Function at 0x5148c1
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push esi
sub esi, 0x2b2b
call 0x51486c
add byte [eax + 0x4e], dl
dec ebp
cmp eax, 0x47474a4c
add esp, 4
pop esi
push eax
push edi
add esp, 4
sub eax, 0x1943
sub eax, 0xddbb
jmp 0x514888
pop eax
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x5148d1
push edi
xor edi, 0xdd37
pop edi
push esi
push edi
add esp, 4
jmp 0x5148ac
add esi, 0xb3a0
call 0x5148c1
add byte [ebp + 0x3e], al
inc edi
dec edx
dec edi
inc esp
cmp eax, dword [edx + 0x3c]
add esp, 4
pop esi
push ebx
jmp 0x5148cb
pop ebx
jmp 0x514aff
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push eax
add eax, 0x14221
pop eax
push esi
push edi
add esp, 4
sub esi, 0xf036
pop esi
push edi
push edx
add esp, 4
and edi, 0x17b01
jmp 0x51490c
pop edi
push eax
push ecx
add esp, 4
add eax, 0x9531
pop eax
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x514980
push edx
push ebx
add esp, 4
and edx, 0x10320
cmp dword [ebp - 0xc10], 0
jle 0x514aa5
push esi
call 0x51499d
add byte [edx], bh
dec ebp
xor esi, dword ss:[ebx]
push eax
inc ecx
inc esi
add esp, 4
jmp 0x5149a6
pop esi
push ecx
push eax
add esp, 4
or ecx, 0x10a28
sub ecx, 0x5b95
add ecx, 0x5fd0
pop ecx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x514a41
push ebx
and ebx, 0x3b04
add ebx, 0x16e1f
or ebx, 0x5012
pop ebx
push edx
push esi
add esp, 4
call 0x5149fd
add byte [ecx + 0x38], cl
dec edi
cmp ecx, dword [edx + 0x50]
dec ecx
inc esi
cmp byte [ebx - 0x3d7efb3c], al
adc edi, dword [esi + 1]
add byte [edx - 0x75], bl
test dword [eax + 0xffffff5], esp
mov dh, 8
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x514a29
mov dword [ebp - 0x14cc], 1
jmp 0x514a33
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x514aa5
push ecx
push esi
add esp, 4
jmp 0x514a4b
and ecx, 0x164a3
xor ecx, 0x10d5a
and ecx, 0xc839
pop ecx
push ebx
call 0x514a6f
add byte [esi], dh
dec edi
inc ecx
cmp eax, 0x3b474b49
dec ecx
inc esp
add esp, 4
pop ebx
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x514980
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x514afa
push ecx
push esi
add esp, 4
and ecx, 0x62dd
xor ecx, 0xfb2b
add ecx, 0x2fcc
pop ecx
push eax
add eax, 0xa98f
or eax, 0xb292
or eax, 0xacac
add eax, 0xb8d1
pop eax
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x514b3b
jmp 0x514848
push ecx
xor ecx, 0x1bae
pop ecx
push edi
push ecx
add esp, 4
and edi, 0x60cd
add edi, 0xc426
pop edi
push eax
push eax
add esp, 4
jmp 0x514b23
jmp 0x514b2a
add eax, 0xaa62
pop eax
mov dword [ebp - 0xa5c], 0
push ecx
push edx
add esp, 4
sub ecx, 0x11fd0
pop ecx
push eax
push ecx
add esp, 4
and eax, 0x170f
xor eax, 0xec5c
or eax, 0x14e4f
pop eax
push ebx
xor ebx, 0x525b
and ebx, 0x76c1
pop ebx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ecx
call 0x514bd1
add byte [edi + 0x3e], cl
dec ecx
cmp eax, 0x4c37383a
inc esi
add esp, 4
xor ecx, 0xacb3
call 0x514be7
add byte [ebx], bh
cmp esi, dword [0x503e4044]
add esp, 4
pop ecx
push edx
or edx, 0x1791e
pop edx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push esi
add esi, 0x453a
add esi, 0x7e05
or esi, 0x11614
pop esi
push ebx
push eax
add esp, 4
or ebx, 0x819b
add ebx, 0x10d35
add ebx, 0xa67f
jmp 0x514cbd
pop ebx
push eax
jmp 0x514cc5
pop eax
push edx
push eax
add esp, 4
xor edx, 0x13e90
add edx, 0x7efa
pop edx
push eax
push edi
add esp, 4
xor eax, 0xc087
pop eax
push ecx
push edi
add esp, 4
sub ecx, 0x8323
pop ecx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push esi
sub esi, 0x7824
pop esi
push ecx
push edi
add esp, 4
or ecx, 0xfe18
sub ecx, 0xea64
jmp 0x514d38
jmp 0x514d3d
pop ecx
push edx
push esi
add esp, 4
add edx, 0xeba8
pop edx
cmp dword [ebp - 0x14d4], 0
jne 0x514d62
mov dword [ebp - 0x2e0], 0
jmp 0x51501e
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push ebx
push edx
add esp, 4
add ebx, 0x50ae
sub ebx, 0x78cf
pop ebx
push ecx
push ebx
add esp, 4
xor ecx, 0xe9a9
or ecx, 0x6316
pop ecx
push esi
or esi, 0x12f55
add esi, 0x77a9
pop esi
cmp dword [ebp - 0xc20], 0
jne 0x514dbe
mov dword [ebp - 0x2e0], 0
jmp 0x51501e
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push ebx
push ebx
add esp, 4
and ebx, 0x8173
sub ebx, 0x13fd8
xor ebx, 0x1819c
pop ebx
push eax
call 0x514df2
add byte [ebx], bh
dec eax
xor al, 0x3f
cmp edi, dword [0x83504e3d]
les eax, [ecx + eax*4]
shr bh, 0x66
add dword [eax], eax
pop eax
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push edi
push eax
add esp, 4
xor edi, 0x1861e
pop edi
push eax
push edx
add esp, 4
add eax, 0xf2bc
and eax, 0x13451
pop eax
push edx
add edx, 0x6ac1
add edx, 0x1b3f
or edx, 0x64a4
pop edx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
push esi
or esi, 0x1474d
sub esi, 0x10ac7
add esi, 0x1627a
sub esi, 0x17391
pop esi
push ebx
push eax
add esp, 4
add ebx, 0xa885
add ebx, 0x1616e
add ebx, 0x4eb8
pop ebx
cmp dword [ebp - 0x2e0], 0
jne 0x515969
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
test dword [edx - 0x17], eax
invalid
invalid
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push ecx
push ecx
add esp, 4
xor ecx, 0x151d6
pop ecx
push edi
xor edi, 0x2e3d
sub edi, 0xd5c7
pop edi
push edi
push esi
add esp, 4
add edi, 0x258b
or edi, 0xeeac
xor edi, 0x7e16
pop edi
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push esi
push edi
add esp, 4
call 0x5151be
add byte [edi + 0x48], cl
cmp eax, 0x36374e35
inc edx
inc edi
add esp, 4
and esi, 0xd177
pop esi
push edx
sub edx, 0x8f34
xor edx, 0x142d4
and edx, 0x47b6
pop edx
cmp dword [ebp - 0x14dc], 0
jne 0x5151f4
mov dword [ebp - 0x6ec], 0
jmp 0x5154b0
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push edx
sub edx, 0x94e4
call 0x51521b
add byte [esi + 0x37], al
dec ebp
dec esi
cmp eax, dword [ebx + 0x4f]
dec edi
add esp, 4
add edx, 0xf3a6
call 0x515234
add byte [ebp + 0x42], cl
inc ecx
dec esp
xor eax, 0x36384449
dec esi
add esp, 4
pop edx
cmp dword [ebp - 0xc2c], 0
jne 0x515250
mov dword [ebp - 0x6ec], 0
jmp 0x5154b0
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push esi
sub esi, 0x480a
call 0x515273
add byte [ecx + edi], bh
cmp dword [0x3e3b474a], esi
xor al, 0x35
add esp, 4
and esi, 0xbc10
call 0x51528a
add byte [0x48393550], dh
inc ebx
xor eax, dword ds:[ebx - 0x72a1fb3c]
xchg ebp, eax
xor al, 0xe9
invalid
push ecx
call 0x5154be
add byte [ebp + 0x33], al
inc eax
inc esp
xor dh, byte [edi + 0x5904c483]
push ecx
call 0x5154cf
add byte [ecx + 0x32], cl
cmp al, 0x3e
dec edx
xor eax, 0x5904c483
push eax
jmp 0x5154db
sub eax, 0xade7
pop eax
cmp dword [ebp - 0x6ec], 0
jne 0x51552c
push ecx
push esi
add esp, 4
xor ecx, 0x655b
jmp 0x5154fe
pop ecx
push ecx
push ecx
add esp, 4
add ecx, 0x8080
xor ecx, 0x1d49
and ecx, 0xb822
add ecx, 0x728e
pop ecx
mov dword [ebp - 0x738], 0
jmp 0x516053
push esi
push eax
add esp, 4
xor esi, 0x118cc
add esi, 0x185e1
loope 0x5154c0
add dword [eax], eax
xor esi, 0x18530
pop esi
push esi
sub esi, 0x1bdf
or esi, 0x5d25
or esi, 0x1102
and esi, 0x5be8
pop esi
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
invalid
lea ecx, [eax]
std
invalid