Function at 0x10063ee0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c
mov al, byte [0x101977e4]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0xed
mov byte [esp + 0x15], 0xcb
mov byte [esp + 0x16], 0x7a
mov byte [esp + 0x17], 0x16
mov byte [esp + 0x18], 0xd5
mov byte [esp + 0x19], 0xbf
mov byte [esp + 0x1a], 0x53
mov byte [esp + 0x1b], 0x6c
mov byte [esp + 0x1c], 0xc8
mov byte [esp + 0x1d], 0x52
mov byte [esp + 0x1e], 0x28
mov byte [esp + 0x1f], 0x90
mov byte [esp + 0x28], 0x86
mov byte [esp + 0x29], 0xae
mov byte [esp + 0x2a], 8
mov byte [esp + 0x2b], 0x78
mov byte [esp + 0x2c], 0xb0
mov byte [esp + 0x2d], 0xd3
mov byte [esp + 0x2e], 0x60
mov byte [esp + 0x2f], 0x5e
mov byte [esp + 0x30], 0xe6
mov byte [esp + 0x31], 0x36
mov byte [esp + 0x32], 0x44
mov byte [esp + 0x33], 0xfc
jne 0x10063ff5
mov bl, al
push 0xd
or bl, 1
mov byte [0x101977e4], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101977e8], eax
xor edi, edi
mov bl, byte [esp + edi + 0x28]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10063f9d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10063fc8
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10063fbd
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10063fbd
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101977e8]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10063f88
mov ecx, dword [0x101977e8]
push 0x10064180
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x101977e8]
mov al, 0xac
mov byte [esp + 0x38], al
mov byte [esp + 0x1a], al
mov al, 0x3a
mov dword [esp + 0x10], edx
mov byte [esp + 0x22], al
mov byte [esp + 0x26], al
mov al, byte [0x101977ec]
mov dl, 0xc9
mov cl, 0x58
mov byte [esp + 0x28], 0xc0
test al, 1
mov byte [esp + 0x29], 0x39
mov byte [esp + 0x2a], 0xdb
mov byte [esp + 0x2b], 0x8c
mov byte [esp + 0x2c], 0xc4
mov byte [esp + 0x2d], 0x6a
mov byte [esp + 0x2e], 0xde
mov byte [esp + 0x2f], 0x96
mov byte [esp + 0x30], 0x6d
mov byte [esp + 0x31], dl
mov byte [esp + 0x32], 0x7c
mov byte [esp + 0x33], 0x53
mov byte [esp + 0x34], 0x42
mov byte [esp + 0x35], 0xe1
mov byte [esp + 0x36], cl
mov byte [esp + 0x37], 0xd5
mov byte [esp + 0x39], 0x56
mov byte [esp + 0x3a], 0x4e
mov byte [esp + 0x14], 0x97
mov byte [esp + 0x15], cl
mov byte [esp + 0x16], 0xb2
mov byte [esp + 0x17], 0xf8
mov byte [esp + 0x18], 0x82
mov byte [esp + 0x19], 5
mov byte [esp + 0x1b], 0xc5
mov byte [esp + 0x1c], 4
mov byte [esp + 0x1d], 0xa7
mov byte [esp + 0x1e], 0x1b
mov byte [esp + 0x1f], 0x3f
mov byte [esp + 0x20], 0x27
mov byte [esp + 0x21], 0xae
mov byte [esp + 0x23], 0xbf
mov byte [esp + 0x24], dl
mov byte [esp + 0x25], 0x35
jne 0x10064153
mov bl, al
push 0x14
or bl, 1
mov byte [0x101977ec], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101977f0], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x28]
movsx esi, bl
test esi, esi
jne 0x100640fb
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10064126
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1006411b
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1006411b
mov al, byte [esp + edi + 0x28]
xor bl, al
mov eax, dword [0x101977f0]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x13
jb 0x100640e6
mov ecx, dword [0x101977f0]
push 0x10064190
mov byte [ecx + 0x13], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101977f0]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret