Function at 0xb11a20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push edi
push 0xe
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.00b026c0
add esp, 0xc
jae 0xb11a3b
jle 0xb11a3d
and edi, edi
jle 0xb11a4c
nop
jle 0xb11a44
jl 0xb11a46
jl 0xb11a48
jg 0xb11a4c
mov edx, 0xc666b0db
inc ebp
in al, dx
dec eax
mov al, 0x66
mov byte [ebp - 0x14], 0x48
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x46
mov byte [ebp - 0x13], al
mov byte [ebp - 0xe], 0x74
mov byte [ebp - 0x12], 0x75
mov byte [ebp - 0xd], 0x6a
mov byte [ebp - 0x11], 0x57
mov byte [ebp - 0xc], 0x70
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], 0x6f
mov byte [ebp - 7], 0
mov byte [ebp - 9], 0x79
mov byte [ebp - 8], 0x58
jmp 0xb11a86
cmc
ja 0xb11aae
pushf
xor ebx, 0x1ff6
xor ebx, 0x1ff6
lea ecx, [ecx + 0x492b]
lea ecx, [ecx - 0x492b]
stc
cmc
popf
jae 0xb11aa9
mov esp, esp
jbe 0xb11aae
mov ebx, 0x8aec4d8a
inc ebp
int1
mov cl, byte [ebp - 0x14]
mov al, byte [ebp - 0xf]
mov bl, byte [ebp - 0x13]
mov dl, byte [ebp - 0xe]
dec cl
dec al
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0xf], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0x13], bl
mov bl, byte [ebp - 0x11]
dec cl
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 0xc]
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x10]
dec al
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 9]
dec cl
mov byte [ebp - 0xc], dl
mov dl, byte [ebp - 8]
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xa]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xb], al
mov byte [ebp - 9], bl
mov byte [ebp - 8], dl
mov byte [ebp - 0xa], cl
rol esp, 0
shr ecx, 0
jle 0xb11b33
pushf
rol esi, 9
rol esi, 0x17
ja 0xb11b28
mov edi, edi
popf
jo 0xb11b2e
lea edx, [edx]
jg 0xb11b33
mov ecx, 0xff72f8e8
dec dword [ebx + 0x75f685f0]
or dword [edi + 0x5e], ebx
call fcn.00b08e30
mov esi, eax
test esi, esi
jne 0xb11b47
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push edx
pop edx
rol ecx, 0x1c
ror ecx, 0x1c
xor edx, dword [esp]
xor edx, dword [esp]
and esp, 0xffffffff
je 0xb11b7c
pushf
xchg esp, esp
test edi, 0x7f06
add ecx, 0
je 0xb11b69
popf
lea ebx, [ebx + 0x656]
lea ebx, [ebx - 0x656]
xchg ecx, eax
xchg ecx, eax
jne 0xb11b7c
add eax, 0x51ec4d8d
lea ecx, [ebp - 0x14]
push ecx
push esi
call fcn.00afefe0
push 0xe
lea edx, [ebp - 0x14]
mov esi, eax
push 0
push edx
mov dword [ebp - 4], esi
call fcn.00b026c0
add esp, 0xc
clc
test ecx, 0x5f02
jg 0xb11bb0
js 0xb11ba6
lea edx, [edx]
mov ebx, ebx
xchg esp, esp
jle 0xb11bb0
mov edi, 0x75f685d6
or esi, dword [ebx]
rcr byte [edi + 0x5e], 0x5b
test esi, esi
jne 0xb11bbf
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
xchg ebx, edi
xchg ebx, edi
je 0xb11bd1
jl 0xb11bc7
xchg ecx, eax
xchg ecx, eax
js 0xb11bcb
jo 0xb11bcd
jne 0xb11bd1
mov edi, 0xe9e85647
cwde
add byte [eax], al
push esi
call fcn.00b1b4c0
test dword [esp + 0x10], edi
dec edx
inc edx
jbe 0xb11bdf
je 0xb11bed
jbe 0xb11be3
jo 0xb11be5
jb 0xb11be7
jbe 0xb11be9
jne 0xb11bed
mov esi, 0x8d0e6a7d
inc ebp
in al, dx
push 0xe
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.00b026c0
add esp, 0x10
or esp, 0
and esp, 0xffffffff
add edx, 0
mov esp, esp
jae 0xb11c29
pushf
nop
push ecx
add ecx, 0x2921
ror ecx, 9
pop ecx
xchg esp, esp
xchg edx, ebx
xchg edx, ebx
popf
lea esi, [esi]
jno 0xb11c24
lea edx, [edx]
jb 0xb11c29
lcall 0x48ec, 0x45c666b0
mov al, 0x66
mov byte [ebp - 0x14], 0x48
mov byte [ebp - 0xf], 0x73
mov byte [ebp - 0xa], 0x46
mov byte [ebp - 0x13], al
mov byte [ebp - 0xe], 0x74
mov byte [ebp - 0x12], 0x75
mov byte [ebp - 0xd], 0x6a
mov byte [ebp - 0x11], 0x57
mov byte [ebp - 0xc], 0x70
mov byte [ebp - 0x10], al
mov byte [ebp - 0xb], 0x6f
mov byte [ebp - 7], 0
mov byte [ebp - 9], 0x79
mov byte [ebp - 8], 0x42
neg eax
neg eax
cmp edi, 0x6949
add edx, 0
add eax, 0x5ade
sub eax, 0x5ade
jle 0xb11c8d
pushf
ja 0xb11c7e
std
cld
jl 0xb11c82
popf
xchg edi, eax
xchg edi, eax
xchg edi, ecx
xchg edi, ecx
jg 0xb11c8d
add eax, 0x8aec4d8a
inc ebp
int1
mov cl, byte [ebp - 0x14]
mov al, byte [ebp - 0xf]
mov bl, byte [ebp - 0x13]
mov dl, byte [ebp - 0xe]
dec cl
dec al
mov byte [ebp - 0x14], cl
mov cl, byte [ebp - 0x12]
dec bl
mov byte [ebp - 0xf], al
mov al, byte [ebp - 0xd]
dec dl
mov byte [ebp - 0x13], bl
mov bl, byte [ebp - 0x11]
dec cl
mov byte [ebp - 0xe], dl
mov dl, byte [ebp - 0xc]
mov byte [ebp - 0x12], cl
mov cl, byte [ebp - 0x10]
dec al
dec bl
mov byte [ebp - 0xd], al
mov al, byte [ebp - 0xb]
dec dl
mov byte [ebp - 0x11], bl
mov bl, byte [ebp - 9]
dec cl
mov byte [ebp - 0xc], dl
mov dl, byte [ebp - 8]
mov byte [ebp - 0x10], cl
mov cl, byte [ebp - 0xa]
dec al
dec bl
dec dl
dec cl
mov byte [ebp - 0xb], al
mov byte [ebp - 9], bl
mov byte [ebp - 8], dl
mov byte [ebp - 0xa], cl
jnp 0xb11cf7
je 0xb11d0b
lea esi, [esi + 0x10a1]
lea esi, [esi - 0x10a1]
jo 0xb11d07
jne 0xb11d0b
mov esp, 0x9f98a150
scasd eax, dword es:[edi]
add byte [ebp - 0x3ed98b40], al
les eax, [eax]
mov eax, dword [0xaf9f98]
test eax, eax
je 0xb11d3a
rol esp, 0
rol ebx, 0xb
ror ebx, 0xb
jno 0xb11d26
xchg esi, edi
xchg esi, edi
jo 0xb11d26
add eax, 0x9f98158b
scasd eax, dword es:[edi]
add byte [ebp + 0x5251ec4d], cl
mov edx, dword [0xaf9f98]
lea ecx, [ebp - 0x14]
push ecx
push edx
call fcn.00afefe0
mov ebx, eax
jmp 0xb11d3d
mov ebx, dword [ebp + 8]
jns 0xb11d3f
and esi, esi
mov edi, edi
xchg esp, esp
jg 0xb11d58
pushf
nop
add eax, 0
je 0xb11d4f
ja 0xb11d51
popf
xchg esp, esp
jle 0xb11d58
mov ebx, 0x458d0e6a
in al, dx
push 0xe
lea eax, [ebp - 0x14]
push 0
push eax
call fcn.00b026c0
add esp, 0xc
lea edx, [edx + 0x40a9]
lea edx, [edx - 0x40a9]
test edi, 0x1197
or esp, 0
rol edi, 0
je 0xb11d89
jo 0xb11d84
jnp 0xb11d86
jne 0xb11d89
add eax, 0x2a74db85
test ebx, ebx
je 0xb11db7
and esp, 0xffffffff
test esp, 0x3eac
jp 0xb11dae
pushf
test dword [esp], ebx
xor edx, 0
sub eax, 0
popf
jnp 0xb11da7
jle 0xb11da9
ja 0xb11dab
jnp 0xb11dae
mov esi, 0x970ce853
add byte [eax], al
push ebx
call fcn.00b1b4c0
add esp, 4
shr eax, 0
and eax, eax
sub eax, 0
jno 0xb11dc1
je 0xb11de1
pushf
add esi, dword [esp]
sub esi, dword [esp]
push edx
pop edx
push ecx
add ecx, 0x95b
ror ecx, 0x11
pop ecx
popf
jb 0xb11ddc
jb 0xb11dde
jne 0xb11de1
mov edx, 0x51084d8b
mov ecx, dword [ebp + 8]
push ecx
call dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4