Function at 0x100343c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, 0x1d
push ebx
mov byte [esp + 9], al
mov byte [esp + 0x22], al
mov al, byte [0x10198224]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x14], 0x84
mov byte [esp + 0x16], 0x5f
mov byte [esp + 0x17], 0xfa
mov byte [esp + 0x18], 0xb
mov byte [esp + 0x19], 0x30
mov byte [esp + 0x1a], 0xaf
mov byte [esp + 0x1b], 0x8a
mov byte [esp + 0x1c], 0xac
mov byte [esp + 0x1d], 0xe5
mov byte [esp + 0x1e], 0x71
mov byte [esp + 0x1f], 0xc8
mov byte [esp + 0x24], 0xef
mov byte [esp + 0x25], 0x78
mov byte [esp + 0x26], 0x2d
mov byte [esp + 0x27], 0x94
mov byte [esp + 0x28], 0x6e
mov byte [esp + 0x29], 0x5c
mov byte [esp + 0x2a], 0x9c
mov byte [esp + 0x2b], 0xb8
mov byte [esp + 0x2c], 0x82
mov byte [esp + 0x2d], 0x81
mov byte [esp + 0x2f], 0xa4
jne 0x100344d5
mov bl, al
push 0xd
or bl, 1
mov byte [0x10198224], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10198228], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1003447d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100344a8
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1003449d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1003449d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10198228]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10034468
mov ecx, dword [0x10198228]
push 0x10034640
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x1019822c]
mov edx, dword [0x10198228]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x24], 0x33
mov byte [esp + 0x25], 0xa1
mov byte [esp + 0x26], 0x6f
mov byte [esp + 0x27], 0x87
mov byte [esp + 0x28], 0x24
mov byte [esp + 0x29], 0x79
mov byte [esp + 0x2a], 0x48
mov byte [esp + 0x2b], 0xca
mov byte [esp + 0x2c], 0xee
mov byte [esp + 0x2d], 0xcf
mov byte [esp + 0x2e], 0x31
mov byte [esp + 0x2f], 0xd4
mov byte [esp + 0x30], 0xc
mov byte [esp + 0x14], 0x7e
mov byte [esp + 0x15], 0xc0
mov byte [esp + 0x16], 0x1f
mov byte [esp + 0x17], 0xd1
mov byte [esp + 0x18], 0x4d
mov byte [esp + 0x19], 0x1c
mov byte [esp + 0x1a], 0x3f
mov byte [esp + 0x1b], 0x85
mov byte [esp + 0x1c], 0x88
mov byte [esp + 0x1d], 0x89
mov byte [esp + 0x1e], 0x58
mov byte [esp + 0x1f], 0xb8
mov byte [esp + 0x20], 0x69
jne 0x100345f7
mov bl, al
push 0xe
or bl, 1
mov byte [0x1019822c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10198230], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x1003459f
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100345ca
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100345bf
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100345bf
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x10198230]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xd
jb 0x1003458a
mov ecx, dword [0x10198230]
push 0x10034650
mov byte [ecx + 0xd], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10198230]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
push edx
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret