Function at 0x1005e8a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c
mov al, byte [0x10197894]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0xaf
mov byte [esp + 0x15], 0x23
mov byte [esp + 0x16], 0x9a
mov byte [esp + 0x17], 0x65
mov byte [esp + 0x18], 0xda
mov byte [esp + 0x19], 0xaa
mov byte [esp + 0x1a], 0x98
mov byte [esp + 0x1b], 0x55
mov byte [esp + 0x1c], 0x2d
mov byte [esp + 0x1d], 0x40
mov byte [esp + 0x1e], 0xb0
mov byte [esp + 0x1f], 4
mov byte [esp + 0x28], 0xc4
mov byte [esp + 0x29], 0x46
mov byte [esp + 0x2a], 0xe8
mov byte [esp + 0x2b], 0xb
mov byte [esp + 0x2c], 0xbf
mov byte [esp + 0x2d], 0xc6
mov byte [esp + 0x2e], 0xab
mov byte [esp + 0x2f], 0x67
mov byte [esp + 0x30], 3
mov byte [esp + 0x31], 0x24
mov byte [esp + 0x32], 0xdc
mov byte [esp + 0x33], 0x68
jne 0x1005e9b5
mov bl, al
push 0xd
or bl, 1
mov byte [0x10197894], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197898], eax
xor edi, edi
mov bl, byte [esp + edi + 0x28]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1005e95d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1005e988
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1005e97d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1005e97d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10197898]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x1005e948
mov ecx, dword [0x10197898]
push 0x1005eb40
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10197898]
mov al, 0xa7
mov byte [esp + 0x34], al
mov byte [esp + 0x26], al
mov al, byte [0x1019789c]
mov cl, 0xc2
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x28], 0x82
mov byte [esp + 0x29], 0xdc
mov byte [esp + 0x2a], 0x25
mov byte [esp + 0x2b], 0x79
mov byte [esp + 0x2c], 0xcd
mov byte [esp + 0x2d], 0xe3
mov byte [esp + 0x2e], 0x21
mov byte [esp + 0x2f], 0xfa
mov byte [esp + 0x30], 0x42
mov byte [esp + 0x31], 0
mov byte [esp + 0x32], 0xb7
mov byte [esp + 0x33], cl
mov byte [esp + 0x35], 0x49
mov byte [esp + 0x36], 0x78
mov byte [esp + 0x37], 0x26
mov byte [esp + 0x38], 0x55
mov byte [esp + 0x39], 0xdc
mov byte [esp + 0x3a], cl
mov byte [esp + 0x14], 0xcb
mov byte [esp + 0x15], 0xb2
mov byte [esp + 0x16], 0x51
mov byte [esp + 0x17], 0x1c
mov byte [esp + 0x18], 0xbf
mov byte [esp + 0x19], 0x8f
mov byte [esp + 0x1a], 0x4e
mov byte [esp + 0x1b], 0x99
mov byte [esp + 0x1c], 0x29
mov byte [esp + 0x1d], 0x65
mov byte [esp + 0x1e], 0xd3
mov byte [esp + 0x1f], 0x87
mov byte [esp + 0x20], 0xdf
mov byte [esp + 0x21], 0x2a
mov byte [esp + 0x22], 0x10
mov byte [esp + 0x23], 0x47
mov byte [esp + 0x24], 0x3b
mov byte [esp + 0x25], 0xbb
jne 0x1005eb13
mov bl, al
push 0x14
or bl, 1
mov byte [0x1019789c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101978a0], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x28]
movsx esi, bl
test esi, esi
jne 0x1005eabb
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1005eae6
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1005eadb
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1005eadb
mov al, byte [esp + edi + 0x28]
xor bl, al
mov eax, dword [0x101978a0]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x13
jb 0x1005eaa6
mov ecx, dword [0x101978a0]
push 0x1005eb50
mov byte [ecx + 0x13], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101978a0]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret