Function at 0x5c2823
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x758010]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov byte [ebp - 0x20], 0
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x1f], 9
mov byte [ebp - 0x1e], 0x1d
mov byte [ebp - 0x1d], 0x13
mov byte [ebp - 0x1c], 0x1d
mov byte [ebp - 0x1b], 0x18
mov byte [ebp - 0x1a], 0x1d
mov byte [ebp - 0x19], 0x2a
mov byte [ebp - 0x18], 0x1d
mov byte [ebp - 0x17], 0x13
mov byte [ebp - 0x16], 0x1d
mov byte [ebp - 0x15], 0x33
mov byte [ebp - 0x14], 0x1d
mov byte [ebp - 0x13], 0x75
mov byte [ebp - 0x12], 0x1d
mov byte [ebp - 0x11], 0x3a
mov byte [ebp - 0x10], 0x1d
mov byte [ebp - 0xf], 0x4c
mov byte [ebp - 0xe], 0x1d
mov byte [ebp - 0xd], 0x57
mov byte [ebp - 0xc], 0x1d
mov byte [ebp - 0xb], 0x33
mov byte [ebp - 0xa], 0x1d
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x1d
mov byte [ebp - 7], 0x1d
mov byte [ebp - 6], 0x1d
mov al, byte [ebp - 0x1f]
call fcn.005c3fe7
mov eax, dword fs:[0x30]
push 3
pop edi
push 0xa
mov esi, dword [eax + 0xc]
mov dword [ebp - 0x24], 0x2441ab
mov eax, dword [ebp - 0x24]
cdq
idiv edi
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], edi
pop ebx
push 5
pop ecx
mov dword [ebp - 0x28], ecx
test edx, edx
je 0x5c2920
inc eax
add eax, esi
mov dword [ebp - 0x24], eax
jmp 0x5c28e4
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
and eax, 0x8000001f
jns 0x5c28f5
dec eax
or eax, 0xffffffe0
add eax, 1
je 0x5c28e1
mov edi, dword [esi + 0x10]
mov dword [ebp - 0x24], 0x2441ab
mov eax, dword [ebp - 0x24]
push 3
cdq
pop esi
idiv esi
mov eax, dword [ebp - 0x24]
test edx, edx
je 0x5c29ed
inc eax
add eax, edi
mov dword [ebp - 0x24], eax
jmp 0x5c29d5
and eax, 0x80000001
jns 0x5c292e
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c294b
mov eax, ebx
sub eax, esi
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
jmp 0x5c293f
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cdq
idiv edi
test edx, edx
je 0x5c293c
jmp 0x5c28f7
mov eax, dword [ebp - 0x24]
and eax, 0x80000003
jns 0x5c295c
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x5c2993
imul eax, esi, 0xa
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
jmp 0x5c297b
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2978
dec dword [ebp - 0x24]
jmp 0x5c297b
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x5c298c
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c2969
jmp 0x5c28f7
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c28f7
mov eax, dword [ebp - 0x24]
lea ecx, [esi + 0x1e]
cdq
idiv ecx
push 5
mov dword [ebp - 0x24], eax
pop ecx
mov eax, dword [ebp - 0x24]
cdq
idiv edi
test edx, edx
jne 0x5c28f7
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c29cd
inc dword [ebp - 0x24]
jmp 0x5c29b0
dec dword [ebp - 0x24]
jmp 0x5c29b0
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
and eax, 0x8000001f
jns 0x5c29e6
dec eax
or eax, 0xffffffe0
add eax, 1
je 0x5c29d2
jmp 0x5c2a9f
and eax, 0x80000001
jns 0x5c29fb
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c2a1b
mov eax, ebx
sub eax, edi
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
jmp 0x5c2a0c
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cdq
idiv esi
test edx, edx
je 0x5c2a09
jmp 0x5c2a9f
mov eax, dword [ebp - 0x24]
and eax, 0x80000003
jns 0x5c2a2c
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x5c2a60
imul eax, edi, 0xa
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
jmp 0x5c2a4b
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2a48
dec dword [ebp - 0x24]
jmp 0x5c2a4b
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x5c2a5c
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c2a39
jmp 0x5c2a9f
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2a9f
mov eax, dword [ebp - 0x24]
lea ecx, [edi + 0x1e]
cdq
idiv ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cdq
idiv esi
test edx, edx
jne 0x5c2a9f
push 5
pop ecx
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2a92
inc dword [ebp - 0x24]
jmp 0x5c2a95
dec dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cdq
idiv esi
test edx, edx
je 0x5c2a83
mov ecx, dword [edi + 0x10]
mov dword [ebp - 0x24], 0x2441ab
mov eax, dword [ebp - 0x24]
cdq
idiv esi
mov eax, dword [ebp - 0x24]
test edx, edx
je 0x5c2ad9
inc eax
add eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x5c2ac1
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
and eax, 0x8000001f
jns 0x5c2ad2
dec eax
or eax, 0xffffffe0
add eax, 1
je 0x5c2abe
jmp 0x5c2ba0
and eax, 0x80000001
jns 0x5c2ae7
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c2b07
mov eax, ebx
sub eax, ecx
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
jmp 0x5c2af8
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cdq
idiv esi
test edx, edx
je 0x5c2af5
jmp 0x5c2ba0
mov eax, dword [ebp - 0x24]
and eax, 0x80000003
jns 0x5c2b18
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x5c2b60
imul eax, ecx, 0xa
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x5c2b34
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x5c2ba0
push 5
pop ecx
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2b48
dec dword [ebp - 0x24]
jmp 0x5c2b4b
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x5c2b5c
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c2b39
jmp 0x5c2ba0
mov eax, dword [ebp - 0x24]
cdq
idiv dword [ebp - 0x28]
test edx, edx
je 0x5c2ba0
mov eax, dword [ebp - 0x24]
add ecx, 0x1e
cdq
idiv ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cdq
idiv esi
test edx, edx
jne 0x5c2ba0
push 5
pop ecx
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2b93
inc dword [ebp - 0x24]
jmp 0x5c2b96
dec dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cdq
idiv esi
test edx, edx
je 0x5c2b84
mov esi, edi
mov esi, dword [esi]
mov dword [ebp - 0x24], 0x2441ab
mov eax, dword [ebp - 0x24]
push 3
cdq
pop ecx
idiv ecx
mov eax, dword [ebp - 0x24]
test edx, edx
je 0x5c2bde
inc eax
add eax, esi
mov dword [ebp - 0x24], eax
jmp 0x5c2bc6
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
and eax, 0x8000001f
jns 0x5c2bd7
dec eax
or eax, 0xffffffe0
add eax, 1
je 0x5c2bc3
jmp 0x5c2ca0
and eax, 0x80000001
jns 0x5c2bec
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c2c0c
mov eax, ebx
sub eax, esi
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
jmp 0x5c2bfd
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2bfa
jmp 0x5c2ca0
mov eax, dword [ebp - 0x24]
and eax, 0x80000003
jns 0x5c2c1d
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x5c2c65
imul eax, esi, 0xa
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x5c2c39
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x5c2ca0
push 5
pop ecx
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2c4d
dec dword [ebp - 0x24]
jmp 0x5c2c50
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x5c2c61
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c2c3e
jmp 0x5c2ca0
mov eax, dword [ebp - 0x24]
push 5
cdq
pop ecx
idiv ecx
test edx, edx
je 0x5c2ca0
mov eax, dword [ebp - 0x24]
lea ecx, [esi + 0x1e]
cdq
idiv ecx
push 3
mov dword [ebp - 0x24], eax
pop ecx
jmp 0x5c2c96
mov eax, dword [ebp - 0x24]
cdq
idiv dword [ebp - 0x28]
test edx, edx
je 0x5c2c93
inc dword [ebp - 0x24]
jmp 0x5c2c96
dec dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2c83
mov ecx, dword [esi + 0x18]
test ecx, ecx
je 0x5c2db4
mov dword [ebp - 0x24], 0x2441ab
mov eax, dword [ebp - 0x24]
cdq
idiv dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
test edx, edx
je 0x5c2ce3
inc eax
add eax, ecx
mov dword [ebp - 0x24], eax
jmp 0x5c2ccb
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
and eax, 0x8000001f
jns 0x5c2cdc
dec eax
or eax, 0xffffffe0
add eax, 1
je 0x5c2cc8
jmp 0x5c2da6
and eax, 0x80000001
jns 0x5c2cf1
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c2d14
mov eax, ebx
sub eax, ecx
add eax, dword [ebp - 0x24]
push 3
mov dword [ebp - 0x24], eax
pop ecx
jmp 0x5c2d05
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2d02
jmp 0x5c2da6
mov eax, dword [ebp - 0x24]
and eax, 0x80000003
jns 0x5c2d25
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x5c2d6d
imul eax, ecx, 0xa
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x5c2d41
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x5c2da6
push 5
pop ecx
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2d55
dec dword [ebp - 0x24]
jmp 0x5c2d58
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x5c2d69
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c2d46
jmp 0x5c2da6
mov eax, dword [ebp - 0x24]
cdq
idiv dword [ebp - 0x28]
test edx, edx
je 0x5c2da6
mov eax, dword [ebp - 0x24]
add ecx, 0x1e
cdq
idiv ecx
push 3
mov dword [ebp - 0x24], eax
pop ecx
jmp 0x5c2d9c
mov eax, dword [ebp - 0x24]
cdq
idiv dword [ebp - 0x28]
test edx, edx
je 0x5c2d99
inc dword [ebp - 0x24]
jmp 0x5c2d9c
dec dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2d89
push esi
call fcn.005c2592
pop ecx
cmp eax, 0xb26771d8
je 0x5c2dbc
cmp edi, esi
jne 0x5c2ba2
mov esi, dword [esi + 0x18]
mov dword [ebp - 0x24], 0x2441ab
mov eax, dword [ebp - 0x24]
push 3
cdq
pop edi
idiv edi
mov eax, dword [ebp - 0x24]
test edx, edx
je 0x5c2df9
inc eax
add eax, esi
mov dword [ebp - 0x24], eax
jmp 0x5c2de1
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
and eax, 0x8000001f
jns 0x5c2df2
dec eax
or eax, 0xffffffe0
add eax, 1
je 0x5c2dde
jmp 0x5c2eb5
and eax, 0x80000001
jns 0x5c2e07
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c2e25
sub ebx, esi
add ebx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ebx
jmp 0x5c2e16
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cdq
idiv edi
test edx, edx
je 0x5c2e13
jmp 0x5c2eb5
mov eax, dword [ebp - 0x24]
and eax, 0x80000003
jns 0x5c2e36
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x5c2e7e
imul eax, esi, 0xa
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x5c2e52
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x5c2eb5
push 5
pop ecx
mov eax, dword [ebp - 0x24]
cdq
idiv ecx
test edx, edx
je 0x5c2e66
dec dword [ebp - 0x24]
jmp 0x5c2e69
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x5c2e7a
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x5c2e57
jmp 0x5c2eb5
mov eax, dword [ebp - 0x24]
push 5
cdq
pop ebx
idiv ebx
test edx, edx
je 0x5c2eb5
mov eax, dword [ebp - 0x24]
lea ecx, [esi + 0x1e]
cdq
idiv ecx
mov dword [ebp - 0x24], eax
jmp 0x5c2eab
mov eax, dword [ebp - 0x24]
cdq
idiv ebx
test edx, edx
je 0x5c2ea8
inc dword [ebp - 0x24]
jmp 0x5c2eab
dec dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cdq
idiv edi
test edx, edx
je 0x5c2e99
mov ecx, dword [ebp - 4]
mov eax, esi
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005c5345
leave
ret