Function at 0x1081e16e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xd98
mov eax, 0x1084deee
call fcn.1081f6fd
mov edi, dword [ebp + 0x10]
lea eax, [ebp - 0xc7c]
push 0xc2a
xor ebx, ebx
push ebx
push eax
call fcn.10821f80
add esp, 0xc
mov dword [ebp - 0xc80], ebx
call fcn.1081361c
push eax
lea ecx, [ebp - 0xc80]
call fcn.10810319
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 1
test edi, edi
je 0x1081e5d7
cmp dword [edi + 8], 0x4a
jne 0x1081e5d7
mov esi, dword [edi]
test esi, esi
je 0x1081e5d7
mov eax, dword [esi]
cmp eax, 0x4cc7c
jne 0x1081e5c9
mov esi, dword [esi + 8]
lea edi, [ebp - 0xc7c]
mov ecx, 0x30a
mov dword [ebp - 0xd94], 0x3151794f
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xb53]
mov dword [ebp - 0xd90], 0x304d6d43
push eax
lea eax, [ebp - 0xc7c]
mov dword [ebp - 0xd8c], 0x776b4744
push eax
lea eax, [ebp - 0xc57]
movsw word es:[edi], word [esi]
push eax
mov dword [ebp - 0xd88], 0x37773342
mov dword [ebp - 0xd84], 0x7356424a
mov dword [ebp - 0xd80], 0x6d34424d
mov dword [ebp - 0xd7c], 0x6630424d
mov dword [ebp - 0xd78], 0x34414446
mov dword [ebp - 0xd74], 0x69386a44
mov dword [ebp - 0xd70], 0x79416744
mov dword [ebp - 0xd6c], 0x5130414d
mov dword [ebp - 0xd68], 0x78556948
mov dword [ebp - 0xd64], 0x7a316a41
mov dword [ebp - 0xd60], 0x4f6b4150
mov dword [ebp - 0xd5c], 0x73426a63
mov dword [ebp - 0xd58], 0x69775444
mov dword [ebp - 0xd54], 0x50676d47
mov dword [ebp - 0xd50], 0x4749514e
mov dword [ebp - 0xd4c], 0x706b584f
mov dword [ebp - 0xd48], 0x74496a4d
mov dword [ebp - 0xd44], 0x5767784e
mov dword [ebp - 0xd40], 0x32515145
mov dword [ebp - 0xd3c], 0x78553349
mov dword [ebp - 0xd38], 0x52416961
mov dword [ebp - 0xd34], 0x4b515841
mov dword [ebp - 0xd30], 0x6b737845
mov dword [ebp - 0xd2c], 0x6f4a424b
mov dword [ebp - 0xd28], 0x6b457a4f
mov dword [ebp - 0xd24], 0x6f68444b
mov dword [ebp - 0xd20], 0x42597a66
mov dword [ebp - 0xd1c], 0x79706a4c
mov dword [ebp - 0xd18], 0x69345847
mov dword [ebp - 0xd14], 0x7a567847
mov dword [ebp - 0xd10], 0x69514444
mov dword [ebp - 0xd0c], 0x746c794e
mov dword [ebp - 0xd08], 0x2b674245
mov dword [ebp - 0xd04], 0x51495441
mov dword [ebp - 0xd00], 0x67467a47
mov dword [ebp - 0xcfc], 0x77527846
mov dword [ebp - 0xcf8], 0x79637a4f
mov dword [ebp - 0xcf4], 0x6341424e
mov dword [ebp - 0xcf0], 0x734d6947
mov dword [ebp - 0xcec], 0x6b30524d
mov dword [ebp - 0xce8], 0x4c4d6944
mov dword [ebp - 0xce4], 0x3641544a
mov dword [ebp - 0xce0], 0x2b4a7963
mov dword [ebp - 0xcdc], 0x62517846
mov dword [ebp - 0xcd8], 0x3134544c
mov dword [ebp - 0xcd4], 0x7467484b
mov dword [ebp - 0xcd0], 0x6549414f
mov dword [ebp - 0xccc], 0x31425141
mov dword [ebp - 0xcc8], 0x316b774e
mov dword [ebp - 0xcc4], 0x7a5a7859
mov dword [ebp - 0xcc0], 0x2b386a45
mov dword [ebp - 0xcbc], 0x59595449
mov dword [ebp - 0xcb8], 0x3670334a
mov dword [ebp - 0xcb4], 0x41774250
mov dword [ebp - 0xcb0], 0x424d574b
mov dword [ebp - 0xcac], 0x5430414e
mov dword [ebp - 0xca8], 0x4f675450
mov dword [ebp - 0xca4], 0x3935514e
mov dword [ebp - 0xca0], 0x53636e49
mov dword [ebp - 0xc9c], 0x4c597943
mov dword [ebp - 0xc98], 0x35395146
mov dword [ebp - 0xc94], 0x73774146
mov dword [ebp - 0xc90], 0x576b7a4b
mov dword [ebp - 0xc8c], 0x4141774d
mov word [ebp - 0xc88], 0x4c41
mov byte [ebp - 0xc86], 0x73
push ebx
sub esp, 0xc
mov byte [ebp - 0xc84], bl
mov ecx, esp
lea eax, [ebp - 0xc85]
push dword [ebp - 0xc84]
mov dword [ecx], ebx
push eax
lea eax, [ebp - 0xd94]
mov dword [ecx + 4], ebx
push eax
mov dword [ecx + 8], ebx
call fcn.1080fab3
lea eax, [ebp - 0xda4]
push eax
call fcn.10812c62
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1081cdc3
push eax
lea eax, [ebp - 0xc80]
push eax
call fcn.1081310b
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xda4]
call fcn.1081cc09
push 0x3c
lea eax, [ebp - 0x50]
push ebx
push eax
call fcn.10821f80
pop ecx
pop ecx
lea eax, [ebp - 0xc7c]
mov ecx, esp
push eax
call fcn.10810492
lea ecx, [ebp - 0x50]
call fcn.10810561
lea eax, [ebp - 0xb53]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x20]
call fcn.10811420
lea eax, [ebp - 0x17b]
push eax
lea ecx, [ebp - 0x1c]
call fcn.10811420
lea eax, [ebp - 0x77]
push eax
lea ecx, [ebp - 0x18]
call fcn.10811420
mov esi, dword [ebp - 0xc80]
lea eax, [ebp - 0x50]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0xc84], esp
push esi
call fcn.10810492
push ecx
lea eax, [ebp - 0x94b]
mov byte [ebp - 4], 4
mov ecx, esp
push eax
call fcn.10810404
mov byte [ebp - 4], 3
call fcn.10818b73
add esp, 0xc
call fcn.10829d1b
push 0x64
pop ecx
cdq
idiv ecx
cmp edx, ecx
jg 0x1081e5bc
lea eax, [ebp - 0x50]
push eax
call fcn.108177a1
pop ecx
lea ecx, [ebp - 0x50]
call fcn.108110aa
lea ecx, [esi - 0x10]
jmp 0x1081e5ee
cmp eax, 0x4d835
jne 0x1081e5d7
push ebx
call fcn.1081b73e
pop ecx
push edi
push dword [ebp + 0xc]
push dword [ebp + 8]
push ebx
call dword [sym.imp.USER32.dll_CallNextHookEx]
mov ecx, dword [ebp - 0xc80]
lea ecx, [ecx - 0x10]
call fcn.1081747f
call fcn.1081f64a
ret 0xc