Function at 0x2005107f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xf
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.200424e9
add esp, 0xc
xor eax, edx
xor eax, edx
mov esp, esp
lea ebx, [ebx]
mov ebx, ebx
ja 0x200510af
jbe 0x200510a6
xchg esp, esp
je 0x200510aa
jle 0x200510ac
jbe 0x200510af
add eax, 0x50e845c6
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], 0x44
mov byte [ebp - 0xe], 0x68
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xd], 0x66
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x11], 0x62
mov byte [ebp - 0xc], 0x73
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6f
mov byte [ebp - 0xb], 0x42
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x62
mov byte [ebp - 0xa], 0
jne 0x200510ed
jae 0x200510f6
mov edi, edi
je 0x200510f3
jb 0x200510f6
mov eax, 0x80e84d8a
jmp 0x8529900
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 0x16]
sub cl, 1
mov byte [ebp - 0x16], cl
mov dl, byte [ebp - 0x11]
sub dl, 1
mov byte [ebp - 0x11], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
rol ebx, 9
ror ebx, 9
clc
xor edi, dword [esp + 0xc]
xor edi, dword [esp + 0xc]
call 0x20051184
add esp, 4
jo 0x200511b0
pushf
xor edx, dword [esp + 0xc]
xor edx, dword [esp + 0xc]
lea ecx, [ecx + 0x1328]
sub ecx, 0x1328
and ebx, ebx
test esi, 0x69f1
popf
jne 0x200511ab
jns 0x200511ad
jno 0x200511b0
sub eax, 0xffff33bd
call 0x20044572
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x200511c5
xor eax, eax
jmp 0x20051411
add esp, 0
jge 0x200511ca
jo 0x200511d1
jno 0x200511ce
jno 0x200511d1
call 0x70ed5762
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.20039c9c
mov dword [ebp - 0x1c], eax
push 0xf
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.200424e9
add esp, 0xc
jb 0x200511f3
jl 0x20051204
pushf
jnp 0x200511f9
popf
jns 0x200511fd
jl 0x200511ff
jge 0x20051201
jge 0x20051204
mov eax, 0xe47d83
cmp dword [ebp - 0x1c], 0
jne 0x20051211
xor eax, eax
jmp 0x20051411
add edi, 0
add ebx, 0x4ee8
sub ebx, 0x4ee8
dec eax
inc eax
ja 0x20051229
mov eax, eax
jbe 0x20051229
call 0x70e957b8
mov eax, dword [ebp - 0x1c]
push eax
call fcn.200474bb
add esp, 4
push 0xf
push 0
lea ecx, [ebp - 0x18]
push ecx
call fcn.200424e9
add esp, 0xc
nop
shr esp, 0
lea eax, [eax + 0x7905]
sub eax, 0x7905
ror edx, 0
jb 0x20051264
jmp 0x2005125b
mov esp, esp
jnp 0x2005125f
jmp 0x20051261
jae 0x20051264
lcall 0x45c6, 0x50e845c6
in eax, dx
inc esp
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], 0x44
mov byte [ebp - 0xe], 0x68
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xd], 0x66
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x11], 0x62
mov byte [ebp - 0xc], 0x73
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6f
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x62
mov byte [ebp - 0xa], 0
add esi, 0x641
sub esi, 0x641
jnp 0x200512c0
jne 0x200512b0
lea ecx, [ecx + 0x6bc6]
lea ecx, [ecx - 0x6bc6]
jp 0x200512c0
mov esp, 0xe8558a79
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xd]
sub cl, 1
mov byte [ebp - 0xd], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
jge 0x2005133b
nop
jge 0x2005134a
jg 0x20051340
mov esp, esp
jae 0x20051344
xchg esi, eax
xchg esi, eax
jl 0x2005134a
mov ecx, 0xfc7d8348
add byte [ebx + edi + 0x33], dh
je 0x20051377
cmp dword [ebp - 4], 0
je 0x2005138b
xor esi, dword [esp + 0x10]
xor esi, dword [esp + 0x10]
xchg esp, esp
xor esp, 0
adc byte [ebx], dh
je 0x2005137b
adc byte [edi + 0xf483e4], al
jl 0x2005137b
pushf
lea eax, [eax + 0x6b9]
lea eax, [eax - 0x6b9]
ror esp, 0
popf
jmp 0x20051374
mov esi, esi
ja 0x20051378
add byte [ebp + 1], bh
jge 0x2005137b
call 0x71ed610c
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.20039c9c
mov dword [ebp - 8], eax
nop
rol eax, 0
jge 0x20051391
jmp 0x20051393
jb 0x200513a0
pushf
xchg esp, esp
popf
lea esi, [esi]
jae 0x200513a0
mov ebp, 0x6a0f6a
push 0xf
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.200424e9
add esp, 0xc
and edx, 0xffffffff
add ecx, dword [esp]
sub ecx, dword [esp]
jne 0x200513c2
lea eax, [eax]
jne 0x200513bf
je 0x200513c2
add dword [ebx + 0x7400f87d], 0x24043b1c
cmp dword [ebp - 8], 0
je 0x200513e4
cmp eax, dword [esp]
jp 0x200513cd
test dword [esp], edx
jl 0x200513d8
mov esp, esp
jge 0x200513d8
jmp 0x18529f94
mov ecx, dword [ebp - 8]
push ecx
call fcn.200474bb
add esp, 4
not edx
not edx
rol esp, 0
jns 0x20051402
lea edi, [edi + 0x22a9]
lea edi, [edi - 0x22a9]
jle 0x200513fb
ja 0x200513fd
js 0x20051402
add eax, 0x558bd1a0
adc byte [edx - 0x75], dl
inc ebp
or al, 0x50
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 0x1c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc