Function at 0x560e10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0x13
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.0054ced0
add esp, 0xc
or eax, eax
jp 0x560e33
jp 0x560e2f
jnp 0x560e33
and eax, 0x6db166b0
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x6a
mov byte [ebp - 0xd], 0x6e
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x10], al
mov byte [ebp - 0xc], al
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xb], 0x58
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x4f
mov byte [ebp - 0xa], 0
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x47
mov byte [ebp - 0xe], 0x62
ja 0x560e7f
add esp, 0
jg 0x560e98
pushf
xchg esi, edx
xchg esi, edx
push esi
pop esi
add esp, 0
popf
jle 0x560e93
xchg ebx, ebx
jle 0x560e98
jmp 0x8b3a6c26
mov bl, byte [ebp - 0x1c]
mov dl, byte [ebp - 0x17]
mov cl, byte [ebp - 0x12]
mov al, byte [ebp - 0xd]
dec bl
dec dl
mov byte [ebp - 0x1c], bl
mov bl, byte [ebp - 0x1b]
dec cl
mov byte [ebp - 0x17], dl
mov dl, byte [ebp - 0x16]
dec al
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x11]
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0xc]
dec bl
dec dl
mov byte [ebp - 0x1b], bl
mov bl, byte [ebp - 0x1a]
dec cl
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x15]
dec al
mov byte [ebp - 0x11], cl
mov cl, byte [ebp - 0x10]
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0xb]
dec bl
dec dl
mov byte [ebp - 0x1a], bl
mov bl, byte [ebp - 0x19]
dec cl
mov byte [ebp - 0x15], dl
mov dl, byte [ebp - 0x14]
dec al
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xf]
mov byte [ebp - 0xb], al
mov al, byte [ebp - 0x18]
dec bl
dec dl
dec cl
dec al
mov byte [ebp - 0x19], bl
mov bl, byte [ebp - 0x13]
mov byte [ebp - 0x14], dl
mov byte [ebp - 0xf], cl
mov byte [ebp - 0x18], al
mov dl, byte [ebp - 0xe]
dec bl
dec dl
mov byte [ebp - 0x13], bl
mov byte [ebp - 0xe], dl
jo 0x560f2a
test dword [esp], ebx
jg 0x560f3f
pushf
not esi
not esi
popf
nop
jb 0x560f3a
js 0x560f3c
jle 0x560f3f
jmp 0xffffec2b
call fcn.0055b920
test eax, eax
jne 0x560f51
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
lea ebx, [ebx]
jge 0x560f74
pushf
xor ebx, 0x8d6
xor ebx, 0x8d6
jno 0x560f65
call 0x560f6a
add esp, 4
popf
jne 0x560f71
jl 0x560f74
lcall 0xe850, 0x51e44d8d
invalid
lea ecx, [ebp - 0x1c]
push ecx
push eax
call fcn.00550070
push 0x13
lea edx, [ebp - 0x1c]
mov edi, eax
push 0
push edx
mov dword [ebp - 8], edi
call fcn.0054ced0
add esp, 0xc
lea esi, [esi + 0x2e39]
lea esi, [esi - 0x2e39]
jl 0x560fb3
nop
jle 0x560fa4
lea ebx, [ebx + 0x5b58]
lea ebx, [ebx - 0x5b58]
jge 0x560fb3
sub eax, 0xb75ff85
test edi, edi
jne 0x560fc2
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
shr edi, 0
mov esi, esi
cmp esi, dword [esp + 0x10]
lea ecx, [ecx + 0x229f]
sub ecx, 0x229f
jge 0x560fdf
js 0x560fdb
jl 0x560fdf
jmp 0xf89b9b99
mov eax, dword [ebp - 8]
push eax
call fcn.005696b0
push 0x13
lea ecx, [ebp - 0x1c]
push 0
push ecx
call fcn.0054ced0
add esp, 0x10
call 0x560ffd
add esp, 4
xor esp, 0
jae 0x56100c
xchg edx, edx
jle 0x561009
jb 0x56100c
ljmp 0x45c6:0x6db166b0
mov al, 0x66
mov cl, 0x6d
mov byte [ebp - 0x1c], 0x48
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x6a
mov byte [ebp - 0xd], 0x6e
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x16], 0x76
mov byte [ebp - 0x10], al
mov byte [ebp - 0xc], al
mov byte [ebp - 0x1a], 0x75
mov byte [ebp - 0x15], cl
mov byte [ebp - 0x11], cl
mov byte [ebp - 0xb], 0x42
mov byte [ebp - 0x19], 0x4e
mov byte [ebp - 0x14], al
mov byte [ebp - 0xf], 0x4f
mov byte [ebp - 0xa], 0
mov byte [ebp - 0x18], 0x70
mov byte [ebp - 0x13], 0x47
mov byte [ebp - 0xe], 0x62
cmp edx, dword [esp]
jge 0x56105b
jge 0x561067
jb 0x56105f
jne 0x561061
jle 0x561063
nop
jl 0x561067
mov esp, 0x8ae4558a
dec ebp
jmp 0x8b4455fb
mov dl, byte [ebp - 0x1c]
mov cl, byte [ebp - 0x17]
mov al, byte [ebp - 0x12]
mov bl, byte [ebp - 0xd]
dec dl
dec cl
mov byte [ebp - 0x1c], dl
mov dl, byte [ebp - 0x1b]
dec al
mov byte [ebp - 0x17], cl
mov cl, byte [ebp - 0x16]
dec bl
mov byte [ebp - 0x12], al
mov al, byte [ebp - 0x11]
mov byte [ebp - 0xd], bl
mov bl, byte [ebp - 0xc]
dec dl
dec cl
mov byte [ebp - 0x1b], dl
mov dl, byte [ebp - 0x1a]
dec al
mov byte [ebp - 0x16], cl
mov cl, byte [ebp - 0x15]
dec bl
mov byte [ebp - 0x11], al
mov al, byte [ebp - 0x10]
mov byte [ebp - 0xc], bl
mov bl, byte [ebp - 0xb]
dec dl
dec cl
mov byte [ebp - 0x1a], dl
mov dl, byte [ebp - 0x19]
dec al
mov byte [ebp - 0x15], cl
mov cl, byte [ebp - 0x14]
dec bl
mov byte [ebp - 0x10], al
mov al, byte [ebp - 0xf]
mov byte [ebp - 0xb], bl
mov bl, byte [ebp - 0x18]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x19], dl
mov byte [ebp - 0x14], cl
mov byte [ebp - 0xf], al
mov byte [ebp - 0x18], bl
mov dl, byte [ebp - 0x13]
mov cl, byte [ebp - 0xe]
dec dl
dec cl
mov byte [ebp - 0x13], dl
mov byte [ebp - 0xe], cl
sub edx, 0
xchg edx, edx
std
cld
jg 0x561107
jle 0x561102
jle 0x561107
mov esi, 0x4a11fc4
test byte [eax + eax - 0x7b], dl
sal byte [ebp + ebp - 0x3f], 0xc3
add eax, 0x331bc3c1
invalid
mov eax, dword [0x548404]
test eax, eax
je 0x56113d
rol ebx, 5
rol ebx, 0x1b
xor esi, eax
xor esi, eax
sub ebx, 0
jp 0x56111f
jne 0x56112b
xchg esp, esp
jle 0x561125
js 0x561127
je 0x56112b
mov ebx, 0x8404a184
push esp
add byte [ebp + 0x5052e455], cl
mov eax, dword [0x548404]
lea edx, [ebp - 0x1c]
push edx
push eax
call fcn.00550070
mov dword [ebp - 4], eax
xchg edx, edi
xchg edx, edi
jle 0x561143
jbe 0x561154
pushf
stc
ror edi, 0
xchg ebx, ebx
popf
jbe 0x561151
ja 0x561154
mov esp, 0x4d8d136a
in al, 0x6a
add byte [ecx - 0x18], dl
outsd dx, dword [esi]
mov ebp, 0xc483fffe
or al, 0x8b
in al, 0x75
or eax, 0x749c66
push 0x13
lea ecx, [ebp - 0x1c]
push 0
push ecx
call fcn.0054ced0
add esp, 0xc
mov esp, esp
jne 0x561175
pushf
je 0x56116c
xchg esp, esp
popf
jns 0x561172
je 0x561175
lcall 0x74c0, 0x85fc458b
and eax, eax
mov eax, dword [ebp - 4]
test eax, eax
je 0x5611aa
and eax, eax
jnp 0x56119e
pushf
cmp esi, dword [esp]
ror eax, 0x1b
ror eax, 5
ror esi, 0xc
rol esi, 0xc
popf
xchg edi, edx
xchg edi, edx
js 0x561199
jbe 0x56119b
jp 0x56119e
xor eax, 0x52fc558b
mov edx, dword [ebp - 4]
push edx
call fcn.005696b0
add esp, 4
cmp ebx, 0x199a
lea edx, [edx + 0x59f5]
lea edx, [edx - 0x59f5]
add ebx, dword [esp]
sub ebx, dword [esp]
test dword [esp], eax
jp 0x5611dc
pushf
not eax
not eax
shr esp, 0
sub esi, 0
popf
js 0x5611d7
jbe 0x5611d9
jnp 0x5611dc
mov edx, 0x8b10458b
dec ebp
or al, 0x8b
push ebp
or byte [eax + 0x51], dl
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
push eax
push ecx
push edx
call dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc