Function at 0x100131c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x34
mov dword [esp + 0x10], ecx
mov eax, dword [0x100290dc]
xor eax, esp
mov dword [esp + 0x30], eax
mov ecx, 0xb7208366
jmp 0x100131f0
cmp dword [0x10029b48], 0xa
cmovl ecx, esi
setl dh
xor dl, dh
cmovne ecx, eax
nop
cmp ecx, 0xd5d358ea
jg 0x10013270
cmp ecx, 0xb7208365
jg 0x100132c0
cmp ecx, 0xa2505ead
jle 0x1001332e
cmp ecx, 0xa2505eae
je 0x100133c4
cmp ecx, 0xae1af744
je 0x100133ce
cmp ecx, 0xaf7a02fa
jne 0x100131f0
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov eax, dword [0x10029b44]
lea edx, [eax + 1]
imul edx, eax
mov ebp, edx
xor ebp, 0xfffffffe
mov eax, 0x1ccd81b5
mov ecx, 0x72ae17b2
mov esi, 0x1ccd81b5
test ebp, edx
sete dl
je 0x100131dd
mov esi, 0x72ae17b2
jmp 0x100131dd
cmp ecx, 0x4795b510
jg 0x10013300
cmp ecx, 0x1ccd81b4
jle 0x10013350
cmp ecx, 0x1ccd81b5
je 0x10013402
cmp ecx, 0x3ee6182d
je 0x1001340c
cmp ecx, 0x45e93e88
jne 0x100131f0
mov ecx, 0xa2505eae
jmp 0x100131f0
cmp ecx, 0xc7aced74
jle 0x10013372
cmp ecx, 0xc7aced75
je 0x10013452
cmp ecx, 0xd196cc4b
je 0x10013460
cmp ecx, 0xd2f402bf
jne 0x100131f0
mov ecx, 0x45e93e88
xor edi, edi
jmp 0x100131f0
cmp ecx, 0x6ba74585
jg 0x100133a2
cmp ecx, 0x4c8c410d
je 0x10013484
cmp ecx, 0x4cd3fd95
jne 0x100135be
mov ecx, 0xfa0a7303
jmp 0x100131f0
cmp ecx, 0x8b87cadd
je 0x100134b9
cmp ecx, 0x94478d94
jne 0x100131f0
mov ecx, 0x4cd3fd95
jmp 0x100131f0
cmp ecx, 0xd5d358eb
je 0x100134ff
cmp ecx, 0xfa0a7303
jne 0x100131f0
mov ecx, 0x4795b511
jmp 0x100131f0
cmp ecx, 0xb7208366
je 0x10013558
cmp ecx, 0xc59a4d36
jne 0x100131f0
push dword [esp + 4]
push dword [esp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, 0xd5d358eb
jmp 0x100131f0
cmp ecx, 0x6ba74586
je 0x100135b4
cmp ecx, 0x72ae17b2
jne 0x100131f0
mov ecx, 0xaf7a02fa
jmp 0x100131f0
mov ecx, 0x4cd3fd95
jmp 0x100131f0
mov eax, dword [0x10029b44]
lea edx, [eax + 1]
imul edx, eax
mov ebp, edx
xor ebp, 0xfffffffe
mov eax, 0x8b87cadd
mov ecx, 0xc7aced75
mov esi, 0x8b87cadd
test ebp, edx
sete dl
je 0x100131dd
mov esi, 0xc7aced75
jmp 0x100131dd
mov ecx, 0x4c8c410d
jmp 0x100131f0
mov ecx, dword [0x10029b44]
mov eax, dword [0x10029b48]
lea edx, [ecx + 1]
imul edx, ecx
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete cl
cmp eax, 0xa
setl ch
xor ch, cl
mov ecx, 0xaf7a02fa
mov esi, 0xaf7a02fa
jne 0x10013441
mov esi, 0x72ae17b2
cmp edx, 0xffffffff
cmovne ecx, esi
cmp eax, 0xa
cmovge ecx, esi
jmp 0x100131f0
mov ecx, 0x8b87cadd
mov edi, dword [esp + 0xc]
jmp 0x100131f0
mov eax, dword [esp]
lea eax, [esp + 0x14]
push eax
call fcn.1000dea0
mov ecx, 0xd2f402bf
test ebx, ebx
je 0x100131f0
mov ecx, 0x3ee6182d
jmp 0x100131f0
mov eax, dword [0x10029b44]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
mov eax, 0xd5d358eb
mov ecx, 0xc59a4d36
mov esi, 0xd5d358eb
cmp edx, 0xffffffff
sete dl
je 0x100131dd
mov esi, 0xc59a4d36
jmp 0x100131dd
mov edi, dword [esp + 0xc]
mov eax, dword [0x10029b44]
lea edx, [eax + 1]
imul edx, eax
mov ebp, edx
xor ebp, 0xfffffffe
mov eax, 0x94478d94
mov ecx, 0xc7aced75
mov esi, 0x94478d94
test ebp, edx
sete dl
je 0x100134e8
mov esi, 0xc7aced75
cmp dword [0x10029b48], 0xa
cmovl ecx, esi
setl dh
xor dh, dl
cmovne ecx, eax
jmp 0x100131f0
push dword [esp + 4]
push dword [esp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x10029b44]
mov edx, dword [0x10029b48]
lea ebp, [ecx - 1]
imul ebp, ecx
not ebp
or ebp, 0xfffffffe
cmp ebp, 0xffffffff
sete cl
cmp edx, 0xa
setl ch
xor ch, cl
mov ecx, 0x6ba74586
mov esi, 0x6ba74586
jne 0x10013543
mov esi, 0xc59a4d36
cmp ebp, 0xffffffff
cmovne ecx, esi
cmp edx, 0xa
mov dword [esp + 0xc], eax
cmovge ecx, esi
jmp 0x100131f0
mov eax, dword [esp + 0x10]
mov dword [esp], eax
mov byte [esp + 0x2c], 0
mov dword [esp + 0x28], 0x7d7d7523
mov dword [esp + 0x24], 0x27267861
mov dword [esp + 0x20], 0x706b7550
mov eax, dword [esp]
lea esi, [esp + 0x20]
push esi
call fcn.1000dea0
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
mov dword [esp + 0x1c], 0x68745e
mov dword [esp + 0x18], 0x7466627d
mov dword [esp + 0x14], 0x567a7447
mov ecx, 0xd196cc4b
jmp 0x100131f0
mov ecx, 0xae1af744
jmp 0x100131f0
cmp ecx, 0x4795b511
jne 0x100131f0
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.100151d1
mov eax, edi
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret