Function at 0x1005eb80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x34
mov al, 0x8d
push ebx
mov byte [esp + 9], al
mov byte [esp + 0xc], al
mov al, 0x86
push ebp
mov byte [esp + 0x15], al
mov byte [esp + 0x17], al
mov al, 0xe8
push esi
mov byte [esp + 0x29], al
mov byte [esp + 0x2c], al
mov al, byte [0x10197884]
push edi
test al, 1
mov byte [esp + 0x14], 0xc8
mov byte [esp + 0x16], 0x8c
mov byte [esp + 0x17], 0x66
mov byte [esp + 0x19], 0x2c
mov byte [esp + 0x1a], 0xc4
mov byte [esp + 0x1b], 0x7e
mov byte [esp + 0x1c], 0x1b
mov byte [esp + 0x1e], 0x4f
mov byte [esp + 0x2c], 0xa3
mov byte [esp + 0x2e], 0xfe
mov byte [esp + 0x2f], 8
mov byte [esp + 0x31], 0x40
mov byte [esp + 0x32], 0xf7
mov byte [esp + 0x33], 0x4c
mov byte [esp + 0x34], 0x35
mov byte [esp + 0x35], 0xe2
mov byte [esp + 0x36], 0x23
mov byte [esp + 0x37], 0xea
jne 0x1005ec95
mov bl, al
push 0xd
or bl, 1
mov byte [0x10197884], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197888], eax
xor edi, edi
mov bl, byte [esp + edi + 0x2c]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1005ec3d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1005ec68
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1005ec5d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1005ec5d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10197888]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x1005ec28
mov ecx, dword [0x10197888]
push 0x1005ee40
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov al, 0xb1
mov edx, dword [0x10197888]
mov byte [esp + 0x2e], al
mov byte [esp + 0x33], al
mov al, 0xd4
mov dword [esp + 0x10], edx
mov byte [esp + 0x14], al
mov byte [esp + 0x20], al
mov al, 0x38
mov byte [esp + 0x2c], 0x9d
mov byte [esp + 0x21], al
mov byte [esp + 0x22], al
mov al, byte [0x1019788c]
mov byte [esp + 0x2d], 0xfb
test al, 1
mov byte [esp + 0x2f], 0x94
mov byte [esp + 0x30], 0x27
mov byte [esp + 0x31], 0x80
mov byte [esp + 0x32], 0x58
mov byte [esp + 0x34], 0xf
mov byte [esp + 0x35], 0xc1
mov byte [esp + 0x36], 0x3d
mov byte [esp + 0x37], 0x5d
mov byte [esp + 0x38], 0xac
mov byte [esp + 0x39], 0x5b
mov byte [esp + 0x3a], 0x50
mov byte [esp + 0x3b], 0
mov byte [esp + 0x3c], 4
mov byte [esp + 0x3d], 0x4b
mov byte [esp + 0x3e], 7
mov byte [esp + 0x3f], 0x88
mov byte [esp + 0x40], 0x52
mov byte [esp + 0x41], 0x66
mov byte [esp + 0x15], 0x95
mov byte [esp + 0x16], 0xc5
mov byte [esp + 0x17], 0xf1
mov byte [esp + 0x18], 0x55
mov byte [esp + 0x19], 0xec
mov byte [esp + 0x1a], 0x37
mov byte [esp + 0x1b], 0xd2
mov byte [esp + 0x1c], 0x64
mov byte [esp + 0x1d], 0xa4
mov byte [esp + 0x1e], 0x59
mov byte [esp + 0x1f], 0x18
mov byte [esp + 0x23], 0x61
mov byte [esp + 0x24], 0x6a
mov byte [esp + 0x25], 0x2c
mov byte [esp + 0x26], 0x62
mov byte [esp + 0x27], 0xc9
mov byte [esp + 0x28], 0x36
mov byte [esp + 0x29], 2
jne 0x1005ee11
mov bl, al
push 0x17
or bl, 1
mov byte [0x1019788c], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10197890], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x2c]
movsx esi, bl
test esi, esi
jne 0x1005edb9
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1005ede4
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1005edd9
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1005edd9
mov al, byte [esp + edi + 0x2c]
xor bl, al
mov eax, dword [0x10197890]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x16
jb 0x1005eda4
mov ecx, dword [0x10197890]
push 0x1005ee50
mov byte [ecx + 0x16], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10197890]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret