Function at 0x10023970
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
mov ebx, ecx
push edi
mov dword [ebp - 4], ebx
call fcn.10024920
mov dl, 0x5b
mov dword [ebp - 0x1c], 0x34293c5b
mov dword [ebp - 0x18], 0x34042b2e
xor eax, eax
mov dword [ebp - 0x14], 0x34322f2b
mov word [ebp - 0x10], 0x35
xor byte [ebp + eax - 0x1b], dl
inc eax
cmp eax, 0xc
jae 0x100239b1
mov dl, byte [ebp - 0x1c]
jmp 0x100239a2
sub esp, 0x18
mov byte [ebp - 0xf], 0
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x100239e0
mov eax, dword [edx]
jmp 0x100239e2
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x1b], 0
jne 0x100239ef
xor ecx, ecx
jmp 0x100239fe
lea ecx, [ebp - 0x1b]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100239f5
sub ecx, esi
push ecx
lea eax, [ebp - 0x1b]
mov ecx, edx
push eax
call fcn.10004d00
mov ecx, dword [ebx + 0x10]
call fcn.100117b0
movaps xmm0, xmmword [0x100af410]
add esp, 0x18
mov edi, eax
mov dword [ebp - 0x10], 0xd1a1c1f
movups xmmword [ebp - 0x20], xmm0
mov byte [ebp - 0xc], 0
xor ecx, ecx
nop
mov al, byte [ebp - 0x20]
xor byte [ebp + ecx - 0x1f], al
inc ecx
cmp ecx, 0x13
jb 0x10023a30
sub esp, 0x18
mov byte [ebp - 0xc], 0
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x10023a6c
mov eax, dword [edx]
jmp 0x10023a6e
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x1f], 0
jne 0x10023a7b
xor ecx, ecx
jmp 0x10023a8a
lea ecx, [ebp - 0x1f]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023a81
sub ecx, esi
push ecx
lea eax, [ebp - 0x1f]
mov ecx, edx
push eax
call fcn.10004d00
mov ecx, edi
call fcn.100117b0
movaps xmm0, xmmword [str._aesiXtlnkkXfubf]
add esp, 0x18
mov ebx, eax
xor ecx, ecx
movups xmmword [ebp - 0x1c], xmm0
nop
mov al, byte [ebp - 0x1c]
xor byte [ebp + ecx - 0x1b], al
inc ecx
cmp ecx, 0xe
jb 0x10023ab0
sub esp, 0x18
mov byte [ebp - 0xd], 0
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x10023aec
mov eax, dword [edx]
jmp 0x10023aee
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x1b], 0
jne 0x10023afb
xor ecx, ecx
jmp 0x10023b0a
lea ecx, [ebp - 0x1b]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023b01
sub ecx, esi
push ecx
lea eax, [ebp - 0x1b]
mov ecx, edx
push eax
call fcn.10004d00
mov ecx, ebx
call fcn.100117b0
mov edi, dword [ebp - 4]
add esp, 0x18
mov dword [edi], eax
test eax, eax
je 0x10023b37
cmp dword [0x100c3e40], 1
sete byte [0x100bfb26]
movaps xmm0, xmmword [0x100af110]
xor ecx, ecx
movups xmmword [ebp - 0x20], xmm0
mov word [ebp - 0x10], 0x50c
mov byte [ebp - 0xe], 0
nop
mov al, byte [ebp - 0x20]
xor byte [ebp + ecx - 0x1f], al
inc ecx
cmp ecx, 0x11
jb 0x10023b50
sub esp, 0x18
mov byte [ebp - 0xe], 0
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x10023b8c
mov eax, dword [edx]
jmp 0x10023b8e
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x1f], 0
jne 0x10023b9b
xor ecx, ecx
jmp 0x10023baa
lea ecx, [ebp - 0x1f]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023ba1
sub ecx, esi
push ecx
lea eax, [ebp - 0x1f]
mov ecx, edx
push eax
call fcn.10004d00
mov ecx, ebx
call fcn.100117b0
movaps xmm0, xmmword [0x100af930]
add esp, 0x18
mov dword [edi + 4], eax
xor ecx, ecx
movups xmmword [ebp - 0x1c], xmm0
mov byte [ebp - 0xc], 0
mov al, byte [ebp - 0x1c]
xor byte [ebp + ecx - 0x1b], al
inc ecx
cmp ecx, 0xf
jb 0x10023bd4
sub esp, 0x18
mov byte [ebp - 0xc], 0
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x10023c10
mov eax, dword [edx]
jmp 0x10023c12
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x1b], 0
jne 0x10023c1f
xor ecx, ecx
jmp 0x10023c2e
lea ecx, [ebp - 0x1b]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023c25
sub ecx, esi
push ecx
lea eax, [ebp - 0x1b]
mov ecx, edx
push eax
call fcn.10004d00
mov ecx, ebx
call fcn.100117b0
movaps xmm0, xmmword [0x100af710]
add esp, 0x18
mov dword [edi + 8], eax
xor ecx, ecx
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0x10], 0x504741
nop dword [eax + eax]
mov al, byte [ebp - 0x20]
xor byte [ebp + ecx - 0x1f], al
inc ecx
cmp ecx, 0x12
jb 0x10023c60
sub esp, 0x18
mov byte [ebp - 0xd], 0
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x10023c9c
mov eax, dword [edx]
jmp 0x10023c9e
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x1f], 0
jne 0x10023cab
xor ecx, ecx
jmp 0x10023cba
lea ecx, [ebp - 0x1f]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023cb1
sub ecx, esi
push ecx
lea eax, [ebp - 0x1f]
mov ecx, edx
push eax
call fcn.10004d00
mov ecx, ebx
call fcn.100117b0
movaps xmm0, xmmword [0x100aef30]
add esp, 0x18
mov dword [edi + 0xc], eax
xor ecx, ecx
movups xmmword [ebp - 0x1c], xmm0
mov al, byte [ebp - 0x1c]
xor byte [ebp + ecx - 0x1b], al
inc ecx
cmp ecx, 0xe
jb 0x10023ce0
sub esp, 0x18
mov byte [ebp - 0xd], 0
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x10023d1c
mov eax, dword [edx]
jmp 0x10023d1e
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x1b], 0
jne 0x10023d2b
xor ecx, ecx
jmp 0x10023d3a
lea ecx, [ebp - 0x1b]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023d31
sub ecx, esi
push ecx
lea eax, [ebp - 0x1b]
mov ecx, edx
push eax
call fcn.10004d00
mov ecx, ebx
call fcn.100117b0
movaps xmm0, xmmword [0x100af380]
add esp, 0x18
mov dword [edi + 0x1c], eax
xor ecx, ecx
movups xmmword [ebp - 0x20], xmm0
mov word [ebp - 0x10], 0x10
mov al, byte [ebp - 0x20]
xor byte [ebp + ecx - 0x1f], al
inc ecx
cmp ecx, 0x10
jb 0x10023d66
sub esp, 0x18
mov byte [ebp - 0xf], 0
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x10023da2
mov eax, dword [edx]
jmp 0x10023da4
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x1f], 0
jne 0x10023db1
xor ecx, ecx
jmp 0x10023dc0
lea ecx, [ebp - 0x1f]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023db7
sub ecx, esi
push ecx
lea eax, [ebp - 0x1f]
mov ecx, edx
push eax
call fcn.10004d00
mov ecx, ebx
call fcn.100117b0
mov esi, eax
add esp, 0x18
mov dword [edi + 0x14], esi
mov edi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test esi, esi
je 0x10023df9
push 4
push esi
call edi
test eax, eax
jne 0x10023df9
push 0x17
push eax
mov ecx, esi
call dword [0x100adad8]
mov cl, 0x2d
mov dword [ebp - 0x18], 0x5548592d
mov dword [ebp - 0x14], 0x4c4e7259
xor eax, eax
mov dword [ebp - 0x10], 0x4c5f4840
mov byte [ebp - 0xc], 0
xor byte [ebp + eax - 0x17], cl
inc eax
cmp eax, 0xb
jae 0x10023e25
mov cl, byte [ebp - 0x18]
jmp 0x10023e16
sub esp, 0x18
mov byte [ebp - 0xc], 0
mov edx, esp
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x14], 0xf
cmp dword [edx + 0x14], 0x10
mov dword [edx + 0x10], 0
jb 0x10023e54
mov eax, dword [edx]
jmp 0x10023e56
mov eax, edx
mov byte [eax], 0
cmp byte [ebp - 0x17], 0
jne 0x10023e63
xor ecx, ecx
jmp 0x10023e79
lea ecx, [ebp - 0x17]
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023e70
sub ecx, esi
push ecx
lea eax, [ebp - 0x17]
mov ecx, edx
push eax
call fcn.10004d00
mov ecx, ebx
call fcn.100117b0
mov ecx, dword [ebp - 4]
add esp, 0x18
mov dword [ebp - 0x1c], 0x4a5b4b38
mov dword [ebp - 0x18], 0x67545457
mov dword [ebp - 0x14], 0x5d55595b
mov dword [ecx + 0x20], eax
mov cl, 0x38
mov word [ebp - 0x10], 0x594a
xor eax, eax
mov byte [ebp - 0xe], 0
xor byte [ebp + eax - 0x1b], cl
inc eax
cmp eax, 0xd
jae 0x10023ec7
mov cl, byte [ebp - 0x1c]
jmp 0x10023eb8
sub esp, 0x18
mov byte [ebp - 0xe], 0
mov edx, esp
mov dword [edx + 0x14], 0xf
mov dword [edx + 0x10], 0
mov byte [edx], 0
cmp byte [ebp - 0x1b], 0
jne 0x10023eeb
xor ecx, ecx
jmp 0x10023efa
lea ecx, [ebp - 0x1b]
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10023ef1
sub ecx, esi
push ecx
lea eax, [ebp - 0x1b]
mov ecx, edx
push eax
call fcn.10004d00
mov ecx, ebx
call fcn.100117b0
mov esi, eax
add esp, 0x18
mov eax, dword [ebp - 4]
mov dword [eax + 0x18], esi
test esi, esi
je 0x10023f30
push 4
push esi
call edi
test eax, eax
jne 0x10023f30
push 0x14
push eax
mov ecx, esi
call dword [0x100adad8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret