Function at 0x56df80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push esi
push 0x11
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.0056cdd0
add esp, 0xc
jne 0x56df9c
je 0x56df9c
call 0x77084650
mov al, 0x66
mov cl, 0x76
mov byte [ebp - 0x14], 0x53
mov byte [ebp - 0x13], al
mov byte [ebp - 0x12], 0x68
mov byte [ebp - 0x11], 0x52
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xf], al
mov byte [ebp - 0xe], 0x73
mov byte [ebp - 0xd], 0x7a
mov byte [ebp - 0xc], 0x57
mov byte [ebp - 0xb], 0x62
mov byte [ebp - 0xa], 0x6d
mov byte [ebp - 9], cl
mov byte [ebp - 8], al
mov byte [ebp - 7], 0x46
mov byte [ebp - 6], 0x79
mov byte [ebp - 5], 0x42
mov byte [ebp - 4], 0
jne 0x56dfe4
je 0x56dfe4
call 0x8b433572
dec ebp
int1
mov dl, byte [ebp - 0x14]
mov cl, byte [ebp - 0xf]
mov al, byte [ebp - 0xa]
dec dl
mov byte [ebp - 0x14], dl
mov dl, byte [ebp - 5]
dec cl
dec al
mov byte [ebp - 0xf], cl
mov cl, byte [ebp - 0x13]
dec dl
mov byte [ebp - 0xa], al
mov al, byte [ebp - 0xe]
mov byte [ebp - 5], dl
mov dl, byte [ebp - 9]
dec cl
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0x12]
dec dl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 0xd]
mov byte [ebp - 9], dl
mov dl, byte [ebp - 8]
dec cl
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x11]
dec dl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0xc]
mov byte [ebp - 8], dl
mov dl, byte [ebp - 7]
dec cl
dec al
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0x10]
dec dl
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0xb]
mov byte [ebp - 7], dl
mov dl, byte [ebp - 6]
dec cl
dec al
dec dl
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xb], al
mov byte [ebp - 6], dl
jne 0x56e069
je 0x56e069
jmp 0x56e052
call fcn.0056cea0
test eax, eax
jne 0x56e07e
mov eax, 1
pop esi
mov esp, ebp
pop ebp
ret 0x18
jns 0x56e083
js 0x56e083
call 0x52432e14
lea ecx, [ebp - 0x14]
push ecx
push eax
call fcn.0056cbe0
push 0x11
lea edx, [ebp - 0x14]
push 0
push edx
mov esi, eax
call fcn.0056cdd0
add esp, 0xc
test esi, esi
jne 0x56e0af
mov eax, 1
pop esi
mov esp, ebp
pop ebp
ret 0x18
jb 0x56e0b4
jae 0x56e0b4
jmp 0x56e10b
push esi
call fcn.005683c0
add esp, 4
jb 0x56e0c2
jae 0x56e0c2
or dword [ebx + 0x4d8b1c45], ecx
sbb byte [ebx - 0x74afebab], cl
inc ebp
adc byte [ecx - 0x75], dl
dec ebp
or al, 0x52
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x10]
push ecx
mov ecx, dword [ebp + 0xc]
push edx
mov edx, dword [ebp + 8]
push eax
push ecx
push edx
call esi
pop esi
mov esp, ebp
pop ebp
ret 0x18
invalid
add byte [eax], al
jne 0x56e112
je 0x56e112
lcall 0x440, 0xc710458b
add byte [eax], al
add byte [eax], al
mov eax, dword [ebp + 0x10]
mov dword [eax + 4], 0
jbe 0x56e121
ja 0x56e121
ljmp 0x841:0xc7104d8b
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 8], 0
jo 0x56e130
jno 0x56e130
xor eax, 0xc710558b
inc edx
or al, 0
add byte [eax], al
add byte [esi + 3], bh
mov edx, dword [ebp + 0x10]
mov dword [edx + 0xc], 0
jle 0x56e13f
jg 0x56e13f
call 0xc76726ce
inc eax
adc byte [eax], al
add byte [eax], al
add byte [ecx + 3], bh
mov eax, dword [ebp + 0x10]
mov dword [eax + 0x10], 0
jns 0x56e14e
js 0x56e14e
or dword [ebx + 0x41c7104d], 0x14
add byte [ebx + eax + 0x7d], bh
add dword [0xc710558b], esi
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 0x14], 0
jl 0x56e15d
jge 0x56e15d
xor eax, 0xc710558b
mov edx, dword [ebp + 0x10]
mov dword [edx + 0x18], 0
jb 0x56e16c
inc edx
sbb byte [eax], al
add byte [eax], al
add byte [edx + 3], dh
jae 0x56e16c
jmp 0x8b6726fb
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
or ecx, 0x10010
mov edx, dword [ebp + 0x10]
mov dword [edx], ecx
jp 0x56e181
jnp 0x56e181
lcall 0xb888, 0x8b10458b
add byte [eax], al
add byte [ecx + 0x558bf44d], cl
hlt
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax + 0xb8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
mov al, byte [edx]
mov byte [ebp - 4], al
jo 0x56e19a
jno 0x56e19a
jmp 0x815f2f29
mov ecx, dword [ebp + 8]
cmp dword [ecx], 0x80000003
jne 0x56e1b0
mov byte [ebp - 8], 3
jle 0x56e1ae
jg 0x56e1ae
sub eax, 0x558b0feb
or byte [ecx + 0x43a], al
xor byte [ebp + 4], 0xc6
inc ebp
clc
add dword [ecx + 3], edi
jmp 0x56e1bf
mov edx, dword [ebp + 8]
cmp dword [edx], 0x80000004
jne 0x56e1bf
mov byte [ebp - 8], 1
jns 0x56e1c4
js 0x56e1c4
add eax, 0x25fc458b
inc dword [eax]
add byte [eax], al
mov eax, dword [ebp - 4]
and eax, 0xff
cmp eax, 0xcc
jne 0x56e1f6
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0xb8]
add edx, 1
mov eax, dword [ebp + 0x10]
mov dword [eax + 0xb8], edx
mov byte [ebp - 8], 3
jl 0x56e1f1
jge 0x56e1f1
xor eax, 0x8fe9
add byte [ebx - 0x1e7e03b3], cl
inc dword [eax]
add byte [eax], al
jmp 0x56e285
mov ecx, dword [ebp - 4]
and ecx, 0xff
cmp ecx, 0xeb
jne 0x56e22f
mov edx, dword [ebp - 0xc]
xor eax, eax
mov al, byte [edx + 1]
test eax, eax
jne 0x56e22f
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0xb8]
add edx, 2
mov eax, dword [ebp + 0x10]
mov dword [eax + 0xb8], edx
jbe 0x56e22d
ja 0x56e22d
sub ebx, 0xfc4d8b56
jmp 0x56e285
mov ecx, dword [ebp - 4]
and ecx, 0xff
cmp ecx, 0x90
jne 0x56e285
mov edx, dword [ebp + 0x10]
mov eax, dword [edx + 0xb8]
add eax, 1
mov ecx, dword [ebp + 0x10]
mov dword [ecx + 0xb8], eax
jb 0x56e25a
jae 0x56e25a
jmp 0x844b37e9
mov edx, dword [ebp - 0xc]
sub edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
mov cl, byte [eax]
mov byte [ebp - 4], cl
jne 0x56e270
je 0x56e270
lcall 0xffe2, 0x81fc558b
add byte [eax], al
add byte [ecx + 0xccfa], al
add byte [ebp + 4], dh
mov edx, dword [ebp - 4]
and edx, 0xff
cmp edx, 0xcc
jne 0x56e285
mov byte [ebp - 8], 3
jp 0x56e28a
jnp 0x56e28a
xor eax, 0x25f8458b
inc dword [eax]
add byte [eax], al
mov eax, dword [ebp - 8]
and eax, 0xff
cmp eax, 3
jne 0x56e2c6
jl 0x56e29c
jge 0x56e29c
mov eax, 0x8b104d8b
xchg ecx, eax
rol byte [eax], 0
add byte [eax + 0x458b01ce], al
adc byte [ecx + 0xc090], cl
add byte [eax + 3], dh
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + 0xc0]
or dh, 1
mov eax, dword [ebp + 0x10]
mov dword [eax + 0xc0], edx
jo 0x56e2b6
jno 0x56e2b6
lcall 0x8111, 0x8b104d8b
retf 1
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx]
or edx, 0x10001
mov eax, dword [ebp + 0x10]
mov dword [eax], edx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret