Function at 0x755109
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edx, dword [edi]
mov eax, dword [edx + 0xc]
mov ecx, edi
jmp 0x833d8d
test edx, edx
jmp 0x766da3
inc eax
stc
cmp esi, 0x40
jmp 0x782282
jmp 0x818b3e
mov ecx, dword [eax]
stc
add ecx, dword [ebp - 0x2b8]
cmp esp, edi
push 1
stc
push edx
cmp si, 0x6cbd
xchg dl, dl
clc
mov edx, dword [ebp - 0x2cc]
test ebx, 0x6c236912
cmp esp, esp
test edi, ecx
push ecx
add edx, edi
jmp 0x5a0f55
mov byte [ebp - 0x3a], 0x71
jmp 0x857390
call fcn.00492b00
push 0x10001
jmp 0x5c1f57
mov byte [ebp - 0x38], dl
mov edx, 0x4a5b121c
mov byte [ebp - 0x37], cl
mov byte [ebp - 0x36], 0xcf
xchg cx, cx
not edx
mov byte [ebp - 0x35], 0xee
movsx edx, cx
bswap dx
jmp 0x79ad3f
push edx
push esi
jmp 0x800031
call fcn.00494140
mov dword [ebp - 4], 0xffffffff
add ah, 0x3c
inc dh
ror ah, 0x78
mov eax, dword [ebp - 0x2b4]
cdq
btc edx, ebp
add eax, 0xfffffff0
rcl edx, 0x1c
lea edx, [eax + 0xc]
or ecx, 0xffffffff
stc
jmp 0x5bdea6
mov byte [ebp - 0x4b], 0x29
jmp 0x811ed4
call eax
mov ecx, dword [ebp - 0xc]
bts di, bp
not si
mov dword fs:[0], ecx
sar edi, 0xdb
pop ecx
sal si, 0x5c
jmp 0x6c024c
mov byte [ebp - 0x3d], pe_nt_image_headers32
mov byte [ebp - 0x3c], 0xe0
jmp 0x737574
pop ebx
mov ecx, dword [ebp - 0x10]
cmp ax, bp
jmp 0x6a007d
lock xadd dword [edx], ecx
jmp 0x72c6d8
push ebx
jmp 0x6bb37f
call fcn.00493df0
mov ecx, dword [ebp - 0x2c0]
mov esi, eax
mov eax, dword [esi + 0x10]
cmp ebp, esi
mov dword [ebp - 0x2bc], esi
mov edi, ecx
test eax, eax
jmp 0x780c77
lea eax, [ebp + ecx - 0x2b0]
sar bh, cl
shld ebx, esi, 0x1e
mov ebx, ecx
cmp bl, 0x75
and ebx, 0xff
cmp ch, al
movzx ebx, byte [ebp + ebx - 0x220]
cmp esp, ebp
jmp 0x7488db
je 0x782288
mov bl, byte [eax]
jmp 0x747037
je 0x6a0661
mov ecx, dword [esi + 0x14]
jmp 0x6f7234
call fcn.004471d0
lea ecx, [ebp - 0x220]
adc eax, ecx
ror al, cl
mov eax, 1
xchg di, di
sub eax, ecx
sbb di, 0x2381
xor di, bp
lea edx, [ebp - 0x220]
adc edi, eax
mov ecx, 2
and di, bp
sub edi, ecx
bswap di
mov edi, 3
stc
lea esp, [esp + 8]
test ah, 0xd4
sub ecx, edx
cmc
jmp 0x6aff29
mov byte [ebp - 0x45], 0x5a
mov byte [ebp - 0x44], 0x5f
jmp 0x6a96c0
jle 0x777bbf
imul eax, ebx
test cx, di
jmp 0x729358
jne 0x5a29b3
sub ecx, 4
cmc
test ebp, ecx
add eax, 4
stc
cmc
cmp ecx, 4
jmp 0x77fc69
call fcn.00492d70
mov esi, dword [ebp - 0x2b4]
xchg cx, cx
lea ecx, [ebp - 0x2c0]
jmp 0x820e68
jmp 0x5cec5c
mov byte [eax], dl
jmp 0x82c4ea
je 0x6a0661
test ecx, ecx
jmp 0x8c1535
je 0x777bc1
add eax, ebx
mov dword [edi], eax
jmp 0x7ef963
push ecx
jmp 0x7bc02e
push pe_nt_image_headers32
jmp 0x706883
call fcn.00493b10
mov ebx, eax
xor ah, 0xe9
mov eax, dword [ebp + 0xc]
cdq
bswap esi
lea esi, [ebx - 0xb]
idiv esi
mov edi, dword [ebp - 0x2c8]
stc
add esp, 4
cmp dx, di
jmp 0x755156
mov ebx, esi
and ebx, 0xf
cmc
movzx ebx, byte [ebp + ebx - 0x20]
clc
stc
xor byte [edx], bl
shld ebx, ebx, 0xf5
lea ebx, [edx + eax]
cmc
jmp 0x77af5b
xor ecx, ebp
jmp 0x7d5b89
push esi
jmp 0x6848b6
mov byte [ebp - 0x43], 0xad
jmp 0x750de6
jge 0x7b7f59
cmp dword [esi - 8], 0
jmp 0x4290be
mov byte [ebp - 0x20], 0x64
cmp bl, dh
test bh, dh
test edx, 0xd882603
mov byte [ebp - 0x1f], 0x52
clc
cmp ebx, 0x2c7d6253
cmc
mov byte [ebp - 0x1e], 0xcd
mov byte [ebp - 0x1d], 0x84
mov byte [ebp - 0x1c], bl
shl bh, cl
bsf bx, cx
mov byte [ebp - 0x1b], 0x49
mov byte [ebp - 0x1a], 0x68
xchg bx, bx
clc
sal ebx, 0xa7
mov byte [ebp - 0x19], 0xdc
ror ebx, cl
xchg bh, bh
sal ebx, 0x42
mov byte [ebp - 0x18], 0x3b
mov byte [ebp - 0x17], 0x73
test cx, sp
sal ebx, cl
mov byte [ebp - 0x16], 0x70
bsf bx, cx
sets bl
mov byte [ebp - 0x15], 0x1f
mov byte [ebp - 0x14], 0x44
mov byte [ebp - 0x13], 0xd6
cmovs ebx, edi
movsx ebx, bx
mov byte [ebp - 0x12], 0xcb
sal bl, cl
ror bl, cl
mov byte [ebp - 0x11], 0x79
shr bl, cl
inc bh
sub edi, edx
clc
stc
lea esp, [esp]
lea edx, [ebp + esi - 0x220]
jmp 0x6927da
mov dword [ebp - 0x2c0], eax
jmp 0x614ed1
pop edi
or cl, dh
bts cx, cx
shld cx, di, 0xc9
pop esi
sar ecx, cl
btr cx, 0x8d
jmp 0x5ba08d
mov byte [ebp - 0x41], 0x6d
jmp 0x8bf8f0
push ecx
jmp 0x85fe54
push edx
jmp 0x76a5bf
lea ecx, [edi + esi]
cmp sp, 0x7675
test edi, edi
cmp ecx, eax
jmp 0x882da5
jl 0x818b3e
call fcn.00492b00
mov ebx, eax
jmp 0x5940c7
mov dword [edi], eax
test dl, dl
test edx, edx
jmp 0x65c103
dec ecx
cmp ecx, esp
test esi, 0x76913d00
test ecx, ecx
jmp 0x7e7f80
mov byte [ebp - 0x3b], 0xf7
jmp 0x569725
call fcn.004509ec
mov ecx, dword [ebp - 0x2c4]
cmovno edx, ecx
not dx
mov dword [ecx], eax
setb dl
mov edx, dword [edi]
jmp 0x8a2bff
call fcn.00473d40
mov eax, dword [ebp + 0xc]
cmp bl, ah
test dx, 0x6326
jmp 0x7e0807
mov dl, byte [ebp + ecx - 0x2b0]
mov byte [ebp + ecx - 0x2b0], bl
jmp 0x63f976
xor byte [eax], bl
bt bx, dx
lea ebx, [eax + esi]
jmp 0x83fdd1
mov byte [ebp - 0x3f], 0x35
jmp 0x8a7aab
call fcn.004939f0
add esp, 4
jmp 0x5a29ae
jl 0x6affb3
lea eax, [ebp - 0x2b0]
mov edx, eax
shl edi, 1
mov edi, 2
sub edi, edx
mov esi, 1
mov edx, 3
cmc
sub ecx, ecx
cmp ebp, esi
cmc
sub esi, eax
stc
sub edx, eax
jmp 0x63099d
mov byte [ebp - 0x42], 0x2f
jmp 0x6da738
push 0x6c699c01
call fcn.005c672a
mov byte [ebp - 0x50], 0x5d
jmp 0x75ade2
mov dword [edi], 0
stc
test eax, eax
jmp 0x5fb219
mov byte [ebp - 0x4f], 0xeb
mov byte [ebp - 0x4e], 0x91
jmp 0x7e5af1
jg 0x432339
mov ecx, dword [eax]
setno dh
mov dl, ch
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
jmp 0x432337
call fcn.004932c0
add esp, 0xc
dec cx
sbb dh, 0x32
mov ecx, 0x10
mov dx, sp
sub eax, eax
shl dh, 0xbf
lea ecx, [ecx]
ror dl, cl
mov edx, dword [ebp + eax - 0x230]
cmp edx, dword [ebp + eax - 0x20]
jmp 0x6080ee
mov dword [edi], ebx
mov edx, dword [edi]
jmp 0x842f3c
and ebx, 0xf
cmc
movzx ebx, byte [ebp + ebx - 0x20]
xor byte [edx + 1], bl
rcr bl, cl
shrd bx, bp, 0xa
lea ebx, [edx + ecx]
clc
jmp 0x7ee8f9
jae 0x76a5df
sub eax, eax
mov dword [ebp - 0x230], eax
test si, 0x750e
mov dword [ebp - 0x22c], eax
stc
jmp 0x78fb71
push ecx
jmp 0x74a8f8
jne 0x79ed6a
test ecx, ecx
jmp 0x79ed64
jl 0x7d1dbc
lea ecx, [ebp - 0x230]
movzx dx, bl
push ecx
lea edx, [ebp - 0x2b0]
jmp 0x67267b
mov dword [ebp - 0x228], eax
cmp esp, edx
stc
mov dword [ebp - 0x224], eax
xor esi, esi
jmp 0x540075
mov byte [ebp - 0x34], 0xe3
cwd
movzx edx, di
mov byte [ebp - 0x33], 0x73
xchg cl, dh
mov byte [ebp - 0x32], 0xa5
xchg ecx, edx
cmovae ecx, ecx
mov byte [ebp - 0x31], 0xd9
cwd
movsx ecx, ax
seto dh
mov byte [ebp - 0x30], al
mov byte [ebp - 0x2f], 0x3c
mov byte [ebp - 0x2e], 0xb3
mov byte [ebp - 0x2d], 0x5c
bswap cx
xchg cx, cx
movsx ecx, bx
mov byte [ebp - 0x2c], 0xe7
movsx cx, bh
xchg dh, cl
mov byte [ebp - 0x2b], 0xfe
mov byte [ebp - 0x2a], 0xd9
mov byte [ebp - 0x29], 0x6b
xchg dx, cx
bswap ecx
mov byte [ebp - 0x28], 0xe5
mov byte [ebp - 0x27], 0xb8
cmovge cx, dx
mov byte [ebp - 0x26], 0x67
setge dh
mov byte [ebp - 0x25], 0x32
movsx ecx, si
mov byte [ebp - 0x24], 0xe4
mov byte [ebp - 0x23], 0x7a
cmovne cx, ax
not dh
mov byte [ebp - 0x22], 0xd
mov dx, si
movzx edx, cx
mov byte [ebp - 0x21], 5
setnp dh
movsx ecx, di
lea ecx, [ebp - 0x2b0]
push ecx
movsx ecx, dx
bswap edx
mov ecx, pe_nt_image_headers32
cwd
lea edx, [ebp - 0x1a0]
jmp 0x8b543d
je 0x6a0661
cmp dword [esi + 0x14], 0
jne 0x64e7f4
test ebx, ebx
jmp 0x64e7ee
mov eax, dword [ebp - 0x2c8]
mov dword [eax], 0xffffffff
mov ecx, dword [ebp - 0x2bc]
jmp 0x780bf0
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test cl, cl
jmp 0x533016
dec ecx
jmp 0x53f3a1
call fcn.00493500
mov edi, dword [esi - 0x10]
cmc
lea eax, [esi - 0x10]
add esp, 0x10
stc
test di, 0x37e
cmp si, di
cmp dword [eax + 4], 0
jmp 0x861ef4
pop ebp
jmp 0x85baa3
movzx ebx, byte [ebp + ebx - 0x220]
clc
xor byte [eax + 3], bl
lea ecx, [ecx + 4]
cmp esp, ecx
stc
cmp ecx, 0x80
jl 0x5cec5c
mov ecx, 0x7f
sbb eax, 0x17072169
lea eax, [ebp - 0x2b0]
stc
sub esi, esi
cmp ecx, esi
jmp 0x5d22b3
call fcn.0046e186
mov esp, ebp
jmp 0x7c4391
lea esp, [esp + 0x10]
test di, bx
test ch, 0x19
xor edi, edi
test eax, eax
je 0x79edc6
mov dword [ebp - 0x2b8], edi
jmp 0x71d17f
mov byte [ebp - 0x4d], 0x34
mov byte [ebp - 0x4c], 0x5c
jmp 0x5ac279
mov dword [esi + 0x10], edi
test ebx, ebx
jmp 0x5eb9b4
jg 0x5addd1
mov ecx, dword [eax]
movsx edx, dx
cdq
mov edx, 0x989030a
mov edx, dword [ecx]
jmp 0x7f456a
call fcn.00444860
mov byte [ebp + esi - 0x2b0], 0
inc esi
add esp, 8
cmp esi, 0x80
jmp 0x7222c8
and ebx, 0xf
cmp bh, dl
test ebp, ecx
movzx ebx, byte [ebp + ebx - 0x20]
xor byte [edx + 2], bl
lea ebx, [edx + edi]
and ebx, 0xf
stc
movzx ebx, byte [ebp + ebx - 0x20]
test esi, 0x31a349af
test edx, eax
xor byte [edx + 3], bl
test di, 0x2e09
add esi, 4
cmc
test ecx, edi
cmp esi, 0x100
jmp 0x74d27f
jmp 0x777bc1
push eax
mov ah, 0x9a
mov eax, dword [edx + 4]
jmp 0x5addcf
call fcn.00493b30
lea esp, [esp + 0x14]
cmp eax, ebx
jmp 0x861f5b
mov byte [ebp - 0x4a], 0xfb
mov byte [ebp - 0x49], 3
mov byte [ebp - 0x48], 0x5e
jmp 0x8914f9
movzx eax, byte [ebp + esi - 0x2b0]
mov di, 0x120c
cmovnp di, bx
push eax
not edi
push str._02X
mov edi, ecx
lea edi, [ebp - 0x2b4]
jmp 0x7e9393
push esi
jmp 0x6672b7
inc esi
jmp 0x7bab54
mov byte [ebp - 0x46], 0x45
jmp 0x5f3525
and ebx, 0xff
jmp 0x8bd5a4
push edx
jmp 0x73d0a4
add edi, esi
cmp edi, dword [ebp + 0xc]
jmp 0x41c06b
mov byte [ebp - 0x39], 0xb7
jmp 0x59f065
ret
call fcn.00492aa0
add esp, 4
mov dword [esi + 0x14], ebx
jmp 0x6a0661
je 0x5c5eef
cmp dword [eax + 0xc], 0
movzx ecx, di
lea ecx, [eax + 0xc]
jmp 0x6abfd5
jne 0x79edba
add dword [ebp - 0x2b8], ebx
cmc
jmp 0x844ed3
jle 0x882db9
mov esi, eax
sub esi, edi
bsr ax, bp
shl ch, cl
movsx cx, al
mov eax, dword [ebp - 0x2c4]
rcl ecx, 0x89
mov edx, dword [ebp - 0x2bc]
jmp 0x542f29
mov byte [ebp - 0x47], 0x6f
jmp 0x82f73d
push edx
jmp 0x8c4dcb
mov byte [ebp - 0x3e], 0x1b
jmp 0x5b743d
call fcn.004471d0
lea edx, [ebp - 0x220]
mov ecx, 0x35791676
push edx
mov ecx, 0x100
lea edx, [ebp - 0x120]
jmp 0x5f1ab7
movzx ebx, byte [ebp + ebx - 0x220]
stc
xor byte [eax + 1], bl
rol bl, 0x50
cmovae ebx, edx
rcr bl, 0x31
lea ebx, [eax + edi]
clc
and ebx, 0xff
clc
cmp ecx, esi
movzx ebx, byte [ebp + ebx - 0x220]
clc
xor byte [eax + 2], bl
not bx
neg bh
lea ebx, [eax + edx]
clc
test ebp, ecx
and ebx, 0xff
cmp bp, 0x7142
jmp 0x7d1d8b
mov byte [ebp - 0x40], 0xe1
jmp 0x748c5c
je 0x7e5b01
push eax
call fcn.00492aa0
lea esp, [esp + 4]
cmc
test ecx, 0x388a2228
jmp 0x7e5afe
push 0
push eax
jmp 0x746764