Function at 0x7c4e50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub ecx, dword [ecx + 0x7bf2540d]
add byte [ebx], dh
shr bl, 2
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push edi
push 0xc
lea eax, [ebp - 0xc]
push 0
push eax
call fcn.007d2070
add esp, 0xc
cmp dword [esp + 4], 0x1770376
mov bl, 0x74
mov byte [ebp - 0xc], 0x4e
mov byte [ebp - 7], 0x68
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x66
mov byte [ebp - 0xa], bl
mov byte [ebp - 5], 0x43
mov byte [ebp - 9], bl
mov byte [ebp - 4], 0x70
mov byte [ebp - 8], 0x62
mov byte [ebp - 3], 0x79
mov byte [ebp - 2], 0x42
mov byte [ebp - 1], 0
jne 0x7c4ea6
je 0x7c4ea6
jl 0x7c4e31
mov dl, byte [ebp - 0xc]
mov cl, byte [ebp - 7]
mov al, byte [ebp - 0xb]
dec dl
dec cl
mov byte [ebp - 0xc], dl
mov dl, byte [ebp - 6]
mov byte [ebp - 7], cl
mov cl, byte [ebp - 0xa]
dec al
dec dl
mov byte [ebp - 0xb], al
mov al, byte [ebp - 5]
dec cl
mov byte [ebp - 6], dl
mov dl, byte [ebp - 9]
mov byte [ebp - 0xa], cl
mov cl, byte [ebp - 4]
dec al
dec dl
mov byte [ebp - 5], al
mov al, byte [ebp - 8]
dec cl
mov byte [ebp - 9], dl
mov dl, byte [ebp - 3]
mov byte [ebp - 4], cl
mov cl, byte [ebp - 2]
dec al
dec dl
dec cl
mov byte [ebp - 8], al
mov byte [ebp - 3], dl
mov byte [ebp - 2], cl
call fcn.007ccaa0
mov esi, eax
test esi, esi
jne 0x7c4f12
push ebp
hlt
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
jo 0x7c4f17
jno 0x7c4f17
call 0x52709ca8
lea ecx, [ebp - 0xc]
push ecx
push esi
call fcn.007cb5e0
mov edi, eax
jb 0x7c4f28
jae 0x7c4f28
jmp 0x7c4f93
push 0xc
lea edx, [ebp - 0xc]
push 0
push edx
call fcn.007d2070
add esp, 0xc
jne 0x7c4f3d
je 0x7c4f3d
call 0xbf24ec6
test edi, edi
jne 0x7c4f4c
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
jne 0x7c4f51
je 0x7c4f51
jns 0x7c4fa9
push edi
call fcn.007cc300
push 0xc
lea eax, [ebp - 0xc]
push 0
push eax
call fcn.007d2070
add esp, 0x10
cmp dword [esp + 4], 0x1770376
mov byte [ebp - 0xc], 0x4e
mov byte [ebp - 7], 0x68
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x66
mov byte [ebp - 0xa], bl
mov byte [ebp - 5], 0x43
mov byte [ebp - 9], bl
mov byte [ebp - 4], 0x70
mov byte [ebp - 8], 0x62
mov byte [ebp - 3], 0x79
mov byte [ebp - 2], 0x58
mov byte [ebp - 1], 0
jne 0x7c4fa2
std
jns 0x7c4f5c
inc ebp
invalid
je 0x7c4fa2
jp 0x7c4f2d
mov dl, byte [ebp - 0xc]
mov cl, byte [ebp - 7]
mov al, byte [ebp - 0xb]
push ebp
hlt
inc ebp
cmc
mov bl, byte [ebp - 6]
dec dl
dec cl
mov byte [ebp - 0xc], dl
mov dl, byte [ebp - 0xa]
dec al
mov byte [ebp - 7], cl
mov cl, byte [ebp - 5]
mov byte [ebp - 0xb], al
mov al, byte [ebp - 9]
dec bl
dec dl
mov byte [ebp - 6], bl
mov bl, byte [ebp - 4]
dec cl
mov byte [ebp - 0xa], dl
mov dl, byte [ebp - 8]
dec al
mov byte [ebp - 5], cl
mov cl, byte [ebp - 3]
mov byte [ebp - 9], al
mov al, byte [ebp - 2]
dec bl
dec dl
dec cl
dec al
mov byte [ebp - 4], bl
mov byte [ebp - 8], dl
mov byte [ebp - 3], cl
mov byte [ebp - 2], al
jb 0x7c4fff
jae 0x7c4fff
jmp 0x7c5072
jb 0x7c5004
jae 0x7c5004
and dword [ebp + 0x5651f44d], ecx
lea ecx, [ebp - 0xc]
push ecx
push esi
call fcn.007cb5e0
mov esi, eax
jne 0x7c5015
je 0x7c5015
jg 0x7c5080
push 0xc
lea edx, [ebp - 0xc]
push 0
push edx
call fcn.007d2070
add esp, 0xc
jb 0x7c502a
or al, 0x8d
push ebp
hlt
jae 0x7c502a
sub byte [ebp + 0x720e74f6], al
add esi, dword [ebx + 1]
test esi, esi
je 0x7c503c
jb 0x7c5033
jae 0x7c5033
sub al, 0x56
push esi
call fcn.007cc300
add esp, 4
cmp dword [esp + 8], 0x1740375
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push ecx
push edx
push eax
call edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 0x7ced30
push dword fs:[0]
mov dword [0x7bf190], ecx
nop
int1
jnp 0x7c5084
mov ecx, dword fs:[0]
xchg dword [0x7bf190], ecx
mov dword fs:[0], esp
push edi
push esi
push ebx
mov eax, 0x4f
int 0x41
nop
nop
nop
pop ebx
pop esi
pop edi
pop dword fs:[0]
add esp, 4
xchg dword [0x7bf190], ecx
mov dword fs:[0], ecx
mov ecx, dword [0x7bf190]
mov word [ebp - 2], ax
jne 0x7c50ce
je 0x7c50ce
call 0xfef9d238
xchg bl, dh
cmp word [ebp - 2], 0xf386
jne 0x7c50e2
jbe 0x7c50db
ja 0x7c50db
call fcn.007c599d
add bl, ch
adc eax, 0x17f037e
mov esi, 8
jmp 0x7c50f7
jle 0x7c50e7
jg 0x7c50e7
call 0x7c318d53
add byte [esi + 0x18], bh
push 0x7bb53c
mov esi, 0x18
call dword [fcn.009c6004]
jle 0x7c50fc
jg 0x7c50fc
call 0x5edc178b
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret