Function at 0x1004ec70
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, 0xfc
push ebx
mov byte [esp + 0xa], al
mov byte [esp + 0x18], al
mov byte [esp + 0x20], al
mov al, byte [0x10197b34]
push ebp
mov cl, 0xa0
push esi
push edi
test al, 1
mov byte [esp + 0x14], 0x8b
mov byte [esp + 0x15], 0x78
mov byte [esp + 0x17], 0x3a
mov byte [esp + 0x18], 0x50
mov byte [esp + 0x19], 0xc5
mov byte [esp + 0x1a], cl
mov byte [esp + 0x1b], 0xd0
mov byte [esp + 0x1c], 0x98
mov byte [esp + 0x1d], 0xaf
mov byte [esp + 0x1e], 0x12
mov byte [esp + 0x25], 0x11
mov byte [esp + 0x26], 0x92
mov byte [esp + 0x27], 0x53
mov byte [esp + 0x28], 0x3e
mov byte [esp + 0x29], cl
mov byte [esp + 0x2a], 0xd4
mov byte [esp + 0x2b], 0xfe
mov byte [esp + 0x2d], 0xc3
mov byte [esp + 0x2e], 0x7e
jne 0x1004ed7a
mov bl, al
push 0xc
or bl, 1
mov byte [0x10197b34], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197b38], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1004ed22
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1004ed4d
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1004ed42
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1004ed42
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10197b38]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xb
jb 0x1004ed0d
mov ecx, dword [0x10197b38]
push 0x1004eee0
mov byte [ecx + 0xb], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x10197b3c]
mov edx, dword [0x10197b38]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x24], 0x20
mov byte [esp + 0x25], 0x3e
mov byte [esp + 0x26], 0xa
mov byte [esp + 0x27], 0x3f
mov byte [esp + 0x28], 3
mov byte [esp + 0x29], 0xfb
mov byte [esp + 0x2a], 0x23
mov byte [esp + 0x2b], 0xf9
mov byte [esp + 0x2c], 0x59
mov byte [esp + 0x2d], 0x60
mov byte [esp + 0x2e], 0x41
mov byte [esp + 0x2f], 0x89
mov byte [esp + 0x30], 0xd1
mov byte [esp + 0x14], 0x69
mov byte [esp + 0x15], 0x50
mov byte [esp + 0x16], 0x7e
mov byte [esp + 0x17], 0x5a
mov byte [esp + 0x18], 0x71
mov byte [esp + 0x19], 0x95
mov byte [esp + 0x1a], 0x46
mov byte [esp + 0x1b], 0x8d
mov byte [esp + 0x1c], 0x16
mov byte [esp + 0x1d], 0x10
mov byte [esp + 0x1e], 0x24
mov byte [esp + 0x1f], 0xe7
mov byte [esp + 0x20], 0x86
jne 0x1004ee9c
mov bl, al
push 0xe
or bl, 1
mov byte [0x10197b3c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197b40], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x1004ee44
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1004ee6f
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1004ee64
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1004ee64
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x10197b40]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xd
jb 0x1004ee2f
mov ecx, dword [0x10197b40]
push 0x1004eef0
mov byte [ecx + 0xd], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10197b40]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
push edx
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret