Function at 0x1008172d
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Terminate process

Disassembly:
push 0x68
mov eax, 0x100a556e
call fcn.1009e14c
mov edx, 0x100f91c4
mov ecx, 0x100f91d4
call fcn.1008170e
mov edx, 0x100f91e0
mov dword [0x10113a50], eax
mov ecx, 0x100f91f0
call fcn.1008170e
mov edi, 0x100f8894
mov dword [0x10113a0c], eax
mov edx, 0x100f91fc
mov ecx, edi
call fcn.1008170e
mov edx, 0x100f920c
mov dword [0x10113a34], eax
mov ecx, edi
call fcn.1008170e
mov esi, 0x100a6f08
mov dword [0x10113a14], eax
mov edx, 0x100f9220
mov ecx, esi
call fcn.1008170e
mov edx, 0x100f922c
mov dword [0x10113a18], eax
mov ecx, edi
call fcn.1008170e
mov edx, 0x100f9244
mov dword [0x10113a28], eax
mov ecx, 0x100f9254
call fcn.1008170e
mov edx, 0x100f9268
mov dword [0x10113a08], eax
mov ecx, edi
call fcn.1008170e
mov edx, 0x100f927c
mov dword [0x10113a44], eax
mov ecx, esi
call fcn.1008170e
mov edx, 0x100f928c
mov dword [0x10113a4c], eax
mov ecx, esi
call fcn.1008170e
mov edx, 0x100f92a4
mov dword [0x10113a60], eax
mov ecx, edi
call fcn.1008170e
mov edx, 0x100f92bc
mov dword [0x10113a30], eax
mov ecx, esi
call fcn.1008170e
mov edx, 0x100f92d4
mov dword [0x10113a20], eax
mov ecx, 0x100f92ec
call fcn.1008170e
mov edx, 0x100f92fc
mov dword [0x10113a24], eax
mov ecx, edi
call fcn.1008170e
mov edx, 0x100f9314
mov dword [0x10113a1c], eax
mov ecx, 0x100f9328
call fcn.1008170e
mov edx, 0x100f933c
mov dword [0x10113a38], eax
mov ecx, esi
call fcn.1008dfb3
mov edx, 0x100f935c
mov ecx, edi
mov eax, dword [eax + 2]
mov eax, dword [eax]
mov dword [0x10113a3c], eax
call fcn.1008dfb3
mov edx, 0x100f9370
mov ecx, edi
mov eax, dword [eax + 8]
mov dword [0x10113a10], eax
call fcn.1008dfb3
mov edx, 0x100f9384
mov ecx, esi
mov eax, dword [eax + 1]
mov dword [0x10113a2c], eax
call fcn.1008dfb3
mov eax, dword [eax + 2]
mov edx, 0x100f93a0
mov ecx, edi
mov eax, dword [eax]
mov dword [0x10113a5c], eax
call fcn.1008dfb3
mov edx, 0x100f93bc
mov ecx, esi
call fcn.1008dfb3
mov edx, 0x100f93e0
mov ecx, esi
mov eax, dword [eax + 2]
mov eax, dword [eax]
mov dword [0x10113a58], eax
call fcn.1008dfb3
mov edx, 0x100f9408
mov ecx, esi
mov eax, dword [eax + 2]
mov eax, dword [eax]
mov dword [0x10113a40], eax
call fcn.1008dfb3
mov edx, 0x100f9984
mov ecx, edi
mov eax, dword [eax + 2]
mov eax, dword [eax]
mov dword [0x10113a54], eax
mov eax, dword [eax + 0x10]
mov dword [0x10113a48], eax
call fcn.1008dfb3
mov dword [0x10112954], eax
test eax, eax
je 0x10081d22
mov edx, 0x100f99a8
mov ecx, edi
call fcn.1008dfb3
mov dword [0x10112950], eax
test eax, eax
je 0x10081d22
sub dword [0x10112954], 0x42
call fcn.1004e026
mov edx, dword [0x10113a1c]
xor ebx, ebx
mov esi, eax
mov dword [ebp - 0x2c], 0x3d302c5c
mov dword [ebp - 0x28], 0x32e3925
mov eax, ebx
mov dword [ebp - 0x24], 0x282e2934
mov ecx, dword [edx]
mov byte [ebp - 0x20], bl
mov edi, dword [ecx + 0xc]
mov cl, 0x5c
xor byte [ebp + eax - 0x2b], cl
inc eax
cmp eax, 0xb
jae 0x10081973
mov cl, byte [ebp - 0x2c]
jmp 0x10081964
push ebx
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x20], bl
push eax
push esi
mov ecx, edx
call edi
call fcn.1004e1f6
mov edx, dword [0x10113a1c]
mov esi, eax
push 0x32
pop ebx
mov dword [ebp - 0x5c], 0x372e395b
xor eax, eax
mov ecx, dword [edx]
mov dword [ebp - 0x58], 0x42f3e37
mov byte [ebp - 0x54], bl
mov dword [ebp - 0x53], 0x383a2b36
mov edi, dword [ecx + 0xc]
mov cl, 0x5b
mov word [ebp - 0x4f], 0x2f
xor byte [ebp + eax - 0x5b], cl
inc eax
cmp eax, 0xd
jae 0x100819c6
mov cl, byte [ebp - 0x5c]
jmp 0x100819b7
push 0
lea eax, [ebp - 0x5b]
mov byte [ebp - 0x4e], 0
push eax
push esi
mov ecx, edx
call edi
mov edx, dword [0x10113a0c]
mov cl, 0x7e
mov dword [ebp - 0x1c], 0x21080d7e
mov dword [ebp - 0x18], 0x1f1b161d
mov word [ebp - 0x14], 0xd0a
mov eax, dword [edx]
mov byte [ebp - 0x12], 0
mov esi, dword [eax + 0x34]
xor eax, eax
xor byte [ebp + eax - 0x1b], cl
inc eax
cmp eax, 9
jae 0x10081a0b
mov cl, byte [ebp - 0x1c]
jmp 0x100819fc
lea eax, [ebp - 0x1b]
mov byte [ebp - 0x12], 0
push eax
mov ecx, edx
call esi
mov edi, 0x20c
test eax, eax
je 0x10081b62
mov edx, dword [0x10113a0c]
mov cl, 0x19
mov dword [ebp - 0x3c], 0x6e7c5719
mov dword [ebp - 0x38], 0x715a6f4a
mov dword [ebp - 0x34], 0x6a6d787c
mov eax, dword [edx]
mov byte [ebp - 0x30], 0
mov esi, dword [eax + 0x34]
xor eax, eax
xor byte [ebp + eax - 0x3b], cl
inc eax
cmp eax, 0xb
jae 0x10081a5b
mov cl, byte [ebp - 0x3c]
jmp 0x10081a4c
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x30], 0
push eax
mov ecx, edx
call esi
test eax, eax
jne 0x10081b62
push edi
call fcn.1009d0a2
mov esi, eax
mov dword [ebp - 0x10], esi
and dword [ebp - 4], 0
push edi
push 0
push esi
call sub.VCrUnTImE140.DlL_memset
add esp, 0x10
mov dword [ebp - 0x4c], 0x6c7e551b
mov cl, 0x1b
mov dword [ebp - 0x48], 0x73586d48
mov dword [ebp - 0x44], 0x686f7a7e
xor eax, eax
mov byte [ebp - 0x40], 0
xor byte [ebp + eax - 0x4b], cl
inc eax
cmp eax, 0xb
jae 0x10081ab6
mov cl, byte [ebp - 0x4c]
jmp 0x10081aa7
mov edx, dword [0x10113a0c]
mov cl, 0x77
mov byte [ebp - 0x40], 0
mov eax, dword [edx]
mov dword [ebp - 0x2c], 0x28010477
mov dword [ebp - 0x28], 0x16121f14
mov word [ebp - 0x24], 0x403
mov edi, dword [eax + 0x34]
xor eax, eax
mov byte [ebp - 0x22], 0
xor byte [ebp + eax - 0x2b], cl
inc eax
cmp eax, 9
jae 0x10081af0
mov cl, byte [ebp - 0x2c]
jmp 0x10081ae1
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x22], 0
push eax
mov ecx, edx
call edi
lea ecx, [ebp - 0x4b]
push ecx
push eax
mov ecx, esi
call fcn.1004dd21
or dword [ebp - 4], 0xffffffff
mov cl, 0x57
mov edx, dword [0x10113a14]
mov word [ebp - 0x5c], 0x1957
mov byte [ebp - 0x5a], bl
mov dword [ebp - 0x59], 0x14210420
mov eax, dword [edx]
mov byte [ebp - 0x55], 0x3f
mov byte [ebp - 0x54], bl
mov dword [ebp - 0x53], 0x77242336
mov esi, dword [eax + 0x1a8]
xor eax, eax
mov word [ebp - 0x4f], 0x66
xor byte [ebp + eax - 0x5b], cl
inc eax
cmp eax, 0xd
jae 0x10081b51
mov cl, byte [ebp - 0x5c]
jmp 0x10081b42
lea eax, [ebp - 0x5b]
mov byte [ebp - 0x4e], 0
push eax
mov ecx, edx
call esi
mov edi, 0x20c
mov edx, dword [0x10113a0c]
mov cl, 0x5d
push 0x35
pop ebx
mov dword [ebp - 0x2c], 0x22b2e5d
mov eax, dword [edx]
mov byte [ebp - 0x28], 0x3e
mov byte [ebp - 0x27], bl
mov dword [ebp - 0x26], 0x2e293c38
mov esi, dword [eax + 0x34]
xor eax, eax
mov byte [ebp - 0x22], 0
xor byte [ebp + eax - 0x2b], cl
inc eax
cmp eax, 9
jae 0x10081b9c
mov cl, byte [ebp - 0x2c]
jmp 0x10081b8d
lea eax, [ebp - 0x2b]
mov byte [ebp - 0x22], 0
push eax
mov ecx, edx
call esi
test eax, eax
jne 0x10081cd9
mov ecx, dword [0x10113a0c]
mov byte [ebp - 0x4c], bl
mov dword [ebp - 0x4b], 0x546a5956
mov dword [ebp - 0x47], 0x5d5a4140
mov eax, dword [ecx]
mov dword [ebp - 0x43], 0x455950
mov edx, dword [eax + 0x34]
xor eax, eax
xor byte [ebp + eax - 0x4b], bl
inc eax
cmp eax, 0xb
jae 0x10081be4
mov bl, byte [ebp - 0x4c]
jmp 0x10081bd5
lea eax, [ebp - 0x4b]
xor ebx, ebx
push eax
mov byte [ebp - 0x40], bl
call edx
test eax, eax
je 0x10081cdb
push edi
call fcn.1009d0a2
mov esi, eax
mov dword [ebp - 0x10], esi
push edi
push ebx
push esi
mov dword [ebp - 4], 1
call sub.VCrUnTImE140.DlL_memset
add esp, 0x10
mov dword [ebp - 0x1c], 0x59707506
mov cl, 6
mov dword [ebp - 0x18], 0x67636e65
mov word [ebp - 0x14], 0x7572
mov eax, ebx
mov byte [ebp - 0x12], bl
xor byte [ebp + eax - 0x1b], cl
inc eax
cmp eax, 9
jae 0x10081c3e
mov cl, byte [ebp - 0x1c]
jmp 0x10081c2f
mov edx, dword [0x10113a0c]
mov byte [ebp - 0x12], bl
push 0x32
pop ecx
mov eax, dword [edx]
mov byte [ebp - 0x3c], cl
mov dword [ebp - 0x3b], 0x536d5e51
mov dword [ebp - 0x37], 0x5a5d4647
mov edi, dword [eax + 0x34]
mov eax, ebx
mov dword [ebp - 0x33], 0x425e57
xor byte [ebp + eax - 0x3b], cl
inc eax
cmp eax, 0xb
jae 0x10081c78
mov cl, byte [ebp - 0x3c]
jmp 0x10081c69
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x30], bl
push eax
mov ecx, edx
call edi
lea ecx, [ebp - 0x1b]
push ecx
push eax
mov ecx, esi
call fcn.1004dd21
or dword [ebp - 4], 0xffffffff
mov cl, 0x11
mov edx, dword [0x10113a14]
mov dword [ebp - 0x5c], 0x4e676211
mov dword [ebp - 0x58], 0x70747972
mov dword [ebp - 0x54], 0x21316265
mov eax, dword [edx]
mov byte [ebp - 0x50], bl
mov esi, dword [eax + 0x1a8]
mov eax, ebx
xor byte [ebp + eax - 0x5b], cl
inc eax
cmp eax, 0xb
jae 0x10081ccc
mov cl, byte [ebp - 0x5c]
jmp 0x10081cbd
lea eax, [ebp - 0x5b]
mov byte [ebp - 0x50], bl
push eax
mov ecx, edx
call esi
jmp 0x10081cdb
xor ebx, ebx
movaps xmm0, xmmword [0x100ff3e0]
mov ecx, ebx
movups xmmword [ebp - 0x74], xmm0
mov dword [ebp - 0x64], 0x1b284e0b
mov word [ebp - 0x60], 0x4000
mov byte [ebp - 0x5e], bl
mov al, byte [ebp - 0x74]
xor byte [ebp + ecx - 0x73], al
inc ecx
cmp ecx, 0x15
jb 0x10081cf8
lea eax, [ebp - 0x73]
mov byte [ebp - 0x5e], bl
push eax
push ebx
push ebx
push dword [0x10113a48]
call fcn.100816bc
add esp, 0x10
call fcn.1009e115
ret
push 1
call dword [sym.imp.ApI_ms_win_crt_RuntimE_l1_1_0.DLL_exit]
int3