Function at 0x5b9cb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x13
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.005b4da0
add esp, 0xc
cmp esp, 0x4a22
sub edi, 0
jp 0x5b9ce8
js 0x5b9cd6
mov esp, esp
lea eax, [eax + 0x509d]
lea eax, [eax - 0x509d]
nop
jnp 0x5b9ce8
mov esi, 0x6db166b0
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x6a
mov byte [ebp - 0xd], 0x6e
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x10], al
mov byte [ebp - 0xc], al
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xb], 0x42
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x4f
mov byte [ebp - 0xa], 0
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x47
mov byte [ebp - 0xe], 0x62
js 0x5b9d34
nop
je 0x5b9d48
pushf
and edx, 0xffffffff
and esp, 0xffffffff
popf
je 0x5b9d43
lea esi, [esi]
jne 0x5b9d48
jmp 0x8b3ffad6
mov bl, byte [ebp - 0x1c]
mov dl, byte [ebp - 0x17]
mov cl, byte [ebp - 0x12]
mov al, byte [ebp - 0xd]
dec bl
dec dl
mov byte [ebp - 0x1c], bl
mov bl, byte [ebp - 0x1b]
dec cl
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x16]
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x11]
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0xc]
dec bl
dec dl
mov byte [ebp - 0x1b], bl
mov bl, byte [ebp - 0x1a]
dec cl
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0x10]
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0xb]
dec bl
dec dl
mov byte [ebp - 0x1a], bl
mov bl, byte [ebp - 0x19]
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0x14]
dec al
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xf]
mov byte [ebp - 0xb], al
mov al, byte [ebp - 0x18]
dec bl
dec dl
dec cl
dec al
mov byte [ebp - 0x19], bl
mov bl, byte [ebp - 0x13]
mov byte [ebp - 0x14], dl
mov byte [ebp - 0xf], cl
mov byte [ebp - 0x18], al
mov dl, byte [ebp - 0xe]
dec bl
dec dl
mov byte [ebp - 0x13], bl
mov byte [ebp - 0xe], dl
je 0x5b9dda
jae 0x5b9ddc
je 0x5b9df3
pushf
xor ecx, edi
xor ecx, edi
cmp esp, 0x49a8
jb 0x5b9dec
popf
jo 0x5b9df0
jne 0x5b9df3
add eax, 0xffaf78e8
inc dword [ebp + 0x5f0975c0]
call fcn.005b4d70
test eax, eax
jne 0x5b9e05
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
jg 0x5b9e07
jbe 0x5b9e1a
pushf
xor ebx, 0
cmp eax, dword [esp]
cmp eax, ecx
popf
jmp 0x5b9e17
ja 0x5b9e1a
xor eax, 0x51e44d8d
lea ecx, [ebp - 0x1c]
push ecx
push eax
call fcn.005d0f20
push 0x13
lea edx, [ebp - 0x1c]
push 0
push edx
mov dword [ebp - 8], eax
call fcn.005b4da0
add esp, 0xc
lea eax, [eax + 0x737d]
sub eax, 0x737d
jb 0x5b9e53
pushf
xchg esi, edi
xchg esi, edi
popf
lea ebx, [ebx]
jg 0x5b9e50
jae 0x5b9e53
mov esp, 0x85f84d8b
leave
mov ecx, dword [ebp - 8]
test ecx, ecx
jne 0x5b9e65
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
lea esp, [esp]
jo 0x5b9e6a
cmp ebx, dword [esp]
or esp, 0
jbe 0x5b9e78
xchg edi, eax
xchg edi, eax
ja 0x5b9e78
mov esp, 0xe2e85128
jne 0x5b9e7e
push ecx
call fcn.005d1460
add byte [edx + 0x13], ch
push 0x13
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.005b4da0
add esp, 0x10
lea ecx, [ecx + 0x40fd]
sub ecx, 0x40fd
jnp 0x5b9e9c
shl esp, 0
std
cld
je 0x5b9eb0
pushf
push ecx
pop ecx
popf
xchg ecx, ecx
jmp 0x5b9ead
jne 0x5b9eb0
xor dword [eax - 0x39924e9a], 0xc648e445
inc ebp
jmp 0xeea16524
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x6a
mov byte [ebp - 0xd], 0x6e
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x10], al
mov byte [ebp - 0xc], al
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x4f
mov byte [ebp - 0xa], 0
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x47
mov byte [ebp - 0xe], 0x62
shr ebx, 0
jno 0x5b9f16
pushf
je 0x5b9f03
popf
lea eax, [eax + 0x460b]
lea eax, [eax - 0x460b]
jp 0x5b9f13
jo 0x5b9f16
xor eax, 0x8ae4558a
dec ebp
jmp 0x8b49e4aa
mov dl, byte [ebp - 0x1c]
mov cl, byte [ebp - 0x17]
mov al, byte [ebp - 0x12]
mov bl, byte [ebp - 0xd]
dec dl
dec cl
mov byte [ebp - 0x1c], dl
mov dl, byte [ebp - 0x1b]
dec al
mov byte [ebp - 0x17], cl
mov cl, byte [ebp - 0x16]
dec bl
mov byte [ebp - 0x12], al
mov al, byte [ebp - 0x11]
mov byte [ebp - 0xd], bl
mov bl, byte [ebp - 0xc]
dec dl
dec cl
mov byte [ebp - 0x1b], dl
mov dl, byte [ebp - 0x1a]
dec al
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x15]
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0x10]
mov byte [ebp - 0xc], bl
mov bl, byte [ebp - 0xb]
dec dl
dec cl
mov byte [ebp - 0x1a], dl
mov dl, byte [ebp - 0x19]
dec al
mov byte [ebp - 0x15], cl
mov cl, byte [ebp - 0x14]
dec bl
mov byte [ebp - 0x10], al
mov al, byte [ebp - 0xf]
mov byte [ebp - 0xb], bl
mov bl, byte [ebp - 0x18]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x19], dl
mov dl, byte [ebp - 0x13]
mov byte [ebp - 0x14], cl
mov byte [ebp - 0xf], al
mov byte [ebp - 0x18], bl
mov cl, byte [ebp - 0xe]
dec dl
dec cl
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], cl
dec eax
inc eax
shr edi, 0
not ecx
not ecx
jl 0x5b9fbf
xchg edi, edx
xchg edi, edx
jp 0x5b9fb7
jp 0x5b9fb9
jmp 0x5b9fbb
jge 0x5b9fbf
lcall 0x5b, 0x1b8a1d3
mov eax, dword [0x5b01b8]
test eax, eax
je 0x5b9fea
add edi, 0
jo 0x5b9fd7
pushf
nop
popf
jg 0x5b9fd4
jno 0x5b9fd7
mov eax, 0x1b8158b
pop ebx
add byte [ebp + 0x5251e44d], cl
mov edx, dword [0x5b01b8]
lea ecx, [ebp - 0x1c]
push ecx
push edx
call fcn.005d0f20
mov dword [ebp - 4], eax
inc esi
dec esi
stc
xchg ebx, ebx
jne 0x5b9ff1
jg 0x5b9ffd
ja 0x5b9ff5
jae 0x5b9ff7
jne 0x5b9ff9
jle 0x5b9ffd
mov ebx, 0x8d136abf
inc ebp
in al, 0x6a
add byte [eax - 0x18], dl
xchg esi, eax
lodsd eax, dword [esi]
invalid
push 0x13
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.005b4da0
add esp, 0xc
xchg ebx, ebx
sub ebx, 0
jg 0x5ba014
je 0x5ba01f
js 0x5ba018
xchg edx, ebx
xchg edx, ebx
jne 0x5ba01f
mov ebx, 0x85fc458b
sal byte [ebx - 0x7d], 0xc1
add byte [edx + 0x42], cl
mov eax, dword [ebp - 4]
test eax, eax
je 0x5ba049
add ecx, 0
dec edx
inc edx
jbe 0x5ba03e
pushf
inc edx
dec edx
xchg edi, esi
xchg edi, esi
popf
jo 0x5ba039
jg 0x5ba03b
ja 0x5ba03e
add eax, 0xe851c88b
sbb dh, byte [ecx + eax]
mov ecx, eax
push ecx
call fcn.005d1460
add esp, 4
call fcn.005ba04e