Function at 0x1004f4a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, 0xda
push ebx
mov byte [esp + 0x1c], al
mov byte [esp + 0x21], al
mov al, byte [0x10197b04]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x14], 0x19
mov byte [esp + 0x15], 0xa8
mov byte [esp + 0x16], 0xe
mov byte [esp + 0x17], 0x37
mov byte [esp + 0x18], 0xb4
mov byte [esp + 0x19], 0x51
mov byte [esp + 0x1a], 1
mov byte [esp + 0x1b], 0xc1
mov byte [esp + 0x1c], 0x70
mov byte [esp + 0x1d], 0xb6
mov byte [esp + 0x1e], 0x92
mov byte [esp + 0x24], 0x6e
mov byte [esp + 0x25], 0xc1
mov byte [esp + 0x26], 0x60
mov byte [esp + 0x27], 0x5e
mov byte [esp + 0x29], 0x34
mov byte [esp + 0x2a], 0x75
mov byte [esp + 0x2b], 0xef
mov byte [esp + 0x2c], 0x14
mov byte [esp + 0x2e], 0xfe
jne 0x1004f5ab
mov bl, al
push 0xc
or bl, 1
mov byte [0x10197b04], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197b08], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1004f553
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1004f57e
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1004f573
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1004f573
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10197b08]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xb
jb 0x1004f53e
mov ecx, dword [0x10197b08]
push 0x1004f730
mov byte [ecx + 0xb], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10197b08]
mov al, 0xac
mov byte [esp + 0x30], al
mov byte [esp + 0x1d], al
mov al, byte [0x10197b0c]
mov dword [esp + 0x10], edx
mov dl, 0xdc
mov cl, 0xc9
test al, 1
mov byte [esp + 0x24], 0xb
mov byte [esp + 0x25], 0x3f
mov byte [esp + 0x26], dl
mov byte [esp + 0x27], 0x2c
mov byte [esp + 0x28], 0xab
mov byte [esp + 0x29], 0x8f
mov byte [esp + 0x2a], 0x9f
mov byte [esp + 0x2b], 0x81
mov byte [esp + 0x2c], 0x79
mov byte [esp + 0x2d], cl
mov byte [esp + 0x2e], 0x3b
mov byte [esp + 0x2f], 0xec
mov byte [esp + 0x31], 0xd0
mov byte [esp + 0x32], 0xb5
mov byte [esp + 0x33], dl
mov byte [esp + 0x14], 0x43
mov byte [esp + 0x15], 0x4b
mov byte [esp + 0x16], 0xa8
mov byte [esp + 0x17], 0x5c
mov byte [esp + 0x18], 0xf8
mov byte [esp + 0x19], 0xea
mov byte [esp + 0x1a], 0xf1
mov byte [esp + 0x1b], 0xe5
mov byte [esp + 0x1c], 0x2b
mov byte [esp + 0x1e], 0x4a
mov byte [esp + 0x1f], 0x99
mov byte [esp + 0x20], cl
mov byte [esp + 0x21], 0xa3
mov byte [esp + 0x22], 0xc1
mov byte [esp + 0x23], 0x8b
jne 0x1004f6eb
mov bl, al
push 0x11
or bl, 1
mov byte [0x10197b0c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197b10], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x1004f693
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1004f6be
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1004f6b3
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1004f6b3
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x10197b10]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x10
jb 0x1004f67e
mov ecx, dword [0x10197b10]
push 0x1004f740
mov byte [ecx + 0x10], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10197b10]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
push edx
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret