Function at 0x10005a36
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x80
movaps xmm0, xmmword [0x1009c280]
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x24]
lea eax, [esp + 0x23]
mov edx, 0x30a29d88
mov dword [esp + 0xc], ecx
mov ecx, 0x6b815e8
movups xmmword [eax - 0x13], xmm0
mov word [eax - 3], 0x6369
mov byte [eax - 1], 0x73
cmp edx, 0x6b815e8
je 0x10005a96
cmp edx, 0x30a29d88
jne 0x10005a74
mov byte [eax], 0
inc eax
mov edx, 0x30a29d88
cmp eax, dword [esp + 0xc]
cmove edx, ecx
jmp 0x10005a74
xor ecx, ecx
mov eax, 0xc5256213
mov edx, 0xf64e5289
cmp edx, 0xc5256213
je 0x10005acf
cmp edx, 0xd116f1f5
je 0x10005b01
cmp edx, 0xf64e5289
jne 0x10005aa2
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0xc]
cmp edx, 0x13
mov edx, 0xd116f1f5
cmovb edx, eax
jmp 0x10005aa2
mov edx, dword [esp + 0xc]
mov bh, 0xb4
mov bl, byte [esp + edx + 0x10]
mov ecx, ebx
and bl, 0xb4
not cl
and cl, 0x4b
or bl, cl
mov ecx, dword [esp + 0xc]
sub bh, cl
add cl, 0x4b
and bh, bl
not bl
and bl, cl
or bh, bl
mov byte [esp + edx + 0x10], bh
mov ecx, dword [esp + 0xc]
inc ecx
jmp 0x10005a9d
lea ecx, [esp + 0x10]
mov byte [ecx + 0x13], 0
call fcn.10004f33
mov esi, dword [esp + 0x2c]
mov dword [esp + 0x44], esi
mov ecx, dword [esp + 0x44]
mov ecx, dword [ecx]
mov edx, ecx
shr edx, 0x1f
add edx, ecx
lea ecx, [esi + 4]
xor esi, esi
mov dword [esp + 0x48], ecx
sar edx, 1
mov ecx, dword [esp + 0x48]
push esi
push esi
push esi
push esi
push edx
push dword [ecx]
push esi
push dword [ebp + 8]
call eax
mov dword [esp + 0x4c], eax
lea esi, [esp + 0x1d]
mov eax, 0xfdae6f92
mov edi, 0x576eb4ed
mov ebx, 0xda3cb51e
cmp eax, 0x2fbf1690
jle 0x10005bd0
cmp eax, 0x5396e349
jg 0x10005c0a
cmp eax, 0x4713d5fe
jg 0x10005c93
cmp eax, 0x2fbf1691
je 0x10005d68
cmp eax, 0x38215a8b
jne 0x10005b56
mov ecx, 0xa6baac85
lea eax, [esp + 0x1c]
mov dword [esp + 0x10], 0x49726247
mov dword [esp + 0x14], 0x5c6e6865
mov dword [esp + 0x18], 0x6f716d6a
mov dword [esp + 0xc], esi
cmp ecx, 0xda3cb51e
je 0x10005da4
cmp ecx, 0xa6baac85
jne 0x10005baa
mov byte [eax], 0
inc eax
mov ecx, 0xa6baac85
cmp eax, dword [esp + 0xc]
cmove ecx, ebx
jmp 0x10005baa
cmp eax, 0xfdae6f91
jle 0x10005c44
cmp eax, 0x2d562dfb
jg 0x10005cbb
cmp eax, 0xfdae6f92
je 0x10005e1d
cmp eax, 0x1405ddd4
jne 0x10005b56
mov ecx, dword [esp + 0x24]
mov eax, 0x5396e34a
mov dword [esp + 0x40], ecx
jmp 0x10005b56
cmp eax, 0x73bb21af
jg 0x10005ce3
cmp eax, 0x5396e34a
je 0x10005e34
cmp eax, 0x5e5c75a5
jne 0x10005b56
mov ecx, dword [esp + 0x5c]
mov eax, 0x2d562dfc
mov dword [esp + 0x3c], ecx
xor ecx, ecx
inc ecx
mov dword [esp + 0x38], ecx
jmp 0x10005b56
cmp eax, 0xef73b6f6
jg 0x10005d4d
cmp eax, 0x8bfc35bd
je 0x10005e53
cmp eax, 0xbfd2e4c5
jne 0x10005b56
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x2c]
push dword [esp + 0x58]
push dword [eax]
call fcn.100051d0
mov dword [esp + 0x5c], eax
mov eax, 0x5e5c75a5
mov ecx, 0x73bb21b0
cmp dword [esp + 0x5c], 0
cmove eax, ecx
jmp 0x10005b56
cmp eax, 0x4713d5ff
je 0x10005e9e
cmp eax, 0x513ed352
jne 0x10005b56
mov eax, 0x1405ddd4
mov dword [esp + 0x24], 0
jmp 0x10005b56
cmp eax, 0x2d562dfc
je 0x10005ebd
cmp eax, 0x2f03c474
jne 0x10005b56
mov eax, 0x4713d5ff
mov dword [esp + 0x34], 0
jmp 0x10005b56
cmp eax, 0x73bb21b0
je 0x10005edc
cmp eax, 0x79784748
jne 0x10005b56
movaps xmm0, xmmword [0x1009c280]
lea eax, [esp + 0x24]
mov ecx, 0x30a29d88
mov dword [esp + 0xc], eax
lea eax, [esp + 0x23]
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x6369
mov byte [esp + 0x22], 0x73
cmp ecx, 0x6b815e8
je 0x10005ef6
cmp ecx, 0x30a29d88
jne 0x10005d22
mov byte [eax], 0
inc eax
mov ecx, 0x30a29d88
mov edx, 0x6b815e8
cmp eax, dword [esp + 0xc]
cmove ecx, edx
jmp 0x10005d22
cmp eax, 0xef73b6f7
je 0x10005f71
cmp eax, 0xf71ee7d6
jne 0x10005b56
jmp 0x100060a0
lea ecx, [esp + 0x60]
xorps xmm0, xmm0
mov dword [esp + 0x50], ecx
mov eax, dword [esp + 0x50]
movaps xmmword [esp + 0x60], xmm0
mov eax, dword [esp + 0x4c]
add eax, 0x10
push eax
call fcn.10004a6a
mov dword [esp + 0x28], eax
mov eax, 0xef73b6f7
mov ecx, 0x2f03c474
cmp dword [esp + 0x28], 0
cmove eax, ecx
jmp 0x10005b56
xor eax, eax
mov ecx, 0x6c73649b
cmp ecx, 0x934b9ce6
je 0x10005f82
cmp ecx, 0x576eb4ed
je 0x10005ddc
cmp ecx, 0x6c73649b
jne 0x10005dab
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0xc]
cmp ecx, 0xc
mov ecx, 0x934b9ce6
cmovb ecx, edi
jmp 0x10005dab
mov eax, dword [esp + 0xc]
mov dl, byte [esp + eax + 0x10]
mov ecx, edx
mov dh, dl
xor dl, 0xb0
not cl
and dh, 0xe
and dl, 0xb1
and cl, 0x40
or dh, cl
mov ecx, dword [esp + 0xc]
xor dh, 0xa
or dl, dh
add cl, 0x4b
mov dh, cl
and cl, 0x4e
not dh
and dh, 0xb1
or cl, dh
xor cl, dl
mov byte [esp + eax + 0x10], cl
mov eax, dword [esp + 0xc]
inc eax
jmp 0x10005da6
cmp dword [esp + 0x4c], 0
mov eax, 0x2fbf1691
mov ecx, 0x8bfc35bd
cmove eax, ecx
jmp 0x10005b56
lea ecx, [esp + 0x60]
call fcn.10004df6
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x40]
mov eax, 0xf71ee7d6
mov dword [esp + 0x30], ecx
jmp 0x10005b56
mov ecx, 0xa6baac85
lea eax, [esp + 0x1c]
mov dword [esp + 0x10], 0x49726247
mov dword [esp + 0x14], 0x5c6e6865
mov dword [esp + 0x18], 0x6f716d6a
mov dword [esp + 0xc], esi
cmp ecx, 0xda3cb51e
je 0x10005fa0
cmp ecx, 0xa6baac85
jne 0x10005e78
mov byte [eax], 0
inc eax
mov ecx, 0xa6baac85
cmp eax, dword [esp + 0xc]
cmove ecx, ebx
jmp 0x10005e78
cmp dword [esp + 0x34], 0
mov edx, dword [esp + 0x28]
mov eax, 0x5396e34a
mov ecx, 0x79784748
cmove eax, ecx
mov dword [esp + 0x40], edx
jmp 0x10005b56
mov edx, dword [esp + 0x3c]
cmp dword [esp + 0x38], 0
mov eax, 0x1405ddd4
mov ecx, 0x513ed352
cmove eax, ecx
mov dword [esp + 0x24], edx
jmp 0x10005b56
mov dword [esp + 0x38], 0
mov eax, 0x2d562dfc
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x3c], ecx
jmp 0x10005b56
xor eax, eax
mov ecx, 0xf64e5289
cmp ecx, 0xc5256213
je 0x10005f33
cmp ecx, 0xd116f1f5
je 0x10006019
cmp ecx, 0xf64e5289
jne 0x10005efd
mov dword [esp + 0xc], eax
mov edx, 0xc5256213
mov ecx, dword [esp + 0xc]
cmp ecx, 0x13
mov ecx, 0xd116f1f5
cmovb ecx, edx
jmp 0x10005efd
mov eax, dword [esp + 0xc]
mov dl, byte [esp + eax + 0x10]
mov dh, dl
and dl, 0x5d
not dh
mov cl, dh
and dh, 2
and cl, 0xa0
or dl, cl
mov ecx, dword [esp + 0xc]
xor dl, 0x14
or dh, dl
add cl, 0x4b
mov dl, cl
and cl, 2
not dl
and dl, 0xfd
or cl, dl
xor cl, dh
mov byte [esp + eax + 0x10], cl
mov eax, dword [esp + 0xc]
inc eax
jmp 0x10005ef8
xor ecx, ecx
mov eax, 0x4713d5ff
inc ecx
mov dword [esp + 0x34], ecx
jmp 0x10005b56
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], 0
call fcn.10004f33
call eax
mov dword [esp + 0x24], eax
mov eax, 0x1405ddd4
jmp 0x10005b56
xor eax, eax
mov ecx, 0x6c73649b
cmp ecx, 0x934b9ce6
je 0x10006082
cmp ecx, 0x576eb4ed
je 0x10005fd8
cmp ecx, 0x6c73649b
jne 0x10005fa7
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0xc]
cmp ecx, 0xc
mov ecx, 0x934b9ce6
cmovb ecx, edi
jmp 0x10005fa7
mov eax, dword [esp + 0xc]
mov dl, byte [esp + eax + 0x10]
mov ecx, edx
and dl, 0xe
not cl
and cl, 0xf1
or dl, cl
mov ecx, dword [esp + 0xc]
mov dh, dl
and dl, 0xb2
xor dh, 8
and dh, 0x4d
add cl, 0x4b
or dh, dl
mov dl, cl
and cl, 0x4d
not dl
and dl, 0xb2
or cl, dl
xor cl, dh
mov byte [esp + eax + 0x10], cl
mov eax, dword [esp + 0xc]
inc eax
jmp 0x10005fa2
lea ecx, [esp + 0x10]
mov byte [esp + 0x23], 0
call fcn.10004f33
lea edx, [esp + 0x64]
mov ecx, dword [esp + 0x60]
xor esi, esi
mov dword [esp + 0x54], edx
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x44]
mov edi, dword [ebx]
mov ebx, edi
shr ebx, 0x1f
add ebx, edi
mov edi, dword [esp + 0x48]
sar ebx, 1
push esi
push esi
push ecx
push dword [edx]
push ebx
mov ebx, 0xda3cb51e
push dword [edi]
mov edi, 0x576eb4ed
push esi
push dword [ebp + 8]
call eax
mov dword [esp + 0x58], eax
mov eax, 0xbfd2e4c5
mov ecx, 0x38215a8b
cmp dword [esp + 0x58], esi
lea esi, [esp + 0x1d]
cmove eax, ecx
jmp 0x10005b56
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], 0
call fcn.10004f33
call eax
mov dword [esp + 0x30], eax
mov eax, 0xf71ee7d6
jmp 0x10005b56
mov eax, dword [esp + 0x30]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4