Function at 0x100f3170
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, 0x93
push ebx
mov byte [esp + 8], al
mov byte [esp + 0x20], al
mov al, byte [0x101955c0]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x15], 0x88
mov byte [esp + 0x16], 0x35
mov byte [esp + 0x17], 0xc7
mov byte [esp + 0x18], 0xab
mov byte [esp + 0x19], 0x1d
mov byte [esp + 0x1a], 0x77
mov byte [esp + 0x1b], 0x16
mov byte [esp + 0x1c], 0xbd
mov byte [esp + 0x1d], 0x5e
mov byte [esp + 0x1e], 0x14
mov byte [esp + 0x1f], 0xd9
mov byte [esp + 0x24], 0xf2
mov byte [esp + 0x25], 0xec
mov byte [esp + 0x26], 0x43
mov byte [esp + 0x27], 0xa6
mov byte [esp + 0x28], 0xdb
mov byte [esp + 0x29], 0x74
mov byte [esp + 0x2a], 0x44
mov byte [esp + 0x2b], 0x24
mov byte [esp + 0x2d], 0x3a
mov byte [esp + 0x2e], 0x78
mov byte [esp + 0x2f], 0xb5
jne 0x100f3285
mov bl, al
push 0xd
or bl, 1
mov byte [0x101955c0], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101955c4], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100f322d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100f3258
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100f324d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100f324d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101955c4]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100f3218
mov ecx, dword [0x101955c4]
push 0x100f3400
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x101955c4]
mov al, 0xa7
mov byte [esp + 0x2a], al
mov byte [esp + 0x1d], al
mov al, byte [0x101955c8]
mov dword [esp + 0x10], edx
test al, 1
mov byte [esp + 0x24], 0x59
mov byte [esp + 0x25], 6
mov byte [esp + 0x26], 0x2a
mov byte [esp + 0x27], 0x71
mov byte [esp + 0x28], 9
mov byte [esp + 0x29], 0x33
mov byte [esp + 0x2b], 0x78
mov byte [esp + 0x2c], 0x2d
mov byte [esp + 0x2d], 0xd2
mov byte [esp + 0x2e], 0x5e
mov byte [esp + 0x2f], 0x90
mov byte [esp + 0x30], 0x56
mov byte [esp + 0x31], 0x12
mov byte [esp + 0x14], 0xb
mov byte [esp + 0x15], 0x63
mov byte [esp + 0x16], 0x4d
mov byte [esp + 0x17], 0x22
mov byte [esp + 0x18], 0x6c
mov byte [esp + 0x19], 0x47
mov byte [esp + 0x1a], 0xf1
mov byte [esp + 0x1b], 0x19
mov byte [esp + 0x1c], 0x41
mov byte [esp + 0x1e], 0x3b
mov byte [esp + 0x1f], 0xd5
mov byte [esp + 0x20], 0x2e
mov byte [esp + 0x21], 0x45
jne 0x100f33b1
mov bl, al
push 0xf
or bl, 1
mov byte [0x101955c8], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101955cc], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x100f3359
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100f3384
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100f3379
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100f3379
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x101955cc]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xe
jb 0x100f3344
mov ecx, dword [0x101955cc]
push 0x100f3410
mov byte [ecx + 0xe], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101955cc]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x48]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret