Function at 0x5175df
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xd
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.00506175
add esp, 0xc
cmp edi, 0x46a0
add esi, 0x1005
sub esi, 0x1005
jg 0x517619
pushf
inc edi
dec edi
xchg esp, esp
popf
jae 0x517616
jle 0x517619
mov ebp, 0x44e845c6
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x15], 0x62
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xf], 0x66
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x14], 0x75
mov byte [ebp - 0x11], 0x76
mov byte [ebp - 0xe], 0x79
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0x10], 0x75
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0xc], 0
test dword [esp], ecx
jae 0x517652
test ebx, 0x252c
ja 0x51766f
pushf
lea ecx, [ecx + 0x3dec]
sub ecx, 0x3dec
popf
xchg edi, eax
xchg edi, eax
jbe 0x51766f
mov ecx, 0x80e84d8a
jmp 0xe89efe79
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
and esp, 0xffffffff
xor ebx, 0
cmp edx, eax
jns 0x5176ea
lea esp, [esp]
jp 0x5176e6
nop
js 0x5176ea
mov ebp, 0xfeeab5e8
dec dword [ecx + 0x7d83f845]
clc
add byte [ebp + 7], dh
call fcn.005061a4
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x5176ff
xor eax, eax
jmp 0x51792f
jno 0x517701
lea ecx, [ecx + 0xf81]
lea ecx, [ecx - 0xf81]
ja 0x51771c
mov esp, esp
jns 0x517713
lea edi, [edi]
xchg ecx, ebx
xchg ecx, ebx
jbe 0x51771c
mov esp, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.004ecdaf
mov dword [ebp - 4], eax
push 0xd
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.00506175
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x517749
xor eax, eax
jmp 0x51792f
std
cld
jl 0x517758
pushf
je 0x517751
popf
jg 0x517755
jge 0x517758
jmp 0x524dc4e7
mov ecx, dword [ebp - 4]
push ecx
call fcn.0050c251
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00506175
add esp, 0xc
inc ecx
dec ecx
xchg ecx, ecx
jae 0x51779b
pushf
pushfd
call 0x517781
lea esp, [esp + 4]
test dword [esp], eax
xchg ecx, ecx
rol ecx, 0x1b
ror ecx, 0x1b
popf
jae 0x517794
jo 0x517796
jle 0x517798
jb 0x51779b
add eax, 0x44e845c6
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x15], 0x62
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xf], 0x66
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x14], 0x75
mov byte [ebp - 0x11], 0x76
mov byte [ebp - 0xe], 0x79
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0x10], 0x75
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
ror esp, 0
mov ebx, ebx
nop
xor ecx, 0
jae 0x5177ef
pushf
mov esp, esp
xchg edi, edi
ror ecx, 0xb
ror ecx, 0x15
popf
jns 0x5177ea
jle 0x5177ec
jb 0x5177ef
mov edx, 0x2ce8458a
add dword [eax + 0x4d8ae845], ecx
jmp 0x51777b
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
not edi
not edi
jno 0x51785d
je 0x517865
mov ebx, ebx
jne 0x517865
mov esp, 0x103d83c2
and eax, 0x7400004e
lea esp, cs:[esp]
cmp dword [0x4e2510], 0
je 0x51789c
lea esp, [esp]
cmp esi, ebx
sub esp, 0
xor eax, 0x79a4
xor eax, 0x79a4
jge 0x517889
jne 0x517884
nop
jl 0x517889
mov ecx, 0xe8458d38
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x4e2510]
push ecx
call fcn.004ecdaf
mov dword [ebp - 0x1c], eax
shl ebx, 0
je 0x5178ac
xchg esp, esp
jae 0x5178a5
ja 0x5178a7
jne 0x5178ac
mov esp, 0xd6ae4ba
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.00506175
add esp, 0xc
ror edx, 0
or edx, 0
lea eax, [eax]
lea eax, [eax]
jle 0x5178d3
xchg edx, edx
xchg esp, esp
xchg ecx, ecx
jg 0x5178d3
mov edx, 0x7d83f306
in al, 0
cmp dword [ebp - 0x1c], 0
je 0x517901
rol eax, 0x18
ror eax, 0x18
neg ecx
neg ecx
lea esp, [esp]
xor esp, 0
jnp 0x5178f5
jge 0x5178ed
jnp 0x5178ef
lea esp, [esp]
jp 0x5178f5
call 0x5135be84
mov eax, dword [ebp - 0x1c]
push eax
call fcn.0050c251
add esp, 4
test esp, 0x1e12
mov esp, esp
shl edx, 0
jo 0x517920
pushf
add edi, dword [esp]
sub edi, dword [esp]
and eax, 0xffffffff
popf
jne 0x51791d
jno 0x517920
lcall 0x558b, 0x51104d8b
or al, 0x52
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc