Function at 0x9a8ab0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0x11
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.009a9480
add esp, 0xc
or esi, 0
shl esi, 0
shr ebx, 0
cmp edi, ecx
jg 0x9a8aeb
pushf
je 0x9a8ada
nop
jle 0x9a8add
or eax, 0
popf
jbe 0x9a8ae4
jnp 0x9a8ae6
jb 0x9a8ae8
jle 0x9a8aeb
mov ebp, 0x66b065b2
mov dl, 0x65
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], 0x62
mov byte [ebp - 9], 0x42
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x76
mov byte [ebp - 0xd], 0x6f
mov byte [ebp - 8], 0
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0xf], 0x49
mov byte [ebp - 0xa], al
js 0x9a8b30
js 0x9a8b42
pushf
push edx
pop edx
ror eax, 0
inc eax
dec eax
popf
mov eax, eax
jns 0x9a8b42
mov esi, 0x8ae8458a
pop ebp
in eax, dx
mov al, byte [ebp - 0x18]
mov bl, byte [ebp - 0x13]
mov dl, byte [ebp - 0xe]
mov cl, byte [ebp - 9]
dec al
dec bl
mov byte [ebp - 0x18], al
mov al, byte [ebp - 0x17]
dec dl
mov byte [ebp - 0x13], bl
mov bl, byte [ebp - 0x12]
dec cl
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 0xd]
mov byte [ebp - 9], cl
mov cl, byte [ebp - 0x16]
dec al
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0x12], bl
mov bl, byte [ebp - 0xc]
dec cl
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x15]
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x10]
dec al
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0xc], bl
mov bl, byte [ebp - 0x14]
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xa]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xb], al
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0xa], cl
cmp eax, dword [esp + 4]
xchg edi, ecx
xchg edi, ecx
jle 0x9a8be0
pushf
xor ebx, 0
not edi
not edi
jb 0x9a8bd7
popf
xchg edi, edi
je 0x9a8bdd
jg 0x9a8be0
mov esi, 0xab6be8
add byte [ebx + 0x75c985c8], cl
or dword [edi + 0x5e], ebx
call fcn.009b3750
mov ecx, eax
test ecx, ecx
jne 0x9a8bf4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
ja 0x9a8bf6
push ebx
add ebx, 0x97
ror ebx, 0x14
pop ebx
jo 0x9a8c03
je 0x9a8c11
lea eax, [eax]
jns 0x9a8c09
lea esi, [esi]
jp 0x9a8c0d
jne 0x9a8c11
call 0xe8f01992
lea edx, [ebp - 0x18]
push edx
push ecx
call fcn.009b6060
mov edi, eax
push 0x11
lea eax, [ebp - 0x18]
push 0
push eax
mov dword [ebp - 4], edi
call fcn.009a9480
add esp, 0xc
ror esi, 9
ror esi, 0x17
jg 0x9a8c42
xchg ecx, ebx
xchg ecx, ebx
ja 0x9a8c3e
jle 0x9a8c42
sub eax, 0x75ff850c
or esi, dword [ebx]
rcr byte [edi + 0x5e], 0x5b
test edi, edi
jne 0x9a8c51
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea eax, [eax]
cmp ecx, 0x76ee
not edx
not edx
jg 0x9a8c76
pushf
xchg edi, edx
xchg edi, edx
std
cld
dec esi
inc esi
jo 0x9a8c6b
popf
mov esi, esi
jno 0x9a8c71
jns 0x9a8c73
jle 0x9a8c76
mov ecx, 0x51fc4d8b
mov ecx, dword [ebp - 4]
push ecx
call fcn.009a3220
push 0x11
lea edx, [ebp - 0x18]
push 0
push edx
call fcn.009a9480
add esp, 0x10
mov esp, esp
ror eax, 0x19
ror eax, 7
mov esi, esi
js 0x9a8cc5
pushf
cmp edx, 0x740d
shr ebx, 0
call 0x9a8cab
lea esp, [esp + 4]
or eax, 0
popf
xchg esp, esp
lea edx, [edx + 0x361e]
lea edx, [edx - 0x361e]
jns 0x9a8cc5
call 0x674af27b
mov dl, 0x65
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], 0x62
mov byte [ebp - 9], 0x58
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x76
mov byte [ebp - 0xd], 0x6f
mov byte [ebp - 8], 0
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0xf], 0x49
mov byte [ebp - 0xa], al
and esi, esi
jbe 0x9a8d1a
xchg edx, edx
mov edx, edx
xchg ecx, edx
xchg ecx, edx
ja 0x9a8d16
ja 0x9a8d1a
lcall 0x5d8a, 0xe8458a20
in eax, dx
mov al, byte [ebp - 0x18]
mov bl, byte [ebp - 0x13]
mov dl, byte [ebp - 0xe]
mov cl, byte [ebp - 9]
dec al
dec bl
mov byte [ebp - 0x18], al
mov al, byte [ebp - 0x17]
dec dl
mov byte [ebp - 0x13], bl
mov bl, byte [ebp - 0x12]
dec cl
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 0xd]
mov byte [ebp - 9], cl
mov cl, byte [ebp - 0x16]
dec al
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0x12], bl
mov bl, byte [ebp - 0xc]
dec cl
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x15]
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x10]
dec al
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0xc], bl
mov bl, byte [ebp - 0x14]
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xa]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xb], al
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0xa], cl
clc
jl 0x9a8da9
lea edx, [edx]
lea edi, [edi]
xchg ecx, esi
xchg ecx, esi
jge 0x9a8da9
ljmp 0x99:0x3d0a16d
mov eax, dword [0x9903d0]
test eax, eax
je 0x9a8dd9
jo 0x9a8db4
jns 0x9a8dc5
pushf
mov edx, edx
popf
jne 0x9a8dbe
jno 0x9a8dc0
jb 0x9a8dc2
js 0x9a8dc5
call 0x46a9b54
cdq
add byte [ebp + 0x5150e845], cl
mov ecx, dword [0x9903d0]
lea eax, [ebp - 0x18]
push eax
push ecx
call fcn.009b6060
mov esi, eax
jmp 0x9a8ddc
mov esi, dword [ebp + 8]
je 0x9a8dde
sub eax, 0
ror esp, 0
xor edi, 0
jp 0x9a8def
jns 0x9a8deb
jnp 0x9a8def
mov esi, 0x8d116a21
push ebp
call 0xe8ec8e62
test byte [esi], al
add byte [eax], al
push 0x11
lea edx, [ebp - 0x18]
push 0
push edx
call fcn.009a9480
add esp, 0xc
xchg edi, edi
lea edi, [edi]
jo 0x9a8e12
pushf
nop
cmc
popf
lea eax, [eax]
mov ebx, ebx
jno 0x9a8e12
mov esi, 0x1974f685
test esi, esi
je 0x9a8e2f
jbe 0x9a8e18
jl 0x9a8e1a
shr ebx, 0
jb 0x9a8e26
mov edi, edi
mov esp, esp
jae 0x9a8e26
mov ecx, 0xa3f4e856
invalid
push esi
call fcn.009a3220
add esp, 4
call 0x9a8e34
lea esp, [esp + 4]
jne 0x9a8e3a
jmp 0x9a8e3c
jae 0x9a8e52
pushf
ror ecx, 7
rol ecx, 7
popf
xchg esi, eax
xchg esi, eax
lea esp, [esp]
jo 0x9a8e4f
jb 0x9a8e52
mov ecx, 0x5008458b
mov eax, dword [ebp + 8]
push eax
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4