Function at 0x100f2eb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, byte [0x101955d0]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x96
mov byte [esp + 0x15], 0x72
mov byte [esp + 0x16], 0x2f
mov byte [esp + 0x17], 0x6d
mov byte [esp + 0x18], 0x42
mov byte [esp + 0x19], 0
mov byte [esp + 0x1a], 0xcc
mov byte [esp + 0x1b], 0x93
mov byte [esp + 0x1c], 0x8b
mov byte [esp + 0x1d], 0xb
mov byte [esp + 0x1e], 0x6f
mov byte [esp + 0x1f], 0x39
mov byte [esp + 0x24], 0xf7
mov byte [esp + 0x25], 0x16
mov byte [esp + 0x26], 0x59
mov byte [esp + 0x27], 0xc
mov byte [esp + 0x28], 0x32
mov byte [esp + 0x29], 0x69
mov byte [esp + 0x2a], 0xff
mov byte [esp + 0x2b], 0xa1
mov byte [esp + 0x2c], 0xa5
mov byte [esp + 0x2d], 0x6f
mov byte [esp + 0x2e], 3
mov byte [esp + 0x2f], 0x55
jne 0x100f2fc5
mov bl, al
push 0xd
or bl, 1
mov byte [0x101955d0], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101955d4], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100f2f6d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100f2f98
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100f2f8d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100f2f8d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101955d4]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100f2f58
mov ecx, dword [0x101955d4]
push 0x100f3150
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x101955d4]
mov al, 0x33
mov byte [esp + 0x1b], al
mov byte [esp + 0x21], al
mov al, byte [0x101955d8]
mov dword [esp + 0x10], edx
test al, 1
mov byte [esp + 0x24], 0x70
mov byte [esp + 0x25], 0x6f
mov byte [esp + 0x26], 0x35
mov byte [esp + 0x27], 0x16
mov byte [esp + 0x28], 0x6c
mov byte [esp + 0x29], 0xeb
mov byte [esp + 0x2a], 0x5d
mov byte [esp + 0x2b], 0x4a
mov byte [esp + 0x2c], 0xb0
mov byte [esp + 0x2d], 0x51
mov byte [esp + 0x2e], 0xd1
mov byte [esp + 0x2f], 0xaf
mov byte [esp + 0x30], 0x29
mov byte [esp + 0x31], 0x76
mov byte [esp + 0x32], 0xce
mov byte [esp + 0x33], 0xcb
mov byte [esp + 0x14], 0x22
mov byte [esp + 0x15], 0xa
mov byte [esp + 0x16], 0x52
mov byte [esp + 0x17], 0x47
mov byte [esp + 0x18], 0x19
mov byte [esp + 0x19], 0x8e
mov byte [esp + 0x1a], 0x2f
mov byte [esp + 0x1c], 0xe6
mov byte [esp + 0x1d], 0x30
mov byte [esp + 0x1e], 0xbd
mov byte [esp + 0x1f], 0xda
mov byte [esp + 0x20], 0x4c
mov byte [esp + 0x22], 0xb6
mov byte [esp + 0x23], 0x9c
jne 0x100f3105
mov bl, al
push 0x11
or bl, 1
mov byte [0x101955d8], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101955dc], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x100f30ad
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100f30d8
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100f30cd
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100f30cd
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x101955dc]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x10
jb 0x100f3098
mov ecx, dword [0x101955dc]
push 0x100f3160
mov byte [ecx + 0x10], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101955dc]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x48]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret