Function at 0x10116c90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov al, 0xf6
push ebx
mov byte [esp + 0xc], al
mov byte [esp + 0x10], al
mov al, byte [0x101950b8]
push ebp
push esi
push edi
test al, 1
mov byte [esp + 0x20], 0x9b
mov byte [esp + 0x21], 0xf
mov byte [esp + 0x22], 0xd5
mov byte [esp + 0x23], 0x13
mov byte [esp + 0x24], 0x93
mov byte [esp + 0x25], 0x71
mov byte [esp + 0x26], 9
mov byte [esp + 0x27], 0x45
mov byte [esp + 0x28], 0xd8
mov byte [esp + 0x29], 0x8b
mov byte [esp + 0x2a], 0xb
mov byte [esp + 0x2b], 0xfd
mov byte [esp + 0x14], 0xf0
mov byte [esp + 0x15], 0x6a
mov byte [esp + 0x16], 0xa7
mov byte [esp + 0x17], 0x7d
mov byte [esp + 0x19], 0x1d
mov byte [esp + 0x1a], 0x3a
mov byte [esp + 0x1b], 0x77
mov byte [esp + 0x1d], 0xef
mov byte [esp + 0x1e], 0x67
mov byte [esp + 0x1f], 0x91
jne 0x10116da5
mov bl, al
push 0xd
or bl, 1
mov byte [0x101950b8], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101950bc], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x20]
movsx esi, bl
test esi, esi
jne 0x10116d4d
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10116d78
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10116d6d
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10116d6d
mov al, byte [esp + edi + 0x20]
xor bl, al
mov eax, dword [0x101950bc]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x10116d38
mov ecx, dword [0x101950bc]
push 0x10116ee0
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x101950c0]
mov edx, dword [0x101950bc]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x14], 0x80
mov byte [esp + 0x15], 0x8a
mov byte [esp + 0x16], 0xf2
mov byte [esp + 0x17], 0x79
mov byte [esp + 0x18], 0xb4
mov byte [esp + 0x19], 0x9b
mov byte [esp + 0x1a], 0x26
mov byte [esp + 0x1b], 0x92
mov byte [esp + 0x1c], 0xc0
mov byte [esp + 0x1d], 0x20
mov byte [esp + 0x1e], 0xd2
mov byte [esp + 0x20], 0xc3
mov byte [esp + 0x21], 0xe6
mov byte [esp + 0x22], 0x9d
mov byte [esp + 0x23], 0xa
mov byte [esp + 0x24], 0xd1
mov byte [esp + 0x25], 0xd3
mov byte [esp + 0x26], 0x47
mov byte [esp + 0x27], 0xfc
mov byte [esp + 0x28], 0xa4
mov byte [esp + 0x29], 0x4c
mov byte [esp + 0x2a], 0xb7
jne 0x10116eb3
mov bl, al
push 0xc
or bl, 1
mov byte [0x101950c0], bl
call fcn.1013c2df
add esp, 4
mov dword [0x101950c4], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10116e5b
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10116e86
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10116e7b
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10116e7b
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x101950c4]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xb
jb 0x10116e46
mov ecx, dword [0x101950c4]
push 0x10116ef0
mov byte [ecx + 0xb], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x101950c4]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x30]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret