Function at 0x1001e860
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x54
mov al, byte [0x10194bd8]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0xbe
mov byte [esp + 0x15], 0x94
mov byte [esp + 0x16], 0x84
mov byte [esp + 0x17], 0xb7
mov byte [esp + 0x18], 0x6c
mov byte [esp + 0x19], 0x60
mov byte [esp + 0x1a], 0xcc
mov byte [esp + 0x1b], 6
mov byte [esp + 0x1c], 0xa5
mov byte [esp + 0x1d], 0x92
mov byte [esp + 0x1e], 0x64
mov byte [esp + 0x1f], 0xf9
mov byte [esp + 0x20], 0xd5
mov byte [esp + 0x21], 0xf1
mov byte [esp + 0x22], 0xf6
mov byte [esp + 0x23], 0xd9
mov byte [esp + 0x24], 9
mov byte [esp + 0x25], 0xc
mov byte [esp + 0x26], 0xff
mov byte [esp + 0x27], 0x34
mov byte [esp + 0x28], 0x8b
mov byte [esp + 0x29], 0xf6
mov byte [esp + 0x2a], 8
mov byte [esp + 0x2b], 0x95
jne 0x1001e975
mov bl, al
push 0xd
or bl, 1
mov byte [0x10194bd8], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10194bdc], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1001e91d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1001e948
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1001e93d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1001e93d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10194bdc]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x1001e908
mov ecx, dword [0x10194bdc]
push 0x100121e0
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10194bdc]
mov al, 0x7f
mov byte [esp + 0x3a], al
mov byte [esp + 0x3b], al
mov al, byte [0x10194be0]
mov dword [esp + 0x10], edx
mov dl, 0x1c
mov cl, 0x89
test al, 1
mov byte [esp + 0x2c], 0xa4
mov byte [esp + 0x2d], 0xc
mov byte [esp + 0x2e], 7
mov byte [esp + 0x2f], 0x6b
mov byte [esp + 0x30], 0x3e
mov byte [esp + 0x31], 0xd3
mov byte [esp + 0x32], dl
mov byte [esp + 0x33], 0xf2
mov byte [esp + 0x34], 0xbb
mov byte [esp + 0x35], 0xea
mov byte [esp + 0x36], 0xa6
mov byte [esp + 0x37], 0x2a
mov byte [esp + 0x38], 0xeb
mov byte [esp + 0x39], cl
mov byte [esp + 0x3c], 0xe8
mov byte [esp + 0x3d], 0x61
mov byte [esp + 0x3e], 0xa5
mov byte [esp + 0x3f], 0xdc
mov byte [esp + 0x40], 0xd2
mov byte [esp + 0x41], 0x21
mov byte [esp + 0x42], 0x1a
mov byte [esp + 0x43], 0xab
mov byte [esp + 0x44], 0x26
mov byte [esp + 0x48], 0xed
mov byte [esp + 0x49], 0x62
mov byte [esp + 0x4a], 0x6e
mov byte [esp + 0x4b], 0x1f
mov byte [esp + 0x4c], 0x57
mov byte [esp + 0x4d], 0xb2
mov byte [esp + 0x4e], 0x70
mov byte [esp + 0x4f], 0x9b
mov byte [esp + 0x50], 0xc1
mov byte [esp + 0x51], 0x8f
mov byte [esp + 0x52], 0xe5
mov byte [esp + 0x53], 0x58
mov byte [esp + 0x54], 0x82
mov byte [esp + 0x55], 0xfd
mov byte [esp + 0x56], 0x16
mov byte [esp + 0x57], dl
mov byte [esp + 0x58], cl
mov byte [esp + 0x59], 0xd
mov byte [esp + 0x5a], 0xf6
mov byte [esp + 0x5b], 0xb9
mov byte [esp + 0x5c], 0xb1
mov byte [esp + 0x5d], 0x55
mov byte [esp + 0x5e], 0x73
mov byte [esp + 0x5f], 0xc4
mov byte [esp + 0x60], 0x48
jne 0x1001eb0f
mov bl, al
push 0x1a
or bl, 1
mov byte [0x10194be0], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10194be4], eax
xor edi, edi
mov bl, byte [esp + edi + 0x48]
movsx eax, byte [esp + edi + 0x2c]
movsx esi, bl
test esi, esi
jne 0x1001eab7
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1001eae2
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1001ead7
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1001ead7
mov al, byte [esp + edi + 0x2c]
xor bl, al
mov eax, dword [0x10194be4]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x19
jb 0x1001eaa2
mov ecx, dword [0x10194be4]
push 0x100121f0
mov byte [ecx + 0x19], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10194be4]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x68]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x54
ret