Function at 0x10011d10
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x10051040]
xor eax, ebp
mov dword [ebp - 4], eax
sub dword [ebp + 0xc], 1
push ebx
push esi
push edi
jne 0x10011f5a
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
call edi
mov ecx, dword [0x10052570]
imul esi, eax
mov dword [0x100539ac], ecx
mov dword [0x1005936c], esi
test ecx, ecx
jne 0x10011d7b
imul esi, esi, 0x343fd
add esi, 0x269ec3
mov dword [0x1005936c], esi
shr esi, 0x10
and esi, 0x7fff
call edi
imul eax, esi
mov dword [0x100539ac], eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, 0x100525a0
mov ebx, dword [eax + 0x3c]
add ebx, eax
nop dword [eax]
mov eax, dword [ebx + 8]
cmp eax, dword [edi]
jne 0x10011f72
movups xmm0, xmmword [edi]
mov esi, dword [0x100524bc]
push 0
movups xmmword [esi], xmm0
movups xmm0, xmmword [edi + 0x10]
movups xmmword [esi + 0x10], xmm0
movups xmm0, xmmword [edi + 0x20]
movups xmmword [esi + 0x20], xmm0
movups xmm0, xmmword [edi + 0x30]
movups xmmword [esi + 0x30], xmm0
movq xmm0, qword [edi + 0x40]
movq qword [esi + 0x40], xmm0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [esi + 0x44], eax
mov ecx, dword [eax + 0x3c]
mov al, byte [ecx + eax + 0x5e]
shr al, 6
and al, 1
xor ecx, ecx
mov byte [esi + 0x40], al
lea eax, [esi + 8]
nop dword [eax + eax]
cmp dword [eax], 0
je 0x10011f72
inc ecx
add eax, 4
cmp ecx, 0xe
jb 0x10011df0
push 0
push 0
push 0
call fcn.10011c40
mov byte [ebp - 0x34], 0x71
xor edx, edx
mov byte [ebp - 0x33], 0x52
mov ebx, 0x2e5
mov byte [ebp - 0x32], 0x5d
mov byte [ebp - 0x31], 0x72
mov byte [ebp - 0x30], 0xbc
mov byte [ebp - 0x2f], 0xb5
mov byte [ebp - 0x2e], 0xa2
mov byte [ebp - 0x2d], 0xaf
mov byte [ebp - 0x2c], 0x91
mov byte [ebp - 0x2b], 0x8b
mov byte [ebp - 0x2a], 0x85
mov byte [ebp - 0x29], 0xbc
mov byte [ebp - 0x28], 0xed
mov byte [ebp - 0x27], 0xe6
mov byte [ebp - 0x26], 0xdd
mov byte [ebp - 0x25], 0xfb
mov byte [ebp - 0x24], 0xd9
mov byte [ebp - 0x23], 0xcf
mov byte [ebp - 0x22], 0xd9
mov byte [ebp - 0x21], 0xd9
mov byte [ebp - 0x20], 0x2a
mov byte [ebp - 0x1f], 0x23
mov byte [ebp - 0x1e], 0x2f
mov byte [ebp - 0x1d], 5
mov byte [ebp - 0x1c], 0x3a
mov byte [ebp - 0x1b], 0x30
mov byte [ebp - 0x1a], 0x47
mov al, byte [ebp - 0x34]
mov dword [ebp - 0xc], 0xfffffff6
nop word [eax + eax]
mov al, byte [ebp + edx - 0x34]
lea edx, [edx + 1]
mov cl, bl
add ebx, 8
xor cl, byte [ebp - 0xc]
dec dword [ebp - 0xc]
xor cl, al
xor cl, 0x2e
mov byte [ebp + edx - 0x35], cl
cmp ebx, 0x3bd
jb 0x10011e90
mov byte [ebp - 0x1a], 0
xor edx, edx
mov byte [ebp - 0x18], 0x53
mov ebx, 0x2e5
mov byte [ebp - 0x17], 0x42
mov byte [ebp - 0x16], 0x4b
mov byte [ebp - 0x15], 0x4c
mov byte [ebp - 0x14], 0xb5
mov byte [ebp - 0x13], 0xfc
mov byte [ebp - 0x12], 0xaf
mov byte [ebp - 0x11], 0xb0
mov byte [ebp - 0x10], 0x89
mov byte [ebp - 0xf], 0xee
mov al, byte [ebp - 0x18]
mov dword [ebp - 0xc], 0xfffffff6
mov al, byte [ebp + edx - 0x18]
lea edx, [edx + 1]
mov cl, bl
add ebx, 8
xor cl, byte [ebp - 0xc]
dec dword [ebp - 0xc]
xor cl, al
xor cl, 0x2e
mov byte [ebp + edx - 0x19], cl
cmp ebx, 0x335
jb 0x10011ef0
lea eax, [ebp - 0x18]
mov byte [ebp - 0xf], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea ecx, [ebp - 0x34]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, eax
xor ecx, ecx
mov byte [ebp + ecx - 0x18], 0
inc ecx
cmp ecx, 0xa
jb 0x10011f30
xor eax, eax
nop dword [eax]
mov byte [ebp + eax - 0x34], 0
inc eax
cmp eax, 0x1b
jb 0x10011f40
lea eax, [ebp - 8]
push eax
push 0
push fcn.10011c40
push 0
call edx
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002078c
mov esp, ebp
pop ebp
ret 0xc
add edi, 0x48
cmp edi, 0x10052798
jne 0x10011d90
call fcn.100014a0
test al, al
jne 0x10011e02
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1002078c
mov esp, ebp
pop ebp
ret 0xc