Function at 0x10009b30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov al, byte [0x10194cf0]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x3b
mov byte [esp + 0x15], 0xcc
mov byte [esp + 0x16], 0x20
mov byte [esp + 0x17], 0xbd
mov byte [esp + 0x18], 0x82
mov byte [esp + 0x19], 0x74
mov byte [esp + 0x1a], 0x15
mov byte [esp + 0x1b], 0x1e
mov byte [esp + 0x1c], 0x67
mov byte [esp + 0x1d], 0xb5
mov byte [esp + 0x1e], 8
mov byte [esp + 0x1f], 0xa3
mov byte [esp + 0x20], 0x50
mov byte [esp + 0x21], 0xa9
mov byte [esp + 0x22], 0x52
mov byte [esp + 0x23], 0xd3
mov byte [esp + 0x24], 0xe7
mov byte [esp + 0x25], 0x18
mov byte [esp + 0x26], 0x26
mov byte [esp + 0x27], 0x2c
mov byte [esp + 0x28], 0x49
mov byte [esp + 0x29], 0xd1
mov byte [esp + 0x2a], 0x64
mov byte [esp + 0x2b], 0xcf
jne 0x10009c45
mov bl, al
push 0xd
or bl, 1
mov byte [0x10194cf0], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10194cf4], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10009bed
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10009c18
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10009c0d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10009c0d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10194cf4]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10009bd8
mov ecx, dword [0x10194cf4]
push 0x10009d80
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x10194cf8]
mov edx, dword [0x10194cf4]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x14], 0x6a
mov byte [esp + 0x15], 0xe8
mov byte [esp + 0x16], 0x23
mov byte [esp + 0x17], 0xa8
mov byte [esp + 0x18], 2
mov byte [esp + 0x19], 0x99
mov byte [esp + 0x1a], 0xcc
mov byte [esp + 0x1b], 0xa5
mov byte [esp + 0x1c], 0x43
mov byte [esp + 0x1d], 0xd3
mov byte [esp + 0x1e], 0x81
mov byte [esp + 0x1f], 0x48
mov byte [esp + 0x20], 0x2d
mov byte [esp + 0x21], 0x8d
mov byte [esp + 0x22], 0x57
mov byte [esp + 0x23], 0xe4
mov byte [esp + 0x24], 0x63
mov byte [esp + 0x25], 0xea
mov byte [esp + 0x26], 0xb8
mov byte [esp + 0x27], 0xe0
mov byte [esp + 0x28], 0x31
mov byte [esp + 0x29], 0xa1
mov byte [esp + 0x2a], 0xee
mov byte [esp + 0x2b], 0x3a
jne 0x10009d5d
mov bl, al
push 0xd
or bl, 1
mov byte [0x10194cf8], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10194cfc], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10009d05
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10009d30
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10009d25
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10009d25
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10194cfc]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10009cf0
mov ecx, dword [0x10194cfc]
push 0x10009d90
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10194cfc]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret