Function at 0x10009600
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov al, 0x76
push ebx
mov byte [esp + 0xa], al
mov byte [esp + 0xc], al
mov al, 0x13
push ebp
mov byte [esp + 0x1c], al
mov byte [esp + 0x20], al
mov al, byte [0x10194d10]
mov dl, 0xd9
mov cl, 0xa5
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0xb2
mov byte [esp + 0x15], 0xc0
mov byte [esp + 0x17], 0x92
mov byte [esp + 0x19], 0xee
mov byte [esp + 0x1a], 0x96
mov byte [esp + 0x1b], 0xd0
mov byte [esp + 0x1c], 0x3d
mov byte [esp + 0x1d], 0xbd
mov byte [esp + 0x1e], 0x9b
mov byte [esp + 0x1f], 0x1d
mov byte [esp + 0x20], dl
mov byte [esp + 0x21], cl
mov byte [esp + 0x22], 4
mov byte [esp + 0x23], 0xfc
mov byte [esp + 0x25], 0x82
mov byte [esp + 0x26], cl
mov byte [esp + 0x27], 0xe2
mov byte [esp + 0x29], dl
mov byte [esp + 0x2a], 0xf7
mov byte [esp + 0x2b], 0x71
jne 0x10009715
mov bl, al
push 0xd
or bl, 1
mov byte [0x10194d10], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10194d14], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100096bd
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100096e8
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100096dd
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100096dd
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10194d14]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100096a8
mov ecx, dword [0x10194d14]
push 0x10009850
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10194d14]
mov al, 0x90
mov byte [esp + 0x15], al
mov byte [esp + 0x2a], al
mov al, byte [0x10194d18]
mov dword [esp + 0x10], edx
test al, 1
mov byte [esp + 0x14], 0xd6
mov byte [esp + 0x16], 0xc1
mov byte [esp + 0x17], 0xbb
mov byte [esp + 0x18], 0xf8
mov byte [esp + 0x19], 0x7b
mov byte [esp + 0x1a], 0x57
mov byte [esp + 0x1b], 0xe
mov byte [esp + 0x1c], 0x5d
mov byte [esp + 0x1d], 0x4e
mov byte [esp + 0x1e], 0xff
mov byte [esp + 0x1f], 0x48
mov byte [esp + 0x20], 0x91
mov byte [esp + 0x21], 0xf5
mov byte [esp + 0x22], 0xb5
mov byte [esp + 0x23], 0xf7
mov byte [esp + 0x24], 0x99
mov byte [esp + 0x25], 8
mov byte [esp + 0x26], 0x23
mov byte [esp + 0x27], 0x4b
mov byte [esp + 0x28], 0x2f
mov byte [esp + 0x29], 0x3c
mov byte [esp + 0x2b], 0x3a
jne 0x1000982d
mov bl, al
push 0xd
or bl, 1
mov byte [0x10194d18], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10194d1c], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100097d5
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10009800
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100097f5
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100097f5
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10194d1c]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100097c0
mov ecx, dword [0x10194d1c]
push 0x10009860
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10194d1c]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret