Function at 0x1004fa30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c
mov al, byte [0x10197ae4]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0xd2
mov byte [esp + 0x15], 0x4a
mov byte [esp + 0x16], 0x7f
mov byte [esp + 0x17], 0xc7
mov byte [esp + 0x18], 0x39
mov byte [esp + 0x19], 0xbc
mov byte [esp + 0x1a], 0xbf
mov byte [esp + 0x1b], 0x3c
mov byte [esp + 0x1c], 0xe
mov byte [esp + 0x1d], 0xd4
mov byte [esp + 0x1e], 0xf3
mov byte [esp + 0x28], 0xa5
mov byte [esp + 0x29], 0x23
mov byte [esp + 0x2a], 0x11
mov byte [esp + 0x2b], 0xae
mov byte [esp + 0x2c], 0x57
mov byte [esp + 0x2d], 0xd9
mov byte [esp + 0x2e], 0xcb
mov byte [esp + 0x2f], 0x12
mov byte [esp + 0x30], 0x6a
mov byte [esp + 0x31], 0xb8
mov byte [esp + 0x32], 0x9f
jne 0x1004fb3b
mov bl, al
push 0xc
or bl, 1
mov byte [0x10197ae4], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197ae8], eax
xor edi, edi
mov bl, byte [esp + edi + 0x28]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1004fae3
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1004fb0e
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1004fb03
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1004fb03
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10197ae8]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xb
jb 0x1004face
mov ecx, dword [0x10197ae8]
push 0x1004fcd0
mov byte [ecx + 0xb], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10197ae8]
mov al, 0xd1
mov byte [esp + 0x2d], al
mov byte [esp + 0x1b], al
mov al, byte [0x10197aec]
mov dword [esp + 0x10], edx
test al, 1
mov byte [esp + 0x28], 0x4a
mov byte [esp + 0x29], 0x9a
mov byte [esp + 0x2a], 0x40
mov byte [esp + 0x2b], 0xde
mov byte [esp + 0x2c], 0xbe
mov byte [esp + 0x2e], 0xdc
mov byte [esp + 0x2f], 0xa5
mov byte [esp + 0x30], 0x71
mov byte [esp + 0x31], 0x3f
mov byte [esp + 0x32], 0x48
mov byte [esp + 0x33], 0xa0
mov byte [esp + 0x34], 0xfa
mov byte [esp + 0x35], 0xe
mov byte [esp + 0x36], 0x77
mov byte [esp + 0x37], 0xca
mov byte [esp + 0x38], 0x6d
mov byte [esp + 0x39], 0x4e
mov byte [esp + 0x3a], 0xc4
mov byte [esp + 0x14], 3
mov byte [esp + 0x15], 0xf4
mov byte [esp + 0x16], 0x34
mov byte [esp + 0x17], 0xbb
mov byte [esp + 0x18], 0xcc
mov byte [esp + 0x19], 0xbf
mov byte [esp + 0x1a], 0xb9
mov byte [esp + 0x1c], 0x32
mov byte [esp + 0x1d], 0x53
mov byte [esp + 0x1e], 0x27
mov byte [esp + 0x1f], 0xd3
mov byte [esp + 0x20], 0x9f
mov byte [esp + 0x21], 0x46
mov byte [esp + 0x22], 0x16
mov byte [esp + 0x23], 0xa4
mov byte [esp + 0x24], 9
mov byte [esp + 0x25], 0x22
mov byte [esp + 0x26], 0xa1
jne 0x1004fc99
mov bl, al
push 0x14
or bl, 1
mov byte [0x10197aec], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197af0], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x28]
movsx esi, bl
test esi, esi
jne 0x1004fc41
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1004fc6c
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1004fc61
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1004fc61
mov al, byte [esp + edi + 0x28]
xor bl, al
mov eax, dword [0x10197af0]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x13
jb 0x1004fc2c
mov ecx, dword [0x10197af0]
push 0x1004fce0
mov byte [ecx + 0x13], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10197af0]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x40]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret