Function at 0x100f2bf0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, byte [0x101955e0]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0xf8
mov byte [esp + 0x15], 0x60
mov byte [esp + 0x16], 0xf
mov byte [esp + 0x17], 0xca
mov byte [esp + 0x18], 0xd6
mov byte [esp + 0x19], 0x86
mov byte [esp + 0x1a], 0x8b
mov byte [esp + 0x1b], 0xb5
mov byte [esp + 0x1c], 0x56
mov byte [esp + 0x1d], 0xd0
mov byte [esp + 0x1e], 0xd1
mov byte [esp + 0x1f], 0xad
mov byte [esp + 0x24], 0x99
mov byte [esp + 0x25], 4
mov byte [esp + 0x26], 0x79
mov byte [esp + 0x27], 0xab
mov byte [esp + 0x28], 0xa6
mov byte [esp + 0x29], 0xef
mov byte [esp + 0x2a], 0xb8
mov byte [esp + 0x2b], 0x87
mov byte [esp + 0x2c], 0x78
mov byte [esp + 0x2d], 0xb4
mov byte [esp + 0x2e], 0xbd
mov byte [esp + 0x2f], 0xc1
jne 0x100f2d05
mov bl, al
push 0xd
or bl, 1
mov byte [0x101955e0], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101955e4], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100f2cad
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100f2cd8
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100f2ccd
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100f2ccd
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101955e4]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100f2c98
mov ecx, dword [0x101955e4]
push 0x100f2e90
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x101955e4]
mov al, 0x95
mov byte [esp + 0x29], al
mov byte [esp + 0x30], al
mov al, 0xf0
mov dword [esp + 0x10], edx
mov byte [esp + 0x33], al
mov byte [esp + 0x19], al
mov byte [esp + 0x20], al
mov al, byte [0x101955e8]
mov edx, 0x11
mov cl, 0x9e
test al, 1
mov byte [esp + 0x24], 0x40
mov byte [esp + 0x25], 0x44
mov byte [esp + 0x26], 0x6a
mov byte [esp + 0x27], 0x35
mov byte [esp + 0x28], 0x20
mov byte [esp + 0x2a], 0x77
mov byte [esp + 0x2b], 0x68
mov byte [esp + 0x2c], dl
mov byte [esp + 0x2d], 0x1d
mov byte [esp + 0x2e], 0x2f
mov byte [esp + 0x2f], 0xeb
mov byte [esp + 0x31], 0x79
mov byte [esp + 0x32], cl
mov byte [esp + 0x14], 0x12
mov byte [esp + 0x15], 0x21
mov byte [esp + 0x16], 0xd
mov byte [esp + 0x17], 0x64
mov byte [esp + 0x18], 0x55
mov byte [esp + 0x1a], 5
mov byte [esp + 0x1b], dl
mov byte [esp + 0x1c], 0x47
mov byte [esp + 0x1d], 0x7c
mov byte [esp + 0x1e], 0x43
mov byte [esp + 0x1f], cl
mov byte [esp + 0x21], 0x3c
mov byte [esp + 0x22], 0xe6
mov byte [esp + 0x23], 0xa7
jne 0x100f2e46
mov bl, al
push edx
or bl, 1
mov byte [0x101955e8], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101955ec], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x100f2dee
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100f2e19
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100f2e0e
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100f2e0e
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x101955ec]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x10
jb 0x100f2dd9
mov ecx, dword [0x101955ec]
push 0x100f2ea0
mov byte [ecx + 0x10], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101955ec]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x48]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret