Function at 0xb17c80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
push 0xe
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.00b026c0
add esp, 0xc
jp 0xb17c9b
xor ecx, edi
xor ecx, edi
jae 0xb17ca1
jnp 0xb17cb3
pushf
rol edx, 4
ror edx, 4
clc
popf
jo 0xb17cb0
jp 0xb17cb3
lcall 0x45c6, 0x75b066b1
invalid
mov cl, 0x66
mov al, 0x75
mov byte [ebp - 0x10], 0x7a
mov byte [ebp - 0x14], 0x48
mov byte [ebp - 0x13], cl
mov byte [ebp - 0xf], 0x74
mov byte [ebp - 0xb], 0x4a
mov byte [ebp - 0xc], 0x6e
mov byte [ebp - 9], 0x67
mov byte [ebp - 0xe], al
mov byte [ebp - 7], 0
mov byte [ebp - 0x12], al
mov byte [ebp - 8], 0x70
mov byte [ebp - 0x11], 0x54
mov byte [ebp - 0xd], cl
mov byte [ebp - 0xa], 0x6f
or eax, 0
jns 0xb17cf0
jo 0xb17cff
pushf
xchg esp, esp
popf
jbe 0xb17cfa
xchg esp, esp
jno 0xb17cff
or dword [edx + 0x4d8af855], 0xed458af1
mov dl, byte [ebp - 8]
mov cl, byte [ebp - 0xf]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0x11]
dec dl
dec cl
mov byte [ebp - 8], dl
mov dl, byte [ebp - 0xd]
dec al
mov byte [ebp - 0xf], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0xe]
dec dl
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 0xa]
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0xc]
dec cl
dec al
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0x14]
dec bl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0xa], bl
mov bl, byte [ebp - 9]
mov byte [ebp - 0xc], dl
mov dl, byte [ebp - 0x12]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 0x14], cl
mov byte [ebp - 0xb], al
mov byte [ebp - 9], bl
mov byte [ebp - 0x12], dl
or esp, 0
and esp, 0xffffffff
mov ebx, ebx
jns 0xb17d84
pushf
test ecx, edi
ror esp, 0
rol ebx, 0
popf
jge 0xb17d7f
jae 0xb17d81
js 0xb17d84
mov esp, 0xff10a7e8
inc dword [ebp - 0x407bf040]
add byte [eax], al
add byte [edi - 0x7c00780a], al
loop 0xb17d97
call fcn.00b08e30
test eax, eax
je 0xb17e50
xchg esi, esi
xchg edi, edi
and edx, 0xffffffff
inc dword [edi - 0x78f08a1c]
inc byte [edi - 0x781b7802]
in al, 0x77
add byte [ebx + eax - 0x41], dh
lodsd eax, dword [esi]
invalid
xchg esp, esp
jne 0xb17dab
xchg esi, edi
xchg esi, edi
xchg esp, esp
xchg esp, esp
ja 0xb17da6
je 0xb17dab
mov edi, 0x4d8d8fad
in al, dx
lea ecx, [ebp - 0x14]
push ecx
push eax
call fcn.00afefe0
push 0xe
lea edx, [ebp - 0x14]
mov esi, eax
push 0
push edx
mov dword [ebp - 4], esi
call fcn.00b026c0
add esp, 0xc
and ebx, ebx
jp 0xb17de5
lea esp, [esp]
lea edi, [edi + 0x61fe]
lea edi, [edi - 0x61fe]
jne 0xb17ddf
mov ecx, ecx
jnp 0xb17de5
xor eax, 0x74f685d5
cmp edi, dword [si + 0x24]
or byte [ebx + 0x97200cc], al
test esi, esi
je 0xb17e50
cmp edi, dword [esp + 8]
or esp, 0
jb 0xb17dfb
jp 0xb17df4
je 0xb17df6
jg 0xb17df8
jae 0xb17dfb
mov edi, 0x36bfe856
add byte [eax], al
push esi
call fcn.00b1b4c0
add esp, 4
lea esi, [esi]
add esi, 0x6865
sub esi, 0x6865
xor ebx, 0x7a21
xor ebx, 0x7a21
jne 0xb17e49
pushf
lea edi, [edi + 0xae9]
sub edi, 0xae9
xchg edx, ebx
xchg edx, ebx
jp 0xb17e34
popf
jno 0xb17e38
lea edx, [edx + 0x70b2]
lea edx, [edx - 0x70b2]
js 0xb17e46
je 0xb17e49
mov ecx, 0x5008458b
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4