Function at 0x100cefd3
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov al, byte [0xb0fffff9]
mov byte [ebp - 0x65f], 0x9d
mov byte [ebp - 0x65e], 0x99
mov byte [ebp - 0x65d], 0x88
mov byte [ebp - 0x65c], 0xb9
mov byte [ebp - 0x65b], 0x94
mov byte [ebp - 0x65a], 0x94
mov byte [ebp - 0x659], 0x97
mov byte [ebp - 0x658], 0x9b
mov byte [ebp - 0x657], 0xf8
test eax, 0xf8fffff9
lea eax, [ebp - 0x664]
push eax
call fcn.100ce4b8
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.100ce46d
add esp, 0xc
mov dword [ebp - 0x67c], eax
and byte [ebp - 0x524], 0
and byte [ebp - 0x523], 0
mov byte [ebp - 0x522], 0x15
and byte [ebp - 0x521], 0
mov byte [ebp - 0x520], 0xa2
mov byte [ebp - 0x51f], 0x8f
mov byte [ebp - 0x51e], 0x8b
mov byte [ebp - 0x51d], 0x9a
mov byte [ebp - 0x51c], 0xac
mov byte [ebp - 0x51b], 0x98
mov byte [ebp - 0x51a], 0x8f
mov byte [ebp - 0x519], 0x8f
mov byte [ebp - 0x518], 0xea
lea eax, [ebp - 0x524]
push eax
call fcn.100ce4b8
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.100ce46d
add esp, 0xc
mov dword [ebp - 0x39c], eax
call fcn.100ce4a8
sahf
imul ebx, ebx, 0xffffffb4
and byte [ebp - 0x514], 0
and byte [ebp - 0x513], 0
mov byte [ebp - 0x512], 0xe3
and byte [ebp - 0x511], 0
add dh, al
test eax, esi
cli
invalid
call [ebx - 0x3a]
test ecx, esi
cli
invalid
invalid
jns 0x100cf0b0
test edx, esi
cli
invalid
jmp [eax - 0x3a]
test ebx, esi
cli
invalid
call [edx - 0x3a]
test esp, esi
cli
invalid
push dword [ebp - 0x3a]
test ebp, esi
cli
invalid
push dword [eax - 0x3a]
test esi, esi
cli
invalid
invalid
jns 0x100cf0d3
test edi, esi
cli
invalid
dec dword [edi - 0x3a]
test eax, edi
cli
invalid
push dword [ebp - 0x3a]
test ecx, edi
cli
invalid
jmp dword [esi - 0x3a]
test edx, edi
cli
invalid
invalid
jns 0x100cf0ef
test ebx, edi
cli
invalid
call [ecx*4 - 0x5137b]
call dword [eax - 0x18]
jge 0x100cf12c
invalid
call [ecx + 0x50]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.100ce46d
add esp, 0xc
mov dword [ebp - 0x33c], eax
call fcn.100ce4a8
pop esi
jo 0x100cf1a2
xchg ecx, eax
push 0x104
lea eax, [ebp - 0x334]
push eax
push dword [ebp + 8]
call dword [ebp - 0x538]
mov dword [ebp - 0x398], eax
mov byte [ebp - 0x544], 1
cmp dword [ebp - 0x398], 0
je 0x100cf19c
cmp dword [ebp - 0x398], 0
je 0x100cf366
cmp dword [ebp + 0xc], 1
je 0x100cf366
cmp dword [ebp + 0xc], 8
jne 0x100cf32e
mov byte [ecx], al
add byte [eax], al
and byte [ebp - 0x6b8], 0
and byte [ebp - 0x6b7], 0
mov byte [ebp - 0x6b6], 0x9b
and byte [ebp - 0x6b5], 0
mov byte [ebp - 0x6b4], 0x33
mov byte [ebp - 0x6b3], 0x16
mov byte [ebp - 0x6b2], 0xd
mov byte [ebp - 0x6b1], 0x10
mov byte [ebp - 0x6b0], 1
mov byte [ebp - 0x6af], 0x34
mov byte [ebp - 0x6ae], 0x16
mov byte [ebp - 0x6ad], 0xb
mov byte [ebp - 0x6ac], 7
mov byte [ebp - 0x6ab], 1
mov byte [ebp - 0x6aa], 0x17
mov byte [ebp - 0x6a9], 0x17
mov byte [ebp - 0x6a8], 0x29
mov byte [ebp - 0x6a7], 1
mov byte [ebp - 0x6a6], 9
mov byte [ebp - 0x6a5], 0xb
mov byte [ebp - 0x6a4], 0x16
mov byte [ebp - 0x6a3], 0x1d
mov byte [ebp - 0x6a2], 0x64
lea eax, [ebp - 0x6b8]
push eax
call fcn.100ce4b8
pop ecx
push eax
push dword [ebp + 0x18]
push dword [ebp + 0x14]
call fcn.100ce46d
add esp, 0xc
mov dword [ebp - 0x690], eax
mov byte [ebp - 0x6a0], 0x8b
or byte [ebp - 0x69f], 0xff
mov byte [ebp - 0x69e], 0x55
mov byte [ebp - 0x69d], 0x8b
mov byte [ebp - 0x69c], 0xec
lea eax, [ebp - 0x694]
push eax
push 5
lea eax, [ebp - 0x6a0]
push eax
push dword [ebp - 0x33c]
push 0xffffffffffffffff
call dword [ebp - 0x690]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x6bc], eax
push 0x1000
push 8
push dword [ebp - 0x674]
call dword [ebp - 0x67c]
mov dword [ebp - 0x698], eax
call fcn.100ce4a8
cmc
sub ebp, ebp
invalid
inc esp
stc
invalid
call fcn.100ce4a8
inc esi
movsd dword es:[edi], dword [esi]
salc
jbe 0x100cf2b8
movsd dword es:[edi], dword [esi]
mov esp, 0xfffffa
push 0
call dword [ebp - 0x340]
mov dword [ebp + 8], eax
push 0x104
lea eax, [ebp - 0x334]
push eax
push 0
call dword [ebp - 0x538]
and byte [ebp - 0x230], 0
push 0x40