Function at 0x701c00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
push 0x13
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.007038d9
add esp, 0xc
add esp, 0
ror ecx, 0
test eax, 0x1dfd
xor esp, 0
je 0x701c43
pushf
or esp, 0
clc
cmp esp, 0x3e2c
add edx, 0
popf
xchg esp, esp
lea ebx, [ebx]
mov ecx, ecx
jne 0x701c43
add eax, 0x48e045c6
mov byte [ebp - 0x20], 0x48
mov byte [ebp - 0x1b], 0x65
mov byte [ebp - 0x16], 0x6a
mov byte [ebp - 0x11], 0x6e
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0x1e], 0x75
mov byte [ebp - 0x19], 0x6d
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0xf], 0x42
mov byte [ebp - 0x1d], 0x4e
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x4f
mov byte [ebp - 0xe], 0
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x47
mov byte [ebp - 0x12], 0x62
neg ebx
neg ebx
jb 0x701ca8
pushf
xor edi, dword [esp]
xor edi, dword [esp]
je 0x701c9f
popf
jg 0x701ca3
jbe 0x701ca5
jae 0x701ca8
sub eax, 0x80e04d8a
jmp 0xe0bda4b2
mov cl, byte [ebp - 0x20]
sub cl, 1
mov byte [ebp - 0x20], cl
mov dl, byte [ebp - 0x1b]
sub dl, 1
mov byte [ebp - 0x1b], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0x1f]
sub dl, 1
mov byte [ebp - 0x1f], dl
mov al, byte [ebp - 0x1a]
sub al, 1
mov byte [ebp - 0x1a], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0x1e]
sub al, 1
mov byte [ebp - 0x1e], al
mov cl, byte [ebp - 0x19]
sub cl, 1
mov byte [ebp - 0x19], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0x1d]
sub cl, 1
mov byte [ebp - 0x1d], cl
mov dl, byte [ebp - 0x18]
sub dl, 1
mov byte [ebp - 0x18], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x1c]
sub cl, 1
mov byte [ebp - 0x1c], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
xor edx, dword [esp + 0xc]
xor edx, dword [esp + 0xc]
jge 0x701d4e
jle 0x701d50
js 0x701d5b
mov edi, edi
js 0x701d56
mov esp, esp
jns 0x701d5b
mov esi, 0xf944e8
add byte [ecx + 0x7d83f845], cl
clc
add byte [ebp + 7], dh
call fcn.007116a4
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x701d70
xor eax, eax
jmp 0x702009
neg ebx
neg ebx
cld
cld
jbe 0x701d84
jo 0x701d7a
xchg edx, edi
xchg edx, edi
jmp 0x701d80
ja 0x701d84
mov eax, 0xe04d8daf
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.00702f41
mov dword [ebp - 4], eax
push 0x13
push 0
lea eax, [ebp - 0x20]
push eax
call fcn.007038d9
add esp, 0xc
jp 0x701da6
mov esi, esi
or ecx, 0
jge 0x701dc0
pushf
xchg ecx, ecx
xor esi, 0
test ecx, esi
rol esp, 0
popf
mov eax, eax
jl 0x701dc0
mov eax, 0xfc7d83
cmp dword [ebp - 4], 0
jne 0x701dcd
xor eax, eax
jmp 0x702009
jle 0x701dcf
xchg esp, esp
rol ecx, 0x1e
rol ecx, 2
jg 0x701dd9
jg 0x701de5
jge 0x701ddd
jne 0x701ddf
xchg edx, edx
jle 0x701de5
lcall 0xe851, 0xfc4d8b81
bound edx, qword [ebx]
add al, byte [eax]
mov ecx, dword [ebp - 4]
push ecx
call fcn.00723150
add esp, 4
push 0x13
push 0
lea edx, [ebp - 0x20]
push edx
call fcn.007038d9
add esp, 0xc
xchg ebx, edi
xchg ebx, edi
ja 0x701e0d
jb 0x701e09
jbe 0x701e0d
add eax, 0xe045c684
dec eax
mov byte [ebp - 0x20], 0x48
mov byte [ebp - 0x1b], 0x65
mov byte [ebp - 0x16], 0x6a
mov byte [ebp - 0x11], 0x6e
mov byte [ebp - 0x1f], 0x66
mov byte [ebp - 0x1a], 0x76
mov byte [ebp - 0x14], 0x66
mov byte [ebp - 0x10], 0x66
mov byte [ebp - 0x1e], 0x75
mov byte [ebp - 0x19], 0x6d
mov byte [ebp - 0x15], 0x6d
mov byte [ebp - 0xf], 0x58
mov byte [ebp - 0x1d], 0x4e
mov byte [ebp - 0x18], 0x66
mov byte [ebp - 0x13], 0x4f
mov byte [ebp - 0xe], 0
mov byte [ebp - 0x1c], 0x70
mov byte [ebp - 0x17], 0x47
mov byte [ebp - 0x12], 0x62
xor edx, dword [esp]
xor edx, dword [esp]
rol edx, 0x17
ror edx, 0x17
jne 0x701e67
jb 0x701e81
pushf
nop
ror eax, 0xf
rol eax, 0xf
jb 0x701e74
xchg esp, esp
popf
jp 0x701e7a
jbe 0x701e7c
jp 0x701e7e
jae 0x701e81
mov edx, 0x2ce0458a
add dword [eax + 0x4d8ae045], ecx
in eax, 0x80
jmp 0xe5bda693
mov al, byte [ebp - 0x20]
sub al, 1
mov byte [ebp - 0x20], al
mov cl, byte [ebp - 0x1b]
sub cl, 1
mov byte [ebp - 0x1b], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0x1f]
sub cl, 1
mov byte [ebp - 0x1f], cl
mov dl, byte [ebp - 0x1a]
sub dl, 1
mov byte [ebp - 0x1a], dl
mov al, byte [ebp - 0x15]
sub al, 1
mov byte [ebp - 0x15], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0x1e]
sub dl, 1
mov byte [ebp - 0x1e], dl
mov al, byte [ebp - 0x19]
sub al, 1
mov byte [ebp - 0x19], al
mov cl, byte [ebp - 0x14]
sub cl, 1
mov byte [ebp - 0x14], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0x1d]
sub al, 1
mov byte [ebp - 0x1d], al
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x13]
sub dl, 1
mov byte [ebp - 0x13], dl
mov al, byte [ebp - 0x1c]
sub al, 1
mov byte [ebp - 0x1c], al
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
and edx, 0xffffffff
jle 0x701f2c
jb 0x701f24
jno 0x701f26
jp 0x701f28
jg 0x701f2c
mov esi, 0x583d83fc
mov ch, byte [edi]
add byte [ebp + eax*2 - 0x3f], dh
ret 0xc10b
cmp dword [0x6f8a58], 0
je 0x701f7a
rol edx, 0xb
rol edx, 0x15
ror eax, 0x11
ror eax, 0xf
lea ecx, [ecx + 0x1aec]
lea ecx, [ecx - 0x1aec]
nop
jnp 0x701f67
pushf
xchg edi, ecx
xchg edi, ecx
rol ecx, 2
ror ecx, 2
popf
lea esp, [esp]
lea esp, [esp]
jp 0x701f67
sub eax, 0x50e0458d
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [0x6f8a58]
push ecx
call fcn.00702f41
mov dword [ebp - 0xc], eax
add eax, 0
jp 0x701f7f
test esi, 0x66dd
je 0x701f9d
xchg ebx, esi
xchg ebx, esi
lea esi, [esi + 0x38d4]
lea esi, [esi - 0x38d4]
lea ebx, [ebx]
jne 0x701f9d
ljmp 0x8d00:0x6a136a2e
push 0x13
push 0
lea edx, [ebp - 0x20]
push edx
call fcn.007038d9
add esp, 0xc
jb 0x701faf
push edi
pop edi
js 0x701fbc
ja 0x701fb5
jae 0x701fb7
je 0x701fb9
jns 0x701fbc
jmp 0x1649d43
cmp dword [ebp - 0xc], 0
je 0x701fe2
ja 0x701fc4
dec eax
inc eax
jge 0x701fc8
jnp 0x701fd6
pushf
xor edi, 0
popf
jl 0x701fd3
jp 0x701fd6
mov edi, 0x50f4458b
mov eax, dword [ebp - 0xc]
push eax
call fcn.00723150
add esp, 4
and eax, eax
test ecx, ebx
jns 0x701ffa
pushf
ror eax, 0xc
ror eax, 0x14
popf
jno 0x701ff4
lea esp, [esp]
js 0x701ffa
mov ebp, 0x51104d8b
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc