Function at 0x1059731
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
cmp dword [0x103ca6c], 1
je 0x105976c
lea ebx, [ebx + 0x1b12]
lea ebx, [ebx - 0x1b12]
jae 0x1059762
pushf
rol esi, 0x19
rol esi, 7
popf
xchg ecx, ecx
js 0x105975f
jb 0x1059762
mov edi, 0x3ca6ca1
add dword [ecx + 0x1aebfc45], ecx
mov eax, dword [0x103ca6c]
mov dword [ebp - 4], eax
jmp 0x1059786
sub ecx, 0
ror edx, 0
ja 0x105977f
jg 0x1059776
jns 0x1059778
jp 0x105977a
jno 0x105977c
jbe 0x105977f
mov ecx, 0x2be9c033
add al, byte [eax]
add byte [ebp - 0x7e1b7900], cl
sbb esp, dword [ebx]
add byte [eax], al
xor eax, eax
jmp 0x10599b1
lea eax, [eax]
xchg esp, esp
xor edx, 0x231b
xor edx, 0x231b
rol edx, 0x1a
ror edx, 0x1a
jae 0x10597b3
pushf
mov edi, edi
test dword [esp], edi
clc
xor edi, eax
xor edi, eax
popf
lea ecx, [ecx]
jo 0x10597b0
jb 0x10597b3
mov esi, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.01062a33
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.0104731c
add esp, 0xc
jg 0x10597d1
test dword [esp + 4], edi
shr eax, 0
ja 0x10597df
jnp 0x10597dc
jbe 0x10597df
mov ebx, 0x4de845c6
mov byte [ebp - 0x18], 0x4d
mov byte [ebp - 0x13], 0x6a
mov byte [ebp - 0xe], 0x7a
mov byte [ebp - 0x17], 0x70
mov byte [ebp - 0x12], 0x63
mov byte [ebp - 0x16], 0x62
mov byte [ebp - 0x11], 0x73
mov byte [ebp - 0x15], 0x65
mov byte [ebp - 0x10], 0x62
mov byte [ebp - 0x14], 0x4d
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
xchg edi, edx
xchg edi, edx
and edi, 0xffffffff
jg 0x105983e
pushf
jae 0x1059820
xor ebx, 0x2656
xor ebx, 0x2656
add eax, dword [esp]
sub eax, dword [esp]
shl edx, 0
popf
mov edi, edi
jp 0x105983b
jle 0x105983e
mov ebx, 0x2ce8458a
add dword [eax + 0x4d8ae845], ecx
in eax, dx
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
xchg esi, esi
cld
cmp edx, dword [esp]
push esi
pop esi
jno 0x10598c0
pushf
add esp, 0
popf
jbe 0x10598b9
jnp 0x10598bb
xchg esp, esp
jo 0x10598c0
call 0xcc0dd647
add eax, dword [ecx]
add byte [ebp + esi + 0x33], dh
sti
cmp dword [0x103cb08], 0
je 0x10598fe
xor edi, ebx
xor edi, ebx
jp 0x10598cf
add esp, 0
xchg ecx, eax
xchg ecx, eax
jbe 0x10598eb
pushf
jge 0x10598da
push ecx
pop ecx
stc
xor ebx, eax
xor ebx, eax
popf
lea esp, [esp]
jae 0x10598e8
ja 0x10598eb
jmp 0x51edde7c
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x103cb08]
push ecx
call fcn.0105c3f6
mov dword [ebp - 8], eax
xchg esi, esi
rol eax, 0
ja 0x1059918
lea edx, [edx + 0xadb]
lea edx, [edx - 0xadb]
jns 0x1059913
jo 0x1059915
jbe 0x1059918
mov edx, 0x6a0d6a
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.0104731c
add esp, 0xc
cmc
call 0x105992e
add esp, 4
test dword [esp + 0x10], edi
xor esi, dword [esp + 0x10]
xor esi, dword [esp + 0x10]
jns 0x1059948
jo 0x1059941
jge 0x1059943
xchg ebx, ebx
js 0x1059948
ljmp 0x4674:0xf87d83
cmp dword [ebp - 8], 0
je 0x1059994
add eax, dword [esp]
sub eax, dword [esp]
lea esi, [esi + 0x110d]
lea esi, [esi - 0x110d]
je 0x1059988
pushf
rol esp, 0
xor edx, ecx
xor edx, ecx
cmp edi, dword [esp + 0x10]
xchg esi, ecx
xchg esi, ecx
popf
lea edi, [edi + 0x78fb]
lea edi, [edi - 0x78fb]
jle 0x1059983
jbe 0x1059985
jne 0x1059988
call 0x51fddf17
mov eax, dword [ebp - 8]
push eax
call fcn.01062a33
add esp, 4
lea edx, [edx + 0x5f4d]
lea edx, [edx - 0x5f4d]
ror esi, 0
ja 0x10599aa
jge 0x10599a7
jbe 0x10599aa
sub eax, 0x51084d8b
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4