Function at 0x1011a5c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov al, 0xfc
push ebx
mov byte [esp + 0x1e], al
mov byte [esp + 8], al
mov al, 0xad
push ebp
mov byte [esp + 0x12], al
mov byte [esp + 0x17], al
mov al, byte [0x10195010]
push esi
test al, 1
push edi
mov byte [esp + 0x20], 0x97
mov byte [esp + 0x21], 0x94
mov byte [esp + 0x22], 0x1f
mov byte [esp + 0x23], 0x10
mov byte [esp + 0x24], 0x9f
mov byte [esp + 0x25], 0x8c
mov byte [esp + 0x26], 0x9e
mov byte [esp + 0x27], 0xcd
mov byte [esp + 0x28], 0xcd
mov byte [esp + 0x29], 0x5f
mov byte [esp + 0x2b], 0xc1
mov byte [esp + 0x15], 0xf1
mov byte [esp + 0x16], 0x6d
mov byte [esp + 0x17], 0x7e
mov byte [esp + 0x18], 0xfa
mov byte [esp + 0x19], 0xe0
mov byte [esp + 0x1b], 0xff
mov byte [esp + 0x1c], 0xe3
mov byte [esp + 0x1d], 0x3b
mov byte [esp + 0x1e], 0x90
jne 0x1011a6d5
mov bl, al
push 0xd
or bl, 1
mov byte [0x10195010], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10195014], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x20]
movsx esi, bl
test esi, esi
jne 0x1011a67d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1011a6a8
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1011a69d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1011a69d
mov al, byte [esp + edi + 0x20]
xor bl, al
mov eax, dword [0x10195014]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x1011a668
mov ecx, dword [0x10195014]
push 0x1011a810
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x10195018]
mov edx, dword [0x10195014]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x14], 0x90
mov byte [esp + 0x15], 0x87
mov byte [esp + 0x16], 0x4c
mov byte [esp + 0x17], 0xba
mov byte [esp + 0x18], 0x5d
mov byte [esp + 0x19], 0x85
mov byte [esp + 0x1a], 3
mov byte [esp + 0x1b], 0x12
mov byte [esp + 0x1c], 0x4b
mov byte [esp + 0x1d], 0x68
mov byte [esp + 0x1e], 0x9c
mov byte [esp + 0x20], 0xd3
mov byte [esp + 0x21], 0xeb
mov byte [esp + 0x22], 0x23
mov byte [esp + 0x23], 0xc9
mov byte [esp + 0x24], 0x38
mov byte [esp + 0x25], 0xcd
mov byte [esp + 0x26], 0x62
mov byte [esp + 0x27], 0x7c
mov byte [esp + 0x28], 0x2f
mov byte [esp + 0x29], 4
mov byte [esp + 0x2a], 0xf9
jne 0x1011a7e3
mov bl, al
push 0xc
or bl, 1
mov byte [0x10195018], bl
call fcn.1013c2df
add esp, 4
mov dword [0x1019501c], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x1011a78b
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1011a7b6
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1011a7ab
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1011a7ab
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x1019501c]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xb
jb 0x1011a776
mov ecx, dword [0x1019501c]
push 0x1011a820
mov byte [ecx + 0xb], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x1019501c]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x30]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret