Function at 0x100b52a0
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x19c
mov eax, dword [0x101eb0f0]
xor eax, ebp
mov dword [ebp - 4], eax
movups xmm0, xmmword [str.0x00000000_n]
push ebx
mov ebx, dword [0x101eff2c]
push esi
mov esi, dword [ebp + 8]
push edi
movups xmmword [ebp - 0x24], xmm0
push str._WARNING___PE_SIGNATURE_VERIFICATION_FAILED_____n_Filename:
movq xmm0, qword [0x101a7d8c]
movq qword [ebp - 0x14], xmm0
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push str._n_Error:
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov esi, dword [ebp + 0xc]
mov ecx, esi
shr ecx, 0x1c
cmp cx, 0xa
sbb eax, eax
and eax, 0xfffffff9
add eax, 0x37
add ax, cx
mov ecx, esi
shr ecx, 0x18
and ecx, 0xf
mov word [ebp - 0x20], ax
cmp ecx, 0xa
sbb eax, eax
and eax, 0xfffffff9
add eax, 0x37
add ax, cx
mov ecx, esi
shr ecx, 0x14
and ecx, 0xf
mov word [ebp - 0x1e], ax
cmp ecx, 0xa
sbb eax, eax
and eax, 0xfffffff9
add eax, 0x37
add ax, cx
mov ecx, esi
shr ecx, 0x10
and ecx, 0xf
mov word [ebp - 0x1c], ax
cmp ecx, 0xa
sbb eax, eax
and eax, 0xfffffff9
add eax, 0x37
add ax, cx
mov ecx, esi
shr ecx, 0xc
and ecx, 0xf
mov word [ebp - 0x1a], ax
cmp ecx, 0xa
sbb eax, eax
and eax, 0xfffffff9
add eax, 0x37
add ax, cx
mov ecx, esi
shr ecx, 8
and ecx, 0xf
mov word [ebp - 0x18], ax
cmp ecx, 0xa
sbb eax, eax
and eax, 0xfffffff9
add eax, 0x37
add ax, cx
mov ecx, esi
shr ecx, 4
and ecx, 0xf
mov word [ebp - 0x16], ax
cmp ecx, 0xa
sbb eax, eax
and eax, 0xfffffff9
add eax, 0x37
add ax, cx
mov ecx, esi
and ecx, 0xf
mov word [ebp - 0x14], ax
cmp ecx, 0xa
sbb eax, eax
and eax, 0xfffffff9
add eax, 0x37
add ax, cx
mov word [ebp - 0x12], ax
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
test ebx, ebx
jne 0x100b56c2
cmp dword [0x101eb060], ebx
je 0x100b56f2
xor eax, eax
mov dword [ebp - 0xc], 0x2000100
push 0x42ea
mov word [ebp - 8], ax
mov dword [ebp - 0x184], 0x41fcc608
mov dword [ebp - 0x180], 0x4def8496
mov dword [ebp - 0x17c], 0x9b7d3eb4
mov dword [ebp - 0x178], 0xffa675d6
call fcn.100b4ea0
add esp, 4
mov dword [0x101eb060], ebx
test eax, eax
mov edi, str.SYSTEMControlSet001Services_nvlddmkm
mov eax, dword [0x101efd98]
mov ecx, str.SOFTWARENVIDIA_CorporationGlobal
cmove edi, ecx
mov dword [ebp - 0x19c], edi
test eax, eax
jne 0x100b5461
push eax
push 0x101a7a88
call fcn.100b5120
add esp, 8
mov dword [0x101efd98], eax
test eax, eax
je 0x100b5702
cmp dword [0x101efd9c], 0
jne 0x100b5488
push str.RegOpenKeyExW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x101efd9c], eax
test eax, eax
je 0x100b5702
mov eax, dword [0x101efd98]
cmp dword [0x101efda0], 0
jne 0x100b54af
push str.RegEnumValueW
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x101efda0], eax
test eax, eax
je 0x100b5702
mov eax, dword [0x101efd98]
cmp dword [0x101efda8], 0
jne 0x100b54d1
push str.RegCloseKey
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x101efda8], eax
test eax, eax
je 0x100b5702
cmp dword [0x101efdc0], 0
jne 0x100b5508
push 0
push str.Ole32.dll
call fcn.100b5120
add esp, 8
mov dword [0x101efdc0], eax
test eax, eax
je 0x100b5508
push str.StringFromGUID2
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [0x101efdc4], esi
jmp 0x100b550e
mov esi, dword [0x101efdc4]
test esi, esi
je 0x100b5702
push 0x4e
lea eax, [ebp - 0x74]
push 0
push eax
call fcn.100066c0
add esp, 0xc
lea eax, [ebp - 0x74]
mov ecx, esi
push 0x27
push eax
lea eax, [ebp - 0x184]
push eax
call dword [section..00cfg]
call esi
cmp eax, 0x27
jne 0x100b5702
lea eax, [ebp - 0xc]
mov dword [ebp - 0x190], eax
nop
movzx eax, word [eax]
test ax, ax
je 0x100b56eb
mov esi, dword [0x101efd9c]
lea ecx, [ebp - 0x188]
push ecx
or eax, 0x20019
mov dword [ebp - 0x188], 0
push eax
push 0
push edi
push 0x80000002
mov ecx, esi
call dword [section..00cfg]
call esi
test eax, eax
jne 0x100b56ab
xor ebx, ebx
xor edi, edi
nop word [eax + eax]
push 0x100
lea eax, [ebp - 0x174]
mov dword [ebp - 0x18c], 0x80
push 0
push eax
mov dword [ebp - 0x194], 4
call fcn.100066c0
mov esi, dword [0x101efda0]
lea eax, [ebp - 0x194]
add esp, 0xc
mov ecx, esi
push eax
lea eax, [ebp - 0x198]
push eax
push 0
push 0
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x174]
push eax
push ebx
push dword [ebp - 0x188]
call dword [section..00cfg]
call esi
inc ebx
test eax, eax
jne 0x100b5677
lea eax, [ebp - 0x74]
lea edx, [eax + 2]
nop dword [eax]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x100b5610
sub eax, edx
sar eax, 1
cmp eax, dword [ebp - 0x18c]
jne 0x100b55a0
lea ecx, [ebp - 0x174]
lea eax, [ebp - 0x74]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100b565a
test dx, dx
je 0x100b5656
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100b565a
add eax, 4
add ecx, 4
test dx, dx
jne 0x100b5634
xor eax, eax
jmp 0x100b565f
sbb eax, eax
or eax, 1
test eax, eax
jne 0x100b55a0
cmp dword [ebp - 0x198], eax
setne al
or edi, eax
jmp 0x100b55a0
cmp eax, 0x103
jne 0x100b55a0
push dword [ebp - 0x188]
mov esi, dword [0x101efda8]
mov ecx, esi
call dword [section..00cfg]
call esi
xor ebx, ebx
test edi, edi
mov edi, dword [ebp - 0x19c]
setne bl
mov dword [0x101eff2c], ebx
mov eax, dword [ebp - 0x190]
add eax, 2
mov dword [ebp - 0x190], eax
test ebx, ebx
je 0x100b5550
push str._Signature_override_detected..._n
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10011a30
mov esp, ebp
pop ebp
ret
test ebx, ebx
jne 0x100b56c2
mov esi, dword [ebp + 0xc]
cmp dword [0x101eff2c], 0
jne 0x100b56c2
push esi
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10011a30
mov esp, ebp
pop ebp
ret