Function at 0x1006cc30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c
mov al, byte [0x1019769c]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x48
mov byte [esp + 0x15], 0x1c
mov byte [esp + 0x16], 0xf9
mov byte [esp + 0x17], 0xa6
mov byte [esp + 0x18], 0xd6
mov byte [esp + 0x19], 0x58
mov byte [esp + 0x1a], 0xdb
mov byte [esp + 0x1b], 0x3f
mov byte [esp + 0x1c], 0xe8
mov byte [esp + 0x1d], 0x4d
mov byte [esp + 0x1e], 0x92
mov byte [esp + 0x1f], 0x1b
mov byte [esp + 0x28], 0x23
mov byte [esp + 0x29], 0x79
mov byte [esp + 0x2a], 0x8b
mov byte [esp + 0x2b], 0xc8
mov byte [esp + 0x2c], 0xb3
mov byte [esp + 0x2d], 0x34
mov byte [esp + 0x2e], 0xe8
mov byte [esp + 0x2f], 0xd
mov byte [esp + 0x30], 0xc6
mov byte [esp + 0x31], 0x29
mov byte [esp + 0x32], 0xfe
mov byte [esp + 0x33], 0x77
jne 0x1006cd45
mov bl, al
push 0xd
or bl, 1
mov byte [0x1019769c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101976a0], eax
xor edi, edi
mov bl, byte [esp + edi + 0x28]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1006cced
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1006cd18
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1006cd0d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1006cd0d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101976a0]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x1006ccd8
mov ecx, dword [0x101976a0]
push 0x1006ced0
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x101976a0]
mov al, 0x53
mov byte [esp + 0x30], al
mov byte [esp + 0x33], al
mov al, byte [0x101976a4]
mov dword [esp + 0x10], edx
test al, 1
mov byte [esp + 0x28], 0xd9
mov byte [esp + 0x29], 0x7a
mov byte [esp + 0x2a], 0x8e
mov byte [esp + 0x2b], 0xdc
mov byte [esp + 0x2c], 0x9a
mov byte [esp + 0x2d], 0xc7
mov byte [esp + 0x2e], 0x3f
mov byte [esp + 0x2f], 0x95
mov byte [esp + 0x31], 3
mov byte [esp + 0x32], 0x42
mov byte [esp + 0x34], 0xe9
mov byte [esp + 0x35], 0x59
mov byte [esp + 0x36], 8
mov byte [esp + 0x37], 0x9e
mov byte [esp + 0x38], 0x4b
mov byte [esp + 0x39], 0x6d
mov byte [esp + 0x3a], 0xe3
mov byte [esp + 0x14], 0x90
mov byte [esp + 0x15], 0x14
mov byte [esp + 0x16], 0xfa
mov byte [esp + 0x17], 0xb9
mov byte [esp + 0x18], 0xe8
mov byte [esp + 0x19], 0xab
mov byte [esp + 0x1a], 0x50
mov byte [esp + 0x1b], 0xf6
mov byte [esp + 0x1c], 0x38
mov byte [esp + 0x1d], 0x66
mov byte [esp + 0x1e], 0x26
mov byte [esp + 0x1f], 0x16
mov byte [esp + 0x20], 0x91
mov byte [esp + 0x21], 0x3a
mov byte [esp + 0x22], 0x60
mov byte [esp + 0x23], 0xff
mov byte [esp + 0x24], 0x25
mov byte [esp + 0x25], 0xa
mov byte [esp + 0x26], 0x86
jne 0x1006cea3
mov bl, al
push 0x14
or bl, 1
mov byte [0x101976a4], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101976a8], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x28]
movsx esi, bl
test esi, esi
jne 0x1006ce4b
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1006ce76
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1006ce6b
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1006ce6b
mov al, byte [esp + edi + 0x28]
xor bl, al
mov eax, dword [0x101976a8]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x13
jb 0x1006ce36
mov ecx, dword [0x101976a8]
push 0x1006cee0
mov byte [ecx + 0x13], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101976a8]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret