Function at 0x561bdf
Capabilities:
Encode data using xor

Disassembly:
push esi
mov esi, 4
add ebp, esi
pop esi
add ebp, 2
xchg dword [esp], ebp
mov esp, dword [esp]
add ecx, esp
push 0x38b55ecc
mov dword [esp], ecx
mov dword [esp], eax
pop dword [ecx]
push ebp
mov edi, dword [esp]
jmp 0x561d00
push edi
push 0x6a9fae7e
pop edi
shr edi, 3
jnp 0x561a3e
jmp fcn.00561cb0
shr ebp, 4
shl ebp, 2
sub ebp, 0x3aee6dfc
jnp 0x561c2c
jmp 0x5619aa
pop ecx
add esp, 4
push ebp
mov edi, dword [esp]
push eax
push esp
pop eax
add eax, 4
jmp 0x561ad5
add eax, edi
pop edi
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
jmp 0x561bdc
pop esp
mov ebp, dword [esp]
push edx
push esp
pop edx
push eax
mov eax, 0x7bffa055
shr eax, 8
jp 0x561aa2
jmp 0x561bf3
add edx, 0xff3f9fdf
add esi, edx
mov edx, dword [esp]
add esp, 4
jmp 0x561b03
add ebx, 2
xchg dword [esp], ebx
mov esp, dword [esp]
push eax
mov dword [esp], esi
mov esi, 0x7d7ebdb5
inc esi
push ebp
mov ebp, 0x2d022a9
xor esi, ebp
pop ebp
add eax, esi
mov esi, dword [esp]
add esp, 4
add eax, ebp
sub eax, 0x7fae9f1f
jmp 0x561d4d
sub eax, 0x7bff9c
add edx, eax
pop eax
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
jmp 0x561c12
mov esi, dword [esp]
add esp, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push 0x407a1129
jmp 0x561ce3
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push ecx
mov ecx, 0x4b3fed1b
push esi
mov dword [esp], eax
mov eax, 0x32de96fc
and eax, 0x7fda8151
jnp 0x561ad5
jmp 0x561b15
add esi, 4
xchg dword [esp], esi
pop esp
mov ecx, dword [esp]
push ecx
mov ecx, esp
jmp 0x561cbe
or eax, 0x5f7f685c
jl 0x561d21
jmp 0x561dd9
pop esp
push edi
mov edi, 0x57ef64b9
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
mov esi, 0x6b33941e
or edi, esi
pop esi
inc edi
jnp 0x561bf3
jmp 0x561d7e
inc edx
jo 0x561d14
jmp 0x561d14
and edx, 0x1df86cb5
jne 0x561a59
jmp 0x561b03
add edi, ecx
sub edi, 0x6d6f9224
pop ecx
push dword [edi]
mov edi, dword [esp]
push 0x6b7f0609
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
jmp 0x561c49
mov esi, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
jmp 0x561e62
push edi
mov edi, 4
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
push dword [esp]
pop edx
push esi
mov esi, esp
push edx
mov edx, 0x7f389c98
jmp 0x561b85
pop esp
push dword [esp]
pop ebx
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
jmp 0x561bf3
xor ebp, 0xe10d709c
add edx, ebp
pop ebp
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
jmp 0x561b57
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
sub esp, 4
mov dword [esp], ebx
push 0
pop ebx
add edi, 0x3eb71dac
jmp 0x561d21
xchg dword [esp], edi
mov esp, dword [esp]
push ebp
mov ebp, 0x4d
push eax
mov eax, 0x23fd6128
add edi, eax
pop eax
add edi, ebp
sub edi, 0x23fd6128
jmp 0x561da3
dec edi
jo 0x561a6c
jmp 0x561cf5
add eax, 0x493fed49
sub ecx, eax
mov eax, dword [esp]
add esp, 4
add edi, 0x6d6f9224
jmp 0x561bb3
shl edi, 4
jp 0x561c8c
jmp 0x561e09
push edx
mov edx, 0x7fd3dc38
shl edx, 3
jne 0x561d41
jmp 0x561ad5
sub edx, 0x37dbe4bb
jb 0x561e2f
jmp 0x561b85
mov dword [esp], esi
mov dword [esp], 0
push dword [esp]
jmp 0x561a15
add edi, 0x2ac0a315
jmp 0x561a2a
push edi
push esp
pop edi
add edi, 4
add edi, 4
jmp 0x561c6a
neg edx
jle 0x561b91
jmp 0x561aa2
add edi, ebx
sub edi, 0x3eb71dac
mov ebx, dword [esp]
add esp, 4
push word [edi]
mov cx, word [esp]
push ebp
mov ebp, esp
jmp 0x5619aa
dec edx
jo 0x561d7e
jmp 0x561dfc
push dword [eax]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push ebx
push 4
pop ebx
add ecx, ebx
pop ebx
xchg dword [esp], ecx
pop esp
push dword [eax]
mov eax, dword [esp]
push ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
jmp 0x561abb
add edi, 0x80000b42
add ebx, edi
pop edi
push word [ebx]
mov ax, word [esp]
push 0x5495fc7e
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
jmp 0x561a6c
push dword [esp]
pop ebp
add esp, 4
push edx
mov edx, 0
mov dword [edi], edx
push dword [esp]
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add esp, 4
mov edi, dword [esp]
push eax
mov eax, esp
jmp 0x5619e9
shr eax, 4
shr eax, 2
jnp 0x561c98
jmp 0x561a2a
add ecx, edi
pop edi
xchg dword [esp], ecx
mov esp, dword [esp]
popfd
ret 0
neg edx
jns 0x561cd2
jmp 0x561bf3
add ebx, ecx
push eax
push 0x3fef5ca4
pop eax
add ebx, eax
pop eax
sub ebx, 0x79b2936b
pop ecx
push dword [ebx]
mov ebx, dword [esp]
push edx
mov edx, esp
push ebp
mov ebp, 0x6fef7a5a
jmp 0x5619fe
not edx
push esi
mov esi, 0x367ac675
sub edx, esi
pop esi
add ecx, edx
pop edx
push edi
mov edi, 4
add ecx, edi
pop edi
xchg dword [esp], ecx
pop esp
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 4
jmp 0x561dea
xchg dword [esp], ebp
pop esp
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
jmp 0x561a3e