Function at 0x5fa850
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xf
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.005dd030
add esp, 0xc
clc
add esp, 0
not eax
not eax
je 0x5fa87f
jno 0x5fa875
jp 0x5fa877
lea esp, [esp]
lea edi, [edi]
jne 0x5fa87f
mov edx, 0x45c66fb3
call 0xeda56ed8
inc esp
mov bl, 0x6f
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], 0x44
mov byte [ebp - 0xe], 0x68
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xd], 0x66
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x11], 0x62
mov byte [ebp - 0xc], 0x73
mov byte [ebp - 0x15], bl
mov byte [ebp - 0x10], bl
mov byte [ebp - 0xb], 0x42
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x62
mov byte [ebp - 0xa], 0
shr esp, 0
neg ecx
neg ecx
jmp 0x5fa8c4
jb 0x5fa8de
pushf
xchg esp, esp
rol esp, 0
add esi, dword [esp]
sub esi, dword [esp]
popf
xchg esp, esp
lea edi, [edi]
lea ecx, [ecx]
jae 0x5fa8de
lcall 0xed55, 0x8ae8458a
mov al, byte [ebp - 0x18]
mov dl, byte [ebp - 0x13]
mov cl, byte [ebp - 0xe]
dec al
dec dl
mov byte [ebp - 0x18], al
mov al, byte [ebp - 0x17]
mov byte [ebp - 0x13], dl
mov dl, byte [ebp - 0x12]
dec cl
dec al
mov byte [ebp - 0xe], cl
mov cl, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x16]
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x11]
dec cl
dec al
mov byte [ebp - 0xd], cl
mov cl, byte [ebp - 0xc]
dec dl
mov byte [ebp - 0x16], al
mov al, byte [ebp - 0x15]
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0x10]
dec cl
dec al
mov byte [ebp - 0xc], cl
mov cl, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0x15], al
mov al, byte [ebp - 0x14]
mov byte [ebp - 0x10], dl
mov dl, byte [ebp - 0xf]
dec cl
dec al
dec dl
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], dl
test esp, 0x7de1
jmp 0x5fa956
mov esp, esp
cmp esi, dword [esp + 0x10]
jle 0x5fa97b
pushf
shr esp, 0
jnp 0x5fa965
js 0x5fa967
shl esp, 0
popf
lea edx, [edx + 0x6d05]
lea edx, [edx - 0x6d05]
jg 0x5fa97b
mov edx, 0xfe8400e8
inc dword [ebp - 0x3ba7640]
call 0x5e2d80
test eax, eax
mov dword [ebp - 4], eax
jne 0x5fa990
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
sub esp, 0
jp 0x5fa995
jne 0x5fa9a2
pushf
clc
popf
nop
jo 0x5fa99f
je 0x5fa9a2
call 0x5247f733
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.005e9510
push 0xf
lea edx, [ebp - 0x18]
mov esi, eax
push 0
push edx
mov dword [ebp - 8], esi
call fcn.005dd030
add esp, 0xc
lea edx, [edx + 0x6e39]
lea edx, [edx - 0x6e39]
call 0x5fa9d2
lea esp, [esp + 4]
jbe 0x5fa9de
lea esp, [esp]
ja 0x5fa9de
ljmp 0xc033:0xb75f685
test esi, esi
jne 0x5fa9ed
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp ecx, dword [esp + 4]
jne 0x5faa00
pushf
xor esp, 0
popf
nop
jnp 0x5fa9fd
je 0x5faa00
mov edi, 0x5d0ae856
invalid
push esi
call fcn.005f0710
push 0xf
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.005dd030
add esp, 0x10
rol esi, 0
shl eax, 0
je 0x5faa26
jl 0x5faa20
je 0x5faa22
jne 0x5faa26
lcall 0xc650, 0xe845c6eb
inc ebp
in eax, dx
inc esp
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], 0x44
mov byte [ebp - 0xe], 0x68
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xd], 0x66
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x11], 0x62
mov byte [ebp - 0xc], 0x73
mov byte [ebp - 0x15], bl
mov byte [ebp - 0x10], bl
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x62
mov byte [ebp - 0xa], 0
test dword [esp + 8], ebx
js 0x5faa66
jg 0x5faa7e
pushf
jmp 0x5faa6c
jne 0x5faa6e
add ecx, 0
ror ebx, 0x1d
rol ebx, 0x1d
popf
jns 0x5faa7b
jle 0x5faa7e
xor eax, 0x8ae8458a
pop ebp
in eax, dx
mov al, byte [ebp - 0x18]
mov bl, byte [ebp - 0x13]
mov dl, byte [ebp - 0xe]
mov cl, byte [ebp - 0x17]
dec al
dec bl
mov byte [ebp - 0x18], al
mov al, byte [ebp - 0x12]
mov byte [ebp - 0x13], bl
mov bl, byte [ebp - 0xd]
dec dl
dec cl
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 0x16]
dec al
mov byte [ebp - 0x17], cl
mov cl, byte [ebp - 0x11]
dec bl
mov byte [ebp - 0x12], al
mov al, byte [ebp - 0xc]
mov byte [ebp - 0xd], bl
mov bl, byte [ebp - 0x15]
dec dl
dec cl
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x10]
dec al
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0xb]
dec bl
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0x14]
mov byte [ebp - 0x15], bl
mov bl, byte [ebp - 0xf]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x10], dl
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], bl
cmp esi, dword [esp]
js 0x5fab05
pushf
std
cld
or edi, edi
popf
lea esp, [esp]
je 0x5fab00
xchg esp, esp
jns 0x5fab05
xor eax, 0xd7b007d
jge 0x5fab07
jnp 0x5fab16
mov ecx, ecx
je 0x5fab0d
lea esp, [esp]
lea esp, [esp]
jp 0x5fab16
mov edi, 0x8dfc558b
dec ebp
call 0xee47fd71
jmp 0xf8ebab23
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.005e9510
mov edi, eax
mov dword [ebp - 4], edi
add esp, 0
jmp 0x5fab2d
jns 0x5fab43
lea esi, [esi + 0x2a3b]
lea esi, [esi - 0x2a3b]
xchg ebx, ebx
jo 0x5fab3f
js 0x5fab43
mov edx, 0x6a0f6ad7
add byte [ebp - 0x17af17bb], cl
loopne 0x5fab72
push 0xf
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.005dd030
add esp, 0xc
or esi, 0
add esi, dword [esp]
sub esi, dword [esp]
jp 0x5fab6b
invalid
pushf
je 0x5fab62
popf
jo 0x5fab66
jno 0x5fab68
jnp 0x5fab6b
mov esp, 0x3874ff85
test edi, edi
je 0x5faba7
push edi
pop edi
cmp ebx, dword [esp + 8]
pop esp
and al, 8
add edx, 0
shr edx, 0
ja 0x5fab9b
jge 0x5fab7f
lea esi, [esi + 0x23dc]
lea esi, [esi - 0x23dc]
lea ebx, [ebx + 0x3ce5]
lea ebx, [ebx - 0x3ce5]
jbe 0x5fab9b
or dword [esi + 0x51fc4d8b], 0xff5b6ce8
inc dword [ebx - 0xc7cfb3c]
add byte [ebx - 0x17ff801c], cl
add byte [eax], al
add byte [eax], al
mov ecx, dword [ebp - 4]
push ecx
call fcn.005f0710
add esp, 4
xor ebx, 0
mov esp, esp
jg 0x5fabae
call 0x5fabb3
lea esp, [esp + 4]
js 0x5fabdd
pushf
mov ecx, ecx
lea eax, [eax + 0x1693]
lea eax, [eax - 0x1693]
call 0x5fabce
lea esp, [esp + 4]
std
cld
popf
mov esp, esp
mov esp, esp
jns 0x5fabdd
ljmp 0xc45:0x8b10558b
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push edx
push eax
push ecx
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc