Function at 0x10118000
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov al, 0xfb
push ebx
mov byte [esp + 0x15], al
mov byte [esp + 0x1c], al
mov al, byte [0x10195078]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x14], 0x16
mov byte [esp + 0x15], 0x9e
mov byte [esp + 0x16], 0x59
mov byte [esp + 0x17], 0x62
mov byte [esp + 0x18], 0xc5
mov byte [esp + 0x19], 0xca
mov byte [esp + 0x1a], 1
mov byte [esp + 0x1b], 0x65
mov byte [esp + 0x1c], 0xd5
mov byte [esp + 0x1d], 0x2a
mov byte [esp + 0x1e], 0x6b
mov byte [esp + 0x1f], 4
mov byte [esp + 0x20], 0x7d
mov byte [esp + 0x22], 0x2b
mov byte [esp + 0x23], 0xc
mov byte [esp + 0x24], 0xa0
mov byte [esp + 0x25], 0xa6
mov byte [esp + 0x26], 0x32
mov byte [esp + 0x27], 0x57
mov byte [esp + 0x29], 0x4e
mov byte [esp + 0x2a], 7
mov byte [esp + 0x2b], 0x68
jne 0x10118115
mov bl, al
push 0xd
or bl, 1
mov byte [0x10195078], bl
call fcn.1013c2df
add esp, 4
mov dword [0x1019507c], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x101180bd
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x101180e8
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x101180dd
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x101180dd
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x1019507c]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x101180a8
mov ecx, dword [0x1019507c]
push 0x10118260
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x10195080]
mov edx, dword [0x1019507c]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x14], 0x34
mov byte [esp + 0x15], 0xd9
mov byte [esp + 0x16], 0x45
mov byte [esp + 0x17], 0x64
mov byte [esp + 0x18], 0xc1
mov byte [esp + 0x19], 0x13
mov byte [esp + 0x1a], 0xef
mov byte [esp + 0x1b], 0xeb
mov byte [esp + 0x1c], 0x5d
mov byte [esp + 0x1d], 0x47
mov byte [esp + 0x1e], 0xed
mov byte [esp + 0x1f], 0x6e
mov byte [esp + 0x20], 0x67
mov byte [esp + 0x21], 0xbc
mov byte [esp + 0x22], 0x31
mov byte [esp + 0x23], 0x28
mov byte [esp + 0x24], 0xa0
mov byte [esp + 0x25], 0x60
mov byte [esp + 0x26], 0x9b
mov byte [esp + 0x27], 0xae
mov byte [esp + 0x28], 0x2f
mov byte [esp + 0x29], 0x35
mov byte [esp + 0x2a], 0x82
mov byte [esp + 0x2b], 0x1c
jne 0x1011822d
mov bl, al
push 0xd
or bl, 1
mov byte [0x10195080], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10195084], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x101181d5
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10118200
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x101181f5
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x101181f5
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10195084]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x101181c0
mov ecx, dword [0x10195084]
push 0x10118270
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10195084]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x30]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret