Function at 0x1003d900
Capabilities:
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x10084318
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x34
mov al, byte [esp + 3]
push ebx
push esi
xor ebx, ebx
push edi
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], al
call fcn.10014380
or esi, 0xffffffff
mov edi, 0x1009d450
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x1009d450
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], ebx
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
push ecx
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 1
push eax
lea eax, [esp + 0x18]
mov ecx, 0x100afa70
push eax
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], bl
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], 0x1003d7e0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov cl, byte [esp + 0xf]
push ebx
mov byte [esp + 0x20], cl
lea ecx, [esp + 0x20]
call fcn.10014380
mov edi, 0x1009d444
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x1009d444
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 3
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 4
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x100afa70
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 3
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], 0x1003d7c0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov dl, byte [esp + 0xf]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], dl
call fcn.10014380
mov edi, 0x100965d4
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x100965d4
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 6
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1c]
push eax
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 7
lea edx, [esp + 0x14]
push eax
push edx
mov ecx, 0x100afa70
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 6
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], fcn.1003d4d0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov al, byte [esp + 0xf]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], al
call fcn.10014380
mov edi, 0x1009d438
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x1009d438
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 9
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
push ecx
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 0xa
push eax
lea eax, [esp + 0x18]
mov ecx, 0x100afa70
push eax
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 9
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], fcn.100187e0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov cl, byte [esp + 0xf]
push ebx
mov byte [esp + 0x20], cl
lea ecx, [esp + 0x20]
call fcn.10014380
mov edi, 0x1009d42c
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x1009d42c
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0xc
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 0xd
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x100afa70
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0xc
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], fcn.10019690
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov dl, byte [esp + 0xf]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], dl
call fcn.10014380
mov edi, 0x10097e90
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x10097e90
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0xf
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1c]
push eax
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 0x10
push eax
lea edx, [esp + 0x18]
push edx
mov ecx, 0x100afa70
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0xf
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], fcn.10030b30
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov al, byte [esp + 0xf]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], al
call fcn.10014380
mov edi, 0x10097e84
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x10097e84
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0x12
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
push ecx
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 0x13
push eax
lea eax, [esp + 0x18]
mov ecx, 0x100afa70
push eax
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0x12
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], fcn.10030ce0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov cl, byte [esp + 0xf]
push ebx
mov byte [esp + 0x20], cl
lea ecx, [esp + 0x20]
call fcn.10014380
mov edi, 0x1009d420
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x1009d420
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0x15
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 0x16
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x100afa70
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0x15
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], fcn.10031560
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov dl, byte [esp + 0xf]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], dl
call fcn.10014380
mov edi, 0x1009d414
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x1009d414
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0x18
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1c]
push eax
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 0x19
lea edx, [esp + 0x14]
push eax
push edx
mov ecx, 0x100afa70
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0x18
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], 0x10033420
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov al, byte [esp + 0xf]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], al
call fcn.10014380
mov edi, 0x1009d404
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x1009d404
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0x1b
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
push ecx
mov dword [esp + 0x14], ebx
push edx
lea ecx, [esp + 0x34]
call fcn.1003f330
mov byte [esp + 0x48], 0x1c
push eax
lea eax, [esp + 0x18]
mov ecx, 0x100afa70
push eax
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0x1b
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], fcn.1003be20
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov cl, byte [esp + 0xf]
push ebx
mov byte [esp + 0x20], cl
lea ecx, [esp + 0x20]
call fcn.10014380
mov edi, 0x1009b57c
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x1009b57c
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0x1e
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 0x1f
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x100afa70
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0x1e
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], 0x1003bda0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov dl, byte [esp + 0xf]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], dl
call fcn.10014380
mov edi, 0x10097e54
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x10097e54
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0x21
mov dword [esp + 0x10], ebx
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1c]
push eax
push ecx
lea ecx, [esp + 0x34]
call fcn.1003f330
mov byte [esp + 0x48], 0x22
lea edx, [esp + 0x14]
push eax
push edx
mov ecx, 0x100afa70
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0x21
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], fcn.10015fe0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov al, byte [esp + 0xf]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], al
call fcn.10014380
mov edi, 0x1009d3f8
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x1009d3f8
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0x24
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
push ecx
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 0x25
push eax
lea eax, [esp + 0x18]
mov ecx, 0x100afa70
push eax
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0x24
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], 0x1002f360
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov cl, byte [esp + 0xf]
push ebx
mov byte [esp + 0x20], cl
lea ecx, [esp + 0x20]
call fcn.10014380
mov edi, 0x10097ab0
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x10097ab0
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0x27
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 0x28
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x100afa70
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0x27
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], fcn.1001c950
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov dl, byte [esp + 0xf]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], dl
call fcn.10014380
mov edi, 0x10097e60
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x10097e60
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0x2a
lea eax, [esp + 0x10]
lea ecx, [esp + 0x1c]
push eax
push ecx
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 0x2b
lea edx, [esp + 0x14]
push eax
push edx
mov ecx, 0x100afa70
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0x2a
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], 0x1003d4a0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov al, byte [esp + 0xf]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], al
call fcn.10014380
mov edi, 0x10097e6c
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x10097e6c
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0x2d
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
push ecx
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 0x2e
push eax
lea eax, [esp + 0x18]
mov ecx, 0x100afa70
push eax
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0x2d
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], fcn.1002f080
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov cl, byte [esp + 0xf]
push ebx
mov byte [esp + 0x20], cl
lea ecx, [esp + 0x20]
call fcn.10014380
mov edi, 0x10097e78
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x10097e78
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0x30
lea edx, [esp + 0x10]
lea eax, [esp + 0x1c]
push edx
push eax
lea ecx, [esp + 0x34]
mov dword [esp + 0x18], ebx
call fcn.1003f330
mov byte [esp + 0x48], 0x31
lea ecx, [esp + 0x14]
push eax
push ecx
mov ecx, 0x100afa70
call fcn.1003f230
mov edi, dword [eax]
mov byte [esp + 0x48], 0x30
push 1
lea ecx, [esp + 0x30]
call fcn.10014380
mov dword [edi + 0x1c], fcn.10030300
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov dl, byte [esp + 0xf]
push ebx
lea ecx, [esp + 0x20]
mov byte [esp + 0x20], dl
call fcn.10014380
mov edi, 0x1009d3ec
mov ecx, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x1009d3ec
lea ecx, [esp + 0x24]
call fcn.1003f490
mov dword [esp + 0x48], 0x33
lea eax, [esp + 0x1c]
push eax
mov ecx, 0x100afa70
call fcn.10034210
mov dword [eax], fcn.10030760
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
lea ecx, [esp + 0xf]
push ecx
push 0x1009d38c
lea ecx, [esp + 0x24]
call fcn.10034060
mov dword [esp + 0x48], 0x34
lea edx, [esp + 0x1c]
push edx
mov ecx, 0x100afa70
call fcn.10034210
mov dword [eax], 0x1003d7f0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
lea eax, [esp + 0xf]
lea ecx, [esp + 0x1c]
push eax
push 0x10097e48
call fcn.10034060
mov dword [esp + 0x48], 0x35
lea ecx, [esp + 0x1c]
push ecx
mov ecx, 0x100afa70
call fcn.10034210
mov dword [eax], fcn.1002d310
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
lea edx, [esp + 0xf]
lea ecx, [esp + 0x1c]
push edx
push 0x1009d3dc
call fcn.10034060
mov dword [esp + 0x48], 0x36
lea eax, [esp + 0x1c]
push eax
mov ecx, 0x100afa70
call fcn.10034210
mov dword [eax], 0x1003d7a0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
lea ecx, [esp + 0xf]
push ecx
push 0x1009d3d0
lea ecx, [esp + 0x24]
call fcn.10034060
mov dword [esp + 0x48], 0x37
lea edx, [esp + 0x1c]
push edx
mov ecx, 0x100afa70
call fcn.10034210
mov dword [eax], 0x1003d470
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
lea eax, [esp + 0xf]
push eax
push 0x1009d3c0
lea ecx, [esp + 0x24]
call fcn.10034060
mov dword [esp + 0x48], 0x38
lea ecx, [esp + 0x1c]
push ecx
mov ecx, 0x100afa70
call fcn.10034210
mov dword [eax], 0x1003d490
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
lea edx, [esp + 0xf]
lea ecx, [esp + 0x1c]
push edx
push 0x1009d294
call fcn.10034060
mov dword [esp + 0x48], 0x39
lea eax, [esp + 0x1c]
push eax
mov ecx, 0x100afa70
call fcn.10034210
mov dword [eax], 0x1003c410
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
lea ecx, [esp + 0xf]
push ecx
push 0x1009d3b4
lea ecx, [esp + 0x24]
call fcn.10034060
mov dword [esp + 0x48], 0x3a
lea edx, [esp + 0x1c]
push edx
mov ecx, 0x100afa70
call fcn.10034210
mov dword [eax], 0x10032cc0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
lea eax, [esp + 0xf]
lea ecx, [esp + 0x1c]
push eax
push 0x1009d3a4
call fcn.10034060
mov dword [esp + 0x48], 0x3b
lea ecx, [esp + 0x1c]
push ecx
mov ecx, 0x100afa70
call fcn.10034210
mov dword [eax], 0x10032310
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
lea edx, [esp + 0xf]
lea ecx, [esp + 0x1c]
push edx
push 0x1009d398
call fcn.10034060
mov dword [esp + 0x48], 0x3c
lea eax, [esp + 0x1c]
push eax
mov ecx, 0x100afa70
call fcn.10034210
mov dword [eax], 0x10030240
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
lea ecx, [esp + 0xf]
push ecx
push 0x10097e08
lea ecx, [esp + 0x24]
call fcn.10034060
mov dword [esp + 0x48], 0x3d
lea edx, [esp + 0x1c]
push edx
mov ecx, 0x100afa70
call fcn.10034210
mov dword [eax], fcn.100281c0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
lea eax, [esp + 0xf]
lea ecx, [esp + 0x1c]
push eax
push 0x10097e10
call fcn.10034060
mov dword [esp + 0x48], 0x3e
lea ecx, [esp + 0x1c]
push ecx
mov ecx, 0x100afa70
call fcn.10034210
mov dword [eax], fcn.1001b6d0
mov dword [esp + 0x48], esi
push 1
lea ecx, [esp + 0x20]
call fcn.10014380
mov ecx, dword [esp + 0x40]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x40
ret