Function at 0x10013dc0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jae 0x100139e7
jmp 0x100139e2
call fcn.100139e9
jae 0x100139e2
add esp, 4
jmp 0x100139ee
dec dword [esp]
jno 0x100139f3
jns 0x100139de
jp 0x100139f7
add esp, 4
popf
jmp 0x100139fe
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x63
xor edx, eax
add eax, edx
sub edx, 0x63
push eax
pop edx
xor edx, 0x129
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x63
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x10013a4d
jmp 0x10013a4f
je 0x10013a4a
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10013a69
jne 0x10013a68
call 0x93052af0
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10013a77
jne 0x10013a77
call 0xd086faae
xor eax, eax
test eax, eax
je 0x10013a80
jne 0x10013a7f
call 0x93052b07
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
sub al, 0x74
sti
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10013a8e
jmp 0x10013a90
je 0x10013a8b
clc
jae 0x10013a95
jl 0x10013ac1
xor eax, 0x64
xor edx, eax
add eax, edx
sub edx, 0x64
push eax
pop edx
xor edx, 0x12c
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x64
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x10013ad8
jmp 0x10013ad3
call 0x10013ada
jae 0x10013ad3
add esp, 4
jmp 0x10013adf
dec dword [esp]
jno 0x10013ae4
jns 0x10013acf
jp 0x10013ae8
add esp, 4
popf
jmp 0x10013aef
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10013b08
jne 0x10013b08
call 0x1fc16e5c
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov dword [ebp - 0xdd8], 0x11c
mov dword [ebp - 0xdd4], 0
mov dword [ebp - 0xdd0], 0
mov dword [ebp - 0xdcc], 0
mov dword [ebp - 0xdc8], 0
push 0x100
push 0
lea edx, [ebp - 0xdc4]
push edx
call fcn.1004f110
add esp, 0xc
xor eax, eax
mov word [ebp - 0xcc4], ax
xor ecx, ecx
mov word [ebp - 0xcc2], cx
xor edx, edx
mov dword [ebp - 0xcc0], edx
push 3
push 0x20
push 3
push 1
push 3
push 2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
mov dword [ebp - 0xde8], eax
mov dword [ebp - 0xde4], edx
mov eax, 6
movzx ecx, ax
mov dword [ebp - 0xdd4], ecx
xor edx, edx
movzx eax, dx
mov dword [ebp - 0xdd0], eax
xor ecx, ecx
mov word [ebp - 0xcc4], cx
mov edx, dword [ebp - 0xde4]
push edx
mov eax, dword [ebp - 0xde8]
push eax
push 0x23
lea ecx, [ebp - 0xdd8]
push ecx
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
test eax, eax
je 0x10013bfc
mov dword [ebp - 0xde0], 1
jmp 0x10013c06
mov dword [ebp - 0xde0], 0
movzx edx, byte [ebp - 0xde0]
test edx, edx
je 0x10014441
cmp dword [0x1044bf00], 0
jne 0x1001402b
xor eax, eax
test eax, eax
je 0x10013c2b
jne 0x10013c2a
call 0x93052cb2
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
aaa
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10013c39
jmp 0x10013c3b
je 0x10013c36
clc
jae 0x10013c40
insd dword es:[edi], dx
aaa
xor eax, 0xf
xor edx, eax
add eax, edx
sub edx, 0xf
push eax
pop edx
xor edx, 0x2d
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0xf
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x10013c80
jmp 0x10013c7b
call 0x10013c82
jae 0x10013c7b
add esp, 4
jmp 0x10013c87
dec dword [esp]
jno 0x10013c8c
jns 0x10013c77
jp 0x10013c90
add esp, 4
popf
jmp 0x10013c97
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10013cb0
jne 0x10013cb0
call 0x1fc17004
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x10013cc6
pop ss
add byte [esi - 0x64], ah
pushf
push 0xa
jae 0x10013cd3
jmp 0x10013cce
call 0x10013cd5
jae 0x10013cce
add esp, 4
jmp 0x10013cda
dec dword [esp]
jno 0x10013cdf
jns 0x10013cca
jp 0x10013ce3
add esp, 4
popf
jmp 0x10013cea
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x11
xor edx, eax
add eax, edx
sub edx, 0x11
push eax
pop edx
xor edx, 0x33
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x11
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x10013d36
jmp 0x10013d38
je 0x10013d33
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10013d52
jne 0x10013d51
call 0x93052dd9
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10013d60
jne 0x10013d60
call 0xd086fd97
xor eax, eax
test eax, eax
je 0x10013d69
jne 0x10013d68
call 0x93052df0
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
arpl word [ebx + edi*8 - 8], si
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10013d77
jmp 0x10013d79
je 0x10013d74
clc
jae 0x10013d7e
jmp 0x22f1c0e4
xor eax, 0x12
xor edx, eax
add eax, edx
sub edx, 0x12
push eax
pop edx
xor edx, 0x36
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x12
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x10013dbe
jmp 0x10013db9
call 0x10013dc0
jae 0x10013db9
add esp, 4
jmp 0x10013dc5
dec dword [esp]
jno 0x10013dca
jns 0x10013db5
jp 0x10013dce
add esp, 4
popf
jmp 0x10013dd5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10013dee
jne 0x10013dee
call 0x1fc17142
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x38], 0x4d
mov byte [ebp - 0x37], 0x61
mov byte [ebp - 0x36], 0x63
mov byte [ebp - 0x35], 0x72
mov byte [ebp - 0x34], 0x6f
mov byte [ebp - 0x33], 0x20
mov byte [ebp - 0x32], 0x63
mov byte [ebp - 0x31], 0x68
mov byte [ebp - 0x30], 0x65
mov byte [ebp - 0x2f], 0x63
mov byte [ebp - 0x2e], 0x6b
mov byte [ebp - 0x2d], 0x65
mov byte [ebp - 0x2c], 0x72
mov byte [ebp - 0x2b], 0x20
mov byte [ebp - 0x2a], 0x69
mov byte [ebp - 0x29], 0x73
mov byte [ebp - 0x28], 0x20
mov byte [ebp - 0x27], 0x6e
mov byte [ebp - 0x26], 0x6f
mov byte [ebp - 0x25], 0x74
mov byte [ebp - 0x24], 0x20
mov byte [ebp - 0x23], 0x69
mov byte [ebp - 0x22], 0x6e
mov byte [ebp - 0x21], 0x69
mov byte [ebp - 0x20], 0x74
mov byte [ebp - 0x1f], 0x69
mov byte [ebp - 0x1e], 0x61
mov byte [ebp - 0x1d], 0x6c
mov byte [ebp - 0x1c], 0x69
mov byte [ebp - 0x1b], 0x7a
mov byte [ebp - 0x1a], 0x65
mov byte [ebp - 0x19], 0x64
mov byte [ebp - 0x18], 0x20
mov byte [ebp - 0x17], 0x6f
mov byte [ebp - 0x16], 0x72
mov byte [ebp - 0x15], 0x20
mov byte [ebp - 0x14], 0x74
mov byte [ebp - 0x13], 0x65
mov byte [ebp - 0x12], 0x72
mov byte [ebp - 0x11], 0x6d
mov byte [ebp - 0x10], 0x69
mov byte [ebp - 0xf], 0x6e
mov byte [ebp - 0xe], 0x61
mov byte [ebp - 0xd], 0x74
mov byte [ebp - 0xc], 0x65
mov byte [ebp - 0xb], 0x64
mov byte [ebp - 0xa], 0x2e
mov byte [ebp - 9], 0x25
mov byte [ebp - 8], 0x64
mov byte [ebp - 7], 0
push 1
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x4a0]
push ecx
call fcn.1000de50
add esp, 0xc
lea edx, [ebp - 0x38]
push edx
call fcn.10032ab0
add esp, 4
xor eax, eax
test eax, eax
je 0x10013ef1
jne 0x10013ef0
call 0x93052f78
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
dec ebp
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10013eff
jmp 0x10013f01
je 0x10013efc
clc
jae 0x10013f06
cmp byte [ebp - 0x7d], cl
invalid
xor eax, 0x16
xor edx, eax
add eax, edx
sub edx, 0x16
push eax
pop edx
xor edx, 0x42
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x16
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x10013f46
jmp 0x10013f41
call 0x10013f48
jae 0x10013f41
add esp, 4
jmp 0x10013f4d
dec dword [esp]
jno 0x10013f52
jns 0x10013f3d
jp 0x10013f56
add esp, 4
popf
jmp 0x10013f5d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10013f76
jne 0x10013f76
call 0x1fc172ca
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.10023ce0
clc
jae 0x10013f91
fist word [esi]
pushf
push 0xa
jae 0x10013f9e
jmp 0x10013f99
call 0x10013fa0
jae 0x10013f99
add esp, 4
jmp 0x10013fa5
dec dword [esp]
jno 0x10013faa
jns 0x10013f95
jp 0x10013fae
add esp, 4
popf
jmp 0x10013fb5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x18
xor edx, eax
add eax, edx
sub edx, 0x18
push eax
pop edx
xor edx, 0x48
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x18
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x10014001
jmp 0x10014003
je 0x10013ffe
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1001401d
jne 0x1001401c
call 0x930530a4
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1001402b
jne 0x1001402b
call 0xcf057db2
inc esp
adc byte [eax], al
cmp dword [0x1044bf04], 0
jne 0x10014441
xor eax, eax
test eax, eax
je 0x10014041
jne 0x10014040
call 0x930530c8
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
aaa
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001404f
jmp 0x10014051
je 0x1001404c
clc
jae 0x10014056
insd dword es:[edi], dx
aaa
xor eax, 0xf
xor edx, eax
add eax, edx
sub edx, 0xf
push eax
pop edx
xor edx, 0x2d
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0xf
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x10014096
jmp 0x10014091
call 0x10014098
jae 0x10014091
add esp, 4
jmp 0x1001409d
dec dword [esp]
jno 0x100140a2
jns 0x1001408d
jp 0x100140a6
add esp, 4
popf
jmp 0x100140ad
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100140c6
jne 0x100140c6
call 0x1fc1741a
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x100140dc
pop ss
add byte [esi - 0x64], ah
pushf
push 0xa
jae 0x100140e9
jmp 0x100140e4
call 0x100140eb
jae 0x100140e4
add esp, 4
jmp 0x100140f0
dec dword [esp]
jno 0x100140f5
jns 0x100140e0
jp 0x100140f9
add esp, 4
popf
jmp 0x10014100
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x11
xor edx, eax
add eax, edx
sub edx, 0x11
push eax
pop edx
xor edx, 0x33
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x11
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1001414c
jmp 0x1001414e
je 0x10014149
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10014168
jne 0x10014167
call 0x930531ef
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10014176
jne 0x10014176
call 0xd08701ad
xor eax, eax
test eax, eax
je 0x1001417f
jne 0x1001417e
call 0x93053206
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
arpl word [ebx + edi*8 - 8], si
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1001418d
jmp 0x1001418f
je 0x1001418a
clc
jae 0x10014194
jmp 0x22f1c4fa
xor eax, 0x12
xor edx, eax
add eax, edx
sub edx, 0x12
push eax
pop edx
xor edx, 0x36
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x12
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x100141d4
jmp 0x100141cf
call 0x100141d6
jae 0x100141cf
add esp, 4
jmp 0x100141db
dec dword [esp]
jno 0x100141e0
jns 0x100141cb
jp 0x100141e4
add esp, 4
popf
jmp 0x100141eb
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10014204
jne 0x10014204
call 0x1fc17558
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0x6c], 0x4d
mov byte [ebp - 0x6b], 0x61
mov byte [ebp - 0x6a], 0x63
mov byte [ebp - 0x69], 0x72
mov byte [ebp - 0x68], 0x6f
mov byte [ebp - 0x67], 0x20
mov byte [ebp - 0x66], 0x63
mov byte [ebp - 0x65], 0x68
mov byte [ebp - 0x64], 0x65
mov byte [ebp - 0x63], 0x63
mov byte [ebp - 0x62], 0x6b
mov byte [ebp - 0x61], 0x65
mov byte [ebp - 0x60], 0x72
mov byte [ebp - 0x5f], 0x20
mov byte [ebp - 0x5e], 0x69
mov byte [ebp - 0x5d], 0x73
mov byte [ebp - 0x5c], 0x20
mov byte [ebp - 0x5b], 0x6e
mov byte [ebp - 0x5a], 0x6f
mov byte [ebp - 0x59], 0x74
mov byte [ebp - 0x58], 0x20
mov byte [ebp - 0x57], 0x69
mov byte [ebp - 0x56], 0x6e
mov byte [ebp - 0x55], 0x69
mov byte [ebp - 0x54], 0x74
mov byte [ebp - 0x53], 0x69
mov byte [ebp - 0x52], 0x61
mov byte [ebp - 0x51], 0x6c
mov byte [ebp - 0x50], 0x69
mov byte [ebp - 0x4f], 0x7a
mov byte [ebp - 0x4e], 0x65
mov byte [ebp - 0x4d], 0x64
mov byte [ebp - 0x4c], 0x20
mov byte [ebp - 0x4b], 0x6f
mov byte [ebp - 0x4a], 0x72
mov byte [ebp - 0x49], 0x20
mov byte [ebp - 0x48], 0x74
mov byte [ebp - 0x47], 0x65
mov byte [ebp - 0x46], 0x72
mov byte [ebp - 0x45], 0x6d
mov byte [ebp - 0x44], 0x69
mov byte [ebp - 0x43], 0x6e
mov byte [ebp - 0x42], 0x61
mov byte [ebp - 0x41], 0x74
mov byte [ebp - 0x40], 0x65
mov byte [ebp - 0x3f], 0x64
mov byte [ebp - 0x3e], 0x2e
mov byte [ebp - 0x3d], 0x25
mov byte [ebp - 0x3c], 0x64
mov byte [ebp - 0x3b], 0
push 2
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x8a0]
push ecx
call fcn.1000de50
add esp, 0xc
lea edx, [ebp - 0x6c]
push edx
call fcn.10032ab0
add esp, 4
xor eax, eax
test eax, eax
je 0x10014307
jne 0x10014306
call 0x9305338e
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
dec ebp
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10014315
jmp 0x10014317
je 0x10014312
clc
jae 0x1001431c
cmp byte [ebp - 0x7d], cl
invalid
xor eax, 0x16
xor edx, eax
add eax, edx
sub edx, 0x16
push eax
pop edx
xor edx, 0x42
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x16
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x1001435c
jmp 0x10014357
call 0x1001435e
jae 0x10014357
add esp, 4
jmp 0x10014363
dec dword [esp]
jno 0x10014368
jns 0x10014353
jp 0x1001436c
add esp, 4
popf
jmp 0x10014373
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1001438c
jne 0x1001438c
call 0x1fc176e0
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.10023ce0
clc
jae 0x100143a7
fist word [esi]
pushf
push 0xa
jae 0x100143b4
jmp 0x100143af
call 0x100143b6
jae 0x100143af
add esp, 4
jmp 0x100143bb
dec dword [esp]
jno 0x100143c0
jns 0x100143ab
jp 0x100143c4
add esp, 4
popf
jmp 0x100143cb
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x18
xor edx, eax
add eax, edx
sub edx, 0x18
push eax
pop edx
xor edx, 0x48
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x18
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x10014417
jmp 0x10014419
je 0x10014414
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10014433
jne 0x10014432
call 0x930534ba
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10014441
jne 0x10014441
call 0xcf0181c8
inc esp
adc byte [eax], al
cmp dword [0x1044bf00], 0
jne 0x10014457
cmp dword [0x1044bf04], 0
je 0x100148f9
push 0
push 0
push 0
lea eax, [ebp - 0xcbc]
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x1001448a
lea ecx, [ebp - 0xcbc]
push ecx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea edx, [ebp - 0xcbc]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x10014457
xor eax, eax
test eax, eax
je 0x10014493
jne 0x10014492
call 0x9305351a
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
aaa
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100144a1
jmp 0x100144a3
je 0x1001449e
clc
jae 0x100144a8
insd dword es:[edi], dx
aaa
xor eax, 0xf
xor edx, eax
add eax, edx
sub edx, 0xf
push eax
pop edx
xor edx, 0x2d
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0xf
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x100144e8
jmp 0x100144e3
call 0x100144ea
jae 0x100144e3
add esp, 4
jmp 0x100144ef
dec dword [esp]
jno 0x100144f4
jns 0x100144df
jp 0x100144f8
add esp, 4
popf
jmp 0x100144ff
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10014518
jne 0x10014518
call 0x1fc1786c
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x1001452e
pop ss
add byte [esi - 0x64], ah
pushf
push 0xa
jae 0x1001453b
jmp 0x10014536
call 0x1001453d
jae 0x10014536
add esp, 4
jmp 0x10014542
dec dword [esp]
jno 0x10014547
jns 0x10014532
jp 0x1001454b
add esp, 4
popf
jmp 0x10014552
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x11
xor edx, eax
add eax, edx
sub edx, 0x11
push eax
pop edx
xor edx, 0x33
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x11
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1001459e
jmp 0x100145a0
je 0x1001459b
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x100145ba
jne 0x100145b9
call 0x93053641
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x100145c8
jne 0x100145c8
call 0xd08705ff
xor eax, eax
test eax, eax
je 0x100145d1
jne 0x100145d0
call 0x93053658
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
arpl word [ebx + edi*8 - 8], si
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100145df
jmp 0x100145e1
je 0x100145dc
clc
jae 0x100145e6
jmp 0x22f1c94c
xor eax, 0x12
xor edx, eax
add eax, edx
sub edx, 0x12
push eax
pop edx
xor edx, 0x36
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x12
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x10014626
jmp 0x10014621
call 0x10014628
jae 0x10014621
add esp, 4
jmp 0x1001462d
dec dword [esp]
jno 0x10014632
jns 0x1001461d
jp 0x10014636
add esp, 4
popf
jmp 0x1001463d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10014656
jne 0x10014656
call 0x1fc179aa
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov byte [ebp - 0xa0], 0x4d
mov byte [ebp - 0x9f], 0x61
mov byte [ebp - 0x9e], 0x63
mov byte [ebp - 0x9d], 0x72
mov byte [ebp - 0x9c], 0x6f
mov byte [ebp - 0x9b], 0x20
mov byte [ebp - 0x9a], 0x63
mov byte [ebp - 0x99], 0x68
mov byte [ebp - 0x98], 0x65
mov byte [ebp - 0x97], 0x63
mov byte [ebp - 0x96], 0x6b
mov byte [ebp - 0x95], 0x65
mov byte [ebp - 0x94], 0x72
mov byte [ebp - 0x93], 0x20
mov byte [ebp - 0x92], 0x69
mov byte [ebp - 0x91], 0x73
mov byte [ebp - 0x90], 0x20
mov byte [ebp - 0x8f], 0x6e
mov byte [ebp - 0x8e], 0x6f
mov byte [ebp - 0x8d], 0x74
mov byte [ebp - 0x8c], 0x20
mov byte [ebp - 0x8b], 0x69
mov byte [ebp - 0x8a], 0x6e
mov byte [ebp - 0x89], 0x69
mov byte [ebp - 0x88], 0x74
mov byte [ebp - 0x87], 0x69
mov byte [ebp - 0x86], 0x61
mov byte [ebp - 0x85], 0x6c
mov byte [ebp - 0x84], 0x69
mov byte [ebp - 0x83], 0x7a
mov byte [ebp - 0x82], 0x65
mov byte [ebp - 0x81], 0x64
mov byte [ebp - 0x80], 0x20
mov byte [ebp - 0x7f], 0x6f
mov byte [ebp - 0x7e], 0x72
mov byte [ebp - 0x7d], 0x20
mov byte [ebp - 0x7c], 0x74
mov byte [ebp - 0x7b], 0x65
mov byte [ebp - 0x7a], 0x72
mov byte [ebp - 0x79], 0x6d
mov byte [ebp - 0x78], 0x69
mov byte [ebp - 0x77], 0x6e
mov byte [ebp - 0x76], 0x61
mov byte [ebp - 0x75], 0x74
mov byte [ebp - 0x74], 0x65
mov byte [ebp - 0x73], 0x64
mov byte [ebp - 0x72], 0x2e
mov byte [ebp - 0x71], 0x25
mov byte [ebp - 0x70], 0x64
mov byte [ebp - 0x6f], 0
push 3
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0xca0]
push ecx
call fcn.1000de50
add esp, 0xc
lea edx, [ebp - 0xa0]
push edx
call fcn.10032ab0
add esp, 4
xor eax, eax
test eax, eax
je 0x100147bf
jne 0x100147be
call 0x93053846
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
dec ebp
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100147cd
jmp 0x100147cf
je 0x100147ca
clc
jae 0x100147d4
cmp byte [ebp - 0x7d], cl
invalid
xor eax, 0x16
xor edx, eax
add eax, edx
sub edx, 0x16
push eax
pop edx
xor edx, 0x42
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x16
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x10014814
jmp 0x1001480f
call 0x10014816
jae 0x1001480f
add esp, 4
jmp 0x1001481b
dec dword [esp]
jno 0x10014820
jns 0x1001480b
jp 0x10014824
add esp, 4
popf
jmp 0x1001482b
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10014844
jne 0x10014844
call 0x1fc17b98
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.10023ce0
clc
jae 0x1001485f
fist word [esi]
pushf
push 0xa
jae 0x1001486c
jmp 0x10014867
call 0x1001486e
jae 0x10014867
add esp, 4
jmp 0x10014873
dec dword [esp]
jno 0x10014878
jns 0x10014863
jp 0x1001487c
add esp, 4
popf
jmp 0x10014883
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x18
xor edx, eax
add eax, edx
sub edx, 0x18
push eax
pop edx
xor edx, 0x48
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x18
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x100148cf
jmp 0x100148d1
je 0x100148cc
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x100148eb
jne 0x100148ea
call 0x93053972
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x100148f9
jne 0x100148f9
call 0x54c0499e
adc byte [eax - 1], dl
adc eax, sym.imp.USER32.dll_UnhookWindowsHookEx
mov eax, dword [0x1044bf00]
push eax
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov ecx, dword [0x1044bf04]
push ecx
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004ce42
mov esp, ebp
pop ebp
ret 4