Function at 0x10011620
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x2c
mov al, 0x29
push ebx
mov byte [esp + 0x12], al
mov byte [esp + 0x1c], al
mov al, byte [0x10194c08]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x14], 0x42
mov byte [esp + 0x15], 0xe0
mov byte [esp + 0x16], 0x14
mov byte [esp + 0x17], 0x46
mov byte [esp + 0x18], 0xa2
mov byte [esp + 0x19], 0xea
mov byte [esp + 0x1a], 0xba
mov byte [esp + 0x1b], 1
mov byte [esp + 0x1c], 0xde
mov byte [esp + 0x1d], 0x32
mov byte [esp + 0x1f], 0x94
mov byte [esp + 0x29], 0x85
mov byte [esp + 0x2a], 0x66
mov byte [esp + 0x2b], 0x28
mov byte [esp + 0x2c], 0xc7
mov byte [esp + 0x2d], 0x86
mov byte [esp + 0x2e], 0x89
mov byte [esp + 0x2f], 0x33
mov byte [esp + 0x30], 0xf0
mov byte [esp + 0x31], 0x56
mov byte [esp + 0x32], 0x45
mov byte [esp + 0x33], 0xf8
jne 0x10011735
mov bl, al
push 0xd
or bl, 1
mov byte [0x10194c08], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10194c0c], eax
xor edi, edi
mov bl, byte [esp + edi + 0x28]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x100116dd
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10011708
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x100116fd
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x100116fd
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10194c0c]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100116c8
mov ecx, dword [0x10194c0c]
push 0x100118c0
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [0x10194c0c]
mov al, 0x38
mov byte [esp + 0x34], al
mov byte [esp + 0x18], al
mov al, byte [0x10194c10]
mov dword [esp + 0x10], edx
test al, 1
mov byte [esp + 0x28], 0xcb
mov byte [esp + 0x29], 0xc7
mov byte [esp + 0x2a], 0xdb
mov byte [esp + 0x2b], 0x5e
mov byte [esp + 0x2c], 0x7e
mov byte [esp + 0x2d], 0x4a
mov byte [esp + 0x2e], 0x4c
mov byte [esp + 0x2f], 0x97
mov byte [esp + 0x30], 0xf0
mov byte [esp + 0x31], 0x63
mov byte [esp + 0x32], 0x16
mov byte [esp + 0x33], 0x36
mov byte [esp + 0x35], 0xe3
mov byte [esp + 0x36], 0xc3
mov byte [esp + 0x37], 7
mov byte [esp + 0x38], 0x4e
mov byte [esp + 0x39], 0x34
mov byte [esp + 0x3a], 0xe0
mov byte [esp + 0x14], 0x9c
mov byte [esp + 0x15], 0xa6
mov byte [esp + 0x16], 0xb2
mov byte [esp + 0x17], 0x2a
mov byte [esp + 0x19], 0x25
mov byte [esp + 0x1a], 0x3e
mov byte [esp + 0x1b], 0xc4
mov byte [esp + 0x1c], 0x99
mov byte [esp + 0x1d], 0xd
mov byte [esp + 0x1e], 0x71
mov byte [esp + 0x1f], 0x5a
mov byte [esp + 0x20], 0x5d
mov byte [esp + 0x21], 0xac
mov byte [esp + 0x22], 0xa1
mov byte [esp + 0x23], 0x6d
mov byte [esp + 0x24], 0x2b
mov byte [esp + 0x25], 0x57
mov byte [esp + 0x26], 0x94
jne 0x10011893
mov bl, al
push 0x14
or bl, 1
mov byte [0x10194c10], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10194c14], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x28]
movsx esi, bl
test esi, esi
jne 0x1001183b
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10011866
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x1001185b
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x1001185b
mov al, byte [esp + edi + 0x28]
xor bl, al
mov eax, dword [0x10194c14]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0x13
jb 0x10011826
mov ecx, dword [0x10194c14]
push 0x100118d0
mov byte [ecx + 0x13], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10194c14]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
push ecx
push edx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2c
ret