Function at 0x1005df10
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc8
movaps xmm0, xmmword [0x10089a70]
xor ecx, ecx
movups xmmword [ebp - 0xbc], xmm0
mov dword [ebp - 0x8c], 0x3c3c3c3c
movaps xmm0, xmmword [0x10089a60]
movups xmmword [ebp - 0xac], xmm0
mov dword [ebp - 0x88], 0x3c3c3c3c
movaps xmm0, xmmword [0x10089a60]
movups xmmword [ebp - 0x9c], xmm0
mov dword [ebp - 0x84], 0x7b7b3c3c
mov word [ebp - 0x80], 0x7b7b
mov byte [ebp - 0x7e], 0
nop dword [eax]
mov al, byte [ebp - 0xbc]
xor byte [ebp + ecx - 0xbb], al
inc ecx
cmp ecx, 0x3d
jb 0x1005df70
movaps xmm0, xmmword [0x10089ba0]
xor ecx, ecx
movups xmmword [ebp - 0x70], xmm0
mov byte [ebp - 0x7e], 0
movaps xmm0, xmmword [0x10089c60]
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x40], 0xa9a9a9a9
movaps xmm0, xmmword [0x10089c70]
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x3c], 0xa9a9a9a9
mov dword [ebp - 0x38], 0x6565c4a9
mov word [ebp - 0x34], 0x6565
mov byte [ebp - 0x32], 0
nop dword [eax]
mov al, byte [ebp - 0x70]
xor byte [ebp + ecx - 0x6f], al
inc ecx
cmp ecx, 0x3d
jb 0x1005dfd0
lea eax, [ebp - 0xbb]
mov byte [ebp - 0x32], 0
push eax
lea edx, [ebp - 0x6f]
mov ecx, str.Engine.exe
call fcn.10053970
movaps xmm0, xmmword [0x10089b70]
add esp, 4
movups xmmword [ebp - 0x6c], xmm0
xor ecx, ecx
mov dword [ebp - 0x3c], 0x6f6f6f6f
movaps xmm0, xmmword [0x10089b80]
mov eax, dword [eax + 0x99]
movups xmmword [ebp - 0x5c], xmm0
mov dword [0x100b4e28], eax
movaps xmm0, xmmword [0x10089b90]
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x38], 0x6f6f6f6f
mov word [ebp - 0x34], 0x6f6f
mov byte [ebp - 0x32], 0
nop
mov al, byte [ebp - 0x6c]
xor byte [ebp + ecx - 0x6b], al
inc ecx
cmp ecx, 0x39
jb 0x1005e040
movaps xmm0, xmmword [0x10089c50]
xor ecx, ecx
movups xmmword [ebp - 0xb8], xmm0
mov byte [ebp - 0x32], 0
movaps xmm0, xmmword [0x10089a90]
movups xmmword [ebp - 0xa8], xmm0
mov dword [ebp - 0x88], 0x6fe8200b
movaps xmm0, xmmword [0x10089aa0]
movups xmmword [ebp - 0x98], xmm0
mov dword [ebp - 0x84], 0x901d9012
mov word [ebp - 0x80], 0x1f4b
mov byte [ebp - 0x7e], 0
nop dword [eax + eax]
mov al, byte [ebp - 0xb8]
xor byte [ebp + ecx - 0xb7], al
inc ecx
cmp ecx, 0x39
jb 0x1005e0a0
lea eax, [ebp - 0x6b]
mov byte [ebp - 0x7e], 0
push eax
lea edx, [ebp - 0xb7]
mov ecx, str.Engine.exe
call fcn.10053970
movaps xmm0, xmmword [0x10089b60]
add esp, 4
movups xmmword [ebp - 0xc8], xmm0
xor ecx, ecx
mov dword [0x100b6e90], eax
movaps xmm0, xmmword [0x10089b40]
movups xmmword [ebp - 0xb8], xmm0
mov dword [ebp - 0x88], 0x2b2b6c6c
movaps xmm0, xmmword [0x10089a40]
movups xmmword [ebp - 0xa8], xmm0
mov dword [ebp - 0x84], 0x2b2b2b2b
movaps xmm0, xmmword [0x10089b50]
movups xmmword [ebp - 0x98], xmm0
mov dword [ebp - 0x80], 0x2b2b2b
nop dword [eax + eax]
mov al, byte [ebp - 0xc8]
xor byte [ebp + ecx - 0xc7], al
inc ecx
cmp ecx, 0x4a
jb 0x1005e130
movaps xmm0, xmmword [0x10089be0]
xor edx, edx
movups xmmword [ebp - 0x7c], xmm0
mov byte [ebp - 0x7d], 0
movaps xmm0, xmmword [0x10089bd0]
movups xmmword [ebp - 0x6c], xmm0
mov dword [ebp - 0x3c], 0xbe247d7d
movaps xmm0, xmmword [0x10089c80]
movups xmmword [ebp - 0x5c], xmm0
mov dword [ebp - 0x38], 0xb1b1b1b1
movaps xmm0, xmmword [0x10089bf0]
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x34], 0x7d5939f6
mov byte [ebp - 0x30], 0
nop
mov al, byte [ebp - 0x7c]
xor byte [ebp + edx - 0x7b], al
inc edx
cmp edx, 0x4b
jb 0x1005e190
lea eax, [ebp - 0xc7]
mov byte [ebp - 0x30], 0
push eax
lea edx, [ebp - 0x7b]
mov ecx, str.Engine.exe
call fcn.10053970
movaps xmm0, xmmword [0x100899d0]
add eax, 0x47
add esp, 4
mov dword [0x1008dd00], eax
movups xmmword [ebp - 0x2c], xmm0
xor ecx, ecx
nop dword [eax]
mov al, byte [ebp - 0x2c]
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 0xe
jb 0x1005e1d0
movaps xmm0, xmmword [0x100899f0]
xor ecx, ecx
mov byte [ebp - 0x1d], 0
movups xmmword [ebp - 0x18], xmm0
nop
mov al, byte [ebp - 0x18]
xor byte [ebp + ecx - 0x17], al
inc ecx
cmp ecx, 0xe
jb 0x1005e1f0
lea eax, [ebp - 0x2b]
mov byte [ebp - 9], 0
push eax
lea edx, [ebp - 0x17]
mov ecx, str.CShell.dll
call fcn.10053970
movaps xmm0, xmmword [0x10089c00]
add esp, 4
movups xmmword [ebp - 0x2c], xmm0
mov word [ebp - 0x1c], 0x7e7e
mov eax, dword [eax + 2]
mov byte [ebp - 0x1a], 0
mov eax, dword [eax]
add eax, 0x104
xor ecx, ecx
mov dword [0x100b6da8], eax
nop dword [eax + eax]
mov al, byte [ebp - 0x2c]
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 0x11
jb 0x1005e240
movaps xmm0, xmmword [0x10089b20]
xor ecx, ecx
mov byte [ebp - 0x1a], 0
movups xmmword [ebp - 0x18], xmm0
mov word [ebp - 8], 0x2b3f
mov byte [ebp - 6], 0
mov al, byte [ebp - 0x18]
xor byte [ebp + ecx - 0x17], al
inc ecx
cmp ecx, 0x11
jb 0x1005e268
lea eax, [ebp - 0x2b]
mov byte [ebp - 6], 0
push ebx
push eax
lea edx, [ebp - 0x17]
mov ecx, str.CShell.dll
call fcn.10053970
mov dword [0x100b6e94], eax
mov byte [ebp - 0x14], 0x3c
mov byte [ebp - 0x28], 7
mov eax, dword [eax + 1]
mov dword [0x100b6e94], eax
mov al, 0x44
mov ah, al
mov byte [ebp - 9], 0
mov cl, al
mov byte [ebp - 1], ah
xor cl, byte [ebp - 0x14]
mov dl, al
mov bl, al
mov byte [ebp - 0x12], cl
xor al, byte [ebp - 0x14]
mov ch, ah
mov cl, byte [ebp - 0x14]
mov dh, ah
mov byte [ebp - 0x13], al
xor dl, cl
mov al, byte [ebp - 1]
xor bl, cl
xor al, cl
mov byte [ebp - 2], ah
mov byte [ebp - 0xb], al
xor ch, cl
mov al, byte [ebp - 2]
xor dh, cl
xor al, cl
mov byte [ebp - 2], 0x73
mov bh, ah
mov byte [ebp - 0xa], al
xor ah, cl
mov byte [ebp - 0x11], dl
xor bh, cl
mov byte [ebp - 0x10], bl
mov al, 0x56
mov byte [ebp - 0xf], ah
xor al, byte [ebp - 0x28]
mov cl, 0x51
xor cl, byte [ebp - 0x28]
mov dl, 0x8c
mov byte [ebp - 0x27], al
mov bl, 0xf6
mov al, byte [ebp - 2]
mov ah, 0x84
mov byte [ebp - 0x26], cl
mov cl, byte [ebp - 0x28]
xor al, cl
mov byte [ebp - 0xe], ch
mov byte [ebp - 0xd], dh
mov ch, 0x79
mov byte [ebp - 0xc], bh
mov dh, 0xb
mov byte [ebp - 0x1f], al
mov bh, 7
mov byte [ebp - 1], 0x2c
xor dl, cl
mov al, byte [ebp - 1]
xor bl, cl
xor ah, cl
mov byte [ebp - 9], 0
xor ch, cl
mov byte [ebp - 0x1d], 0
xor dh, cl
mov byte [ebp - 0x25], dl
xor bh, cl
mov byte [ebp - 0x24], bl
xor al, cl
mov byte [ebp - 0x23], ah
mov byte [ebp - 0x22], ch
mov byte [ebp - 0x21], dh
mov byte [ebp - 0x20], bh
mov byte [ebp - 0x1e], al
lea eax, [ebp - 0x13]
mov byte [ebp - 0x1d], 0
push eax
lea edx, [ebp - 0x27]
mov ecx, str.CShell.dll
call fcn.10053970
movaps xmm0, xmmword [0x10089a20]
add esp, 8
mov dword [0x100b6d98], eax
xor ecx, ecx
movups xmmword [ebp - 0x2c], xmm0
mov byte [ebp - 0x1c], 0
pop ebx
mov al, byte [ebp - 0x2c]
xor byte [ebp + ecx - 0x2b], al
inc ecx
cmp ecx, 0xf
jb 0x1005e383
movaps xmm0, xmmword [0x10089b30]
xor ecx, ecx
mov byte [ebp - 0x1c], 0
movups xmmword [ebp - 0x18], xmm0
mov byte [ebp - 8], 0
mov al, byte [ebp - 0x18]
xor byte [ebp + ecx - 0x17], al
inc ecx
cmp ecx, 0xf
jb 0x1005e3a5
lea eax, [ebp - 0x2b]
mov byte [ebp - 8], 0
push eax
lea edx, [ebp - 0x17]
mov ecx, str.CShell.dll
call fcn.10053970
push str.xxxxxxxxxxxx
mov edx, 0x10088f80
mov ecx, str.CShell.dll
mov eax, dword [eax + 2]
mov dword [0x1008dcf8], eax
call fcn.10053970
push str.xxx____x____x____x____x____x____xxxxxxxxxxxxxxxxx____
mov edx, 0x10088fc8
mov dword [0x100b6d94], eax
mov ecx, str.CShell.dll
call fcn.10053970
push str.xx____xx____xxxxx
mov edx, 0x10089014
mov ecx, str.CShell.dll
mov eax, dword [eax + 3]
mov dword [0x100b6da4], eax
call fcn.10053970
push str.xx____xxxxxxxx
mov edx, 0x10089028
mov ecx, str.CShell.dll
mov eax, dword [eax + 2]
mov dword [0x100b4e08], eax
call fcn.10053970
push str.xxxx____xx____xx____xxxx
mov edx, 0x10089054
mov ecx, str.CShell.dll
mov eax, dword [eax + 2]
mov dword [0x100b4e2c], eax
call fcn.10053970
push str.xx____xxx____xxxx
mov edx, 0x10089084
mov ecx, str.CShell.dll
mov eax, dword [eax + 0x10]
mov eax, dword [eax]
add eax, 0xb8
mov dword [0x100b4e44], eax
call fcn.10053970
push str.x____xxxxxx____xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx____
mov edx, 0x100890cc
mov ecx, str.CShell.dll
mov eax, dword [eax + 2]
mov dword [0x100b6db0], eax
call fcn.10053970
push str.x____x____xxxxxxxxx
mov edx, 0x10089114
mov ecx, str.CShell.dll
mov eax, dword [eax + 1]
mov dword [0x100b4e0c], eax
call fcn.10053970
push str.x____x____xxx
mov edx, 0x10089138
mov ecx, str.CShell.dll
mov eax, dword [eax + 1]
add eax, 4
mov dword [0x1008dcec], eax
call fcn.10053970
push str.x____x____xx____xxxx
mov edx, 0x10089160
mov ecx, str.CShell.dll
mov eax, dword [eax + 1]
add eax, 4
mov dword [0x100b4e1c], eax
add eax, 0x24
mov dword [0x100b6da0], eax
add eax, 0x24
mov dword [0x100b4e14], eax
call fcn.10053970
mov eax, dword [eax + 1]
add eax, 4
mov dword [0x1008dcf0], eax
add eax, 0x24
mov dword [0x100b4e3c], eax
add eax, 0x24
mov dword [0x100b4e10], eax
add eax, 0x24
mov dword [0x100b6e98], eax
mov edx, 0x100891a0
add eax, 0x24
mov ecx, str.CShell.dll
mov dword [0x1008dce8], eax
add eax, 0x24
mov dword [0x100b4e38], eax
add eax, 0x24
push str.x____x____xx____xxxxxxx____xx____xx____
mov dword [0x100b6d9c], eax
call fcn.10053970
add esp, 0x30
mov eax, dword [eax + 1]
add eax, 4
cmp dword [0x100b4e28], 0
mov dword [0x1008dcc8], eax
je 0x1005e653
cmp dword [0x1008dd00], 0
je 0x1005e653
cmp dword [0x100b6da8], 0
je 0x1005e653
cmp dword [0x100b6d98], 0
je 0x1005e653
cmp dword [0x1008dcf8], 0
je 0x1005e653
cmp dword [0x100b6d94], 0
je 0x1005e653
cmp dword [0x100b6da4], 0
je 0x1005e653
cmp dword [0x100b4e08], 0
je 0x1005e653
cmp dword [0x100b4e2c], 0
je 0x1005e653
cmp dword [0x100b4e44], 0
je 0x1005e653
cmp dword [0x100b6db0], 0
je 0x1005e653
cmp dword [0x100b4e0c], 0
je 0x1005e653
cmp dword [0x1008dcec], 0
je 0x1005e653
cmp dword [0x100b4e1c], 0
je 0x1005e653
cmp dword [0x100b6da0], 0
je 0x1005e653
cmp dword [0x100b4e14], 0
je 0x1005e653
cmp dword [0x1008dcf0], 0
je 0x1005e653
cmp dword [0x100b4e3c], 0
je 0x1005e653
cmp dword [0x100b4e10], 0
je 0x1005e653
cmp dword [0x100b6e98], 0
je 0x1005e653
cmp dword [0x1008dce8], 0
je 0x1005e653
cmp dword [0x100b6d9c], 0
je 0x1005e653
cmp dword [0x100b4e38], 0
je 0x1005e653
test eax, eax
je 0x1005e653
mov al, 1
mov esp, ebp
pop ebp
ret
xor al, al
mov esp, ebp
pop ebp
ret