Function at 0x10011040
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x1c
mov cl, byte [0x10194c28]
push ebx
push ebp
mov eax, 0xd
push esi
push edi
test cl, 1
mov byte [esp + 0x20], 7
mov byte [esp + 0x21], 0x5c
mov byte [esp + 0x22], 0x7f
mov byte [esp + 0x23], 0x99
mov byte [esp + 0x24], 0xb
mov byte [esp + 0x25], 0x3d
mov byte [esp + 0x26], 0x85
mov byte [esp + 0x27], 0xf0
mov byte [esp + 0x28], 0x1f
mov byte [esp + 0x29], 0x69
mov byte [esp + 0x2a], 0x9d
mov byte [esp + 0x2b], 0xcb
mov byte [esp + 0x14], 0x6c
mov byte [esp + 0x15], 0x39
mov byte [esp + 0x16], al
mov byte [esp + 0x17], 0xf7
mov byte [esp + 0x18], 0x6e
mov byte [esp + 0x19], 0x51
mov byte [esp + 0x1a], 0xb6
mov byte [esp + 0x1b], 0xc2
mov byte [esp + 0x1c], 0x31
mov byte [esp + 0x1d], al
mov byte [esp + 0x1e], 0xf1
mov byte [esp + 0x1f], 0xa7
jne 0x10011159
mov bl, cl
push eax
or bl, 1
mov byte [0x10194c28], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10194c2c], eax
xor edi, edi
mov bl, byte [esp + edi + 0x14]
movsx eax, byte [esp + edi + 0x20]
movsx esi, bl
test esi, esi
jne 0x10011101
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x1001112c
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10011121
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10011121
mov al, byte [esp + edi + 0x20]
xor bl, al
mov eax, dword [0x10194c2c]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xc
jb 0x100110ec
mov ecx, dword [0x10194c2c]
push 0x10011290
mov byte [ecx + 0xc], 0
call fcn.1013c36b
add esp, 4
mov al, byte [0x10194c30]
mov edx, dword [0x10194c2c]
test al, 1
mov dword [esp + 0x10], edx
mov byte [esp + 0x14], 0x82
mov byte [esp + 0x15], 0x13
mov byte [esp + 0x16], 0x9c
mov byte [esp + 0x17], 0xc8
mov byte [esp + 0x18], 0xb9
mov byte [esp + 0x19], 0x3a
mov byte [esp + 0x1a], 0x4f
mov byte [esp + 0x1b], 0x60
mov byte [esp + 0x1c], 0x43
mov byte [esp + 0x1d], 0x7e
mov byte [esp + 0x20], 0xd0
mov byte [esp + 0x21], 0x76
mov byte [esp + 0x22], 0xef
mov byte [esp + 0x23], 0xad
mov byte [esp + 0x24], 0xcd
mov byte [esp + 0x25], 0x7f
mov byte [esp + 0x26], 0x39
mov byte [esp + 0x27], 5
mov byte [esp + 0x28], 0x2d
mov byte [esp + 0x29], 0xa
jne 0x1001125d
mov bl, al
push 0xb
or bl, 1
mov byte [0x10194c30], bl
call fcn.1013c2df
add esp, 4
mov dword [0x10194c34], eax
xor edi, edi
mov bl, byte [esp + edi + 0x20]
movsx eax, byte [esp + edi + 0x14]
movsx esi, bl
test esi, esi
jne 0x10011205
mov esi, 8
cdq
idiv esi
mov ecx, edx
test ecx, ecx
je 0x10011230
mov eax, ecx
cdq
mov ebp, eax
mov eax, esi
xor ebp, edx
sub ebp, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, ebp
jge 0x10011225
lea esi, [ebp + 0xc]
mov eax, ecx
cdq
idiv esi
mov ecx, eax
test ecx, ecx
jne 0x10011225
mov al, byte [esp + edi + 0x14]
xor bl, al
mov eax, dword [0x10194c34]
or bl, cl
mov byte [edi + eax], bl
inc edi
cmp edi, 0xa
jb 0x100111f0
mov ecx, dword [0x10194c34]
push 0x100112a0
mov byte [ecx + 0xa], 0
call fcn.1013c36b
add esp, 4
mov edx, dword [esp + 0x10]
mov esi, dword [0x10194c34]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, dword [esp + 0x30]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
call eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1c
ret