Function at 0x5652bb
Capabilities:
Contain obfuscated stackstrings

Disassembly:
cmp bh, byte ds:[edi]
cmp al, 0x43
add esp, 4
or edx, 0x1525d
and edx, 0x161b2
xor edx, 0x7580
pop edx
mov dword [ebp - 0x79c], 0
jmp 0x565161
push esi
push edi
add esp, 4
or esi, 0x67d0
xor esi, 0x5440
or esi, 0x1092b
pop esi
push edi
xor edi, 0x15ecf
xor edi, 0x17b7f
and edi, 0x2943
or edi, 0x3355
pop edi
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x1a40], ecx
push esi
and esi, 0xbcd9
sub esi, 0x1410d
sub esi, 0xab9c
sub esi, 0x1766d
pop esi
push edi
call 0x5651ca
add byte [esi + 0x33], cl
dec edx
inc esi
cmp byte [edx + ecx*2 - 0x7d], cl
les eax, [ecx + eax*4]
mov dword [edx + esi*4 - 0x7ca10000], 0xfffc18bd
inc dword [eax]
je 0x5651e6
cmp dword [ebp - 0xac0], 0
jne 0x56522c
push ecx
or ecx, 0x10fc
jmp 0x5651f6
add ecx, 0x674e
jmp 0x565203
pop ecx
push ecx
or ecx, 0xece7
or ecx, 0xb87d
xor ecx, 0x13fda
pop ecx
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x19f4], edx
push 0
call dword [ebp - 0x19f4]
mov dword [ebp - 0x210c], 0xa
push esi
push edi
add esp, 4
add esi, 0x6ca3
sub esi, 0x2747
sub esi, 0x180cf
sub esi, 0xb35c
pop esi
push esi
and esi, 0x23d3
pop esi
push edx
push edi
add esp, 4
add edx, 0x3471
pop edx
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xac0]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1698], edx
mov dword [ebp - 0xce8], 0
push eax
push eax
add esp, 4
xor eax, 0x5a82
add eax, 0x2ab1
xor eax, 0x40c6
pop eax
push ebx
call 0x5652bb
add byte [eax + 0x33], cl
dec edx
aaa
aas
push eax
inc edi
inc ebx
dec esp
add esp, 4
and ebx, 0xc22
pop ebx
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push ecx
push edi
add esp, 4
sub ecx, 0x4af4
xor ecx, 0x2782
pop ecx
push edi
add edi, 0x948f
xor edi, 0x1689
pop edi
push eax
push edi
add esp, 4
and eax, 0x6bdd
add eax, 0xf229
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19f8], eax
mov ecx, dword [ebp - 0x19f8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19fc], edx
mov eax, dword [ebp - 0x19fc]
mov dword [ebp - 0x1618], eax
push edi
and edi, 0xb212
or edi, 0xf500
call 0x5653a3
add byte [ebp + 0x3a], cl
cmp al, 0x35
inc ebp
xor dh, byte [ebx + ecx*2]
inc edi
add esp, 4
pop edi
push ecx
push eax
add esp, 4
or ecx, 0x2f1c
add ecx, 0x151bb
pop ecx
cmp dword [ebp - 0x1618], 0
jne 0x5653d1
mov dword [ebp - 0x2fc], 0
jmp 0x565678
mov ecx, dword [ebp - 0x1618]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push ebx
push edi
add esp, 4
or ebx, 0x129f2
xor ebx, 0x12298
xor ebx, 0xa561
add ebx, 0x11947
pop ebx
push eax
and eax, 0xc007
sub eax, 0xb2d2
or eax, 0x374f
pop eax
cmp dword [ebp - 0xcc4], 0
jne 0x56542d
mov dword [ebp - 0x2fc], 0
jmp 0x565678
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push edx
sub edx, 0x8163
pop edx
push edx
push esi
add esp, 4
and edx, 0x6db0
pop edx
push edx
call 0x56545b
add byte [ecx + 0x4d], al
inc eax
dec esp
xor edi, dword [esi + eax*2]
add esp, 4
add edx, 0x1249c
and edx, 0x8eb6
pop edx
lea edx, [ebp - 0x173c]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push eax
push ecx
add esp, 4
sub eax, 0x71f4
sub eax, 0xfbc9
or eax, 0x8540
pop eax
push edi
or edi, 0x100a1
and edi, 0x156be
add edi, 0xb9ae
or edi, 0x52b2
pop edi
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push edi
and edi, 0xa122
and edi, 0x1022f
sub edi, 0x1258a
or edi, 0x3b7b
pop edi
push edx
and edx, 0x17e5a
call 0x56554c
add byte [ebx + 0x43], cl
xor eax, dword [edi + 0x43]
dec edi
cmp eax, 0x5a04c483
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x56556d
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1620], ecx
jmp 0x5655c7
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x565495
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x565495
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x5655b1
mov dword [ebp - 0x161c], 0xffffffff
jmp 0x5655bb
mov dword [ebp - 0x161c], 1
mov eax, dword [ebp - 0x161c]
mov dword [ebp - 0x1620], eax
cmp dword [ebp - 0x1620], 0
jne 0x565610
push edi
push eax
add esp, 4
add edi, 0x4b3d
or edi, 0x1d2a
pop edi
push edi
and edi, 0xc1f0
sub edi, 0x51c9
pop edi
push eax
push esi
add esp, 4
and eax, 0xef20
xor eax, 0x1240a
pop eax
mov ecx, dword [ebp - 0x514]
mov dword [ebp - 0x2fc], ecx
jmp 0x565678
push ecx
push edi
add esp, 4
sub ecx, 0xf55
call 0x565629
add byte [edx + eax*2 + 0x33], al
dec ebx
inc edi
push eax
aas
dec ebx
add esp, 4
call 0x565638
add byte [ebx], bh
dec ebp
aas
dec eax
dec esi
cmp byte [ebx - 0x1e7efb3c], al
enter 0xfe, 0
pop ecx
mov edx, dword [ebp - 0x514]
mov eax, dword [edx]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [ebp - 0xcc4]
je 0x56566e
mov edx, dword [ebp - 0x514]
cmp dword [edx + 0x30], 0
jne 0x565439
mov dword [ebp - 0x2fc], 0
push esi
push ebx
add esp, 4
and esi, 0x164ad
pop esi
push ecx
and ecx, 0xd629
pop ecx
push ebx
sub ebx, 0x4909
pop ebx
push edi
and edi, 0x9693
or edi, 0x168ba
jmp 0x5656a9
pop edi
cmp dword [ebp - 0x2fc], 0
jne 0x565faf
mov eax, 0x6b
mov word [ebp - 0x1774], ax
mov ecx, 0x65
mov word [ebp - 0x1772], cx
mov edx, 0x72
mov word [ebp - 0x1770], dx
mov eax, 0x6e
mov word [ebp - 0x176e], ax
mov ecx, 0x65
mov word [ebp - 0x176c], cx
mov edx, 0x6c
mov word [ebp - 0x176a], dx
mov eax, 0x33
mov word [ebp - 0x1768], ax
mov ecx, 0x32
mov word [ebp - 0x1766], cx
mov edx, 0x2e
mov word [ebp - 0x1764], dx
mov eax, 0x64
mov word [ebp - 0x1762], ax
mov ecx, 0x6c
mov word [ebp - 0x1760], cx
mov edx, 0x6c
mov word [ebp - 0x175e], dx
xor eax, eax
mov word [ebp - 0x175c], ax
push edi
xor edi, 0xe0ae
or edi, 0x6ef1
pop edi
push ebx
add ebx, 0x1624a
pop ebx
push edx
or edx, 0x12c97
jmp 0x565775
and edx, 0x16f43
sub edx, 0xf5dc
pop edx
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x6f
mov byte [ebp - 0x8a2], 0x61
mov byte [ebp - 0x8a1], 0x64
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x69
mov byte [ebp - 0x89e], 0x62
mov byte [ebp - 0x89d], 0x72
mov byte [ebp - 0x89c], 0x61
mov byte [ebp - 0x89b], 0x72
mov byte [ebp - 0x89a], 0x79
mov byte [ebp - 0x899], 0x57
mov byte [ebp - 0x898], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a00], ecx
mov edx, dword [ebp - 0x1a00]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1a04], eax
mov ecx, dword [ebp - 0x1a04]
mov dword [ebp - 0x1624], ecx
push eax
push edx
add esp, 4
call 0x565819
add byte [edi + 0x4f], al
inc eax
inc eax
dec ebx
cmp dword [esi + 0x32], eax
add esp, 4
pop eax
push ecx
or ecx, 0xc475
sub ecx, 0x152f1
pop ecx
push eax
push edi
add esp, 4
or eax, 0x1d9
pop eax
cmp dword [ebp - 0x1624], 0
jne 0x56584f
mov dword [ebp - 0x774], 0
jmp 0x565af6
mov edx, dword [ebp - 0x1624]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd0], ecx
push eax
jmp 0x565868
call 0x565878
add byte [esi + 0x37], al
cmp byte [ebp + 0x32], cl
cmp bh, byte [esi]
xor al, 0x3d
xor eax, dword [ebx + 0x535804c4]
and ebx, 0x7e1
call 0x56588f
add byte [eax + 0x45], al
dec ebp
dec edi
inc ecx
aas
add esp, 4
pop ebx
cmp dword [ebp - 0xcd0], 0
jne 0x5658ab
mov dword [ebp - 0x774], 0
jmp 0x565af6
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
push edx
xor edx, 0x9f32
pop edx
push edx
push eax
add esp, 4
sub edx, 0xb090
pop edx
push ecx
call 0x5658d9
add byte [edi + 0x343b4e4e], dh
dec ebx
add esp, 4
sub ecx, 0x10b28
or ecx, 0x794d
pop ecx
lea eax, [ebp - 0x1774]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ecx
push ecx
add esp, 4
sub ecx, 0x1876
pop ecx
push esi
add esi, 0xb533
jmp 0x56592f
and esi, 0x128f4
call 0x565941
add byte [esi], dh
dec eax
push eax
dec edi
xor al, byte [esi - 0x7d]
les eax, [esi + ebx*2]
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
mov ecx, dword [ebp - 0xcc8]
add ecx, 2
mov dword [ebp - 0xcc8], ecx
mov dx, word [ebp - 0x1042]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push eax
or eax, 0x1182
add eax, 0x17783
xor eax, 0xb4c1
pop eax
push edx
xor edx, 0x8bc
add edx, 0x19f6
pop edx
push ecx
or ecx, 0x700b
pop ecx
push esi
add esi, 0x49b
pop esi
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x5659eb
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x166c], edx
jmp 0x565a45
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x565913
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x565913
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x565a2f
mov dword [ebp - 0x1668], 0xffffffff
jmp 0x565a39
mov dword [ebp - 0x1668], 1
mov ecx, dword [ebp - 0x1668]
mov dword [ebp - 0x166c], ecx
cmp dword [ebp - 0x166c], 0
jne 0x565a8e
push edx
xor edx, 0xfc49
sub edx, 0x3377
xor edx, 0x82c
add byte [edx + 0x57], bl
push ecx
add esp, 4
xor edi, 0x17
sub edi, 0x580
sub edi, 0x920e
add edi, 0x10a93
pop edi
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x774], edx
jmp 0x565af6
push ecx
push esi
add esp, 4
sub ecx, 0xf246
pop ecx
push ecx
push edx
add esp, 4
or ecx, 0x104e3
add ecx, 0x9719
and ecx, 0xe4a1
pop ecx
push ecx
add ecx, 0x6080
and ecx, 0x10489
pop ecx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x565aec
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x5658b7
mov dword [ebp - 0x774], 0
push edi
call 0x565b06
add byte [ebx], bh
inc ebx
cmp dh, byte ss:[edi]
xor al, 0x40
dec eax
aas
add esp, 4
add edi, 0x1b33
and edi, 0x15d49
xor edi, 0xea01
pop edi
push ecx
push ecx
add esp, 4
and ecx, 0x36d7
pop ecx
cmp dword [ebp - 0x774], 0
jne 0x565b72
push edi
push esi
add esp, 4
sub edi, 0xd3ce
xor edi, 0xf9e
add edi, 0x184cc
sub edi, 0x1047a
pop edi
push edi
push ebx
add esp, 4
xor edi, 0xef75
pop edi
push edi
and edi, 0x1b7a
pop edi
mov dword [ebp - 0xabc], 0
jmp 0x56669a
push edi
add edi, 0x4279
call 0x565b87
add byte [ebp + 0x36], cl
dec ecx
inc esp
xor eax, 0x83403c4a
les eax, [ecx + eax*4]
test dword [ecx], 0x5f000093
push ecx
or ecx, 0x16815
jmp 0x565b9d
add ecx, 0x14ac5
pop ecx
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x1670], eax
cmp dword [ebp - 0x1670], 0
jne 0x565be3
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x565ed4
mov edx, dword [ebp - 0x1670]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1678], eax
jne 0x565c0b
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x565ed4
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1678]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x167c], edx
cmp dword [ebp - 0x167c], 0
jne 0x565c3d
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
jmp 0x565ed4
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x167c]
mov dword [ebp - 0x778], ecx
jne 0x565c62
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], edx
jmp 0x565ed4
mov eax, dword [ebp - 0x778]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1a08], ecx
mov edx, dword [ebp - 0x778]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1a0c], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1a10], edx
mov dword [ebp - 0x77c], 0
jmp 0x565cbc
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x77c]
cmp edx, dword [ecx + 0x18]
jae 0x565ec8
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x1a08]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x1a0c]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a10]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a14], ecx
mov dword [ebp - 0x1a0], 0
jmp 0x565d2c
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x565dde
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
test eax, eax
je 0x565dde
push esi
call 0x565d67
add byte [edx], bh
inc eax
cmp al, 0x46
dec edx
dec ebx
dec esp
add esp, 4
sub esi, 0x18026
pop esi
push edi
push esi
add esp, 4
jmp 0x565d7e
sub edi, 0x4ba0
sub edi, 0x211e
pop edi
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
cmp edx, ecx
je 0x565dd0
mov edx, dword [ebp - 0x780]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x8a4]
cmp eax, edx
jne 0x565dd7
jmp 0x565d1d
jmp 0x565dde
push edi
or edi, 0x1205c
and edi, 0x147de
sub edi, 0x15136
pop edi
push eax
push eax
add esp, 4
xor eax, 0x106ac
and eax, 0x1242f
and eax, 0x5dfd
and eax, 0x8f64
pop eax
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
invalid