Function at 0x20563dfd
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
push 0xd
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.2055a104
add esp, 0xc
jnp 0x20563e18
cmp esp, 0x4bf8
jp 0x20563e20
jbe 0x20563e3c
pushf
test eax, 0x7854
std
cld
popf
lea edi, [edi + 0xc0b]
lea edi, [edi - 0xc0b]
ja 0x20563e3c
mov ecx, 0x44e845c6
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x15], 0x62
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xf], 0x66
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x14], 0x75
mov byte [ebp - 0x11], 0x76
mov byte [ebp - 0xe], 0x79
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0x10], 0x75
mov byte [ebp - 0xd], 0x42
mov byte [ebp - 0xc], 0
nop
jae 0x20563e73
test eax, 0x746a
jbe 0x20563e88
pushf
lea esp, [esp]
popf
jno 0x20563e83
lea esi, [esi]
ja 0x20563e88
sub eax, 0x80e84d8a
jmp 0x8a3c692
mov cl, byte [ebp - 0x18]
sub cl, 1
mov byte [ebp - 0x18], cl
mov dl, byte [ebp - 0x15]
sub dl, 1
mov byte [ebp - 0x15], dl
mov al, byte [ebp - 0x12]
sub al, 1
mov byte [ebp - 0x12], al
mov cl, byte [ebp - 0xf]
sub cl, 1
mov byte [ebp - 0xf], cl
mov dl, byte [ebp - 0x17]
sub dl, 1
mov byte [ebp - 0x17], dl
mov al, byte [ebp - 0x14]
sub al, 1
mov byte [ebp - 0x14], al
mov cl, byte [ebp - 0x11]
sub cl, 1
mov byte [ebp - 0x11], cl
mov dl, byte [ebp - 0xe]
sub dl, 1
mov byte [ebp - 0xe], dl
mov al, byte [ebp - 0x16]
sub al, 1
mov byte [ebp - 0x16], al
mov cl, byte [ebp - 0x13]
sub cl, 1
mov byte [ebp - 0x13], cl
mov dl, byte [ebp - 0x10]
sub dl, 1
mov byte [ebp - 0x10], dl
mov al, byte [ebp - 0xd]
sub al, 1
mov byte [ebp - 0xd], al
cmc
jl 0x20563f01
pushf
shr eax, 0
popf
xchg esp, esp
lea edx, [edx]
jge 0x20563f01
mov esi, 0xe85de8
add byte [ecx + 0x7d83f845], cl
clc
add byte [ebp + 7], dh
call fcn.20572763
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x20563f16
xor eax, eax
jmp 0x20564131
and edi, edi
nop
jns 0x20563f2a
lea ebx, [ebx + 0x52b1]
lea ebx, [ebx - 0x52b1]
js 0x20563f2a
mov edi, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp - 8]
push edx
call fcn.2055cb42
mov dword [ebp - 4], eax
push 0xd
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.2055a104
add esp, 0xc
cmp dword [ebp - 4], 0
jne 0x20563f57
xor eax, eax
jmp 0x20564131
mov edi, edi
jb 0x20563f63
jbe 0x20563f5d
ja 0x20563f5f
jae 0x20563f63
mov eax, 0xfc4d8b91
mov ecx, dword [ebp - 4]
push ecx
call fcn.205599f9
add esp, 4
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.2055a104
add esp, 0xc
xchg ebx, ebx
jp 0x20563f8e
jbe 0x20563f85
xchg edi, edx
xchg edi, edx
jmp 0x20563f8b
jnp 0x20563f8e
mov ecx, 0x44e845c6
mov byte [ebp - 0x18], 0x44
mov byte [ebp - 0x15], 0x62
mov byte [ebp - 0x12], 0x4e
mov byte [ebp - 0xf], 0x66
mov byte [ebp - 0x17], 0x73
mov byte [ebp - 0x14], 0x75
mov byte [ebp - 0x11], 0x76
mov byte [ebp - 0xe], 0x79
mov byte [ebp - 0x16], 0x66
mov byte [ebp - 0x13], 0x66
mov byte [ebp - 0x10], 0x75
mov byte [ebp - 0xd], 0x58
mov byte [ebp - 0xc], 0
xor esp, 0
rol esi, 0
mov edx, edx
js 0x20563fdb
pushf
jle 0x20563fd0
popf
jp 0x20563fd4
ja 0x20563fd6
jle 0x20563fd8
jns 0x20563fdb
mov eax, 0x2ce8458a
add dword [eax + 0x4d8ae845], ecx
jmp 0x20563f67
mov al, byte [ebp - 0x18]
sub al, 1
mov byte [ebp - 0x18], al
mov cl, byte [ebp - 0x15]
sub cl, 1
mov byte [ebp - 0x15], cl
mov dl, byte [ebp - 0x12]
sub dl, 1
mov byte [ebp - 0x12], dl
mov al, byte [ebp - 0xf]
sub al, 1
mov byte [ebp - 0xf], al
mov cl, byte [ebp - 0x17]
sub cl, 1
mov byte [ebp - 0x17], cl
mov dl, byte [ebp - 0x14]
sub dl, 1
mov byte [ebp - 0x14], dl
mov al, byte [ebp - 0x11]
sub al, 1
mov byte [ebp - 0x11], al
mov cl, byte [ebp - 0xe]
sub cl, 1
mov byte [ebp - 0xe], cl
mov dl, byte [ebp - 0x16]
sub dl, 1
mov byte [ebp - 0x16], dl
mov al, byte [ebp - 0x13]
sub al, 1
mov byte [ebp - 0x13], al
mov cl, byte [ebp - 0x10]
sub cl, 1
mov byte [ebp - 0x10], cl
mov dl, byte [ebp - 0xd]
sub dl, 1
mov byte [ebp - 0xd], dl
lea esi, [esi + 0x6a28]
lea esi, [esi - 0x6a28]
sub edi, 0
shl edx, 0
test eax, esi
jae 0x20564065
jle 0x2056405b
jo 0x2056405d
jb 0x2056405f
jns 0x20564061
jb 0x20564065
call 0x893c3fe
sti
push esp
and byte [eax], al
cmp dword [0x2054fbe8], 0
je 0x2056409d
jo 0x20564070
shr esp, 0
jbe 0x2056408a
pushf
jae 0x20564079
shl esi, 0
shl esp, 0
popf
jb 0x20564083
xchg edi, esi
xchg edi, esi
ja 0x2056408a
mov edi, 0x50e8458d
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [0x2054fbe8]
push ecx
call fcn.2055cb42
mov dword [ebp - 0x1c], eax
add eax, 0
test esp, 0x2bc5
jg 0x205640b5
pushf
cmp esi, dword [esp]
popf
lea esp, [esp]
jle 0x205640b5
sub dword [edx + 0xd], 0x558d006a
call 0x80992912
invalid
push 0xd
push 0
lea edx, [ebp - 0x18]
push edx
call fcn.2055a104
add esp, 0xc
jne 0x205640c7
cmp esp, 0x6e6a
je 0x205640d8
xchg ecx, ecx
jge 0x205640d3
ja 0x205640d5
jne 0x205640d8
mov edx, 0xe47d83
cmp dword [ebp - 0x1c], 0
je 0x205640fe
ja 0x205640e0
js 0x205640e2
ja 0x205640f2
lea esi, [esi]
lea esp, [esp]
xchg ebx, esi
xchg ebx, esi
jae 0x205640ef
jbe 0x205640f2
add eax, 0x50e4458b
mov eax, dword [ebp - 0x1c]
push eax
call fcn.205599f9
add esp, 4
xor edx, dword [esp + 0xc]
xor edx, dword [esp + 0xc]
rol ecx, 0
jmp 0x2056410b
sub esp, 0
jbe 0x20564122
pushf
call fcn.20564117