Function at 0x528b0a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
int1
jle 0x528a80
jg 0x528a80
in eax, 0x8a
dec ebp
sub cl, 3
mov cl, byte [ebp - 0xd]
sub cl, 3
mov byte [ebp - 0xd], cl
cmp dword [esp + 8], 0x1740375
mov dl, byte [ebp - 0x18]
sub dl, 5
mov byte [ebp - 0x18], dl
jbe 0x528a9f
ja 0x528a9f
mov dh, 0x8a
inc ebp
hlt
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
cmp dword [esp + 4], 0x1770376
mov cl, byte [ebp - 0xe]
sub cl, 4
mov byte [ebp - 0xe], cl
cmp dword [esp + 4], 0x1730372
mov dl, byte [ebp - 0x11]
sub dl, 4
mov byte [ebp - 0x11], dl
cmp dword [esp + 4], 0x1730372
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.005219b8
mov dword [ebp - 4], eax
push 0x10
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.0052576e
add esp, 0xc
jne 0x528af6
je 0x528af6
jns 0x528a7a
cmp dword [ebp - 4], 0
jne 0x528b00
jge 0x528af5
add byte [ebp + 4], dh
xor eax, eax
jmp 0x528b03
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
jo 0x528b18
jno 0x528b18
call 0x9286c89f
push ecx
add byte [ecx], al
cmp dword [0x519234], 1
jne 0x528c22
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0052576e
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
jb 0x528b6a
imul dword [edx - 0x3a]
inc ebp
invalid
jae 0x528b6a
jmp 0x528af5
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
jb 0x528bcf
jae 0x528bcf
jmp 0x528b53
cmp dword [0x51aa80], 0
jne 0x528be0
or eax, 0xffffffff
jmp 0x528d61
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x51aa80]
push ecx
call fcn.005219b8
mov dword [ebp - 4], eax
jne 0x528bf8
je 0x528bf8
jbe 0x528c63
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0052576e
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x528c18
or al, 0x6a
add byte [ebp - 0x17ad0fab], cl
imul ecx, ebx, 0xc483ffff
or al, 0x83
jge 0x528c07
add byte [edx + ecx - 0x75], dh
inc ebp
cld
mov eax, dword [ebp - 4]
mov dword [0x519234], eax
jmp 0x528c20
xor al, 0x92
push ecx
add bl, ch
or byte [ebx + 0x41e9ffc8], al
add dword [eax], eax
add bl, ch
or dword [ebx + 0x5192340d], ecx
add byte [ecx + 0x558bfc4d], cl
cld
or eax, 0xffffffff
jmp 0x528d61
jmp 0x528c2b
mov ecx, dword [0x519234]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
jb 0x528c36
jae 0x528c36
and byte [ebx - 0x17af13bb], cl
mov dword [0x83000002], eax
les eax, [edx + ebp*2]
or al, 0x6a
add byte [ebp - 0x17ae0fb3], cl
pop ds
retf
mov eax, dword [ebp - 0x14]
push eax
call fcn.00528ee2
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0052576e
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
inc ebp
test byte [edi - 0x3a], 0x45
sti
add dh, al
inc ebp
mov byte [ebp - 9], 0x6a
inc ebp
imul dword [edx - 0x3a]
inc ebp
invalid
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
jb 0x528c87
jae 0x528c87
jmp 0x528c12
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jb 0x528ceb
jae 0x528ceb
jmp 0x528c6f
cmp dword [0x51aa80], 0
je 0x528d0c
jb 0x528cf9
jae 0x528cf9
add eax, 0x51f04d8d
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x51aa80]
push edx
call fcn.005219b8
mov dword [ebp - 4], eax
jne 0x528d11
je 0x528d11
jg 0x528d7c
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0052576e
add esp, 0xc
jb 0x528d26
or al, 0x6a
add byte [ebp - 0x17af0fbb], cl
push eax
retf 0xffff
jae 0x528d26
or al, 0x83
jge 0x528d25
cmp dword [ebp - 4], 0
je 0x528d3d
add byte [ecx + edx + 0x72], dh
add esi, dword [ebx + 1]
jb 0x528d31
jae 0x528d31
adc byte [ebx - 0x17ae03b3], cl
test al, 1
add byte [eax], al
mov ecx, dword [ebp - 4]
push ecx
call fcn.00528ee2
add esp, 4
jb 0x528d42
jae 0x528d42
call 0x5272e2d1
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c
add byte [eax], al
jmp 0x528d89
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp + 0x10]
jge 0x528de1
cmp dword [ebp - 4], 0
je 0x528da2
mov edx, dword [ebp + 8]
add edx, dword [ebp - 8]
mov byte [edx], 0
jmp 0x528d80
mov eax, dword [ebp + 0xc]
add eax, dword [ebp - 8]
movsx ecx, byte [eax]
cmp ecx, 0x2e
je 0x528dcf
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 8]
movsx eax, byte [edx]
test eax, eax
je 0x528dcf
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
mov edx, dword [ebp + 0xc]
add edx, dword [ebp - 8]
mov al, byte [edx]
mov byte [ecx], al
jmp 0x528ddf
mov dword [ebp - 4], 1
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 8]
mov byte [ecx], 0
jmp 0x528d80
mov eax, dword [ebp + 8]
mov esp, ebp
pop ebp
ret