Function at 0x100f36e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, byte [0x101955a0]
push ebx
push ebp
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x7f
mov byte [esp + 0x15], 0x20
mov byte [esp + 0x16], 0x92
mov byte [esp + 0x17], 0x4b
mov byte [esp + 0x18], 0x10
mov byte [esp + 0x19], 0xdd
mov byte [esp + 0x1a], 0xb9
mov byte [esp + 0x1b], 0x11
mov byte [esp + 0x1c], 0xc8
mov byte [esp + 0x1d], 0x37
mov byte [esp + 0x1e], 0xaf
mov byte [esp + 0x1f], 0xa1
mov byte [esp + 0x24], 0x1e
mov byte [esp + 0x25], 0x44
mov byte [esp + 0x26], 0xe4
mov byte [esp + 0x27], 0x2a
mov byte [esp + 0x28], 0x60
mov byte [esp + 0x29], 0xb4
mov byte [esp + 0x2a], 0x8a
mov byte [esp + 0x2b], 0x23
mov byte [esp + 0x2c], 0xe6
mov byte [esp + 0x2d], 0x53
mov byte [esp + 0x2e], 0xc3
mov byte [esp + 0x2f], 0xcd
jne 0x100f37f5
mov bl, al
push 0xd
or bl, 1
mov byte [0x101955a0], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101955a4], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100f379d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100f37c8
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100f37bd
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100f37bd
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101955a4]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100f3788
mov ecx, dword [0x101955a4]
push 0x100f3980
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x101955a4]
mov al, 0x18
mov byte [esp + 0x1b], al
mov byte [esp + 0x1d], al
mov byte [esp + 0x21], al
mov al, byte [0x101955a8]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x24], 0xcb
mov byte [esp + 0x25], 0x21
mov byte [esp + 0x26], 0x5e
mov byte [esp + 0x27], 0x74
mov byte [esp + 0x28], 0x30
mov byte [esp + 0x29], 0xb4
mov byte [esp + 0x2a], 0x1a
mov byte [esp + 0x2b], 0x61
mov byte [esp + 0x2c], 0x69
mov byte [esp + 0x2d], 0x79
mov byte [esp + 0x2e], 0x91
mov byte [esp + 0x2f], 0x84
mov byte [esp + 0x30], 0x33
mov byte [esp + 0x31], 0x5d
mov byte [esp + 0x32], 0xa3
mov byte [esp + 0x33], 0xc7
mov byte [esp + 0x14], 0x99
mov byte [esp + 0x15], 0x44
mov byte [esp + 0x16], 0x39
mov byte [esp + 0x17], 0x25
mov byte [esp + 0x18], 0x45
mov byte [esp + 0x19], 0xd1
mov byte [esp + 0x1a], 0x68
mov byte [esp + 0x1c], 0x3f
mov byte [esp + 0x1e], 0xfd
mov byte [esp + 0x1f], 0xf1
mov byte [esp + 0x20], 0x56
mov byte [esp + 0x22], 0xdb
mov byte [esp + 0x23], 0x90
jne 0x100f3934
mov bl, al
push 0x11
or bl, 1
mov byte [0x101955a8], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101955ac], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x100f38dc
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x100f3907
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100f38fc
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100f38fc
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x101955ac]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x10
jb 0x100f38c7
mov ecx, dword [0x101955ac]
push 0x100f3990
mov byte [ecx + 0x10], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101955ac]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x48]
push edx
mov edx, dword [esp + 0x48]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret