Function at 0x10cb770
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x43d0
call sub.ntdll.dll__chkstk
push esi
push edi
cmp dword [ebp + 8], 0
je 0x10cb798
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ebp + 8]
mov eax, dword [edx + 0x30]
call eax
test eax, eax
je 0x10cb7d6
call fcn.010947d0
mov dword [ebp - 0x438c], eax
push 0x14a
push 0x100a5d0
call fcn.010cb350
push eax
push 0x100a7e4
mov ecx, dword [ebp - 0x438c]
push ecx
mov edx, dword [ebp - 0x438c]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10cc956
mov dword [ebp - 0x400c], 0
mov byte [ebp - 0x4008], 0
push 0x3fff
push 0
lea edx, [ebp - 0x4007]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
push 0
push 1
push 0
push 0
lea eax, [ebp - 0x4008]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x4010], eax
cmp dword [ebp - 0x4010], 0
jne 0x10cb866
call fcn.010947d0
mov dword [ebp - 0x4390], eax
push 0x154
push 0x100a5d0
call fcn.010cb350
push eax
push 0x100a7d0
mov ecx, dword [ebp - 0x4390]
push ecx
mov edx, dword [ebp - 0x4390]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
xor eax, eax
jmp 0x10cc956
lea edx, [ebp - 0x3eea]
mov dword [ebp - 0x4014], edx
mov eax, dword [ebp - 0x4014]
mov byte [eax + 0x14], 0
mov ecx, dword [ebp - 0x4014]
mov dword [ebp - 0x4394], ecx
mov edx, dword [ebp - 0x4394]
mov eax, dword [0x100a7b8]
mov dword [edx], eax
mov ecx, dword [0x100a7bc]
mov dword [edx + 4], ecx
mov eax, dword [0x100a7c0]
mov dword [edx + 8], eax
mov ecx, dword [0x100a7c4]
mov dword [edx + 0xc], ecx
mov eax, dword [0x100a7c8]
mov dword [edx + 0x10], eax
cmp dword [ebp - 0x4394], 0
jne 0x10cb901
mov dword [ebp - 0x400c], 1
call fcn.010947d0
mov dword [ebp - 0x4398], eax
push 0x15c
push 0x100a5d0
call fcn.010cb350
push eax
push 0x100a79c
mov ecx, dword [ebp - 0x4398]
push ecx
mov edx, dword [ebp - 0x4398]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
mov edx, dword [eax + 0x3c]
call edx
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x10cb91e
xor eax, eax
jmp 0x10cc956
cmp dword [ebp - 0x400c], 0
jne 0x10cbce4
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
call eax
mov dword [ebp - 0x4018], eax
jmp 0x10cb953
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x4018], eax
cmp dword [ebp - 0x4018], 0
je 0x10cbce4
mov word [ebp - 0x4140], 0
push 0xfe
push 0
lea ecx, [ebp - 0x413e]
push ecx
call sub.ntdll.dll_memset
add esp, 0xc
call fcn.010946d0
mov dword [ebp - 0x403c], eax
mov word [ebp - 0x41c8], 0
push 0x7e
push 0
lea edx, [ebp - 0x41c6]
push edx
call sub.ntdll.dll_memset
add esp, 0xc
mov eax, dword [ebp - 0x4018]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4018]
mov eax, dword [edx + 0x1c]
call eax
push edx
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov ecx, dword [ebp + 8]
mov eax, dword [edx + 0x28]
call eax
push eax
push 0x40
lea ecx, [ebp - 0x41c8]
push ecx
mov edx, dword [ebp - 0x403c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x403c]
mov edx, dword [eax + 0x2c]
call edx
mov dword [ebp - 0x4010], eax
cmp dword [ebp - 0x4010], 0
jne 0x10cb9f9
jmp 0x10cb940
lea eax, [ebp - 0x4140]
add eax, 0xfffffffe
mov dword [ebp - 0x439c], eax
mov ecx, dword [ebp - 0x439c]
mov dx, word [ecx + 2]
mov word [ebp - 0x439e], dx
add dword [ebp - 0x439c], 2
cmp word [ebp - 0x439e], 0
jne 0x10cba08
mov edi, dword [ebp - 0x439c]
mov eax, dword [0x100a784]
mov dword [edi], eax
mov ecx, dword [0x100a788]
mov dword [edi + 4], ecx
mov edx, dword [0x100a78c]
mov dword [edi + 8], edx
mov eax, dword [0x100a790]
mov dword [edi + 0xc], eax
mov ecx, dword [0x100a794]
mov dword [edi + 0x10], ecx
mov dx, word [0x100a798]
mov word [edi + 0x14], dx
lea eax, [ebp - 0x41c8]
mov dword [ebp - 0x43a4], eax
mov ecx, dword [ebp - 0x43a4]
mov dword [ebp - 0x43a8], ecx
mov edx, dword [ebp - 0x43a4]
mov ax, word [edx]
mov word [ebp - 0x43aa], ax
add dword [ebp - 0x43a4], 2
cmp word [ebp - 0x43aa], 0
jne 0x10cba7d
mov ecx, dword [ebp - 0x43a4]
sub ecx, dword [ebp - 0x43a8]
mov edx, dword [ebp - 0x43a8]
mov dword [ebp - 0x43b0], edx
mov dword [ebp - 0x43b4], ecx
lea eax, [ebp - 0x4140]
add eax, 0xfffffffe
mov dword [ebp - 0x43b8], eax
mov ecx, dword [ebp - 0x43b8]
mov dx, word [ecx + 2]
mov word [ebp - 0x43ba], dx
add dword [ebp - 0x43b8], 2
cmp word [ebp - 0x43ba], 0
jne 0x10cbacb
mov edi, dword [ebp - 0x43b8]
mov esi, dword [ebp - 0x43b0]
mov eax, dword [ebp - 0x43b4]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x4140]
add ecx, 0xfffffffe
mov dword [ebp - 0x43c0], ecx
mov edx, dword [ebp - 0x43c0]
mov ax, word [edx + 2]
mov word [ebp - 0x43c2], ax
add dword [ebp - 0x43c0], 2
cmp word [ebp - 0x43c2], 0
jne 0x10cbb1c
mov edi, dword [ebp - 0x43c0]
mov ecx, 9
mov esi, 0x100a760
rep movsd dword es:[edi], dword [esi]
push 0
push 0x80
push 3
push 0
push 1
push 0x80000000
lea ecx, [ebp - 0x4140]
push ecx
call fcn.01091ef0
mov dword [ebp - 0x4144], eax
cmp dword [ebp - 0x4144], 0xffffffff
jne 0x10cbb82
jmp 0x10cb940
call fcn.010947d0
mov dword [ebp - 0x43c8], eax
push 0x179
push 0x100a5d0
call fcn.010cb350
push eax
push 0x100a740
mov edx, dword [ebp - 0x43c8]
push edx
mov eax, dword [ebp - 0x43c8]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
call edx
add esp, 0xc
mov byte [ebp - 0x4038], 0
xor eax, eax
mov dword [ebp - 0x4037], eax
mov dword [ebp - 0x4033], eax
mov dword [ebp - 0x402f], eax
mov dword [ebp - 0x402b], eax
mov dword [ebp - 0x4027], eax
mov dword [ebp - 0x4023], eax
mov dword [ebp - 0x401f], eax
mov word [ebp - 0x401b], ax
mov byte [ebp - 0x4019], al
mov dword [ebp - 0x41cc], 0
push 0
lea ecx, [ebp - 0x41cc]
push ecx
push 0x20
lea edx, [ebp - 0x4038]
push edx
mov eax, dword [ebp - 0x4144]
push eax
call fcn.01092390
mov dword [ebp - 0x4010], eax
cmp dword [ebp - 0x4010], 0
jne 0x10cbc41
mov ecx, dword [ebp - 0x4144]
push ecx
call fcn.01092350
jmp 0x10cb940
movzx edx, byte [ebp - 0x4035]
cmp edx, 1
jne 0x10cbc90
mov dword [ebp - 0x400c], 1
call fcn.010947d0
mov dword [ebp - 0x43cc], eax
push 0x185
push 0x100a5d0
call fcn.010cb350
push eax
push 0x100a710
mov eax, dword [ebp - 0x43cc]
push eax
mov ecx, dword [ebp - 0x43cc]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
add esp, 0xc
jmp 0x10cbcd1
mov dword [ebp - 0x400c], 0
call fcn.010947d0
mov dword [ebp - 0x43d0], eax
push 0x18a
push 0x100a5d0
call fcn.010cb350
push eax
push 0x100a6e0
mov ecx, dword [ebp - 0x43d0]
push ecx
mov edx, dword [ebp - 0x43d0]
mov eax, dword [edx]
mov ecx, dword [eax + 8]
call ecx
add esp, 0xc
mov edx, dword [ebp - 0x4144]
push edx
call fcn.01092350
jmp 0x10cbce4
cmp dword [ebp - 0x400c], 0
je 0x10cc951
mov byte [ebp - 0x4388], 0x33
mov byte [ebp - 0x4387], 0xc0
mov byte [ebp - 0x4386], 0x8e
mov byte [ebp - 0x4385], 0xd0
mov byte [ebp - 0x4384], 0xbc
mov byte [ebp - 0x4383], 0
mov byte [ebp - 0x4382], 0x7c
mov byte [ebp - 0x4381], 0x8e
mov byte [ebp - 0x4380], 0xc0
mov byte [ebp - 0x437f], 0x8e
mov byte [ebp - 0x437e], 0xd8
mov byte [ebp - 0x437d], 0xbe
mov byte [ebp - 0x437c], 0
mov byte [ebp - 0x437b], 0x7c
mov byte [ebp - 0x437a], 0xbf
mov byte [ebp - 0x4379], 0
mov byte [ebp - 0x4378], 6
mov byte [ebp - 0x4377], 0xb9
mov byte [ebp - 0x4376], 0
mov byte [ebp - 0x4375], 2
mov byte [ebp - 0x4374], 0xfc
mov byte [ebp - 0x4373], 0xf3
mov byte [ebp - 0x4372], 0xa4
mov byte [ebp - 0x4371], 0x50
mov byte [ebp - 0x4370], 0x68
mov byte [ebp - 0x436f], 0x1c
mov byte [ebp - 0x436e], 6
mov byte [ebp - 0x436d], 0xcb
mov byte [ebp - 0x436c], 0xfb
mov byte [ebp - 0x436b], 0xb9
mov byte [ebp - 0x436a], 4
mov byte [ebp - 0x4369], 0
mov byte [ebp - 0x4368], 0xbd
mov byte [ebp - 0x4367], 0xbe
mov byte [ebp - 0x4366], 7
mov byte [ebp - 0x4365], 0x80
mov byte [ebp - 0x4364], 0x7e
mov byte [ebp - 0x4363], 0
mov byte [ebp - 0x4362], 0
mov byte [ebp - 0x4361], 0x7c
mov byte [ebp - 0x4360], 0xb
mov byte [ebp - 0x435f], 0xf
mov byte [ebp - 0x435e], 0x85
mov byte [ebp - 0x435d], 0xe
mov byte [ebp - 0x435c], 1
mov byte [ebp - 0x435b], 0x83
mov byte [ebp - 0x435a], 0xc5
mov byte [ebp - 0x4359], 0x10
mov byte [ebp - 0x4358], 0xe2
mov byte [ebp - 0x4357], 0xf1
mov byte [ebp - 0x4356], 0xcd
mov byte [ebp - 0x4355], 0x18
mov byte [ebp - 0x4354], 0x88
mov byte [ebp - 0x4353], 0x56
mov byte [ebp - 0x4352], 0
mov byte [ebp - 0x4351], 0x55
mov byte [ebp - 0x4350], 0xc6
mov byte [ebp - 0x434f], 0x46
mov byte [ebp - 0x434e], 0x11
mov byte [ebp - 0x434d], 5
mov byte [ebp - 0x434c], 0xc6
mov byte [ebp - 0x434b], 0x46
mov byte [ebp - 0x434a], 0x10
mov byte [ebp - 0x4349], 0
mov byte [ebp - 0x4348], 0xb4
mov byte [ebp - 0x4347], 0x41
mov byte [ebp - 0x4346], 0xbb
mov byte [ebp - 0x4345], 0xaa
mov byte [ebp - 0x4344], 0x55
mov byte [ebp - 0x4343], 0xcd
mov byte [ebp - 0x4342], 0x13
mov byte [ebp - 0x4341], 0x5d
mov byte [ebp - 0x4340], 0x72
mov byte [ebp - 0x433f], 0xf
mov byte [ebp - 0x433e], 0x81
mov byte [ebp - 0x433d], 0xfb
mov byte [ebp - 0x433c], 0x55
mov byte [ebp - 0x433b], 0xaa
mov byte [ebp - 0x433a], 0x75
mov byte [ebp - 0x4339], 9
mov byte [ebp - 0x4338], 0xf7
mov byte [ebp - 0x4337], 0xc1
mov byte [ebp - 0x4336], 1
mov byte [ebp - 0x4335], 0
mov byte [ebp - 0x4334], 0x74
mov byte [ebp - 0x4333], 3
mov byte [ebp - 0x4332], 0xfe
mov byte [ebp - 0x4331], 0x46
mov byte [ebp - 0x4330], 0x10
mov byte [ebp - 0x432f], 0x66
mov byte [ebp - 0x432e], 0x60
mov byte [ebp - 0x432d], 0x80
mov byte [ebp - 0x432c], 0x7e
mov byte [ebp - 0x432b], 0x10
mov byte [ebp - 0x432a], 0
mov byte [ebp - 0x4329], 0x74
mov byte [ebp - 0x4328], 0x26
mov byte [ebp - 0x4327], 0x66
mov byte [ebp - 0x4326], 0x68
mov byte [ebp - 0x4325], 0
mov byte [ebp - 0x4324], 0
mov byte [ebp - 0x4323], 0
mov byte [ebp - 0x4322], 0
mov byte [ebp - 0x4321], 0x66
mov byte [ebp - 0x4320], 0xff
mov byte [ebp - 0x431f], 0x76
mov byte [ebp - 0x431e], 8
mov byte [ebp - 0x431d], 0x68
mov byte [ebp - 0x431c], 0
mov byte [ebp - 0x431b], 0
mov byte [ebp - 0x431a], 0x68
mov byte [ebp - 0x4319], 0
mov byte [ebp - 0x4318], 0x7c
mov byte [ebp - 0x4317], 0x68
mov byte [ebp - 0x4316], 1
mov byte [ebp - 0x4315], 0
mov byte [ebp - 0x4314], 0x68
mov byte [ebp - 0x4313], 0x10
mov byte [ebp - 0x4312], 0
mov byte [ebp - 0x4311], 0xb4
mov byte [ebp - 0x4310], 0x42
mov byte [ebp - 0x430f], 0x8a
mov byte [ebp - 0x430e], 0x56
mov byte [ebp - 0x430d], 0
mov byte [ebp - 0x430c], 0x8b
mov byte [ebp - 0x430b], 0xf4
mov byte [ebp - 0x430a], 0xcd
mov byte [ebp - 0x4309], 0x13
mov byte [ebp - 0x4308], 0x9f
mov byte [ebp - 0x4307], 0x83
mov byte [ebp - 0x4306], 0xc4
mov byte [ebp - 0x4305], 0x10
mov byte [ebp - 0x4304], 0x9e
mov byte [ebp - 0x4303], 0xeb
mov byte [ebp - 0x4302], 0x14
mov byte [ebp - 0x4301], 0xb8
mov byte [ebp - 0x4300], 1
mov byte [ebp - 0x42ff], 2
mov byte [ebp - 0x42fe], 0xbb
mov byte [ebp - 0x42fd], 0
mov byte [ebp - 0x42fc], 0x7c
mov byte [ebp - 0x42fb], 0x8a
mov byte [ebp - 0x42fa], 0x56
mov byte [ebp - 0x42f9], 0
mov byte [ebp - 0x42f8], 0x8a
mov byte [ebp - 0x42f7], 0x76
mov byte [ebp - 0x42f6], 1
mov byte [ebp - 0x42f5], 0x8a
mov byte [ebp - 0x42f4], 0x4e
mov byte [ebp - 0x42f3], 2
mov byte [ebp - 0x42f2], 0x8a
mov byte [ebp - 0x42f1], 0x6e
mov byte [ebp - 0x42f0], 3
mov byte [ebp - 0x42ef], 0xcd
mov byte [ebp - 0x42ee], 0x13
mov byte [ebp - 0x42ed], 0x66
mov byte [ebp - 0x42ec], 0x61
mov byte [ebp - 0x42eb], 0x73
mov byte [ebp - 0x42ea], 0x1c
mov byte [ebp - 0x42e9], 0xfe
mov byte [ebp - 0x42e8], 0x4e
mov byte [ebp - 0x42e7], 0x11
mov byte [ebp - 0x42e6], 0x75
mov byte [ebp - 0x42e5], 0xc
mov byte [ebp - 0x42e4], 0x80
mov byte [ebp - 0x42e3], 0x7e
mov byte [ebp - 0x42e2], 0
mov byte [ebp - 0x42e1], 0x80
mov byte [ebp - 0x42e0], 0xf
mov byte [ebp - 0x42df], 0x84
mov byte [ebp - 0x42de], 0x8a
mov byte [ebp - 0x42dd], 0
mov byte [ebp - 0x42dc], 0xb2
mov byte [ebp - 0x42db], 0x80
mov byte [ebp - 0x42da], 0xeb
mov byte [ebp - 0x42d9], 0x84
mov byte [ebp - 0x42d8], 0x55
mov byte [ebp - 0x42d7], 0x32
mov byte [ebp - 0x42d6], 0xe4
mov byte [ebp - 0x42d5], 0x8a
mov byte [ebp - 0x42d4], 0x56
mov byte [ebp - 0x42d3], 0
mov byte [ebp - 0x42d2], 0xcd
mov byte [ebp - 0x42d1], 0x13
mov byte [ebp - 0x42d0], 0x5d
mov byte [ebp - 0x42cf], 0xeb
mov byte [ebp - 0x42ce], 0x9e
mov byte [ebp - 0x42cd], 0x81
mov byte [ebp - 0x42cc], 0x3e
mov byte [ebp - 0x42cb], 0xfe
mov byte [ebp - 0x42ca], 0x7d
mov byte [ebp - 0x42c9], 0x55
mov byte [ebp - 0x42c8], 0xaa
mov byte [ebp - 0x42c7], 0x75
mov byte [ebp - 0x42c6], 0x6e
mov byte [ebp - 0x42c5], 0xff
mov byte [ebp - 0x42c4], 0x76
mov byte [ebp - 0x42c3], 0
mov byte [ebp - 0x42c2], 0xe8
mov byte [ebp - 0x42c1], 0x8d
mov byte [ebp - 0x42c0], 0
mov byte [ebp - 0x42bf], 0x75
mov byte [ebp - 0x42be], 0x17
mov byte [ebp - 0x42bd], 0xfa
mov byte [ebp - 0x42bc], 0xb0
mov byte [ebp - 0x42bb], 0xd1
mov byte [ebp - 0x42ba], 0xe6
mov byte [ebp - 0x42b9], 0x64
mov byte [ebp - 0x42b8], 0xe8
mov byte [ebp - 0x42b7], 0x83
mov byte [ebp - 0x42b6], 0
mov byte [ebp - 0x42b5], 0xb0
mov byte [ebp - 0x42b4], 0xdf
mov byte [ebp - 0x42b3], 0xe6
mov byte [ebp - 0x42b2], 0x60
mov byte [ebp - 0x42b1], 0xe8
mov byte [ebp - 0x42b0], 0x7c
mov byte [ebp - 0x42af], 0
mov byte [ebp - 0x42ae], 0xb0
mov byte [ebp - 0x42ad], 0xff
mov byte [ebp - 0x42ac], 0xe6
mov byte [ebp - 0x42ab], 0x64
mov byte [ebp - 0x42aa], 0xe8
mov byte [ebp - 0x42a9], 0x75
mov byte [ebp - 0x42a8], 0
mov byte [ebp - 0x42a7], 0xfb
mov byte [ebp - 0x42a6], 0xb8
mov byte [ebp - 0x42a5], 0
mov byte [ebp - 0x42a4], 0xbb
mov byte [ebp - 0x42a3], 0xcd
mov byte [ebp - 0x42a2], 0x1a
mov byte [ebp - 0x42a1], 0x66
mov byte [ebp - 0x42a0], 0x23
mov byte [ebp - 0x429f], 0xc0
mov byte [ebp - 0x429e], 0x75
mov byte [ebp - 0x429d], 0x3b
mov byte [ebp - 0x429c], 0x66
mov byte [ebp - 0x429b], 0x81
mov byte [ebp - 0x429a], 0xfb
mov byte [ebp - 0x4299], 0x54
mov byte [ebp - 0x4298], 0x43
mov byte [ebp - 0x4297], 0x50
mov byte [ebp - 0x4296], 0x41
mov byte [ebp - 0x4295], 0x75
mov byte [ebp - 0x4294], 0x32
mov byte [ebp - 0x4293], 0x81
mov byte [ebp - 0x4292], 0xf9
mov byte [ebp - 0x4291], 2
mov byte [ebp - 0x4290], 1
mov byte [ebp - 0x428f], 0x72
mov byte [ebp - 0x428e], 0x2c
mov byte [ebp - 0x428d], 0x66
mov byte [ebp - 0x428c], 0x68
mov byte [ebp - 0x428b], 7
mov byte [ebp - 0x428a], 0xbb
mov byte [ebp - 0x4289], 0
mov byte [ebp - 0x4288], 0
mov byte [ebp - 0x4287], 0x66
mov byte [ebp - 0x4286], 0x68
mov byte [ebp - 0x4285], 0
mov byte [ebp - 0x4284], 2
mov byte [ebp - 0x4283], 0
mov byte [ebp - 0x4282], 0
mov byte [ebp - 0x4281], 0x66
mov byte [ebp - 0x4280], 0x68
mov byte [ebp - 0x427f], 8
mov byte [ebp - 0x427e], 0
mov byte [ebp - 0x427d], 0
mov byte [ebp - 0x427c], 0
mov byte [ebp - 0x427b], 0x66
mov byte [ebp - 0x427a], 0x53
mov byte [ebp - 0x4279], 0x66
mov byte [ebp - 0x4278], 0x53
mov byte [ebp - 0x4277], 0x66
mov byte [ebp - 0x4276], 0x55
mov byte [ebp - 0x4275], 0x66
mov byte [ebp - 0x4274], 0x68
mov byte [ebp - 0x4273], 0
mov byte [ebp - 0x4272], 0
mov byte [ebp - 0x4271], 0
mov byte [ebp - 0x4270], 0
mov byte [ebp - 0x426f], 0x66
mov byte [ebp - 0x426e], 0x68
mov byte [ebp - 0x426d], 0
mov byte [ebp - 0x426c], 0x7c
mov byte [ebp - 0x426b], 0
mov byte [ebp - 0x426a], 0
mov byte [ebp - 0x4269], 0x66
mov byte [ebp - 0x4268], 0x61
mov byte [ebp - 0x4267], 0x68
mov byte [ebp - 0x4266], 0
mov byte [ebp - 0x4265], 0
mov byte [ebp - 0x4264], 7
mov byte [ebp - 0x4263], 0xcd
mov byte [ebp - 0x4262], 0x1a
mov byte [ebp - 0x4261], 0x5a
mov byte [ebp - 0x4260], 0x32
mov byte [ebp - 0x425f], 0xf6
mov byte [ebp - 0x425e], 0xea
mov byte [ebp - 0x425d], 0
mov byte [ebp - 0x425c], 0x7c
mov byte [ebp - 0x425b], 0
mov byte [ebp - 0x425a], 0
mov byte [ebp - 0x4259], 0xcd
mov byte [ebp - 0x4258], 0x18
mov byte [ebp - 0x4257], 0xa0
mov byte [ebp - 0x4256], 0xb7
mov byte [ebp - 0x4255], 7
mov byte [ebp - 0x4254], 0xeb
mov byte [ebp - 0x4253], 8
mov byte [ebp - 0x4252], 0xa0
mov byte [ebp - 0x4251], 0xb6
mov byte [ebp - 0x4250], 7
mov byte [ebp - 0x424f], 0xeb
mov byte [ebp - 0x424e], 3
mov byte [ebp - 0x424d], 0xa0
mov byte [ebp - 0x424c], 0xb5
mov byte [ebp - 0x424b], 7
mov byte [ebp - 0x424a], 0x32
mov byte [ebp - 0x4249], 0xe4
mov byte [ebp - 0x4248], 5
mov byte [ebp - 0x4247], 0
mov byte [ebp - 0x4246], 7
mov byte [ebp - 0x4245], 0x8b
mov byte [ebp - 0x4244], 0xf0
mov byte [ebp - 0x4243], 0xac
mov byte [ebp - 0x4242], 0x3c
mov byte [ebp - 0x4241], 0
mov byte [ebp - 0x4240], 0x74
mov byte [ebp - 0x423f], 9
mov byte [ebp - 0x423e], 0xbb
mov byte [ebp - 0x423d], 7
mov byte [ebp - 0x423c], 0
mov byte [ebp - 0x423b], 0xb4
mov byte [ebp - 0x423a], 0xe
mov byte [ebp - 0x4239], 0xcd
mov byte [ebp - 0x4238], 0x10
mov byte [ebp - 0x4237], 0xeb
mov byte [ebp - 0x4236], 0xf2
mov byte [ebp - 0x4235], 0xf4
mov byte [ebp - 0x4234], 0xeb
mov byte [ebp - 0x4233], 0xfd
mov byte [ebp - 0x4232], 0x2b
mov byte [ebp - 0x4231], 0xc9
mov byte [ebp - 0x4230], 0xe4
mov byte [ebp - 0x422f], 0x64
mov byte [ebp - 0x422e], 0xeb
mov byte [ebp - 0x422d], 0
mov byte [ebp - 0x422c], 0x24
mov byte [ebp - 0x422b], 2
mov byte [ebp - 0x422a], pe_nt_image_headers32
mov byte [ebp - 0x4229], 0xf8
mov byte [ebp - 0x4228], 0x24
mov byte [ebp - 0x4227], 2
mov byte [ebp - 0x4226], 0xc3
mov byte [ebp - 0x4225], 0x49
mov byte [ebp - 0x4224], 0x6e
mov byte [ebp - 0x4223], 0x76
mov byte [ebp - 0x4222], 0x61
mov byte [ebp - 0x4221], 0x6c
mov byte [ebp - 0x4220], 0x69
mov byte [ebp - 0x421f], 0x64
mov byte [ebp - 0x421e], 0x20
mov byte [ebp - 0x421d], 0x70
mov byte [ebp - 0x421c], 0x61
mov byte [ebp - 0x421b], 0x72
mov byte [ebp - 0x421a], 0x74
mov byte [ebp - 0x4219], 0x69
mov byte [ebp - 0x4218], 0x74
mov byte [ebp - 0x4217], 0x69
mov byte [ebp - 0x4216], 0x6f
mov byte [ebp - 0x4215], 0x6e
mov byte [ebp - 0x4214], 0x20
mov byte [ebp - 0x4213], 0x74
mov byte [ebp - 0x4212], 0x61
mov byte [ebp - 0x4211], 0x62
mov byte [ebp - 0x4210], 0x6c
mov byte [ebp - 0x420f], 0x65
mov byte [ebp - 0x420e], 0
mov byte [ebp - 0x420d], 0x45
mov byte [ebp - 0x420c], 0x72
mov byte [ebp - 0x420b], 0x72
mov byte [ebp - 0x420a], 0x6f
mov byte [ebp - 0x4209], 0x72
mov byte [ebp - 0x4208], 0x20
mov byte [ebp - 0x4207], 0x6c
mov byte [ebp - 0x4206], 0x6f
mov byte [ebp - 0x4205], 0x61
mov byte [ebp - 0x4204], 0x64
mov byte [ebp - 0x4203], 0x69
mov byte [ebp - 0x4202], 0x6e
mov byte [ebp - 0x4201], 0x67
mov byte [ebp - 0x4200], 0x20
mov byte [ebp - 0x41ff], 0x6f
mov byte [ebp - 0x41fe], 0x70
mov byte [ebp - 0x41fd], 0x65
mov byte [ebp - 0x41fc], 0x72
mov byte [ebp - 0x41fb], 0x61
mov byte [ebp - 0x41fa], 0x74
mov byte [ebp - 0x41f9], 0x69
mov byte [ebp - 0x41f8], 0x6e
mov byte [ebp - 0x41f7], 0x67
mov byte [ebp - 0x41f6], 0x20
mov byte [ebp - 0x41f5], 0x73
mov byte [ebp - 0x41f4], 0x79
mov byte [ebp - 0x41f3], 0x73
mov byte [ebp - 0x41f2], 0x74
mov byte [ebp - 0x41f1], 0x65
mov byte [ebp - 0x41f0], 0x6d
mov byte [ebp - 0x41ef], 0
mov byte [ebp - 0x41ee], 0x4d
mov byte [ebp - 0x41ed], 0x69
mov byte [ebp - 0x41ec], 0x73
mov byte [ebp - 0x41eb], 0x73
mov byte [ebp - 0x41ea], 0x69
mov byte [ebp - 0x41e9], 0x6e
mov byte [ebp - 0x41e8], 0x67
mov byte [ebp - 0x41e7], 0x20
mov byte [ebp - 0x41e6], 0x6f
mov byte [ebp - 0x41e5], 0x70
mov byte [ebp - 0x41e4], 0x65
mov byte [ebp - 0x41e3], 0x72
mov byte [ebp - 0x41e2], 0x61
mov byte [ebp - 0x41e1], 0x74
mov byte [ebp - 0x41e0], 0x69
mov byte [ebp - 0x41df], 0x6e
mov byte [ebp - 0x41de], 0x67
mov byte [ebp - 0x41dd], 0x20
mov byte [ebp - 0x41dc], 0x73
mov byte [ebp - 0x41db], 0x79
mov byte [ebp - 0x41da], 0x73
mov byte [ebp - 0x41d9], 0x74
mov byte [ebp - 0x41d8], 0x65
mov byte [ebp - 0x41d7], 0x6d
mov byte [ebp - 0x41d6], 0
mov byte [ebp - 0x41d5], 0
mov byte [ebp - 0x41d4], 0
mov byte [ebp - 0x41d3], 0x63
mov byte [ebp - 0x41d2], 0x7b
mov byte [ebp - 0x41d1], 0x9a
mov ecx, 0x6e
lea esi, [ebp - 0x4388]
lea edi, [ebp - 0x4008]
rep movsd dword es:[edi], dword [esi]
movzx eax, byte [ebp - 0x3e0a]
cmp eax, 0x55
je 0x10cc91f
mov byte [ebp - 0x3e0a], 0x55
movzx ecx, byte [ebp - 0x3e09]
cmp ecx, 0xaa
je 0x10cc935
mov byte [ebp - 0x3e09], 0xaa
push 0
push 1
push 0
push 0
lea edx, [ebp - 0x4008]
push edx
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov ecx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
call eax
mov eax, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4