Function at 0x10059d00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x3c
mov eax, dword [0x101b7324]
xor eax, esp
mov dword [esp + 0x38], eax
xor eax, eax
push ebp
mov ebp, dword [esp + 0x44]
push esi
mov dword [esp + 0x21], eax
mov dword [esp + 0x25], eax
mov dword [esp + 0x29], eax
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov word [esp + 0x3d], ax
mov byte [esp + 0x3f], al
push edi
mov edi, dword [esp + 0x50]
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x28], 0
call fcn.1004e3a0
mov dl, 0x72
mov cl, 0x65
mov esi, eax
mov al, 0x6d
mov byte [esp + 0x25], dl
mov byte [esp + 0x26], cl
mov byte [esp + 0x19], cl
mov byte [esp + 0x1c], dl
add esp, 4
mov byte [esp + 0x1c], 0x63
mov byte [esp + 0x1d], 0x61
mov byte [esp + 0x1e], 0x70
mov byte [esp + 0x1f], 0x74
mov byte [esp + 0x20], 0x75
mov byte [esp + 0x23], 0
mov byte [esp + 0x14], al
mov byte [esp + 0x16], al
mov byte [esp + 0x17], 0x6f
mov byte [esp + 0x19], 0x79
mov byte [esp + 0x1a], 0
mov byte [esp + 0x10], 0x68
mov byte [esp + 0x11], al
mov byte [esp + 0x12], 0
mov byte [esp + 0xc], 0x74
mov byte [esp + 0xd], 0x69
mov byte [esp + 0xe], 0x64
mov byte [esp + 0xf], 0
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x24]
lea esp, [esp]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x10059df2
test al, al
je 0x10059dec
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x10059df2
add ecx, 2
add edx, 2
test al, al
jne 0x10059dd0
xor edi, edi
xor eax, eax
jmp 0x10059df9
sbb eax, eax
sbb eax, 0xffffffff
xor edi, edi
cmp eax, edi
jne 0x10059e32
lea ecx, [esp + 0xc]
push ecx
push 0x1016b6b8
push esi
mov dword [esp + 0x18], edi
call fcn.10101d65
mov edx, dword [esp + 0x18]
add esp, 0xc
mov dword [ebp + 0x32bc], edx
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.100ffa66
add esp, 0x3c
ret
lea edx, [esp + 0x14]
lea ecx, [esp + 0x24]
lea ebx, [ebx]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x10059e60
test al, al
je 0x10059e5c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x10059e60
add ecx, 2
add edx, 2
test al, al
jne 0x10059e40
xor eax, eax
jmp 0x10059e65
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x10059ebc
lea eax, [esp + 0xc]
push eax
push 0x1016b6b8
push esi
mov dword [esp + 0x18], edi
call fcn.10101d65
mov edx, dword [esp + 0x18]
mov eax, dword [ebp + 0x18]
add esp, 0xc
lea ecx, [esp + 0x10]
push ecx
push 0x9c4
push 1
push edx
push 0x1234
push 0x84b
push eax
mov dword [esp + 0x2c], edi
call fcn.10054140
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.100ffa66
add esp, 0x3c
ret
lea ecx, [esp + 0x10]
lea eax, [esp + 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10059ee4
test dl, dl
je 0x10059ee0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10059ee4
add eax, 2
add ecx, 2
test dl, dl
jne 0x10059ec4
xor eax, eax
jmp 0x10059ee9
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x10059f08
push ebp
call fcn.10087840
add esp, 4
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.100ffa66
add esp, 0x3c
ret
lea ecx, [esp + 0xc]
lea eax, [esp + 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10059f30
test dl, dl
je 0x10059f2c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10059f30
add eax, 2
add ecx, 2
test dl, dl
jne 0x10059f10
xor eax, eax
jmp 0x10059f35
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x10059e1e
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.100ffa66
add esp, 0x3c
ret