Function at 0x56a150
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push edi
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.0054ced0
add esp, 0xc
lea edi, [edi + 0x3f2f]
lea edi, [edi - 0x3f2f]
lea esp, [esp]
jmp 0x56a17a
not ecx
not ecx
jno 0x56a18e
pushf
xchg ebx, ebx
sub esp, 0
popf
jb 0x56a18b
jo 0x56a18e
mov esp, 0x45c666b0
call 0xed9c29e7
mov al, 0x66
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], al
mov byte [ebp - 0xe], al
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0x16], al
mov byte [ebp - 0x11], 0x77
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x64
ror esp, 0
call 0x56a1c9
lea esp, [esp + 4]
ja 0x56a1e0
pushf
dec edi
inc edi
cmp esp, 0x2b74
popf
jle 0x56a1dd
jbe 0x56a1e0
or dword [edx + 0x458ae84d], 0xf25d8aed
mov cl, byte [ebp - 0x18]
mov al, byte [ebp - 0x13]
mov bl, byte [ebp - 0xe]
mov dl, byte [ebp - 0x17]
dec cl
dec al
mov byte [ebp - 0x18], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0x13], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0xe], bl
mov bl, byte [ebp - 0x16]
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x11]
dec cl
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x15]
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0x10]
dec dl
mov byte [ebp - 0x16], bl
mov bl, byte [ebp - 0x14]
mov byte [ebp - 0x11], dl
mov dl, byte [ebp - 0xf]
dec cl
dec al
dec bl
dec dl
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x10], al
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], dl
jle 0x56a242
jne 0x56a244
ror esi, 0
jns 0x56a254
mov eax, eax
xchg edi, ebx
xchg edi, ebx
js 0x56a254
call 0x383ea6d9
jnp 0x56a257
call 0x561d90
test eax, eax
mov dword [ebp - 4], eax
invalid
inc dword [ebp - 0x3ba7640]
jne 0x56a269
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
xchg esp, esp
jb 0x56a274
xchg edi, edi
mov edx, edx
jae 0x56a274
mov edx, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.00550070
push 0xd
lea edx, [ebp - 0x18]
mov esi, eax
push 0
push edx
mov dword [ebp - 8], esi
call fcn.0054ced0
add esp, 0xc
test esi, esi
jne 0x56a2a2
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
test edx, esi
lea ecx, [ecx + 0x7b4e]
lea ecx, [ecx - 0x7b4e]
js 0x56a2c1
pushf
jmp 0x56a2b6
popf
jo 0x56a2ba
lea edx, [edx]
jns 0x56a2be
jns 0x56a2c1
mov ecx, 0xf3e9e856
invalid
push esi
call fcn.005696b0
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.0054ced0
add esp, 0x10
jns 0x56a2d9
nop
xor edi, dword [esp + 4]
xor edi, dword [esp + 4]
not esi
not esi
jp 0x56a2f0
jo 0x56a2ea
xchg ecx, eax
xchg ecx, eax
nop
jnp 0x56a2f0
mov edx, 0x45c666b0
call 0xed9c2b49
mov al, 0x66
mov byte [ebp - 0x18], 0x50
mov byte [ebp - 0x13], al
mov byte [ebp - 0xe], al
mov byte [ebp - 0x17], 0x71
mov byte [ebp - 0x12], 0x73
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0x16], al
mov byte [ebp - 0x11], 0x77
mov byte [ebp - 0xc], 0
mov byte [ebp - 0x15], 0x6f
mov byte [ebp - 0x10], 0x6a
mov byte [ebp - 0x14], 0x54
mov byte [ebp - 0xf], 0x64
mov ecx, ecx
xchg ebx, ebx
je 0x56a329
or esp, 0
jb 0x56a33b
mov esi, esi
jge 0x56a332
js 0x56a334
js 0x56a336
jae 0x56a33b
lcall 0x8ae8, 0x558aad11
dec ebp
in eax, dx
mov dl, byte [ebp - 0x18]
mov cl, byte [ebp - 0x13]
mov al, byte [ebp - 0xe]
mov bl, byte [ebp - 0x17]
dec dl
dec cl
mov byte [ebp - 0x18], dl
mov dl, byte [ebp - 0x12]
dec al
mov byte [ebp - 0x13], cl
mov cl, byte [ebp - 0xd]
dec bl
mov byte [ebp - 0xe], al
mov al, byte [ebp - 0x16]
mov byte [ebp - 0x17], bl
mov bl, byte [ebp - 0x11]
dec dl
dec cl
mov byte [ebp - 0x12], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0xd], cl
mov cl, byte [ebp - 0x10]
dec bl
mov byte [ebp - 0x16], al
mov al, byte [ebp - 0x14]
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 0xf]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x15], dl
mov byte [ebp - 0x10], cl
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], bl
xor esp, 0
jp 0x56a3a9
jp 0x56a3a2
xchg esi, edi
xchg esi, edi
jnp 0x56a3a9
mov edi, 0xc119c6c1
into
sbb dword [ebx], esi
or al, 0x24
rol esi, 0x19
ror esi, 0x19
xor ecx, dword [esp]
xor ecx, dword [esp]
jne 0x56a3b7
ja 0x56a3c1
jae 0x56a3bb
mov esp, esp
jbe 0x56a3c1
xor eax, 0xfc558b88
mov edx, dword [ebp - 4]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.00550070
mov esi, eax
lea edx, [edx + 0x26f8]
sub edx, 0x26f8
xchg edx, edx
jl 0x56a3e0
add esp, 0
ja 0x56a419
pushf
jnp 0x56a3e9
lea eax, [eax + 0x2313]
lea eax, [eax - 0x2313]
shl esp, 0
lea ebx, [ebx + 0x900]
lea ebx, [ebx - 0x900]
popf
lea edi, [edi + 0x449d]
lea edi, [edi - 0x449d]
jo 0x56a414
jge 0x56a416
jbe 0x56a419
mov edx, 0x458d0d6a
call 0xe8a6a48c
stosb byte es:[edi], al
sub bh, dh
inc dword [ebx + 0xeb0cc4]
push 0xd
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.0054ced0
add esp, 0xc
jmp 0x56a42b
dec ecx
inc ecx
call 0x56a432
lea esp, [esp + 4]
jl 0x56a438
jne 0x56a449
pushf
clc
rol esp, 0
popf
lea edi, [edi]
jne 0x56a446
je 0x56a449
lcall 0x8151, 0x1f74f685
shl dword [edi], 0x1b
add byte [eax], al
test esi, esi
je 0x56a46c
push ecx
add ecx, 0x1b27
ror ecx, 0xa
pop ecx
jbe 0x56a463
mov esp, esp
jmp 0x56a45e
jb 0x56a460
ja 0x56a463
ljmp 0xffff:0xf247e856
push esi
call fcn.005696b0
add esp, 4
xor edi, dword [esp]
xor edi, dword [esp]
jns 0x56a487
xchg esi, esi
lea ecx, [ecx + 0x1bdf]
lea ecx, [ecx - 0x1bdf]
je 0x56a484
js 0x56a487
add eax, 0x8b104d8b
push ebp
or al, 0x8b
inc ebp
or byte [ecx + 0x52], dl
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
push ecx
push edx
push eax
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc