Function at 0x5639ba
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x563870
mov eax, dword [ebp - 0x18]
add eax, 1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x563c03
mov dword [ebx], eax
add byte [eax], al
lea edi, [edi]
ja 0x563889
jae 0x563880
mov ebx, ebx
mov esp, esp
js 0x563886
jbe 0x563889
xor eax, 0x89e84d8b
dec ebp
in al, 0x83
jge 0x563876
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 3
ja case.default.0x56389c
add ecx, dword [edi]
xchg dword [ebp - 0x74fffffe], edx
push ebp
in al, 0xff
jmp dword [edx*4 + 0x563c36]
push 0xc
mov edx, dword [ebp - 0x1c]
jmp dword [edx*4 + 0x563c36]
push 0xc
push 0
lea eax, [ebp - 0x10]
push eax
call fcn.0056bf6f
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0
cmp edi, dword [esp]
test eax, edi
test esi, ebx
jno 0x5638ee
pushf
xor esp, 0
push eax
pop eax
popf
xchg edx, edi
xchg edx, edi
jle 0x5638eb
jo 0x5638ee
mov edi, 0x80f04d8a
jmp 0xf0a3c0f8
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xb]
sub dl, 1
mov byte [ebp - 0xb], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0xa]
sub cl, 1
mov byte [ebp - 0xa], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 0xc]
sub cl, 1
mov byte [ebp - 0xc], cl
jmp case.default.0x56389c
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0056bf6f
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0
cld
xchg esp, esp
jae 0x563979
pushf
inc esi
dec esi
cmp eax, 0x6ff
popf
xchg edi, edi
jle 0x563974
jne 0x563976
jb 0x563979
add eax, 0x2cf0458a
add dword [eax + 0x4d8af045], ecx
cmc
mov al, byte [ebp - 0x10]
sub al, 1
mov byte [ebp - 0x10], al
mov cl, byte [ebp - 0xb]
sub cl, 1
mov byte [ebp - 0xb], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
mov al, byte [ebp - 0xc]
sub al, 1
mov byte [ebp - 0xc], al
jmp case.default.0x56389c
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0056bf6f
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x53
mov byte [ebp - 0xa], 0x58
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x31
mov byte [ebp - 5], 0
cmp eax, dword [esp]
jnp 0x563a06
js 0x563a01
jp 0x563a03
jp 0x563a06
lcall 0x1ea, 0x80f0558a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jmp case.default.0x56389c
push 0xc
push 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0056bf6f
add esp, 0xc
mov byte [ebp - 0x10], 0x5d
mov byte [ebp - 0xf], 0x5d
mov byte [ebp - 0xe], 0x2f
mov byte [ebp - 0xd], 0x5d
mov byte [ebp - 0xc], 0x55
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0xa], 0x59
mov byte [ebp - 9], 0x33
mov byte [ebp - 8], 0x31
mov byte [ebp - 7], 0x31
mov byte [ebp - 6], 0x33
mov byte [ebp - 5], 0
mov edi, edi
cmc
xor edx, dword [esp + 4]
xor edx, dword [esp + 4]
je 0x563acf
pushf
push edi
add edi, 0x2595
ror edi, 0xc
pop edi
popf
jl 0x563ac8
xchg edx, eax
xchg edx, eax
jne 0x563acc
jne 0x563acf
lcall 0x1ea, 0x80f0558a
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xb]
sub al, 1
mov byte [ebp - 0xb], al
mov cl, byte [ebp - 6]
sub cl, 1
mov byte [ebp - 6], cl
mov dl, byte [ebp - 0xf]
sub dl, 1
mov byte [ebp - 0xf], dl
mov al, byte [ebp - 0xa]
sub al, 1
mov byte [ebp - 0xa], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 9]
sub dl, 1
mov byte [ebp - 9], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
mov cl, byte [ebp - 8]
sub cl, 1
mov byte [ebp - 8], cl
mov dl, byte [ebp - 0xc]
sub dl, 1
mov byte [ebp - 0xc], dl
mov al, byte [ebp - 7]
sub al, 1
mov byte [ebp - 7], al
jg 0x563b30
sub esi, 0
jg 0x563b50
pushf
rol ecx, 0xa
rol ecx, 0x16
jb 0x563b3f
popf
lea eax, [eax + 0x2253]
lea eax, [eax - 0x2253]
jle 0x563b50
mov edi, 0x206a006a
push 0
push 0x20
push 3
push 0
push 1
push 0x80000000
lea ecx, [ebp - 0x10]
push ecx
call fcn.0056fa28
mov dword [ebp - 4], eax
cmp edx, dword [esp]
shl esp, 0
lea esp, [esp]
jne 0x563b76
jns 0x563b84
pushf
shr esp, 0
popf
xchg ebx, eax
xchg ebx, eax
js 0x563b84
sub eax, 0x6a0c6a
push 0xc
push 0
lea edx, [ebp - 0x10]
push edx
call fcn.0056bf6f
add esp, 0xc
rol esi, 0
call 0x563b9c
add esp, 4
jle 0x563bb1
xchg ebx, esi
xchg ebx, esi
jmp 0x563ba7
lea esp, [esp]
jnp 0x563bac
jg 0x563bb1
sub eax, 0x7d837d55
cld
push dword [edi + eax*2 - 0x3f]
retf
cmp dword [ebp - 4], 0xffffffff
je 0x563bfe
ror ebx, 0
jg 0x563bc5
xchg esp, esp
js 0x563bc0
jp 0x563bc2
jle 0x563bc5
ljmp 0x56e8:0x50fc458b
mov eax, dword [ebp - 4]
push eax
call fcn.00573d24
lea esi, [esi]
ror ebx, 1
ror ebx, 0x1f
push ebx
add ebx, 0x6ed2
ror ebx, 0x19
pop ebx
call 0x563be5
add esp, 4
js 0x563bf5
lea esp, [esp]
mov esi, esi
xchg ecx, ecx
jns 0x563bf5
sub ebp, 0x12ec45c7
add byte [eax], al
add bl, ch
add eax, 0xfffc64e9
push ebp
mov dword [ebp - 0x14], 0x12
jmp 0x563c03
jmp 0x563867
cmc
test edi, 0xefd
sub esi, 0
and edi, edi
jp 0x563c2c
pushf
ror esp, 0
ror esp, 0
popf
jb 0x563c1d
lea edx, [edx + 0x3a1b]
lea edx, [edx - 0x3a1b]
jnp 0x563c2c
add eax, 0x5fec458b
mov eax, dword [ebp - 0x14]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret