Function at 0x10031db0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0x10
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.1001a2fc
add esp, 0xc
push edx
pop edx
or esp, 0
jle 0x10031dd0
jl 0x10031de0
pushf
xor esp, 0
popf
jg 0x10031ddb
jnp 0x10031ddd
jge 0x10031de0
mov esp, 0x75f345c6
mov byte [ebp - 0xd], 0x75
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0x11], 0x54
mov byte [ebp - 0x14], 0x48
mov byte [ebp - 0x10], 0x75
mov byte [ebp - 0xe], 0x73
mov byte [ebp - 9], 0x6f
mov byte [ebp - 8], 0x67
mov byte [ebp - 0xf], 0x62
mov byte [ebp - 6], 0x58
mov byte [ebp - 0x12], 0x75
mov byte [ebp - 0xc], 0x76
mov byte [ebp - 5], 0
mov byte [ebp - 0xb], 0x71
mov byte [ebp - 0xa], 0x4a
mov byte [ebp - 7], 0x70
xor esi, ecx
xor esi, ecx
cld
jne 0x10031e27
xchg ebx, ebx
je 0x10031e40
pushf
jns 0x10031e2f
cmp esi, edi
rol edi, 0xc
rol edi, 0x14
popf
js 0x10031e3b
lea ecx, [ecx]
jne 0x10031e40
add eax, 0x80ec4d8a
jmp 0xfc50a64a
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x12]
sub cl, 1
mov byte [ebp - 0x12], cl
mov dl, byte [ebp - 8]
sub dl, 1
mov byte [ebp - 8], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 9]
sub al, 1
mov byte [ebp - 9], al
mov cl, byte [ebp - 7]
sub cl, 1
mov byte [ebp - 7], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
jb 0x10031ec4
jle 0x10031ed8
pushf
shr ebx, 0
jne 0x10031ecd
popf
mov ecx, ecx
jnp 0x10031ed3
mov eax, eax
jg 0x10031ed8
ljmp 0x8900:0xd66e8
call fcn.10032c43
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x10031eeb
jmp 0x10031fab
add ecx, 0x14e9
sub ecx, 0x14e9
xor esi, dword [esp]
xor esi, dword [esp]
jp 0x10031eff
jg 0x10031f01
jns 0x10031f09
jg 0x10031f05
js 0x10031f09
xor eax, 0xec4d8d4a
lea ecx, [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.1001af90
mov dword [ebp - 0x18], eax
push 0x10
push 0
lea eax, [ebp - 0x14]
push eax
call fcn.1001a2fc
add esp, 0xc
rol esp, 0
jo 0x10031f2e
call 0x10031f33
add esp, 4
cmp edx, 0x1fdb
jl 0x10031f4b
xchg esi, ebx
xchg esi, ebx
jl 0x10031f44
lea esp, [esp]
jge 0x10031f4b
mov ecx, 0xe87d832b
add byte [ebp + 2], dh
cmp dword [ebp - 0x18], 0
jne 0x10031f53
jmp 0x10031fab
xor esi, dword [esp + 0xc]
xor esi, dword [esp + 0xc]
jb 0x10031f5d
ja 0x10031f7d
pushf
jno 0x10031f63
jl 0x10031f65
or eax, eax
xor eax, 0
popf
lea eax, [eax + 0xaf]
lea eax, [eax - 0xaf]
jg 0x10031f7a
jbe 0x10031f7d
mov esp, 0x51e84d8b
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.10034613
add esp, 4
and eax, 0xffffffff
xchg edi, edi
je 0x10031fa4
pushf
je 0x10031f94
lea esp, [esp]
sub esp, 0
xor esp, 0
popf
jl 0x10031fa1
jne 0x10031fa4
jmp 0x620b7533
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4