Function at 0x1001783d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x94
mov eax, dword [0x10038390]
xor eax, esp
mov dword [esp + 0x90], eax
push ebx
push ebp
push esi
push edi
push 0x6b
pop eax
push 0x65
pop ebx
push 0x72
pop edx
push 0x6e
movaps xmm0, xmmword [0x1002b200]
mov word [esp + 0x54], ax
pop eax
push 0x6c
pop ecx
mov esi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0x33
mov word [esp + 0x5a], ax
pop eax
push 0x32
mov word [esp + 0x60], ax
pop eax
push 0x2e
mov word [esp + 0x62], ax
pop eax
mov word [esp + 0x60], ax
push 0x64
pop eax
mov word [esp + 0x62], ax
xor eax, eax
mov word [esp + 0x68], ax
mov dword [esp + 0x18], eax
mov byte [esp + 0x9f], al
mov byte [esp + 0x4e], al
lea eax, [esp + 0x50]
movups xmmword [esp + 0x6c], xmm0
push eax
movaps xmm0, xmmword [0x1002b200]
mov word [esp + 0x56], bx
mov word [esp + 0x58], dx
mov word [esp + 0x5c], bx
mov word [esp + 0x5e], cx
mov word [esp + 0x68], cx
mov word [esp + 0x6a], cx
mov byte [esp + 0x80], 0x46
mov byte [esp + 0x81], dl
mov byte [esp + 0x82], bl
mov word [esp + 0x83], 0x7571
mov byte [esp + 0x85], bl
mov dword [esp + 0x86], 0x79636e
movups xmmword [esp + 0x8c], xmm0
mov dword [esp + 0x9c], 0x6e756f43
mov byte [esp + 0xa0], 0x74
mov byte [esp + 0xa1], bl
mov byte [esp + 0xa2], dl
mov byte [esp + 0x44], 0x47
mov byte [esp + 0x45], bl
mov dword [esp + 0x46], 0x63695474
mov dword [esp + 0x4a], 0x756f436b
mov dword [esp + 0x4e], 0x3436746e
call esi
mov ebp, eax
lea eax, [esp + 0x50]
push eax
call esi
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ebx, eax
test ebp, ebp
je 0x10017ab8
test ebx, ebx
je 0x10017ab5
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea eax, [esp + 0x6c]
push eax
push ebx
call esi
mov dword [esp + 0x10], eax
lea eax, [esp + 0x88]
push eax
push ebx
call esi
mov edi, eax
lea eax, [esp + 0x40]
push eax
push ebp
call esi
mov esi, eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x1c], esi
test eax, eax
je 0x10017aaa
test edi, edi
je 0x10017aaa
test esi, esi
je 0x10017aaa
lea ecx, [esp + 0x38]
push ecx
call eax
lea eax, [esp + 0x30]
push eax
call edi
and dword [esp + 0x14], 0
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x14], 0xa
call fcn.100177f9
pop ecx
lea eax, [esp + 0x28]
push eax
call edi
mov ecx, dword [esp + 0x28]
sub ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
sbb edx, dword [esp + 0x34]
call fcn.10018680
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
movsd qword [esp + 0x10], xmm0
call fcn.10018680
movsd xmm2, qword [esp + 0x10]
divsd xmm2, xmm0
movsd qword [esp + 0x10], xmm2
call esi
and dword [esp + 0x24], 0
mov esi, eax
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0xa
push eax
mov edi, edx
call fcn.100177f9
pop ecx
call dword [esp + 0x1c]
movsd xmm0, qword [esp + 0x10]
sub eax, esi
mulsd xmm0, qword [0x1002b1d0]
mov ecx, eax
sbb edx, edi
movsd qword [esp + 0x10], xmm0
call fcn.10018640
movsd xmm2, qword [esp + 0x10]
movaps xmm1, xmm0
mulsd xmm1, qword [0x1002b1c0]
comisd xmm1, xmm2
ja 0x10017a93
mulsd xmm0, qword [0x1002b1c8]
comisd xmm2, xmm0
jbe 0x10017a98
mov byte [esp + 0x18], 1
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebp
call esi
push ebx
call esi
mov al, byte [esp + 0x18]
jmp 0x10017ac1
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
push ebp
call esi
jmp 0x10017abc
push ebp
call esi
test ebx, ebx
je 0x10017abf
push ebx
call esi
xor al, al
mov ecx, dword [esp + 0xa0]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10018161
add esp, 0x94
ret