Function at 0x1000f791
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jae 0x1000f51a
jmp 0x1000f515
call fcn.1000f51c
jae 0x1000f515
add esp, 4
jmp 0x1000f521
dec dword [esp]
jno 0x1000f526
jns 0x1000f511
jp 0x1000f52a
add esp, 4
popf
jmp 0x1000f531
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x61
xor edx, eax
add eax, edx
sub edx, 0x61
push eax
pop edx
xor edx, 0x123
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x61
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1000f580
jmp 0x1000f582
je 0x1000f57d
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1000f59c
jne 0x1000f59b
call 0x9304e623
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1000f5aa
jne 0x1000f5aa
call 0xd086b5e1
xor eax, eax
test eax, eax
je 0x1000f5b3
jne 0x1000f5b2
call 0x9304e63a
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
jns 0x1000f636
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1000f5c1
jmp 0x1000f5c3
je 0x1000f5be
sti
clc
jae 0x1000f5c8
sub bh, byte [ecx - 0x7d]
invalid
xor eax, 0x62
xor edx, eax
add eax, edx
sub edx, 0x62
push eax
pop edx
xor edx, 0x126
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x62
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x1000f60b
jmp 0x1000f606
call 0x1000f60d
jae 0x1000f606
add esp, 4
jmp 0x1000f612
dec dword [esp]
jno 0x1000f617
jns 0x1000f602
jp 0x1000f61b
add esp, 4
popf
jmp 0x1000f622
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1000f63b
jne 0x1000f63b
call 0x1fc1298f
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x20], 0x43
mov byte [ebp - 0x1f], 0x6c
mov byte [ebp - 0x1e], 0x6f
mov byte [ebp - 0x1d], 0x75
mov byte [ebp - 0x1c], 0x64
mov byte [ebp - 0x1b], 0x53
mov byte [ebp - 0x1a], 0x68
mov byte [ebp - 0x19], 0x69
mov byte [ebp - 0x18], 0x65
mov byte [ebp - 0x17], 0x6c
mov byte [ebp - 0x16], 0x64
mov byte [ebp - 0x15], 0x2e
mov byte [ebp - 0x14], 0x74
mov byte [ebp - 0x13], 0x78
mov byte [ebp - 0x12], 0x74
mov byte [ebp - 0x11], 0
clc
jae 0x1000f691
jl 0x1000f6bd
pushf
push 0xa
jae 0x1000f69e
jmp 0x1000f699
call 0x1000f6a0
jae 0x1000f699
add esp, 4
jmp 0x1000f6a5
dec dword [esp]
jno 0x1000f6aa
jns 0x1000f695
jp 0x1000f6ae
add esp, 4
popf
jmp 0x1000f6b5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x64
xor edx, eax
add eax, edx
sub edx, 0x64
push eax
pop edx
xor edx, 0x12c
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x64
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1000f704
jmp 0x1000f706
je 0x1000f701
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1000f720
jne 0x1000f71f
call 0x9304e7a7
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1000f72e
jne 0x1000f72e
call 0xd086b765
xor eax, eax
test eax, eax
je 0x1000f737
jne 0x1000f736
call 0x9304e7be
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
invalid
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1000f745
jmp 0x1000f747
je 0x1000f742
clc
jae 0x1000f74c
push ecx
pop dword [ebx - 0x2fcc9a10]
xor eax, 0x65
xor edx, eax
add eax, edx
sub edx, 0x65
push eax
pop edx
xor edx, 0x12f
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x65
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x1000f78f
jmp 0x1000f78a
call 0x1000f791
jae 0x1000f78a
add esp, 4
jmp 0x1000f796
dec dword [esp]
jno 0x1000f79b
jns 0x1000f786
jp 0x1000f79f
add esp, 4
popf
jmp 0x1000f7a6
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1000f7bf
jne 0x1000f7bf
call 0x1fc12b13
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x40], 0x42
mov byte [ebp - 0x3f], 0x6c
mov byte [ebp - 0x3e], 0x61
mov byte [ebp - 0x3d], 0x63
mov byte [ebp - 0x3c], 0x6b
mov byte [ebp - 0x3b], 0x6c
mov byte [ebp - 0x3a], 0x69
mov byte [ebp - 0x39], 0x73
mov byte [ebp - 0x38], 0x74
mov byte [ebp - 0x37], 0x65
mov byte [ebp - 0x36], 0x64
mov byte [ebp - 0x35], 0x20
mov byte [ebp - 0x34], 0x64
mov byte [ebp - 0x33], 0x72
mov byte [ebp - 0x32], 0x69
mov byte [ebp - 0x31], 0x76
mov byte [ebp - 0x30], 0x65
mov byte [ebp - 0x2f], 0x72
mov byte [ebp - 0x2e], 0x20
mov byte [ebp - 0x2d], 0x64
mov byte [ebp - 0x2c], 0x65
mov byte [ebp - 0x2b], 0x74
mov byte [ebp - 0x2a], 0x65
mov byte [ebp - 0x29], 0x63
mov byte [ebp - 0x28], 0x74
mov byte [ebp - 0x27], 0x65
mov byte [ebp - 0x26], 0x64
mov byte [ebp - 0x25], 0x3a
mov byte [ebp - 0x24], 0x20
mov byte [ebp - 0x23], 0
clc
jae 0x1000f84d
clc
pop eax
pushf
push 0xa
jae 0x1000f85a
jmp 0x1000f855
call 0x1000f85c
jae 0x1000f855
add esp, 4
jmp 0x1000f861
dec dword [esp]
jno 0x1000f866
jns 0x1000f851
jp 0x1000f86a
add esp, 4
popf
jmp 0x1000f871
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x67
xor edx, eax
add eax, edx
sub edx, 0x67
push eax
pop edx
xor edx, 0x135
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x67
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1000f8c0
jmp 0x1000f8c2
je 0x1000f8bd
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1000f8dc
jne 0x1000f8db
call 0x9304e963
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1000f8ea
jne 0x1000f8ea
call 0xd086b921
xor eax, eax
test eax, eax
je 0x1000f8f3
jne 0x1000f8f2
call 0x9304e97a
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
mov ebx, 0x73f8fb74
add cl, ch
mov ebx, 0x3368f083
rol byte [ebx], 1
ret 0xea83
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1000f901
jmp 0x1000f903
je 0x1000f8fe
clc
jae 0x1000f908
int 0xbb
xor eax, 0x68
xor edx, eax
add eax, edx
sub edx, 0x68
push eax
pop edx
xor edx, 0x138
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x68
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x1000f94b
jmp 0x1000f946
call 0x1000f94d
jae 0x1000f946
add esp, 4
jmp 0x1000f952
dec dword [esp]
jno 0x1000f957
jns 0x1000f942
jp 0x1000f95b
add esp, 4
popf
jmp 0x1000f962
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1000f97b
jne 0x1000f97b
call 0x1fc12ccf
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov eax, 1
test eax, eax
je 0x1000fb52
mov dword [ebp - 0x114], 0x3c
lea ecx, [ebp - 0x114]
push ecx
lea ecx, [ebp - 0x12c]
call fcn.1000e640
push eax
call fcn.1000eca0
add esp, 4
push 0xc
lea ecx, [ebp - 0x4c]
call fcn.1000fc10
lea edx, [ebp - 0x4c]
push edx
call fcn.1000eee0
add esp, 4
mov dword [ebp - 4], 0
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
call fcn.1000fbf0
mov dword [ebp - 0x100], eax
mov ecx, dword [ebp - 0x108]
call fcn.1000fc00
mov dword [ebp - 0x118], eax
jmp 0x1000fa17
mov ecx, dword [ebp - 0x100]
add ecx, 0x18
mov dword [ebp - 0x100], ecx
mov edx, dword [ebp - 0x100]
cmp edx, dword [ebp - 0x118]
je 0x1000fb3e
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], 0x1044bee8
mov ecx, dword [ebp - 0x10c]
call fcn.1000fbf0
mov dword [ebp - 0x104], eax
mov ecx, dword [ebp - 0x10c]
call fcn.1000fc00
mov dword [ebp - 0x11c], eax
jmp 0x1000fa72
mov ecx, dword [ebp - 0x104]
add ecx, 0x18
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x104]
cmp edx, dword [ebp - 0x11c]
je 0x1000fb39
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x120], eax
mov ecx, dword [ebp - 0x120]
push ecx
mov edx, dword [ebp - 0x110]
push edx
call fcn.1000e680
add esp, 8
movzx eax, al
test eax, eax
je 0x1000fb34
push 0xb0
lea ecx, [ebp - 0xfc]
call fcn.1000fc10
push 1
push 0x40
push 8
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0xfc]
call fcn.10006150
mov byte [ebp - 4], 1
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0xfc]
push eax
call fcn.10005550
add esp, 8
mov ecx, dword [ebp - 0x110]
push ecx
push eax
call fcn.1000e660
add esp, 8
push 0x100785b0
push eax
call fcn.10005550
add esp, 8
lea ecx, [ebp - 0xfc]
call fcn.1000fca0
push 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xfc]
call fcn.100070b0
jmp 0x1000fa63
jmp 0x1000fa08
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.1000eec0
jmp 0x1000f98c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004ce42
mov esp, ebp
pop ebp
ret