Function at 0x1006bed0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c
mov al, 0x91
push ebx
mov byte [esp + 0x1c], al
mov byte [esp + 0x26], al
mov al, byte [0x101976bc]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x14], 0xfa
mov byte [esp + 0x15], 0x71
mov byte [esp + 0x16], 9
mov byte [esp + 0x17], 0x5e
mov byte [esp + 0x18], 0x85
mov byte [esp + 0x19], 0xfc
mov byte [esp + 0x1a], 0x19
mov byte [esp + 0x1b], 0xb
mov byte [esp + 0x1c], 0x6a
mov byte [esp + 0x1d], 0x2c
mov byte [esp + 0x1e], 0xfd
mov byte [esp + 0x1f], 0xd
mov byte [esp + 0x29], 0x14
mov byte [esp + 0x2a], 0x7b
mov byte [esp + 0x2b], 0x30
mov byte [esp + 0x2c], 0xe0
mov byte [esp + 0x2d], 0x90
mov byte [esp + 0x2e], 0x2a
mov byte [esp + 0x2f], 0x39
mov byte [esp + 0x30], 0x44
mov byte [esp + 0x31], 0x48
mov byte [esp + 0x33], 0x61
jne 0x1006bfe5
mov bl, al
push 0xd
or bl, 1
mov byte [0x101976bc], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101976c0], eax
xor edi, edi
mov bl, byte [esp + edi + 0x28]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1006bf8d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1006bfb8
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1006bfad
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1006bfad
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101976c0]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x1006bf78
mov ecx, dword [0x101976c0]
push 0x1006c170
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x101976c0]
mov al, 0x41
mov byte [esp + 0x2d], al
mov byte [esp + 0x31], al
mov al, 0x23
mov dword [esp + 0x10], edx
mov byte [esp + 0x37], al
mov byte [esp + 0x18], al
mov al, byte [0x101976c4]
mov byte [esp + 0x28], 0xe
test al, 1
mov byte [esp + 0x29], 0xfd
mov byte [esp + 0x2a], 0xc6
mov byte [esp + 0x2b], 0x8f
mov byte [esp + 0x2c], 0x51
mov byte [esp + 0x2e], 0x36
mov byte [esp + 0x2f], 0xc4
mov byte [esp + 0x30], 0xc
mov byte [esp + 0x32], 0x86
mov byte [esp + 0x33], 0xdf
mov byte [esp + 0x34], 0x3e
mov byte [esp + 0x35], 0x2a
mov byte [esp + 0x36], 0x9b
mov byte [esp + 0x38], 0xfe
mov byte [esp + 0x39], 0xf8
mov byte [esp + 0x3a], 0x50
mov byte [esp + 0x14], 0x47
mov byte [esp + 0x15], 0x93
mov byte [esp + 0x16], 0xb2
mov byte [esp + 0x17], 0xea
mov byte [esp + 0x19], 0x2d
mov byte [esp + 0x1a], 0x59
mov byte [esp + 0x1b], 0xa7
mov byte [esp + 0x1c], 0x67
mov byte [esp + 0x1d], 0x24
mov byte [esp + 0x1e], 0xe2
mov byte [esp + 0x1f], 0x9a
mov byte [esp + 0x20], 0x46
mov byte [esp + 0x21], 0x49
mov byte [esp + 0x22], 0xf3
mov byte [esp + 0x23], 0x42
mov byte [esp + 0x24], 0x90
mov byte [esp + 0x25], 0x9f
mov byte [esp + 0x26], 0x35
jne 0x1006c143
mov bl, al
push 0x14
or bl, 1
mov byte [0x101976c4], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101976c8], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x28]
movsx esi, bl
test esi, esi
jne 0x1006c0eb
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1006c116
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1006c10b
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1006c10b
mov al, byte [esp + edi + 0x28]
xor bl, al
mov eax, dword [0x101976c8]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x13
jb 0x1006c0d6
mov ecx, dword [0x101976c8]
push 0x1006c180
mov byte [ecx + 0x13], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101976c8]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret