Function at 0x100566c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x3c
mov eax, dword [0x101ad3b4]
xor eax, esp
mov dword [esp + 0x38], eax
xor eax, eax
push ebp
mov ebp, dword [esp + 0x44]
push esi
mov dword [esp + 0x21], eax
mov dword [esp + 0x25], eax
mov dword [esp + 0x29], eax
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov word [esp + 0x3d], ax
mov byte [esp + 0x3f], al
push edi
mov edi, dword [esp + 0x50]
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x28], 0
call fcn.1004b570
mov dl, 0x72
mov cl, 0x65
mov esi, eax
mov al, 0x6d
mov byte [esp + 0x25], dl
mov byte [esp + 0x26], cl
mov byte [esp + 0x19], cl
mov byte [esp + 0x1c], dl
add esp, 4
mov byte [esp + 0x1c], 0x63
mov byte [esp + 0x1d], 0x61
mov byte [esp + 0x1e], 0x70
mov byte [esp + 0x1f], 0x74
mov byte [esp + 0x20], 0x75
mov byte [esp + 0x23], 0
mov byte [esp + 0x14], al
mov byte [esp + 0x16], al
mov byte [esp + 0x17], 0x6f
mov byte [esp + 0x19], 0x79
mov byte [esp + 0x1a], 0
mov byte [esp + 0x10], 0x68
mov byte [esp + 0x11], al
mov byte [esp + 0x12], 0
mov byte [esp + 0xc], 0x74
mov byte [esp + 0xd], 0x69
mov byte [esp + 0xe], 0x64
mov byte [esp + 0xf], 0
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x24]
lea esp, [esp]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x100567b2
test al, al
je 0x100567ac
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x100567b2
add ecx, 2
add edx, 2
test al, al
jne 0x10056790
xor edi, edi
xor eax, eax
jmp 0x100567b9
sbb eax, eax
sbb eax, 0xffffffff
xor edi, edi
cmp eax, edi
jne 0x100567f2
lea ecx, [esp + 0xc]
push ecx
push 0x101616c0
push esi
mov dword [esp + 0x18], edi
call fcn.100f86bd
mov edx, dword [esp + 0x18]
add esp, 0xc
mov dword [ebp + 0x32c0], edx
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.100f611a
add esp, 0x3c
ret
lea edx, [esp + 0x14]
lea ecx, [esp + 0x24]
lea ebx, [ebx]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x10056820
test al, al
je 0x1005681c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x10056820
add ecx, 2
add edx, 2
test al, al
jne 0x10056800
xor eax, eax
jmp 0x10056825
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x1005687c
lea eax, [esp + 0xc]
push eax
push 0x101616c0
push esi
mov dword [esp + 0x18], edi
call fcn.100f86bd
mov edx, dword [esp + 0x18]
mov eax, dword [ebp + 0x1c]
add esp, 0xc
lea ecx, [esp + 0x10]
push ecx
push 0x9c4
push 1
push edx
push 0x1234
push 0x84b
push eax
mov dword [esp + 0x2c], edi
call fcn.100513e0
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.100f611a
add esp, 0x3c
ret
lea ecx, [esp + 0x10]
lea eax, [esp + 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100568a4
test dl, dl
je 0x100568a0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100568a4
add eax, 2
add ecx, 2
test dl, dl
jne 0x10056884
xor eax, eax
jmp 0x100568a9
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x100568c8
push ebp
call fcn.100811b0
add esp, 4
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.100f611a
add esp, 0x3c
ret
lea ecx, [esp + 0xc]
lea eax, [esp + 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100568f0
test dl, dl
je 0x100568ec
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100568f0
add eax, 2
add ecx, 2
test dl, dl
jne 0x100568d0
xor eax, eax
jmp 0x100568f5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x100567de
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.100f611a
add esp, 0x3c
ret