Function at 0x1006f935
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using base64
Execute anti-debugging instructions
Packed with generic packer
Terminate process

Disassembly:
mov dword [esp + 4], 0xdc404ca0
lea esp, [esp + 4]
call fcn.10268cd3
mov eax, 0x9738fb3f
sub esi, 4
push eax
mov edx, dword [esi]
mov ecx, dword [esp]
xadd word [esp], ax
xor edx, ebx
xadd word [esp], cx
bswap edx
shl ecx, 0xc
pop eax
lea edx, [edx + eax*2 - 0x7ebaf552]
btr ax, ax
jae 0x10244829
jb 0x1029f9b1
call fcn.10036140
add esp, 4
movsx edx, bp
mov dl, bh
mov edx, dword [ebp - 0xc]
jmp 0x1007e6ef
xor ebx, edx
add ebp, edx
dec eax
dec al
sar eax, cl
mov ecx, dword [edi + ecx*2 - 0x1ff46]
mov edx, dword [edi + 4]
sub eax, 0x60b98ead
shl al, 0x44
and eax, eax
adc ecx, edx
lea edx, [eax*8 + 0x52da499]
shl eax, 0x76
sar ax, 0x4f
mov dword [edi + eax - 0x6bfffffc], ecx
adc ax, 0x18
mov word [edi + 2], ax
movzx ecx, dl
mov cl, byte [esi + ecx*2 - 0x37]
mov eax, 0x3d2dc5b1
ror ax, 0xac
bt dx, dx
lea esi, [esi + eax*2 - 0x7a5ab63d]
cdq
setae dl
xor cl, bl
ror al, 0x41
adc cl, 0x27
shl ax, 0xa9
sbb edx, 0x1a2c06bd
xchg edx, eax
neg cl
btr eax, 0x2f
jb 0x1025cc45
call fcn.10033fa0
nop
nop
jmp 0x1026ac6e
cdq
add cl, dl
and ax, 0x27b2
inc dx
ror cl, 1
btr dx, dx
xor eax, edx
bt ax, 4
xor bl, cl
not eax
add ecx, esp
jmp 0x10274552
push 0xffff
mov cx, 0x8181
mov ecx, dword [0x1014839c]
jmp 0x10271ddc
sbb edx, 0xe90fbea5
shl eax, cl
shl ecx, 0x62
cmovp ecx, eax
xor ebx, edx
add ebp, edx
bt eax, 0x9a
xor ax, cx
mov edi, dword [eax + edi - 0x40000000]
bts ecx, ecx
jae fcn.1024e768
mov edx, 0x54
btc cx, 0x2c
mov word [ebp - 0x54], dx
mov ecx, esi
mov eax, 0x6f
mov word [ebp - 0x52], ax
movzx ecx, cx
mov eax, 0x94b13cb4
cmp ebp, eax
mov ecx, 0x70
test esi, 0x2f841715
sbb ax, di
sal dl, cl
mov word [ebp - 0x50], cx
shl ah, 0x28
sar cl, cl
mov edx, 0x20
mov word [ebp - 0x4e], dx
mov eax, 0x55
movzx ecx, bp
mov cl, 1
mov word [ebp - 0x4c], ax
mov ecx, 0x70
xor ax, si
mov word [ebp - 0x4a], cx
movsx eax, sp
sub edx, edx
shrd ecx, esi, 0x83
mov word [ebp - 0x48], dx
shl dx, 0xa4
cwd
mov eax, 0x50
cmp si, 0x6504
mov word [ebp - 0x74], ax
inc ch
shl ecx, 0x20
mov ecx, 0x6c
bswap eax
stc
mov word [ebp - 0x72], cx
mov edx, 0x65
shl cl, 0x3c
sar ecx, cl
mov word [ebp - 0x70], dx
mov eax, 0x61
adc dh, 0xbc
mov word [ebp - 0x6e], ax
shl ax, 0x15
mov ecx, 0x73
btr ax, di
mov word [ebp - 0x6c], cx
rcr dh, cl
mov edx, 0x65
xadd al, ch
btr eax, edi
mov word [ebp - 0x6a], dx
mov eax, 0x20
cmovp edx, ebx
mov word [ebp - 0x68], ax
movsx dx, ch
mov cl, 0x20
inc ah
mov ecx, 0x77
seto al
mov word [ebp - 0x66], cx
shr cx, 0x19
ror cl, 0x2f
mov edx, 0x61
mov word [ebp - 0x64], dx
not ecx
mov eax, 0x69
shld edx, ecx, 0x1d
btc cx, bp
mov ch, ah
mov word [ebp - 0x62], ax
bts eax, esp
shl ah, cl
jmp 0x1027a873
jmp 0x100711e3
call fcn.10052de0
push 0x408
cmovge dx, sp
not ch
setle cl
lea edx, [ebp - 0x474]
setl ch
xchg cx, cx
push edx
xchg ch, ch
not ch
lea ecx, [ebp - 0x8c]
jmp 0x10294652
lea eax, [edx + edx*4 + 0xa99f6a5]
sal al, 6
mov edx, dword [ecx + eax*8 - 0x54a7b200]
push eax
and eax, eax
mov dword [edi + eax - 0xa94f642], edx
lea edi, [edi + eax - 0xa94f642]
pop eax
ja fcn.1024e768
mov edx, 0xfe9d579a
mov eax, edx
and al, ah
sbb esi, 4
lea ecx, [eax + edx*4 + 0x1f19263f]
mov eax, dword [esi + ecx*2 - 0x3057b772]
xor eax, ebx
lea ecx, [edx*2 + 0x77abad0c]
xadd ecx, edx
shr edx, 0x5c
lea eax, [edx + eax - 0x36adcfbd]
btr ecx, ecx
or cx, 0xf3a6
xchg cx, dx
rol eax, 2
not ecx
xor dx, cx
ror ecx, cl
sbb eax, 0xcd319daf
bswap eax
xor ebx, eax
or ecx, ecx
adc ebp, eax
jmp 0x1027de64
push 0x22
jmp 0x102367ce
mov ecx, 0x74
cbw
rcr dx, 0x35
stc
mov word [ebp - 0x60], cx
inc cx
cmc
rcl cx, cl
mov edx, 0x2e
add eax, 0xe3204438
shr ecx, cl
shl eax, 0x86
mov word [ebp - 0x5e], dx
add ecx, ebx
or ecx, ebp
mov eax, 0x2e
dec cx
mov word [ebp - 0x5c], ax
mov ecx, 0x2e
shr ax, cl
btr ax, 0xa9
mov word [ebp - 0x5a], cx
xor edx, edx
lahf
cwde
mov word [ebp - 0x58], dx
mov cx, 0x9d9a
lea eax, [ebp - 0x54]
bswap ecx
mov cx, bp
setbe ch
push eax
lea ecx, [ebp - 0x74]
push ecx
jmp 0x1026501e
jmp 0x10295ae6
call fcn.1004cef0
lea ecx, [ebp - 0x8c]
call fcn.1004d1e0
mov eax, dword [ebp - 0x84]
cmovb cx, ax
movzx cx, dl
push eax
setl cl
xchg cl, ch
lea ecx, [ebp - 0x474]
jmp 0x102974b4
mov ecx, dword [edi + edx*2 - 0x180c]
push edx
mov edx, dword [edi + edx - 0xc02]
add edi, 4
not ecx
not edx
mov eax, dword [esp]
add dword [esp + eax*2 - 0x180c], eax
not dword [esp + eax - 0xc06]
or ecx, edx
ror ax, 0x89
mov dword [edi + eax*2 - 0x60c], ecx
cwde
rol eax, 0x4a
movsx edx, word [esp + eax*8 - 0x60c000]
mov dword [esp + eax*4 - 0x306000], ebp
ret
push ecx
jmp 0x1024805e
rol edx, 2
xor eax, 0xb88faeb5
btc ax, 0xe
rol cl, 0x24
not edx
add cl, ah
lea ecx, [ecx*4 - 0x224fbbe1]
jno 0x102672f3
mov byte [ecx + 0xed2f], al
jmp 0x102766a6