Function at 0x101169e0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov al, 0x68
push ebx
mov byte [esp + 0x11], al
mov byte [esp + 0x13], al
mov al, byte [0x101950c8]
push ebp
mov cl, 4
push esi
test al, 1
push edi
mov byte [esp + 0x14], 0x15
mov byte [esp + 0x15], 0xc0
mov byte [esp + 0x16], 0x21
mov byte [esp + 0x17], 0xf5
mov byte [esp + 0x18], 0x8c
mov byte [esp + 0x19], 0xa7
mov byte [esp + 0x1a], cl
mov byte [esp + 0x1b], 0x5e
mov byte [esp + 0x1c], 0x69
mov byte [esp + 0x1e], 0x18
mov byte [esp + 0x24], 0x7e
mov byte [esp + 0x25], 0xa5
mov byte [esp + 0x26], 0x53
mov byte [esp + 0x27], 0x9b
mov byte [esp + 0x28], 0xe9
mov byte [esp + 0x29], 0xcb
mov byte [esp + 0x2a], 0x37
mov byte [esp + 0x2b], 0x6c
mov byte [esp + 0x2c], 0x47
mov byte [esp + 0x2d], 0xc
mov byte [esp + 0x2e], 0x74
mov byte [esp + 0x2f], cl
jne 0x10116af5
mov bl, al
push 0xd
or bl, 1
mov byte [0x101950c8], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101950cc], eax
xor edi, edi
mov bl, byte [esp + edi + 0x24]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10116a9d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10116ac8
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10116abd
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10116abd
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101950cc]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10116a88
mov ecx, dword [0x101950cc]
push 0x10116c70
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x101950cc]
mov al, 0x91
mov byte [esp + 0x2c], al
mov byte [esp + 0x32], al
mov al, 0x20
mov dword [esp + 0x10], edx
mov byte [esp + 0x1f], al
mov byte [esp + 0x21], al
mov al, byte [0x101950d0]
mov byte [esp + 0x24], 0x43
test al, 1
mov byte [esp + 0x25], 0x16
mov byte [esp + 0x26], 0xf
mov byte [esp + 0x27], 0
mov byte [esp + 0x28], 0xe4
mov byte [esp + 0x29], 0x22
mov byte [esp + 0x2a], 0xfd
mov byte [esp + 0x2b], 0xe9
mov byte [esp + 0x2d], 0x19
mov byte [esp + 0x2e], 0x4d
mov byte [esp + 0x2f], 0x4f
mov byte [esp + 0x30], 0xb5
mov byte [esp + 0x31], 0x45
mov byte [esp + 0x33], 0xa6
mov byte [esp + 0x14], 0x17
mov byte [esp + 0x15], 0x73
mov byte [esp + 0x16], 0x7d
mov byte [esp + 0x17], 0x6d
mov byte [esp + 0x18], 0x8d
mov byte [esp + 0x19], 0x4c
mov byte [esp + 0x1a], 0x9c
mov byte [esp + 0x1b], 0x9d
mov byte [esp + 0x1c], 0xf4
mov byte [esp + 0x1d], 0x49
mov byte [esp + 0x1e], 0x3f
mov byte [esp + 0x20], 0xd6
mov byte [esp + 0x22], 0xe2
mov byte [esp + 0x23], 0xd5
jne 0x10116c35
mov bl, al
push 0x11
or bl, 1
mov byte [0x101950d0], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101950d4], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x24]
movsx esi, bl
test esi, esi
jne 0x10116bdd
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10116c08
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10116bfd
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10116bfd
mov al, byte [esp + edi + 0x24]
xor bl, al
mov eax, dword [0x101950d4]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x10
jb 0x10116bc8
mov ecx, dword [0x101950d4]
push 0x10116c80
mov byte [ecx + 0x10], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101950d4]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x24
ret