Function at 0x5c1167
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
push edi
mov byte [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x27], 0x46
mov byte [ebp - 0x26], 0x2b
mov byte [ebp - 0x25], 0x78
mov byte [ebp - 0x24], 0x2b
mov byte [ebp - 0x23], 0x12
mov byte [ebp - 0x22], 0x2b
mov byte [ebp - 0x21], 0x6c
mov byte [ebp - 0x20], 0x2b
mov byte [ebp - 0x1f], 0x78
mov byte [ebp - 0x1e], 0x2b
mov byte [ebp - 0x1d], 0x1a
mov byte [ebp - 0x1c], 0x2b
mov byte [ebp - 0x1b], 0x66
mov byte [ebp - 0x1a], 0x2b
mov byte [ebp - 0x19], 0x3d
mov byte [ebp - 0x18], 0x2b
mov byte [ebp - 0x17], 0x18
mov byte [ebp - 0x16], 0x2b
mov byte [ebp - 0x15], 0x4f
mov byte [ebp - 0x14], 0x2b
mov byte [ebp - 0x13], 0x1a
mov byte [ebp - 0x12], 0x2b
mov byte [ebp - 0x11], 0x1a
mov byte [ebp - 0x10], 0x2b
mov byte [ebp - 0xf], 0x2b
mov byte [ebp - 0xe], 0x2b
mov al, byte [ebp - 0x27]
call fcn.005c2a4d
mov eax, dword fs:[0x30]
push 3
pop edi
push 0xa
mov esi, dword [eax + 0xc]
mov dword [ebp - 4], 0x4f5c07
mov eax, dword [ebp - 4]
cdq
idiv edi
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], edi
pop ebx
push 5
pop ecx
mov dword [ebp - 8], ecx
test edx, edx
je 0x5c125a
inc eax
add eax, esi
mov dword [ebp - 4], eax
jmp 0x5c121e
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
and eax, 0x8000001f
jns 0x5c122f
dec eax
or eax, 0xffffffe0
add eax, 1
je 0x5c121b
mov edi, dword [esi + 0x10]
mov dword [ebp - 4], 0x4f5c07
mov eax, dword [ebp - 4]
push 3
cdq
pop esi
idiv esi
mov eax, dword [ebp - 4]
test edx, edx
je 0x5c1327
inc eax
add eax, edi
mov dword [ebp - 4], eax
jmp 0x5c130f
and eax, 0x80000001
jns 0x5c1268
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c1285
mov eax, ebx
sub eax, esi
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
jmp 0x5c1279
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cdq
idiv edi
test edx, edx
je 0x5c1276
jmp 0x5c1231
mov eax, dword [ebp - 4]
and eax, 0x80000003
jns 0x5c1296
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x5c12cd
imul eax, esi, 0xa
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
jmp 0x5c12b5
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c12b2
dec dword [ebp - 4]
jmp 0x5c12b5
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x5c12c6
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c12a3
jmp 0x5c1231
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c1231
mov eax, dword [ebp - 4]
lea ecx, [esi + 0x1e]
cdq
idiv ecx
push 5
mov dword [ebp - 4], eax
pop ecx
mov eax, dword [ebp - 4]
cdq
idiv edi
test edx, edx
jne 0x5c1231
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c1307
inc dword [ebp - 4]
jmp 0x5c12ea
dec dword [ebp - 4]
jmp 0x5c12ea
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
and eax, 0x8000001f
jns 0x5c1320
dec eax
or eax, 0xffffffe0
add eax, 1
je 0x5c130c
jmp 0x5c13d9
and eax, 0x80000001
jns 0x5c1335
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c1355
mov eax, ebx
sub eax, edi
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
jmp 0x5c1346
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cdq
idiv esi
test edx, edx
je 0x5c1343
jmp 0x5c13d9
mov eax, dword [ebp - 4]
and eax, 0x80000003
jns 0x5c1366
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x5c139a
imul eax, edi, 0xa
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
jmp 0x5c1385
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c1382
dec dword [ebp - 4]
jmp 0x5c1385
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x5c1396
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c1373
jmp 0x5c13d9
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c13d9
mov eax, dword [ebp - 4]
lea ecx, [edi + 0x1e]
cdq
idiv ecx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cdq
idiv esi
test edx, edx
jne 0x5c13d9
push 5
pop ecx
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c13cc
inc dword [ebp - 4]
jmp 0x5c13cf
dec dword [ebp - 4]
mov eax, dword [ebp - 4]
cdq
idiv esi
test edx, edx
je 0x5c13bd
mov ecx, dword [edi + 0x10]
mov dword [ebp - 4], 0x4f5c07
mov eax, dword [ebp - 4]
cdq
idiv esi
mov eax, dword [ebp - 4]
test edx, edx
je 0x5c1413
inc eax
add eax, ecx
mov dword [ebp - 4], eax
jmp 0x5c13fb
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
and eax, 0x8000001f
jns 0x5c140c
dec eax
or eax, 0xffffffe0
add eax, 1
je 0x5c13f8
jmp 0x5c14da
and eax, 0x80000001
jns 0x5c1421
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c1441
mov eax, ebx
sub eax, ecx
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
jmp 0x5c1432
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cdq
idiv esi
test edx, edx
je 0x5c142f
jmp 0x5c14da
mov eax, dword [ebp - 4]
and eax, 0x80000003
jns 0x5c1452
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x5c149a
imul eax, ecx, 0xa
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x5c146e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x5c14da
push 5
pop ecx
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c1482
dec dword [ebp - 4]
jmp 0x5c1485
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x5c1496
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c1473
jmp 0x5c14da
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 8]
test edx, edx
je 0x5c14da
mov eax, dword [ebp - 4]
add ecx, 0x1e
cdq
idiv ecx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cdq
idiv esi
test edx, edx
jne 0x5c14da
push 5
pop ecx
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c14cd
inc dword [ebp - 4]
jmp 0x5c14d0
dec dword [ebp - 4]
mov eax, dword [ebp - 4]
cdq
idiv esi
test edx, edx
je 0x5c14be
mov esi, edi
mov esi, dword [esi]
mov dword [ebp - 4], 0x4f5c07
mov eax, dword [ebp - 4]
push 3
cdq
pop ecx
idiv ecx
mov eax, dword [ebp - 4]
test edx, edx
je 0x5c1518
inc eax
add eax, esi
mov dword [ebp - 4], eax
jmp 0x5c1500
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
and eax, 0x8000001f
jns 0x5c1511
dec eax
or eax, 0xffffffe0
add eax, 1
je 0x5c14fd
jmp 0x5c15da
and eax, 0x80000001
jns 0x5c1526
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c1546
mov eax, ebx
sub eax, esi
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
jmp 0x5c1537
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c1534
jmp 0x5c15da
mov eax, dword [ebp - 4]
and eax, 0x80000003
jns 0x5c1557
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x5c159f
imul eax, esi, 0xa
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x5c1573
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x5c15da
push 5
pop ecx
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c1587
dec dword [ebp - 4]
jmp 0x5c158a
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x5c159b
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c1578
jmp 0x5c15da
mov eax, dword [ebp - 4]
push 5
cdq
pop ecx
idiv ecx
test edx, edx
je 0x5c15da
mov eax, dword [ebp - 4]
lea ecx, [esi + 0x1e]
cdq
idiv ecx
push 3
mov dword [ebp - 4], eax
pop ecx
jmp 0x5c15d0
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 8]
test edx, edx
je 0x5c15cd
inc dword [ebp - 4]
jmp 0x5c15d0
dec dword [ebp - 4]
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c15bd
mov ecx, dword [esi + 0x18]
test ecx, ecx
je 0x5c16ee
mov dword [ebp - 4], 0x4f5c07
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 0xc]
mov eax, dword [ebp - 4]
test edx, edx
je 0x5c161d
inc eax
add eax, ecx
mov dword [ebp - 4], eax
jmp 0x5c1605
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
and eax, 0x8000001f
jns 0x5c1616
dec eax
or eax, 0xffffffe0
add eax, 1
je 0x5c1602
jmp 0x5c16e0
and eax, 0x80000001
jns 0x5c162b
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c164e
mov eax, ebx
sub eax, ecx
add eax, dword [ebp - 4]
push 3
mov dword [ebp - 4], eax
pop ecx
jmp 0x5c163f
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c163c
jmp 0x5c16e0
mov eax, dword [ebp - 4]
and eax, 0x80000003
jns 0x5c165f
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x5c16a7
imul eax, ecx, 0xa
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x5c167b
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x5c16e0
push 5
pop ecx
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c168f
dec dword [ebp - 4]
jmp 0x5c1692
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x5c16a3
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c1680
jmp 0x5c16e0
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 8]
test edx, edx
je 0x5c16e0
mov eax, dword [ebp - 4]
add ecx, 0x1e
cdq
idiv ecx
push 3
mov dword [ebp - 4], eax
pop ecx
jmp 0x5c16d6
mov eax, dword [ebp - 4]
cdq
idiv dword [ebp - 8]
test edx, edx
je 0x5c16d3
inc dword [ebp - 4]
jmp 0x5c16d6
dec dword [ebp - 4]
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c16c3
push esi
call fcn.005c0ed6
pop ecx
cmp eax, 0xb26771d8
je 0x5c16f6
cmp edi, esi
jne 0x5c14dc
mov esi, dword [esi + 0x18]
mov dword [ebp - 4], 0x4f5c07
mov eax, dword [ebp - 4]
push 3
cdq
pop edi
idiv edi
mov eax, dword [ebp - 4]
test edx, edx
je 0x5c1733
inc eax
add eax, esi
mov dword [ebp - 4], eax
jmp 0x5c171b
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
and eax, 0x8000001f
jns 0x5c172c
dec eax
or eax, 0xffffffe0
add eax, 1
je 0x5c1718
jmp 0x5c17ef
and eax, 0x80000001
jns 0x5c1741
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c175f
sub ebx, esi
add ebx, dword [ebp - 4]
mov dword [ebp - 4], ebx
jmp 0x5c1750
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
cdq
idiv edi
test edx, edx
je 0x5c174d
jmp 0x5c17ef
mov eax, dword [ebp - 4]
and eax, 0x80000003
jns 0x5c1770
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x5c17b8
imul eax, esi, 0xa
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x5c178c
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x5c17ef
push 5
pop ecx
mov eax, dword [ebp - 4]
cdq
idiv ecx
test edx, edx
je 0x5c17a0
dec dword [ebp - 4]
jmp 0x5c17a3
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x5c17b4
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c1791
jmp 0x5c17ef
mov eax, dword [ebp - 4]
push 5
cdq
pop ebx
idiv ebx
test edx, edx
je 0x5c17ef
mov eax, dword [ebp - 4]
lea ecx, [esi + 0x1e]
cdq
idiv ecx
mov dword [ebp - 4], eax
jmp 0x5c17e5
mov eax, dword [ebp - 4]
cdq
idiv ebx
test edx, edx
je 0x5c17e2
inc dword [ebp - 4]
jmp 0x5c17e5
dec dword [ebp - 4]
mov eax, dword [ebp - 4]
cdq
idiv edi
test edx, edx
je 0x5c17d3
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret