Function at 0x10029540
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, dword [esp + 8]
sub eax, 0
je 0x1002958b
sub eax, 2
je 0x10029570
dec eax
je 0x10029555
push 5
jmp 0x1002958d
mov ecx, dword [esp + 4]
push 0x43
push 0
push 0
push 0
push 0
push 0
push ecx
call fcn.10029830
add esp, 0x1c
jmp 0x10029598
mov edx, dword [esp + 4]
push 0x53
push 0
push 0
push 0
push 0
push 1
push edx
call fcn.100295b0
add esp, 0x1c
jmp 0x10029598
push 0
mov eax, dword [esp + 8]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
test eax, eax
jne 0x100295a1
jmp 0x10029ab0
xor eax, eax
ret
sub esp, 0x1c
mov al, 0x46
push ebx
mov byte [esp + 0x15], al
mov byte [esp + 0x19], al
mov al, byte [0x10198388]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x14], 0xb2
mov byte [esp + 0x15], 0x23
mov byte [esp + 0x16], 0x77
mov byte [esp + 0x17], 0xfe
mov byte [esp + 0x18], 0x48
mov byte [esp + 0x19], 0x2a
mov byte [esp + 0x1a], 0x74
mov byte [esp + 0x1b], 0xac
mov byte [esp + 0x1c], 0xa9
mov byte [esp + 0x1d], 0xb5
mov byte [esp + 0x1e], 0xa8
mov byte [esp + 0x1f], 0x53
mov byte [esp + 0x20], 0xd9
mov byte [esp + 0x22], 5
mov byte [esp + 0x23], 0x90
mov byte [esp + 0x24], 0x2d
mov byte [esp + 0x26], 0x47
mov byte [esp + 0x27], 0x9e
mov byte [esp + 0x28], 0x87
mov byte [esp + 0x29], 0xd1
mov byte [esp + 0x2a], 0xc4
mov byte [esp + 0x2b], 0x3f
jne 0x10029bc5
mov bl, al
push 0xd
or bl, 1
mov byte [0x10198388], bl
call fcn.1013c2df
add esp, 4
mov dword [0x1019838c], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10029b6d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10029b98
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10029b8d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10029b8d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x1019838c]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10029b58
mov ecx, dword [0x1019838c]
push 0x10029d00
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x1019838c]
mov al, 0x6c
mov byte [esp + 0x16], al
mov byte [esp + 0x19], al
mov al, byte [0x10198390]
mov dword [esp + 0x10], edx
test al, 1
mov byte [esp + 0x14], 0x41
mov byte [esp + 0x15], 0xa1
mov byte [esp + 0x17], 0xee
mov byte [esp + 0x18], 0xd7
mov byte [esp + 0x1a], 0x3a
mov byte [esp + 0x1b], 0x3d
mov byte [esp + 0x1c], 0xdf
mov byte [esp + 0x1d], 0x81
mov byte [esp + 0x1e], 0xe7
mov byte [esp + 0x1f], 1
mov byte [esp + 0x20], 6
mov byte [esp + 0x21], 0xc4
mov byte [esp + 0x22], 0x18
mov byte [esp + 0x23], 0xa2
mov byte [esp + 0x24], 0xb6
mov byte [esp + 0x25], 0x1f
mov byte [esp + 0x26], 0x4e
mov byte [esp + 0x27], 0x78
mov byte [esp + 0x28], 0xad
mov byte [esp + 0x29], 0xf3
mov byte [esp + 0x2a], 0x88
mov byte [esp + 0x2b], 0x73
jne 0x10029cdd
mov bl, al
push 0xd
or bl, 1
mov byte [0x10198390], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10198394], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10029c85
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10029cb0
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10029ca5
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10029ca5
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10198394]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10029c70
mov ecx, dword [0x10198394]
push 0x10029d10
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10198394]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret