Function at 0x10074793
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jae 0x10074019
jmp 0x10074014
call fcn.1007401b
jae 0x10074014
add esp, 4
jmp 0x10074020
dec dword [esp]
jno 0x10074025
jns 0x10074010
jp 0x10074029
add esp, 4
popf
jmp 0x10074030
clc
jae 0x10074035
mov word [edx + 0x50], es
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1007404e
jne 0x1007404e
inc edx
jl 0x10074053
jmp 0x10074055
je 0x10074050
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1007406f
jne 0x1007406e
call 0x930b30f6
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1007407d
jne 0x1007407d
call fcn.10079d39
add byte [esi - 0x77], ah
inc ebp
mov byte [ecx + 0x5c], bh
mov eax, 0x5c
mov word [ebp - 0x78], ax
mov ecx, 0x5c
mov word [ebp - 0x76], cx
mov edx, 0x67
mov word [ebp - 0x74], dx
mov eax, 0x6c
mov word [ebp - 0x72], ax
mov ecx, 0x6f
mov word [ebp - 0x70], cx
mov edx, 0x62
mov word [ebp - 0x6e], dx
mov eax, 0x61
mov word [ebp - 0x6c], ax
mov ecx, 0x6c
mov word [ebp - 0x6a], cx
mov edx, 0x3f
mov word [ebp - 0x68], dx
mov eax, 0x3f
mov word [ebp - 0x66], ax
xor ecx, ecx
mov word [ebp - 0x64], cx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x9d4]
push eax
mov ecx, dword [0x101034a4]
mov edx, dword [ecx + 0x34c]
mov dword [ebp - 0xa58], edx
mov ecx, dword [ebp - 0xa58]
call dword [0x100e7c9c]
call dword [ebp - 0xa58]
nop
mov dword [ebp - 0x9f8], 0x18
mov dword [ebp - 0x9f4], 0
mov dword [ebp - 0x9ec], 0x40
lea eax, [ebp - 0x9d4]
mov dword [ebp - 0x9f0], eax
mov dword [ebp - 0x9e8], 0
mov dword [ebp - 0x9e4], 0
lea ecx, [ebp - 0x9f8]
push ecx
push 1
lea edx, [ebp - 0x9e0]
push edx
mov eax, dword [0x101034a4]
mov ecx, dword [eax + 0x340]
mov dword [ebp - 0xa54], ecx
mov ecx, dword [ebp - 0xa54]
call dword [0x100e7c9c]
call dword [ebp - 0xa54]
mov dword [ebp - 0xa08], eax
cmp dword [ebp - 0xa08], 0
je 0x100741c6
cmp dword [ebp - 0x9e0], 0
je 0x100741c1
mov edx, dword [ebp - 0x9e0]
push edx
mov eax, dword [0x101034a4]
mov ecx, dword [eax + 0x344]
mov dword [ebp - 0xa50], ecx
mov ecx, dword [ebp - 0xa50]
call dword [0x100e7c9c]
call dword [ebp - 0xa50]
nop
jmp 0x10074f2a
push 0x800
push 0
lea edx, [ebp - 0x994]
push edx
call fcn.100a76a0
add esp, 0xc
mov dword [ebp - 0xa5c], 0x800
mov dword [ebp - 0x9a0], 0
mov dword [ebp - 0x9a4], 0
mov dword [ebp - 0x9fc], 0
mov eax, 0x53
mov word [ebp - 0x94], ax
mov ecx, 0x79
mov word [ebp - 0x92], cx
mov edx, 0x6d
mov word [ebp - 0x90], dx
mov eax, 0x62
mov word [ebp - 0x8e], ax
mov ecx, 0x6f
mov word [ebp - 0x8c], cx
mov edx, 0x6c
mov word [ebp - 0x8a], dx
mov eax, 0x69
mov word [ebp - 0x88], ax
mov ecx, 0x63
mov word [ebp - 0x86], cx
mov edx, 0x6b
mov word [ebp - 0x84], dx
mov eax, 0x4c
mov word [ebp - 0x82], ax
mov ecx, 0x69
mov word [ebp - 0x80], cx
mov edx, 0x6e
mov word [ebp - 0x7e], dx
mov eax, 0x6b
mov word [ebp - 0x7c], ax
xor ecx, ecx
mov word [ebp - 0x7a], cx
lea edx, [ebp - 0x94]
push edx
lea eax, [ebp - 0x9dc]
push eax
mov ecx, dword [0x101034a4]
mov edx, dword [ecx + 0x34c]
mov dword [ebp - 0xa4c], edx
mov ecx, dword [ebp - 0xa4c]
call dword [0x100e7c9c]
call dword [ebp - 0xa4c]
xor eax, eax
mov dword [ebp - 0x9cc], eax
mov dword [ebp - 0x9c8], eax
mov dword [ebp - 0x9c4], eax
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9bc], eax
mov dword [ebp - 0x9b8], eax
mov dword [ebp - 0x9b4], eax
mov dword [ebp - 0x9b0], eax
mov dword [ebp - 0x9ac], eax
mov dword [ebp - 0x9a8], eax
mov dword [ebp - 0x9cc], 0x75bcd15
call fcn.10076d30
mov dword [ebp - 0x9c8], eax
mov ecx, dword [0x101034a4]
mov edx, dword [ecx + 0x68]
mov dword [ebp - 0xa44], edx
mov ecx, dword [ebp - 0xa44]
call dword [0x100e7c9c]
call dword [ebp - 0xa44]
mov word [ebp - 0x9a8], ax
pushf
push 0xa
jae 0x10074357
jmp 0x10074352
call 0x10074359
jae 0x10074352
add esp, 4
jmp 0x1007435e
dec dword [esp]
jno 0x10074363
jns 0x1007434e
jp 0x10074367
add esp, 4
popf
jmp 0x1007436e
clc
jae 0x10074373
mov al, byte [eax]
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1007438c
jne 0x1007438c
add byte [ebx + eax - 0x15], bh
add eax, dword [eax]
jl 0x10074391
jmp 0x10074393
je 0x1007438e
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x100743ad
jne 0x100743ac
call 0x930b3434
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x100743bb
jne 0x100743bb
call 0x663c94c
invalid
lea eax, [ebp - 0x9a4]
push eax
lea ecx, [ebp - 0x9a0]
push ecx
push 0
push 1
mov edx, dword [ebp - 0xa5c]
push edx
lea eax, [ebp - 0x994]
push eax
mov ecx, dword [ebp - 0x9e0]
push ecx
mov edx, dword [0x101034a4]
mov eax, dword [edx + 0x348]
mov dword [ebp - 0xa40], eax
mov ecx, dword [ebp - 0xa40]
call dword [0x100e7c9c]
call dword [ebp - 0xa40]
mov dword [ebp - 0xa08], eax
cmp dword [ebp - 0xa08], 0
je 0x10074458
cmp dword [ebp - 0xa08], 0x8000001a
je 0x10074458
cmp dword [ebp - 0x9e0], 0
je 0x10074456
mov ecx, dword [ebp - 0x9e0]
push ecx
mov edx, dword [0x101034a4]
mov eax, dword [edx + 0x344]
mov dword [ebp - 0xa3c], eax
mov ecx, dword [ebp - 0xa3c]
call dword [0x100e7c9c]
call dword [ebp - 0xa3c]
nop
jmp 0x1007449e
cmp dword [ebp - 0xa08], 0x8000001a
jne 0x1007449e
cmp dword [ebp - 0x9e0], 0
je 0x10074499
mov ecx, dword [ebp - 0x9e0]
push ecx
mov edx, dword [0x101034a4]
mov eax, dword [edx + 0x344]
mov dword [ebp - 0xa38], eax
mov ecx, dword [ebp - 0xa38]
call dword [0x100e7c9c]
call dword [ebp - 0xa38]
nop
jmp 0x10074f2a
lea ecx, [ebp - 0x994]
mov dword [ebp - 0xa60], ecx
mov edx, 0x5c
mov word [ebp - 0x60], dx
mov eax, 0x5c
mov word [ebp - 0x5e], ax
mov ecx, 0x5c
mov word [ebp - 0x5c], cx
mov edx, 0x5c
mov word [ebp - 0x5a], dx
mov eax, 0x2e
mov word [ebp - 0x58], ax
mov ecx, 0x5c
mov word [ebp - 0x56], cx
mov edx, 0x5c
mov word [ebp - 0x54], dx
xor eax, eax
mov word [ebp - 0x52], ax
mov ecx, dword [ebp - 0xa60]
mov edx, dword [ecx + 4]
mov dword [ebp - 0xa0c], edx
mov eax, dword [ebp - 0xa0c]
mov dword [ebp - 0xa34], eax
mov ecx, dword [ebp - 0xa0c]
mov dx, word [ecx]
mov word [ebp - 0xa1a], dx
add dword [ebp - 0xa0c], 2
cmp word [ebp - 0xa1a], 0
jne 0x1007450a
mov eax, dword [ebp - 0xa0c]
sub eax, dword [ebp - 0xa34]
mov ecx, dword [ebp - 0xa34]
mov dword [ebp - 0xa64], ecx
mov dword [ebp - 0xa68], eax
lea edx, [ebp - 0x60]
add edx, 0xfffffffe
mov dword [ebp - 0xa14], edx
mov eax, dword [ebp - 0xa14]
mov cx, word [eax + 2]
mov word [ebp - 0xa16], cx
add dword [ebp - 0xa14], 2
cmp word [ebp - 0xa16], 0
jne 0x10074555
mov edi, dword [ebp - 0xa14]
mov esi, dword [ebp - 0xa64]
mov edx, dword [ebp - 0xa68]
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jl 0x1007459c
jmp 0x1007459e
je 0x10074599
xor eax, eax
test eax, eax
je 0x100745a7
jne 0x100745a6
call 0x930b362e
rol byte [ebx + eax*4], 0xf0
add eax, 0x920273f8
xor eax, 3
add eax, 4
xor eax, 5
clc
jae 0x100745b5
xchg edx, eax
or esi, dword [ebx + eax + 0x75]
add dword [ebx], ecx
je 0x100745ba
jne 0x100745ba
or esp, dword [esi - 0x64]
pushf
push 0xa
jae 0x100745c7
jmp 0x100745c2
call 0x100745c9
jae 0x100745c2
add esp, 4
jmp 0x100745ce
dec dword [esp]
jno 0x100745d3
jns 0x100745be
jp 0x100745d7
add esp, 4
popf
jmp 0x100745de
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100745f7
jne 0x100745f7
call 0x1fc7794b
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
lea eax, [ebp - 0x60]
mov dword [ebp - 0xa10], eax
mov ecx, dword [ebp - 0xa10]
add ecx, 2
mov dword [ebp - 0xa6c], ecx
mov edx, dword [ebp - 0xa10]
mov ax, word [edx]
mov word [ebp - 0xa18], ax
add dword [ebp - 0xa10], 2
cmp word [ebp - 0xa18], 0
jne 0x10074620
mov ecx, dword [ebp - 0xa10]
sub ecx, dword [ebp - 0xa6c]
sar ecx, 1
mov dword [ebp - 0xa70], ecx
mov edx, dword [ebp - 0xa70]
mov dword [ebp - 0xa74], edx
cmp dword [ebp - 0xa74], 0xc
jle 0x1007466f
jmp 0x10074e77
push 0xff
push 0
lea eax, [ebp - 0x194]
push eax
call fcn.100a76a0
add esp, 0xc
mov dword [ebp - 0x99c], 0
push 0
push 0x80
push 3
push 0
push 3
push 0xc0000000
lea ecx, [ebp - 0x60]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xa00], eax
cmp dword [ebp - 0xa00], 0xffffffff
jne 0x100746bf
jmp 0x10074e77
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 0x9cc]
mov dword [ebp + eax - 0x194], ecx
mov edx, 1
shl edx, 2
mov eax, dword [ebp - 0x9c8]
mov dword [ebp + edx - 0x194], eax
mov ecx, 1
shl ecx, 3
mov dword [ebp + ecx - 0x194], 1
mov edx, 1
imul eax, edx, 0xc
mov dword [ebp + eax - 0x194], 1
mov ecx, 1
shl ecx, 4
mov dword [ebp + ecx - 0x194], 1
mov edx, 1
imul eax, edx, 0x14
mov dword [ebp + eax - 0x194], 1
mov ecx, 1
imul edx, ecx, 0x18
mov dword [ebp + edx - 0x194], 1
mov eax, 1
imul ecx, eax, 0x1c
mov dword [ebp + ecx - 0x194], 0
mov edx, 1
shl edx, 5
mov ax, word [ebp - 0x9a8]
mov word [ebp + edx - 0x194], ax
mov ecx, 1
imul edx, ecx, 0x22
xor eax, eax
mov word [ebp + edx - 0x194], ax
pushf
push 0xa
jae 0x10074791
jmp 0x1007478c
call 0x10074793
jae 0x1007478c
add esp, 4
jmp 0x10074798
dec dword [esp]
jno 0x1007479d
jns 0x10074788
jp 0x100747a1
add esp, 4
popf
jmp 0x100747a8
clc
jae 0x100747ad
retf
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100747c6
jne 0x100747c6
jns 0x10074843
jl 0x100747cb
add ebp, ebx
add edi, dword [ecx + 0x74]
sti
jmp 0x100747cd
je 0x100747c8
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x100747e7
jne 0x100747e6
call 0x930b386e
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x100747f5
jne 0x100747f5
call 0x52df8dbf
mov byte [ebp - 0x28], 0x42
mov byte [ebp - 0x27], 0xa3
mov byte [ebp - 0x26], 0x53
mov byte [ebp - 0x25], 4
mov byte [ebp - 0x24], 0x4d
mov byte [ebp - 0x23], 0x4b
mov byte [ebp - 0x22], 0xa3
mov byte [ebp - 0x21], 0xc4
mov byte [ebp - 0x20], 0xec
mov byte [ebp - 0x1f], 0xf8
mov byte [ebp - 0x1e], 0xe5
mov byte [ebp - 0x1d], 0x41
mov byte [ebp - 0x1c], 0x9d
mov byte [ebp - 0x1b], 0xef
mov byte [ebp - 0x1a], 0xae
mov byte [ebp - 0x19], 0x46
mov byte [ebp - 0x18], 0x95
xchg ebp, eax
mov byte [ebp - 0x17], 0x59
mov byte [ebp - 0x16], 0x7d
mov byte [ebp - 0x15], 0xf3
mov byte [ebp - 0x14], 0x98
mov byte [ebp - 0x13], 0xbd
mov byte [ebp - 0x12], 0xdc
mov byte [ebp - 0x11], 0xd4
mov byte [ebp - 0x10], 0x1f
mov byte [ebp - 0xf], 0xe9
mov byte [ebp - 0xe], 0xc1
mov byte [ebp - 0xd], 0xd9
mov byte [ebp - 0xc], 0xfb
mov byte [ebp - 0xb], 0xf1
mov byte [ebp - 0xa], 0xe9
mov byte [ebp - 9], 0x8d
mov byte [ebp - 8], 0x85
mov byte [ebp - 7], 0xb
mov byte [ebp - 6], 0x7b
mov byte [ebp - 5], 0x14
pushf
push 0xa
jmp 0x10074838
jae 0x10074892
jmp 0x1007488d
call 0x10074894
jae 0x1007488d
add esp, 4
jmp 0x10074899
dec dword [esp]
jno 0x1007489e
jns 0x10074889
jp 0x100748a2
add esp, 4
popf
jmp 0x100748a9
clc
jae 0x100748ae
imul esi, edx, 0x50
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100748c7
jne 0x100748c7
bnd jl 0x100748cc
jl 0x100748cc
jmp 0x100748ce
je 0x100748c9
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x100748e8
jne 0x100748e7
call 0x930b396f
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x100748f6
jne 0x100748f6
call 0x66fcec0
invalid
mov byte [ebp - 0x998], 0xff
mov byte [ebp - 0x997], 0xff
mov byte [ebp - 0x996], 0xff
mov byte [ebp - 0x995], 0xff
mov dword [ebp - 0xa04], 0
jmp 0x1007492d
mov ecx, dword [ebp - 0xa04]
add ecx, 1
mov dword [ebp - 0xa04], ecx
cmp dword [ebp - 0xa04], 0x24
jge 0x10074960
mov edx, dword [ebp - 0xa04]
movzx eax, byte [ebp + edx - 0x28]
mov ecx, dword [ebp - 0xa04]
movzx edx, byte [ebp + ecx - 0x194]
xor edx, eax
mov eax, dword [ebp - 0xa04]
mov byte [ebp + eax - 0x194], dl
jmp 0x1007491e
push 0
lea ecx, [ebp - 0x99c]
push ecx
push 0
push 0
push 0x24
lea edx, [ebp - 0x28]
push edx
push 0x22215c
mov eax, dword [ebp - 0xa00]
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
test eax, eax
jne 0x100749ba
mov ecx, dword [ebp - 0xa00]
push ecx
mov edx, dword [0x101034a4]
mov eax, dword [edx + 0xb0]
mov dword [ebp - 0xa30], eax
mov ecx, dword [ebp - 0xa30]
call dword [0x100e7c9c]
call dword [ebp - 0xa30]
nop
jmp 0x10074e77
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 0x9cc]
mov dword [ebp + edx - 0x194], eax
mov ecx, 1
shl ecx, 2
mov dword [ebp + ecx - 0x194], 0
mov edx, 1
shl edx, 3
mov dword [ebp + edx - 0x194], 0
mov eax, 1
imul ecx, eax, 0xc
mov dword [ebp + ecx - 0x194], 0
mov edx, 1
shl edx, 4
mov dword [ebp + edx - 0x194], 0
mov eax, 1
imul ecx, eax, 0x14
mov dword [ebp + ecx - 0x194], 0
mov edx, 1
imul eax, edx, 0x18
mov dword [ebp + eax - 0x194], 0
mov ecx, 1
imul edx, ecx, 0x1c
mov dword [ebp + edx - 0x194], 0
mov eax, 1
shl eax, 5
xor ecx, ecx
mov word [ebp + eax - 0x194], cx
mov edx, 1
imul eax, edx, 0x22
xor ecx, ecx
mov word [ebp + eax - 0x194], cx
mov dword [ebp - 0x9fc], 0
jmp 0x10074a93
mov edx, dword [ebp - 0x9fc]
add edx, 1
mov dword [ebp - 0x9fc], edx
cmp dword [ebp - 0x9fc], 0x24
jge 0x10074ac6
mov eax, dword [ebp - 0x9fc]
movzx ecx, byte [ebp + eax - 0x28]
mov edx, dword [ebp - 0x9fc]
movzx eax, byte [ebp + edx - 0x194]
xor eax, ecx
mov ecx, dword [ebp - 0x9fc]
mov byte [ebp + ecx - 0x194], al
jmp 0x10074a84
jl 0x10074acb
jmp 0x10074acd
je 0x10074ac8
xor eax, eax
test eax, eax
je 0x10074ad6
jne 0x10074ad5
call 0x930b3b5d
rol byte [ebx + eax*4], 0xf0
add eax, 0xc40273f8
invalid
xor eax, 3
add eax, 4
xor eax, 5
clc
jae 0x10074ae4
les ecx, [edi + 0x1750374]
je 0x10074ae9
jne 0x10074ae9
invalid
pushf
push 0xa
jae 0x10074af6
jmp 0x10074af1
call 0x10074af8
jae 0x10074af1
add esp, 4
jmp 0x10074afd
dec dword [esp]
jno 0x10074b02
jns 0x10074aed
jp 0x10074b06
add esp, 4
popf
jmp 0x10074b0d
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10074b26
jne 0x10074b26
call 0x1fc77e7a
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0
lea edx, [ebp - 0x99c]
push edx
push 0
push 0
push 0x24
lea eax, [ebp - 0x194]
push eax
push 0x222178
mov ecx, dword [ebp - 0xa00]
push ecx
mov edx, dword [0x101034a4]
mov eax, dword [edx + 0x350]
mov dword [ebp - 0xa2c], eax
mov ecx, dword [ebp - 0xa2c]
call dword [0x100e7c9c]
call dword [ebp - 0xa2c]
test eax, eax
je 0x10074bb2
mov ecx, dword [ebp - 0xa00]
push ecx
mov edx, dword [0x101034a4]
mov eax, dword [edx + 0xb0]
mov dword [ebp - 0xa48], eax
mov ecx, dword [ebp - 0xa48]
call dword [0x100e7c9c]
call dword [ebp - 0xa48]
nop
jmp 0x10074e77
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 0x9cc]
mov dword [ebp + edx - 0x194], eax
mov ecx, 1
shl ecx, 2
mov dword [ebp + ecx - 0x194], 0
mov edx, 1
shl edx, 3
mov dword [ebp + edx - 0x194], 0
mov eax, 1
imul ecx, eax, 0xc
mov dword [ebp + ecx - 0x194], 0
mov edx, 1
shl edx, 4
mov dword [ebp + edx - 0x194], 0
mov eax, 1
imul ecx, eax, 0x14
mov dword [ebp + ecx - 0x194], 0
mov edx, 1
imul eax, edx, 0x18
mov dword [ebp + eax - 0x194], 0
mov ecx, 1
imul edx, ecx, 0x1c
mov dword [ebp + edx - 0x194], 0
mov eax, 1
shl eax, 5
mov cx, word [ebp - 0x9a8]
mov word [ebp + eax - 0x194], cx
mov edx, 1
imul eax, edx, 0x22
xor ecx, ecx
mov word [ebp + eax - 0x194], cx
mov dword [ebp - 0x9fc], 0
jmp 0x10074c90
mov edx, dword [ebp - 0x9fc]
add edx, 1
mov dword [ebp - 0x9fc], edx
cmp dword [ebp - 0x9fc], 0x24
jge 0x10074cc3
mov eax, dword [ebp - 0x9fc]
movzx ecx, byte [ebp + eax - 0x28]
mov edx, dword [ebp - 0x9fc]
movzx eax, byte [ebp + edx - 0x194]
xor eax, ecx
mov ecx, dword [ebp - 0x9fc]
mov byte [ebp + ecx - 0x194], al
jmp 0x10074c81
pushf
push 0xa
jae 0x10074cd0
jmp 0x10074ccb
call 0x10074cd2
jae 0x10074ccb
add esp, 4
jmp 0x10074cd7
dec dword [esp]
jno 0x10074cdc
jns 0x10074cc7
jp 0x10074ce0
add esp, 4
popf
jmp 0x10074ce7
clc
jae 0x10074cec
cld
fcom qword [eax + 0x52]
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10074d05
jne 0x10074d05
fdivr qword [ebx + eax - 0x15]
add ebx, esp
jl 0x10074d0a
jmp 0x10074d0c
je 0x10074d07
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10074d26
jne 0x10074d25
call 0x930b3dad
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10074d34
jne 0x10074d34
call 0xa5944da2
idiv bh
call dword [edx + 0x6a]
add al, 0x8d
test dword [eax - 0xa], ebp
invalid
push 0
lea edx, [ebp - 0x99c]
push edx
push 4
lea eax, [ebp - 0x998]
push eax
push 0x24
lea ecx, [ebp - 0x28]
push ecx
push 0x222160
mov edx, dword [ebp - 0xa00]
push edx
mov eax, dword [0x101034a4]
mov ecx, dword [eax + 0x350]
mov dword [ebp - 0xa20], ecx
mov ecx, dword [ebp - 0xa20]
call dword [0x100e7c9c]
call dword [ebp - 0xa20]
cmp eax, 1
jne 0x10074e4b
mov byte [ebp - 0x50], 0x44
mov byte [ebp - 0x4f], 0x65
mov byte [ebp - 0x4e], 0x62
mov byte [ebp - 0x4d], 0x75
mov byte [ebp - 0x4c], 0x67
mov byte [ebp - 0x4b], 0x67
mov byte [ebp - 0x4a], 0x65
mov byte [ebp - 0x49], 0x72
mov byte [ebp - 0x48], 0x20
mov byte [ebp - 0x47], 0x44
mov byte [ebp - 0x46], 0x65
mov byte [ebp - 0x45], 0x74
mov byte [ebp - 0x44], 0x65
mov byte [ebp - 0x43], 0x63
mov byte [ebp - 0x42], 0x74
mov byte [ebp - 0x41], 0x65
mov byte [ebp - 0x40], 0x64
mov byte [ebp - 0x3f], 0x3b
mov byte [ebp - 0x3e], 0x20
mov byte [ebp - 0x3d], 0x45
mov byte [ebp - 0x3c], 0x72
mov byte [ebp - 0x3b], 0x72
mov byte [ebp - 0x3a], 0x20
mov byte [ebp - 0x39], 0x43
mov byte [ebp - 0x38], 0x6f
mov byte [ebp - 0x37], 0x64
mov byte [ebp - 0x36], 0x65
mov byte [ebp - 0x35], 0x3a
mov byte [ebp - 0x34], 0x20
mov byte [ebp - 0x33], 0x30
mov byte [ebp - 0x32], pe_nt_image_headers32
mov byte [ebp - 0x31], 0x39
mov byte [ebp - 0x30], 0x30
mov byte [ebp - 0x2f], 0x30
mov byte [ebp - 0x2e], 0x30
mov byte [ebp - 0x2d], 0x30
mov byte [ebp - 0x2c], 0x30
mov byte [ebp - 0x2b], 0x31
mov byte [ebp - 0x2a], 0x39
mov byte [ebp - 0x29], 0
mov ecx, dword [0x101034a8]
call fcn.10009e20
push eax
push 0
push 0x100d517e
push 1
lea edx, [ebp - 0x50]
push edx
mov ecx, dword [0x10103414]
call fcn.10011500
nop
jmp 0x10074e77
mov eax, dword [ebp - 0xa00]
push eax
mov ecx, dword [0x101034a4]
mov edx, dword [ecx + 0xb0]
mov dword [ebp - 0xa24], edx
mov ecx, dword [ebp - 0xa24]
call dword [0x100e7c9c]
call dword [ebp - 0xa24]
nop
mov eax, 1
test eax, eax
jne 0x100743bb
cmp dword [ebp - 0x9e0], 0
je 0x10074eb9
mov ecx, dword [ebp - 0x9e0]
push ecx
mov edx, dword [0x101034a4]
mov eax, dword [edx + 0x344]
mov dword [ebp - 0xa28], eax
mov ecx, dword [ebp - 0xa28]
call dword [0x100e7c9c]
call dword [ebp - 0xa28]
nop
pushf
push 0xa
jae 0x10074ec6
jmp 0x10074ec1
call 0x10074ec8
jae 0x10074ec1
add esp, 4
jmp 0x10074ecd
dec dword [esp]
jno 0x10074ed2
jns 0x10074ebd
jp 0x10074ed6
add esp, 4
popf
jmp 0x10074edd
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10005677
mov esp, ebp
pop ebp
ret