Function at 0x567400
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
push ebx
push esi
mov dword [ebp - 4], 0x32
jbe 0x567414
ja 0x567414
call 0x45e39c82
mov esp, 0xe850006a
scasd eax, dword es:[edi]
pop ecx
add byte [eax], al
push 0x28
lea eax, [ebp - 0x44]
push 0
push eax
call fcn.0056cdd0
mov al, 0x75
mov bl, 0x66
mov byte [ebp - 0x37], al
mov byte [ebp - 0x33], al
mov byte [ebp - 0x2d], al
mov dl, 0x6f
mov cl, 0x70
mov al, 0x64
add esp, 0xc
mov byte [ebp - 0x44], 0x54
mov byte [ebp - 0x43], 0x5a
mov byte [ebp - 0x42], 0x54
mov byte [ebp - 0x41], 0x55
mov byte [ebp - 0x40], 0x46
mov byte [ebp - 0x3f], 0x4e
mov byte [ebp - 0x3e], 0x5d
mov byte [ebp - 0x3d], 0x44
mov byte [ebp - 0x3c], 0x76
mov byte [ebp - 0x3b], 0x73
mov byte [ebp - 0x3a], 0x73
mov byte [ebp - 0x39], bl
mov byte [ebp - 0x38], dl
mov byte [ebp - 0x36], 0x44
mov byte [ebp - 0x35], cl
mov byte [ebp - 0x34], dl
mov byte [ebp - 0x32], 0x73
mov byte [ebp - 0x31], cl
mov byte [ebp - 0x30], 0x6d
mov byte [ebp - 0x2f], 0x54
mov byte [ebp - 0x2e], bl
mov byte [ebp - 0x2c], 0x5d
mov byte [ebp - 0x2b], 0x54
mov byte [ebp - 0x2a], bl
mov byte [ebp - 0x29], 0x73
mov byte [ebp - 0x28], 0x77
mov byte [ebp - 0x27], 0x6a
mov byte [ebp - 0x26], al
mov byte [ebp - 0x25], bl
mov byte [ebp - 0x24], 0x74
mov byte [ebp - 0x23], 0x5d
mov byte [ebp - 0x22], 0x4f
mov byte [ebp - 0x21], 0x55
mov byte [ebp - 0x20], 0x6a
mov byte [ebp - 0x1f], al
mov byte [ebp - 0x1e], bl
mov byte [ebp - 0x1d], 0
jns 0x5674c5
js 0x5674c5
call 0x8b12ca53
dec ebp
ror dword [edx - 0x350139bb], 0xfe
leave
mov dl, byte [ebp - 0x44]
mov cl, byte [ebp - 0x3f]
mov al, byte [ebp - 0x3a]
dec dl
dec cl
mov byte [ebp - 0x44], dl
mov dl, byte [ebp - 0x35]
mov byte [ebp - 0x3f], cl
mov cl, byte [ebp - 0x30]
dec al
dec dl
mov byte [ebp - 0x3a], al
mov al, byte [ebp - 0x43]
dec cl
mov byte [ebp - 0x35], dl
mov dl, byte [ebp - 0x3e]
mov byte [ebp - 0x30], cl
mov cl, byte [ebp - 0x39]
dec al
dec dl
dec cl
mov byte [ebp - 0x43], al
mov al, byte [ebp - 0x34]
mov byte [ebp - 0x3e], dl
mov byte [ebp - 0x39], cl
mov dl, byte [ebp - 0x2f]
mov cl, byte [ebp - 0x42]
dec al
dec dl
dec cl
mov byte [ebp - 0x34], al
mov al, byte [ebp - 0x3d]
mov byte [ebp - 0x2f], dl
mov dl, byte [ebp - 0x38]
mov byte [ebp - 0x42], cl
mov cl, byte [ebp - 0x33]
dec al
dec dl
mov byte [ebp - 0x3d], al
mov al, byte [ebp - 0x2e]
dec cl
mov byte [ebp - 0x38], dl
mov dl, byte [ebp - 0x41]
mov byte [ebp - 0x33], cl
mov cl, byte [ebp - 0x3c]
dec al
dec dl
mov byte [ebp - 0x2e], al
mov al, byte [ebp - 0x37]
dec cl
mov byte [ebp - 0x41], dl
mov dl, byte [ebp - 0x32]
mov byte [ebp - 0x3c], cl
mov cl, byte [ebp - 0x2d]
dec al
dec dl
mov byte [ebp - 0x37], al
mov al, byte [ebp - 0x40]
dec cl
mov byte [ebp - 0x32], dl
mov dl, byte [ebp - 0x3b]
mov byte [ebp - 0x2d], cl
mov cl, byte [ebp - 0x36]
dec al
dec dl
mov byte [ebp - 0x40], al
mov al, byte [ebp - 0x31]
dec cl
mov byte [ebp - 0x3b], dl
mov dl, byte [ebp - 0x2c]
mov byte [ebp - 0x36], cl
mov cl, byte [ebp - 0x2b]
dec al
dec dl
mov byte [ebp - 0x31], al
mov al, byte [ebp - 0x27]
dec cl
mov byte [ebp - 0x2c], dl
mov dl, byte [ebp - 0x23]
mov byte [ebp - 0x2b], cl
mov cl, byte [ebp - 0x1f]
dec al
dec dl
mov byte [ebp - 0x27], al
mov al, byte [ebp - 0x2a]
dec cl
mov byte [ebp - 0x23], dl
mov dl, byte [ebp - 0x26]
mov byte [ebp - 0x1f], cl
mov cl, byte [ebp - 0x22]
dec al
dec dl
mov byte [ebp - 0x2a], al
mov al, byte [ebp - 0x1e]
dec cl
mov byte [ebp - 0x26], dl
mov dl, byte [ebp - 0x29]
mov byte [ebp - 0x22], cl
mov cl, byte [ebp - 0x25]
dec al
dec dl
dec cl
mov byte [ebp - 0x1e], al
mov al, byte [ebp - 0x21]
mov byte [ebp - 0x29], dl
mov byte [ebp - 0x25], cl
mov dl, byte [ebp - 0x28]
mov cl, byte [ebp - 0x24]
dec al
dec dl
mov byte [ebp - 0x21], al
mov al, byte [ebp - 0x20]
dec cl
dec al
mov byte [ebp - 0x28], dl
mov byte [ebp - 0x24], cl
mov byte [ebp - 0x20], al
jp 0x567602
jnp 0x567602
call 0x8e4ec393
push ebp
mov esp, 0x6a016a51
add byte [edx + 0x68], dl
add al, byte [eax]
add byte [eax + 0x3c68e8], al
add byte [ebx + 0x7f037ef0], cl
add dword [esi + 0x6a], ebx
sub byte [ebp + 0x6abc45], cl
lea ecx, [ebp - 8]
lea edx, [ebp - 0x44]
push ecx
push 1
push 0
push edx
push 0x80000002
call 0x56b280
mov esi, eax
jle 0x56761f
jg 0x56761f
pop esi
push 0x28
lea eax, [ebp - 0x44]
push 0
push eax
call fcn.0056cdd0
add esp, 0xc
jns 0x567634
js 0x567634
call 0x85666cbd
cdq
add byte [eax], al
add byte [esi + 3], dh
test esi, esi
jne 0x5676d5
jbe 0x567641
ja 0x567641
call 0x5512bc0b
mov byte [ebp - 0x44], 0x54
mov byte [ebp - 0x43], bl
mov byte [ebp - 0x42], 0x73
mov byte [ebp - 0x41], 0x6a
mov byte [ebp - 0x40], 0x62
mov byte [ebp - 0x3f], 0x6d
mov byte [ebp - 0x3e], 0
jl 0x567661
jge 0x567661
call 0x8b12bbef
pop ebp
mov ebp, 0x8abe558a
dec ebp
mov edi, 0xcbfec8fe
mov al, byte [ebp - 0x44]
mov bl, byte [ebp - 0x43]
mov dl, byte [ebp - 0x42]
mov cl, byte [ebp - 0x41]
dec al
dec bl
mov byte [ebp - 0x44], al
mov al, byte [ebp - 0x40]
mov byte [ebp - 0x43], bl
mov bl, byte [ebp - 0x3f]
dec dl
dec cl
dec al
dec bl
mov byte [ebp - 0x42], dl
mov byte [ebp - 0x41], cl
mov byte [ebp - 0x40], al
mov byte [ebp - 0x3f], bl
jl 0x567696
jge 0x567696
call 0x8e52c427
push ebp
mov byte [ecx - 0x73], dl
inc ebp
hlt
lea ecx, [ebp - 4]
lea edx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0xc]
push edx
mov edx, dword [ebp - 8]
push eax
lea ecx, [ebp - 0x44]
push esi
push ecx
push edx
call fcn.0056df80
mov esi, eax
jle 0x5676b7
jg 0x5676b7
call 0x45e39f25
mov esp, 0xe850006a
or al, 0x57
add byte [eax], al
push 0x28
lea eax, [ebp - 0x44]
push 0
push eax
call fcn.0056cdd0
add esp, 0xc
jl 0x5676cc
jge 0x5676cc
jle 0x567658
mov ecx, dword [ebp - 8]
dec ebp
clc
push ecx
call fcn.00567ba0
jne 0x5676da
je 0x5676da
call 0x5e3abca4
mov byte [ebp - 0x1c], 0x5d
mov byte [ebp - 0x17], 0x55
mov byte [ebp - 0x1b], 0x5d
mov byte [ebp - 0x16], 0x4a
mov byte [ebp - 0x1a], 0x2f
mov byte [ebp - 0x15], 0x44
mov byte [ebp - 0x19], 0x5d
mov byte [ebp - 0x14], 0x46
mov byte [ebp - 0x18], 0x4f
mov byte [ebp - 0x13], 0
jbe 0x567707
ja 0x567707
call 0x14569496
push ebp
add byte [eax + 0xb], bh
mov ebx, dword [0x551400]
mov eax, 0xb
add ebx, eax
mov dword [0x551400], ebx
jle 0x56771f
jg 0x56771f
call 0x145a7c4c
push ebp
add byte [edx + 3], dh
sub dword [0x551404], eax
jb 0x56772a
jae 0x56772a
call 0x8b3ac4b8
inc ebp
jmp 0x8b3bd4be
mov cl, byte [ebp - 0x1c]
mov al, byte [ebp - 0x17]
mov bl, byte [ebp - 0x1b]
mov dl, byte [ebp - 0x16]
dec cl
dec al
mov byte [ebp - 0x1c], cl
mov cl, byte [ebp - 0x1a]
dec bl
mov byte [ebp - 0x17], al
mov al, byte [ebp - 0x15]
dec dl
mov byte [ebp - 0x1b], bl
mov bl, byte [ebp - 0x19]
dec cl
mov byte [ebp - 0x16], dl
mov dl, byte [ebp - 0x14]
mov byte [ebp - 0x1a], cl
mov cl, byte [ebp - 0x18]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0x15], al
mov byte [ebp - 0x19], bl
mov byte [ebp - 0x14], dl
mov byte [ebp - 0x18], cl
jbe 0x567777
ja 0x567777
cmp byte [ebp + 0x757a75f6], al
add esi, dword [ecx + eax - 0x18]
test esi, esi
jne 0x5677f5
jne 0x567780
je 0x567780
call 0x52decd11
lea edx, [ebp - 0x78]
push edx
call fcn.0056cdb0
add esp, 4
mov dword [ebp - 4], eax
jbe 0x567794
ja 0x567794
mov eax, 0x9fc7d83
cmp dword [ebp - 4], 9
ja 0x5677ad
cmp dword [esp + 4], 0x1770376
pop esi
mov eax, 0x15
pop ebx
mov esp, ebp
pop ebp
ret
jb 0x5677b2
jae 0x5677b2
call 0x8b52bd41
dec esp
add eax, 0xed4d8885
mov eax, dword [ebp - 4]
mov cl, byte [ebp + eax - 0x7b]
mov byte [ebp - 0x13], cl
jbe 0x5677c1
ja 0x5677c1
call 0x8b52cd50
inc esp
adc eax, 0xee458883
mov edx, dword [ebp - 4]
mov al, byte [ebp + edx - 0x7d]
mov byte [ebp - 0x12], al
jp 0x5677d0
jnp 0x5677d0
call 0x8b52c55f
push esp
or eax, 0xef558881
mov ecx, dword [ebp - 4]
mov dl, byte [ebp + ecx - 0x7f]
mov byte [ebp - 0x11], dl
jbe 0x5677df
ja 0x5677df
call 0x8b52bd6e
mov word [0xffffff7f], es
mov eax, dword [ebp - 4]
mov cl, byte [ebp + eax - 0x81]
mov byte [ebp - 0x10], cl
jo 0x5677f1
jno 0x5677f1
call 0x147bdbb
mov byte [ebp - 0xf], 0
jne 0x5677fa
je 0x5677fa
call 0x80be7868
add byte [eax], al
add byte [edx + 3], ch
push 0
push pe_nt_image_headers32
push 3
push 0
push 3
lea edx, [ebp - 0x1c]
push 0xc0000000
push edx
call fcn.0056f700
mov esi, eax
jb 0x56781c
jae 0x56781c
call 0x45e3868a
in al, 0x6a
add byte [eax - 0x18], dl
cmpsd dword [esi], dword es:[edi]
push ebp
add byte [eax], al
push 0xe
lea eax, [ebp - 0x1c]
push 0
push eax
call fcn.0056cdd0
add esp, 0xc
jb 0x567831
jae 0x567831
call 0x755676b8
sbb esi, dword [esi + 3]
cmp esi, 0xffffffff
je 0x567851
jbe 0x56783b
ja 0x56783b
call 0x6b566095
add byte [eax], al
push esi
call fcn.0056e340
jns 0x567846
js 0x567846
call fcn.005e30a8
add byte [eax], al
pop esi
mov eax, 7
pop ebx
mov esp, ebp
pop ebp
ret
jbe 0x567856
ja 0x567856
call 0x6c30b8
add byte [eax], al
pop esi
mov eax, 0x15
pop ebx
mov esp, ebp
pop ebp
ret