Function at 0x5225cb
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
and esp, 0xffffffff
xor edi, ecx
xor edi, ecx
jne 0x52239b
xchg esp, esp
nop
jo 0x522395
mov esp, esp
je 0x52239b
lcall 0x13, 0xec45c7d2
add byte [eax], al
mov dword [ebp - 0x14], 0x13
mov dword [ebp - 0x18], 0
jmp 0x5223b4
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x522778
neg eax
neg eax
xor edi, dword [esp]
xor edi, dword [esp]
shr esp, 0
ja 0x5223ea
pushf
xor ecx, 0x6733
xor ecx, 0x6733
jge 0x5223dd
je 0x5223df
popf
je 0x5223e3
jge 0x5223e5
jl 0x5223e7
jbe 0x5223ea
ljmp 0xe44d:0x89e84d8b
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 3
ja case.default.0x5223fd
mov edx, dword [ebp - 0x1c]
jmp dword [edx*4 + 0x52279a]
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0050e181
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0
shr esp, 0
cmp edi, eax
nop
jge 0x522443
jp 0x52243e
jge 0x522440
jl 0x522443
xor eax, 0x80f04d8a
jmp 0xf09fac4d
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xa]
sub cl, 1
mov byte [ebp - 0xa], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
jmp case.default.0x5223fd
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0050e181
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0
jl 0x5224b7
rol eax, 5
ror eax, 5
or edx, edx
jno 0x5224cf
mov esp, esp
xchg edi, ecx
xchg edi, ecx
jae 0x5224c9
js 0x5224cb
jo 0x5224cf
mov ecx, 0xf0458ad7
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
jmp case.default.0x5223fd
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0050e181
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x31
mov byte [ebp - 5], 0
jl 0x522552
jnp 0x522554
je 0x522556
jle 0x522558
jbe 0x522567
jno 0x52255c
xchg ebx, ebx
lea ecx, [ecx]
xchg esp, esp
ja 0x522567
mov eax, 0x558ab0dd
invalid
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jmp case.default.0x5223fd
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0050e181
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x33
mov byte [ebp - 5], 0
std
cld
test dword [esp], ebx
xor ecx, dword [esp]
xor ecx, dword [esp]
je 0x52262f
pushf
jge 0x52261c
test ecx, 0x2a63
popf
jns 0x522626
xchg esi, edx
xchg esi, edx
jbe 0x52262c
jne 0x52262f
jmp 0x81427bbd
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
push eax
add eax, 0x36da
ror eax, 0xf
pop eax
jo 0x52269a
jo 0x5226af
pushf
rol ebx, 0x15
rol ebx, 0xb
ror edx, 0
cld
popf
js 0x5226ac
jno 0x5226af
add eax, 0x206a006a
push 0
push 0x20
push 3
push 0
push 1
push 0x80000000
lea ecx, [ebp - 0x10]
push ecx
call fcn.00527c74
mov dword [ebp - 4], eax
clc
shl esp, 0
jle 0x5226ee
pushf
cmp edx, dword [esp]
lea eax, [eax + 0x3289]
sub eax, 0x3289
shl ecx, 0
popf
mov esp, esp
xchg esi, esi
jns 0x5226eb
jg 0x5226ee
add eax, 0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0050e181
add esp, 0xc
push eax
add eax, 0x10ad
ror eax, 3
pop eax
sub esp, 0
cmp edi, dword [esp]
ja 0x52272d
pushf
xor esi, dword [esp + 4]
xor esi, dword [esp + 4]
not eax
not eax
sub esp, 0
add ecx, 0
popf
ja 0x522728
xchg esp, esp
jbe 0x52272d
mov edi, 0xfffc7d83
cmp dword [ebp - 4], 0xffffffff
je 0x522773
jb 0x522735
je 0x522747
pushf
nop
jae 0x52273c
jns 0x52273e
popf
jmp 0x522742
jp 0x522744
jne 0x522747
add eax, 0x50fc458b
mov eax, dword [ebp - 4]
push eax
call fcn.00525206
xchg edx, ecx
xchg edx, ecx
jg 0x52276a
pushf
call fcn.0052275d
jmp 0x5223ab