Function at 0x1001a4f7
Capabilities:
Contain obfuscated stackstrings

Disassembly:
xor ebx, 0x9ecb86ef
sub ebx, 0xd672b19e
jmp 0x1000fa42
mov ecx, 0xa1a6e3ed
sub ecx, 0xd77bc3d7
sub ecx, 0x52a1fe0a
push ebx
mov ebx, 0x124c88b9
sub ebx, 0x9e358565
xor ebx, 0xbb306972
jmp 0x1003204c
pop edx
lea ebx, [ebx + edx*4]
mov edx, dword [esp + ebx]
pop ebx
mov dword [esp], edx
call eax
jmp 0x10036a2c
push ebx
jmp 0x10020cd2
add edi, 0xd3d23972
jmp 0x10050641
add eax, 0xe8d9a21e
sub edi, eax
pop eax
jmp 0x10005651
push edx
mov edx, 0xfd99f83d
xor edx, 0x7906e51b
xor edx, 0x3ca0dc6d
add edi, edx
jmp 0x1003b998
mov edx, 0xa47690bf
xor edx, 0x1edebb12
sub edx, 0x417cf283
push edi
mov edi, 0x1a0fa1ed
sub edi, 0x4719c535
add edi, 0x579ab5dd
jmp 0x100191cd
xor esi, 0x2826a2b6
push edi
jmp 0x1000f985
push edi
mov edi, 0x827c4492
add edi, 0xc1ab68db
add edi, 0x892ddf14
jmp 0x1002cebb
pop ecx
lea ecx, [edx*4]
push ebx
mov ebx, 0x17f40a50
add ebx, 0x16261e61
add ebx, 0xe0df2405
jmp 0x10013194
push eax
mov eax, 0x2c740891
add eax, 0xbcf32731
jmp 0x10008cde
add eax, 0xba549b59
sub edx, eax
pop eax
jmp 0x1003fbaa
push eax
jmp 0x1003c92f
xor ebx, 0xd6c7b6d0
xor ebx, 0xd96090a3
sub esi, ebx
pop ebx
lea esi, [esi]
mov eax, dword [esp + esi]
pop esi
jmp 0x10008134
pop eax
push ebx
jmp 0x1003a20e
push ebx
mov ebx, 0xfd81bea3
sub ebx, 0xa6eeb254
xor ebx, 0xe4c3bee2
sub esi, ebx
pop ebx
push eax
mov eax, 0x18881551
sub eax, 0x99c503c2
xor eax, 0x1a6224cf
jmp 0x100120f5
mov dword [esp + 0x36], 0x442e4354
mov dword [esp + 0x39], 0x4c4c44
jmp 0x1001890e
lea esi, [esi]
mov eax, dword [esp + esi]
pop esi
jmp 0x1002f12b
mov dword [esp + 8], edi
mov edi, dword [esp + 4]
jmp 0x10037b91
pop ecx
jmp 0x1004f8e6
xor esi, 0x1b17f5f3
xor esi, 0x279c155d
add ebx, esi
jmp 0x10024fd0
mov edi, 0xf1b29996
jmp 0x10039b25
add edi, ebx
pop ebx
jmp 0x10039c9f
add edi, 0x57e05d5e
jmp 0x1002e12c
pop edi
lea eax, [esp + 0x4a]
push ecx
mov ecx, 0x1c6c3c16
sub ecx, 0xb702699b
jmp 0x10038abd
xor esi, eax
jmp 0x1004f082
push edi
jmp 0x10033ee3
mov esi, 0x65bd46a9
sub esi, 0x8326e78e
sub esi, 0x443d1d3f
xor edi, esi
jmp 0x10019384
sub ecx, ebx
pop ebx
lea ecx, [ecx]
jmp 0x10046a1b
mov edx, 0x7973a1e5
jmp 0x1001c66b
xor edi, 0x35788921
jmp 0x100117fa
mov dword [esp + edi], eax
jmp 0x10011c8a
lea eax, [esp + 0x5b]
push edx
mov edx, 0xba4251ba
jmp 0x1001dce0
cmp dword [esp + 0xb4], 4
jle 0x1005001e
push esi
jmp 0x10041f79
sub esi, 0xd401d053
push ecx
mov ecx, 0x6dbfeec7
add ecx, 0x46926d45
sub ecx, 0x9e03cf34
sub esi, ecx
pop ecx
push ebx
mov ebx, 0x8b669253
xor ebx, 0x60e1e662
xor ebx, 0x3da7d062
add esi, ebx
pop ebx
lea esi, [esi]
mov eax, dword [esp + esi]
pop esi
jmp 0x1002b964
add edx, edi
pop edi
jmp 0x10008cc3
pop esi
lea edi, [edi]
mov dword [esp + edi], eax
pop edi
lea eax, [esp + 0x36]
push ecx
jmp 0x10041406
sub eax, 0x89fad560
add eax, 0x1c0c0ef7
sub ecx, eax
pop eax
lea ecx, [ecx]
mov edx, dword [esp + ecx]
jmp 0x10008741
add esi, 0x4bfc7767
xor esi, 0x37689731
add esi, 0x991cbb1
jmp 0x1001a53c
add esi, dword [esp]
mov dword [esp + 8], esi
jmp 0x10039a79
mov ebx, 0x3cefe596
xor ebx, 0x85d8ae9b
xor ebx, 0x692a4f5f
push esi
mov esi, 0xc157b31
jmp 0x1000f37e
pop esi
push edi
mov edi, 0xc2fa6ad3
add edi, 0x18ee7a9a
jmp 0x100209a3
sub edx, 0x89eb9d21
add edx, 0xcd80a356
push esi
mov esi, 0x3d86c051
sub esi, 0x1cd61c4d
xor esi, 0xc8d4024
jmp 0x100318de
sub ecx, 0xeb3d5d9b
sub edi, ecx
jmp 0x10050650
xor edx, 0x83078eb3
add edx, 0xb6b893aa
push edi
jmp 0x1003a0f4
mov edi, 0x17666713
add edi, 0x50337cee
xor edi, 0xa2b038a7
push ebx
mov ebx, 0x26091534
jmp 0x1002cdc6
push ecx
jmp 0x10001f30
xor ebx, 0xbfa770f4
add edi, ebx
pop ebx
push ecx
jmp 0x1002d6f3
push eax
mov eax, 0x88e6cf78
sub eax, 0xd10845e2
jmp 0x10030fc3
add edi, 0xbe1c97b9
sub ebx, edi
jmp 0x10028f90
mov ebx, 0xfb591a72
jmp 0x10001685
xor edx, edi
pop edi
jmp 0x100490f5
pop edx
push edi
mov edi, 0xde2707c
xor edi, 0x28ff4636
jmp 0x10022823
lea edx, [edx]
mov eax, dword [esp + edx]
pop edx
cmp edx, eax
jne 0x1003e9b1
mov dword [esp + 0xb8], 1
jmp 0x10022818
push eax
mov eax, 0x9dadb9f3
jmp 0x100364be
add edi, 0x14b63fc7
sub ecx, edi
jmp 0x1004e397
add dword [esp], ebp
mov ebp, dword [esp + 4]
ret 4
add ebx, edx
jmp 0x10002ef3
pop edi
push ebx
jmp 0x10038d3a
push edx
jmp 0x1003d434
pop esi
push esi
mov esi, 0xf80a3955
sub esi, 0x82240a23
xor esi, 0x8aa24f95
add ebx, esi
pop esi
jmp 0x10041f86
xor edx, 0x692c0867
jmp 0x1004d117
sub ecx, 0x34cf0da7
add ecx, 0xf8a107c0
jmp 0x10027e0a
add edx, 0x97abdb8f
jmp 0x1004d346
sub esi, 0x5d4cac78
jmp 0x100272f5
jmp 0x1002f82e
sub esi, ecx
pop ecx
mov eax, dword [eax + esi]
pop esi
push edi
mov edi, 0xfc24eaaf
xor edi, 0x8af4878b
add edi, 0x9998b9e5
jmp 0x10008ffe
jmp fcn.1003e419
call 0x10028f36
nop
jne 0x10028efa
sub ebp, 0x2415abcf
sub ebp, 0x6ae24b78
add ebp, 0xffff430b
jmp 0x100238af
pop edi
lea ebx, [ebx]
jmp 0x100299b2
mov eax, dword [esp + ebx]
pop ebx
lea edx, [eax*4]
push esi
mov esi, 0xccdf912c
jmp 0x1003d5c0
xor ebx, edi
pop edi
push ecx
jmp 0x10029f4c
mov ecx, 0x2357ddb7
sub ecx, 0xef95a53b
sub ecx, 0xdf6a80a0
jmp 0x1003afb2
add eax, edx
mov eax, dword [eax]
test eax, eax
jmp 0x1004ddb5
push edi
mov edi, 0x7993174b
jmp 0x10004d52
xor ebx, 0x9d7b3d8e
jmp 0x1001f4cd
push eax
jmp 0x1003f0ea
mov ecx, 0xfc730d9e
sub ecx, 0x47367b37
jmp 0x1001cb0e
xor eax, 0x62b75317
sub ebx, eax
pop eax
jmp 0x1002e02c
jmp 0x10024977
add edi, dword [esp]
jmp 0x1000ca3b
lea edx, [eax*4]
jmp 0x100415ea
xor edx, esi
pop esi
jmp 0x100227ed
add ecx, edx
pop edx
push ebx
mov ebx, 0xfecdfaf8
sub ebx, 0x7fcd701c
add ebx, 0x20473163
jmp 0x100149ea
add eax, 0xc3736cda
xor esi, eax
jmp 0x1000a772
mov edx, dword [esp + 4]
jmp 0x1003131a
ret 4
sub edx, esi
pop esi
push esi
jmp 0x100318f6
mov esi, 0x3d8e69eb
xor esi, 0xd3990675
jmp 0x100272da
mov dword [esp + 0x4a], 0x49444441
mov dword [esp + 0x4e], 0x4f54534e
mov dword [esp + 0x51], 0x4b434f
mov dword [esp + 0x3d], 0x49444441
mov dword [esp + 0x41], 0x4954554e
jmp 0x10044a82
xor ecx, ebx
pop ebx
push eax
mov eax, 0x269d0ddb
jmp 0x100197b8
add dword [esp], edx
jmp 0x10033ccf
jmp 0x10031300
mov edi, 0x82ed9f4a
add edi, 0x88cba34b
xor edi, 0x5117b963
jmp 0x10029f40
add edx, 0x77e2f39b
xor ecx, edx
jmp 0x100227de
add edx, 0xb454a755
xor edx, 0xc523f1af
jmp 0x10030dc3
add eax, 0xe02f9cf2
add eax, 0xca368e7a
push edx
push edi
mov edi, 0x95ac916f
call 0x10049c96
jne 0x100364aa
jmp 0x10049c94
sub esp, 4
jmp 0x1001e9eb
add edx, 0xfffde1de
jmp 0x1003788c
jmp 0x10033cad
add esp, 8
push ebp
mov ebp, 0x8ef7f747
jmp 0x10028f2e
push ebx
jmp 0x1001bc63
sub ecx, 0x5e1c08f0
push edx
mov edx, 0x9e855bfa
jmp 0x100354ac
mov ebx, 0xe1615e9c
jmp 0x1004da01
mov esi, dword [esp + 4]
add esp, 8
push edx
mov edx, 0x6ca00d6
call 0x10039acb
jmp 0x10039ab7
jne 0x10039b2a
jmp 0x10039ac9
jne 0x10039ad6
add edx, 0xf36e5621
jmp 0x10039ad9
jnp 0x10039ad6
inc dword [ecx + 0x3856f2f2]
cli
xor edx, 0xfa3856f2
jmp 0x10037873
add edi, 0xdc7afbbb
fadd qword [ecx + 0x6547c9ef]
stosd dword es:[edi], eax
sub edi, 0xab6547c9
sub esi, edi
pop edi
push ecx
mov ecx, 0xa443b6b6
jmp 0x10025c65
mov eax, dword [eax + edi]
pop edi
test eax, eax
je 0x10013e70
rdtsc
jmp 0x1003863f
mov dword [esp + ecx], eax
pop ecx
jmp 0x1004aae0
mov edi, 0x3a0cec3a
sub edi, 0x617afcd9
xor edi, 0x14290c14
jmp 0x1002167e
mov ebx, 0xa652d36b
jmp 0x1000a5ba
xor ebx, ecx
pop ecx
lea ebx, [ebx]
mov edx, dword [esp + ebx]
pop ebx
add edx, ecx
mov dword [edx], eax
push esi
jmp 0x10040dc9
pop edx
lea edi, [edi]
mov edx, dword [esp + edi]
jmp 0x10023eea
mov eax, 0x84a1d09b
xor eax, 0x5b6e95e5
jmp 0x10005620
pop edi
lea edx, [edx]
mov eax, dword [esp + edx]
pop edx
add eax, edx
jmp 0x1003d287
jmp 0x10048d1c
mov edx, 0x9e4e69ab
jmp 0x10026b4d
xor esi, 0xd8f02858
jmp 0x10018d7c
add dword [esp + 0xb4], 1
jmp 0x100189c2
mov eax, 0x213a6c82
sub eax, 0x553fe908
xor eax, 0x764f1a15
xor edi, eax
pop eax
jmp 0x10003810
lea edx, [edx]
mov eax, dword [esp + edx]
pop edx
push esi
mov esi, 0xc21255d3
xor esi, 0x60e90919
jmp 0x100076ff
sub ebx, 0xe33e2a03
sub ebx, 0x2f013b5f
push esi
mov esi, 0x27c1d671
sub esi, 0xe986de64
xor esi, 0x636a6c5a
jmp 0x10040dba
xor ebx, esi
jmp 0x1001bd70
mov esi, 0xaf45fa70
xor esi, 0x2291f16
add esi, 0x6985033f
jmp 0x1000b50b
mov ecx, 0x34c055e5
add ecx, 0x80362595
xor ecx, 0x7b7bf14d
push edx
mov edx, 0x3e300e15
xor edx, 0x404c06c2
jmp 0x100350dc
push edx
mov edx, 0xc114d077
jmp 0x100258b0
mov esi, 0x560736a9
add esi, 0x92658cd0
jmp 0x10041f8e
lea ebx, [ebx]
jmp 0x100485b0
add esi, 0xea374053
jmp 0x1002068d
mov dword [esp + 0x45], 0x5954494c
mov byte [esp + 0x49], 0
jmp 0x1000be53
xor edi, ebx
pop ebx
push esi
jmp 0x10014157
mov dword [esp + ecx], eax
jmp 0x1000cbcd
mov dword [esp + ebx], eax
jmp 0x10023329
mov edx, dword [eax]
push edx
jmp 0x10014bec
push esi
mov esi, 0xb911004a
add esi, 0x6b56b07b
add esi, 0xfedee0dd
jmp 0x1004958b
sub edx, esi
jmp 0x1004959f
pop esi
lea edx, [edx]
mov dword [esp + edx], eax
pop edx
lea eax, [esp + 0x55]
push edi
jmp 0x1001dfbf
add byte [eax], al
or al, 0x57
jne 0x10049c29
sub edi, 0xf845f844
jmp 0x1001561d
push edx
jmp 0x10006b60
xor edx, 0x563a57b8
push ecx
mov ecx, 0x280add39
xor ecx, 0xed6ad233
add ecx, 0x5aaa744b
sub edx, ecx
pop ecx
jmp 0x1002bacb
add edx, 0xf69e025c
jmp 0x10023e8e
add ebx, 0x6d0483a5
xor ebx, 0x377fa175
push eax
mov eax, 0x34ec565a
add eax, 0x92198357
jmp 0x1002e018
jne 0x1003afc0
mov dword [esp + 0x5b], 0x57584454
mov byte [esp + 0x5f], 0
mov dword [esp + 0x55], 0x4c414354
mov word [esp + 0x59], 0x43
jmp 0x10031a82
pop edi
lea ecx, [ecx]
jmp 0x10039e7b
pop eax
jmp 0x1000c283
lea eax, [esp + 0x3d]
push edi
mov edi, 0xa6ec5361
sub edi, 0x1192d682
sub edi, 0xdd6abcf7
push ebx
mov ebx, 0xffdc9f58
sub ebx, 0xb46a7cc6
add ebx, 0xde45db72
jmp 0x100453da
push ebx
mov ebx, 0xd9954eeb
jmp 0x10040665
xor edi, 0x909d5b0a
sub edx, edi
jmp 0x1003d259
pop ecx
lea edi, [edi]
jmp 0x10018449