Function at 0x711715
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
jno 0x711720
cmp esp, 0x44a6
jb 0x711733
pushf
xchg ebx, ebx
popf
jb 0x711730
jae 0x711733
mov eax, 0x83cc3d83
outsd dx, dword [esi]
add byte [ecx], al
cmp dword [0x6f83cc], 1
jne 0x711894
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.007038d9
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x42
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
neg edi
neg edi
js 0x71179b
jp 0x711788
lea edi, [edi + 0x546]
lea edi, [edi - 0x546]
jmp 0x711796
jns 0x71179b
sub eax, 0x4d8acd5c
invalid
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 6]
sub al, 1
mov byte [ebp - 6], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0xa]
sub dl, 1
mov byte [ebp - 0xa], dl
mov al, byte [ebp - 0xe]
sub al, 1
mov byte [ebp - 0xe], al
mov cl, byte [ebp - 9]
sub cl, 1
mov byte [ebp - 9], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 8]
sub al, 1
mov byte [ebp - 8], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
mov dl, byte [ebp - 7]
sub dl, 1
mov byte [ebp - 7], dl
lea edx, [edx]
jnp 0x71181a
pushf
mov ecx, ecx
xor ecx, 0x56ab
xor ecx, 0x56ab
shr ecx, 0
popf
nop
mov ecx, ecx
jp 0x71181a
lcall 0x6f, 0x8a583d83
add byte [ebp + 8], dh
cmp dword [0x6f8a58], 0
jne 0x71182b
or eax, 0xffffffff
jmp 0x711a5e
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [0x6f8a58]
push ecx
call fcn.00702f41
mov dword [ebp - 4], eax
neg esi
neg esi
ror edx, 0xa
rol edx, 0xa
test esi, 0x5502
jo 0x71186a
pushf
xor edi, 0
lea edi, [edi + 0x1055]
sub edi, 0x1055
popf
nop
jge 0x711866
nop
jno 0x71186a
ljmp 0x558d:0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.007038d9
add esp, 0xc
cmp dword [ebp - 4], 0
je 0x71188a
mov eax, dword [ebp - 4]
mov dword [0x6f83cc], eax
jmp 0x711892
or eax, 0xffffffff
jmp 0x711a5e
jmp 0x71189d
mov ecx, dword [0x6f83cc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
shl esp, 0
rol eax, 0x13
ror eax, 0x13
sub esp, 0
jmp 0x7118b1
ja 0x7118be
je 0x7118b5
xchg edx, edx
jl 0x7118b9
jns 0x7118bb
jbe 0x7118be
or dword [ebx - 0x17af13bb], 0x11889
mov eax, dword [ebp - 0x14]
push eax
call fcn.00723150
add esp, 4
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.007038d9
add esp, 0xc
mov byte [ebp - 0x10], 0x44
mov byte [ebp - 0xb], 0x66
mov byte [ebp - 6], 0x58
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x47
mov byte [ebp - 5], 0
mov byte [ebp - 0xe], 0x66
mov byte [ebp - 9], 0x6a
mov byte [ebp - 0xd], 0x62
mov byte [ebp - 8], 0x6d
mov byte [ebp - 0xc], 0x75
mov byte [ebp - 7], 0x66
add esp, 0
rol ebx, 0
ror ecx, 0xf
ror ecx, 0x11
je 0x711918
js 0x711921
jbe 0x71191c
jbe 0x71191e
jns 0x711921
sub eax, 0x80f0558a
ljmp 0x458a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
xor esp, 0
add eax, 0
xchg esp, esp
xchg esi, edi
xchg esi, edi
js 0x711999
jbe 0x711990
jp 0x711992
xchg edi, eax
xchg edi, eax
jns 0x711999
xor eax, 0x3d83afdf
pop eax
mov ch, byte [edi]
add byte [edi + ebx - 0x3f], dh
mov dword [eax], 0x710778
cmp dword [0x6f8a58], 0
je 0x7119c1
rol edi, 0
js 0x7119ae
jno 0x7119a9
xchg esp, esp
jns 0x7119ae
lcall 0x158b, 0x51f04d8d
pop eax
mov ch, byte [edi]
lea ecx, [ebp - 0x10]
push ecx
mov edx, dword [0x6f8a58]
push edx
call fcn.00702f41
mov dword [ebp - 4], eax
add edi, dword [esp]
sub edi, dword [esp]
jns 0x7119c9
jge 0x7119d2
jno 0x7119cd
jle 0x7119cf
jl 0x7119d2
mov esp, 0x6a0c6a
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.007038d9
add esp, 0xc
ja 0x7119e4
jae 0x7119eb
jmp 0x7119e8
jb 0x7119eb
mov esi, 0xfc7d83
cmp dword [ebp - 4], 0
je 0x711a1d
xor ecx, dword [esp]
xor ecx, dword [esp]
jnp 0x7119f9
and ecx, ecx
jne 0x711a11
pushf
cld
rol edx, 0xe
ror edx, 0xe
popf
xchg esp, esp
jle 0x711a0c
jae 0x711a0e
je 0x711a11
or dword [ebx - 0x17ae03b3], 0x11736
mov ecx, dword [ebp - 4]
push ecx
call fcn.00723150
add esp, 4
test eax, 0x6045
jg 0x711a24
jle 0x711a3f
pushf
jb 0x711a2a
lea ebx, [ebx]
push ecx
pop ecx
test esp, 0x42dd
popf
lea esi, [esi]
lea ecx, [ecx]
lea edx, [edx]
jg 0x711a3f
mov edi, 0x5220558b
mov edx, dword [ebp + 0x20]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x1c