Function at 0x1000ac2c
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Encrypt data using rc4 ksa
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
pop esp
cmp edx, ecx
test bl, bh
nop
nop
ja 0x1000a7a5
push ebp
jne 0x1000a7eb
add byte [eax], al
jne 0x1000a786
or al, 0x8d
xor dh, byte [eax + 0x77]
jne 0x1000a77a
nop
cmpxchg dword [ecx], edx
push eax
add byte [eax - 0x19f7af1], al
call fcn.100082c0
test dword [ebx - 0xfffd2a], ecx
push ebp
test byte [ebp + 8], 4
push esi
jne 0x41e9a5ec
invalid
add al, 0x56
ret
jne 0x10004fd0
test al, 0xff
call [eax + 0x23]
jo 0x1000a826
pop eax
and esi, dword [eax + 0x77]
je 0x1000a799
jne 0x1000a7a8
test al, 1
mov dword [ebp - 4], edi
cli
mov dword [ebp - 0xb0], edx
invalid
pop eax
add dword [eax], edx
mov dl, 0
add eax, 0x49b7556
test dword [edi], edx
mov ebp, fs
jne 0x1000a802
mov al, 0x71
fsub dword [0x100180d8]
add al, 0
adc byte [eax + eax], al
sub dword [edi + 0x46b57770], eax
or byte [ebx - 0x1e3efd37], al
mov esi, dword [0x1002b7b4]
mov ah, 0xb7
add dl, byte [eax]
or bh, bh
push esi
stc
loope 0x1000a81b
and eax, 0x74fb0d98
and eax, 0xfee874fb
nop
xor dh, dl
push edi
push ss
cmp al, 0xff
jne 0x1000a8aa
invalid
pop es
sub edx, dword [esi + 0x75]
nop
jge 0x1000a813
loopne 0x1000a834
je 0x1000b2ca
adc dword [ebp + 0x75], 0x50
push esi
nop
add dword [eax], eax
add bh, dh
xor esi, esi
push edx
test byte [eax - 0x3e], dh
mov ecx, dword [esi]
push eax
and eax, 0x74fb0b34
test dword [ebx], esp
push esi
nop
sub esp, eax
jmp 0x1000d419
push esi
mov ebp, esp
add byte [eax - 0x6f6f6f70], dl
ja 0x1000a90c
test al, 0xb
jne 0x1000a8fa
jnp 0x1000a8c9
push cs
jne 0x1000a849
test esi, esi
sti
push ebp
mov edi, edi
enter 0xfffffffffffffb0b, 0x74
push ebp
add byte [0x1002b337], bh
mov ecx, dword [esp + 0xc]
sub dword [eax + 0x55], edi
pop ss
sub eax, 0xd8727557
call fcn.1000a25f
add dword [eax], eax
push esi
push ebx
or byte [edi], 0x84
and eax, 0x74fb0bfc
call fcn.100096e2
nop
cmpsb byte [esi], byte es:[edi]
ja 0x1000a8ab
mov edi, dword [eax + 0x10]
push ebp
push ebp
and eax, 0x74fb0da0
add al, 0xb8
xor ebx, dword [esi + edx*2 + 0x565c6775]
mov ah, 4
add al, 0x64
dec ecx
or byte [ebx - 0x7bf00b08], al
jne 0x1000b30f
or eax, 0x18
nop
aas
fmul dword [ebx + 0x45890446]
pop es
pop ss
nop
mov ecx, dword [esi + 0x3c]
or byte [edi], 0x84
mov eax, 0xc4776e14
sbb byte [ebx + edi*8], ah
jne 0x1000a920
lodsb al, byte [esi]
push esi
sbb eax, 0xff688d39
pop ebx
test byte [ecx + 0x7589dc75], 0x77
sldt word [eax]
add byte [eax], al
jne 0x1000a94b
cld
std
sub dl, byte [esi + 0x75]
push ebp
jo 0x1000a9cd
inc esi
or edi, ebx
add dword [eax], eax
dec edi
je 0x1000add0
push ebx
push edi
ret 8
in eax, dx
nop
nop
ja 0x1000a94e
push esi
je 0x1000a93d
push es
and byte [ebx + 0x45f60002], 8
push edi
add byte [ecx], bh
sti
push esp
pop es
nop
pop ebp
nop
adc esi, dword [ebx + 0x57]
nop
lodsd eax, dword [esi]
jae 0x1000aa3c
call fcn.10006ef3
sti
sar ecx, cl
ja 0x1000a957
inc edx
nop
ja 0x1000a9d9
jne 0x1000a9a5
test byte [ebx - 0x7cfffcca], cl
mov cl, 0x72
push esp
test byte [edi + edx*2], ah
add byte [ebx - 0x7bab8d4f], al
and al, 0x57
inc byte [eax]
ja 0x1000a9f5
fst dword [ecx - 0x2f]
fist word [ebp + 0x75]
push ds
push esi
or al, 0xff
pop ebp
push ecx
je 0x10009b0a
invalid
iretd
mov dword es:[esi + 0x75], edx
nop
ja 0x1000aa0e
test esi, edi
jne 0x1000aa2f
sub al, 0x56
nop
or bl, bh
js 0x1000aa81
nop
nop
inc edx
nop
nop
sti
jns 0x1000aa89
adc al, 0x85
je 0x1000a9a6
nop
iretd
pop esp
push esi
adc cl, ch
nop
ja 0x1000a9ff
inc esi
push ebp
push ebp
xor byte [0x1000dd64], dl
inc eax
jb 0x1000aab9
fld qword [eax]
adc byte [eax + 0x72], al
ja 0x1000aab7
je 0x1000aa55
adc dword [eax + 0x875ff10], edx
nop
adc bh, bh
jne 0x1000aa51
dec eax
nop
jge 0x1000aa49
jle 0x1000aabe
nop
add dword [edi], ecx
invalid
pand mm6, qword [eax + 0x77]
mov eax, esi
push ebp
ret 0xc
outsb dx, byte [esi]
ja 0x1000a9f8
jae 0x1000aa6f
mov dword [eax + 0x40], ecx
dec eax
inc eax
sub byte [edi + 0x77], 0x38
add byte [eax], al
add byte [ebx - 0x7bf00908], al
jne 0x1000aab3
pop ebp
push ebp
test al, al
rcr byte [ecx + 0x58], 1
pop ecx
pop eax
jmp 0x1000aa75
ja 0x1000aa9f
dec dword [ebx + 0x3b0090ff]
sub al, 0xc
and al, 0xc
cmp esi, edi
push esi
into
jne 0x1000aadd
inc edx
inc ebp
pop dword [esi + 0x7cf97555]
jne 0x1000aa9a
jl 0x1000aa84
loope 0x1000aaa2
invalid
jb 0x1000ab1d
ja 0x1000aa37
nop
ja 0x1000aa69
mov edi, edi
jne 0x1000aaad
nop
push edi
push ebp
mov byte [0x6d777247], al
ja fcn.1000ab22
add dword [eax], eax
ja 0x1000aab9
ret 0x18
ja 0x1000ab37
cmp cl, byte [ebx - 0x76236f14]
or byte [ebx + 0x3c75d475], cl
lcall 0x4589, 0x18b0000
nop
add byte [ebx], dh
jne 0x1000aae3
nop
mov ebp, 0x3a75579f
mov dword [0x22607773], eax
cmp ah, byte [ebx + 0x22607773]
invalid
lahf
inc ebx
nop
cmp ebx, eax
je 0x1000aa9a
nop
add byte [ebx], bh
ja 0x1000ab7a
insb byte es:[edi], dx
ror byte [ebx], 1
inc ebp
pop ebp
push cs
je 0x1000aaa5
pushal
imul ecx, dword [edx], 0x2beb7556
ror dword [esi - 0x25d28aab], 1
mov ss, word [ebp + 0x75]
sub eax, 0xfbad90da
nop
lodsd eax, dword [esi]
sti
clc
push ebp
jb 0x1000abb0
push ebp
neg eax
nop
nop
mov byte [0xa26b7557], al
ja 0x1000abb8
ja 0x1000ab7f
add al, byte [eax]
push esi
jne 0x10003ba1
sbb byte [ebx], cl
adc al, 0x33
nop
jne 0x1000ab09
sti
dec eax
and al, 0xc
jo 0x1000abd4
ja 0x1000ab0d
scasd eax, dword es:[edi]
push ebp
invalid
ret 0x379c
pushfd
aaa
push esi
cmp dh, bh
add dword [eax], eax
mul edx
add byte [eax + 0x7c850f02], ch
add byte [eax], al
nop
pop esp
or ebx, edi
jne 0x1000ab03
mov byte [ecx], al
push esi
jne 0x1000abf8
add dword [esi + 0x75], edx
jns 0x1000abf7
ja 0x1000ab11
nop
nop
clc
add eax, 0xdc7555e5
add byte [eax], al
add byte [esi], cl
mov ecx, dword [esp + 4]
ja 0x1000ab9a
nop
mov esi, dword [ebp + 0x18]
ja 0x1000ab35
ja 0x1000ab5c
push ebp
nop
nop
push ebp
mov edi, edi
jne 0x1000ab88
in al, 0xc2
or al, 0
cwde
lodsb al, byte [esi]
nop
mov dword [ebp - 0x3c], eax
ja 0x1000ab63
ret 0xc
add byte [eax - 0x16f6f70], dl
add byte [eax], al
add byte [eax], al
retf 0
nop
nop
nop
nop
inc byte [eax]
add byte [eax], al
add dl, cl
add byte [eax], al
add dword [eax], eax
jne 0x1000ab7f
xor dword [ebx + 0x77], 0xffffffb9
ja 0x1000ac2b
std
pop edx
pop edi
push esi
or al, ch
add byte [edi + 0x77], ch
nop
je 0x1000ab62
jne 0x1000abe9
nop
or edx, edx
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x1c], edi
xchg dword [eax + 0x77], esi
jne 0x1000ac37
std
je 0x1000abea
mov ebp, esp
nop
jne 0x1000abf6
or al, 0x78
mov bh, 0x78
inc byte [ebp + 0x46890b6a]
js 0x1000aba3
js 0x1000abec
test dword [edx + 0xb], ebp
mov dword [esi + 4], eax
xchg bl, ah
inc esi
add al, 0x86
jecxz 0x1000ac4c
push ebp
ja fcn.1000ac2d
xor al, 6
push es
nop
add byte [ecx + 0x3b], bl
jo 0x1000ac77
je 0x1000ab92
jne 0x1000ac0b
pop es
push 0
inc ebp
scasd eax, dword es:[edi]
invalid
dec dword [ebx + 0x64770853]
adc dl, byte [esi + 0x75]
jne 0x1000ac56
jae 0x1000ac03
mov edi, edi
les eax, [eax]
push eax
push ebp
push esi
jl 0x1000abd7
ja 0x1000ac47
aad 2
add al, 0xfe
add eax, 0xb377726d
nop
mov bl, 0x90
ror byte [edi], 0x8c
into
push ebp
nop
jbe 0x1000acb6
mov dh, 0x55
sti
inc ebp
and dword [eax], eax
push edi
mov dword [eax + 0x14], ecx
jno 0x1000acc4
dec eax
ja 0x1000abf2
std
invalid
inc esi
cmp byte [ebx], dl
mov dh, byte [ebx + 0x77]
xchg edx, eax
sbb cl, byte [0x909074fb]
nop
ret 0x14
ja 0x1000ace8
pop es
nop
xchg esi, eax
add byte [eax], al
add al, byte [eax]
leave
nop
xchg ebp, eax
nop
nop
or edi, ebx
jne 0x1000acc6
dec eax
movzx eax, word [eax + esi*2]
inc esi
add byte [eax], al
nop
or al, 0x56
nop
jne 0x1000ad15
nop
jne 0x1000acea
mov eax, 0x2002
jb 0x1000ad86
and byte [eax], al
add byte [edx + 0x77], dh
jne 0x1000ad2a
nop
mov al, byte [0x30776e0c]
ja 0x1000ad47
js 0x1000ad6e
jmp 0x1000acce
ret 4
sbb al, 0
jno 0x1000adc2
div ecx
retf
cld
and al, 0x46
mov edi, edi
push ebp
mov al, byte [0xf4776df9]
ja 0x1000ad0a
dec edi
pop ebp
or byte [ebx + 0x56], dl
add byte [ebx - 0x7bf00907], al
lodsb al, byte [esi]
nop
dec esp
inc ebp
jp 0x1000ade1
jo 0x1000ae05
or ebx, edi
jl 0x1000ada7
or ecx, ecx
nop
nop
or al, 0xff
jge 0x1000ada2
mov esi, 0xcf3b0001
mov dword [0x22607773], eax
or dword [eax + 0x38], 0xffffffff
add al, ch
sbb byte [0x1002b46b], al
pushal
and al, byte [ebx + 0xff3848]
inc dword [eax]
call 0xc46bb2c6
add dl, byte [eax]
nop
jne 0x1000ad95
adc byte [ecx + 0x3e2], al
mov ebp, esp
test ecx, ecx
jne 0x1000ad47
ja 0x1000ae35
push eax
jne 0x10009b1b
or al, 0
std
push 0xfffffffffffffff8
mov edi, dword [ebp + 0x14]
je 0x1000ac06
push ds
jne 0x1000adff
ja 0x1000ad78
dec eax
xor dl, byte [eax - 0x7c078889]
invalid
call dword [eax + 0x755709a0]
cmp eax, 0x90581880
add byte [eax], al
jmp 0x1000b342