Function at 0x65688e50
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ecx, 0x19
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x17f]
mov esi, 0x656ace73
push ebx
sub esp, 0x19c
imul eax, dword [str._0__6ztj], 0x548cb722
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x14d]
mov esi, str.The_requested_session_cannot_be_controlled_remotely.
mov ecx, 0x35
rep movsb byte es:[edi], byte [esi]
mov ecx, str.SuppressApp0
mov dword [0x656a8f64], eax
movzx edi, byte [ecx]
lea edx, [edi - 0x30]
cmp dl, 9
ja 0x65688ea2
inc ecx
jmp 0x65688e94
mov dword [esp + 4], str.TimeDateStamp
add eax, 0x7f68f358
mov dword [esp], str.SuppressApp0
mov dword [0x656a8c20], eax
call fcn.65692fc4
xor eax, eax
mov byte [ebp + eax - 0x118], al
inc eax
cmp eax, 0x100
jne 0x65688ec2
xor esi, esi
xor ebx, ebx
mov eax, ebx
mov edi, 0x34
xor edx, edx
mov cl, byte [ebp + ebx - 0x118]
div edi
mov byte [ebp - 0x189], cl
movzx eax, byte [ebp + edx - 0x14d]
movzx edx, cl
add eax, edx
add eax, esi
movzx esi, al
mov al, byte [ebp + esi - 0x118]
mov byte [ebp + ebx - 0x118], al
mov eax, dword [0x656a8c20]
inc ebx
sub eax, 0x21c05c0d
mov dword [str._0__6ztj], eax
call fcn.65693328
mov eax, dword [str._0__6ztj]
xor eax, 0xa9ed7c71
mov dword [0x656a8f64], eax
call dword [sym.imp.USER32.dll_GetMessageTime]
mov cl, byte [ebp - 0x189]
and dword [0x656a8f64], 0xd3d60f46
xor eax, 0x28095baf
mov dword [0x656a8c20], eax
mov byte [ebp + esi - 0x118], cl
cmp ebx, 0x100
jne 0x65688ed5
xor ebx, ebx
xor ecx, ecx
xor edx, edx
inc edx
lea esi, [ebp - 0x166]
movzx edx, dl
movzx edi, byte [ebp + edx - 0x118]
add ecx, edi
movzx ecx, cl
mov al, byte [ebp + ecx - 0x118]
mov byte [ebp + edx - 0x118], al
mov eax, edi
mov byte [ebp + ecx - 0x118], al
add al, byte [ebp + edx - 0x118]
movzx eax, al
mov al, byte [ebp + eax - 0x118]
xor al, byte [ebx + ebp - 0x17f]
mov byte [ebp + ebx - 0x166], al
inc ebx
cmp ebx, 0x19
jne 0x65688f6a
mov dword [esp + 8], esi
mov dword [esp + 0xc], 0x19
mov dword [esp + 4], 0x14a8
mov dword [esp], str.smxR9Dfu4dT5QQWzilozY3EYCsXGnvA5hr6SDkbHBR3rhhn7ohWvDqXV68NIJwrupgN8WUriky_er3NoJispt5hFaq4XGewM95DLNHVNX5wsWH40tcJk_rQgGZrpm5pwET2Csht1M73CU7LrcibiAhS_ovrrZ7iHx7xwFHFCXmlzFgRAxBU2v62JmD0Q3k93cQgs33oPLItbV3lcC2qb1OOGeMbSHQEGL66jhbryPSIiePm1f0zTRORPNlFFIiSQimUKpgfFdetPH3_AM5htzuQwOEokkZiHlna_OgLOP7YOKORPJboUtdvc61r0ybYTeAGUaJfJhLZ9v5QMwJFKY4Cz84lDcyiJllEVbS0ImhOQUn90Cb0_h_dYkBPMT6jZIaGlWFwSRqJo_BcVHHSQmgZJO5Q2enZTCZdKFwZFElys3WPStnFjBhXkaw7kgEeIXJQoQ56i_WsKGOPwKLtIUTrzCoOjzKLeQZFO_g38p2afb6BKPElETKuZdLz1QrJFdJezBOXjxpDSZthzZgjEPYaeke1VIj6au00JJwGBzv2XLTaIWfJwBnLjg2Rce3LyhSkADsoZftTW4fzkKaibcHyOiYIdt_3JzhQ20MXBGdbweGr7TZT_eWwTHMVErcyrQreHbTSoCa9yZAHuXKLTchNpwzwGGXkFCrkPN1VKSiDVxZZ1_wTW2qKGY7eA7S_W1mUVbUZTnhw7edXF81mp77795k1LLzMboWT6V8Jz2vQFIOU7JOQ8bFmko_YWvNDAvfxNXvUZqUDVlOfG8xgFNcx5ELdfIbyGYZlw61MuRCUHrzBDZHv8MUadSMnVyZ9652q7w7cxzghWm7WuJ5zWP2J592h6Q4ZAX33B_zqg3BbKVKjIhvDgmyeq2NVVeTLb6xAslALJEIMN0d5Qy5tqUajeqpDgxkVANs_6qUtx8H3XoI6jK8vnyeZAhivwjkXYa2OrZ6j__jNisuOEX1bXBVnDz8wczhryhEXVae_u6_FP8acX5mFGmxA5lhMI7up1BWCKAXj9dK_xh8GlpyqGFHYSLo_pxziHgOVIaS8QtoJ80RfxrvoiFLKnUorAo6dMsmBhrVUXoEl6QtNIN_Lm2R0hM4qoHbr_NBzvkF0jdH1WHPN9Hi7UzWtC__PKZERTZJfjCI28ejdWAt_DS0O5RIpHQvl6NC6nhqX1Ifm2AtsCrryyKtjTVdv6JYXd3aPywRNfveOqLAN8IUN4Rhb0rSJbPw6iu91tL_nsOedox2mKaYgy5yR9diq_NqtjDianqsdB_aoEGDP4L5rVQ_es9LQzbg95Cn0On2M8HM8xin0yc7z3dFuqf75siTWJ2Zq3DaKenCi8EF5DD6QuNxddjzfj2VRyK1ARmIgc1UUxC2jzTnZio9qELgQENWcAOf5J0HpGsnajGvQq6mukaeksjhRWebeYdisyplPnKBgSogXHyXT67nsnOyc21okHoE83zbX3nGPtnBCtn1aDSmWrX6dfBAzs8bs9a1BO21ztiRF4NWYJeIv4Abnj_EwSs0aVpZoFhqrpkt0rJ_TPZ_HddSm8wC1N6uF0xIb4HiuaZzkQKq5FEe2l752Y9HSBFMY4h4nFuyHLmfGuVME6Sna2t558efgUW6atp7eaT22E6GGu6EVL3QuOhN07KlC6klOXQRtwfwyGd8v7KHqH2N8L3i9Wn7f7KbGtpS2VquuVSOXoFnWeqosa_y8BuZICR8OVghkRCrxnWknqS_1H5G1gS3p_Kx3bVNYFeTPrsXnuADLVjLMD0uueYmm2Bp0RF67qQCVJSS_0gmXMUTZAGIwALFYPTaLWClGDVG1HKwzHr_0NxZzZ0bj4bwwvN__8NVUAavL638AUrlaDvx1Uob7MO0cIVkbQCg8hIqrnVT8ufwUicN89ogmFDG3iPbNOOHqAt5aJxT3oJs6lVoXFw5uDIDKqgfGaY1ryvrvNwPohK431UYixJ6X0pr0WAKLY2w7ogBqaN6MD5I34oh8Id2xgH0y8oNyMANl0vH01VbECVnDzPAwhtsxnDxQXSf81b9TFQFm9ZShzooxJMroTKnz_mLROZsvFf5dVQlOa_ZU3vy17mWeOFlDSd6KreoQf5wDVLxrC2lhJ8D_LmKjDecUg0qAcWiJLLBsXB_VZju1t7pk8fOroAyxmA302cfBfUBCSSCV1BT9fBTxFVCCo3MY0UeskzyUGTMokNIIszy2_aqpu7o5UIbggw0OVo38o9UKZ7MhG8wYKeMZqOqqZ7SUzfPUJx_m6bB6_aahhFrEJfSPi7clA5WNQxAgz6lnkm3gta8C19IwnCAP_DYbUKw2TESX3iWNMxR9S1BgUPHbYcpY9mgbUeAVwsSrByPfpFuOMMsxgEtcQSj758spX_jpBJ3lCZr0LwEHAFWTsf4YsAxdOdwFdywdHJwO_xVCgTVcLHqMjG64yv4GwNzorQADGHCplT0ERudNg6lTSBJzyXl7uh1CYAifrm9ogL7fHBvws5OBk9P5UdNMB0he4Oi1tmFdzroRjduADoehJMZWZZvJLsPoQyemP2fHBYnL3gA7kmzzgwmlAqLWjfkKzPIpkMDcNIIvV5pkGrbH4m8G130EZ3iQ0EyUR5kbVb5GNKbw0TMkoLsgNx1GGwyn8264VhlZ7d3UxzFxJ5L6PygzctGH384SQUVluNUBg5pOcL8A3a23QyXaXmbiaj_3UDael5V1rhhMT2_cXtJtFfXRKbBu5VOjFewidNXqVijVOs8KE_QrBesP8yF3kt4BNF6r9XGZU1WkgSN8uPUbmEWfH6hJGTYNEc1j4y0TiddXcF5ZEOzU0KxBsP2a7eiK6C_X_V_NW0decSvi4qpDA1Nd7yurCgZg3dqnksNcqcl2zkBr_5KG6SHJIr2Qjdi9LLTGSyvxEHPLtqyoN6rUE3SJDQlwiwlFVCA683kgQrqpED6C20xBXwtLq_7xbPNeJhxju6AL1FZikdXygNUedhcikFLWvqlXog3u0rB_QP6WZnn9L_ZE87UxVVSc4pdmfGRgc6sDujHoxTb5GoGLy_zodfmXIxIkv1D8hrYe_Pyjm4zadM4uKVlbBigVso6XvXzvjj022K4OKQ2Ry03Xkf8KUsN2f2qi6oOo4Ev5JxLz5IfCTXsMVpntUqcnpC3YcW0ovYVdam9_iAYUDOx2fy4PSMmoKHcTAnKJJ6vOvTKGDzDcCB0tBHmiM7KdqFPm6IpfILCAzkSPGSxhVbirZlDTNsB8gjD0_eW9qX0BVbBFbotMA79K1M125Oi9IYH9UkT65dbDULriB6EmKjd3PyLZ6dIUqzoLPRFO6MEV2eFVbnEt2jwoyPmVM5ZUXWmjYrZgZ8VnQRUl2w_4c4lEWkUsBdL6K7qNiu_sTrl9srx_ea4Y1ksGwRFj0jrwnPWuK8TZzSk0LJYwnioAOHGSx3511l_Y4XnGULe8YxZ2zrZh8tia35kHj_ZojSc60BuJSqS5OpPew9g_zBCDDXahT6pSJkKPCm9AD0FN6v0nrjpl9YAroyc0dNYFibgy2g4Fz2xku9_b7PonjH5bgTkzaA0k5ipPDne_4oKF_y9sR7bxQxaFy92VOwzEovWwtwO9gwsbm_rLa83CIpZS7ITboOuD6PJe6J3tCLEZ_YZrUy0CNzMfl_YpqJh22oc9p5VXUqNTX71m7unKRfiO666aQ5WEqcUqwHpSmn7Vhh1WWgAdQt2U4Om15yyKjG2TYSs_nCNg9WCYK0irMqudmI3uSWyn5HEgpdJ69BY_I4YZNR1B6i6JaZNNe2m_Y46wuOmxodhLjo31CaDr0tmvoSLyak1sHiQSBf4wj_QzMjV_Nxufzka1SXmhyX7lNv47vx_G4v8J8K0hVf5jIddX_ppF4tNXG_j4JBNd4ezNbvHMNOgl6dztOVgX84CCCgsMlayMreGV06SNxNPeQJ3uog4aarUWpRQNmmUAZ63fwtkd83MEIuCfRVyWrC_nArfHZX9NcEQoFl41YNAPj8Vfz1ZAnOX58QELOwAvoGQDjKdLGivSPWWBgI
mov byte [ebp - 0x14d], 0
call fcn.6568bff8
add esp, 0x19c
pop ebx
pop esi
pop edi
pop ebp
ret