Function at 0x1006c960
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c
mov al, 0xe0
push ebx
mov byte [esp + 9], al
mov byte [esp + 0x1c], al
mov al, byte [0x101976ac]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x14], 0x8b
mov byte [esp + 0x16], 0x7f
mov byte [esp + 0x17], 0xce
mov byte [esp + 0x18], 0xa1
mov byte [esp + 0x19], 0x44
mov byte [esp + 0x1a], 0xd4
mov byte [esp + 0x1b], 0xb3
mov byte [esp + 0x1c], 0x38
mov byte [esp + 0x1d], 0x4e
mov byte [esp + 0x1e], 0xbf
mov byte [esp + 0x1f], 0x10
mov byte [esp + 0x29], 0x85
mov byte [esp + 0x2a], 0xd
mov byte [esp + 0x2b], 0xa0
mov byte [esp + 0x2c], 0xc4
mov byte [esp + 0x2d], 0x28
mov byte [esp + 0x2e], 0xe7
mov byte [esp + 0x2f], 0x81
mov byte [esp + 0x30], 0x16
mov byte [esp + 0x31], 0x2a
mov byte [esp + 0x32], 0xd3
mov byte [esp + 0x33], 0x7c
jne 0x1006ca75
mov bl, al
push 0xd
or bl, 1
mov byte [0x101976ac], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101976b0], eax
xor edi, edi
mov bl, byte [esp + edi + 0x28]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1006ca1d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1006ca48
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1006ca3d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1006ca3d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101976b0]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x1006ca08
mov ecx, dword [0x101976b0]
push 0x1006cc10
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x101976b0]
mov al, 0x99
mov byte [esp + 0x32], al
mov byte [esp + 0x34], al
mov al, byte [0x101976b4]
mov dword [esp + 0x10], edx
test al, 1
mov byte [esp + 0x28], 0x3c
mov byte [esp + 0x29], 0x47
mov byte [esp + 0x2a], 0x97
mov byte [esp + 0x2b], 0xff
mov byte [esp + 0x2c], 0xcf
mov byte [esp + 0x2d], 0x64
mov byte [esp + 0x2e], 0x94
mov byte [esp + 0x2f], 0x8a
mov byte [esp + 0x30], 0x79
mov byte [esp + 0x31], 0xa7
mov byte [esp + 0x33], 0xcc
mov byte [esp + 0x35], 0x6e
mov byte [esp + 0x36], 0xa9
mov byte [esp + 0x37], 0xae
mov byte [esp + 0x38], 0xb8
mov byte [esp + 0x39], 0x4b
mov byte [esp + 0x3a], 0xd0
mov byte [esp + 0x3b], 0x35
mov byte [esp + 0x14], 0x75
mov byte [esp + 0x15], 0x29
mov byte [esp + 0x16], 0xe3
mov byte [esp + 0x17], 0x9a
mov byte [esp + 0x18], 0xbd
mov byte [esp + 0x19], 8
mov byte [esp + 0x1a], 0xfb
mov byte [esp + 0x1b], 0xe9
mov byte [esp + 0x1c], 0x12
mov byte [esp + 0x1d], 0xc2
mov byte [esp + 0x1e], 0xfd
mov byte [esp + 0x1f], 0x88
mov byte [esp + 0x20], 0xfc
mov byte [esp + 0x21], 0xd
mov byte [esp + 0x22], 0xdb
mov byte [esp + 0x23], 0xcb
mov byte [esp + 0x24], 0xd5
mov byte [esp + 0x25], 0x2e
mov byte [esp + 0x26], 0xbe
mov byte [esp + 0x27], 0x41
jne 0x1006cbdd
mov bl, al
push 0x15
or bl, 1
mov byte [0x101976b4], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101976b8], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x28]
movsx esi, bl
test esi, esi
jne 0x1006cb85
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1006cbb0
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1006cba5
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1006cba5
mov al, byte [esp + edi + 0x28]
xor bl, al
mov eax, dword [0x101976b8]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x14
jb 0x1006cb70
mov ecx, dword [0x101976b8]
push 0x1006cc20
mov byte [ecx + 0x14], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101976b8]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x40]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret