Function at 0x1009ce80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, byte [0x1019701c]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x44
mov byte [esp + 0x15], 0xf5
mov byte [esp + 0x16], 0xe6
mov byte [esp + 0x17], 0xa
mov byte [esp + 0x18], 0xfb
mov byte [esp + 0x19], 0xad
mov byte [esp + 0x1a], 0xf8
mov byte [esp + 0x1b], 0xe7
mov byte [esp + 0x1c], 0x74
mov byte [esp + 0x1d], 0xc1
mov byte [esp + 0x1e], 0xd1
mov byte [esp + 0x1f], 0x37
mov byte [esp + 0x24], 0x2f
mov byte [esp + 0x25], 0x90
mov byte [esp + 0x26], 0x94
mov byte [esp + 0x27], 0x64
mov byte [esp + 0x28], 0x9e
mov byte [esp + 0x29], 0xc1
mov byte [esp + 0x2a], 0xcb
mov byte [esp + 0x2b], 0xd5
mov byte [esp + 0x2c], 0x5a
mov byte [esp + 0x2d], 0xa5
mov byte [esp + 0x2e], 0xbd
mov byte [esp + 0x2f], 0x5b
jne 0x1009cf95
mov bl, al
push 0xd
or bl, 1
mov byte [0x1019701c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197020], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1009cf3d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1009cf68
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1009cf5d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1009cf5d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10197020]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x1009cf28
mov ecx, dword [0x10197020]
push 0x1009d0e0
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x10197024]
mov edx, dword [0x10197020]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x24], 0xdc
mov byte [esp + 0x25], 0x64
mov byte [esp + 0x26], 0xd1
mov byte [esp + 0x27], 5
mov byte [esp + 0x28], 0x43
mov byte [esp + 0x29], 0xb2
mov byte [esp + 0x2a], 0x86
mov byte [esp + 0x2b], 0x51
mov byte [esp + 0x2c], 0xe5
mov byte [esp + 0x2d], 0xce
mov byte [esp + 0x2e], 0x39
mov byte [esp + 0x2f], 0x38
mov byte [esp + 0x30], 0x5b
mov byte [esp + 0x14], 0x9b
mov byte [esp + 0x15], 1
mov byte [esp + 0x16], 0xa5
mov byte [esp + 0x17], 0x56
mov byte [esp + 0x18], 0x3a
mov byte [esp + 0x19], 0xc1
mov byte [esp + 0x1a], 0xf2
mov byte [esp + 0x1b], 0x34
mov byte [esp + 0x1c], 0x88
mov byte [esp + 0x1d], 0x9a
mov byte [esp + 0x1e], 0x50
mov byte [esp + 0x1f], 0x55
mov byte [esp + 0x20], 0x3e
jne 0x1009d0b7
mov bl, al
push 0xe
or bl, 1
mov byte [0x10197024], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197028], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x1009d05f
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1009d08a
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1009d07f
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1009d07f
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x10197028]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xd
jb 0x1009d04a
mov ecx, dword [0x10197028]
push 0x1009d0f0
mov byte [ecx + 0xd], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10197028]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x38]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret