Function at 0x100038c1
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x420
mov eax, 0x100676b3
call fcn.10052d32
mov eax, dword [ebp + 8]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x41c], eax
xor eax, eax
mov esi, 0xff
mov dword [ebp - 0x428], eax
push esi
push eax
mov byte [ebp - 0x290], al
lea eax, [ebp - 0x28f]
push eax
call fcn.1004db40
add esp, 0xc
push 0x10
pop ebx
lea edi, [ebp - 0x290]
call fcn.10003763
push esi
lea eax, [ebp - 0x38f]
push 0
push eax
mov byte [ebp - 0x390], 0
call fcn.1004db40
lea eax, [ebp - 0x428]
add esp, 0xc
push eax
call fcn.1004e8cd
mov eax, dword [ebp - 0x428]
pop ecx
push 0x1e
pop ecx
xor edx, edx
div ecx
lea edi, [ebp - 0x390]
mov ebx, edx
add ebx, ecx
call fcn.10003763
xor ebx, ebx
push esi
lea eax, [ebp - 0x18f]
push ebx
push eax
mov byte [ebp - 0x190], bl
call fcn.1004db40
mov eax, dword [ebp - 0x41c]
add esp, 0xc
cmp byte [eax], 0x61
jne 0x10003a52
lea eax, [ebp - 0x420]
push eax
mov ecx, 0x10077304
call fcn.10005228
cmp dword [ebp + 0x10], 0xb7c
mov dword [ebp - 4], ebx
jne 0x100039a2
push 0x10077308
jmp 0x100039b0
cmp dword [ebp + 0x10], 0xb7d
jne 0x100039bc
push 0x1007730c
lea eax, [ebp - 0x420]
push eax
call fcn.10005316
lea eax, [ebp - 0x390]
push eax
push dword [ebp - 0x420]
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x190]
push pe_nt_image_headers32
push eax
mov byte [ebp - 0x20], 0x65
mov byte [ebp - 0x28], 0x25
mov byte [ebp - 0x1e], 0x25
mov byte [ebp - 0x1c], 0x26
mov byte [ebp - 0x25], 0x6e
mov byte [ebp - 0x23], 0x74
mov byte [ebp - 0x17], 0x3d
mov byte [ebp - 0x26], 0x69
mov byte [ebp - 0x1b], 0x73
mov byte [ebp - 0x15], 0x73
mov byte [ebp - 0x14], bl
mov byte [ebp - 0x1a], 0x61
mov byte [ebp - 0x24], 0x73
mov byte [ebp - 0x1f], 0x3d
mov byte [ebp - 0x16], 0x25
mov byte [ebp - 0x18], 0x74
mov byte [ebp - 0x19], 0x6c
mov byte [ebp - 0x21], 0x70
mov byte [ebp - 0x27], 0x73
mov byte [ebp - 0x22], 0x79
mov byte [ebp - 0x1d], 0x73
call fcn.1004bede
add esp, 0x18
push 0x15
pop ecx
lea eax, [ebp - 0x28]
mov byte [eax], bl
inc eax
dec ecx
jne 0x10003a41
mov eax, dword [ebp - 0x420]
jmp 0x10003cc0
push 8
pop ecx
mov esi, 0x10077310
lea edi, [ebp - 0x8c]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x41c]
lea eax, [ebp - 0x41c]
push eax
movsb byte es:[edi], byte [esi]
call fcn.10005228
lea eax, [ebp - 0x424]
push eax
mov ecx, 0x10077334
mov dword [ebp - 4], 1
call fcn.10005228
lea eax, [ebp - 0x41c]
push 0x10077338
push eax
mov byte [ebp - 4], 2
call fcn.100053d9
pop ecx
pop ecx
test al, al
je 0x10003aaf
push 0x1007733c
jmp 0x10003acb
lea eax, [ebp - 0x41c]
push 0x10077340
push eax
call fcn.100053d9
pop ecx
pop ecx
test al, al
je 0x10003ad7
push 0x10077344
lea eax, [ebp - 0x424]
push eax
call fcn.10005316
lea eax, [ebp - 0x390]
push eax
xor eax, eax
cmp dword [0x1007d864], ebx
mov byte [ebp - 0x47], 0x25
setne al
mov byte [ebp - 0x2e], 0x3d
mov byte [ebp - 0x5d], 0x73
mov byte [ebp - 0x3d], 0x25
mov byte [ebp - 0x41], 0x25
mov byte [ebp - 0x42], 0x69
mov byte [ebp - 0x40], 0x69
push eax
xor eax, eax
cmp dword [0x1007d860], ebx
mov byte [ebp - 0x67], 0x73
setne al
mov byte [ebp - 0x3a], 0x69
mov byte [ebp - 0x4b], 0x25
mov byte [ebp - 0x4e], 0x74
mov byte [ebp - 0x60], 0x65
mov byte [ebp - 0x53], 0x69
mov byte [ebp - 0x3e], 0x69
push eax
xor eax, eax
cmp dword [0x1007d85c], ebx
mov byte [ebp - 0x4d], 0x65
setne al
mov byte [ebp - 0x38], 0x69
mov byte [ebp - 0x2c], 0x73
mov byte [ebp - 0x32], 0x73
mov byte [ebp - 0x4c], 0x3d
mov byte [ebp - 0x57], 0x3d
mov byte [ebp - 0x3f], 0x25
push eax
xor eax, eax
cmp dword [0x1007d858], ebx
mov byte [ebp - 0x43], 0x25
setne al
mov byte [ebp - 0x37], 0x25
mov byte [ebp - 0x36], 0x69
mov byte [ebp - 0x33], 0x26
mov byte [ebp - 0x5b], 0x69
mov byte [ebp - 0x65], 0x6e
mov byte [ebp - 0x3b], 0x25
push eax
mov byte [ebp - 0x31], 0x61
mov byte [ebp - 0x63], 0x74
mov byte [ebp - 0x45], 0x25
mov byte [ebp - 0x5a], 0x6e
mov byte [ebp - 0x2d], 0x25
mov byte [ebp - 0x5e], 0x25
mov byte [ebp - 0x52], 0x6e
mov byte [ebp - 0x49], 0x25
mov byte [ebp - 0x62], 0x79
mov byte [ebp - 0x30], 0x6c
mov byte [ebp - 0x55], 0x73
mov byte [ebp - 0x50], 0x74
mov byte [ebp - 0x4f], 0x61
mov byte [ebp - 0x51], 0x73
mov byte [ebp - 0x59], 0x73
mov byte [ebp - 0x44], 0x69
mov byte [ebp - 0x35], 0x25
mov byte [ebp - 0x5c], 0x26
mov byte [ebp - 0x66], 0x69
mov byte [ebp - 0x54], 0x26
mov byte [ebp - 0x4a], 0x69
mov byte [ebp - 0x64], 0x73
mov byte [ebp - 0x48], 0x69
mov byte [ebp - 0x46], 0x69
mov byte [ebp - 0x2f], 0x74
mov byte [ebp - 0x3c], 0x69
mov byte [ebp - 0x39], 0x25
mov byte [ebp - 0x58], 0x70
mov byte [ebp - 0x61], 0x70
mov byte [ebp - 0x34], 0x69
mov byte [ebp - 0x5f], 0x3d
mov byte [ebp - 0x56], 0x25
mov byte [ebp - 0x68], 0x25
mov byte [ebp - 0x2b], bl
xor eax, eax
cmp dword [0x1007d854], ebx
setne al
push eax
xor eax, eax
cmp dword [0x1007d850], ebx
setne al
push eax
xor eax, eax
cmp dword [0x1007d84c], ebx
setne al
push eax
xor eax, eax
cmp dword [0x1007d840], ebx
setne al
push eax
xor eax, eax
cmp dword [0x1007d83c], ebx
setne al
push eax
xor eax, eax
cmp dword [0x1007d838], ebx
setne al
push eax
xor eax, eax
cmp dword [0x1007d844], ebx
setne al
push eax
xor eax, eax
cmp dword [0x1007d834], ebx
setne al
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x424]
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x190]
push pe_nt_image_headers32
push eax
call fcn.1004bede
add esp, 0x4c
push 0x3e
pop ecx
lea eax, [ebp - 0x68]
mov byte [eax], bl
inc eax
dec ecx
jne 0x10003c97
push 0x21
pop ecx
lea eax, [ebp - 0x8c]
mov byte [eax], bl
inc eax
dec ecx
jne 0x10003ca6
mov eax, dword [ebp - 0x424]
add eax, 0xfffffff0
call fcn.10003690
mov eax, dword [ebp - 0x41c]
add eax, 0xfffffff0
call fcn.10003690
push ebx
lea ecx, [ebp - 0x418]
mov dword [ebp - 0x400], 0xf
call fcn.10001bac
lea eax, [ebp - 0x3cc]
push eax
mov dword [ebp - 4], 3
call fcn.100019fe
lea esi, [ebp - 0x3b4]
call fcn.1000190a
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 5
call fcn.1000132f
lea eax, [ebp - 0x190]
push eax
push dword [ebp - 0x42c]
lea ecx, [ebp - 0x418]
mov dword [ebp - 4], 6
call fcn.100017ca
push ebx
push 1
mov ecx, esi
call fcn.10001bc8
lea esi, [ebp - 0x3cc]
call fcn.10001a37
push ebx
push 1
lea ecx, [ebp - 0x418]
call fcn.10001bc8
mov eax, dword [ebp - 0x42c]
call fcn.10052d7c
ret