Function at 0x10056d80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c
mov al, 0xdf
push ebx
mov byte [esp + 0x1c], al
mov byte [esp + 0x1d], al
mov al, byte [0x1019795c]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x14], 0xb4
mov byte [esp + 0x15], 0xba
mov byte [esp + 0x16], 3
mov byte [esp + 0x17], 0x5a
mov byte [esp + 0x18], 0xe8
mov byte [esp + 0x19], 0xac
mov byte [esp + 0x1a], 0x94
mov byte [esp + 0x1b], 0x16
mov byte [esp + 0x1c], 0xc2
mov byte [esp + 0x1d], 0x21
mov byte [esp + 0x1e], 0x9b
mov byte [esp + 0x1f], 0xdd
mov byte [esp + 0x2a], 0x71
mov byte [esp + 0x2b], 0x34
mov byte [esp + 0x2c], 0x8d
mov byte [esp + 0x2d], 0xc0
mov byte [esp + 0x2e], 0xa7
mov byte [esp + 0x2f], 0x24
mov byte [esp + 0x30], 0xec
mov byte [esp + 0x31], 0x45
mov byte [esp + 0x32], 0xf7
mov byte [esp + 0x33], 0xb1
jne 0x10056e95
mov bl, al
push 0xd
or bl, 1
mov byte [0x1019795c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197960], eax
xor edi, edi
mov bl, byte [esp + edi + 0x28]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10056e3d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10056e68
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10056e5d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10056e5d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10197960]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10056e28
mov ecx, dword [0x10197960]
push 0x10057020
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10197960]
mov al, 0xf0
mov byte [esp + 0x2f], al
mov byte [esp + 0x21], al
mov al, byte [0x10197964]
mov dword [esp + 0x10], edx
test al, 1
mov byte [esp + 0x28], 0x47
mov byte [esp + 0x29], 0x93
mov byte [esp + 0x2a], 0x68
mov byte [esp + 0x2b], 0xdd
mov byte [esp + 0x2c], 0xe0
mov byte [esp + 0x2d], 0xb5
mov byte [esp + 0x2e], 0x12
mov byte [esp + 0x30], 0x76
mov byte [esp + 0x31], 0xd
mov byte [esp + 0x32], 0x16
mov byte [esp + 0x33], 0x45
mov byte [esp + 0x34], 0xb0
mov byte [esp + 0x35], 0xbf
mov byte [esp + 0x36], 0x3b
mov byte [esp + 0x37], 0xf1
mov byte [esp + 0x38], 0xa7
mov byte [esp + 0x39], 0xd9
mov byte [esp + 0x3a], 0x8e
mov byte [esp + 0x14], 0x10
mov byte [esp + 0x15], 0xf2
mov byte [esp + 0x16], 1
mov byte [esp + 0x17], 0xa9
mov byte [esp + 0x18], 0xa6
mov byte [esp + 0x19], 0xda
mov byte [esp + 0x1a], 0x60
mov byte [esp + 0x1b], 0xa3
mov byte [esp + 0x1c], 0x1f
mov byte [esp + 0x1d], 0x63
mov byte [esp + 0x1e], 0x71
mov byte [esp + 0x1f], 0x29
mov byte [esp + 0x20], 0xd5
mov byte [esp + 0x22], 0x59
mov byte [esp + 0x23], 0x9b
mov byte [esp + 0x24], 0xc2
mov byte [esp + 0x25], 0xba
mov byte [esp + 0x26], 0xfa
jne 0x10056ff3
mov bl, al
push 0x14
or bl, 1
mov byte [0x10197964], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197968], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x28]
movsx esi, bl
test esi, esi
jne 0x10056f9b
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10056fc6
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10056fbb
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10056fbb
mov al, byte [esp + edi + 0x28]
xor bl, al
mov eax, dword [0x10197968]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x13
jb 0x10056f86
mov ecx, dword [0x10197968]
push 0x10057030
mov byte [ecx + 0x13], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10197968]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret