Function at 0x1000becd
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 1
pop eax
test eax, eax
je 0x1000c09a
lea eax, [ebp - 0x230]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x6fc], 0
jne 0x1000bb66
and byte [ebp - 0x77c], 0
and byte [ebp - 0x77b], 0
mov byte [ebp - 0x77a], 0xd2
and byte [ebp - 0x779], 0
mov byte [ebp - 0x778], 0x6e
mov byte [ebp - 0x777], 0x17
mov byte [ebp - 0x776], 0x71
mov byte [ebp - 0x775], 0x7d
mov byte [ebp - 0x774], 0x5f
mov byte [ebp - 0x773], 0x42
mov byte [ebp - 0x772], 0x4a
mov byte [ebp - 0x771], 0x5f
mov byte [ebp - 0x770], 0x4c
mov byte [ebp - 0x76f], 0x40
mov byte [ebp - 0x76e], 0xd
mov byte [ebp - 0x76d], 0x6b
mov byte [ebp - 0x76c], 0x44
mov byte [ebp - 0x76b], 0x41
mov byte [ebp - 0x76a], 0x48
mov byte [ebp - 0x769], 0x5e
mov byte [ebp - 0x768], 0x71
mov byte [ebp - 0x767], 0x6e
mov byte [ebp - 0x766], 0x42
mov byte [ebp - 0x765], 0x40
mov byte [ebp - 0x764], 0x40
mov byte [ebp - 0x763], 0x42
mov byte [ebp - 0x762], 0x43
mov byte [ebp - 0x761], 0xd
mov byte [ebp - 0x760], 0x6b
mov byte [ebp - 0x75f], 0x44
mov byte [ebp - 0x75e], 0x41
mov byte [ebp - 0x75d], 0x48
mov byte [ebp - 0x75c], 0x5e
mov byte [ebp - 0x75b], 0x71
mov byte [ebp - 0x75a], 0x7e
mov byte [ebp - 0x759], 0x54
mov byte [ebp - 0x758], 0x5e
mov byte [ebp - 0x757], 0x59
mov byte [ebp - 0x756], 0x48
mov byte [ebp - 0x755], 0x40
mov byte [ebp - 0x754], 0x71
mov byte [ebp - 0x753], 0x5e
mov byte [ebp - 0x752], 0x54
mov byte [ebp - 0x751], 0x40
mov byte [ebp - 0x750], 0x5e
mov byte [ebp - 0x74f], 0x5f
mov byte [ebp - 0x74e], 0x5b
mov byte [ebp - 0x74d], 3
mov byte [ebp - 0x74c], 0x49
mov byte [ebp - 0x74b], 0x41
mov byte [ebp - 0x74a], 0x41
mov byte [ebp - 0x749], 0x2d
lea eax, [ebp - 0x77c]
push eax
call fcn.1000a00a
pop ecx
mov al, byte [ebp - 0x12c]
mov byte [ebp - 0x778], al
push 0x30
lea eax, [ebp - 0x77c]
push eax
call fcn.1000a00a
pop ecx
push eax
lea eax, [ebp - 0x504]
push eax
call fcn.10009f6b
add esp, 0xc
lea eax, [ebp - 0x504]
mov dword [ebp - 0x3a0], eax
jmp 0x1000bf6c
cmp dword [ebp - 0x6fc], 1
jne 0x1000bc20
and byte [ebp - 0x78c], 0
and byte [ebp - 0x78b], 0
mov byte [ebp - 0x78a], 0x5f
and byte [ebp - 0x789], 0
mov byte [ebp - 0x788], 0xfc
mov byte [ebp - 0x787], 0xc4
mov byte [ebp - 0x786], 0xcc
mov byte [ebp - 0x785], 0xc3
mov byte [ebp - 0x784], 0xcf
mov byte [ebp - 0x783], 0xc5
mov byte [ebp - 0x782], 0xd2
mov byte [ebp - 0x781], 0x8e
mov byte [ebp - 0x780], 0xc4
mov byte [ebp - 0x77f], 0xcc
mov byte [ebp - 0x77e], 0xcc
mov byte [ebp - 0x77d], 0xa0
call fcn.10009ffa
call 0x7abfd277
or al, 0x8d
test dword [eax + edi*8 - 1], esi
call dword [eax - 0x18]
adc ah, ah
invalid
cmp dword [ebp - 0x6fc], 2
jne 0x1000bcd4
and byte [ebp - 0x79c], 0
and byte [ebp - 0x79b], 0
mov byte [ebp - 0x79a], 0xa9
and byte [ebp - 0x799], 0
mov byte [ebp - 0x798], 0xa
mov byte [ebp - 0x797], 0x35
mov byte [ebp - 0x796], 0x39
mov byte [ebp - 0x795], 0x38
mov byte [ebp - 0x794], 0x24
mov byte [ebp - 0x793], 0x33
mov byte [ebp - 0x792], 0x25
mov byte [ebp - 0x791], 0x78
mov byte [ebp - 0x790], 0x32
mov byte [ebp - 0x78f], 0x3a
mov byte [ebp - 0x78e], 0x3a
mov byte [ebp - 0x78d], 0x56
push 0xc
lea eax, [ebp - 0x79c]
push eax
call fcn.1000a00a
pop ecx
push eax
mov eax, dword [ebp - 0x550]
lea eax, [ebp + eax - 0x654]
push eax
call fcn.10009f6b
add esp, 0xc
lea eax, [ebp - 0x654]
mov dword [ebp - 0x3a0], eax
jmp 0x1000bf6c
cmp dword [ebp - 0x6fc], 3
jne 0x1000bd75
and byte [ebp - 0x7ac], 0
and byte [ebp - 0x7ab], 0
mov byte [ebp - 0x7aa], 0x50
and byte [ebp - 0x7a9], 0
mov byte [ebp - 0x7a8], 0xf3
mov byte [ebp - 0x7a7], pe_nt_image_headers32
mov byte [ebp - 0x7a6], 0xeb
mov byte [ebp - 0x7a5], 0xc3
mov byte [ebp - 0x7a4], 0x9c
mov byte [ebp - 0x7a3], 0x9d
mov byte [ebp - 0x7a2], 0x81
mov byte [ebp - 0x7a1], 0xcb
mov byte [ebp - 0x7a0], 0xc3
mov byte [ebp - 0x79f], 0xc3
mov byte [ebp - 0x79e], 0xaf
push 0xb
lea eax, [ebp - 0x7ac]
push eax
call fcn.1000a00a
pop ecx
push eax
mov eax, dword [ebp - 0x338]
lea eax, [ebp + eax - 0x230]
push eax
call fcn.10009f6b
add esp, 0xc
jmp 0x1000bf6c
cmp dword [ebp - 0x6fc], 4
jne 0x1000be16
and byte [ebp - 0x7bc], 0
and byte [ebp - 0x7bb], 0
mov byte [ebp - 0x7ba], 0x41
and byte [ebp - 0x7b9], 0
mov byte [ebp - 0x7b8], 0xe2
jmp edx
mov byte [ebp - 0x7b7], 0xf1
mov byte [ebp - 0x7b6], 0xf2
mov byte [ebp - 0x7b5], 0xfb
mov byte [ebp - 0x7b4], 0x8c
mov byte [ebp - 0x7b3], 0x8d
mov byte [ebp - 0x7b2], 0x90
mov byte [ebp - 0x7b1], 0xda
fcmovb st(0), st(6)
test dword [eax - 8], edx
invalid
call edx
mov byte [ebp - 0x7af], 0xd2
mov byte [ebp - 0x7ae], 0xbe
push 0xb
lea eax, [ebp - 0x7bc]
push eax
call fcn.1000a00a
pop ecx
push eax
mov eax, dword [ebp - 0x338]
lea eax, [ebp + eax - 0x230]
push eax
call fcn.10009f6b
add esp, 0xc
jmp 0x1000bf6c
cmp dword [ebp - 0x6fc], 5
jne 0x1000bec0
and byte [ebp - 0x7cc], 0
and byte [ebp - 0x7cb], 0
mov byte [ebp - 0x7ca], 0x8a
and byte [ebp - 0x7c9], 0
mov byte [ebp - 0x7c8], 0x29
invalid
jmp [ecx]
mov byte [ebp - 0x7c7], 0x25
mov byte [ebp - 0x7c6], 0x26
mov byte [ebp - 0x7c5], 0x34
mov byte [ebp - 0x7c4], 0x25
mov byte [ebp - 0x7c3], 0x19
mov byte [ebp - 0x7c2], 0x5b
mov byte [ebp - 0x7c1], 0x11
mov byte [ebp - 0x7c0], 0x19
mov byte [ebp - 0x7bf], 0x19
mov byte [ebp - 0x7be], 0x75
call fcn.10009ffa
push esp
dec edx
pop ecx
cld
push 0xb
lea eax, [ebp - 0x7cc]
push eax
call fcn.1000a00a
pop ecx
push eax
mov eax, dword [ebp - 0x338]
lea eax, [ebp + eax - 0x230]
add eax, 0xfffffdd0
push eax
call fcn.10009f6b
add esp, 0xc
jmp 0x1000bf6c
cmp dword [ebp - 0x6fc], 6
jne 0x1000bf67
and byte [ebp - 0x7dc], 0
and byte [ebp - 0x7db], 0
mov byte [ebp - 0x7da], 0xd4
and byte [ebp - 0x7d9], 0
mov byte [ebp - 0x7d8], 0x77
mov byte [ebp - 0x7d7], 0x4e
mov byte [ebp - 0x7d6], 0x59
mov byte [ebp - 0x7d5], 0x59
mov byte [ebp - 0x7d4], 0x44
mov byte [ebp - 0x7d3], 0x59
invalid
invalid