Function at 0x527c74
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
lea eax, [eax + 0x2153]
sub eax, 0x2153
jmp 0x527c8a
jb 0x527c98
pushf
cmp esi, dword [esp]
popf
jmp 0x527c95
jae 0x527c98
mov ecx, 0x50fc3d83
push eax
add byte [ecx], al
cmp dword [0x5050fc], 1
jne 0x527e0b
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0050e181
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
jae 0x527ce7
push ecx
pop ecx
or eax, 0
xchg ebx, esi
xchg ebx, esi
js 0x527d19
pushf
push edi
add edi, 0x5bfd
ror edi, 0x16
pop edi
jns 0x527d01
shr esp, 0
popf
lea esi, [esi + 0x52dc]
lea esi, [esi - 0x52dc]
xchg edi, edi
jbe 0x527d16
jns 0x527d19
mov esp, 0x80f04d8a
jmp 0xf0a00523
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
lea ebx, [ebx + 0x6aeb]
lea ebx, [ebx - 0x6aeb]
ror esi, 0
call 0x527d8d
lea esp, [esp + 4]
and esp, 0xffffffff
je 0x527da0
jae 0x527d98
jae 0x527d9a
jns 0x527d9c
jne 0x527da0
call 0xc49000f7
dec edi
push eax
add byte [eax], al
cmp dword [0x504fc4], 0
jne 0x527db1
or eax, 0xffffffff
jmp 0x528030
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x504fc4]
push ecx
call fcn.00510bb9
mov dword [ebp - 4], eax
not edi
not edi
sub ecx, 0
je 0x527dcd
or esp, 0
js 0x527de1
pushf
xchg edi, ebx
xchg edi, ebx
popf
jmp 0x527ddc
jbe 0x527dde
jns 0x527de1
ljmp 0x558d:0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0050e181
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x527e01
mov eax, dword [ebp - 4]
mov dword [0x5050fc], eax
jmp 0x527e09
or eax, 0xffffffff
jmp 0x528030
jmp 0x527e14
mov ecx, dword [0x5050fc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
cmp esi, 0x6a7b
add ebx, 0
call 0x527e28
lea esp, [esp + 4]
dec edx
inc edx
jne 0x527e40
pushf
test dword [esp], ecx
popf
xchg edx, edx
xchg edx, eax
xchg edx, eax
jmp 0x527e3d
je 0x527e40
or dword [ebx - 0x17af13bb], 0xffffd9c1
mov eax, dword [ebp - 0x14]
push eax
call fcn.0052580a
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0050e181
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
xchg esp, esp
jnp 0x527ebc
pushf
call 0x527e97
lea esp, [esp + 4]
test edx, edi
add edx, 0x5315
sub edx, 0x5315
lea edx, [edx]
popf
lea esi, [esi + 0x159b]
lea esi, [esi - 0x159b]
jp 0x527ebc
mov esp, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
cmp edi, esi
lea ecx, [ecx]
ror ecx, 0x13
ror ecx, 0xd
jnp 0x527f2e
lea eax, [eax]
jp 0x527f2e
xor eax, 0x3d833d03
les ecx, [edi + 0x50]
add byte [eax], al
cmp dword [0x504fc4], 0
je 0x527f71
jne 0x527f39
shl esp, 0
jnp 0x527f5e
pushf
xor edi, dword [esp + 4]
xor edi, dword [esp + 4]
xor eax, dword [esp + 0x10]
xor eax, dword [esp + 0x10]
and ecx, 0xffffffff
popf
jp 0x527f57
mov edx, edx
jns 0x527f5b
jp 0x527f5e
mov edx, 0x51f04d8d
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x504fc4]
push edx
call fcn.00510bb9
mov dword [ebp - 4], eax
and esp, 0xffffffff
jno 0x527f76
jne 0x527f78
mov edx, edx
jo 0x527f8b
pushf
add ecx, dword [esp]
sub ecx, dword [esp]
popf
jl 0x527f88
jno 0x527f8b
call 0xbc8bf9
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0050e181
add esp, 0xc
xor edx, dword [esp]
xor edx, dword [esp]
jno 0x527fa3
or ebx, ebx
xchg ebx, ebx
jno 0x527fb9
pushf
neg eax
neg eax
popf
nop
jb 0x527fb4
jae 0x527fb6
jo 0x527fb9
call 0x14efd40
cmp dword [ebp - 4], 0
je 0x527ff8
add ecx, 0x35a4
sub ecx, 0x35a4
jns 0x527fcd
jo 0x527fcf
cmp ebx, dword [esp + 8]
jne 0x527fec
pushf
cld
add edx, 0
rol edx, 6
ror edx, 6
popf
lea esp, [esp]
nop
jo 0x527fe9
je 0x527fec
mov ebx, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.0052580a
add esp, 4
sub edx, 0
stc
jae 0x527ffe
nop
js 0x528011
pushf
and esp, 0xffffffff
popf
jnp 0x52800a
jb 0x52800c
jmp 0x52800e
jns 0x528011
mov ebp, 0x5220558b
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c
sub dword [ebp + 0x5d], esp
mov edi, 0xc77a9f0e
xor ch, al
call 0xb1f8a4e0
xchg edi, eax
mov dl, 0x89
stosd dword es:[edi], eax
invalid