Function at 0x5a4230
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.005a25d0
add esp, 0xc
test dword [esp + 0xc], esi
jne 0x5a424f
add eax, dword [esp]
sub eax, dword [esp]
call 0x5a425a
lea esp, [esp + 4]
jne 0x5a4282
pushf
add ecx, dword [esp]
sub ecx, dword [esp]
sub ebx, 0
cmp ebx, ecx
popf
jmp 0x5a4271
mov edx, edx
lea eax, [eax + 0x6b4d]
lea eax, [eax - 0x6b4d]
je 0x5a4282
mov ebp, 0x45c666b3
call 0xedb7cadb
mov bl, 0x66
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], bl
mov byte [ebp - 0xe], bl
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0x16], bl
mov byte [ebp - 0x11], 0x77
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x64
ror esi, 0
sub esp, 0
xchg esp, esp
js 0x5a42d7
pushf
cmp eax, esi
ja 0x5a42c5
cmp esp, 0x77d5
cmp edi, dword [esp]
popf
jb 0x5a42d2
jle 0x5a42d4
jns 0x5a42d7
add eax, 0x8ae84d8a
inc ebp
in eax, dx
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov dl, byte [ebp - 0xe]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x17]
dec dl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0x12]
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 0xd]
dec cl
dec al
mov byte [ebp - 0x17], cl
mov cl, byte [ebp - 0x16]
dec dl
mov byte [ebp - 0x12], al
mov al, byte [ebp - 0x11]
mov byte [ebp - 0xd], dl
mov dl, byte [ebp - 0x15]
dec cl
dec al
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x10]
dec dl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0x14]
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0xf]
dec cl
dec al
dec dl
mov byte [ebp - 0x10], cl
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], dl
lea edx, [edx + 0x4cbf]
lea edx, [edx - 0x4cbf]
lea esp, [esp]
jns 0x5a4348
je 0x5a4377
pushf
clc
test edi, 0x1327
xor edi, edx
xor edi, edx
popf
lea esp, [esp]
lea esi, [esi + 0xd70]
lea esi, [esi - 0xd70]
lea edi, [edi + 0x65a7]
lea edi, [edi - 0x65a7]
jne 0x5a4377
sub eax, 0xfe1ae4e8
inc dword [ebp - 0x3ba7640]
call 0x585e60
test eax, eax
mov dword [ebp - 4], eax
jne 0x5a438c
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
shl esp, 0
call 0x5a4394
add esp, 4
inc edi
dec edi
je 0x5a43b2
pushf
mov esp, esp
add edx, 0x3a15
sub edx, 0x3a15
popf
ja 0x5a43af
jne 0x5a43b2
mov edx, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.00592ab0
push 0xd
lea edx, [ebp - 0x18]
mov esi, eax
push 0
push edx
mov dword [ebp - 8], esi
call fcn.005a25d0
add esp, 0xc
test esi, esi
jne 0x5a43e0
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test dword [esp + 4], eax
or ecx, 0
jns 0x5a43fc
jns 0x5a43eb
lea ecx, [ecx + 0x1eb8]
lea ecx, [ecx - 0x1eb8]
jge 0x5a43f9
js 0x5a43fc
add eax, 0xaeaee856
invalid
push esi
call fcn.0059f2b0
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.005a25d0
add esp, 0x10
sub edi, 0
jge 0x5a441d
xchg esp, esp
jl 0x5a441d
mov ecx, 0xe845c652
push eax
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], bl
mov byte [ebp - 0xe], bl
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0x16], bl
mov byte [ebp - 0x11], 0x77
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x64
mov esp, esp
jg 0x5a4452
jbe 0x5a4463
pushf
inc esi
dec esi
popf
xchg edx, esi
xchg edx, esi
js 0x5a4460
ja 0x5a4463
xor eax, 0x8ae8558a
dec ebp
in eax, dx
mov dl, byte [ebp - 0x18]
mov cl, byte [ebp - 0x13]
mov al, byte [ebp - 0xe]
mov bl, byte [ebp - 0x17]
dec dl
dec cl
mov byte [ebp - 0x18], dl
mov dl, byte [ebp - 0x12]
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0xd]
dec bl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 0x16]
mov byte [ebp - 0x17], bl
mov bl, byte [ebp - 0x11]
dec dl
dec cl
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0xd], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0x16], al
mov al, byte [ebp - 0x14]
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 0xf]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x15], dl
mov byte [ebp - 0x10], cl
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], bl
xchg edi, edi
shr edx, 0
inc edi
dec edi
je 0x5a44d1
ja 0x5a44ce
jne 0x5a44d1
xor eax, 0xc109c3c1
ret
rol ebx, 9
rol ebx, 0x17
xor edi, dword [esp + 0x10]
xor edi, dword [esp + 0x10]
and esi, 0xffffffff
jb 0x5a44ef
jle 0x5a44e6
xchg ecx, eax
xchg ecx, eax
jbe 0x5a44ea
lea ecx, [ecx]
jae 0x5a44ef
jmp 0x8e569a7e
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.00592ab0
mov esi, eax
mov dword [ebp - 4], esi
lea edx, [edx + 0x7983]
lea edx, [edx - 0x7983]
push edx
pop edx
jl 0x5a4526
pushf
js 0x5a4515
ror edi, 8
ror edi, 0x18
popf
mov ecx, ecx
jge 0x5a4521
jbe 0x5a4523
jge 0x5a4526
sub eax, 0x458d0d6a
call 0xe8aa4599
popfd
loopne 0x5a4531
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.005a25d0
add esp, 0xc
jbe 0x5a4538
invalid
inc dword [ebx + 0x760cc4]
not eax
not eax
jno 0x5a453e
jge 0x5a4540
js 0x5a454e
pushf
or esp, 0
popf
jo 0x5a454b
jns 0x5a454e
add dword [ebp - 0x7cd58b0a], 0xccc1ffe6
add byte [esi + edx - 0x15], dh
add byte [ebp + 0x57cfbf], cl
add byte [ebp - 0x57ce41], cl
inc dword [edi + 0x75df87df]
add bl, byte [edx - 0x3b2744d]
test esi, esi
je 0x5a457c
and esi, 0xffffffff
ror esp, 0
je 0x5a4570
jmp 0x5a455c
lea edi, [edi + 0x57cf]
lea edi, [edi - 0x57cf]
xchg edi, ebx
xchg edi, ebx
jne 0x5a4570
lcall 0xe851, 0xfc4d8bb3
aaa
lodsd eax, dword [esi]
invalid
mov ecx, dword [ebp - 4]
push ecx
call fcn.0059f2b0
add esp, 4
cmp edx, ebx
sub ebx, 0
xchg edi, edi
lea edx, [edx + 0x7e38]
lea edx, [edx - 0x7e38]
jns 0x5a45a3
pushf
shl esp, 0
lea esp, [esp]
cmp esi, dword [esp]
popf
jp 0x5a45a0
js 0x5a45a3
call 0x8b6a9b32
inc ebp
or al, 0x8b
dec ebp
or byte [edx + 0x50], dl
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
push edx
push eax
push ecx
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc