Function at 0x10057870
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x3c
mov eax, dword [0x101b03d4]
xor eax, esp
mov dword [esp + 0x38], eax
xor eax, eax
push ebp
mov ebp, dword [esp + 0x44]
push esi
push edi
mov edi, dword [esp + 0x50]
mov byte [esp + 0x24], 0
mov dword [esp + 0x25], eax
mov dword [esp + 0x29], eax
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov dword [esp + 0x3d], eax
mov word [esp + 0x41], ax
mov byte [esp + 0x43], al
mov al, al
lea eax, [esp + 0x24]
push eax
call fcn.1004bb80
add esp, 4
mov esi, eax
nop
mov dl, 0x72
mov cl, 0x65
mov byte [esp + 0x1c], 0x63
mov byte [esp + 0x1d], 0x61
mov byte [esp + 0x1e], 0x70
mov byte [esp + 0x1f], 0x74
mov byte [esp + 0x20], 0x75
mov byte [esp + 0x21], dl
mov byte [esp + 0x22], cl
mov byte [esp + 0x23], 0
push edx
pop edx
mov al, 0x6d
mov byte [esp + 0x14], al
mov byte [esp + 0x15], cl
mov byte [esp + 0x16], al
mov byte [esp + 0x17], 0x6f
mov byte [esp + 0x18], dl
mov byte [esp + 0x19], 0x79
mov byte [esp + 0x1a], 0
mov esi, esi
mov byte [esp + 0xc], 0x68
mov byte [esp + 0xd], al
mov byte [esp + 0xe], 0
mov ebx, ebx
mov byte [esp + 0x10], 0x74
mov byte [esp + 0x11], 0x69
mov byte [esp + 0x12], 0x64
mov byte [esp + 0x13], 0
mov ebx, ebx
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x24]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x10057966
test al, al
je 0x10057960
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x10057966
add ecx, 2
add edx, 2
test al, al
jne 0x10057944
xor edi, edi
xor eax, eax
jmp 0x1005796d
sbb eax, eax
sbb eax, 0xffffffff
xor edi, edi
cmp eax, edi
jne 0x100579ac
mov dword [esp + 0xc], edi
mov bh, bh
lea ecx, [esp + 0xc]
push ecx
push 0x101655d8
push esi
call fcn.100fd75d
add esp, 0xc
xchg ebx, eax
xchg ebx, eax
mov edx, dword [esp + 0xc]
mov dword [ebp + 0x32c0], edx
push ecx
pop ecx
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.100fb12a
add esp, 0x3c
ret
lea edx, [esp + 0x14]
lea ecx, [esp + 0x24]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x100579d4
test al, al
je 0x100579d0
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x100579d4
add ecx, 2
add edx, 2
test al, al
jne 0x100579b4
xor eax, eax
jmp 0x100579d9
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x10057a3a
mov dword [esp + 0xc], edi
mov dl, dl
lea eax, [esp + 0xc]
push eax
push 0x101655d8
push esi
call fcn.100fd75d
add esp, 0xc
push eax
pop eax
mov eax, dword [esp + 0xc]
mov ecx, dword [ebp + 0x1c]
mov dword [esp + 0x10], edi
mov eax, eax
lea edx, [esp + 0x10]
push edx
push 0x9c4
push 1
push eax
push 0x4c87
push 0x108d6
push ecx
call fcn.10052120
mov bh, bh
mov edx, edx
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.100fb12a
add esp, 0x3c
ret
lea ecx, [esp + 0xc]
lea eax, [esp + 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10057a62
test dl, dl
je 0x10057a5e
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10057a62
add eax, 2
add ecx, 2
test dl, dl
jne 0x10057a42
xor eax, eax
jmp 0x10057a67
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x10057a86
push ebp
call fcn.10085720
add esp, 4
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.100fb12a
add esp, 0x3c
ret
lea ecx, [esp + 0x10]
lea eax, [esp + 0x24]
mov edi, edi
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10057ab0
test dl, dl
je 0x10057aac
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10057ab0
add eax, 2
add ecx, 2
test dl, dl
jne 0x10057a90
xor eax, eax
jmp 0x10057ab5
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x10057998
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.100fb12a
add esp, 0x3c
ret