Function at 0x10005faa
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x80
movaps xmm0, xmmword [0x10094290]
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x24]
lea eax, [esp + 0x23]
mov edx, 0xcdffd3d
mov dword [esp + 0xc], ecx
mov ecx, 0xe40d66a6
movups xmmword [eax - 0x13], xmm0
mov word [eax - 3], 0x7278
mov byte [eax - 1], 0x60
cmp edx, 0xe40d66a6
je 0x1000600a
cmp edx, 0xcdffd3d
jne 0x10005fe8
mov byte [eax], 0
inc eax
mov edx, 0xcdffd3d
cmp eax, dword [esp + 0xc]
cmove edx, ecx
jmp 0x10005fe8
xor ecx, ecx
mov eax, 0x4da952e9
mov edx, 0xdbe07fe3
cmp edx, 0x6a883b34
je 0x10006079
cmp edx, 0x4da952e9
je 0x10006043
cmp edx, 0xdbe07fe3
jne 0x10006016
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0xc]
cmp edx, 0x13
mov edx, 0x6a883b34
cmovb edx, eax
jmp 0x10006016
mov edx, dword [esp + 0xc]
mov bl, byte [esp + edx + 0x10]
mov ecx, ebx
and bl, 0x4f
not cl
and cl, 0xb0
or bl, cl
mov ecx, dword [esp + 0xc]
mov bh, bl
xor bl, 0x46
xor bh, 0xb9
add cl, 9
and bl, cl
not cl
and cl, bh
or cl, bl
mov byte [esp + edx + 0x10], cl
mov ecx, dword [esp + 0xc]
inc ecx
jmp 0x10006011
lea ecx, [esp + 0x10]
mov byte [ecx + 0x13], 0
call fcn.10004e1f
mov edx, dword [esp + 0x2c]
xor esi, esi
mov dword [esp + 0x44], edx
add edx, 4
mov ecx, dword [esp + 0x44]
mov ecx, dword [ecx]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x48]
push esi
push esi
push ecx
push dword [edx]
push esi
push dword [ebp + 8]
call eax
mov dword [esp + 0x4c], eax
lea edi, [esp + 0x1d]
mov eax, 0x116d2b84
mov esi, 0xea31bdf7
mov ebx, 0x28cbbb03
cmp eax, 0x3280d0cd
jg 0x10006109
cmp eax, 0xed8e3cf3
jg 0x1000617c
cmp eax, 0xc3cf22e1
jg 0x100061e7
cmp eax, 0x8dc22087
je 0x100062e7
cmp eax, 0xa701cb7b
jne 0x100060c3
mov dword [esp + 0x38], 0
mov eax, 0x56c6ed08
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x40], ecx
jmp 0x100060c3
cmp eax, 0x5eda3af6
jle 0x100061b4
cmp eax, 0x69b1d23b
jg 0x10006248
cmp eax, 0x5eda3af7
je 0x10006315
cmp eax, 0x621fb08f
jne 0x100060c3
mov ecx, 0x43c256e8
lea eax, [esp + 0x1c]
mov dword [esp + 0x10], 0x49766647
mov dword [esp + 0x14], 0x5c727465
mov dword [esp + 0x18], 0x6f75696a
mov dword [esp + 0xc], edi
cmp ecx, 0x28cbbb03
je 0x1000632e
cmp ecx, 0x43c256e8
jne 0x10006156
mov byte [eax], 0
inc eax
mov ecx, 0x43c256e8
cmp eax, dword [esp + 0xc]
cmove ecx, ebx
jmp 0x10006156
cmp eax, 0x1281ad6d
jg 0x10006270
cmp eax, 0xed8e3cf4
je 0x100063a6
cmp eax, 0x116d2b84
jne 0x100060c3
cmp dword [esp + 0x4c], 0
mov eax, 0x2be85c1d
mov ecx, 0xc5c1f88d
cmove eax, ecx
jmp 0x100060c3
cmp eax, 0x3bf29a30
jg 0x100062cc
cmp eax, 0x3280d0ce
je 0x100063fa
cmp eax, 0x3a42d1cf
jne 0x100060c3
mov ecx, dword [esp + 0x24]
mov eax, 0x3280d0ce
mov dword [esp + 0x3c], ecx
jmp 0x100060c3
cmp eax, 0xc3cf22e2
je 0x10006419
cmp eax, 0xc5c1f88d
jne 0x100060c3
mov ecx, 0x43c256e8
lea eax, [esp + 0x1c]
mov dword [esp + 0x10], 0x49766647
mov dword [esp + 0x14], 0x5c727465
mov dword [esp + 0x18], 0x6f75696a
mov dword [esp + 0xc], edi
cmp ecx, 0x28cbbb03
je 0x10006438
cmp ecx, 0x43c256e8
jne 0x10006222
mov byte [eax], 0
inc eax
mov ecx, 0x43c256e8
cmp eax, dword [esp + 0xc]
cmove ecx, ebx
jmp 0x10006222
cmp eax, 0x69b1d23c
je 0x100064a0
cmp eax, 0x7bd3e9bc
jne 0x100060c3
mov eax, 0x3a42d1cf
mov dword [esp + 0x24], 0
jmp 0x100060c3
cmp eax, 0x1281ad6e
je 0x100064b1
cmp eax, 0x2be85c1d
jne 0x100060c3
lea ecx, [esp + 0x60]
xorps xmm0, xmm0
mov dword [esp + 0x50], ecx
mov eax, dword [esp + 0x50]
movaps xmmword [esp + 0x60], xmm0
mov eax, dword [esp + 0x4c]
add eax, eax
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x54]
add eax, 0x10
push eax
call fcn.10004962
mov dword [esp + 0x28], eax
mov eax, 0x69b1d23c
mov ecx, 0x1281ad6e
cmp dword [esp + 0x28], 0
cmove eax, ecx
jmp 0x100060c3
cmp eax, 0x56c6ed08
je 0x100064c3
cmp eax, 0x3bf29a31
jne 0x100060c3
jmp 0x100065dd
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x2c]
push dword [esp + 0x54]
push dword [eax]
call fcn.100050aa
mov dword [esp + 0x5c], eax
mov eax, 0x5eda3af7
mov ecx, 0xa701cb7b
cmp dword [esp + 0x5c], 0
cmove eax, ecx
jmp 0x100060c3
mov ecx, dword [esp + 0x5c]
mov eax, 0x56c6ed08
mov dword [esp + 0x40], ecx
xor ecx, ecx
inc ecx
mov dword [esp + 0x38], ecx
jmp 0x100060c3
xor eax, eax
mov ecx, 0xae791f34
cmp ecx, 0x27b58003
je 0x100064e2
cmp ecx, 0xea31bdf7
je 0x10006366
cmp ecx, 0xae791f34
jne 0x10006335
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0xc]
cmp ecx, 0xc
mov ecx, 0x27b58003
cmovb ecx, esi
jmp 0x10006335
mov eax, dword [esp + 0xc]
mov dl, byte [esp + eax + 0x10]
mov ecx, edx
and dl, 0xf6
not cl
and cl, 9
or dl, cl
mov ecx, dword [esp + 0xc]
mov dh, dl
and dl, 0xc3
not dh
and dh, 0x3c
add cl, 9
or dl, dh
mov dh, cl
and cl, 0xc3
not dh
and dh, 0x3c
or cl, dh
xor cl, dl
mov byte [esp + eax + 0x10], cl
mov eax, dword [esp + 0xc]
inc eax
jmp 0x10006330
movaps xmm0, xmmword [0x10094290]
lea eax, [esp + 0x24]
mov ecx, 0xcdffd3d
mov dword [esp + 0xc], eax
lea eax, [esp + 0x23]
movups xmmword [esp + 0x10], xmm0
mov word [esp + 0x20], 0x7278
mov byte [esp + 0x22], 0x60
cmp ecx, 0xe40d66a6
je 0x10006500
cmp ecx, 0xcdffd3d
jne 0x100063cf
mov byte [eax], 0
inc eax
mov ecx, 0xcdffd3d
mov edx, 0xe40d66a6
cmp eax, dword [esp + 0xc]
cmove ecx, edx
jmp 0x100063cf
lea ecx, [esp + 0x60]
call fcn.10004ce8
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x3c]
mov eax, 0x3bf29a31
mov dword [esp + 0x30], ecx
jmp 0x100060c3
cmp dword [esp + 0x34], 0
mov edx, dword [esp + 0x28]
mov eax, 0x3280d0ce
mov ecx, 0xed8e3cf4
cmove eax, ecx
mov dword [esp + 0x3c], edx
jmp 0x100060c3
xor eax, eax
mov ecx, 0xae791f34
cmp ecx, 0x27b58003
je 0x10006569
cmp ecx, 0xea31bdf7
je 0x10006470
cmp ecx, 0xae791f34
jne 0x1000643f
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0xc]
cmp ecx, 0xc
mov ecx, 0x27b58003
cmovb ecx, esi
jmp 0x1000643f
mov ecx, dword [esp + 0xc]
mov dl, byte [esp + ecx + 0x10]
mov eax, edx
and dl, 0xf6
not al
and al, 9
or dl, al
mov eax, dword [esp + 0xc]
mov dh, dl
not dh
add al, 9
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 0x10], al
mov eax, dword [esp + 0xc]
inc eax
jmp 0x1000643a
xor ecx, ecx
mov eax, 0xc3cf22e2
inc ecx
mov dword [esp + 0x34], ecx
jmp 0x100060c3
mov eax, 0xc3cf22e2
mov dword [esp + 0x34], 0
jmp 0x100060c3
mov edx, dword [esp + 0x40]
cmp dword [esp + 0x38], 0
mov eax, 0x3a42d1cf
mov ecx, 0x7bd3e9bc
cmove eax, ecx
mov dword [esp + 0x24], edx
jmp 0x100060c3
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], 0
call fcn.10004e1f
call eax
mov dword [esp + 0x24], eax
mov eax, 0x3a42d1cf
jmp 0x100060c3
xor eax, eax
mov ecx, 0xdbe07fe3
cmp ecx, 0x6a883b34
je 0x10006587
cmp ecx, 0x4da952e9
je 0x10006539
cmp ecx, 0xdbe07fe3
jne 0x10006507
mov dword [esp + 0xc], eax
mov edx, 0x4da952e9
mov ecx, dword [esp + 0xc]
cmp ecx, 0x13
mov ecx, 0x6a883b34
cmovb ecx, edx
jmp 0x10006507
mov ecx, dword [esp + 0xc]
mov dl, byte [esp + ecx + 0x10]
mov eax, edx
and dl, 0xf6
not al
and al, 9
or dl, al
mov eax, dword [esp + 0xc]
mov dh, dl
not dh
add al, 9
and dh, al
not al
and al, dl
or al, dh
mov byte [esp + ecx + 0x10], al
mov eax, dword [esp + 0xc]
inc eax
jmp 0x10006502
lea ecx, [esp + 0x10]
mov byte [esp + 0x1c], 0
call fcn.10004e1f
call eax
mov dword [esp + 0x30], eax
mov eax, 0x3bf29a31
jmp 0x100060c3
lea ecx, [esp + 0x10]
mov byte [esp + 0x23], 0
call fcn.10004e1f
lea edx, [esp + 0x64]
mov ecx, dword [esp + 0x60]
mov esi, edi
mov dword [esp + 0x58], edx
mov edx, dword [esp + 0x58]
mov edi, dword [esp + 0x44]
mov ebx, dword [esp + 0x48]
push ecx
push dword [edx]
push dword [edi]
mov edi, esi
mov esi, 0xea31bdf7
push dword [ebx]
mov ebx, 0x28cbbb03
push 0
push dword [ebp + 8]
call eax
test eax, eax
mov eax, 0x8dc22087
mov ecx, 0x621fb08f
cmove eax, ecx
jmp 0x100060c3
mov eax, dword [esp + 0x30]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4