Function at 0x10011be0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005742d
mov eax, dword fs:[0]
push eax
sub esp, 0x18
mov eax, dword [0x10064040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0xf
xor edx, edx
nop
mov al, byte [edx + str.Aui4Vvuj]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10011c2d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10011c10
mov byte [ebp - 0x15], 0
mov edx, 0x1011ea75
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.10046320
mov dword [ebp - 0x1c], 0x46206f4e
mov dword [ebp - 0x18], 0x6873616c
mov byte [ebp - 0x14], 0
mov edx, 0x1011ea70
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.10046320
mov dword [ebp - 0x1c], 0x46206f4e
mov word [ebp - 0x18], 0x676f
mov byte [ebp - 0x16], 0
mov edx, 0x1011ea71
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.10046320
mov ecx, 0xb5
xor edx, edx
nop dword [eax]
mov al, byte [edx + 0x10059da4]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10011cbd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xc
jl 0x10011ca0
mov byte [ebp - 0x14], 0
mov edx, 0x1011ea6e
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.10046320
mov dword [ebp - 0x1c], 0x53206f4e
mov dword [ebp - 0x18], 0x656b6f6d
mov byte [ebp - 0x14], 0
mov edx, 0x100f78ff
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x1c]
call fcn.10046320
mov ecx, 0xb0
xor edx, edx
nop dword [eax + eax]
mov al, byte [edx + 0x10059db4]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10011d2d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10011d10
mov byte [ebp - 0x15], 0
mov edx, 0x1011ea6c
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x20]
call fcn.10046320
mov ecx, 0x96
xor edx, edx
mov al, byte [edx + 0x10059dc0]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x10011d6f
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xe
jl 0x10011d52
mov byte [ebp - 0x16], 0
mov edx, 0x1011ea76
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x24]
call fcn.10046320
mov ecx, 0x5b
xor edx, edx
mov al, byte [edx + 0x10059dd0]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10011db1
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10011d94
mov byte [ebp - 0x15], 0
mov edx, 0x1011ea6f
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x20]
call fcn.10046320
mov dword [ebp - 0x1c], 0x776f6853
mov dword [ebp - 0x18], 0x53504620
mov byte [ebp - 0x14], 0
mov edx, 0x1011ea74
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x1c]
call fcn.10046320
mov dword [ebp - 0x1c], 0x776f6853
mov dword [ebp - 0x18], 0x445548
mov edx, 0x1011ea6b
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x1c]
call fcn.10046320
mov dword [ebp - 0x1c], 0x63617274
mov dword [ebp - 0x18], 0x737265
mov edx, 0x1011ea73
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x1c]
call fcn.10046320
mov ecx, 0xa
xor edx, edx
mov al, byte [edx + str.NymzY_bvGfps]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x10011e5d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xd
jl 0x10011e40
mov byte [ebp - 0x17], 0
mov edx, 0x1011ea77
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x24]
call fcn.10046320
mov ecx, 0x24
xor edx, edx
mov al, byte [edx + str._WGPzLDOI_lC_RY_]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x24], al
and ecx, 0x800000ff
jns 0x10011e9f
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0x10
jl 0x10011e82
mov byte [ebp - 0x14], 0
mov edx, 0x1011ea72
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x24]
call fcn.10046320
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100555b4
mov esp, ebp
pop ebp
ret