Function at 0x10023c40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1018ef57
mov eax, dword fs:[0]
push eax
sub esp, 0x324
mov eax, dword [0x101f62b4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [edi + 0x90]
push eax
lea ecx, [ebp - 0x1e8]
call fcn.10002700
mov dword [ebp - 4], 0
xor bh, bh
xor eax, eax
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x300], 7
mov word [ebp - 0x314], ax
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e8], 0xf
mov byte [ebp - 0x2fc], al
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], 0xf
mov byte [ebp - 0x2c0], al
mov byte [ebp - 4], 1
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x190], 0xff3409c1
mov dword [ebp - 0x18c], 0x8b11fd6
mov dword [ebp - 0x188], 0x79a00ab9
mov dword [ebp - 0x184], 0xa7174d0f
mov dword [ebp - 0x180], 0x48247220
mov dword [ebp - 0x17c], 0x57bc69f
mov dword [ebp - 0x178], 0x5595aaef
mov dword [ebp - 0x174], 0xc56142bc
mov dword [ebp - 0x170], 0x55bee4d7
mov dword [ebp - 0x16c], 0x5cc42913
mov dword [ebp - 0x168], 0x5baf0997
mov dword [ebp - 0x164], 0x8aa95986
mov dword [ebp - 0x160], 0xca471f50
mov dword [ebp - 0x15c], 0xce2170c0
mov dword [ebp - 0x158], 0x4f6db949
mov dword [ebp - 0x154], 0x2bfd3e03
mov dword [ebp - 0x150], 0x90d3e0a4
mov dword [ebp - 0x14c], 0x3e7c7ca7
mov dword [ebp - 0x148], 0xb6e4f403
mov dword [ebp - 0x144], 0xfa0e0bdd
mov dword [ebp - 0x140], 0x5a00037e
mov dword [ebp - 0x13c], 0x6022935e
mov dword [ebp - 0x138], 0xf2f6fcc3
mov dword [ebp - 0x134], 0x378c9f1c
mov dword [ebp - 0x130], 0x22257e64
mov dword [ebp - 0x12c], 0x982b26bd
mov dword [ebp - 0x128], 0x7a4650a6
mov dword [ebp - 0x124], 0xb8c0c0a1
mov dword [ebp - 0x120], 0x1ab03ecb
mov dword [ebp - 0x11c], 0xb2f552b2
mov dword [ebp - 0x118], 0xdf56559b
mov dword [ebp - 0x114], 0xccb77aa7
mov dword [ebp - 0x110], 0xb781a31
mov dword [ebp - 0x10c], 0x32b10d5a
mov dword [ebp - 0x108], 0x616ea23e
mov dword [ebp - 0x104], 0x7cc5f643
mov dword [ebp - 0x100], 0xc02ff0c6
mov dword [ebp - 0xfc], 0xb5512feb
mov dword [ebp - 0xf8], 0xd64724e1
mov dword [ebp - 0xf4], 0x71adbb31
mov dword [ebp - 0xf0], 0x8cacc532
mov dword [ebp - 0xec], 0x25ef22c2
mov dword [ebp - 0xe8], 0x881fd614
mov dword [ebp - 0xe4], 0xd1f5d876
mov dword [ebp - 0xe0], 0xb3b17cc1
mov dword [ebp - 0xdc], 0x2475b785
mov dword [ebp - 0xd8], 0x557aa5ef
mov dword [ebp - 0xd4], 0xbf20dbb7
mov dword [ebp - 0xd0], 0x5cc88bf
mov dword [ebp - 0xcc], 0x5e9db0f9
mov dword [ebp - 0xc8], 0xfd9e5c32
mov dword [ebp - 0xc4], 0xab608710
mov dword [ebp - 0xc0], 0x4d809ab1
mov dword [ebp - 0xbc], 0x4edbb0a3
mov dword [ebp - 0xb8], 0x21f898c9
mov dword [ebp - 0xb4], 0x3357f8fb
mov dword [ebp - 0xb0], 0x4f8ab510
mov dword [ebp - 0xac], 0xad53c88f
mov dword [ebp - 0xa8], 0xccaa3e1a
mov dword [ebp - 0xa4], 0xa5d37ad9
mov dword [ebp - 0xa0], 0xd8766ecc
cmp dword [ebp - 0x1d4], 8
lea edx, [ebp - 0x1e8]
lea eax, [ebp - 0x190]
mov dword [ebp - 0x9c], 0xd62058c
cmovae edx, dword [ebp - 0x1e8]
mov ecx, edx
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0x191]
mov dword [ebp - 0x98], 0x2a5aa4b1
mov dword [ebp - 0x94], 0xa60b070a
mov dword [ebp - 0x90], 0x659d3a44
mov dword [ebp - 0x8c], 0x189dacf
lea esi, [ecx + 2]
mov dword [ebp - 0x88], 0xd32e6337
mov dword [ebp - 0x84], 0x47b0b05b
mov dword [ebp - 0x80], 0x8df59ac8
mov dword [ebp - 0x7c], 0xdddec8a0
mov dword [ebp - 0x78], 0x8a8e1845
mov dword [ebp - 0x74], 0x55feb40b
mov dword [ebp - 0x70], 0x2b52e964
mov dword [ebp - 0x6c], 0xeeba995c
mov dword [ebp - 0x68], 0x29e12f25
mov dword [ebp - 0x64], 0x23403bba
mov dword [ebp - 0x60], 0x2ffd873b
mov dword [ebp - 0x5c], 0xc7c9fc50
mov dword [ebp - 0x58], 0x3465b175
mov dword [ebp - 0x54], 0x7c4e3b03
mov dword [ebp - 0x50], 0x7ac1247b
mov dword [ebp - 0x4c], 0x9c41f91e
mov dword [ebp - 0x48], 0x77add3ab
mov dword [ebp - 0x44], 0xf55698bc
mov dword [ebp - 0x40], 0x1c2652c9
mov dword [ebp - 0x3c], 0x6d314c32
mov dword [ebp - 0x38], 0x490cfee0
mov dword [ebp - 0x34], 0x8aa32a56
mov dword [ebp - 0x30], 0x854e4f1d
mov dword [ebp - 0x2c], 0x80caecde
mov dword [ebp - 0x28], 0xf56ed880
mov dword [ebp - 0x24], 0x151525ab
mov dword [ebp - 0x20], 0x86447579
mov dword [ebp - 0x1c], 0x218412cf
mov dword [ebp - 0x18], 0xea78638f
mov dword [ebp - 0x14], 0x7b433bef
mov dword [ebp - 0x2d4], 0x180
mov byte [ebp - 0x191], 0x11
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], 1
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10024096
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x314]
call fcn.10001d60
call fcn.1004cb70
cmp dword [ebp - 0x1d4], 8
lea ecx, [ebp - 0x1e8]
cmovae ecx, dword [ebp - 0x1e8]
mov esi, dword [eax]
push ecx
push str.Validating_package_file:__s
push 0x101aee58
mov esi, dword [esi + 0x54]
mov ecx, esi
push eax
call dword [0x1019a4f8]
call esi
add esp, 0x10
lea eax, [ebp - 0x1e8]
lea ecx, [ebp - 0x248]
push eax
call fcn.10002700
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], 0xf
mov byte [ebp - 0x290], al
lea edx, [ebp - 0x278]
mov byte [ebp - 4], 6
mov ecx, edi
call fcn.10029400
test eax, eax
je 0x10024180
xor bh, bh
jmp 0x10024d37
lea eax, [ebp - 0x278]
push eax
lea ecx, [edi + 0xa8]
call fcn.1002d440
lea ecx, [ebp - 0x260]
cmp ecx, eax
je 0x100241b5
cmp dword [eax + 0x14], 0x10
mov ecx, eax
jb 0x100241a6
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x260]
call fcn.10018930
cmp dword [ebp - 0x24c], 0x10
lea ecx, [ebp - 0x260]
push 0
cmovae ecx, dword [ebp - 0x260]
lea edx, [ebp - 0x230]
call fcn.10101490
add esp, 4
lea ecx, [ebp - 0x248]
call fcn.100fd870
push 1
push 0x101ace08
lea ecx, [ebp - 0x248]
call fcn.10001e70
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push dword [ebp - 0x220]
cmovae eax, dword [ebp - 0x230]
lea ecx, [ebp - 0x248]
push eax
call fcn.10001e70
push 4
push str..sig
lea ecx, [ebp - 0x248]
call fcn.10001e70
xorps xmm0, xmm0
mov dword [ebp - 0x1b0], 0
movq qword [ebp - 0x1b8], xmm0
call fcn.1004cb70
mov dword [ebp - 0x1b4], 0
mov byte [ebp - 0x1b0], 0
mov dword [ebp - 0x1b8], eax
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x1b8]
call fcn.10111150
test al, al
je 0x10024c83
xor eax, eax
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 7
mov word [ebp - 0x218], ax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], 7
mov word [ebp - 0x200], ax
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], 7
mov word [ebp - 0x2a8], ax
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], 7
mov word [ebp - 0x1d0], ax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1ac]
push 0x18
push str._Signature_pimx_FileName
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], 7
mov word [ebp - 0x1ac], ax
call fcn.10001d60
lea eax, [ebp - 0x1d0]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x1ac]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.10111dc0
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x198]
cmp edx, 8
jb 0x1002436d
mov ecx, dword [ebp - 0x1ac]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024363
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f1c
push edx
push ecx
call fcn.1015cbd5
add esp, 8
cmp dword [ebp - 0x1d4], 8
lea eax, [ebp - 0x1e8]
cmovae eax, dword [ebp - 0x1e8]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
mov edx, eax
lea esi, [edx + 2]
nop dword [eax]
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x10024390
sub edx, esi
lea ecx, [ebp - 0x218]
sar edx, 1
push edx
push eax
call fcn.10001d60
cmp dword [ebp - 0x1bc], 8
lea ecx, [ebp - 0x1d0]
lea eax, [ebp - 0x218]
cmovae ecx, dword [ebp - 0x1d0]
cmp dword [ebp - 0x204], 8
push ecx
cmovae eax, dword [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
lea eax, [ebp - 0x1e8]
je 0x10024416
cmp dword [ebp - 0x1d4], 8
cmovae eax, dword [ebp - 0x1e8]
push eax
push str.File__s_is_corrupted._File_name_mismatch_found_while_validating_package
push 0x101aee58
push ecx
call fcn.1004cb70
add esp, 4
push eax
call fcn.1004dbb0
add esp, 0x10
jmp 0x10024b7b
cmp dword [ebp - 0x1d4], 8
lea ecx, [ebp - 0x314]
push dword [ebp - 0x1d8]
cmovae eax, dword [ebp - 0x1e8]
push eax
call fcn.10001d60
push str._Signature_pimx_FileSize
lea ecx, [ebp - 0x330]
call fcn.10001cb0
lea eax, [ebp - 0x200]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x330]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.10111dc0
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x31c]
cmp edx, 8
jb 0x100244a7
mov ecx, dword [ebp - 0x330]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002449d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f21
push edx
push ecx
call fcn.1015cbd5
add esp, 8
lea ecx, [ebp - 0x200]
call fcn.10101790
push str._Signature_pimx_CheckSum
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], edx
call fcn.10001cb0
lea eax, [ebp - 0x2c0]
mov byte [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x330]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.10116480
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x31c]
cmp edx, 8
jb 0x1002452f
mov ecx, dword [ebp - 0x330]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024525
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f26
push edx
push ecx
call fcn.1015cbd5
add esp, 8
lea ecx, [ebp - 0x318]
call fcn.1011a990
test eax, eax
je 0x10024571
cmp dword [ebp - 0x1d4], 8
lea ecx, [ebp - 0x1e8]
push eax
cmovae ecx, dword [ebp - 0x1e8]
push ecx
push str.File__s_is_corrupted._OCEError:__d
push 0x101aee58
call fcn.1004cb70
push eax
call fcn.1004dbb0
add esp, 0x14
jmp 0x10024b7b
lea eax, [ebp - 0x1e8]
xor bh, bh
push eax
lea ecx, [ebp - 0x1ac]
call fcn.10002700
mov byte [ebp - 4], 0x10
cmp dword [edi + 0x80], 2
jne 0x100246b9
lea ecx, [ebp - 0x1ac]
call fcn.100fd870
push 1
push 0x101ace08
lea ecx, [ebp - 0x1ac]
call fcn.10001e70
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
push dword [ebp - 0x220]
cmovae eax, dword [ebp - 0x230]
lea ecx, [ebp - 0x1ac]
push eax
call fcn.10001e70
push 5
push str..pima
lea ecx, [ebp - 0x1ac]
call fcn.10001e70
call fcn.1004cb70
cmp dword [ebp - 0x198], 8
lea ecx, [ebp - 0x1ac]
cmovae ecx, dword [ebp - 0x1ac]
mov esi, dword [eax]
push ecx
push str.Validating_package_file:__s
push 0x101aee58
mov esi, dword [esi + 0x54]
mov ecx, esi
push eax
call dword [0x1019a4f8]
call esi
add esp, 0x10
mov dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1bc], 8
lea eax, [ebp - 0x1d0]
cmovae eax, dword [ebp - 0x1d0]
xor ecx, ecx
push str._Signature_pima_FileName
mov word [eax], cx
lea ecx, [ebp - 0x330]
call fcn.10001cb0
lea eax, [ebp - 0x1d0]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x330]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.10111dc0
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x31c]
cmp edx, 8
jb 0x10024930
mov ecx, dword [ebp - 0x330]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024926
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f2b
jmp 0x10024926
push str..pima
lea ecx, [ebp - 0x330]
call fcn.10001cb0
mov byte [ebp - 4], 0x11
xor ecx, ecx
mov eax, dword [ebp - 0x320]
mov edx, 2
mov edi, dword [ebp - 0x19c]
inc eax
add edi, eax
xor bl, bl
mov eax, edi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1015cbe3
mov esi, eax
add esp, 4
test esi, esi
je 0x1002476c
cmp dword [ebp - 0x198], 8
lea ecx, [ebp - 0x1ac]
cmovae ecx, dword [ebp - 0x1ac]
push ecx
push edi
push esi
call fcn.10168746
add esp, 0xc
lea eax, [ebp - 0x330]
cmp dword [ebp - 0x31c], 8
cmovae eax, dword [ebp - 0x330]
push eax
push esi
call dword [sym.imp.SHLWAPI.dll_PathRenameExtensionW]
cmp eax, 1
sete bl
jne 0x10024763
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10024747
sub ecx, edx
sar ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x1ac]
call fcn.10001d60
push esi
call fcn.1015c886
add esp, 4
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x31c]
cmp edx, 8
jb 0x100247b0
mov ecx, dword [ebp - 0x330]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100247a6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f30
push edx
push ecx
call fcn.1015cbd5
add esp, 8
test bl, bl
jne 0x100245eb
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x198]
cmp edx, 8
jb 0x100247fc
mov ecx, dword [ebp - 0x1ac]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100247f2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f3f
push edx
push ecx
call fcn.1015cbd5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x1bc]
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 7
mov word [ebp - 0x1ac], ax
cmp edx, 8
jb 0x1002485d
mov ecx, dword [ebp - 0x1d0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024853
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f3f
push edx
push ecx
call fcn.1015cbd5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x1ec]
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 7
mov word [ebp - 0x1d0], ax
cmp edx, 8
jb 0x100248be
mov ecx, dword [ebp - 0x200]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100248b4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f3f
push edx
push ecx
call fcn.1015cbd5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x204]
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 7
mov word [ebp - 0x200], ax
cmp edx, 8
jb 0x1002491f
mov ecx, dword [ebp - 0x218]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024915
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f3f
push edx
push ecx
call fcn.1015cbd5
add esp, 8
xor bh, bh
jmp 0x10024cb4
push edx
push ecx
call fcn.1015cbd5
add esp, 8
push ecx
lea edx, [ebp - 0x218]
lea ecx, [ebp - 0x1ac]
call fcn.100fdb40
add esp, 4
lea ecx, [ebp - 0x1d0]
cmp dword [ebp - 0x1bc], 8
lea eax, [ebp - 0x218]
cmovae ecx, dword [ebp - 0x1d0]
cmp dword [ebp - 0x204], 8
push ecx
cmovae eax, dword [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
lea eax, [ebp - 0x1ac]
je 0x100249af
cmp dword [ebp - 0x198], 8
cmovae eax, dword [ebp - 0x1ac]
push eax
push str.File__s_is_corrupted._File_name_mismatch_found_while_validating_package
push 0x101aee58
push ecx
call fcn.1004cb70
add esp, 4
push eax
call fcn.1004dbb0
add esp, 0x10
jmp 0x10024b37
cmp dword [ebp - 0x198], 8
lea ecx, [ebp - 0x314]
push dword [ebp - 0x19c]
cmovae eax, dword [ebp - 0x1ac]
push eax
call fcn.10001d60
lea ecx, [ebp - 0x200]
call fcn.1001e8e0
push str._Signature_pima_FileSize
lea ecx, [ebp - 0x330]
call fcn.10001cb0
lea eax, [ebp - 0x200]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x330]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.10111dc0
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x31c]
cmp edx, 8
jb 0x10024a4b
mov ecx, dword [ebp - 0x330]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024a41
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f35
push edx
push ecx
call fcn.1015cbd5
add esp, 8
lea ecx, [ebp - 0x200]
call fcn.10101790
cmp dword [ebp - 0x2ac], 0x10
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x2e0], eax
lea eax, [ebp - 0x2c0]
cmovae eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x2dc], edx
mov dword [ebp - 0x2b0], 0
push str._Signature_pima_CheckSum
mov byte [eax], 0
call fcn.10001cb0
lea eax, [ebp - 0x2c0]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x330]
push eax
lea ecx, [ebp - 0x1b8]
call fcn.10116480
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x31c]
cmp edx, 8
jb 0x10024af4
mov ecx, dword [ebp - 0x330]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024aea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f3a
push edx
push ecx
call fcn.1015cbd5
add esp, 8
lea ecx, [ebp - 0x318]
call fcn.1011a990
mov ecx, eax
test ecx, ecx
jne 0x10024b09
mov bh, 1
jmp 0x10024b37
cmp dword [ebp - 0x198], 8
lea eax, [ebp - 0x1ac]
push ecx
cmovae eax, dword [ebp - 0x1ac]
push eax
push str.File__s_is_corrupted._OCEError:__d
push 0x101aee58
call fcn.1004cb70
push eax
call fcn.1004dbb0
add esp, 0x14
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x198]
cmp edx, 8
jb 0x10024b7b
mov ecx, dword [ebp - 0x1ac]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024b71
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f3f
push edx
push ecx
call fcn.1015cbd5
add esp, 8
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x1bc]
cmp edx, 8
jb 0x10024bbf
mov ecx, dword [ebp - 0x1d0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024bb5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f44
push edx
push ecx
call fcn.1015cbd5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x1ec]
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 7
mov word [ebp - 0x1d0], ax
cmp edx, 8
jb 0x10024c20
mov ecx, dword [ebp - 0x200]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024c16
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f44
push edx
push ecx
call fcn.1015cbd5
add esp, 8
xor eax, eax
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x204]
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 7
mov word [ebp - 0x200], ax
cmp edx, 8
jb 0x10024cb4
mov ecx, dword [ebp - 0x218]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024c77
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f44
push edx
push ecx
call fcn.1015cbd5
add esp, 8
jmp 0x10024cb4
cmp dword [ebp - 0x234], 8
lea eax, [ebp - 0x248]
cmovae eax, dword [ebp - 0x248]
push eax
push str.Failed_to_load_signature_file:__s
push 0x101aee58
push ecx
call fcn.1004cb70
add esp, 4
push eax
call fcn.1004dbb0
add esp, 0x10
mov byte [ebp - 4], 0x15
mov esi, dword [ebp - 0x1b4]
test esi, esi
je 0x10024cd4
mov eax, dword [esi]
push esi
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x1019a4f8]
call esi
xor esi, esi
cmp byte [ebp - 0x1b0], 0
je 0x10024ce3
call dword [sym.imp.ole32.dll_CoUninitialize]
test esi, esi
je 0x10024cf7
mov eax, dword [esi]
push esi
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x1019a4f8]
call esi
mov edx, dword [ebp - 0x21c]
cmp edx, 8
jb 0x10024d37
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024d2d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f49
push edx
push ecx
call fcn.1015cbd5
add esp, 8
mov edx, dword [ebp - 0x264]
cmp edx, 0x10
jb 0x10024d71
mov ecx, dword [ebp - 0x278]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10024d67
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f49
push edx
push ecx
call fcn.1015cbd5
add esp, 8
mov edx, dword [ebp - 0x24c]
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
cmp edx, 0x10
jb 0x10024dc6
mov ecx, dword [ebp - 0x260]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10024dbc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f49
push edx
push ecx
call fcn.1015cbd5
add esp, 8
mov edx, dword [ebp - 0x234]
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 0xf
mov byte [ebp - 0x260], 0
cmp edx, 8
jb 0x10024e21
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10024e17
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f49
push edx
push ecx
call fcn.1015cbd5
add esp, 8
mov edx, dword [ebp - 0x2ac]
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
cmp edx, 0x10
jb 0x10024e78
mov ecx, dword [ebp - 0x2c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10024e6e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f49
push edx
push ecx
call fcn.1015cbd5
add esp, 8
mov edx, dword [ebp - 0x2e8]
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2ac], 0xf
mov byte [ebp - 0x2c0], 0
cmp edx, 0x10
jb 0x10024ecd
mov ecx, dword [ebp - 0x2fc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10024ec3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10024f49
push edx
push ecx
call fcn.1015cbd5
add esp, 8
lea ecx, [ebp - 0x314]
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x2e8], 0xf
mov byte [ebp - 0x2fc], 0
call fcn.10001d00
lea ecx, [ebp - 0x1e8]
call fcn.10001d00
mov al, bh
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1015c875
mov esp, ebp
pop ebp
ret
call fcn.101686f5
call fcn.101686f5
call fcn.101686f5
call fcn.101686f5
call fcn.101686f5
call fcn.101686f5
call fcn.101686f5
call fcn.101686f5
call fcn.101686f5
call fcn.101686f5
int3