Function at 0x10011cb0
Capabilities:
Contain obfuscated stackstrings
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov cl, 0x6c
push ebx
mov byte [ebp - 0x1f], cl
mov byte [ebp - 0x1a], cl
mov byte [ebp - 0x19], cl
mov al, 0x65
mov bl, 0x72
mov dl, 0x6e
mov cl, 0x74
push esi
push edi
mov byte [ebp - 0x24], 0x6b
mov byte [ebp - 0x23], al
mov byte [ebp - 0x22], bl
mov byte [ebp - 0x21], dl
mov byte [ebp - 0x20], al
mov byte [ebp - 0x1e], 0x33
mov byte [ebp - 0x1d], 0x32
mov byte [ebp - 0x1c], 0x2e
mov byte [ebp - 0x1b], 0x64
mov byte [ebp - 0x18], 0
mov byte [ebp - 0x14], 0x43
mov byte [ebp - 0x13], bl
mov byte [ebp - 0x12], al
mov byte [ebp - 0x11], 0x61
mov byte [ebp - 0x10], cl
mov byte [ebp - 0xf], al
mov byte [ebp - 0xe], 0x45
mov byte [ebp - 0xd], 0x76
mov byte [ebp - 0xc], al
mov byte [ebp - 0xb], dl
mov byte [ebp - 0xa], cl
mov byte [ebp - 9], 0x41
mov byte [ebp - 8], 0
pushal
add eax, eax
add eax, eax
push ecx
push ecx
push edx
push eax
push ecx
push ebx
push ecx
push edx
push edx
and eax, eax
pop ebx
pop eax
pop edx
add eax, eax
pop ecx
pop eax
pop edx
pop ebx
pop eax
pop edx
popal
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x24]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 4], eax
pushal
add eax, eax
add eax, eax
push ecx
push ecx
push edx
push eax
push ecx
push ebx
push ecx
push edx
push edx
and eax, eax
pop ebx
pop eax
pop edx
add eax, eax
pop ecx
pop eax
pop edx
pop ebx
pop eax
pop edx
popal
pushal
add eax, eax
add eax, eax
push ecx
push ecx
push edx
push eax
push ecx
push ebx
push ecx
push edx
push edx
and eax, eax
pop ebx
pop eax
pop edx
add eax, eax
pop ecx
pop eax
pop edx
pop ebx
pop eax
pop edx
popal
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x34], edx
pushal
add eax, eax
add eax, eax
push ecx
push ecx
push edx
push eax
push ecx
push ebx
push ecx
push edx
push edx
and eax, eax
pop ebx
pop eax
pop edx
add eax, eax
pop ecx
pop eax
pop edx
pop ebx
pop eax
pop edx
popal
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x30], eax
pushal
add eax, eax
add eax, eax
push ecx
push ecx
push edx
push eax
push ecx
push ebx
push ecx
push edx
push edx
and eax, eax
pop ebx
pop eax
pop edx
add eax, eax
pop ecx
pop eax
pop edx
pop ebx
pop eax
pop edx
popal
mov cl, byte [ebp + 0x20]
mov byte [ebp - 0x2c], cl
pushal
add eax, eax
add eax, eax
push ecx
push ecx
push edx
push eax
push ecx
push ebx
push ecx
push edx
push edx
and eax, eax
pop ebx
pop eax
pop edx
add eax, eax
pop ecx
pop eax
pop edx
pop ebx
pop eax
pop edx
popal
push 0
push 0
push 0
push 0
call dword [ebp - 4]
mov dword [ebp - 0x28], eax
pushal
add eax, eax
add eax, eax
push ecx
push ecx
push edx
push eax
push ecx
push ebx
push ecx
push edx
push edx
and eax, eax
pop ebx
pop eax
pop edx
add eax, eax
pop ecx
pop eax
pop edx
pop ebx
pop eax
pop edx
popal
mov edx, dword [ebp + 0x1c]
mov eax, dword [ebp + 0x18]
push edx
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x34]
push eax
mov eax, dword [ebp + 8]
push ecx
push 0x10011c30
push edx
push eax
call dword [sym.imp.MSVCRT.dll__beginthreadex]
mov ecx, dword [ebp - 0x28]
add esp, 0x18
mov dword [ebp + 0x20], eax
push 0xffffffffffffffff
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
pushal
add eax, eax
add eax, eax
push ecx
push ecx
push edx
push eax
push ecx
push ebx
push ecx
push edx
push edx
and eax, eax
pop ebx
pop eax
pop edx
add eax, eax
pop ecx
pop eax
pop edx
pop ebx
pop eax
pop edx
popal
mov edx, dword [ebp - 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp + 0x20]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret