Function at 0x10016802
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x18
mov edi, dword [esp + 0x2c]
lea eax, [esp + 0xf]
lea ebp, [esp + 0x10]
mov edx, 0x2f4a0eb0
mov ecx, 0x28d653e8
mov dword [eax - 0xb], 0x6c6b7d43
mov dword [eax - 7], 0x604c6e78
mov word [eax - 3], 0x7264
mov byte [eax - 1], 0x41
mov dword [esp], ebp
cmp edx, 0x28d653e8
je 0x1001685b
cmp edx, 0x2f4a0eb0
jne 0x1001683a
mov byte [eax], 0
inc eax
mov edx, 0x2f4a0eb0
cmp eax, dword [esp]
cmove edx, ecx
jmp 0x1001683a
xor ecx, ecx
mov eax, 0xd9685fd8
mov edx, 0xf7ba797a
cmp edx, 0xd9685fd8
je 0x10016892
cmp edx, 0x483da674
je 0x100168c1
cmp edx, 0xf7ba797a
jne 0x10016867
mov dword [esp], ecx
mov edx, dword [esp]
cmp edx, 0xb
mov edx, 0x483da674
cmovb edx, eax
jmp 0x10016867
mov edx, dword [esp]
mov bl, byte [esp + edx + 4]
mov ecx, ebx
and bl, 0xb8
not cl
and cl, 0x47
or bl, cl
mov ecx, dword [esp]
mov bh, bl
not bh
add cl, 0x47
and bh, cl
not cl
and cl, bl
or cl, bh
mov byte [esp + edx + 4], cl
mov ecx, dword [esp]
inc ecx
jmp 0x10016862
lea esi, [esp + 4]
mov ecx, esi
mov byte [esi + 0xb], 0
call fcn.10015dcf
xor ecx, ecx
mov edx, 3
push ecx
push ecx
push edx
push ecx
push edx
push 0x80000000
push edi
call eax
mov dword [esp + 0x14], eax
mov eax, 0x507cc690
cmp eax, 0x518f53c0
jg 0x10016923
cmp eax, 0x855a337b
je 0x10016945
cmp eax, 0x1b8afd9a
je 0x10016997
cmp eax, 0x507cc690
jne 0x100168ed
mov eax, dword [esp + 0x14]
mov ecx, 0x518f53c1
cmp eax, 0xffffffff
mov eax, 0x1b8afd9a
cmove eax, ecx
jmp 0x100168ed
cmp eax, 0x518f53c1
je 0x100169ed
cmp eax, 0x630dde7c
je 0x100169f9
cmp eax, 0x7278ebef
jne 0x100168ed
jmp 0x10016be4
mov ecx, 0x2f4a0eb0
lea eax, [esp + 0xf]
mov dword [esp + 4], 0x7e616343
mov dword [esp + 8], 0x676b4369
mov word [esp + 0xc], 0x7b6c
mov byte [esp + 0xe], 0x73
mov dword [esp], ebp
cmp ecx, 0x28d653e8
je 0x10016a49
cmp ecx, 0x2f4a0eb0
jne 0x1001696d
mov byte [eax], 0
inc eax
mov ecx, 0x2f4a0eb0
mov edx, 0x28d653e8
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x1001696d
lea eax, [esp + 0x10]
mov ecx, 0x2f4a0eb0
mov dword [esp + 4], 0x4b7a6a47
mov dword [esp + 8], 0x5a6f6765
mov word [esp + 0xc], 0x6d61
mov byte [esp + 0xe], 0x73
mov dword [esp], eax
lea eax, [esp + 0xf]
cmp ecx, 0x28d653e8
je 0x10016ab1
cmp ecx, 0x2f4a0eb0
jne 0x100169c3
mov byte [eax], 0
inc eax
mov ecx, 0x2f4a0eb0
mov edx, 0x28d653e8
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x100169c3
mov eax, 0x7278ebef
xor edi, edi
jmp 0x100168ed
lea eax, [esp + 0x11]
mov ecx, 0xfe9c334
mov dword [esp + 4], 0x417a6a47
mov dword [esp + 8], 0x4c7e786d
mov dword [esp + 0xc], 0x6779657a
mov dword [esp], eax
mov eax, ebp
cmp ecx, 0x27c1e5d3
je 0x10016b19
cmp ecx, 0xfe9c334
jne 0x10016a1f
mov byte [eax], 0
inc eax
mov ecx, 0xfe9c334
mov edx, 0x27c1e5d3
cmp eax, dword [esp]
cmove ecx, edx
jmp 0x10016a1f
xor eax, eax
mov ecx, 0xf7ba797a
cmp ecx, 0xd9685fd8
je 0x10016a84
cmp ecx, 0x483da674
je 0x10016b81
cmp ecx, 0xf7ba797a
jne 0x10016a50
mov dword [esp], eax
mov edx, 0xd9685fd8
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0x483da674
cmovb ecx, edx
jmp 0x10016a50
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, edx
and dl, 0xb8
not al
and al, 0x47
or dl, al
mov eax, dword [esp]
mov dh, dl
not dh
add al, 0x47
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x10016a4b
xor eax, eax
mov ecx, 0xf7ba797a
cmp ecx, 0xd9685fd8
je 0x10016aec
cmp ecx, 0x483da674
je 0x10016b9f
cmp ecx, 0xf7ba797a
jne 0x10016ab8
mov dword [esp], eax
mov edx, 0xd9685fd8
mov ecx, dword [esp]
cmp ecx, 0xb
mov ecx, 0x483da674
cmovb ecx, edx
jmp 0x10016ab8
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, edx
and dl, 0xb8
not al
and al, 0x47
or dl, al
mov eax, dword [esp]
mov dh, dl
not dh
add al, 0x47
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x10016ab3
xor eax, eax
mov ecx, 0xab8bb57f
cmp ecx, 0x64e5c8bc
je 0x10016bca
cmp ecx, 0x582fd786
je 0x10016b54
cmp ecx, 0xab8bb57f
jne 0x10016b20
mov dword [esp], eax
mov edx, 0x582fd786
mov ecx, dword [esp]
cmp ecx, 0xc
mov ecx, 0x64e5c8bc
cmovb ecx, edx
jmp 0x10016b20
mov ecx, dword [esp]
mov dl, byte [esp + ecx + 4]
mov eax, edx
and dl, 0xb8
not al
and al, 0x47
or dl, al
mov eax, dword [esp]
mov dh, dl
not dh
add al, 0x47
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 4], al
mov eax, dword [esp]
inc eax
jmp 0x10016b1b
mov ecx, esi
mov byte [esp + 0xf], 0
call fcn.10015dcf
push dword [esp + 0x14]
call eax
mov eax, 0x7278ebef
mov edi, ebx
jmp 0x100168ed
mov ecx, esi
mov byte [esp + 0xf], 0
call fcn.10015dcf
push 0
push dword [esp + 0x18]
call eax
mov ebx, eax
cmp eax, 0xffffffff
mov eax, 0x855a337b
mov ecx, 0x630dde7c
cmove eax, ecx
jmp 0x100168ed
mov ecx, esi
mov byte [esp + 0x10], 0
call fcn.10015dcf
call eax
mov eax, 0x855a337b
xor ebx, ebx
jmp 0x100168ed
mov eax, edi
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret