Function at 0x10115b10
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jmp 0x10116230
sub esp, 0x1c
mov al, 0xd0
push ebx
mov byte [esp + 8], al
mov byte [esp + 9], al
mov al, byte [0x101950f8]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x16], 0xcd
mov byte [esp + 0x17], 0x21
mov byte [esp + 0x18], 0x67
mov byte [esp + 0x19], 0x2e
mov byte [esp + 0x1a], 0x72
mov byte [esp + 0x1b], 0x69
mov byte [esp + 0x1c], 0x80
mov byte [esp + 0x1d], 0x1d
mov byte [esp + 0x1e], 0x81
mov byte [esp + 0x1f], 0x46
mov byte [esp + 0x20], 0xbb
mov byte [esp + 0x21], 0xb5
mov byte [esp + 0x22], 0xbf
mov byte [esp + 0x23], 0x4f
mov byte [esp + 0x24], 2
mov byte [esp + 0x25], 0x42
mov byte [esp + 0x26], 0x41
mov byte [esp + 0x27], 0x5b
mov byte [esp + 0x28], 0xae
mov byte [esp + 0x29], 0x79
mov byte [esp + 0x2a], 0xed
mov byte [esp + 0x2b], 0x2a
jne 0x10116345
mov bl, al
push 0xd
or bl, 1
mov byte [0x101950f8], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101950fc], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x101162ed
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10116318
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1011630d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1011630d
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101950fc]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x101162d8
mov ecx, dword [0x101950fc]
push 0x10116480
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x10195100]
mov edx, dword [0x101950fc]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x14], 0xe1
mov byte [esp + 0x15], 0xae
mov byte [esp + 0x16], 0x4b
mov byte [esp + 0x17], 0x27
mov byte [esp + 0x18], 0x8b
mov byte [esp + 0x19], 0xd8
mov byte [esp + 0x1a], 0x14
mov byte [esp + 0x1b], 0x7c
mov byte [esp + 0x1c], 0x70
mov byte [esp + 0x1d], 0x91
mov byte [esp + 0x1e], 0xf1
mov byte [esp + 0x1f], 0x78
mov byte [esp + 0x20], 0xa6
mov byte [esp + 0x21], 0xcb
mov byte [esp + 0x22], 0x3f
mov byte [esp + 0x23], 0x6b
mov byte [esp + 0x24], 0xea
mov byte [esp + 0x25], 0xab
mov byte [esp + 0x26], 0x60
mov byte [esp + 0x27], 0x39
mov byte [esp + 0x28], 2
mov byte [esp + 0x29], 0xe3
mov byte [esp + 0x2a], 0x9e
mov byte [esp + 0x2b], 0xa
jne 0x1011645d
mov bl, al
push 0xd
or bl, 1
mov byte [0x10195100], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10195104], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10116405
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10116430
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10116425
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10116425
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10195104]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x101163f0
mov ecx, dword [0x10195104]
push 0x10116490
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10195104]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret