Function at 0x1004fcf0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c
mov al, byte [0x10197ad4]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x9d
mov byte [esp + 0x15], 0x62
mov byte [esp + 0x16], 0xcb
mov byte [esp + 0x17], 0xed
mov byte [esp + 0x18], 0x22
mov byte [esp + 0x19], 0xc2
mov byte [esp + 0x1a], 0x18
mov byte [esp + 0x1b], 0xd6
mov byte [esp + 0x1c], 0xee
mov byte [esp + 0x1d], 0xc4
mov byte [esp + 0x1e], 0x50
mov byte [esp + 0x28], 0xea
mov byte [esp + 0x29], 0xb
mov byte [esp + 0x2a], 0xa5
mov byte [esp + 0x2b], 0x84
mov byte [esp + 0x2c], 0x4c
mov byte [esp + 0x2d], 0xa7
mov byte [esp + 0x2e], 0x6c
mov byte [esp + 0x2f], 0xf8
mov byte [esp + 0x30], 0x8a
mov byte [esp + 0x31], 0xa8
mov byte [esp + 0x32], 0x3c
jne 0x1004fdfb
mov bl, al
push 0xc
or bl, 1
mov byte [0x10197ad4], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197ad8], eax
xor edi, edi
mov bl, byte [esp + edi + 0x28]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1004fda3
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1004fdce
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1004fdc3
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1004fdc3
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10197ad8]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xb
jb 0x1004fd8e
mov ecx, dword [0x10197ad8]
push 0x1004ff90
mov byte [ecx + 0xb], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10197ad8]
mov al, 0x1c
mov byte [esp + 0x38], al
mov byte [esp + 0x19], al
mov al, byte [0x10197adc]
mov cl, 6
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x28], 0x14
mov byte [esp + 0x29], 0xa7
mov byte [esp + 0x2a], 0xd7
mov byte [esp + 0x2b], 0xa4
mov byte [esp + 0x2c], 0xe3
mov byte [esp + 0x2d], 0x72
mov byte [esp + 0x2e], 0x22
mov byte [esp + 0x2f], 0xac
mov byte [esp + 0x30], 0x5a
mov byte [esp + 0x31], 0x83
mov byte [esp + 0x32], 0x21
mov byte [esp + 0x33], 0x75
mov byte [esp + 0x34], 0x23
mov byte [esp + 0x35], 0x4f
mov byte [esp + 0x36], cl
mov byte [esp + 0x37], 0xa2
mov byte [esp + 0x39], 0xbc
mov byte [esp + 0x3a], 0x8c
mov byte [esp + 0x14], 0x5d
mov byte [esp + 0x15], 0xc9
mov byte [esp + 0x16], 0xa3
mov byte [esp + 0x17], 0xc1
mov byte [esp + 0x18], 0x91
mov byte [esp + 0x1a], 0x47
mov byte [esp + 0x1b], 0xd8
mov byte [esp + 0x1c], 0x19
mov byte [esp + 0x1d], 0xef
mov byte [esp + 0x1e], 0x4e
mov byte [esp + 0x1f], cl
mov byte [esp + 0x20], 0x46
mov byte [esp + 0x21], 7
mov byte [esp + 0x22], 0x67
mov byte [esp + 0x23], 0xcc
mov byte [esp + 0x24], 0x78
mov byte [esp + 0x25], 0xd0
mov byte [esp + 0x26], 0xe9
jne 0x1004ff59
mov bl, al
push 0x14
or bl, 1
mov byte [0x10197adc], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197ae0], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x28]
movsx esi, bl
test esi, esi
jne 0x1004ff01
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1004ff2c
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1004ff21
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1004ff21
mov al, byte [esp + edi + 0x28]
xor bl, al
mov eax, dword [0x10197ae0]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x13
jb 0x1004feec
mov ecx, dword [0x10197ae0]
push 0x1004ffa0
mov byte [ecx + 0x13], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10197ae0]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x40]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret