Function at 0x1005ca70
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x24
mov eax, dword [0x100ad040]
xor eax, esp
mov dword [esp + 0x20], eax
push ebx
mov byte [esp + 4], 0x2b
mov al, 0x49
xor al, byte [esp + 4]
mov dl, 0x5f
push esi
mov esi, ecx
mov byte [esp + 9], al
mov al, byte [esp + 8]
mov cl, 0x4f
mov ch, 0x59
mov byte [esp + 0x11], 0
mov dh, 0x44
mov byte [esp + 0x11], 0
push edi
mov bl, 0x45
mov ah, 0x74
mov bh, 0x5b
xor dl, al
xor cl, al
mov byte [esp + 0xe], dl
xor ch, al
mov byte [esp + 0x11], cl
xor dh, al
mov byte [esp + 0x12], ch
xor bl, al
mov byte [esp + 0x13], dh
xor ah, al
mov byte [esp + 0xf], bl
xor bh, al
mov byte [esp + 0x10], ah
sub esp, 0x18
mov byte [esp + 0x2c], bh
mov edx, esp
lea ecx, [esp + 0x25]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005cb00
sub ecx, edi
lea eax, [esp + 0x25]
push ecx
push eax
mov ecx, edx
call fcn.100051e0
mov ecx, dword [esi]
call fcn.10016190
movaps xmm0, xmmword [0x100a5190]
add esp, 0x18
mov dword [esi + 0x10], eax
xor ecx, ecx
movups xmmword [esp + 0xc], xmm0
mov byte [esp + 0x1c], 0
mov al, byte [esp + 0xc]
xor byte [esp + ecx + 0xd], al
inc ecx
cmp ecx, 0xf
jb 0x1005cb36
sub esp, 0x18
mov byte [esp + 0x34], 0
mov edx, esp
lea ecx, [esp + 0x25]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005cb70
sub ecx, edi
lea eax, [esp + 0x25]
push ecx
push eax
mov ecx, edx
call fcn.100051e0
mov ecx, dword [esi]
call fcn.10016190
movaps xmm0, xmmword [0x100a5800]
add esp, 0x18
mov dword [esi + 0x14], eax
xor ecx, ecx
movups xmmword [esp + 0xc], xmm0
mov dword [esp + 0x1c], 0x46404251
mov byte [esp + 0x20], 0
nop
mov al, byte [esp + 0xc]
xor byte [esp + ecx + 0xd], al
inc ecx
cmp ecx, 0x13
jb 0x1005cbb0
sub esp, 0x18
mov byte [esp + 0x38], 0
mov edx, esp
lea ecx, [esp + 0x25]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005cbe3
sub ecx, edi
lea eax, [esp + 0x25]
push ecx
push eax
mov ecx, edx
call fcn.100051e0
mov ecx, dword [esi]
call fcn.10016190
add esp, 0x18
mov dword [esi + 4], eax
mov cl, 0x7a
mov dword [esp + 0xc], 0x140e187a
mov dword [esp + 0x10], 0x140f1c25
xor eax, eax
mov dword [esp + 0x14], 0x91b1619
mov word [esp + 0x18], 9
nop dword [eax]
xor byte [esp + eax + 0xd], cl
inc eax
cmp eax, 0xc
jae 0x1005cc40
mov cl, byte [esp + 0xc]
jmp 0x1005cc30
sub esp, 0x18
mov byte [esp + 0x31], 0
mov edx, esp
lea ecx, [esp + 0x25]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005cc65
sub ecx, edi
lea eax, [esp + 0x25]
push ecx
push eax
mov ecx, edx
call fcn.100051e0
mov ecx, dword [esi]
call fcn.10016190
add esp, 0x18
mov dword [esi + 8], eax
mov cl, 0x36
mov dword [esp + 0xc], 0x58425436
mov dword [esp + 0x10], 0x42595a69
xor eax, eax
mov dword [esp + 0x14], 0x4f445342
mov byte [esp + 0x18], 0
nop dword [eax]
xor byte [esp + eax + 0xd], cl
inc eax
cmp eax, 0xb
jae 0x1005ccc0
mov cl, byte [esp + 0xc]
jmp 0x1005ccb0
sub esp, 0x18
mov byte [esp + 0x30], 0
mov edx, esp
lea ecx, [esp + 0x25]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1005cce5
sub ecx, edi
lea eax, [esp + 0x25]
push ecx
push eax
mov ecx, edx
call fcn.100051e0
mov ecx, dword [esi]
call fcn.10016190
mov ebx, dword [0x100b2000]
add esp, 0x18
mov edi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov dword [esi + 0xc], eax
test ebx, ebx
je 0x1005cd6e
mov ebx, dword [ebx + 8]
test ebx, ebx
je 0x1005cd6e
mov ebx, dword [ebx]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
test ebx, ebx
je 0x1005cd4b
push 4
push ebx
call edi
test eax, eax
jne 0x1005cd4b
lea eax, [esp + 0x24]
mov ecx, ebx
push eax
call dword [0x100a3130]
mov ebx, dword [esi]
test ebx, ebx
je 0x1005cd6e
push 4
push ebx
call edi
test eax, eax
jne 0x1005cd6e
mov eax, dword [esp + 0x28]
mov ecx, ebx
push 5
add eax, 0xf5
push eax
call dword [0x100a3134]
mov ebx, dword [esi]
test ebx, ebx
je 0x1005cd87
push 4
push ebx
call edi
test eax, eax
jne 0x1005cd87
push 0x14
mov ecx, ebx
call dword [0x100a3150]
mov ebx, dword [esi]
test ebx, ebx
je 0x1005cda0
push 4
push ebx
call edi
test eax, eax
jne 0x1005cda0
push 1
mov ecx, ebx
call dword [0x100a313c]
mov ebx, dword [esi + 4]
test ebx, ebx
je 0x1005cdb9
push 4
push ebx
call edi
test eax, eax
jne 0x1005cdb9
push eax
mov ecx, ebx
call dword [0x100a313c]
mov ebx, dword [esi + 8]
test ebx, ebx
je 0x1005cdd2
push 4
push ebx
call edi
test eax, eax
jne 0x1005cdd2
push eax
mov ecx, ebx
call dword [0x100a313c]
mov esi, dword [esi + 0xc]
test esi, esi
je 0x1005cdeb
push 4
push esi
call edi
test eax, eax
jne 0x1005cdeb
push eax
mov ecx, esi
call dword [0x100a313c]
mov ecx, dword [esp + 0x2c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10069b90
mov esp, ebp
pop ebp
ret