 4
pop edx
push eax
push eax
add esp, 4
sub eax, 0x2b1b
xor eax, 0x5eee
pop eax
mov byte [ebp - 0x85c], 0x4c
test dword [edi + esi*8 - 0x39b30001], esp
test dword [ebp + 0x6ffffff7], esp
mov byte [ebp - 0x85a], 0x61
mov byte [ebp - 0x859], 0x64
mov byte [ebp - 0x858], 0x4c
mov byte [ebp - 0x857], 0x69
mov byte [ebp - 0x856], 0x62
mov byte [ebp - 0x855], 0x72
mov byte [ebp - 0x854], 0x61
mov byte [ebp - 0x853], 0x72
mov byte [ebp - 0x852], 0x79
mov byte [ebp - 0x851], 0x57
mov byte [ebp - 0x850], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c28], eax
mov ecx, dword [ebp - 0x1c28]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1c2c], edx
mov eax, dword [ebp - 0x1c2c]
mov dword [ebp - 0x1550], eax
push eax
push edi
add esp, 4
and eax, 0xf75e
or eax, 0xd1d7
xor eax, 0xc876
pop eax
push ebx
add ebx, 0x5cb1
sub ebx, 0xa237
add ebx, 0xe15c
add ebx, 0xd67d
pop ebx
cmp dword [ebp - 0x1550], 0
jne 0x100035bb
mov dword [ebp - 0x74c], 0
jmp 0x10003862
mov ecx, dword [ebp - 0x1550]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc54], eax
push edx
push ecx
add esp, 4
and edx, 0x15953
add edx, 0x1753c
call 0x100035ed
add byte [edi], bh
cmp eax, dword [edi + 0x3b]
dec edi
cmp al, 0x3a
dec esi
inc ebx
add esp, 4
add edx, 0x178ba
pop edx
push esi
add esi, 0x6f92
pop esi
cmp dword [ebp - 0xc54], 0
jne 0x10003617
mov dword [ebp - 0x74c], 0
jmp 0x10003862
mov ecx, dword [ebp - 0xc54]
mov dword [ebp - 0x4d0], ecx
push esi
add esi, 0x12e5a
xor esi, 0x15d5a
add esi, 0x5a5e
pop esi
push esi
push edx
add esp, 4
or esi, 0x1161e
or esi, 0xdf0d
xor esi, 0xfbf2
or esi, 0x10943
pop esi
lea edx, [ebp - 0x166c]
mov dword [ebp - 0xc50], edx
mov eax, dword [ebp - 0x4d0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc4c], ecx