Function at 0x10011d90
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x2c
mov eax, dword [0x100290dc]
xor eax, esp
mov dword [esp + 0x28], eax
mov dword [esp], ecx
mov byte [esp + 0x24], 0
mov dword [esp + 0x20], 0x7d7d7523
mov dword [esp + 0x1c], 0x27267d74
mov dword [esp + 0x18], 0x6367745e
mov ebx, 0xfaeaac7b
jmp 0x10011de0
mov ebp, 0x8d542dfa
test edx, ecx
cmovne ebx, ebp
cmp eax, 0xa
cmovge ebx, ebp
nop dword [eax]
cmp ebx, 0xf5434a26
jg 0x10011e20
cmp ebx, 0xadec6e48
jle 0x10011e90
cmp ebx, 0xd02f528a
jle 0x10011f3c
cmp ebx, 0xd02f528b
je 0x10012056
cmp ebx, 0xe487436d
jne 0x100120de
mov ebx, 0xadec6e49
jmp 0x10011de0
cmp ebx, 0x2b61b374
jg 0x10011ee0
cmp ebx, 0x67d7f7e
jg 0x10011fc4
cmp ebx, 0xf5434a27
je 0x10012060
cmp ebx, 0xfaeaac7b
jne 0x10011de0
mov eax, dword [0x10029b3c]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
mov eax, 0xca9b2148
mov ebx, 0x67786e28
mov edx, 0xca9b2148
cmp ecx, 0xffffffff
sete cl
je 0x10011e78
mov edx, 0x67786e28
cmp dword [0x10029b40], 0xa
cmovl ebx, edx
setl dl
xor dl, cl
cmovne ebx, eax
jmp 0x10011de0
cmp ebx, 0x9950f4af
jg 0x10011fe8
cmp ebx, 0x8d542dfa
je 0x1001206a
cmp ebx, 0x8e99b989
jne 0x10011de0
mov eax, dword [esp]
lea eax, [esp + 4]
push eax
call fcn.1000dea0
mov ebx, 0xd35506a
test edi, edi
je 0x10011de0
mov ebx, 0x67d7f7f
jmp 0x10011de0
cmp ebx, 0x67786e27
jg 0x10012038
cmp ebx, 0x2b61b375
je 0x10012074
cmp ebx, 0x544567aa
jne 0x10011de0
mov edx, dword [0x10029b3c]
mov eax, dword [0x10029b40]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0xf5434a27
mov ebp, 0xf5434a27
je 0x10011dc9
jmp 0x10011dce
cmp ebx, 0xadec6e49
je 0x1001207e
cmp ebx, 0xca9b2148
jne 0x10011de0
mov eax, dword [esp]
lea edi, [esp + 0x18]
push edi
call fcn.1000dea0
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
mov edx, dword [0x10029b3c]
mov eax, dword [0x10029b40]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov ebx, 0xd02f528b
mov edx, 0xd02f528b
jne 0x10011f9f
mov edx, 0x67786e28
cmp ecx, 0xffffffff
cmovne ebx, edx
cmp eax, 0xa
movups xmm0, xmmword [str.Zte_budt_xtCptJ]
movups xmmword [esp + 4], xmm0
mov dword [esp + 0x13], 0x4a747c
cmovge ebx, edx
jmp 0x10011de0
cmp ebx, 0x67d7f7f
je 0x10012088
cmp ebx, 0xd35506a
jne 0x10011de0
mov ebx, 0x9950f4b0
xor esi, esi
jmp 0x10011de0
cmp ebx, 0x9950f4b0
je 0x100120a0
cmp ebx, 0xa8bf4610
jne 0x10011de0
mov edx, dword [0x10029b3c]
mov eax, dword [0x10029b40]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
xor edx, 0xfffffffe
test edx, ecx
sete bl
cmp eax, 0xa
setl bh
xor bh, bl
mov ebx, 0x544567aa
mov ebp, 0x544567aa
je 0x10011dc9
jmp 0x10011dce
cmp ebx, 0x67786e28
je 0x100120aa
cmp ebx, 0x6c706739
jne 0x10011de0
mov ebx, 0xe487436d
jmp 0x10011de0
mov ebx, 0x8e99b989
jmp 0x10011de0
mov ebx, 0x2b61b375
jmp 0x10011de0
mov ebx, 0x544567aa
jmp 0x10011de0
mov ebx, 0xe487436d
jmp 0x10011de0
mov ebx, 0xd7ead6b5
jmp 0x10011de0
mov ebx, 0xa8bf4610
lea eax, [esp + 4]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
jmp 0x10011de0
mov ebx, 0x6c706739
jmp 0x10011de0
mov eax, dword [esp]
lea edi, [esp + 0x18]
push edi
call fcn.1000dea0
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
movups xmm0, xmmword [str.Zte_budt_xtCptJ]
movups xmmword [esp + 4], xmm0
mov dword [esp + 0x13], 0x4a747c
mov ebx, 0xca9b2148
jmp 0x10011de0
cmp ebx, 0xd7ead6b5
jne 0x10011de0
mov ecx, dword [esp + 0x28]
xor ecx, esp
call fcn.100151d1
mov eax, esi
add esp, 0x2c
pop esi
pop edi
pop ebx
pop ebp
ret