Function at 0x9aa420
Capabilities:
Contain obfuscated stackstrings

Disassembly:
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0x11
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.009a9480
add esp, 0xc
lea esp, [esp]
cmc
ja 0x9aa451
jae 0x9aa441
lea eax, [eax + 0x3a17]
lea eax, [eax - 0x3a17]
jbe 0x9aa451
mov esp, 0xb166b0f8
jbe 0x9aa41c
mov al, 0x66
mov cl, 0x76
mov byte [ebp - 0x18], 0x53
mov byte [ebp - 0x17], al
inc ebp
call 0xe9e02caf
mov byte [ebp - 0x16], 0x68
mov byte [ebp - 0x15], 0x52
mov byte [ebp - 0x14], cl
mov byte [ebp - 0x13], al
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0x11], 0x7a
mov byte [ebp - 0x10], 0x57
mov byte [ebp - 0xf], 0x62
mov byte [ebp - 0xe], 0x6d
mov byte [ebp - 0xd], cl
mov byte [ebp - 0xc], al
mov byte [ebp - 0xb], 0x46
mov byte [ebp - 0xa], 0x79
mov byte [ebp - 9], 0x42
mov byte [ebp - 8], 0
shr esi, 0
xchg esi, esi
js 0x9aa4b2
lea ecx, [ecx + 0x1a35]
lea ecx, [ecx - 0x1a35]
jp 0x9aa4a9
mov esp, esp
lea esp, [esp]
jns 0x9aa4b2
sub eax, 0xe8458ab2
mov al, byte [ebp - 0x18]
mov bl, byte [ebp - 0x13]
mov dl, byte [ebp - 0xe]
mov cl, byte [ebp - 9]
dec al
dec bl
mov byte [ebp - 0x18], al
mov al, byte [ebp - 0x17]
dec dl
mov byte [ebp - 0x13], bl
mov bl, byte [ebp - 0x12]
dec cl
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 0xd]
mov byte [ebp - 9], cl
mov cl, byte [ebp - 0x16]
dec al
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0x12], bl
mov bl, byte [ebp - 0xc]
dec cl
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x15]
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x10]
dec al
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0xc], bl
mov bl, byte [ebp - 0x14]
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xa]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xb], al
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0xa], cl
or esp, 0
mov esp, esp
jne 0x9aa545
js 0x9aa53b
mov ecx, ecx
lea esi, [esi]
jge 0x9aa541
je 0x9aa545
mov esp, 0x29d6e8af
invalid
call fcn.0099cf20
mov esi, eax
test esi, esi
jne 0x9aa55e
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
jns 0x9aa560
shr ebx, 0
ror esp, 0
jb 0x9aa570
jle 0x9aa56a
mov esp, esp
jae 0x9aa570
mov ecx, 0xe84d8d51
lea ecx, [ebp - 0x18]
push ecx
push esi
call fcn.009b6060
push 0x11
lea edx, [ebp - 0x18]
mov edi, eax
push 0
push edx
mov dword [ebp - 4], edi
call fcn.009a9480
add esp, 0xc
test edi, edi
jne 0x9aa5a1
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
shl esp, 0
shl eax, 0
lea eax, [eax + 0x29f7]
lea eax, [eax - 0x29f7]
je 0x9aa5bc
ja 0x9aa5b7
jne 0x9aa5b9
jne 0x9aa5bc
mov eax, 0x8c5ee857
invalid
push edi
call fcn.009a3220
push 0x11
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.009a9480
add esp, 0x10
rol edx, 0
push edi
pop edi
test edi, 0x5b6e
test dword [esp + 4], ebx
jae 0x9aa5ea
xchg ebx, ebx
ja 0x9aa5e7
jb 0x9aa5ea
mov eax, 0x76b166b0
mov al, 0x66
mov cl, 0x76
mov byte [ebp - 0x18], 0x53
mov byte [ebp - 0x17], al
mov byte [ebp - 0x16], 0x68
mov byte [ebp - 0x15], 0x52
mov byte [ebp - 0x14], cl
mov byte [ebp - 0x13], al
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0x11], 0x7a
mov byte [ebp - 0x10], 0x57
mov byte [ebp - 0xf], 0x62
mov byte [ebp - 0xe], 0x6d
mov byte [ebp - 0xd], cl
mov byte [ebp - 0xc], al
mov byte [ebp - 0xb], 0x46
mov byte [ebp - 0xa], 0x79
mov byte [ebp - 9], 0x58
mov byte [ebp - 8], 0
rol esp, 0
jl 0x9aa64d
pushf
ror edx, 0
push ecx
add ecx, 0x1786
ror ecx, 5
pop ecx
popf
jle 0x9aa646
mov esp, esp
lea eax, [eax]
jge 0x9aa64d
lcall 0xed4d, 0x8ae8558a
mov dl, byte [ebp - 0x18]
mov cl, byte [ebp - 0x13]
mov al, byte [ebp - 0xe]
mov bl, byte [ebp - 9]
dec dl
dec cl
mov byte [ebp - 0x18], dl
mov dl, byte [ebp - 0x17]
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 0xd]
mov byte [ebp - 9], bl
mov bl, byte [ebp - 0x16]
dec dl
dec cl
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x11]
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0xc]
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0x15]
mov byte [ebp - 0x16], bl
mov bl, byte [ebp - 0x10]
dec dl
dec cl
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0xb]
dec al
mov byte [ebp - 0xc], cl
mov cl, byte [ebp - 0x14]
dec bl
mov byte [ebp - 0x15], al
mov al, byte [ebp - 0xf]
mov byte [ebp - 0x10], bl
mov bl, byte [ebp - 0xa]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0xb], dl
mov byte [ebp - 0x14], cl
mov byte [ebp - 0xf], al
mov byte [ebp - 0xa], bl
jnp 0x9aa6cf
jle 0x9aa6d1
ja 0x9aa6d3
jne 0x9aa6d9
nop
je 0x9aa6d9
jmp 0x1117a75b
jle 0x9aa6db
jge 0x9aa6ed
pushf
jge 0x9aa6e1
jl 0x9aa6e3
cmc
jne 0x9aa6e6
popf
mov esp, esp
jl 0x9aa6ed
mov edx, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
push esi
call fcn.009b6060
mov edi, eax
ror ecx, 0
jne 0x9aa70b
je 0x9aa700
mov esp, esp
xchg ecx, ecx
jmp 0x9aa706
je 0x9aa70b
call 0x1204ffd1
push 0x11
lea edx, [ebp - 0x18]
push 0
push edx
call fcn.009a9480
add esp, 0xc
call 0x9aa720
lea esp, [esp + 4]
shr esp, 0
jno 0x9aa729
jae 0x9aa734
xchg ebx, eax
xchg ebx, eax
js 0x9aa72f
jns 0x9aa731
jb 0x9aa734
lcall 0x73, 0x1d74ff85
test edi, edi
je 0x9aa755
jae 0x9aa73a
jge 0x9aa73c
sub esi, 0
js 0x9aa74c
lea esi, [esi]
jp 0x9aa745
mov ebx, ebx
jp 0x9aa749
jns 0x9aa74c
add eax, 0x8acee857
invalid
push edi
call fcn.009a3220
add esp, 4
cmp esi, 0x6820
xchg ecx, esi
xchg ecx, esi
stc
js 0x9aa767
jle 0x9aa764
jns 0x9aa767
mov ecx, 0x8b1c458b
dec ebp
sbb byte [ebx - 0x74afebab], cl
inc ebp
adc byte [ecx - 0x75], dl
dec ebp
or al, 0x52
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x10]
push ecx
mov ecx, dword [ebp + 0xc]
push edx
mov edx, dword [ebp + 8]
push eax
push ecx
push edx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18