Function at 0x10065100
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
lea ebp, [esp - 0x570]
sub esp, 0x570
push 0xffffffffffffffff
push 0x101973d2
mov eax, dword fs:[0]
push eax
sub esp, 0x60
mov eax, dword [0x101f6e00]
xor eax, ebp
mov dword [ebp + 0x56c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esi + 0x28]
mov dword [0x1027e74c], eax
mov eax, dword [ebp + 0x578]
test eax, eax
je 0x10065cac
cmp dword [ebp + 0x57c], 1
jne 0x10065cac
mov edx, dword [esi + 0x20]
test edx, edx
je 0x10065cac
mov ecx, dword [esi + 0x24]
test ecx, ecx
je 0x10065cac
cmp eax, edx
jne 0x10065dbb
mov ecx, dword [esi + 0x1c]
test ecx, ecx
je 0x10065cac
cmp dword [esi + 0x10], 0
je 0x10065cac
cmp dword [esi + 0x18], 0
je 0x10065cac
cmp dword [esi + 0x14], 0
je 0x10065cac
mov edi, 0x416960
call edi
push eax
lea ecx, [ebp + 0x188]
call fcn.10046cb0
lea ecx, [ebp + 0x188]
mov dword [ebp - 4], 0
call fcn.10046b50
push eax
lea ecx, [ebp + 0x34c]
call fcn.10046c60
lea ecx, [ebp + 0x188]
mov byte [ebp - 4], 2
call fcn.10046bc0
mov ecx, dword [esi + 0x18]
call edi
push eax
lea ecx, [ebp + 0x16c]
call fcn.10046cb0
lea ecx, [ebp + 0x16c]
mov byte [ebp - 4], 3
call fcn.10046b50
push eax
lea ecx, [ebp + 0x434]
call fcn.10046c60
lea ecx, [ebp + 0x16c]
mov byte [ebp - 4], 5
call fcn.10046bc0
mov ecx, dword [esi + 0x14]
call edi
push eax
lea ecx, [ebp + 0x150]
call fcn.10046cb0
lea ecx, [ebp + 0x150]
mov byte [ebp - 4], 6
call fcn.10046b50
push eax
lea ecx, [ebp + 0x368]
call fcn.10046c60
lea ecx, [ebp + 0x150]
mov byte [ebp - 4], 8
call fcn.10046bc0
mov ecx, dword [esi + 0x10]
call edi
push eax
lea ecx, [ebp + 0x134]
call fcn.10046cb0
lea ecx, [ebp + 0x134]
mov byte [ebp - 4], 9
call fcn.10046b50
push eax
lea ecx, [ebp + 0x384]
call fcn.10046c60
lea ecx, [ebp + 0x134]
mov byte [ebp - 4], 0xb
call fcn.10046bc0
cmp dword [ebp + 0x360], 0
jne 0x10065364
movaps xmm0, xmmword [0x101ddd50]
xor edi, edi
movups xmmword [ebp + 0x534], xmm0
push 0xa30000
movaps xmm0, xmmword [0x101ddac0]
movups xmmword [ebp + 0x544], xmm0
mov dword [ebp + 0x564], 0x171a1456
movaps xmm0, xmmword [0x101dda00]
movups xmmword [ebp + 0x554], xmm0
mov dword [ebp + 0x568], 0x581d18
nop dword [eax + eax]
push edi
lea ecx, [ebp + 0x535]
call fcn.10066930
push edi
lea ecx, [ebp + 0x535]
mov bl, byte [eax]
xor bl, byte [ebp + 0x534]
call fcn.10066930
inc edi
mov byte [eax], bl
cmp edi, 0x36
jb 0x100652f0
push 0x36
lea ecx, [ebp + 0x535]
call fcn.10066930
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp + 0x535]
push eax
call fcn.10046c60
lea eax, [ebp + 0x70]
push eax
call fcn.10049410
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.10046b50
mov ecx, dword [0x10297f7c]
push eax
call fcn.100e4e60
lea ecx, [ebp + 0x70]
jmp 0x100655df
mov eax, dword [ebp + 0x448]
test eax, eax
jne 0x10065434
movaps xmm0, xmmword [0x101de260]
xor edi, edi
movups xmmword [ebp + 0x4fc], xmm0
push 0xa30000
movaps xmm0, xmmword [0x101de500]
movups xmmword [ebp + 0x50c], xmm0
mov dword [ebp + 0x52c], 0x2728252b
movaps xmm0, xmmword [0x101ded10]
movups xmmword [ebp + 0x51c], xmm0
mov word [ebp + 0x530], 0x6722
mov byte [ebp + 0x532], al
nop dword [eax]
push edi
lea ecx, [ebp + 0x4fd]
call fcn.100668d0
push edi
lea ecx, [ebp + 0x4fd]
mov bl, byte [eax]
xor bl, byte [ebp + 0x4fc]
call fcn.100668d0
inc edi
mov byte [eax], bl
cmp edi, 0x35
jb 0x100653c0
push 0x35
lea ecx, [ebp + 0x4fd]
call fcn.100668d0
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp + 0x4fd]
push eax
call fcn.10046c60
lea eax, [ebp + 0x54]
push eax
call fcn.10049410
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.10046b50
mov ecx, dword [0x10297f7c]
push eax
call fcn.100e4e60
lea ecx, [ebp + 0x54]
jmp 0x100655df
cmp eax, 0xb
je 0x10065504
movaps xmm0, xmmword [0x101de9c0]
xor edi, edi
movups xmmword [ebp + 0x1f4], xmm0
push 0xa30000
movaps xmm0, xmmword [0x101de710]
movups xmmword [ebp + 0x204], xmm0
movaps xmm0, xmmword [0x101de770]
movups xmmword [ebp + 0x214], xmm0
movaps xmm0, xmmword [str._RUB]
movups xmmword [ebp + 0x224], xmm0
movaps xmm0, xmmword [0x101dd730]
movups xmmword [ebp + 0x234], xmm0
nop word [eax + eax]
push edi
lea ecx, [ebp + 0x1f5]
call fcn.10066870
push edi
lea ecx, [ebp + 0x1f5]
mov bl, byte [eax]
xor bl, byte [ebp + 0x1f4]
call fcn.10066870
inc edi
mov byte [eax], bl
cmp edi, 0x4e
jb 0x10065490
push 0x4e
lea ecx, [ebp + 0x1f5]
call fcn.10066870
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp + 0x1f5]
push eax
call fcn.10046c60
lea eax, [ebp + 0x38]
push eax
call fcn.10049410
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.10046b50
mov ecx, dword [0x10297f7c]
push eax
call fcn.100e4e60
lea ecx, [ebp + 0x38]
jmp 0x100655df
mov ecx, dword [0x10297f7c]
lea eax, [ebp + 0x434]
push eax
call fcn.10065e40
test al, al
jne 0x100655f4
movaps xmm0, xmmword [0x101dea80]
xor edi, edi
movups xmmword [ebp + 0x1a4], xmm0
push 0xa30000
movaps xmm0, xmmword [0x101de7e0]
movups xmmword [ebp + 0x1b4], xmm0
movaps xmm0, xmmword [0x101de800]
movups xmmword [ebp + 0x1c4], xmm0
movaps xmm0, xmmword [str.QYN]
movups xmmword [ebp + 0x1d4], xmm0
movaps xmm0, xmmword [0x101dd7b0]
movups xmmword [ebp + 0x1e4], xmm0
nop dword [eax + eax]
push edi
lea ecx, [ebp + 0x1a5]
call fcn.10066870
mov bl, byte [ebp + 0x1a4]
lea ecx, [ebp + 0x1a5]
push edi
xor bl, byte [eax]
call fcn.10066870
inc edi
mov byte [eax], bl
cmp edi, 0x4e
jb 0x10065570
push 0x4e
lea ecx, [ebp + 0x1a5]
call fcn.10066870
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp + 0x1a5]
push eax
call fcn.10046c60
lea eax, [ebp + 0x1c]
push eax
call fcn.10049410
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 0xf
call fcn.10046b50
mov ecx, dword [0x10297f7c]
push eax
call fcn.100e4e60
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0xb
call fcn.10046bc0
mov ecx, esi
call fcn.10066070
jmp 0x10065c80
lea eax, [ebp - 0x21]
push eax
push 2
push 0
lea eax, [ebp + 0x434]
push eax
lea ecx, [ebp + 0x284]
call fcn.10047b10
push 0x101d8c90
lea ecx, [ebp + 0x284]
mov byte [ebp - 4], 0x10
call fcn.10066a40
test al, al
jne 0x100656f4
movaps xmm0, xmmword [0x101de5a0]
xor edi, edi
movups xmmword [ebp + 0x3a0], xmm0
push 0xa30000
movaps xmm0, xmmword [0x101dee20]
movups xmmword [ebp + 0x3b0], xmm0
mov dword [ebp + 0x3e0], 0x2c2d2d2d
movaps xmm0, xmmword [0x101ded50]
movups xmmword [ebp + 0x3c0], xmm0
mov dword [ebp + 0x3e4], 0x2f2f2c
movaps xmm0, xmmword [0x101de2a0]
movups xmmword [ebp + 0x3d0], xmm0
nop dword [eax]
push edi
lea ecx, [ebp + 0x3a1]
call fcn.10066810
mov bl, byte [ebp + 0x3a0]
lea ecx, [ebp + 0x3a1]
push edi
xor bl, byte [eax]
call fcn.10066810
inc edi
mov byte [eax], bl
cmp edi, 0x46
jb 0x10065680
push 0x46
lea ecx, [ebp + 0x3a1]
call fcn.10066810
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp + 0x3a1]
push eax
call fcn.10046c60
lea eax, [ebp]
push eax
call fcn.10049410
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.10046b50
mov ecx, dword [0x10297f7c]
push eax
call fcn.100e4e60
lea ecx, [ebp]
jmp 0x10065c65
mov eax, dword [ebp + 0x37c]
test eax, eax
jne 0x100657da
movaps xmm0, xmmword [0x101ddb30]
xor edi, edi
movups xmmword [ebp + 0x450], xmm0
push 0xa30000
movaps xmm0, xmmword [0x101dda40]
movups xmmword [ebp + 0x460], xmm0
mov dword [ebp + 0x490], 0x51505342
movaps xmm0, xmmword [0x101ddb20]
movups xmmword [ebp + 0x470], xmm0
mov dword [ebp + 0x494], 0x55545756
movaps xmm0, xmmword [0x101dea20]
movups xmmword [ebp + 0x480], xmm0
mov word [ebp + 0x498], 0x5a
nop
push edi
lea ecx, [ebp + 0x451]
call fcn.100667b0
push edi
lea ecx, [ebp + 0x451]
mov bl, byte [eax]
xor bl, byte [ebp + 0x450]
call fcn.100667b0
inc edi
mov byte [eax], bl
cmp edi, 0x48
jb 0x10065760
push 0x48
lea ecx, [ebp + 0x451]
call fcn.100667b0
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp + 0x451]
push eax
call fcn.10046c60
lea eax, [ebp + 0x118]
push eax
call fcn.10049410
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 0x12
call fcn.10046b50
mov ecx, dword [0x10297f7c]
push eax
call fcn.100e4e60
lea ecx, [ebp + 0x118]
jmp 0x10065c65
cmp eax, 8
je 0x100658da
movaps xmm0, xmmword [0x101de300]
xor edi, edi
movups xmmword [ebp + 0x49c], xmm0
push 0xa30000
movaps xmm0, xmmword [0x101de440]
movups xmmword [ebp + 0x4ac], xmm0
mov dword [ebp + 0x4ec], 0x2f127779
movaps xmm0, xmmword [0x101def80]
movups xmmword [ebp + 0x4bc], xmm0
mov dword [ebp + 0x4f0], 0x6566776d
movaps xmm0, xmmword [0x101de2b0]
movups xmmword [ebp + 0x4cc], xmm0
mov dword [ebp + 0x4f4], 0x61626364
movaps xmm0, xmmword [0x101de0f0]
movups xmmword [ebp + 0x4dc], xmm0
mov word [ebp + 0x4f8], 0x6f60
mov byte [ebp + 0x4fa], 0
nop
push edi
lea ecx, [ebp + 0x49d]
call fcn.10066750
push edi
lea ecx, [ebp + 0x49d]
mov bl, byte [eax]
xor bl, byte [ebp + 0x49c]
call fcn.10066750
inc edi
mov byte [eax], bl
cmp edi, 0x5d
jb 0x10065860
push 0x5d
lea ecx, [ebp + 0x49d]
call fcn.10066750
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp + 0x49d]
push eax
call fcn.10046c60
lea eax, [ebp + 0xfc]
push eax
call fcn.10049410
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.10046b50
mov ecx, dword [0x10297f7c]
push eax
call fcn.100e4e60
lea ecx, [ebp + 0xfc]
jmp 0x10065c65
mov ecx, dword [0x10297f7c]
lea eax, [ebp + 0x368]
push eax
call fcn.10065e40
test al, al
jne 0x100659ca
movaps xmm0, xmmword [0x101dda10]
xor edi, edi
movups xmmword [ebp + 0x2a0], xmm0
push 0xa30000
movaps xmm0, xmmword [0x101ddd60]
movups xmmword [ebp + 0x2b0], xmm0
mov word [ebp + 0x2f0], 0x5f50
movaps xmm0, xmmword [0x101ddaf0]
movups xmmword [ebp + 0x2c0], xmm0
mov byte [ebp + 0x2f2], al
movaps xmm0, xmmword [0x101dda20]
movups xmmword [ebp + 0x2d0], xmm0
movaps xmm0, xmmword [0x101de940]
movups xmmword [ebp + 0x2e0], xmm0
push edi
lea ecx, [ebp + 0x2a1]
call fcn.100666f0
push edi
lea ecx, [ebp + 0x2a1]
mov bl, byte [eax]
xor bl, byte [ebp + 0x2a0]
call fcn.100666f0
inc edi
mov byte [eax], bl
cmp edi, 0x51
jb 0x10065950
push 0x51
lea ecx, [ebp + 0x2a1]
call fcn.100666f0
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp + 0x2a1]
push eax
call fcn.10046c60
lea eax, [ebp + 0xe0]
push eax
call fcn.10049410
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.10046b50
mov ecx, dword [0x10297f7c]
push eax
call fcn.100e4e60
lea ecx, [ebp + 0xe0]
jmp 0x10065c65
mov eax, dword [ebp + 0x398]
test eax, eax
jne 0x10065a9a
movaps xmm0, xmmword [0x101ddad0]
xor edi, edi
movups xmmword [ebp + 0x244], xmm0
push 0xa30000
movaps xmm0, xmmword [0x101dda60]
movups xmmword [ebp + 0x254], xmm0
movaps xmm0, xmmword [0x101ddbf0]
movups xmmword [ebp + 0x264], xmm0
movaps xmm0, xmmword [0x101dd940]
movups xmmword [ebp + 0x274], xmm0
nop word [eax + eax]
push edi
lea ecx, [ebp + 0x245]
call fcn.10066690
push edi
lea ecx, [ebp + 0x245]
mov bl, byte [eax]
xor bl, byte [ebp + 0x244]
call fcn.10066690
inc edi
mov byte [eax], bl
cmp edi, 0x3e
jb 0x10065a20
push 0x3e
lea ecx, [ebp + 0x245]
call fcn.10066690
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp + 0x245]
push eax
call fcn.10046c60
lea eax, [ebp + 0xc4]
push eax
call fcn.10049410
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 0x15
call fcn.10046b50
mov ecx, dword [0x10297f7c]
push eax
call fcn.100e4e60
lea ecx, [ebp + 0xc4]
jmp 0x10065c65
cmp eax, 6
je 0x10065b7b
movaps xmm0, xmmword [0x101deb00]
xor edi, edi
movups xmmword [ebp + 0x2f4], xmm0
push 0xa30000
movaps xmm0, xmmword [0x101deac0]
movups xmmword [ebp + 0x304], xmm0
mov dword [ebp + 0x344], 0xf0c0d0a
movaps xmm0, xmmword [0x101dded0]
movups xmmword [ebp + 0x314], xmm0
mov byte [ebp + 0x348], 0
movaps xmm0, xmmword [0x101ddee0]
movups xmmword [ebp + 0x324], xmm0
movaps xmm0, xmmword [0x101ddbd0]
movups xmmword [ebp + 0x334], xmm0
push edi
lea ecx, [ebp + 0x2f5]
call fcn.10066630
push edi
lea ecx, [ebp + 0x2f5]
mov bl, byte [eax]
xor bl, byte [ebp + 0x2f4]
call fcn.10066630
inc edi
mov byte [eax], bl
cmp edi, 0x53
jb 0x10065b01
push 0x53
lea ecx, [ebp + 0x2f5]
call fcn.10066630
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp + 0x2f5]
push eax
call fcn.10046c60
lea eax, [ebp + 0xa8]
push eax
call fcn.10049410
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.10046b50
mov ecx, dword [0x10297f7c]
push eax
call fcn.100e4e60
lea ecx, [ebp + 0xa8]
jmp 0x10065c65
mov ecx, dword [0x10297f7c]
lea eax, [ebp + 0x384]
push eax
call fcn.10065e40
test al, al
jne 0x10065cd3
movaps xmm0, xmmword [0x101de370]
xor edi, edi
movups xmmword [ebp + 0x3e8], xmm0
push 0xa30000
movaps xmm0, xmmword [0x101de120]
movups xmmword [ebp + 0x3f8], xmm0
mov dword [ebp + 0x428], 0x6360716b
movaps xmm0, xmmword [0x101de350]
movups xmmword [ebp + 0x408], xmm0
mov dword [ebp + 0x42c], 0x67646562
movaps xmm0, xmmword [0x101de1d0]
movups xmmword [ebp + 0x418], xmm0
mov byte [ebp + 0x430], al
nop
push edi
lea ecx, [ebp + 0x3e9]
call fcn.100665d0
push edi
lea ecx, [ebp + 0x3e9]
mov bl, byte [eax]
xor bl, byte [ebp + 0x3e8]
call fcn.100665d0
inc edi
mov byte [eax], bl
cmp edi, 0x47
jb 0x10065bf0
push 0x47
lea ecx, [ebp + 0x3e9]
call fcn.100665d0
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp + 0x3e9]
push eax
call fcn.10046c60
lea eax, [ebp + 0x8c]
push eax
call fcn.10049410
add esp, 0x20
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.10046b50
mov ecx, dword [0x10297f7c]
push eax
call fcn.100e4e60
lea ecx, [ebp + 0x8c]
mov byte [ebp - 4], 0x10
call fcn.10046bc0
mov ecx, esi
call fcn.10066070
lea ecx, [ebp + 0x284]
call fcn.10046bc0
lea ecx, [ebp + 0x384]
call fcn.10046bc0
lea ecx, [ebp + 0x368]
call fcn.10046bc0
lea ecx, [ebp + 0x434]
call fcn.10046bc0
lea ecx, [ebp + 0x34c]
call fcn.10046bc0
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x56c]
xor ecx, ebp
call fcn.1013c8c0
lea esp, [ebp + 0x570]
pop ebp
ret 8
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x20], 0xcc
call fcn.100508a0
push 1
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x48], vtable.Packet.0
mov byte [ebp - 0x28], 0xe9
call fcn.100509f0
push 1
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x44], 1
mov byte [ebp - 0x18], 1
call fcn.100509f0
lea ecx, [ebp + 0x34c]
call fcn.10046b50
push eax
lea ecx, [ebp - 0x48]
call fcn.10056aa0
lea ecx, [ebp + 0x434]
call fcn.10046b50
push eax
lea ecx, [ebp - 0x48]
call fcn.10056aa0
lea ecx, [ebp + 0x368]
call fcn.10046b50
push eax
lea ecx, [ebp - 0x48]
call fcn.10056aa0
lea ecx, [ebp + 0x384]
call fcn.10046b50
push eax
lea ecx, [ebp - 0x48]
call fcn.10056aa0
lea ecx, [ebp - 0x48]
call fcn.100c62b0
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x48], vtable.ByteBuffer.0
call fcn.10052cd0
lea ecx, [ebp + 0x284]
call fcn.10046bc0
lea ecx, [ebp + 0x384]
call fcn.10046bc0
lea ecx, [ebp + 0x368]
call fcn.10046bc0
lea ecx, [ebp + 0x434]
call fcn.10046bc0
lea ecx, [ebp + 0x34c]
call fcn.10046bc0
mov al, 1
jmp 0x10065cae
cmp eax, ecx
jne 0x10065e2e
mov ecx, dword [esi + 0x28]
test ecx, ecx
je 0x10065dd2
push 0
call dword [0x101d64b8]
lea ecx, [ebp - 0x6c]
mov byte [ebp - 0x14], 0xcc
call fcn.100508a0
push 1
lea eax, [ebp - 0x14]
mov dword [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x6c], vtable.Packet.0
mov byte [ebp - 0x4c], 0xe9
call fcn.100509f0
push 1
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x6c]
mov byte [ebp - 0x1c], 2
call fcn.100509f0
lea ecx, [ebp - 0x6c]
call fcn.100c62b0
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x6c], vtable.ByteBuffer.0
call fcn.10052cd0
mov al, 1
jmp 0x10065cae