Function at 0x10010056
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x150
mov eax, 0x1007097e
call fcn.10039b20
mov esi, ecx
mov ebx, dword [ebp + 8]
mov eax, dword [esi]
mov dword [0x10095cc8], eax
test ebx, ebx
jne 0x1001007c
xor al, al
jmp 0x100102d7
push 0x104
lea eax, [ebp - 0x114]
push 0
push eax
call fcn.10051560
add esp, 0xc
mov dword [ebp - 0x118], 0xf
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [0x10092e44], 0x10
mov dword [ebp - 0x11c], eax
mov byte [ebp - 0x12c], al
mov eax, 0x10092e30
cmovae eax, dword [0x10092e30]
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov cl, 0x6a
mov dword [ebp - 0x138], 0x1e1a256a
mov dword [ebp - 0x134], 0x44040503
xor eax, eax
mov dword [ebp - 0x130], 0x30423
xor byte [ebp + eax - 0x137], cl
inc eax
cmp eax, 0xa
jae 0x10010105
mov cl, byte [ebp - 0x138]
jmp 0x100100f0
lea eax, [ebp - 0x137]
mov byte [ebp - 0x12d], 0
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edi, dword [ebp + 0xc]
cmp edi, 1
jne 0x10010235
cmp dword [esi + 8], 0
je 0x100102c6
cmp ebx, dword [esi + 8]
jne 0x100102c6
xor eax, eax
mov ecx, 0x10b78ba
cmp dword [0x10099f80], eax
sete al
test eax, eax
mov dword [0x10099f80], eax
sete dl
call fcn.1000c6ef
mov edx, dword [0x10099f80]
lea ecx, [ebp - 0x15c]
call fcn.1000a6ea
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
jb 0x10010179
mov ecx, dword [ecx]
push 0xf
pop edx
mov byte [ebp - 0x144], dl
xor eax, eax
mov dword [ebp - 0x143], 0x677b6e5f
mov dword [ebp - 0x13f], 0x66597c60
mov word [ebp - 0x13b], 0x786a
mov byte [ebp - 0x139], 0
xor byte [ebp + eax - 0x143], dl
inc eax
cmp eax, 0xa
jae 0x100101bd
mov dl, byte [ebp - 0x144]
jmp 0x100101a8
push 5
pop edx
mov byte [ebp - 0x139], 0
xor eax, eax
mov byte [ebp - 0x134], dl
mov dword [ebp - 0x133], 0x60636340
mov word [ebp - 0x12f], 0x7166
mov byte [ebp - 0x12d], 0
xor byte [ebp + eax - 0x133], dl
inc eax
cmp eax, 6
jae 0x100101fe
mov dl, byte [ebp - 0x134]
jmp 0x100101e9
lea eax, [ebp - 0x114]
mov byte [ebp - 0x12d], 0
push eax
push ecx
lea eax, [ebp - 0x143]
push eax
lea eax, [ebp - 0x133]
push eax
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push 0
push 1
lea ecx, [ebp - 0x15c]
call fcn.100027bc
jmp 0x100102c6
call fcn.10009a36
and edi, 0xf1f0000
cmp edi, 0x1000000
je 0x100102b9
cmp edi, 0x4000000
jne 0x100102c6
mov ecx, dword [esi]
push edx
push eax
call dword [0x10085fd8]
mov edi, eax
cmp edi, 0xffffffff
je 0x100102c6
mov eax, dword [esi + 0xc]
cmp eax, 0xffffffff
je 0x100102c6
cmp eax, edi
jne 0x100102c6
cmp eax, 0xe
jl 0x100102c6
cmp eax, 0x2a
jge 0x100102c6
add edi, 0xfffffff2
js 0x100102c6
cmp edi, 0x1c
jge 0x100102c6
mov ecx, dword [esi]
push ebx
call dword [0x10085fdc]
test eax, eax
je 0x100102c6
mov edx, dword [eax + 0x60]
test edx, edx
je 0x100102c6
mov esi, dword [eax + 0x64]
test esi, esi
je 0x100102c6
mov eax, dword [0x10095bc8]
test eax, eax
je 0x100102c6
mov ecx, dword [eax + 0x44]
test ecx, ecx
je 0x100102c6
mov eax, dword [esi]
add eax, dword [edx]
push edi
push eax
call fcn.1001fb23
jmp 0x100102c6
mov ecx, dword [esi]
push edx
push eax
call dword [0x10085fd8]
mov dword [esi + 0xc], eax
push 0
push 1
lea ecx, [ebp - 0x12c]
call fcn.100027bc
mov al, 1
call fcn.10039aca
ret 8