Function at 0x10052a40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov al, byte [0x10197a2c]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x60
mov byte [esp + 0x15], 0xbf
mov byte [esp + 0x16], 0x37
mov byte [esp + 0x17], 0x9c
mov byte [esp + 0x18], 0x48
mov byte [esp + 0x19], 0xe2
mov byte [esp + 0x1a], 0xc
mov byte [esp + 0x1b], 0x4d
mov byte [esp + 0x1c], 0xc1
mov byte [esp + 0x1d], 0x81
mov byte [esp + 0x1e], 0xa3
mov byte [esp + 0x1f], 0x66
mov byte [esp + 0x20], 1
mov byte [esp + 0x21], 0xdb
mov byte [esp + 0x22], 0x41
mov byte [esp + 0x23], 0xfd
mov byte [esp + 0x24], 0x38
mov byte [esp + 0x25], 0x8b
mov byte [esp + 0x26], 0x3f
mov byte [esp + 0x27], 0x7f
mov byte [esp + 0x28], 0xef
mov byte [esp + 0x29], 0xe5
mov byte [esp + 0x2a], 0xcf
mov byte [esp + 0x2b], 0xa
jne 0x10052b55
mov bl, al
push 0xd
or bl, 1
mov byte [0x10197a2c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197a30], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10052afd
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10052b28
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10052b1d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10052b1d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10197a30]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10052ae8
mov ecx, dword [0x10197a30]
push 0x10052cb0
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10197a30]
mov al, 0x2e
mov byte [esp + 0x1b], al
mov byte [esp + 0x1e], al
mov al, byte [0x10197a34]
mov dword [esp + 0x10], edx
test al, 1
mov byte [esp + 0x14], 0x7e
mov byte [esp + 0x15], 0x6c
mov byte [esp + 0x16], 0x93
mov byte [esp + 0x17], 0x2f
mov byte [esp + 0x18], 0xef
mov byte [esp + 0x19], 0xe2
mov byte [esp + 0x1a], 0x1f
mov byte [esp + 0x1c], 0x88
mov byte [esp + 0x1d], 0x20
mov byte [esp + 0x1f], 0x85
mov byte [esp + 0x20], 0x3d
mov byte [esp + 0x21], 0x1e
mov byte [esp + 0x22], 0xea
mov byte [esp + 0x23], 0x5f
mov byte [esp + 0x24], 0x9b
mov byte [esp + 0x25], 0xa6
mov byte [esp + 0x26], 0x7a
mov byte [esp + 0x27], 0x4d
mov byte [esp + 0x28], 0xfa
mov byte [esp + 0x29], 0x59
mov byte [esp + 0x2a], 0x5e
mov byte [esp + 0x2b], 0xf1
jne 0x10052c6d
mov bl, al
push 0xd
or bl, 1
mov byte [0x10197a34], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197a38], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10052c15
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10052c40
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10052c35
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10052c35
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10197a38]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10052c00
mov ecx, dword [0x10197a38]
push 0x10052cc0
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10197a38]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x40]
push edx
mov edx, dword [esp + 0x40]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret