Function at 0x100f2940
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, 0x73
push ebx
mov byte [esp + 9], al
mov byte [esp + 0x13], al
mov al, byte [0x101955f0]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x14], 0x99
mov byte [esp + 0x16], 0x8b
mov byte [esp + 0x17], 0x10
mov byte [esp + 0x18], 9
mov byte [esp + 0x19], 0x5f
mov byte [esp + 0x1a], 0x19
mov byte [esp + 0x1b], 0x1d
mov byte [esp + 0x1c], 0xb6
mov byte [esp + 0x1d], 0x63
mov byte [esp + 0x1e], 0xf0
mov byte [esp + 0x24], 0xf8
mov byte [esp + 0x25], 0x17
mov byte [esp + 0x26], 0xfd
mov byte [esp + 0x27], 0x71
mov byte [esp + 0x28], 0x79
mov byte [esp + 0x29], 0x36
mov byte [esp + 0x2a], 0x2a
mov byte [esp + 0x2b], 0x2f
mov byte [esp + 0x2c], 0x98
mov byte [esp + 0x2d], 7
mov byte [esp + 0x2e], 0x9c
mov byte [esp + 0x2f], 0x1f
jne 0x100f2a55
mov bl, al
push 0xd
or bl, 1
mov byte [0x101955f0], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101955f4], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100f29fd
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100f2a28
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100f2a1d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100f2a1d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101955f4]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100f29e8
mov ecx, dword [0x101955f4]
push 0x100f2bd0
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x101955f4]
mov al, 0x8f
mov byte [esp + 0x17], al
mov byte [esp + 0x1a], al
mov al, byte [0x101955f8]
mov cl, 0xd9
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x24], 0x42
mov byte [esp + 0x25], 0x32
mov byte [esp + 0x26], 0xe2
mov byte [esp + 0x27], 0xdc
mov byte [esp + 0x28], 0x9c
mov byte [esp + 0x29], 0x1d
mov byte [esp + 0x2a], cl
mov byte [esp + 0x2b], 0xb8
mov byte [esp + 0x2c], 0x77
mov byte [esp + 0x2d], 0x1a
mov byte [esp + 0x2e], 0x55
mov byte [esp + 0x2f], 0xe0
mov byte [esp + 0x30], 0x43
mov byte [esp + 0x31], 0xf7
mov byte [esp + 0x14], 0x10
mov byte [esp + 0x15], 0x57
mov byte [esp + 0x16], 0x85
mov byte [esp + 0x18], 0xf9
mov byte [esp + 0x19], 0x69
mov byte [esp + 0x1b], cl
mov byte [esp + 0x1c], 0x1b
mov byte [esp + 0x1d], 0x6f
mov byte [esp + 0x1e], 0x30
mov byte [esp + 0x1f], 0xa5
mov byte [esp + 0x20], 0x3b
mov byte [esp + 0x21], 0xa0
jne 0x100f2b81
mov bl, al
push 0xf
or bl, 1
mov byte [0x101955f8], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101955fc], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x100f2b29
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100f2b54
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100f2b49
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100f2b49
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x101955fc]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xe
jb 0x100f2b14
mov ecx, dword [0x101955fc]
push 0x100f2be0
mov byte [ecx + 0xe], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101955fc]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x48]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret