Function at 0x536e5c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
call 0x536e6a
lea esp, [esp + 4]
jae 0x536e70
xor esp, 0
not ebx
not ebx
jl 0x536e8b
pushf
jns 0x536e7d
cld
jnp 0x536e80
push edx
pop edx
popf
jb 0x536e86
mov esp, esp
jge 0x536e8b
add dword [ebx + 0x519df43d], 0x850f0100
inc edx
add dword [eax], eax
add byte [edx + 0xc], ch
cmp dword [0x519df4], 1
jne 0x536fda
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0053d44e
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
shr esp, 0
jno 0x536edd
inc edi
dec edi
je 0x536eed
xchg esi, eax
xchg esi, eax
mov eax, eax
ja 0x536ee7
jne 0x536ee9
jne 0x536eed
sbb dword [edx + ecx*4 + 0x4d], 0x1e980f0
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
rol eax, 0
ja 0x536f73
pushf
call 0x536f59
add esp, 4
cmp ebx, dword [esp + 0x10]
ror esp, 0
test dword [esp], edx
popf
xchg esi, ebx
xchg esi, ebx
jge 0x536f6e
mov esp, esp
jbe 0x536f73
mov ebp, 0x9e843d83
push ecx
add byte [eax], al
cmp dword [0x519e84], 0
jne 0x536f84
or eax, 0xffffffff
jmp 0x5371b6
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x519e84]
push ecx
call fcn.005397c7
mov dword [ebp - 4], eax
cmc
not eax
not eax
jbe 0x536fb0
pushf
add ebx, dword [esp]
sub ebx, dword [esp]
jp 0x536fa8
popf
lea esp, [esp]
ja 0x536fb0
sub eax, 0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0053d44e
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x536fd0
mov eax, dword [ebp - 4]
mov dword [0x519df4], eax
jmp 0x536fd8
or eax, 0xffffffff
jmp 0x5371b6
jmp 0x536fe3
mov ecx, dword [0x519df4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
test edi, 0x131d
jl 0x537010
pushf
test edx, eax
mov edx, edx
lea ebx, [ebx + 0x78e9]
sub ebx, 0x78e9
mov eax, eax
popf
mov edx, edx
jo 0x53700b
jge 0x53700d
jge 0x537010
mov esp, 0x50ec458b
mov eax, dword [ebp - 0x14]
push eax
call fcn.00543d38
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0053d44e
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
cmp eax, dword [esp]
je 0x53706c
pushf
je 0x537065
popf
lea ebx, [ebx]
jne 0x53706c
mov edi, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
ja 0x5370cd
xor esi, dword [esp]
xor esi, dword [esp]
jge 0x5370e0
pushf
shl esp, 0
popf
nop
jl 0x5370e0
xor eax, 0x9e843d83
push ecx
add byte [eax], al
cmp dword [0x519e84], 0
je 0x537107
jge 0x5370eb
jl 0x5370f4
lea esp, [esp]
jge 0x5370f4
xor eax, 0xf04d8dd8
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x519e84]
push edx
call fcn.005397c7
mov dword [ebp - 4], eax
lea esp, [esp]
push ebx
pop ebx
not esi
not esi
or esp, 0
jge 0x53711c
jb 0x537117
je 0x537119
jl 0x53711c
sub dword [edx + 0xc], 0x458d006a
invalid
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0053d44e
add esp, 0xc
and esp, 0xffffffff
push ecx
add ecx, 0x6bde
ror ecx, 0x1e
pop ecx
jge 0x53714c
pushf
add eax, dword [esp]
sub eax, dword [esp]
popf
js 0x537148
nop
jl 0x53714c
add eax, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x537189
not edi
not edi
rol ecx, 0x1c
ror ecx, 0x1c
add edx, dword [esp]
sub edx, dword [esp]
test esp, 0x3205
jp 0x53717d
nop
mov ebx, ebx
lea edx, [edx + 0x70dd]
lea edx, [edx - 0x70dd]
jnp 0x53717d
mov esi, 0xfc4d8bbf
mov ecx, dword [ebp - 4]
push ecx
call fcn.00543d38
add esp, 4
add esp, 0
add edx, 0
jge 0x537197
jl 0x537193
jl 0x537197
xor eax, 0x20558bb9
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c