Function at 0x10043c75
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x10043b0f
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10043ec7
jge 0x10043b1b
jle 0x10043b2e
pushf
call 0x10043b24
add esp, 4
popf
jnp 0x10043b2b
jg 0x10043b2e
xor eax, 0x89e84d8b
dec ebp
in al, 0x83
jge 0x10043b1b
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 3
ja case.default.0x10043b41
add ecx, dword [edi]
xchg eax, edx
add al, byte [eax]
add byte [ebx + 0x24ffe455], cl
jmp dword [edx*4 + 0x10043ee8]
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.1002fb2f
add esp, 0xc
invalid
inc ebp
invalid
mov edx, dword [ebp - 0x1c]
jmp dword [edx*4 + 0x10043ee8]
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.1002fb2f
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0
and esp, 0xffffffff
cmc
cmp esi, 0x19c9
test ecx, 0x7ad2
jp 0x10043b91
jne 0x10043b8c
xchg esp, esp
jnp 0x10043b91
mov esp, 0x80f04d8a
jmp 0x51c39b
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xa]
sub cl, 1
mov byte [ebp - 0xa], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
jmp case.default.0x10043b41
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.1002fb2f
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0
or ebx, 0
not eax
not eax
test esp, 0x4312
lea edi, [edi + 0x67e8]
lea edi, [edi - 0x67e8]
jle 0x10043c34
pushf
shl esp, 0
jg 0x10043c25
jo 0x10043c27
rol ebx, 3
rol ebx, 0x1d
popf
xchg ebx, eax
xchg ebx, eax
jg 0x10043c34
add eax, 0x2cf0458a
add dword [eax + 0x4d8af045], ecx
cmc
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
jmp case.default.0x10043b41
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.1002fb2f
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x31
mov byte [ebp - 5], 0
jle 0x10043cb7
jg 0x10043cb9
rol esi, 0xe
ror esi, 0xe
jl 0x10043cd5
lea eax, [eax + 0x13fd]
lea eax, [eax - 0x13fd]
jns 0x10043ccf
jle 0x10043cd1
nop
jge 0x10043cd5
mov ecx, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jmp case.default.0x10043b41
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.1002fb2f
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x33
mov byte [ebp - 5], 0
rol eax, 0x1a
rol eax, 6
ror edi, 0x1b
rol edi, 0x1b
shl esp, 0
test esp, 0xfca
jnp 0x10043daf
pushf
xor edi, dword [esp]
xor edi, dword [esp]
xor eax, edi
xor eax, edi
popf
jp 0x10043da0
lea eax, [eax + 0x57e0]
lea eax, [eax - 0x57e0]
jp 0x10043daf
mov esi, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
neg edi
neg edi
xchg ecx, esi
xchg ecx, esi
je 0x10043e18
je 0x10043e38
pushf
shl edi, 0
jge 0x10043e21
cmp eax, edx
popf
js 0x10043e27
lea edi, [edi + 0x8e8]
lea edi, [edi - 0x8e8]
xchg esi, esi
jne 0x10043e38
mov esp, 0x206a006a
push 0
push 0x20
push 3
push 0
push 1
push 0x80000000
lea ecx, [ebp - 0x10]
push ecx
call fcn.1005253f
mov dword [ebp - 4], eax
jge 0x10043e55
jle 0x10043e5f
xchg esp, esp
nop
ja 0x10043e5c
jg 0x10043e5f
add eax, 0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.1002fb2f
add esp, 0xc
test esp, 0x211a
jbe 0x10043e77
jbe 0x10043e85
jno 0x10043e7b
js 0x10043e7d
jbe 0x10043e7f
jne 0x10043e81
ja 0x10043e85
add eax, 0xfc7d8305
push dword [edi + esi - 0x3f]
retf 0xc102
cmp dword [ebp - 4], 0xffffffff
je 0x10043ec2
ror edx, 2
rol edx, 2
jge 0x10043e9f
pushf
nop
or esi, esi
popf
jmp 0x10043e9c
jl 0x10043e9f
ljmp 0x7de8:0x50fc458b
mov eax, dword [ebp - 4]
push eax
call fcn.10026f25
sub edx, 0
jge 0x10043eb9
jmp 0x10043eaf
xchg ebx, edi
xchg ebx, edi
jns 0x10043eb5
jl 0x10043eb9
mov esi, 0xec45c78d
adc al, byte [eax]
add byte [eax], al
mov dword [ebp - 0x14], 0x12
jmp 0x10043ec7
jmp 0x10043b06
mov eax, eax
jnp 0x10043ede
lea edi, [edi]
lea eax, [eax + 0x1c2c]
lea eax, [eax - 0x1c2c]
jp 0x10043ede
mov esi, 0x458bcc8f
in al, dx
mov eax, dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret