Function at 0x1005b933
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jae 0x1005b931
jmp 0x1005b92c
call fcn.1005b933
jae 0x1005b92c
add esp, 4
jmp 0x1005b938
dec dword [esp]
jno 0x1005b93d
jns 0x1005b928
jp 0x1005b941
add esp, 4
popf
jmp 0x1005b948
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1005b961
jne 0x1005b961
call 0x1fc5ecb5
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x18], 0x6d
mov byte [ebp - 0x17], 0x69
mov byte [ebp - 0x16], 0x6c
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0x14], 0x73
mov byte [ebp - 0x13], 0
mov byte [ebp - 0x4c], 0x6d
mov byte [ebp - 0x4b], 0x69
mov byte [ebp - 0x4a], 0x6c
mov byte [ebp - 0x49], 0x65
mov byte [ebp - 0x48], 0x73
mov byte [ebp - 0x47], 0x2f
mov byte [ebp - 0x46], 0x2f
mov byte [ebp - 0x45], 0x6d
mov byte [ebp - 0x44], 0x73
mov byte [ebp - 0x43], 0x73
mov byte [ebp - 0x42], 0x61
mov byte [ebp - 0x41], 0x33
mov byte [ebp - 0x40], 0x64
mov byte [ebp - 0x3f], 0x2e
mov byte [ebp - 0x3e], 0x6d
mov byte [ebp - 0x3d], 0x33
mov byte [ebp - 0x3c], 0x64
mov byte [ebp - 0x3b], 0
mov byte [ebp - 0xc4], 0x6d
mov byte [ebp - 0xc3], 0x69
mov byte [ebp - 0xc2], 0x6c
mov byte [ebp - 0xc1], 0x65
mov byte [ebp - 0xc0], 0x73
mov byte [ebp - 0xbf], 0x2f
mov byte [ebp - 0xbe], 0x2f
mov byte [ebp - 0xbd], 0x6d
mov byte [ebp - 0xbc], 0x73
mov byte [ebp - 0xbb], 0x73
mov byte [ebp - 0xba], 0x64
mov byte [ebp - 0xb9], 0x73
mov byte [ebp - 0xb8], 0x33
mov byte [ebp - 0xb7], 0x64
mov byte [ebp - 0xb6], 0x2e
mov byte [ebp - 0xb5], 0x6d
mov byte [ebp - 0xb4], 0x33
mov byte [ebp - 0xb3], 0x64
mov byte [ebp - 0xb2], 0
mov byte [ebp - 0x74], 0x6d
mov byte [ebp - 0x73], 0x69
mov byte [ebp - 0x72], 0x6c
mov byte [ebp - 0x71], 0x65
mov byte [ebp - 0x70], 0x73
mov byte [ebp - 0x6f], 0x2f
mov byte [ebp - 0x6e], 0x2f
mov byte [ebp - 0x6d], 0x6d
mov byte [ebp - 0x6c], 0x73
mov byte [ebp - 0x6b], 0x73
mov byte [ebp - 0x6a], 0x64
mov byte [ebp - 0x69], pe_nt_image_headers32
mov byte [ebp - 0x68], 0x37
mov byte [ebp - 0x67], 0x2e
mov byte [ebp - 0x66], 0x6d
mov byte [ebp - 0x65], 0x33
mov byte [ebp - 0x64], 0x64
mov byte [ebp - 0x63], 0
mov byte [ebp - 0x88], 0x6d
mov byte [ebp - 0x87], 0x69
mov byte [ebp - 0x86], 0x6c
mov byte [ebp - 0x85], 0x65
mov byte [ebp - 0x84], 0x73
mov byte [ebp - 0x83], 0x2f
mov byte [ebp - 0x82], 0x2f
mov byte [ebp - 0x81], 0x6d
mov byte [ebp - 0x80], 0x73
mov byte [ebp - 0x7f], 0x73
mov byte [ebp - 0x7e], 0x65
mov byte [ebp - 0x7d], 0x61
mov byte [ebp - 0x7c], pe_nt_image_headers32
mov byte [ebp - 0x7b], 0x2e
mov byte [ebp - 0x7a], 0x6d
mov byte [ebp - 0x79], 0x33
mov byte [ebp - 0x78], 0x64
mov byte [ebp - 0x77], 0
mov byte [ebp - 0xb0], 0x6d
mov byte [ebp - 0xaf], 0x69
mov byte [ebp - 0xae], 0x6c
mov byte [ebp - 0xad], 0x65
mov byte [ebp - 0xac], 0x73
mov byte [ebp - 0xab], 0x2f
mov byte [ebp - 0xaa], 0x2f
mov byte [ebp - 0xa9], 0x6d
mov byte [ebp - 0xa8], 0x73
mov byte [ebp - 0xa7], 0x73
mov byte [ebp - 0xa6], 0x72
mov byte [ebp - 0xa5], 0x73
mov byte [ebp - 0xa4], pe_nt_image_headers32
mov byte [ebp - 0xa3], 0x2e
mov byte [ebp - 0xa2], 0x6d
mov byte [ebp - 0xa1], 0x33
mov byte [ebp - 0xa0], 0x64
mov byte [ebp - 0x9f], 0
mov byte [ebp - 0xd8], 0x6d
mov byte [ebp - 0xd7], 0x69
mov byte [ebp - 0xd6], 0x6c
mov byte [ebp - 0xd5], 0x65
mov byte [ebp - 0xd4], 0x73
mov byte [ebp - 0xd3], 0x2f
mov byte [ebp - 0xd2], 0x2f
mov byte [ebp - 0xd1], 0x6d
mov byte [ebp - 0xd0], 0x73
mov byte [ebp - 0xcf], 0x73
mov byte [ebp - 0xce], 0x73
mov byte [ebp - 0xcd], 0x6f
mov byte [ebp - 0xcc], 0x66
mov byte [ebp - 0xcb], 0x74
mov byte [ebp - 0xca], 0x2e
mov byte [ebp - 0xc9], 0x6d
mov byte [ebp - 0xc8], 0x33
mov byte [ebp - 0xc7], 0x64
mov byte [ebp - 0xc6], 0
mov byte [ebp - 0x9c], 0x6d
mov byte [ebp - 0x9b], 0x69
mov byte [ebp - 0x9a], 0x6c
mov byte [ebp - 0x99], 0x65
mov byte [ebp - 0x98], 0x73
mov byte [ebp - 0x97], 0x2f
mov byte [ebp - 0x96], 0x2f
mov byte [ebp - 0x95], 0x6d
mov byte [ebp - 0x94], 0x73
mov byte [ebp - 0x93], 0x73
mov byte [ebp - 0x92], 0x6d
mov byte [ebp - 0x91], 0x70
mov byte [ebp - 0x90], 0x33
mov byte [ebp - 0x8f], 0x2e
mov byte [ebp - 0x8e], 0x61
mov byte [ebp - 0x8d], 0x73
mov byte [ebp - 0x8c], 0x69
mov byte [ebp - 0x8b], 0
mov byte [ebp - 0xec], 0x6d
mov byte [ebp - 0xeb], 0x69
mov byte [ebp - 0xea], 0x6c
mov byte [ebp - 0xe9], 0x65
mov byte [ebp - 0xe8], 0x73
mov byte [ebp - 0xe7], 0x2f
mov byte [ebp - 0xe6], 0x2f
mov byte [ebp - 0xe5], 0x6d
mov byte [ebp - 0xe4], 0x73
mov byte [ebp - 0xe3], 0x73
mov byte [ebp - 0xe2], 0x76
mov byte [ebp - 0xe1], 0x6f
mov byte [ebp - 0xe0], 0x69
mov byte [ebp - 0xdf], 0x63
mov byte [ebp - 0xde], 0x65
mov byte [ebp - 0xdd], 0x2e
mov byte [ebp - 0xdc], 0x61
mov byte [ebp - 0xdb], 0x73
mov byte [ebp - 0xda], 0x69
mov byte [ebp - 0xd9], 0
mov byte [ebp - 0x60], 0x6d
mov byte [ebp - 0x5f], 0x69
mov byte [ebp - 0x5e], 0x6c
mov byte [ebp - 0x5d], 0x65
mov byte [ebp - 0x5c], 0x73
mov byte [ebp - 0x5b], 0x2f
mov byte [ebp - 0x5a], 0x2f
mov byte [ebp - 0x59], 0x6d
mov byte [ebp - 0x58], 0x73
mov byte [ebp - 0x57], 0x73
mov byte [ebp - 0x56], 0x64
mov byte [ebp - 0x55], 0x73
mov byte [ebp - 0x54], 0x70
mov byte [ebp - 0x53], 0x2e
mov byte [ebp - 0x52], 0x66
mov byte [ebp - 0x51], 0x6c
mov byte [ebp - 0x50], 0x74
mov byte [ebp - 0x4f], 0
mov byte [ebp - 0x38], 0x6d
mov byte [ebp - 0x37], 0x69
mov byte [ebp - 0x36], 0x6c
mov byte [ebp - 0x35], 0x65
mov byte [ebp - 0x34], 0x73
mov byte [ebp - 0x33], 0x2f
mov byte [ebp - 0x32], 0x2f
mov byte [ebp - 0x31], 0x6d
mov byte [ebp - 0x30], 0x73
mov byte [ebp - 0x2f], 0x73
mov byte [ebp - 0x2e], 0x33
mov byte [ebp - 0x2d], 0x32
mov byte [ebp - 0x2c], 0x2e
mov byte [ebp - 0x2b], 0x64
mov byte [ebp - 0x2a], 0x6c
mov byte [ebp - 0x29], 0x6c
mov byte [ebp - 0x28], 0
mov byte [ebp - 0x24], 0x6d
mov byte [ebp - 0x23], 0x73
mov byte [ebp - 0x22], 0x73
mov byte [ebp - 0x21], 0x33
mov byte [ebp - 0x20], 0x32
mov byte [ebp - 0x1f], 0x2e
mov byte [ebp - 0x1e], 0x64
mov byte [ebp - 0x1d], 0x6c
mov byte [ebp - 0x1c], 0x6c
mov byte [ebp - 0x1b], 0
mov byte [ebp - 0x10], 0x64
mov byte [ebp - 0xf], 0x65
mov byte [ebp - 0xe], 0x76
mov byte [ebp - 0xd], 0x69
mov byte [ebp - 0xc], 0x6c
mov byte [ebp - 0xb], 0x2e
mov byte [ebp - 0xa], 0x64
mov byte [ebp - 9], 0x6c
mov byte [ebp - 8], 0x6c
mov byte [ebp - 7], 0
jl 0x1005bded
jmp 0x1005bdef
je 0x1005bdea
xor eax, eax
test eax, eax
je 0x1005bdf8
jne 0x1005bdf7
call 0x9309ae7f
rol byte [ebx + eax*4], 0xf0
add eax, 0xbe0273f8
invalid
xor eax, 3
add eax, 4
xor eax, 5
clc
jae 0x1005be06
mov esi, 0x750374c6
add esi, eax
je 0x1005be0b
jne 0x1005be0b
invalid
pushf
push 0xa
jae 0x1005be18
jmp 0x1005be13
call 0x1005be1a
jae 0x1005be13
add esp, 4
jmp 0x1005be1f
dec dword [esp]
jno 0x1005be24
jns 0x1005be0f
jp 0x1005be28
add esp, 4
popf
jmp 0x1005be2f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1005be48
jne 0x1005be48
call 0x1fc5f19c
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov ecx, dword [0x10103368]
call fcn.10008d00
cmp eax, 0x76f
jne 0x1005bf9c
push 0x6c5812e3
lea eax, [ebp - 0x38]
push eax
mov ecx, dword [0x10103540]
call fcn.10059040
push 0x6c0abc4c
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, dword [0x10103540]
call fcn.10059040
push 0xa134de04
lea edx, [ebp - 0xc4]
push edx
mov ecx, dword [0x10103540]
call fcn.10059040
push 0xc88f11bb
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [0x10103540]
call fcn.10059040
push 0xe173609
lea ecx, [ebp - 0x74]
push ecx
mov ecx, dword [0x10103540]
call fcn.10059040
push 0xbe7c43f7
lea edx, [ebp - 0x88]
push edx
mov ecx, dword [0x10103540]
call fcn.10059040
push 0x48b4e4d5
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [0x10103540]
call fcn.10059040
push 0x20d6c7b7
lea ecx, [ebp - 0xb0]
push ecx
mov ecx, dword [0x10103540]
call fcn.10059040
push 0xff5f14f8
lea edx, [ebp - 0xd8]
push edx
mov ecx, dword [0x10103540]
call fcn.10059040
push 0x53ebe0e8
lea eax, [ebp - 0xec]
push eax
mov ecx, dword [0x10103540]
call fcn.10059040
push 0x6c5812e3
lea ecx, [ebp - 0x24]
push ecx
mov ecx, dword [0x10103540]
call fcn.10059040
lea edx, [ebp - 0x10]
push edx
mov ecx, dword [0x10103540]
call fcn.10058ff0
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x90f088b8
je 0x1005bf9c
cmp dword [ebp - 0xf0], 0x68f0df33
je 0x1005bf9c
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x10103540]
call fcn.10059040
nop
pushf
push 0xa
jae 0x1005bfa9
jmp 0x1005bfa4
call 0x1005bfab
jae 0x1005bfa4
add esp, 4
jmp 0x1005bfb0
dec dword [esp]
jno 0x1005bfb5
jns 0x1005bfa0
jp 0x1005bfb9
add esp, 4
popf
jmp 0x1005bfc0
clc
jae 0x1005bfc5
mov al, byte [0x815250dc]
nop
add byte [eax], al
add byte [edx - 0x7f], dl
ljmp 0x358
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1005bfde
jne 0x1005bfde
fdivr qword [ebx + eax - 0x15]
add ebx, esp
jl 0x1005bfe3
jmp 0x1005bfe5
je 0x1005bfe0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1005bfff
jne 0x1005bffe
call 0x9309b086
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1005c00d
jne 0x1005c00d
call 0x4545cd9c
adc byte [eax], dl
mov ecx, dword [0x10103540]
call fcn.10055350
jl 0x1005c01d
jmp 0x1005c01f
je 0x1005c01a
xor eax, eax
test eax, eax
je 0x1005c028
jne 0x1005c027
call 0x9309b0af
rol byte [ebx + eax*4], 0xf0
add eax, 0x960273f8
xor eax, 3
add eax, 4
xor eax, 5
clc
jae 0x1005c036
xchg esi, eax
invalid
je 0x1005c03b
jne 0x1005c03b
invalid
pushf
push 0xa
jae 0x1005c048
jmp 0x1005c043
call 0x1005c04a
jae 0x1005c043
add esp, 4
jmp 0x1005c04f
dec dword [esp]
jno 0x1005c054
jns 0x1005c03f
jp 0x1005c058
add esp, 4
popf
jmp 0x1005c05f
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1005c078
jne 0x1005c078
call 0x1fc5f3cc
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf4], esp
push 0x100d3f4e
call fcn.10006700
mov ecx, dword [0x10103540]
call fcn.10053c90
nop
jl 0x1005c0af
jmp 0x1005c0b1
je 0x1005c0ac
xor eax, eax
test eax, eax
je 0x1005c0ba
jne 0x1005c0b9
call 0x9309b141
rol byte [ebx + eax*4], 0xf0
add eax, 0x910273f8
xor eax, 3
add eax, 4
xor eax, 5
clc
jae 0x1005c0c8
xchg ecx, eax
out 0x74, eax
add esi, dword [ebp + 1]
je 0x1005c0cd
jne 0x1005c0cd
out 0x66, eax
pushfd
pushf
push 0xa
jae 0x1005c0da
jmp 0x1005c0d5
call 0x1005c0dc
jae 0x1005c0d5
add esp, 4
jmp 0x1005c0e1
dec dword [esp]
jno 0x1005c0e6
jns 0x1005c0d1
jp 0x1005c0ea
add esp, 4
popf
jmp 0x1005c0f1
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1005c10a
jne 0x1005c10a
call 0x1fc5f45e
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xf8], esp
lea edx, [ebp - 0x18]
push edx
call fcn.10006700
mov ecx, dword [0x10103540]
call fcn.10053c90
nop
pushf
push 0xa
jae 0x1005c148
jmp 0x1005c143
call 0x1005c14a
jae 0x1005c143
add esp, 4
jmp 0x1005c14f
dec dword [esp]
jno 0x1005c154
jns 0x1005c13f
jp 0x1005c158
add esp, 4
popf
jmp 0x1005c15f
clc
jae 0x1005c164
xchg dword [edx - 0xd7eadb0], ebx
nop
add byte [eax], al
add byte [edx - 0x7f], dl
ljmp 0x358
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1005c17d
jne 0x1005c17d
lcall 0x749a, 0x3eb037c
sti
jl 0x1005c182
jmp 0x1005c184
je 0x1005c17f
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1005c19e
jne 0x1005c19d
call 0x9309b225
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1005c1ac
jne 0x1005c1ac
call 0x4545cf3b
adc byte [eax], dl
mov ecx, dword [0x10103540]
call fcn.100556e0
jl 0x1005c1bc
jmp 0x1005c1be
je 0x1005c1b9
xor eax, eax
test eax, eax
je 0x1005c1c7
jne 0x1005c1c6
call 0x9309b24e
rol byte [ebx + eax*4], 0xf0
add eax, 0x820273f8
bnd je 0x1005c1da
xor eax, 3
add eax, 4
xor eax, 5
clc
jae 0x1005c1d5
xor dl, 0x74
add esi, dword [ebp + 1]
je 0x1005c1da
jne 0x1005c1da
pushf
pushf
push 0xa
jae 0x1005c1e7
jmp 0x1005c1e2
call 0x1005c1e9
jae 0x1005c1e2
add esp, 4
jmp 0x1005c1ee
dec dword [esp]
jno 0x1005c1f3
jns 0x1005c1de
jp 0x1005c1f7
add esp, 4
popf
jmp 0x1005c1fe
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1005c217
nop
add byte [eax], al
add byte [edx - 0x7f], dl
ljmp 0x358
jne 0x1005c217
call 0x1fc5f56b
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov ecx, dword [0x10103540]
call fcn.10055df0
pushf
push 0xa
jae 0x1005c240
jmp 0x1005c23b
call 0x1005c242
jae 0x1005c23b
add esp, 4
jmp 0x1005c247
dec dword [esp]
jno 0x1005c24c
jns 0x1005c237
jp 0x1005c250
add esp, 4
popf
jmp 0x1005c257
clc
jae 0x1005c25c
js 0x1005c201
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1005c275
jne 0x1005c275
movsd dword es:[edi], dword [esi]
jl 0x1005c27a
jmp 0x1005c27c
je 0x1005c277
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1005c296
jne 0x1005c295
call 0x9309b31d
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1005c2a4
jne 0x1005c2a4
call 0x4545d033
adc byte [eax], dl
mov ecx, dword [0x10103540]
call fcn.100583c0
jl 0x1005c2b4
jmp 0x1005c2b6
je 0x1005c2b1
xor eax, eax
test eax, eax
je 0x1005c2bf
jne 0x1005c2be
call 0x9309b346
rol byte [ebx + eax*4], 0xf0
add eax, 0x6e0273f8
xor eax, 3
add eax, 4
xor eax, 5
clc
jae 0x1005c2cd
outsb dx, byte [esi]
pop eax
je 0x1005c2d2
jne 0x1005c2d2
pop eax
pushf
push 0xa
jae 0x1005c2df
jmp 0x1005c2da
call 0x1005c2e1
jae 0x1005c2da
add esp, 4
jmp 0x1005c2e6
dec dword [esp]
jno 0x1005c2eb
jns 0x1005c2d6
jp 0x1005c2ef
add esp, 4
popf
jmp 0x1005c2f6
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1005c30f
jne 0x1005c30f
call 0x1fc5f663
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10005677
mov esp, ebp
pop ebp
ret 4