Function at 0x1005a800
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x3c
mov eax, dword [0x101b734c]
xor eax, esp
mov dword [esp + 0x38], eax
xor eax, eax
push ebp
mov ebp, dword [esp + 0x44]
push esi
mov dword [esp + 0x21], eax
mov dword [esp + 0x25], eax
mov dword [esp + 0x29], eax
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov dword [esp + 0x39], eax
mov word [esp + 0x3d], ax
mov byte [esp + 0x3f], al
push edi
mov edi, dword [esp + 0x50]
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x28], 0
call fcn.1004ee50
mov dl, 0x72
mov cl, 0x65
mov esi, eax
mov al, 0x6d
mov byte [esp + 0x25], dl
mov byte [esp + 0x26], cl
mov byte [esp + 0x19], cl
mov byte [esp + 0x1c], dl
add esp, 4
mov byte [esp + 0x1c], 0x63
mov byte [esp + 0x1d], 0x61
mov byte [esp + 0x1e], 0x70
mov byte [esp + 0x1f], 0x74
mov byte [esp + 0x20], 0x75
mov byte [esp + 0x23], 0
mov byte [esp + 0x14], al
mov byte [esp + 0x16], al
mov byte [esp + 0x17], 0x6f
mov byte [esp + 0x19], 0x79
mov byte [esp + 0x1a], 0
mov byte [esp + 0x10], 0x68
mov byte [esp + 0x11], al
mov byte [esp + 0x12], 0
mov byte [esp + 0xc], 0x74
mov byte [esp + 0xd], 0x69
mov byte [esp + 0xe], 0x64
mov byte [esp + 0xf], 0
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x24]
lea esp, [esp]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x1005a8f2
test al, al
je 0x1005a8ec
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1005a8f2
add ecx, 2
add edx, 2
test al, al
jne 0x1005a8d0
xor edi, edi
xor eax, eax
jmp 0x1005a8f9
sbb eax, eax
sbb eax, 0xffffffff
xor edi, edi
cmp eax, edi
jne 0x1005a932
lea ecx, [esp + 0xc]
push ecx
push 0x1016b6c8
push esi
mov dword [esp + 0x18], edi
call fcn.101026c5
mov edx, dword [esp + 0x18]
add esp, 0xc
mov dword [ebp + 0x32c0], edx
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.101003d3
add esp, 0x3c
ret
lea edx, [esp + 0x14]
lea ecx, [esp + 0x24]
lea ebx, [ebx]
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x1005a960
test al, al
je 0x1005a95c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x1005a960
add ecx, 2
add edx, 2
test al, al
jne 0x1005a940
xor eax, eax
jmp 0x1005a965
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x1005a9bc
lea eax, [esp + 0xc]
push eax
push 0x1016b6c8
push esi
mov dword [esp + 0x18], edi
call fcn.101026c5
mov edx, dword [esp + 0x18]
mov eax, dword [ebp + 0x1c]
add esp, 0xc
lea ecx, [esp + 0x10]
push ecx
push 0x9c4
push 1
push edx
push 0x1234
push 0x84b
push eax
mov dword [esp + 0x2c], edi
call fcn.10054c80
pop edi
pop esi
xor eax, eax
pop ebp
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.101003d3
add esp, 0x3c
ret
lea ecx, [esp + 0x10]
lea eax, [esp + 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005a9e4
test dl, dl
je 0x1005a9e0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005a9e4
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005a9c4
xor eax, eax
jmp 0x1005a9e9
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x1005aa08
push ebp
call fcn.10088520
add esp, 4
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.101003d3
add esp, 0x3c
ret
lea ecx, [esp + 0xc]
lea eax, [esp + 0x24]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x1005aa30
test dl, dl
je 0x1005aa2c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x1005aa30
add eax, 2
add ecx, 2
test dl, dl
jne 0x1005aa10
xor eax, eax
jmp 0x1005aa35
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, edi
jne 0x1005a91e
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
mov ecx, dword [esp + 0x44]
pop edi
pop esi
pop ebp
xor ecx, esp
call fcn.101003d3
add esp, 0x3c
ret