Function at 0x10011700
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x34
mov eax, dword [0x100290dc]
xor eax, esp
mov dword [esp + 0x30], eax
mov dword [esp], ecx
mov byte [esp + 0x2c], 0
mov dword [esp + 0x28], 0x7d7d7523
mov dword [esp + 0x24], 0x27267d74
mov dword [esp + 0x20], 0x6367745e
mov eax, dword [esp]
lea eax, [esp + 0x20]
push eax
call fcn.1000dea0
mov eax, 0x1ede5bde
jmp 0x10011760
cmp dword [0x10029a28], 0xa
cmovl eax, ebx
setl dh
xor dh, dl
cmovne eax, ecx
nop dword [eax + eax]
cmp eax, 0x321dfb33
jg 0x100117e0
cmp eax, 0xdc04ed5f
jg 0x10011820
cmp eax, 0x913c544a
jle 0x1001189d
cmp eax, 0x913c544b
je 0x1001199d
cmp eax, 0xa2902959
je 0x100119d2
cmp eax, 0xbfffe9d8
jne 0x10011760
lea eax, [esp + 0x10]
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov eax, dword [0x10029a24]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
mov ecx, 0xdd60e8f0
mov eax, 0x784f8068
mov ebx, 0xdd60e8f0
cmp edx, 0xffffffff
sete dl
je 0x10011a63
mov ebx, 0x784f8068
jmp 0x10011a63
cmp eax, 0x61b414f7
jle 0x10011860
cmp eax, 0x72e46e21
jle 0x100118bd
cmp eax, 0x72e46e22
je 0x100119dc
cmp eax, 0x74cf829e
je 0x100119ea
cmp eax, 0x784f8068
jne 0x10011760
mov eax, 0xbfffe9d8
jmp 0x10011760
cmp eax, 0xdfa97f89
jle 0x10011921
cmp eax, 0xdfa97f8a
je 0x10011a2e
cmp eax, 0xf43179a8
je 0x10011a38
cmp eax, 0x1ede5bde
jne 0x10011760
mov eax, 0x649a3a5e
jmp 0x10011760
cmp eax, 0x4b609699
jle 0x10011941
cmp eax, 0x4b60969a
je 0x10011a7a
cmp eax, 0x5d0b84a0
jne 0x10011ad9
push dword [esp + 4]
push dword [esp + 0xc]
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [esp + 0xc], eax
mov eax, 0x72e46e22
jmp 0x10011760
cmp eax, 0x84f3c757
je 0x10011a84
cmp eax, 0x8b2eea0a
jne 0x10011760
mov eax, 0x74cf829e
jmp 0x10011760
cmp eax, 0x61b414f8
je 0x10011a8e
cmp eax, 0x649a3a5e
jne 0x10011760
lea eax, [esp + 0x20]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, eax
mov byte [esp + 0x1c], 0
mov dword [esp + 0x18], 0x50697465
mov dword [esp + 0x14], 0x645c7465
mov dword [esp + 0x10], 0x70746756
mov eax, dword [esp]
lea eax, [esp + 0x10]
push eax
call fcn.1000dea0
mov eax, 0xdc04ed60
test edi, edi
je 0x10011760
mov eax, 0x321dfb34
jmp 0x10011760
cmp eax, 0xdc04ed60
je 0x10011a98
cmp eax, 0xdd60e8f0
jne 0x10011760
mov eax, 0x5d0b84a0
jmp 0x10011760
cmp eax, 0x321dfb34
je 0x10011aa4
cmp eax, 0x34c3e626
jne 0x10011760
mov eax, dword [0x10029a24]
mov ecx, dword [0x10029a28]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0x74cf829e
mov ebx, 0x74cf829e
jne 0x1001198c
mov ebx, 0x8b2eea0a
cmp edx, 0xffffffff
cmovne eax, ebx
cmp ecx, 0xa
cmovge eax, ebx
jmp 0x10011760
mov eax, dword [0x10029a24]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
mov ecx, 0xf43179a8
mov eax, 0x61b414f8
mov ebx, 0xf43179a8
cmp edx, 0xffffffff
sete dl
je 0x10011746
mov ebx, 0x61b414f8
jmp 0x10011746
mov eax, 0x34c3e626
jmp 0x10011760
mov eax, 0xa2902959
mov esi, dword [esp + 0xc]
jmp 0x10011760
mov eax, dword [0x10029a24]
mov ecx, dword [0x10029a28]
lea edx, [eax + 1]
imul edx, eax
mov ebx, edx
xor ebx, 0xfffffffe
test ebx, edx
sete al
cmp ecx, 0xa
setl ah
xor ah, al
mov eax, 0xdfa97f8a
mov ebp, 0xdfa97f8a
jne 0x10011a1e
mov ebp, 0x8b2eea0a
test ebx, edx
cmovne eax, ebp
cmp ecx, 0xa
cmovge eax, ebp
jmp 0x10011760
mov eax, 0x5d35d19e
jmp 0x10011760
mov eax, dword [0x10029a24]
lea edx, [eax + 1]
imul edx, eax
mov ebp, edx
xor ebp, 0xfffffffe
mov ecx, 0x4b60969a
mov eax, 0x61b414f8
mov ebx, 0x4b60969a
test ebp, edx
sete dl
je 0x10011a63
mov ebx, 0x61b414f8
cmp dword [0x10029a28], 0xa
cmovl eax, ebx
setl dh
xor dl, dh
cmovne eax, ecx
jmp 0x10011760
mov eax, 0x84f3c757
jmp 0x10011760
mov eax, 0xa2902959
jmp 0x10011760
mov eax, 0xf43179a8
jmp 0x10011760
mov eax, 0x913c544b
xor esi, esi
jmp 0x10011760
mov eax, dword [0x10029a24]
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
mov ecx, 0xbfffe9d8
mov eax, 0x784f8068
mov ebx, 0xbfffe9d8
cmp edx, 0xffffffff
sete dl
je 0x10011746
mov ebx, 0x784f8068
jmp 0x10011746
cmp eax, 0x5d35d19e
jne 0x10011760
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.100151d1
mov eax, esi
add esp, 0x34
pop esi
pop edi
pop ebx
pop ebp
ret