Function at 0x1005253f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
sub esp, 0
rol ebx, 0
je 0x1005255e
pushf
xchg esp, esp
popf
mov esi, esi
nop
xchg edi, edi
jne 0x1005255e
add eax, 0x1d2c3d83
add dl, byte [eax]
add dword [edi], ecx
test dword [ecx + 1], eax
add byte [eax], al
cmp dword [0x10021d2c], 1
jne 0x100526ac
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.1002fb2f
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
call 0x100525b0
lea esp, [esp + 4]
test esp, 0xf5d
xchg edx, ecx
xchg edx, ecx
jg 0x100525c0
jns 0x100525ce
pushf
jg 0x100525c6
stc
popf
jo 0x100525cb
js 0x100525ce
add eax, 0x80f04d8a
jmp 0x52add8
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
jp 0x10052630
xor eax, edi
xor eax, edi
ror ebx, 9
rol ebx, 9
neg esi
neg esi
je 0x1005264e
pushf
add esi, 0
jne 0x10052647
popf
xchg esi, esi
jne 0x1005264e
mov edx, 0x19183d83
add dl, byte [eax]
add byte [ebp + 8], dh
cmp dword [0x10021918], 0
jne 0x1005265f
or eax, 0xffffffff
jmp 0x100528c3
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x10021918]
push ecx
call fcn.1004edc3
mov dword [ebp - 4], eax
test dword [esp], ebx
cmp ecx, ebx
test dword [esp + 0xc], edx
jb 0x10052682
jo 0x1005267f
jae 0x10052682
call 0x106f32f0
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.1002fb2f
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x100526a2
mov eax, dword [ebp - 4]
mov dword [0x10021d2c], eax
jmp 0x100526aa
or eax, 0xffffffff
jmp 0x100528c3
jmp 0x100526b5
mov ecx, dword [0x10021d2c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
jg 0x100526bd
jbe 0x100526bf
sub esp, 0
jne 0x100526df
lea edi, [edi + 0x5b65]
lea edi, [edi - 0x5b65]
lea edx, [edx + 0x7fde]
lea edx, [edx - 0x7fde]
je 0x100526df
ljmp 0xcae8:0x50ec458b
mov eax, dword [ebp - 0x14]
push eax
call fcn.100389b2
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.1002fb2f
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
lea esi, [esi + 0x5116]
sub esi, 0x5116
clc
jb 0x1005273a
call 0x1005273f
add esp, 4
je 0x10052749
jg 0x10052746
jne 0x10052749
lcall 0x1ea, 0x80f0558a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
sub esp, 0
jge 0x100527be
je 0x100527af
lea ebx, [ebx + 0xe51]
lea ebx, [ebx - 0xe51]
jl 0x100527be
mov ecx, 0x19183d83
add dl, byte [eax]
add byte [esi + edi + 0x3b], dh
dec esp
and al, 0xc
cmp dword [0x10021918], 0
je 0x10052805
cmp ecx, dword [esp + 0xc]
shl esp, 0
xor eax, dword [esp + 4]
xor eax, dword [esp + 4]
test dword [esp], ebx
jle 0x100527f2
pushf
test edx, 0x24a8
call 0x100527e8
add esp, 4
popf
jb 0x100527ef
jg 0x100527f2
add eax, 0x51f04d8d
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x10021918]
push edx
call fcn.1004edc3
mov dword [ebp - 4], eax
xor ebx, 0
neg ecx
neg ecx
jae 0x1005280e
jne 0x10052819
jnp 0x10052812
xchg edx, eax
xchg edx, eax
jne 0x10052816
je 0x10052819
mov edi, 0x6a0c6a
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.1002fb2f
add esp, 0xc
lea edi, [edi + 0x638e]
lea edi, [edi - 0x638e]
lea edi, [edi]
rol esi, 0x1c
rol esi, 4
js 0x1005283f
jne 0x10052847
lea esp, [esp]
je 0x10052847
mov eax, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x1005287c
xchg esi, ecx
xchg esi, ecx
stc
add ebx, 0x12c4
sub ebx, 0x12c4
stc
jo 0x10052870
pushf
cmp eax, dword [esp + 8]
popf
ja 0x1005286b
jae 0x1005286d
jno 0x10052870
ljmp 0x39e8:0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.100389b2
add esp, 4
lea ecx, [ecx + 0x17c8]
lea ecx, [ecx - 0x17c8]
jge 0x1005288a
jnp 0x1005288c
jmp 0x1005288e
jbe 0x100528a4
pushf
call 0x10052897
lea esp, [esp + 4]
xchg ebx, eax
xchg ebx, eax
popf
xchg edx, eax
xchg edx, eax
ja 0x100528a4
mov ebp, 0x5220558b
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c