Function at 0x558998
Capabilities:
Contain obfuscated stackstrings

Disassembly:
ja 0x74935b
mov ecx, dword [0x4e18ac]
cmp byte [ecx], 0xe9
jmp 0x73afcc
call 0x58793c
mov eax, dword [ebp - 0x7c]
rcl cx, cl
btc dx, di
movzx cx, cl
mov edx, dword [ebp - 0x78]
and esi, 0x47db344b
lea esi, [edx + eax]
mov ecx, dword [0x4e1884]
test bp, 0x4b65
cmp byte [ecx], 0xe9
jne 0x74935b
mov edx, dword [ecx + 1]
lea ecx, [edx + ecx + 5]
jmp 0x6e38bd
push 0xfbcd3256
call fcn.0077d404
push ecx
call fcn.004465e0
mov edi, eax
cmovl dx, dx
xchg dh, dh
mov byte [ebp - 0x54], 0x44
not dl
mov byte [ebp - 0x53], 0x62
lahf
movsx edx, sp
xchg al, al
mov byte [ebp - 0x52], 0x67
movsx dx, cl
mov byte [ebp - 0x51], 0x55
seto dh
xchg dx, ax
mov byte [ebp - 0x50], 0x69
mov byte [ebp - 0x4f], 0x52
cwde
mov byte [ebp - 0x4e], bl
cwde
mov byte [ebp - 0x4d], 0x6d
bswap dx
cbw
mov byte [ebp - 0x4c], 0x6f
mov byte [ebp - 0x4b], 0x74
mov byte [ebp - 0x4a], bl
movzx ax, dl
cmovp eax, ecx
mov ax, 0x3e55
mov byte [ebp - 0x49], 0x42
rdtsc
mov byte [ebp - 0x48], 0x72
sets ah
not al
mov byte [ebp - 0x47], bl
bswap ax
movzx edx, di
mov byte [ebp - 0x46], 0x61
cbw
bswap edx
mov byte [ebp - 0x45], 0x6b
cdq
mov byte [ebp - 0x44], 0x69
cwd
mov byte [ebp - 0x43], 0x6e
setne al
not dh
lahf
mov byte [ebp - 0x42], 0
xchg ah, dh
lea edx, [ebp - 0x54]
push edx
jmp 0x7e27ed
jb 0x74935b
cmp ecx, esi
ja 0x74935b
mov ecx, dword [0x4e189c]
cmp byte [ecx], 0xe9
jmp 0x64c5eb
jne 0x750038
mov ecx, dword [edx + 1]
jmp 0x624867
call fcn.004465e0
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x68], 0x4c
setnp cl
cmovne edx, esp
mov byte [ebp - 0x67], 0x64
not ecx
setb al
mov byte [ebp - 0x66], 0x72
setnp dh
mov byte [ebp - 0x65], 0x53
not al
mov byte [ebp - 0x64], 0x68
not cl
mov byte [ebp - 0x63], 0x75
cwd
jmp 0x70958f
call ebx
push eax
jmp 0x78e055
jne 0x74935b
mov ecx, dword [ebp - 0x70]
mov dl, byte [ebp - 0x24]
cmp dl, byte [ecx]
jmp 0x61e8d0
jne 0x74935b
sub eax, eax
not ch
mov cx, si
mov dword [ebp - 0x7c], eax
not cx
movzx ecx, si
mov dword [ebp - 0x78], eax
not ch
mov dword [ebp - 0x74], eax
xchg cl, ch
push 0xc
lea ecx, [ebp - 0x7c]
jmp 0x648cc5
mov dword [ebp - 4], 0xfffffffe
movsx esi, cx
shld edi, edi, 0xb4
xor esi, 0x28b27ff1
xor eax, eax
and bh, 0xba
mov ecx, dword [ebp - 0x10]
btc ebx, 0xf0
mov dword fs:[0], ecx
sbb bh, al
cmp bl, 0xf6
pop ecx
pop edi
pop esi
pop ebx
sbb cl, 0x8b
mov ecx, dword [ebp - 0x1c]
clc
test esp, 0x2a826b9f
test eax, ebp
xor ecx, ebp
jmp 0x64736e
mov dword [ebp - 0x23], ecx
jmp 0x7accaa
jne 0x708cf4
mov cl, byte [ebp - 0x20]
cmp cl, byte [edx + 4]
jmp 0x708cee
call fcn.0042d5e7
mov esp, ebp
mov ebp, 0x5a182b8c
not ebp
pop ebp
jmp 0x73b004
push ecx
push eax
jmp 0x73e374
jne 0x74935b
mov edx, dword [ecx + 1]
stc
jmp 0x7737dc
push edx
call fcn.004465e0
mov esi, eax
clc
test ebx, eax
cmp esp, edi
mov byte [ebp - 0x69], 0xc3
stc
cmp byte [edi], 0xc3
jmp 0x77f6cb
cmp ecx, eax
jmp 0x5fb048
je 0x74de07
lea eax, [ebp - 0x24]
xchg ecx, ecx
movzx cx, dh
movzx ecx, bx
push eax
cmovs ecx, ebp
mov ecx, 5
jmp 0x74ddfe
mov byte [ebp - 0x62], 0x74
movsx ecx, bp
mov ch, 0xf9
mov byte [ebp - 0x61], 0x64
not ecx
bswap ecx
mov byte [ebp - 0x60], 0x6f
mov byte [ebp - 0x5f], 0x77
cmovnp edx, ebx
mov byte [ebp - 0x5e], 0x6e
mov byte [ebp - 0x5d], 0x50
mov byte [ebp - 0x5c], 0x72
bswap ecx
not al
mov byte [ebp - 0x5b], 0x6f
movzx dx, bl
mov byte [ebp - 0x5a], 0x63
cmovne dx, bp
movsx ecx, dx
mov byte [ebp - 0x59], bl
cwd
bswap edx
mov ch, ch
mov al, 0x73
bswap edx
movzx ecx, sp
not dx
mov byte [ebp - 0x58], al
cdq
mov byte [ebp - 0x57], al
mov byte [ebp - 0x56], 0
lea ecx, [ebp - 0x68]
mov dx, 0x5822
movzx edx, ax
movsx dx, bl
push ecx
lea edx, [ebp - 0x30]
jmp 0x672778
ja 0x74935b
mov ecx, dword [0x4e18a4]
cmc
cmp byte [ecx], 0xe9
jmp 0x739b5e
jb 0x74935b
cmp ecx, esi
jmp 0x70fa41
jne 0x74935b
mov edx, dword [ecx + 1]
cmp dx, bp
lea ecx, [edx + ecx + 5]
jmp 0x7bfa2e
jne 0x74935b
mov edx, dword [ecx + 1]
test ah, 0xe1
cmp ecx, ebp
lea ecx, [edx + ecx + 5]
cmc
jmp 0x416ce1
ret 4
call 0x688750
push eax
jmp 0x81539b
push 0
jmp 0x610f1b
call fcn.0040fbb0
lea esp, [esp + 4]
mov ebx, dword [0x4a6348]
cmc
jmp 0x78fe1b
sub esi, edx
ror ax, cl
or ax, 0x1cde
sub esi, 5
sub eax, 0x6c430e7f
mov dword [ebp - 0x23], esi
or ah, 0x22
stc
mov eax, dword [edx]
cmp eax, dword [ebp - 0x24]
jmp 0x62cadd
lea ecx, [edx + ecx + 5]
cmp ecx, eax
jmp 0x72ff94
je 0x77f6f7
lea eax, [ebp - 0x69]
movsx ecx, sp
push eax
mov ecx, 0x4a443ce7
cwd
sete dl
mov ecx, 1
mov edx, edi
call fcn.0040fbb0
lea esp, [esp + 4]
rol edx, 0x53
mov edx, esi
mov byte [ebp - 0x24], 0xe9
neg dx
dec edx
mov byte [ebp - 0x23], 0
cmp edi, edi
and dh, 0xa8
xor dh, 0xbb
mov byte [ebp - 0x22], 0
sub dh, 0x2c
xor dx, cx
mov byte [ebp - 0x21], 0
mov dx, 0xd96
mov byte [ebp - 0x20], 0
bt dx, 0x2c
adc dh, 0x2d
mov edx, dword [ebp - 0x70]
cmp byte [edx], 0xe9
jmp 0x60e09b
call dword [0x4a634c]
jmp 0x624786
lea esp, [esp]
cmp byte [edi], 0xc3
jmp 0x613ab9
jmp 0x750050
cmp ecx, eax
jb 0x74935b
cmp ecx, esi
jmp 0x53dd4a
lea eax, [ebp - 0x30]
jmp 0x7e8dd4
push eax
jmp 0x6104ec
call ebx
push eax
jmp 0x548e78