Function at 0x10110a30
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1017a2a5
mov eax, dword fs:[0]
push eax
sub esp, 0x80
mov eax, dword [0x101cfdb0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov edi, dword [ebp + 8]
mov ecx, edi
call fcn.1004dd60
movzx eax, ax
mov ecx, edi
mov dword [ebp - 0x88], eax
call fcn.1004dcd0
lea eax, [ebp - 0x8c]
mov ecx, edi
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.10092a20
mov ecx, eax
call fcn.10092a20
mov esi, eax
mov ecx, esi
call fcn.1004dd60
mov ecx, esi
call fcn.1004dd60
mov ecx, edi
movzx esi, ax
call fcn.1004dcd0
mov dl, al
mov eax, dword [ebp - 0x88]
cmp si, ax
je 0x10110ddf
mov edi, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
mov ecx, 0x2710
cmp ax, cx
jb 0x10110b74
cmp dl, 3
je 0x10110b74
cmp ax, cx
jbe 0x10110bea
mov ecx, dword [ebx + 0x5c]
cmp dl, 2
jne 0x10110af7
test ecx, ecx
je 0x10110b03
push 0
jmp 0x10110afd
test ecx, ecx
je 0x10110b03
push 1
call dword [0x101b07e0]
mov eax, dword [0x102710b4]
mov word [eax + 0x156], si
mov esi, dword [ebx + 0x60]
test esi, esi
je 0x10110b45
push 0
mov ecx, esi
call dword [0x101b07e0]
mov esi, dword [ebx + 0x60]
test esi, esi
je 0x10110b45
push 4
push esi
call edi
test eax, eax
jne 0x10110b45
mov dword [0x10271054], esi
mov dword [0x10270fec], 7
call fcn.100ce410
mov esi, dword [ebx + 0x5c]
test esi, esi
je 0x10110bea
push 4
push esi
call edi
test eax, eax
jne 0x10110bea
mov dword [0x10271054], esi
mov dword [0x10270fec], 2
call fcn.100ce410
jmp 0x10110bea
mov ecx, dword [ebx + 0x60]
test ecx, ecx
je 0x10110b83
push 1
call dword [0x101b07e0]
mov ecx, dword [ebx + 0x5c]
test ecx, ecx
je 0x10110b92
push 0
call dword [0x101b07e0]
mov esi, dword [ebx + 0x60]
test esi, esi
je 0x10110bb7
push 4
push esi
call edi
test eax, eax
jne 0x10110bb7
mov dword [0x10271054], esi
mov dword [0x10270fec], 2
call fcn.100ce410
mov esi, dword [ebx + 0x5c]
test esi, esi
je 0x10110bdc
push 4
push esi
call edi
test eax, eax
jne 0x10110bdc
mov dword [0x10271054], esi
mov dword [0x10270fec], 7
call fcn.100ce410
mov eax, dword [ebp - 0x88]
mov ecx, ebx
push eax
call fcn.101108d0
mov edi, dword [ebp - 0x8c]
mov esi, dword [ebp - 0x84]
imul eax, edi, 0x64
cdq
idiv esi
mov ecx, eax
call fcn.10055700
cvttsd2si eax, xmm0
push 0x2e
push esi
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x64]
push eax
call fcn.100ed000
push 0x2e
push edi
lea eax, [ebp - 0x48]
mov dword [ebp - 4], 0
push eax
call fcn.100ed000
mov byte [ebp - 4], 1
mov cl, 0x19
mov dword [ebp - 0x20], 0x366a3c19
xor eax, eax
mov dword [ebp - 0x1c], 0x31396a3c
mov dword [ebp - 0x18], 0x3c3c7d3c
mov word [ebp - 0x14], 0x30
nop
xor byte [ebp + eax - 0x1f], cl
inc eax
cmp eax, 0xc
jae 0x10110c5f
mov cl, byte [ebp - 0x20]
jmp 0x10110c50
lea eax, [ebp - 0x1f]
mov byte [ebp - 0x13], 0
push eax
lea ecx, [ebp - 0x80]
call fcn.100461a0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x60]
push dword [ebp - 0x84]
cmp dword [ebp - 0x4c], 0x10
lea esi, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x60]
cmp dword [ebp - 0x30], 0x10
push eax
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
sub esp, 0x1c
lea eax, [ebp - 0x80]
mov ecx, esp
push eax
call fcn.10046370
push esi
call fcn.100492e0
mov esi, dword [ebx + 0x64]
add esp, 0x2c
mov byte [ebp - 4], 3
test esi, esi
je 0x10110ccf
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x10110ccf
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
call dword [0x101b07cc]
lea ecx, [ebp - 0x2c]
call fcn.100432e0
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x10110cec
inc eax
push eax
push dword [ebp - 0x28]
call fcn.100479d0
add esp, 8
mov eax, dword [ebp - 0x2c]
push 8
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
call fcn.100479d0
add esp, 8
lea ecx, [ebp - 0x80]
call fcn.100432e0
mov eax, dword [ebp - 0x68]
cmp eax, 0x10
jb 0x10110d30
inc eax
push eax
push dword [ebp - 0x7c]
call fcn.100479d0
add esp, 8
mov eax, dword [ebp - 0x80]
push 8
push eax
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0xf
mov byte [ebp - 0x7c], 0
mov dword [ebp - 0x80], 0
call fcn.100479d0
add esp, 8
lea ecx, [ebp - 0x48]
call fcn.100432e0
mov eax, dword [ebp - 0x30]
cmp eax, 0x10
jb 0x10110d74
inc eax
push eax
push dword [ebp - 0x44]
call fcn.100479d0
add esp, 8
mov eax, dword [ebp - 0x48]
push 8
push eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
mov dword [ebp - 0x48], 0
call fcn.100479d0
add esp, 8
lea ecx, [ebp - 0x64]
call fcn.100432e0
mov eax, dword [ebp - 0x4c]
cmp eax, 0x10
jb 0x10110db8
inc eax
push eax
push dword [ebp - 0x60]
call fcn.100479d0
add esp, 8
mov eax, dword [ebp - 0x64]
push 8
push eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
mov dword [ebp - 0x64], 0
call fcn.100479d0
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101163c0
mov esp, ebp
pop ebp
ret 4