Function at 0x10034ea0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c
mov al, byte [0x101981e4]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x94
mov byte [esp + 0x15], 0xf3
mov byte [esp + 0x16], 0xdf
mov byte [esp + 0x17], 0xf1
mov byte [esp + 0x18], 0x25
mov byte [esp + 0x19], 0x83
mov byte [esp + 0x1a], 0xdc
mov byte [esp + 0x1b], 0x8a
mov byte [esp + 0x1c], 0xaf
mov byte [esp + 0x1d], 0x72
mov byte [esp + 0x1e], 0xf4
mov byte [esp + 0x1f], 0xdf
mov byte [esp + 0x28], 0xf5
mov byte [esp + 0x29], 0x97
mov byte [esp + 0x2a], 0xa9
mov byte [esp + 0x2b], 0x90
mov byte [esp + 0x2c], 0x55
mov byte [esp + 0x2d], 0xea
mov byte [esp + 0x2e], 0xef
mov byte [esp + 0x2f], 0xb8
mov byte [esp + 0x30], 0x81
mov byte [esp + 0x31], 0x16
mov byte [esp + 0x32], 0x98
mov byte [esp + 0x33], 0xb3
jne 0x10034fb5
mov bl, al
push 0xd
or bl, 1
mov byte [0x101981e4], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101981e8], eax
xor edi, edi
mov bl, byte [esp + edi + 0x28]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10034f5d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10034f88
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10034f7d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10034f7d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101981e8]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10034f48
mov ecx, dword [0x101981e8]
push 0x10035140
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x101981e8]
mov al, 0xab
mov byte [esp + 0x15], al
mov byte [esp + 0x26], al
mov al, byte [0x101981ec]
mov cl, 0x6b
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x28], cl
mov byte [esp + 0x29], 0xd9
mov byte [esp + 0x2a], 0xc2
mov byte [esp + 0x2b], 0xe1
mov byte [esp + 0x2c], 0xa0
mov byte [esp + 0x2d], 0x23
mov byte [esp + 0x2e], 0x24
mov byte [esp + 0x2f], 0xc6
mov byte [esp + 0x30], 0xb9
mov byte [esp + 0x31], 0xa
mov byte [esp + 0x32], 0xe4
mov byte [esp + 0x33], 0x9c
mov byte [esp + 0x34], 1
mov byte [esp + 0x35], 0xf7
mov byte [esp + 0x36], 0x63
mov byte [esp + 0x37], 0xf5
mov byte [esp + 0x38], 0x5b
mov byte [esp + 0x39], 0xb2
mov byte [esp + 0x3a], 0xdf
mov byte [esp + 0x14], 0x28
mov byte [esp + 0x16], 0xbb
mov byte [esp + 0x17], 0x91
mov byte [esp + 0x18], 0xd4
mov byte [esp + 0x19], 0x71
mov byte [esp + 0x1a], 0x41
mov byte [esp + 0x1b], 0xaa
mov byte [esp + 0x1c], 0xdc
mov byte [esp + 0x1d], cl
mov byte [esp + 0x1e], 0x97
mov byte [esp + 0x1f], 0xf9
mov byte [esp + 0x20], 0x42
mov byte [esp + 0x21], 0x98
mov byte [esp + 0x22], 0xd
mov byte [esp + 0x23], 0x81
mov byte [esp + 0x24], 0x3e
mov byte [esp + 0x25], 0xca
jne 0x10035113
mov bl, al
push 0x14
or bl, 1
mov byte [0x101981ec], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101981f0], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x28]
movsx esi, bl
test esi, esi
jne 0x100350bb
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100350e6
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100350db
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100350db
mov al, byte [esp + edi + 0x28]
xor bl, al
mov eax, dword [0x101981f0]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x13
jb 0x100350a6
mov ecx, dword [0x101981f0]
push 0x10035150
mov byte [ecx + 0x13], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101981f0]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret