Function at 0x790ad56a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov byte [ebp - 0x120], 0x12
aam 0xef
aas
bsf ax, si
aam 0xec
mov byte [ebp - 0x11f], 0xd1
aaa
aad 0x9c
mov byte [ebp - 0x11e], 0x5f
cmp ah, 0x89
bsf eax, esp
push ecx
push ecx
mov byte [ebp - 0x11d], 0x25
bts ax, sp
sub al, ah
mov byte [ebp - 0x11c], 0x4f
das
mov byte [ebp - 0x11b], 0x2b
clc
bts eax, 0x13
btc ax, ax
add eax, esi
mov byte [ebp - 0x11a], 0x12
rol al, cl
mov byte [ebp - 0x119], 0x6c
test ch, dl
mov byte [ebp - 0x118], 0xcd
test ch, bh
mov byte [ebp - 0x117], 0x31
bt bx, cx
adc ax, 0xeaab
cmc
or al, dl
mov byte [ebp - 0x116], 0x5b
xor ah, dh
mov byte [ebp - 0x115], 0x2e
pop eax
mov byte [ebp - 0x114], 0x12
dec ax
btc ax, bp
or ah, 0xaa
mov byte [ebp - 0x113], 0x9c
dec ax
shrd eax, eax, cl
mov al, 0xbf
mov byte [ebp - 0x112], 0x44
shrd eax, ebx, cl
cmc
mov byte [ebp - 0x111], 0x11
push dword [esp + 4]
aad 0xab
inc ax
btr ax, bp
mov byte [ebp - 0x110], 0xba
add esp, 0x38
ja 0x790be255
mov byte [ebp - 0x10f], 0x31
bsf eax, eax
sub eax, esp
mov byte [ebp - 0x10e], 0x12
test dl, bh
or ah, 0x31
mov byte [ebp - 0x10d], 0x89
lahf
bswap ax
btc eax, 5
add al, 0x42
mov byte [ebp - 0x10c], 0xfc
rcl al, 2
or ax, dx
mov byte [ebp - 0x10b], 0x97
rol al, cl
not al
mov al, 0xa7
clc
mov byte [ebp - 0x10a], 0x3a
btr eax, eax
pushfd
bt bx, di
mov byte [ebp - 0x109], 0x34
dec ah
cmc
mov byte [ebp - 0x108], 0x12
clc
mov byte [ebp - 0x107], 0x8e
and al, dl
mov byte [ebp - 0x106], 0x6c
sub ax, ax
mov byte [esp], cl
bt di, cx
mov byte [ebp - 0x105], 0x87
rcl ah, 4
mov byte [ebp - 0x104], 6
bsr ax, di
das
ror al, 3
mov byte [ebp - 0x103], 0x37
bswap ax
sar al, 1
adc ax, ax
inc ah
mov byte [ebp - 0x102], 0x12
sub eax, eax
shrd ax, sp, 4
sal al, cl
mov byte [ebp - 0x101], 0xaa
daa
mov dword [esp], 0xfb66c3ca
cmc
mov byte [ebp - 0x100], 0xae
push dword [esp]
ror ax, cl
sar eax, cl
mov byte [ebp - 0xff], 0xfe
btc eax, esi
btc ax, bx
bt di, 7
mov byte [ebp - 0xfe], 0x9a
test ebx, edi
bts ax, 3
ror ah, 1
mov byte [ebp - 0xfd], 0x3a
movsx ax, bl
btc ax, 4
sar ah, 1
mov byte [ebp - 0xfc], 0x12
push 0xf08bc8ab
stc
bts ax, 9
pushal
mov byte [ebp - 0xfb], 0x41
shld ax, di, cl
lahf
mov byte [ebp - 0xfa], 0xa9
sbb ah, ch
sub al, 0x7e
lea eax, [edi + 0x121c9d16]
rcl ah, cl
mov byte [ebp - 0xf9], 0x3b
shrd ax, cx, cl
ror ax, 8
mov byte [ebp - 0xf8], 0xa5
test dx, si
btc eax, esi
mov byte [ebp - 0xf7], 0x3d
pop eax
stc
mov byte [ebp - 0xf6], 0x12
shr ah, 7
jmp 0x790c9f20
mov ax, bx
mov eax, 0xc6c9d52f
xor al, bl
test dx, 0x99a0
mov byte [ebp - 0x10f], 0x31
bsf ax, dx
neg ah
aas
mov byte [ebp - 0x10e], 0x12
btc ax, 1
pushal
das
mov byte [ebp - 0x10d], 0x89
lahf
stc
aad 0x18
mov byte [ebp - 0x10c], 0xfc
not ah
sar eax, 0x1a
pushfd
push dword [esp]
mov byte [ebp - 0x10b], 0x97
cmp ebx, 0xb473edc2
push 0xf9e25291
mov byte [ebp - 0x10a], 0x3a
call fcn.790a4ce2
rcl ax, 0xf
inc al
mov eax, 0x64
and ecx, 0xa657a6a3
mov word [ebp - 0x118], ax
rcr al, 2
movsx eax, bl
test cx, 0xda67
aaa
mov eax, 0x66
mov byte [esp + 4], bl
push dword [esp]
sbb ch, 0xae
mov word [ebp - 0x116], ax
inc ch
pushfd
ror cx, 0xd
bsr cx, bp
xor eax, eax
jmp 0x790e8def
btc cx, dx
bsf cx, ax
add cl, 0x5d
mov word [ebp - 0x114], ax
bswap cx
mov dword [esp + 0x30], 0
or al, al
bts eax, 0x18
mov dword [esp + 0x2c], 0
cmc
jmp 0x7912dc32
aaa
mov dword [esp + 0x28], 0xfffffffc
btr ax, si
not ecx
sub al, al
xor ah, cl
mov eax, dword [0x7907636c]
movzx cx, bl
ror ch, cl
add cx, 0xe4f6
add eax, 0xa0
push dword [esp + 4]
mov dword [esp + 0x28], eax
setle ch
pushfd
push 0x2f990b97
jmp 0x79145310
mov dword [esp + 0x2c], 0
mov ch, byte [esp]
pop ecx
lea ecx, [ebp - 0x120]
call fcn.79095d8c