Function at 0x515fcc
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
push 0x13
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.0052b4cd
add esp, 0xc
mov edi, edi
lea edx, [edx + 0x5338]
lea edx, [edx - 0x5338]
jo 0x515ff5
lea esp, [esp]
jo 0x51600e
jbe 0x515ffc
lea edx, [edx + 0x3488]
lea edx, [edx - 0x3488]
xchg ebx, ebx
jno 0x51600e
and dword [edx - 0x3a], 0xc648e045
inc ebp
in eax, 0x65
mov byte [ebp - 0x20], 0x48
mov byte [ebp - 0x1b], 0x65
mov byte [ebp - 0x16], 0x6a
mov byte [ebp - 0x11], 0x6e
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0x1e], 0x75
mov byte [ebp - 0x19], 0x6d
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0xf], 0x42
mov byte [ebp - 0x1d], 0x4e
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x4f
mov byte [ebp - 0xe], 0
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x47
mov byte [ebp - 0x12], 0x62
je 0x51605c
xor ebx, edx
xor ebx, edx
je 0x51606e
pushf
cmp eax, dword [esp]
popf
jp 0x51606b
jne 0x51606e
mov esp, 0x80e04d8a
jmp 0xe09ee878
mov cl, byte [ebp - 0x20]
sub cl, 1
mov byte [ebp - 0x20], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0x1e]
sub al, 1
mov byte [ebp - 0x1e], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0x1d]
sub cl, 1
mov byte [ebp - 0x1d], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
add esp, 0
xor edi, ecx
xor edi, ecx
je 0x51611d
xchg esp, esp
xchg edi, edi
mov esp, esp
jne 0x51611d
or dword [esi], 0xe1a4e8
add byte [ecx + 0x7d83f845], cl
clc
add byte [ebp + 7], dh
call fcn.005242c6
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x516132
xor eax, eax
jmp 0x5163b8
test dword [esp + 0xc], eax
jno 0x51614d
pushf
mov esi, esi
xor ebx, dword [esp + 4]
xor ebx, dword [esp + 4]
test edi, edx
popf
jnp 0x51614a
jo 0x51614d
xor eax, 0x51e04d8d
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.005132bc
mov dword [ebp - 4], eax
push 0x13
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.0052b4cd
add esp, 0xc
inc ecx
dec ecx
lea ebx, [ebx]
mov esp, esp
cmp edi, dword [esp + 0x10]
je 0x516187
lea edx, [edx]
lea edx, [edx]
jno 0x51617f
xchg edx, ebx
xchg edx, ebx
jne 0x516187
lcall 0x7500, 0xfc7d8377
pop es
cmp dword [ebp - 4], 0
jne 0x516194
xor eax, eax
jmp 0x5163b8
xor eax, dword [esp]
xor eax, dword [esp]
rol edi, 0
jl 0x51619f
dec ebx
inc ebx
je 0x5161b2
pushf
mov eax, eax
popf
jg 0x5161ab
jne 0x5161ad
jp 0x5161af
jne 0x5161b2
mov edi, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.00508f45
add esp, 4
push 0x13
push 0
lea edx, [ebp - 0x20]
push edx
call fcn.0052b4cd
add esp, 0xc
jp 0x5161d0
jg 0x5161da
jae 0x5161d4
jle 0x5161d6
jle 0x5161da
mov edi, 0xe045c6cb
dec eax
mov byte [ebp - 0x20], 0x48
mov byte [ebp - 0x1b], 0x65
mov byte [ebp - 0x16], 0x6a
mov byte [ebp - 0x11], 0x6e
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0x1e], 0x75
mov byte [ebp - 0x19], 0x6d
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0xf], 0x58
mov byte [ebp - 0x1d], 0x4e
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x4f
mov byte [ebp - 0xe], 0
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x47
mov byte [ebp - 0x12], 0x62
mov esi, esi
jno 0x51623b
pushf
lea esp, [esp]
rol esp, 0
popf
ja 0x516236
lea esi, [esi]
jo 0x51623b
mov esp, 0x2ce0458a
add dword [eax + 0x4d8ae045], ecx
in eax, 0x80
jmp 0xe59eea4d
mov al, byte [ebp - 0x20]
sub al, 1
mov byte [ebp - 0x20], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x1f]
sub cl, 1
mov byte [ebp - 0x1f], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x1e]
sub dl, 1
mov byte [ebp - 0x1e], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0x1d]
sub al, 1
mov byte [ebp - 0x1d], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0x1c]
sub al, 1
mov byte [ebp - 0x1c], al
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
xor ecx, esi
xor ecx, esi
jb 0x5162e7
lea esp, [esp]
jmp 0x5162e2
jge 0x5162e4
jae 0x5162e7
mov esi, 0x47103d83
push eax
add byte [eax], al
cmp dword [0x504710], 0
je 0x516315
xor esi, dword [esp]
xor esi, dword [esp]
ja 0x516302
lea esp, [esp]
jbe 0x5162fd
jbe 0x516302
mov eax, 0x458d62d1
loopne 0x516356
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [0x504710]
push ecx
call fcn.005132bc
mov dword [ebp - 0xc], eax
jne 0x516317
test esp, 0x61f5
jl 0x51632a
lea esp, [esp]
xchg ebx, ebx
js 0x516326
jge 0x51632a
mov eax, 0x6a136ae0
add byte [ebp - 0x17ad1fab], cl
xchg esi, eax
push ecx
add dword [eax], eax
push 0x13
push 0
lea edx, [ebp - 0x20]
push edx
call fcn.0052b4cd
add esp, 0xc
lea ecx, [ecx + 0x6f3a]
lea ecx, [ecx - 0x6f3a]
std
cld
test dword [esp + 4], ecx
jl 0x516361
pushf
or esp, 0
stc
rol esp, 0
add ebx, 0
popf
add byte [ebx - 0x6299ff3d], al
lea ebx, [ebx]
jge 0x516361
mov eax, 0xf47d83
cmp dword [ebp - 0xc], 0
je 0x516390
call 0x51636c
lea esp, [esp + 4]
inc ebx
dec ebx
shl ecx, 0
dec esi
inc esi
jnp 0x516384
jle 0x51637b
ja 0x51637d
jbe 0x51637f
mov edi, edi
jp 0x516384
jmp 0x5145a913
mov eax, dword [ebp - 0xc]
push eax
call fcn.00508f45
add esp, 4
xchg esi, esi
shl esp, 0
jge 0x5163a9
pushf
stc
not esi
not esi
mov esp, esp
popf
xchg edx, eax
xchg edx, eax
je 0x5163a6
jl 0x5163a9
add eax, 0x51104d8b
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc