Function at 0x5cc4c4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov ebx, dword [esi]
pop esi
test ebx, ebx
je 0x5cc619
pushal
mov al, byte [esp]
jmp 0x5cc515
push di
mov byte [esp], al
lea esp, [esp + 2]
push esi
mov esi, ebp
lea esi, [esi + 8]
jmp 0x5cc487
pushal
push dword [esp + 0x13]
lea esp, [esp + 0x24]
lea esp, [esp + 4]
jmp 0x5cc4a6
mov edi, dword [eax + 0x20]
and dword [ebp - 4], esi
add edi, ebx
cmp dword [eax + 0x18], esi
jbe 0x5cc5de
jmp 0x641111
mov edx, dword [ebp + 0xc]
jmp 0x641111
mov dword [esp + 0x18], ebx
push ax
mov word [esp], ax
mov byte [esp], bh
lea esp, [esp + 1]
push dx
mov byte [esp], ch
lea esp, [esp]
mov byte [esp + 1], al
pushal
lea esp, [esp + 3]
lea esp, [esp + 0x20]
popal
xor esi, esi
call fcn.005f5177
mov ecx, dword [eax + 0x7c]
mov eax, dword [eax + 0x78]
add eax, ebx
mov dword [ebp - 0x1c], ecx
test ecx, ecx
je 0x5cc619
sub esp, 5
pop word [esp]
sub esp, 0x16
push dword [esp + 0xc]
push dword [esp + 7]
pop dword [esp + 0xd]
mov byte [esp], dh
mov dword [esp + 6], ecx
lea esp, [esp + 1]
cmp eax, ebx
pushal
push ax
pop dword [esp + 5]
lea esp, [esp + 2]
lea esp, [esp + 0x38]
jbe 0x5cc619
push ecx
mov ecx, ebp
lea ecx, [ecx + 0xc]
mov edx, dword [ecx]
pop ecx
cmp edx, 0x10000
jae 0x5cc4df
mov ecx, dword [eax + 0x10]
cmp edx, ecx
jb 0x5cc5de
push edx
mov edx, eax
lea edx, [edx + 0x14]
mov edi, dword [edx]
pop edx
pushal
push dword [esp]
add edi, ecx
pushfd
mov dword [esp], ecx
push dword [esp + 1]
push dword [esp + 3]
pop word [esp + 6]
lea esp, [esp + 7]
jmp 0x5cc5fa
cmp esi, eax
jb 0x6412eb
mov ecx, dword [ebp - 0x1c]
jmp 0x64132c
push word [esp]
mov word [esp + 2], bx
pushal
lea esp, [esp + 1]
jmp 0x64114a
mov eax, dword fs:[0x18]
mov dword [eax + 0x34], 0x7f
jmp 0x5cc824
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 8
mov ecx, dword [ebp - 4]
push eax
mov eax, ecx
lea eax, [eax*4]
jmp 0x641255
push edi
mov edi, ebx
lea edi, [ecx + edi]
mov esi, dword [edi]
pop edi
add esi, ebx
jmp 0x5cc5de
lea esp, [esp + 0x48]
cmp edx, edi
jae 0x5cc5de
sub edx, ecx
mov ecx, dword [eax + 0x1c]
lea ecx, [ecx + edx*4]
jmp 0x64112d
xor ecx, ecx
jmp 0x64122f
mov edx, dword [ebp - 4]
push ebp
mov ebp, eax
lea ebp, [ebp + 0x24]
mov ecx, dword [ebp]
pop ebp
jmp 0x64131a
sbb ecx, ecx
sbb ecx, reloc.WINMM.dll_midiStreamOut
jmp 0x64122f
mov dword [esp + 4], ebp
pushal
pushal
lea esp, [esp + 0x2f]
pop word [esp + 0xa]
lea esp, [esp + 0xd]
lea esp, [esp + 1]
jmp 0x6412ae
lea esp, [esp + 0x20]
popal
lea edi, [edi - 8]
mov edx, dword [edi]
pop edi
mov dl, byte [edx]
cmp dl, byte [ecx]
jne 0x6411c9
test dl, dl
je 0x6411a6
push ecx
mov ecx, ebp
lea ecx, [ecx - 8]
mov edx, dword [ecx]
pop ecx
mov dl, byte [edx + 1]
mov byte [ebp + 0xb], dl
cmp dl, byte [ecx + 1]
jne 0x6411c9
add dword [ebp - 8], 2
inc ecx
inc ecx
test dl, dl
jne 0x641260
je 0x6411a6
test ecx, ecx
je 0x6411ad
inc dword [ebp - 4]
push esi
pushal
mov edi, 0x2dd37e2d
setns bh
jmp 0x6411d0
lea eax, [eax + edi]
mov ecx, dword [eax]
pop eax
add ecx, ebx
mov dword [ebp - 8], edx
push edi
pushal
not ax
lea eax, [edx*4]
xchg al, bl
mov dword [esp], ebp
pushal
jmp 0x6411f6
lea esi, [esi - 4]
mov ecx, dword [esi]
pop esi
cmp ecx, dword [eax + 0x18]
jb 0x5cc4f6
jmp 0x5cc5de
lea esp, [esp]
pushfd
push word [esp + 4]
lea esp, [esp + 3]
lea esp, [esp + 4]
popal
jmp 0x641291
test esi, esi
je 0x5cc619
pushal
not cl
mov bl, 0x9a
xchg di, bx
mov di, word [esp]
mov ebx, eax
mov eax, 0x5b615dea
jmp 0x6418cb
lea ecx, [ecx + edx*2]
movzx ecx, word [ecx + ebx]
mov edx, dword [eax + 0x1c]
lea ecx, [edx + ecx*4]
jmp 0x64112d
add eax, ecx
cmp esi, eax
jae 0x6412eb
pushal
sete ah
xchg dx, di
push ebp
mov dword [esp + 0x20], esi
push edi
jmp 0x641404
call 0x5f5218
mov edi, eax
mov dword [ebp + 0xc], edi
test edi, edi
je 0x5cc619
jmp 0x641608
lea esp, [esp + 1]
lea esp, [esp + 4]
popal
jmp 0x6413c8
lea esp, [esp + 3]
mov byte [esp], al
mov byte [esp], ch
lea esp, [esp]
jmp 0x6413e7
mov byte [eax], dl
jl 0x64157f
lea eax, [ebp - 0x18]
push eax
call dword [0x5d66a4]
jmp 0x641479
push eax
mov eax, ebp
lea eax, [eax + 0xc]
mov ecx, dword [eax]
pop eax
lea eax, [ecx + 1]
jmp 0x64147d
mov esi, eax
jmp 0x64145d
cmp byte [eax], 0x23
jne 0x641503
add ecx, 2
push ax
lea esp, [esp + 2]
push ecx
jmp 0x6414d1
mov word [esp + 6], ax
lea esp, [esp + 2]
mov dword [esp + 8], esi
pushal
push word [esp + 2]
pushal
lea esp, [esp + 2]
lea esp, [esp + 0x48]
lea ecx, reloc.WINMM.dll_midiStreamOut
push ecx
call eax
mov esi, eax
jmp 0x64152c
call fcn.005dec0e
pop ecx
jmp 0x641503
push bx
push word [esp + 1]
lea esp, [esp + 1]
mov dword [esp], eax
push edi
mov word [esp + 1], dx
mov word [esp], si
mov byte [esp + 2], al
jmp 0x641680
push esi
mov byte [esp + 2], al
push dword [esp]
push word [esp + 6]
pop word [esp + 3]
lea esp, [esp + 4]
lea esp, [esp + 3]
jmp 0x6414d9
cmc
sub esp, 0x19
lea esp, [esp + 1]
cmp esi, ebx
push esi
lea esp, [esp + 0x1c]
jne 0x64145d
mov byte [ebp - 0xa], 0x42
mov byte [ebp - 0xb], 0x56
mov byte [ebp - 0xc], 0x56
mov byte [ebp - 0xd], 0x5e
mov byte [ebp - 0xe], 0x14
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0x10], 0x4f
mov byte [ebp - 0x11], 0x61
mov byte [ebp - 0x12], 0x80
mov byte [ebp - 0x13], 0x56
mov byte [ebp - 0x14], 0x5d
mov byte [ebp - 0x15], 0x54
mov byte [ebp - 0x16], 0x50
mov byte [ebp - 0x17], 0x5d
mov byte [ebp - 0x18], 0x77
xor ecx, ecx
lea eax, [ecx + ebp - 0x18]
mov dl, byte [eax]
sub dl, 3
xor dl, 0x3f
inc ecx
cmp ecx, 0xf
jmp 0x64143d
push dword [esp + 0xb]
push word [esp + 0x23]
lea esp, [esp + 0x2c]
popal
lea ecx, reloc.WINMM.dll_midiStreamOut
call fcn.005f51d0
mov cx, 0x5c19
mov cx, 0x762c
pushal
mov ecx, dword [esp + 0x20]
push esi
lea esp, [esp + 0x28]
lea eax, reloc.WINMM.dll_midiStreamOut
push eax
mov byte [ebp + edi - 0x120], 0
call dword [0x5d66a4]
mov esi, eax
test esi, esi
jne 0x64152c
call fcn.005f0074
mov eax, dword [eax + 0x10]
push esi
pushal
lea esp, [esp + 0x12]
jmp 0x6414a8
sub edi, esi
push edi
pushal
mov ebx, esi
lea eax, [ebx + esi]
xchg cl, al
mov dword [esp + 0x14], esi
pushal
mov dword [esp + 0x14], edx
pushfd
push word [esp + 0x10]
jmp 0x64159f
push dword [esp]
push si
push word [esp + 4]
pop word [esp + 4]
jmp 0x64170d
push word [esp + 2]
push dword [esp + 4]
lea esp, [esp + 2]
lea esp, [esp + 8]
pushfd
mov byte [esp + 2], dh
push word [esp + 2]
mov word [esp + 1], cx
mov byte [esp + 2], dh
mov byte [esp + 3], bl
mov word [esp + 3], di
mov byte [esp + 3], bh
push word [esp + 2]
mov dword [esp + 4], esi
push eax
mov word [esp], di
jmp 0x641660
call fcn.005cc636
jmp 0x5cc826
lea esp, [esp + 2]
lea esp, [esp + 0xc]
jmp 0x6416ef
lea ecx, [edi*4]
mov dword [esp + 0x1c], esi
pushal
pop word [esp + 0x1a]
mov dword [esp + 2], edi
pop word [esp + 0xd]
mov byte [esp + 0xa], cl
lea esp, [esp + 0x1c]
popal
call fcn.005f5198
jmp 0x5cc826