Function at 0x10056490
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008b3e1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xa8
push esi
push edi
mov edi, dword [ebx + 8]
xor esi, esi
mov dword [ebp - 0x24], ecx
nop dword [eax]
push 0
xor edx, edx
mov ecx, edi
call fcn.10057800
add esp, 4
mov ecx, 1
test eax, eax
cmove eax, ecx
add esi, eax
add edi, eax
cmp esi, 5
jb 0x100564d0
mov edi, dword [ebx + 8]
push ecx
mov ecx, dword [ebp - 0x24]
push edi
mov dword [ebp - 0x6c], esi
call fcn.100580a0
push esi
push edi
mov esi, eax
mov dword [ebp - 0x24], eax
push esi
call fcn.10057fe0
add esi, eax
mov ecx, esi
mov dword [ebp - 0x24], esi
call fcn.10054de0
mov dword [ebp - 0x60], 0x67
xor edx, edx
mov byte [ebp - 0x5c], 0x17
mov byte [ebp - 0x5b], 0x12
mov byte [ebp - 0x5a], 0x14
lea edi, [esi + eax]
mov byte [ebp - 0x59], 0xf
mov byte [ebp - 0x58], 0x47
mov byte [ebp - 0x57], 2
mov byte [ebp - 0x56], 0x14
mov byte [ebp - 0x55], 0x17
mov al, byte [ebp - 0x5c]
mov byte [ebp - 0x54], 0
nop dword [eax]
mov al, byte [ebp + edx - 0x5c]
mov ecx, dword [ebp - 0x60]
xor cl, al
mov byte [ebp + edx - 0x5c], cl
inc edx
cmp edx, 8
jb 0x10056550
lea eax, [ebp - 0x5c]
mov byte [ebp - 0x54], 0
push eax
push edi
call fcn.10057570
add esp, 8
add edi, eax
push edi
push dword [ebx + 0xc]
call fcn.10054d10
mov dword [ebp - 0x50], 0x6e
add edi, eax
mov byte [ebp - 0x4c], 0x1a
xor edx, edx
mov byte [ebp - 0x4b], 0xb
mov byte [ebp - 0x4a], 0x1d
mov byte [ebp - 0x49], 0x1a
mov byte [ebp - 0x48], 0x4e
mov byte [ebp - 0x47], 0xb
mov byte [ebp - 0x46], 0xf
mov byte [ebp - 0x45], 0x16
mov byte [ebp - 0x44], 0x42
mov byte [ebp - 0x43], 0x4e
mov byte [ebp - 0x42], 0xb
mov byte [ebp - 0x41], 0xf
mov byte [ebp - 0x40], 0x16
mov byte [ebp - 0x3f], 0x55
mov byte [ebp - 0x3e], 4
mov byte [ebp - 0x3d], 0xb
mov byte [ebp - 0x3c], 0x4e
mov byte [ebp - 0x3b], 0x5e
mov byte [ebp - 0x3a], 0x16
mov byte [ebp - 0x39], 0x4b
mov byte [ebp - 0x38], 0x16
mov al, byte [ebp - 0x4c]
mov byte [ebp - 0x37], 0
mov al, byte [ebp + edx - 0x4c]
mov ecx, dword [ebp - 0x50]
xor cl, al
mov byte [ebp + edx - 0x4c], cl
inc edx
cmp edx, 0x15
jb 0x100565e5
lea eax, [edi + 0x3e]
mov byte [ebp - 0x37], 0
push eax
lea eax, [ebp - 0x4c]
push eax
push edi
call fcn.10057570
add esp, 0xc
add edi, eax
mov ecx, edi
call fcn.10055920
mov esi, dword [ebx + 0x10]
add edi, eax
test esi, esi
je 0x100566b6
mov dword [ebp - 0x34], 0x62
mov eax, dword [ebp - 0x34]
xor al, 0x72
mov byte [ebp - 0x30], al
mov eax, dword [ebp - 0x34]
inc al
xor al, 0x65
mov byte [ebp - 0x2f], al
mov eax, dword [ebp - 0x34]
add al, 2
xor al, 0x74
mov byte [ebp - 0x2e], al
mov eax, dword [ebp - 0x34]
add al, 3
xor al, 0x20
mov byte [ebp - 0x2d], al
mov eax, dword [ebp - 0x34]
add al, 4
xor al, 0x30
mov byte [ebp - 0x2c], al
mov eax, dword [ebp - 0x34]
add al, 5
xor al, 0x78
mov byte [ebp - 0x2b], al
mov eax, dword [ebp - 0x34]
add al, 6
xor al, 0x25
mov byte [ebp - 0x2a], al
mov eax, dword [ebp - 0x34]
add al, 7
mov byte [ebp - 0x28], 0
xor al, 0x78
mov byte [ebp - 0x29], al
mov al, byte [ebp - 0x30]
xor eax, eax
mov cl, byte [ebp + eax - 0x30]
mov edx, dword [ebp - 0x34]
add dl, al
xor dl, cl
mov byte [ebp + eax - 0x30], dl
inc eax
cmp eax, 8
jb 0x10056681
lea eax, [esi*4]
mov byte [ebp - 0x28], 0
push eax
lea eax, [ebp - 0x30]
push eax
push edi
call fcn.10057570
add esp, 0xc
mov esi, eax
jmp 0x1005687f
mov byte [ebp - 0x14], 0x7e
xor ecx, ecx
mov byte [ebp - 0x13], 0x71
mov byte [ebp - 0x12], 0x80
mov byte [ebp - 0x11], 0
mov al, byte [ebp - 0x14]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x14]
sub al, 0xc
mov byte [ebp + ecx - 0x14], al
inc ecx
cmp ecx, 3
jb 0x100566d0
mov esi, dword [sym.imp.msvcrt.dll_strlen]
lea eax, [ebp - 0x14]
xorps xmm0, xmm0
mov dword [ebp - 0xa8], 0
push eax
movups xmmword [ebp - 0xb8], xmm0
mov dword [ebp - 0xa4], 0
call esi
add esp, 4
lea ecx, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.10007aa4
mov dword [ebp - 4], 0
xor ecx, ecx
mov byte [ebp - 0x18], 0x79
mov byte [ebp - 0x17], 0x7a
mov byte [ebp - 0x16], 0x7b
mov byte [ebp - 0x15], 0
mov al, byte [ebp - 0x18]
nop dword [eax]
mov al, byte [ebp + ecx - 0x18]
sub al, 0xb
mov byte [ebp + ecx - 0x18], al
inc ecx
cmp ecx, 3
jb 0x10056740
lea eax, [ebp - 0x18]
mov dword [ebp - 0x90], 0
xorps xmm0, xmm0
mov dword [ebp - 0x8c], 0
push eax
movups xmmword [ebp - 0xa0], xmm0
call esi
add esp, 4
lea ecx, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.10007aa4
mov byte [ebp - 4], 1
mov dword [ebp - 0x20], 0x4c
mov eax, dword [ebp - 0x20]
xor al, 0x6e
mov byte [ebp - 0x1c], al
mov eax, dword [ebp - 0x20]
inc al
xor al, 0x6f
mov byte [ebp - 0x1b], al
mov eax, dword [ebp - 0x20]
add al, 2
mov byte [ebp - 0x19], 0
xor al, 0x70
xor edx, edx
mov byte [ebp - 0x1a], al
mov al, byte [ebp - 0x1c]
mov al, byte [ebp + edx - 0x1c]
mov ecx, dword [ebp - 0x20]
add cl, dl
xor cl, al
mov byte [ebp + edx - 0x1c], cl
inc edx
cmp edx, 3
jb 0x100567b7
lea eax, [ebp - 0x1c]
mov byte [ebp - 0x19], 0
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
push eax
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 0
call esi
add esp, 4
lea ecx, [ebp - 0x88]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.10007aa4
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x70]
mov eax, ecx
lea edx, [ebp - 0xb8]
mov dword [ebp - 0x68], eax
sub ecx, edx
mov eax, edx
sub esp, 0xc
mov dword [ebp - 0x64], eax
mov esi, esp
mov eax, 0x2aaaaaab
imul ecx
lea ecx, [ebp - 0x68]
mov dword [esi], 0
sar edx, 2
push ecx
mov eax, edx
mov dword [esi + 4], 0
shr eax, 0x1f
lea ecx, [ebp - 0x64]
push ecx
add eax, edx
mov dword [esi + 8], 0
push eax
mov ecx, esi
call fcn.100568e0
mov ecx, edi
call fcn.10057640
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
mov esi, eax
lea eax, [ebp - 0xb8]
push 0x100051b7
push 3
push 0x18
push eax
call fcn.1007a7cd
add esi, edi
mov ecx, esi
call fcn.10055920
lea edi, [esi + eax]
mov esi, dword [ebp - 0x6c]
push esi
push dword [ebx + 8]
push edi
call fcn.10054c40
add edi, eax
push edi
mov edi, dword [ebx + 8]
lea eax, [esi + edi]
push eax
call fcn.10054ca0
mov eax, dword [ebp - 0x24]
push edi
push eax
call fcn.10054ca0
sub esi, eax
mov edx, esi
lea ecx, [eax + edi]
call fcn.10057420
mov ecx, dword [ebp - 0xc]
mov al, 1
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10