Function at 0x5f9a00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [0x71d5e0]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0xa8], ecx
test esi, esi
je 0x5f9e9a
test ecx, ecx
je 0x5f9e9a
mov al, byte [esi + 0x12c]
push ebx
push edi
cmp al, 8
jae 0x5f9aaf
movzx ebx, al
mov edi, 8
sub edi, ebx
push edi
lea eax, [ecx + ebx + 0x20]
push eax
push esi
call fcn.005ffd70
mov eax, dword [ebp - 0xa8]
push edi
add eax, 0x20
push ebx
push eax
mov byte [esi + 0x12c], 8
mov dword [ebp - 0xc], eax
call fcn.005ff3f0
add esp, 0x18
test eax, eax
je 0x5f9aa3
cmp ebx, 4
jae 0x5f9a95
mov ecx, dword [ebp - 0xc]
add edi, 0xfffffffc
push edi
push ebx
push ecx
call fcn.005ff3f0
add esp, 0xc
test eax, eax
je 0x5f9a95
push str.Not_a_PNG_file
jmp 0x5f9a9a
push str.PNG_file_corrupted_by_ASCII_conversion
push esi
call fcn.00619c80
add esp, 8
cmp ebx, 3
jae 0x5f9aaf
or dword [esi + 0x68], 0x1000
mov bl, 0x73
push esi
mov dword [ebp - 0x64], 0x52444849
mov dword [ebp - 0xc], 0x54414449
mov dword [ebp - 0x34], 0x444e4549
mov dword [ebp - 0x14], 0x45544c50
mov dword [ebp - 0x8c], 0x44474b62
mov dword [ebp - 0x44], 0x4d524863
mov dword [ebp - 0x7c], 0x414d4167
mov dword [ebp - 0x54], 0x54534968
mov dword [ebp - 0x5c], 0x50434369
mov word [ebp - 0x9c], 0x466f
mov byte [ebp - 0x9a], 0x46
mov byte [ebp - 0x99], bl
mov dword [ebp - 0x1c], 0x4c414370
mov word [ebp - 0x2c], 0x4870
mov byte [ebp - 0x2a], 0x59
mov byte [ebp - 0x29], bl
mov byte [ebp - 0x3c], bl
mov word [ebp - 0x3b], 0x4942
mov byte [ebp - 0x39], 0x54
mov byte [ebp - 0x24], bl
mov word [ebp - 0x23], 0x4143
mov byte [ebp - 0x21], 0x4c
mov byte [ebp - 0x74], bl
mov word [ebp - 0x73], 0x4c50
mov byte [ebp - 0x71], 0x54
mov byte [ebp - 0x4c], bl
mov word [ebp - 0x4b], 0x4752
mov byte [ebp - 0x49], 0x42
mov dword [ebp - 0x84], 0x74584574
mov dword [ebp - 0x94], 0x454d4974
mov dword [ebp - 0xa4], 0x534e5274
mov dword [ebp - 0x6c], 0x7458547a
call fcn.0061afd0
mov edx, dword [ebp - 0xc]
lea ecx, [esi + 0x11c]
add esp, 4
mov edi, eax
cmp dword [ecx], edx
jne 0x5f9b9d
mov eax, dword [esi + 0x68]
test al, 8
je 0x5f9b9d
or eax, 0x2000
mov dword [esi + 0x68], eax
mov eax, dword [ecx]
cmp eax, dword [ebp - 0x64]
jne 0x5f9bba
mov eax, dword [ebp - 0xa8]
push edi
push eax
push esi
call fcn.0061b100
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x34]
jne 0x5f9bd5
mov ecx, dword [ebp - 0xa8]
push edi
push ecx
push esi
call fcn.0061b440
add esp, 0xc
jmp 0x5f9ab1
push ecx
push esi
call fcn.005ffab0
add esp, 8
test eax, eax
je 0x5f9c4a
mov edx, dword [ebp - 0xc]
cmp dword [esi + 0x11c], edx
jne 0x5f9bf2
or dword [esi + 0x68], 4
mov eax, dword [ebp - 0xa8]
push edi
push eax
push esi
call fcn.0061d200
mov eax, dword [esi + 0x11c]
add esp, 0xc
cmp eax, dword [ebp - 0x14]
jne 0x5f9c17
or dword [esi + 0x68], 2
jmp 0x5f9ab1
cmp eax, dword [ebp - 0xc]
jne 0x5f9ab1
mov eax, dword [esi + 0x68]
test al, 1
jne 0x5f9e39
push str.Missing_IHDR_before_IDAT
push esi
call fcn.00619c80
add esp, 8
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005000ee
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x11c]
cmp eax, dword [ebp - 0x14]
jne 0x5f9c6b
mov ecx, dword [ebp - 0xa8]
push edi
push ecx
push esi
call fcn.0061b270
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0xc]
je 0x5f9e65
push edi
cmp eax, dword [ebp - 0x8c]
jne 0x5f9c92
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.0061c340
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x44]
jne 0x5f9cac
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.0061b770
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x7c]
jne 0x5f9cc6
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.0061b490
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x54]
jne 0x5f9ce0
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.0061c570
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x9c]
jne 0x5f9cfd
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.0061c810
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x1c]
jne 0x5f9d17
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.0061c930
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x24]
jne 0x5f9d31
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.0061cbe0
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x2c]
jne 0x5f9d4b
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.0061c6f0
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x3c]
jne 0x5f9d65
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.0061b600
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x4c]
jne 0x5f9d7f
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.0061bab0
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x5c]
jne 0x5f9d99
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.0061bcb0
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x74]
jne 0x5f9db3
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.0061bea0
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x84]
jne 0x5f9dd0
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.0061cf00
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x94]
jne 0x5f9ded
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.0061cdf0
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0xa4]
jne 0x5f9e0a
mov ecx, dword [ebp - 0xa8]
push ecx
push esi
call fcn.0061c100
add esp, 0xc
jmp 0x5f9ab1
cmp eax, dword [ebp - 0x6c]
jne 0x5f9e24
mov edx, dword [ebp - 0xa8]
push edx
push esi
call fcn.0061d060
add esp, 0xc
jmp 0x5f9ab1
mov eax, dword [ebp - 0xa8]
push eax
push esi
call fcn.0061d200
add esp, 0xc
jmp 0x5f9ab1
cmp byte [esi + 0x126], 3
jne 0x5f9e98
test al, 2
jne 0x5f9e98
push str.Missing_PLTE_before_IDAT
push esi
call fcn.00619c80
add esp, 8
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005000ee
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x68]
test al, 1
jne 0x5f9e73
push str.Missing_IHDR_before_IDAT
jmp 0x5f9e85
cmp byte [esi + 0x126], 3
jne 0x5f9e8e
test al, 2
jne 0x5f9e8e
push str.Missing_PLTE_before_IDAT
push esi
call fcn.00619c80
add esp, 8
or dword [esi + 0x68], 4
mov dword [esi + 0x10c], edi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.005000ee
mov esp, ebp
pop ebp
ret