Function at 0x100b8950
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov al, 0xb3
push ebx
mov byte [esp + 0x12], al
mov byte [esp + 0x13], al
mov al, 0xdf
push ebp
mov byte [esp + 0x22], al
mov byte [esp + 0x23], al
mov al, byte [0x10196b10]
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0xf7
mov byte [esp + 0x15], 0x39
mov byte [esp + 0x16], 0xa1
mov byte [esp + 0x17], 0x4f
mov byte [esp + 0x18], 0xcf
mov byte [esp + 0x19], 8
mov byte [esp + 0x1a], 0xfb
mov byte [esp + 0x1b], 0x5a
mov byte [esp + 0x1c], 0x22
mov byte [esp + 0x1d], 0x88
mov byte [esp + 0x20], 0x9c
mov byte [esp + 0x21], 0x5c
mov byte [esp + 0x22], 0xd3
mov byte [esp + 0x23], 0x21
mov byte [esp + 0x24], 0xaa
mov byte [esp + 0x25], 0x64
mov byte [esp + 0x26], 0xc8
mov byte [esp + 0x27], 0x68
mov byte [esp + 0x28], 0xc
mov byte [esp + 0x29], 0xec
jne 0x100b8a65
mov bl, al
push 0xd
or bl, 1
mov byte [0x10196b10], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10196b14], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100b8a0d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100b8a38
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100b8a2d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100b8a2d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10196b14]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100b89f8
mov ecx, dword [0x10196b14]
push 0x100b8ba0
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x10196b18]
mov edx, dword [0x10196b14]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x14], 0xb4
mov byte [esp + 0x15], 0xfa
mov byte [esp + 0x16], 0x60
mov byte [esp + 0x17], 8
mov byte [esp + 0x18], 0xa4
mov byte [esp + 0x19], 0x91
mov byte [esp + 0x1a], 0xca
mov byte [esp + 0x1b], 0x41
mov byte [esp + 0x1c], 0xe8
mov byte [esp + 0x1d], 0xde
mov byte [esp + 0x1e], 0x35
mov byte [esp + 0x1f], 0xeb
mov byte [esp + 0x20], 0xf3
mov byte [esp + 0x21], 0x9f
mov byte [esp + 0x22], 0x14
mov byte [esp + 0x23], 0x44
mov byte [esp + 0x24], 0xc5
mov byte [esp + 0x25], 0xe2
mov byte [esp + 0x26], 0xbe
mov byte [esp + 0x27], 4
mov byte [esp + 0x28], 0x9a
mov byte [esp + 0x29], 0xac
mov byte [esp + 0x2a], 0x5a
mov byte [esp + 0x2b], 0x99
jne 0x100b8b7d
mov bl, al
push 0xd
or bl, 1
mov byte [0x10196b18], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10196b1c], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100b8b25
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100b8b50
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100b8b45
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100b8b45
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10196b1c]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100b8b10
mov ecx, dword [0x10196b1c]
push 0x100b8bb0
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10196b1c]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret