Function at 0x10003a00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x19c
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x198], edx
push ebx
mov esi, ecx
mov dword [ebp - 0x114], 0x330076
push ebx
push ebx
push ebx
lea eax, [esi + 0x298]
mov dword [ebp - 0xe8], 0x750073
push eax
mov eax, dword [esi + 0x70]
mov dword [ebp - 0x11c], 0x760069
mov dword [ebp - 0xf8], 0x540064
mov dword [ebp - 0x118], 0x2f0065
mov dword [ebp - 0xdc], 0x65
mov dword [ebp - 0x110], 0x66002f
mov dword [ebp - 0xf0], 0x3d0065
mov dword [ebp - 0x120], 0x720064
mov dword [ebp - 0x100], 0x6c0070
mov dword [ebp - 0xfc], 0x61006f
mov dword [ebp - 0x10c], 0x6c0069
mov dword [ebp - 0x108], 0x730065
mov dword [ebp - 0xf4], 0x700079
mov dword [ebp - 0x12c], 0x6c0070
mov dword [ebp - 0xe4], 0x61006d
mov dword [ebp - 0xec], 0x650072
mov dword [ebp - 0xe0], 0x6c0062
mov dword [ebp - 0x130], 0x75002f
mov dword [ebp - 0x124], 0x2f0064
mov dword [ebp - 0x128], 0x61006f
mov dword [ebp - 0x104], 0x75003f
call eax
mov ecx, eax
mov dword [ebp - 0x19c], ecx
test ecx, ecx
je 0x1000405d
push ebx
push 0x1bb
lea eax, [esi + 0x2d4]
push eax
mov eax, dword [esi + 0x74]
push ecx
call eax
mov ecx, eax
mov dword [ebp - 0x194], ecx
test ecx, ecx
je 0x1000404f
push edi
push 0x800000
push ebx
push ebx
push ebx
lea eax, [ebp - 0x130]
push eax
lea eax, [esi + 0x2ac]
push eax
mov eax, dword [esi + 0x78]
push ecx
call eax
mov edi, eax
test edi, edi
je 0x10004040
mov edx, edi
mov dword [ebp - 0x144], 0x650073
mov ecx, esi
mov dword [ebp - 0x184], 0x6e0065
mov dword [ebp - 0x170], 0x700061
mov dword [ebp - 0x178], 0x650070
mov dword [ebp - 0x150], 0x20003b
mov dword [ebp - 0x174], 0x20003a
mov dword [ebp - 0x160], 0x6f0069
mov dword [ebp - 0x158], 0x73006a
mov dword [ebp - 0x15c], 0x2f006e
mov dword [ebp - 0x140], 0x3d0074
mov dword [ebp - 0x188], 0x74006e
mov dword [ebp - 0x154], 0x6e006f
mov dword [ebp - 0x168], 0x630069
mov dword [ebp - 0x164], 0x740061
mov dword [ebp - 0x18c], 0x6f0043
mov dword [ebp - 0x16c], 0x6c0070
mov dword [ebp - 0x180], 0x2d0074
mov dword [ebp - 0x13c], 0x540055
mov dword [ebp - 0x148], 0x720061
mov dword [ebp - 0x138], 0x2d0046
mov dword [ebp - 0x17c], 0x790054
mov dword [ebp - 0x14c], 0x680063
mov dword [ebp - 0x134], 0x38
mov dword [ebp - 0x8c], 0x740065
mov dword [ebp - 0xb0], 0x3a0065
mov dword [ebp - 0xd4], 0x700055
mov dword [ebp - 0xcc], 0x640061
mov dword [ebp - 0x88], 0x73002d
mov dword [ebp - 0xc4], 0x6e006f
mov dword [ebp - 0xc8], 0x43002d
mov dword [ebp - 0x7c], 0x6d
mov dword [ebp - 0x98], 0x6e006f
mov dword [ebp - 0xb4], 0x700079
mov dword [ebp - 0x94], 0x6f002f
mov dword [ebp - 0xa0], 0x610063
mov dword [ebp - 0x9c], 0x690074
mov dword [ebp - 0xc0], 0x650074
mov dword [ebp - 0xbc], 0x74006e
mov dword [ebp - 0xa8], 0x700070
mov dword [ebp - 0xd0], 0x6f006c
mov dword [ebp - 0xac], 0x610020
mov dword [ebp - 0xb8], 0x54002d
mov dword [ebp - 0xd8], 0x2d0058
mov dword [ebp - 0x80], 0x610065
mov dword [ebp - 0x84], 0x720074
mov dword [ebp - 0x90], 0x740063
mov dword [ebp - 0xa4], 0x69006c
mov dword [ebp - 0x24], 0x650074
mov dword [ebp - 0x20], 0x74006e
mov dword [ebp - 0xc], 0x250020
mov dword [ebp - 0x38], 0x700055
mov dword [ebp - 0x18], 0x6e0065
mov dword [ebp - 8], 0x64
mov dword [ebp - 0x34], 0x6f006c
mov dword [ebp - 0x1c], 0x4c002d
mov dword [ebp - 0x3c], 0x2d0058
mov dword [ebp - 0x30], 0x640061
mov dword [ebp - 0x28], 0x6e006f
mov dword [ebp - 0x10], 0x3a0068
mov dword [ebp - 0x2c], 0x43002d
mov dword [ebp - 0x14], 0x740067
call fcn.100036c0
test eax, eax
je 0x10004040
push 0x20000000
push 0xffffffffffffffff
lea eax, [ebp - 0x18c]
push eax
mov eax, dword [esi + 0x84]
push edi
call eax
test eax, eax
je 0x10004040
push 0x20000000
push 0xffffffffffffffff
lea eax, [ebp - 0xd8]
push eax
mov eax, dword [esi + 0x84]
push edi
call eax
test eax, eax
je 0x10004040
push dword [ebp + 8]
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xd8]
push eax
mov eax, dword [esi + 0xa8]
call eax
add esp, 0xc
lea eax, [ebp - 0xd8]
push 0x20000000
push 0xffffffffffffffff
push eax
mov eax, dword [esi + 0x84]
push edi
call eax
test eax, eax
je 0x10004040
mov eax, dword [esi + 0x310]
push ebx
push eax
push eax
push dword [esi + 0x30c]
mov eax, dword [esi + 0x7c]
push ebx
push ebx
push edi
mov dword [ebp - 0x68], 0x6f004c
mov dword [ebp - 0x60], 0x690074
mov dword [ebp - 0x5c], 0x6e006f
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x64], 0x610063
mov dword [ebp - 0x190], ebx
call eax
test eax, eax
je 0x10004035
mov eax, dword [esi + 0x80]
push ebx
push edi
call eax
test eax, eax
je 0x10004035
push ebx
lea eax, [ebp - 0x190]
push eax
push ebx
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esi + 0x88]
push 0xffff
push edi
call eax
test eax, eax
jne 0x10003ea2
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x10004035
mov eax, dword [ebp - 0x190]
add eax, 2
push eax
push esi
call fcn.10004ca7
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x10004035
push 0
lea eax, [ebp - 0x190]
push eax
push ebx
lea eax, [ebp - 0x68]
push eax
mov eax, dword [esi + 0x88]
push 0xffff
push edi
call eax
test eax, eax
jne 0x10003ee9
push ebx
push esi
call fcn.10004d08
add esp, 8
mov eax, dword [esi + 0x8c]
push edi
call eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x78], 0x700075
push eax
mov eax, dword [esi + 0xa0]
xor edi, edi
push ebx
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x74], 0x6f006c
mov dword [ebp - 0x70], 0x640061
call eax
test eax, eax
je 0x10003f45
push eax
mov eax, dword [esi + 0x44]
push ebx
call eax
push 0x800000
push edi
push edi
push edi
push ebx
lea eax, [esi + 0x2cc]
push eax
push dword [ebp - 0x194]
mov eax, dword [esi + 0x78]
call eax
mov edi, eax
push ebx
push esi
call fcn.10004d08
add esp, 8
test edi, edi
je 0x1000403e
push 0x20000000
push 0xffffffffffffffff
lea eax, [ebp - 0x54]
mov dword [ebp - 0x4c], 0x6e0065
push eax
mov eax, dword [esi + 0x84]
push edi
mov dword [ebp - 0x54], 0x6f0043
mov dword [ebp - 0x24], 0x2f006e
mov dword [ebp - 0x30], 0x630069
mov dword [ebp - 0x28], 0x6f0069
mov dword [ebp - 0x10], 0x650072
mov dword [ebp - 0x20], 0x63006f
mov dword [ebp - 0x50], 0x74006e
mov dword [ebp - 0xc], 0x6d0061
mov dword [ebp - 0x2c], 0x740061
mov dword [ebp - 0x44], 0x790054
mov dword [ebp - 0x18], 0x2d0074
mov dword [ebp - 0x34], 0x6c0070
mov dword [ebp - 0x1c], 0x650074
mov dword [ebp - 0x14], 0x740073
mov dword [ebp - 0x3c], 0x20003a
mov dword [ebp - 0x40], 0x650070
mov dword [ebp - 8], 0
mov dword [ebp - 0x38], 0x700061
mov dword [ebp - 0x48], 0x2d0074
call eax
test eax, eax
je 0x10004035
mov eax, dword [ebp + 8]
push 0
push eax
push eax
push dword [ebp - 0x198]
mov eax, dword [esi + 0x7c]
push 0
push 0
push edi
call eax
test eax, eax
je 0x10004035
mov eax, dword [esi + 0x80]
push 0
push edi
call eax
test eax, eax
je 0x10004035
mov eax, dword [esi + 0x8c]
push edi
call eax
mov ebx, 1
jmp 0x10004040
mov eax, dword [esi + 0x8c]
push edi
call eax
xor ebx, ebx
push dword [ebp - 0x194]
mov eax, dword [esi + 0x8c]
call eax
pop edi
push dword [ebp - 0x19c]
mov ecx, dword [esi + 0x8c]
call ecx
mov ecx, dword [ebp - 4]
mov eax, ebx
pop esi
xor ecx, ebp
pop ebx
call fcn.10006e80
mov esp, ebp
pop ebp
ret