Function at 0x100ef6f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov byte [0x1018cc5e], 0x1c
jmp 0x100f19e0
sub esp, 0x1c
mov al, byte [0x10195650]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x3a
mov byte [esp + 0x15], 0xb7
mov byte [esp + 0x16], 0x3f
mov byte [esp + 0x17], 0xf1
mov byte [esp + 0x18], 0xe3
mov byte [esp + 0x19], 0xcd
mov byte [esp + 0x1a], 0x79
mov byte [esp + 0x1b], 0x41
mov byte [esp + 0x1c], 0xfd
mov byte [esp + 0x1d], 0xc4
mov byte [esp + 0x1e], 0x24
mov byte [esp + 0x1f], 7
mov byte [esp + 0x20], 0x51
mov byte [esp + 0x21], 0xd2
mov byte [esp + 0x22], 0x4d
mov byte [esp + 0x23], 0x9f
mov byte [esp + 0x24], 0x86
mov byte [esp + 0x25], 0xa1
mov byte [esp + 0x26], 0x4a
mov byte [esp + 0x27], 0x73
mov byte [esp + 0x28], 0xd3
mov byte [esp + 0x29], 0xa0
mov byte [esp + 0x2a], 0x48
mov byte [esp + 0x2b], 0x6b
jne 0x100f1af5
mov bl, al
push 0xd
or bl, 1
mov byte [0x10195650], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10195654], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100f1a9d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100f1ac8
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100f1abd
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100f1abd
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10195654]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100f1a88
mov ecx, dword [0x10195654]
push 0x100f1c30
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x10195658]
mov edx, dword [0x10195654]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x14], 0xd9
mov byte [esp + 0x15], 0xee
mov byte [esp + 0x16], 0xc4
mov byte [esp + 0x17], 0x83
mov byte [esp + 0x18], 0xfb
mov byte [esp + 0x19], 0x6c
mov byte [esp + 0x1a], 0xc7
mov byte [esp + 0x1b], 0x7b
mov byte [esp + 0x1c], 0x74
mov byte [esp + 0x1d], 0x8a
mov byte [esp + 0x1e], 0x4e
mov byte [esp + 0x1f], 0x60
mov byte [esp + 0x20], 0x9e
mov byte [esp + 0x21], 0x8b
mov byte [esp + 0x22], 0xb0
mov byte [esp + 0x23], 0xcf
mov byte [esp + 0x24], 0x9a
mov byte [esp + 0x25], 0x1f
mov byte [esp + 0x26], 0xb3
mov byte [esp + 0x27], 0x3e
mov byte [esp + 0x28], 6
mov byte [esp + 0x29], 0xf8
mov byte [esp + 0x2a], 0x21
mov byte [esp + 0x2b], 0x12
jne 0x100f1c0d
mov bl, al
push 0xd
or bl, 1
mov byte [0x10195658], bl
call fcn.1013c2df
add esp, 4
mov dword [0x1019565c], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100f1bb5
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100f1be0
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100f1bd5
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100f1bd5
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x1019565c]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100f1ba0
mov ecx, dword [0x1019565c]
push 0x100f1c40
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x1019565c]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret