Function at 0x1005bd00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x1005b882
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
push edi
push edi
add esp, 4
or edi, 0x9715
pop edi
push edi
push eax
add esp, 4
sub edi, 0x1081d
add edi, 0xd2b0
pop edi
push ecx
sub ecx, 0x3577
jmp 0x1005b6c0
and ecx, 0x10450
pop ecx
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x74c]
cmp eax, 0xffffffff
jb 0x1005b70f
push eax
sub eax, 0xf9bf
add eax, 0x8a70
pop eax
push eax
push edx
add esp, 4
xor eax, 0x1403
add eax, 0x10bcc
pop eax
push ecx
push ebx
add esp, 4
or ecx, 0xffa6
xor ecx, 0x30f7
pop ecx
jmp 0x1005b93d
mov dword [ebp - 0xc80], 7
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0xa60], ecx
push ebx
call 0x1005b732
add byte [ebp + 0x45], al
dec ebp
dec ebp
xor eax, 0x4c48348
add ebx, 0x16630
or ebx, 0x13bf6
pop ebx
push ecx
push ecx
add esp, 4
call 0x1005b753
add byte [ecx], bh
inc edx
cmp dl, byte [eax + 0x4e]
dec edi
add esp, 4
pop ecx
mov edx, dword [ebp - 0x15bc]
mov dword [ebp - 0xac0], edx
mov dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x15bc]
jne 0x1005b7be
push eax
push esi
add esp, 4
or eax, 0x16200
sub eax, 0xbfae
pop eax
push edx
push ecx
add esp, 4
xor edx, 0xb3d8
or edx, 0x8ecf
pop edx
push ecx
or ecx, 0x448f
and ecx, 0x12219
pop ecx
mov ecx, dword [ebp - 0xc84]
mov dword [ebp - 0x15c4], ecx
jmp 0x1005b8ef
cmp dword [ebp - 0xc80], 0
jle 0x1005b8e3
push edi
call 0x1005b7d9
add byte [esp + esi + 0x47], al
inc ebx
inc eax
inc ebp
add esp, 4
pop edi
push edi
push ebx
add esp, 4
or edi, 0x16b46
add edi, 0x10773
and edi, 0x127dc
jmp 0x1005b7fc
pop edi
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xac0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x1005b87f
push edi
push eax
add esp, 4
or edi, 0x15c60
add edi, 0x14e66
or edi, 0xee82
pop edi
push edi
xor edi, 0x3c1b
or edi, 0xe9ea
and edi, 0x2c86
xor edi, 0x85f
pop edi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x1005b867
mov dword [ebp - 0x15c0], 1
jmp 0x1005b871
mov dword [ebp - 0x15c0], 0xffffffff
mov ecx, dword [ebp - 0x15c0]
mov dword [ebp - 0xc84], ecx
jmp 0x1005b8e3
push ebx
push eax
add esp, 4
sub ebx, 0xa80a
pop ebx
push eax
add eax, 0x3af8
xor eax, 0x402c
pop eax
push ebx
les eax, [ecx + eax*4]
jmp 0x1005b891
add byte [ecx + 0x402cf0], al
add byte [eax + 0x53], bl
push edx
add esp, 4
add ebx, 0x17ce9
xor ebx, 0xec77
or ebx, 0x117be
pop ebx
mov edx, dword [ebp - 0xc80]
sub edx, 1
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0xa60]
cmc
invalid
inc dword [ebx - 0x7a76fe40]
mov al, byte [0x8bfffff5]
lea eax, [eax - 0xb]
invalid
inc dword [ebx - 0x7276fe3f]
inc eax
cmc
invalid
invalid
jmp 0x1005b7be
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15c4], edx
cmp dword [ebp - 0x15c4], 0
jne 0x1005b938
push edx
call 0x1005b909
add byte [eax + eax*2 + 0x40], al
xor eax, 0x48503535
aas
add esp, 4
xor edx, 0x119a6
and edx, 0x403b
call 0x1005b926
add byte [eax + edi], bh
inc edx
dec edi
cmp dword [edi + 0x32], ecx
dec ecx
add esp, 4
pop edx
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x3f8], eax
jmp 0x1005b979
jmp 0x1005b686
push edx
push edi
add esp, 4
and edx, 0x51c5
and edx, 0x5677
call 0x1005b95d
add byte [ebx + ecx*2], bh
aaa
inc esi
dec esi
aaa
inc ebx
inc edi
dec edi
add esp, 4
pop edx
push edx
jmp 0x1005b968
or edx, 0x791b
pop edx
mov dword [ebp - 0x3f8], 0
push edx
or edx, 0x31d3
xor edx, 0x3966
or edx, 0x1ccc
pop edx
push esi
call 0x1005b99b
add byte [ecx], bh
push eax
cmp cl, byte [ecx + 0x4e]
inc eax
inc esp
add esp, 4
sub esi, 0x1254d
xor esi, 0x16b09
pop esi
push ebx
add ebx, 0xee4a
add ebx, 0x8a9
call 0x1005b9c6
add byte [ebx], bh
cmp cl, byte [edi + 0x45]
cmp al, byte [eax + 0x47]
aaa
add esp, 4
pop ebx
push esi
xor esi, 0x6e64
add esi, 0x5c37
jmp 0x1005b9dc
pop esi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15c8], eax
push ecx
push edx
add esp, 4
call 0x1005ba03
add byte [edx], dh
inc edx
dec esp
inc esp
inc ebx
xor al, 0x83
les eax, [ecx + ebx*2]
push edx
sub edx, 0x5538
and edx, 0xc6f0
pop edx
push eax
sub eax, 0xb8a9
jmp 0x1005ba23
pop eax
mov dword [ebp - 0x208c], 0xffffffff
push ebx
push edi
add esp, 4
or ebx, 0x1161b
or ebx, 0xe94f
add ebx, 0x119bc
pop ebx
push ebx
jmp 0x1005ba50
jmp 0x1005ba57
jmp 0x1005ba5f
pop ebx
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x500], ecx
jmp 0x1005ba7d
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push ebx
push edi
add esp, 4
xor ebx, 0x8a67
sub ebx, 0x156e8
call 0x1005ba9c
add byte [esi], bh
dec esp
xor al, 0x3d
xor eax, 0xc4833744
add al, 0xe8
pop es
add byte [eax], al
add byte [eax], al
inc esi
dec ebx
aas
inc eax
dec edx
add esp, 4
pop ebx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x74c]
cmp eax, 0xffffffff
jb 0x1005baf7
push ecx
call 0x1005bad0
add byte [edi], bh
dec edx
inc ebx
aaa
dec edi
inc edx
inc ecx
dec ebx
add esp, 4
and ecx, 0x10ec5
sub ecx, 0xff62
or ecx, 0x13c2e
pop ecx
push edx
cmp al, 1
add byte [ecx + 0x52], bl
push edx
add esp, 4
or edx, 0x958b
pop edx
jmp 0x1005bd25
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xabc], ecx
push eax
push edx
add esp, 4
jmp 0x1005bb18
call 0x1005bb26
add byte [edi + 0x45], al
aas
inc ebp
xor eax, 0x83464b40
les eax, [ecx + eax*4]
loopne 0x1005bae1
inc esi
add esp, 4
and eax, 0xdab5
call 0x1005bb3b
add byte [esi], dh
cmp eax, 0x833b3b42
fiadd dword [eax]
add al, ch
pop es
add byte [eax], al
add byte [eax], al
cmp eax, 0x833b3b42
les eax, [eax + ebx*2]
mov edx, dword [ebp - 0x15c8]
mov dword [ebp - 0xab8], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15c8]
jne 0x1005bba6
push ebx
call 0x1005bb72
add byte [edx + 0x3f], al
cmp al, 0x32
push eax
cmp eax, 0xc4834046
add al, 0xeb
push es
aaa
push eax
cmp eax, 0x81414f40
jecxz 0x1005bb25
inc esp
add dword [eax], eax
xor ebx, 0x1373e
pop ebx
push edx
jmp 0x1005bb94
pop edx
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d0], ecx
jmp 0x1005bcd7
cmp dword [ebp - 0xc88], 0
jle 0x1005bccb
push eax
and eax, 0x1417a
or eax, 0xd034
pop eax
push eax
push edi
add esp, 4
jmp 0x1005bbcc
add eax, 0xb40a
pop eax
push edx
call 0x1005bbe1
add byte [ebx], bh
dec ebp
cmp al, 0x4a
push eax
aas
dec ebx
add esp, 4
pop edx
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xab8]
movzx edx, byte [ecx]
cmp eax, edx
je 0x1005bc67
push ebx
and ebx, 0x5a70
call 0x1005bc10
add byte [edx + 0x40], al
dec ebx
cmp bh, byte [edi]
xor al, 0x4c
add esp, 4
pop ebx
push ebx
push ecx
add esp, 4
jmp 0x1005bc20
sub ebx, 0x95a
add ebx, 0x17e20
pop ebx
mov eax, dword [ebp - 0xabc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xab8]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x1005bc4f
mov dword [ebp - 0x15cc], 1
jmp 0x1005bc59
mov dword [ebp - 0x15cc], 0xffffffff
mov ecx, dword [ebp - 0x15cc]
mov dword [ebp - 0xc8c], ecx
jmp 0x1005bccb
push eax
jmp 0x1005bc6d
jmp 0x1005bc73
add eax, 0x15df3
jmp 0x1005bc7f
pop eax
push edi
call 0x1005bc8f
add byte [edi], dh
dec ecx
cmp byte [edx + 0x49], cl
inc ebx
xor al, 0x47
add esp, 4
xor edi, 0x13515
pop edi
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xabc]
add eax, 1
mov dword [ebp - 0xabc], eax
mov ecx, dword [ebp - 0xab8]
add ecx, 1
mov dword [ebp - 0xab8], ecx
jmp 0x1005bba6
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d0], edx
cmp dword [ebp - 0x15d0], 0
jne 0x1005bd20
push eax
push edi
add esp, 4
xor eax, 0x5ac2
add eax, 0x1087e
call 0x1005bd00
add byte [ecx + 0x34], cl
inc esp
dec edx
dec ebp
dec edi
aas
xor al, 0x4d
add esp, 4
and eax, 0x1116a
pop eax
push edx
and edx, 0x154e8
pop edx
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab4], eax
jmp 0x1005bd61
jmp 0x1005ba6e
push esi
push ecx
add esp, 4
xor esi, 0xaa80
xor esi, 0x15ef6
pop esi
push edi
push eax
add esp, 4
xor edi, 0x122bd
and edi, 0x5b59
xor edi, 0x145e4
pop edi
push eax
sub eax, 0x136ac
pop eax
mov dword [ebp - 0xab4], 0
push edi
push edx
add esp, 4
xor edi, 0x9def
sub edi, 0xe61
pop edi
push eax
add eax, 0x16efa
add eax, 0x11996
xor eax, 0x10c65
pop eax
push edi