Function at 0x5fa2d0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push edi
shr esp, 0
jns 0x5fa2a6
inc edi
dec edi
push edx
add edx, 0x795f
ror edx, 0x15
pop edx
js 0x5fa2c0
mov eax, eax
jae 0x5fa2b9
jnp 0x5fa2bb
jl 0x5fa2bd
jns 0x5fa2c0
add eax, 0x5d723ca1
add byte [edi - 0x3d], bl
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0x11
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.005dd030
add esp, 0xc
push edi
add edi, 0x1ccd
ror edi, 0x1e
pop edi
lea edx, [edx]
jbe 0x5fa301
mov eax, dword [0x5d723c]
pop edi
ret
jge 0x5fa2fa
mov esp, esp
lea eax, [eax]
ja 0x5fa301
call 0x671008b7
mov dl, 0x65
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], 0x62
mov byte [ebp - 9], 0x58
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x76
mov byte [ebp - 0xd], 0x6f
mov byte [ebp - 8], 0
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0xf], 0x49
mov byte [ebp - 0xa], al
test dword [esp], eax
je 0x5fa366
pushf
lea esi, [esi + 0x471]
lea esi, [esi - 0x471]
jbe 0x5fa359
lea esi, [esi]
popf
mov edx, edx
jae 0x5fa361
xchg ebx, ebx
jne 0x5fa366
mov esp, 0x8ae84d8a
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0xe]
mov dl, byte [ebp - 9]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x17]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0x12]
dec dl
mov byte [ebp - 0xe], bl
mov bl, byte [ebp - 0xd]
mov byte [ebp - 9], dl
mov dl, byte [ebp - 0x16]
dec cl
dec al
mov byte [ebp - 0x17], cl
mov cl, byte [ebp - 0x11]
dec bl
mov byte [ebp - 0x12], al
mov al, byte [ebp - 0xc]
dec dl
mov byte [ebp - 0xd], bl
mov bl, byte [ebp - 0x15]
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x10]
dec cl
dec al
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0xb]
dec bl
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0x14]
dec dl
mov byte [ebp - 0x15], bl
mov bl, byte [ebp - 0xf]
mov byte [ebp - 0x10], dl
mov dl, byte [ebp - 0xa]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xa], dl
std
cld
dec ebx
inc ebx
cmc
jg 0x5fa40c
pushf
add edi, 0x78f2
sub edi, 0x78f2
popf
lea eax, [eax + 0x15c3]
lea eax, [eax - 0x15c3]
jle 0x5fa40c
sub eax, 0xfe8c0fe8
inc dword [ebp + 0x5f0975c0]
call fcn.005e3020
test eax, eax
jne 0x5fa41e
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov edx, edx
nop
jg 0x5fa423
lea esp, [esp]
jle 0x5fa42e
mov esp, esp
jg 0x5fa42e
xor eax, 0xe84d8d3c
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.005e9510
push 0x11
lea edx, [ebp - 0x18]
mov edi, eax
push 0
push edx
mov dword [ebp - 4], edi
call fcn.005dd030
add esp, 0xc
jnp 0x5fa44f
cmp edi, dword [esp + 8]
jo 0x5fa461
jo 0x5fa457
mov esp, esp
lea esi, [esi]
jb 0x5fa45d
jno 0x5fa461
mov ebp, 0x75ff8594
or esi, dword [ebx]
rcr byte [edi + 0x5e], 0x5b
test edi, edi
jne 0x5fa470
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
xor edx, 0x7685
xor edx, 0x7685
mov esi, esi
inc eax
dec eax
jb 0x5fa48d
mov ebx, ebx
jns 0x5fa486
lea ebx, [ebx]
xchg ebx, ebx
jae 0x5fa48d
mov edi, 0x627de857
invalid
push edi
call fcn.005f0710
push 0x11
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.005dd030
add esp, 0x10
add esp, 0
and esp, 0xffffffff
jb 0x5fa4ab
jae 0x5fa4c1
nop
js 0x5fa4b0
lea ebx, [ebx + 0x4218]
lea ebx, [ebx - 0x4218]
jg 0x5fa4be
jb 0x5fa4c1
lcall 0x6db1, 0x66b065b2
mov dl, 0x65
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x18], 0x48
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], 0x62
mov byte [ebp - 9], 0x42
mov byte [ebp - 0x17], al
mov byte [ebp - 0x12], 0x76
mov byte [ebp - 0xd], 0x6f
mov byte [ebp - 8], 0
mov byte [ebp - 0x16], 0x75
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xc], dl
mov byte [ebp - 0x15], 0x4e
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], cl
mov byte [ebp - 0x14], 0x70
mov byte [ebp - 0xf], 0x49
mov byte [ebp - 0xa], al
and ebx, 0xffffffff
jbe 0x5fa509
jp 0x5fa516
jbe 0x5fa50d
jns 0x5fa50f
jae 0x5fa511
jle 0x5fa513
jnp 0x5fa516
or dword [edx + 0x5d8ae845], 0xf2558aed
mov al, byte [ebp - 0x18]
mov bl, byte [ebp - 0x13]
mov dl, byte [ebp - 0xe]
mov cl, byte [ebp - 9]
dec al
dec bl
mov byte [ebp - 0x18], al
mov al, byte [ebp - 0x17]
dec dl
mov byte [ebp - 0x13], bl
mov bl, byte [ebp - 0x12]
dec cl
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 0xd]
mov byte [ebp - 9], cl
mov cl, byte [ebp - 0x16]
dec al
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0x12], bl
mov bl, byte [ebp - 0xc]
dec cl
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x15]
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x10]
dec al
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0xc], bl
mov bl, byte [ebp - 0x14]
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xa]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xb], al
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], dl
mov byte [ebp - 0xa], cl
and ebx, 0xffffffff
jb 0x5fa59b
jo 0x5fa5a2
jo 0x5fa59f
jno 0x5fa5a2
lcall 0x8500, 0x5d5cd8a1
sal byte [edi + ebp - 0x7f], 0xc6
dec ebx
daa
add byte [eax], al
mov eax, dword [0x5d5cd8]
test eax, eax
je 0x5fa5da
add esi, 0x274b
sub esi, 0x274b
mov esp, esp
test dword [esp + 0x10], eax
stc
jae 0x5fa5c6
jbe 0x5fa5c2
nop
jb 0x5fa5c6
ljmp 0x5d:0x5cd8158b
mov edx, dword [0x5d5cd8]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.005e9510
mov esi, eax
jmp 0x5fa5dd
mov esi, dword [ebp + 8]
jl 0x5fa5df
jg 0x5fa5f1
pushf
xor ebx, dword [esp]
xor ebx, dword [esp]
push edi
pop edi
popf
nop
jle 0x5fa5f1
mov ebx, 0x458d116a
call 0xe8afa664
xor ch, byte [edx]
invalid
push 0x11
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.005dd030
add esp, 0xc
xor esp, 0
test esp, 0x6823
or esp, 0
add esp, 0
jbe 0x5fa61c
jge 0x5fa614
nop
xchg edx, ecx
xchg edx, ecx
ja 0x5fa61c
mov ebx, 0x3674f685
test esi, esi
je 0x5fa656
nop
stc
jp 0x5fa624
xchg esp, esp
jns 0x5fa64d
pushf
add edx, 0x1da3
sub edx, 0x1da3
js 0x5fa638
test esi, edi
lea ecx, [ecx + 0x4039]
lea ecx, [ecx - 0x4039]
popf
jnp 0x5fa64a
js 0x5fa64d
call 0x611d8ea7
invalid
push esi
call fcn.005f0710
add esp, 4
cmp esp, 0x7a5c
sub esp, 0
test ecx, 0x962
xchg edx, edx
jnp 0x5fa674
pushf
lea edi, [edi]
popf
jge 0x5fa671
jp 0x5fa674
mov ebx, 0x51084d8b
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4