Function at 0x100011f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x1008ce78
push 0x10075b12
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
sub esp, 0xc8
mov eax, dword [0x10091628]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x24], eax
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov edi, dword [ebx + 8]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xdc], 0x40
mov dword [ebp - 0xb0], 0x83828dcc
xorps xmm0, xmm0
movups xmmword [ebp - 0xac], xmm0
mov dword [ebp - 0x9c], 0
mov byte [ebp - 0x98], 0
mov dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 0x19
jae 0x100012ee
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb4]
mov al, byte [ebp + eax - 0xb0]
movzx edx, al
add ecx, 0x3ad8dc96
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
add ecx, edx
sub cl, 0x1a
mov eax, dword [ebp - 0xb4]
mov byte [ebp + eax - 0xb0], cl
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x19
jb 0x100012a2
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xd0], eax
test edi, edi
je 0x10001507
cmp dword [ebx + 0xc], 0
je 0x10001507
mov dword [ebp - 4], 0
push edi
call fcn.10001050
add esp, 4
mov dword [ebp - 0xe0], eax
test eax, eax
je 0x100014de
add eax, edi
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x70], 0x6f6a6230
mov dword [ebp - 0x6c], 0x4f605e6d
mov dword [ebp - 0x68], 0x5464606c
mov word [ebp - 0x64], 0x6157
mov byte [ebp - 0x62], 0xf4
xorps xmm0, xmm0
movq qword [ebp - 0x61], xmm0
mov word [ebp - 0x59], 0
lea esi, [ebp - 0x70]
mov dword [ebp - 0xb4], 0
nop dword [eax]
cmp dword [ebp - 0xb4], 0x19
jae 0x100013b6
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb4]
mov al, byte [eax + esi]
movzx edx, al
add ecx, 0x36c6293f
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
add ecx, edx
add cl, 0x47
mov eax, dword [ebp - 0xb4]
mov byte [eax + esi], cl
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
jmp 0x10001370
lea eax, [ebp - 0x44]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], esi
mov cl, byte [esi]
test cl, cl
je 0x100013d1
mov byte [eax], cl
inc esi
inc eax
jmp 0x100013b9
mov byte [eax], 0
mov dword [ebp - 0x90], 0xada094ab
mov dword [ebp - 0x8c], 0x6565a991
mov dword [ebp - 0x88], 0xb7b68d76
mov byte [ebp - 0x84], 0x2c
xor eax, eax
mov dword [ebp - 0x83], eax
mov word [ebp - 0x7f], ax
mov byte [ebp - 0x7d], al
lea esi, [ebp - 0x90]
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x14
jae 0x10001454
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb4]
mov al, byte [eax + esi]
movzx edx, al
add ecx, 0xe3c26f08
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
add ecx, edx
sub cl, 0x38
mov eax, dword [ebp - 0xb4]
mov byte [eax + esi], cl
mov eax, dword [ebp - 0xb4]
inc eax
jmp 0x1000140e
lea eax, [ebp - 0x34]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], esi
mov cl, byte [esi]
test cl, cl
je 0x1000146f
mov byte [eax], cl
inc esi
inc eax
jmp 0x10001457
mov byte [eax], 0
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x100014de
lea eax, [ebp - 0xbc]
push eax
push dword [ebp - 0xd0]
push dword [ebx + 0xc]
push edi
call esi
test eax, eax
je 0x100014de
call dword [ebp - 0xd4]
test eax, eax
je 0x100014cb
lea ecx, [ebp - 0xb8]
push ecx
push 6
push 0
call eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0xb8]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xd8]
push eax
push dword [ebp - 0xbc]
push dword [ebx + 0xc]
push edi
call esi
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0xb8]
jmp 0x10001509
xor eax, eax
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.10075b41
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8