Function at 0x1002fc36
Capabilities:
Contain obfuscated stackstrings

Disassembly:
jae 0x1002f6e8
jmp 0x1002f6e3
call fcn.1002f6ea
jae 0x1002f6e3
add esp, 4
jmp 0x1002f6ef
dec dword [esp]
jno 0x1002f6f4
jns 0x1002f6df
jp 0x1002f6f8
add esp, 4
popf
jmp 0x1002f6ff
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x368
xor edx, eax
add eax, edx
sub edx, 0x368
push eax
pop edx
xor edx, 0xa38
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x368
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1002f753
jmp 0x1002f755
je 0x1002f750
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002f76f
jne 0x1002f76e
call 0x9306e7f6
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1002f77d
jne 0x1002f77d
call 0x179663e9
adc byte [ebp - 0x13f6b], cl
call dword [edx - 0x18]
bound ebx, qword [ecx - 0x3b7c0001]
or byte [edi], cl
mov dh, 0xc0
push 0x1007936c
lea edx, [ebp - 0x140]
push edx
call fcn.100290f0
add esp, 8
movzx eax, al
test eax, eax
je 0x1002f79d
call fcn.1000f410
clc
jae 0x1002f7a2
pop edx
mov ebx, 0xa6a9c66
pushf
push 0xa
jae 0x1002f7af
jmp 0x1002f7aa
call 0x1002f7b1
jae 0x1002f7aa
add esp, 4
jmp 0x1002f7b6
dec dword [esp]
jno 0x1002f7bb
jns 0x1002f7a6
jp 0x1002f7bf
add esp, 4
popf
jmp 0x1002f7c6
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x36f
xor edx, eax
add eax, edx
sub edx, 0x36f
push eax
pop edx
xor edx, 0xa4d
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x36f
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1002f81a
jmp 0x1002f81c
je 0x1002f817
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002f836
jne 0x1002f835
call 0x9306e8bd
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1002f844
jne 0x1002f844
call 0xd088b87b
xor eax, eax
test eax, eax
je 0x1002f84d
jne 0x1002f84c
call 0x9306e8d4
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
jns 0x1002f8d0
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002f85b
jmp 0x1002f85d
je 0x1002f858
sti
clc
jae 0x1002f862
sub bh, byte [ecx + 0x35]
jo 0x1002f868
xor eax, 0x370
add byte [eax], al
xor edx, eax
add eax, edx
sub edx, 0x370
push eax
pop edx
xor edx, 0xa50
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x370
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
rol byte [ebx], 1
ret 0xea81
jae 0x1002f8aa
jmp 0x1002f8a5
call 0x1002f8ac
jae 0x1002f8a5
add esp, 4
jmp 0x1002f8b1
dec dword [esp]
jno 0x1002f8b6
jns 0x1002f8a1
jp 0x1002f8ba
add esp, 4
popf
jmp 0x1002f8c1
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002f8da
jne 0x1002f8da
call 0x1fc32c2e
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0x1007936c
lea ecx, [ebp - 0x1d0]
push ecx
call fcn.100290f0
add esp, 8
movzx edx, al
test edx, edx
je 0x100300a5
mov dword [ebp - 0x338], 0
xor eax, eax
test eax, eax
je 0x1002f91d
jne 0x1002f91c
call 0x9306e9a4
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
aaa
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002f92b
jmp 0x1002f92d
je 0x1002f928
clc
jae 0x1002f932
div dword [edi]
xor eax, 0x377
xor edx, eax
add eax, edx
sub edx, 0x377
push eax
pop edx
xor edx, 0xa65
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x377
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x1002f97a
jmp 0x1002f975
call 0x1002f97c
jae 0x1002f975
add esp, 4
jmp 0x1002f981
dec dword [esp]
jno 0x1002f986
jns 0x1002f971
jp 0x1002f98a
add esp, 4
popf
jmp 0x1002f991
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002f9aa
jne 0x1002f9aa
call 0x1fc32cfe
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
mov eax, 0x6e
mov word [ebp - 0x24], ax
mov ecx, 0x74
mov word [ebp - 0x22], cx
mov edx, 0x64
mov word [ebp - 0x20], dx
mov eax, 0x6c
mov word [ebp - 0x1e], ax
mov ecx, 0x6c
mov word [ebp - 0x1c], cx
mov edx, 0x2e
mov word [ebp - 0x1a], dx
mov eax, 0x64
mov word [ebp - 0x18], ax
mov ecx, 0x6c
mov word [ebp - 0x16], cx
mov edx, 0x6c
mov word [ebp - 0x14], dx
xor eax, eax
mov word [ebp - 0x12], ax
mov ecx, 0x52
mov word [ebp - 0x4c], cx
mov edx, 0x74
mov word [ebp - 0x4a], dx
mov eax, 0x6c
mov word [ebp - 0x48], ax
mov ecx, 0x41
mov word [ebp - 0x46], cx
mov edx, 0x64
mov word [ebp - 0x44], dx
mov eax, 0x6a
mov word [ebp - 0x42], ax
mov ecx, 0x75
mov word [ebp - 0x40], cx
mov edx, 0x73
mov word [ebp - 0x3e], dx
mov eax, 0x74
mov word [ebp - 0x3c], ax
mov ecx, 0x50
mov word [ebp - 0x3a], cx
mov edx, 0x72
mov word [ebp - 0x38], dx
mov eax, 0x69
mov word [ebp - 0x36], ax
mov ecx, 0x76
mov word [ebp - 0x34], cx
mov edx, 0x69
mov word [ebp - 0x32], dx
mov eax, 0x6c
mov word [ebp - 0x30], ax
mov ecx, 0x65
mov word [ebp - 0x2e], cx
mov edx, 0x67
mov word [ebp - 0x2c], dx
mov eax, 0x65
mov word [ebp - 0x2a], ax
xor ecx, ecx
mov word [ebp - 0x28], cx
xor eax, eax
test eax, eax
je 0x1002fac3
jne 0x1002fac2
call 0x9306eb4a
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
test byte [ebx + edi*8 - 8], dh
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002fad1
jmp 0x1002fad3
je 0x1002face
clc
jae 0x1002fad8
sbb eax, dword [ebp + esi + 0x37c]
xor eax, 0x37c
xor edx, eax
add eax, edx
sub edx, 0x37c
push eax
pop edx
xor edx, 0xa74
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x37c
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x1002fb20
jmp 0x1002fb1b
call 0x1002fb22
jae 0x1002fb1b
add esp, 4
jmp 0x1002fb27
dec dword [esp]
jno 0x1002fb2c
jns 0x1002fb17
jp 0x1002fb30
add esp, 4
popf
jmp 0x1002fb37
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002fb50
jne 0x1002fb50
call 0x1fc32ea4
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x1002fb66
in eax, dx
out 0x66, eax
pushfd
pushf
push 0xa
jae 0x1002fb73
jmp 0x1002fb6e
call 0x1002fb75
jae 0x1002fb6e
add esp, 4
jmp 0x1002fb7a
dec dword [esp]
jno 0x1002fb7f
jns 0x1002fb6a
jp 0x1002fb83
add esp, 4
popf
jmp 0x1002fb8a
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x37d
xor edx, eax
add eax, edx
sub edx, 0x37d
push eax
pop edx
xor edx, 0xa77
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x37d
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1002fbde
jmp 0x1002fbe0
je 0x1002fbdb
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002fbfa
jne 0x1002fbf9
call 0x9306ec81
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1002fc08
jne 0x1002fc08
call 0x106cfc76
push 0
push 0
push 0x32
lea edx, [ebp - 0x80]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0x4c]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
clc
jae 0x1002fc27
push ss
fsub qword [esi - 0x64]
pushf
push 0xa
jae 0x1002fc34
jmp 0x1002fc2f
call 0x1002fc36
jae 0x1002fc2f
add esp, 4
jmp 0x1002fc3b
dec dword [esp]
jno 0x1002fc40
jns 0x1002fc2b
jp 0x1002fc44
add esp, 4
popf
jmp 0x1002fc4b
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x382
xor edx, eax
add eax, edx
sub edx, 0x382
push eax
pop edx
xor edx, 0xa86
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x382
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1002fc9f
jmp 0x1002fca1
je 0x1002fc9c
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002fcbb
jne 0x1002fcba
call 0x9306ed42
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1002fcc9
jne 0x1002fcc9
call 0x61df4a5a
lea ecx, [ebp - 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0
jne 0x1002fe57
mov dword [ebp - 0x390], 0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x158]
call fcn.100037b0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x170]
call fcn.100037b0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x188]
call fcn.100037b0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x128]
call fcn.100037b0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x2c0]
call fcn.100037b0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x1a0]
call fcn.100037b0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x2d8]
call fcn.100037b0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2f0]
call fcn.100037b0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1b8]
call fcn.100037b0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1d0]
call fcn.100037b0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x140]
call fcn.100037b0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1e8]
call fcn.100037b0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x308]
call fcn.100037b0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x200]
call fcn.100037b0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x218]
call fcn.100037b0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xf8]
call fcn.100037b0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x230]
call fcn.100037b0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x248]
call fcn.100037b0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x260]
call fcn.100037b0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x278]
call fcn.100037b0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x290]
call fcn.100037b0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2a8]
call fcn.100037b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
call fcn.100037b0
mov eax, dword [ebp - 0x390]
jmp 0x10031632
lea edx, [ebp - 0x80]
push edx
mov eax, dword [ebp - 0x328]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x338], eax
clc
jae 0x1002fe73
arpl di, sp
pushf
push 0xa
jae 0x1002fe80
jmp 0x1002fe7b
call 0x1002fe82
jae 0x1002fe7b
add esp, 4
jmp 0x1002fe87
dec dword [esp]
jno 0x1002fe8c
jns 0x1002fe77
jp 0x1002fe90
add esp, 4
popf
jmp 0x1002fe97
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x38a
xor edx, eax
add eax, edx
sub edx, 0x38a
push eax
pop edx
xor edx, 0xa9e
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x38a
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1002feeb
jmp 0x1002feed
je 0x1002fee8
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1002ff07
jne 0x1002ff06
call 0x9306ef8e
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1002ff15
jne 0x1002ff15
call 0xccb8ca4
invalid
mov ecx, dword [ebp - 0x338]
mov dword [ebp - 0x394], ecx
lea edx, [ebp - 0xdd]
push edx
push 0
push 1
push 0x14
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x33c], eax
mov ecx, dword [ebp - 0x33c]
call dword [0x10077410]
call dword [ebp - 0x33c]
mov dword [ebp - 0x3b4], eax
xor eax, eax
test eax, eax
je 0x1002ff5b
jne 0x1002ff5a
call 0x9306efe2
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
aaa
xor eax, 3
add eax, 4
xor eax, 5
jl 0x1002ff69
jmp 0x1002ff6b
je 0x1002ff66
clc
jae 0x1002ff70
test byte [edi], dh
xor eax, 0x38f
xor edx, eax
add eax, edx
sub edx, 0x38f
push eax
pop edx
xor edx, 0xaad
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x38f
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x1002ffb8
jmp 0x1002ffb3
call 0x1002ffba
jae 0x1002ffb3
add esp, 4
jmp 0x1002ffbf
dec dword [esp]
jno 0x1002ffc4
jns 0x1002ffaf
jp 0x1002ffc8
add esp, 4
popf
jmp 0x1002ffcf
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1002ffe8
jne 0x1002ffe8
call 0x1fc3333c
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10030002
jne 0x10030001
call 0x9306f089
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
lcall 0x5902, 0x73f8fb74
lcall 0x3300, 0x39035
rol byte [ebx], 1
ret 0xea81
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10030010
jmp 0x10030012
je 0x1003000d
clc
jae 0x10030017
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x1003005f
jmp 0x1003005a
call 0x10030061
jae 0x1003005a
add esp, 4
jmp 0x10030066
dec dword [esp]
jno 0x1003006b
jns 0x10030056
jp 0x1003006f
add esp, 4
popf
jmp 0x10030076
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003008f
jne 0x1003008f
call 0x1fc333e3
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
call fcn.100047d0
clc
jae 0x100300aa
jg 0x10030039
pushf
push 0xa
jae 0x100300b7
jmp 0x100300b2
call 0x100300b9
jae 0x100300b2
add esp, 4
jmp 0x100300be
dec dword [esp]
jno 0x100300c3
jns 0x100300ae
jp 0x100300c7
add esp, 4
popf
jmp 0x100300ce
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x395
xor edx, eax
add eax, edx
sub edx, 0x395
push eax
pop edx
xor edx, 0xabf
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x395
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x10030122
jmp 0x10030124
je 0x1003011f
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1003013e
jne 0x1003013d
call 0x9306f1c5
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1003014c
jne 0x1003014c
call 0xd088c183
xor eax, eax
test eax, eax
je 0x10030155
jne 0x10030154
call 0x9306f1dc
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
bnd je 0x10030160
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10030163
jmp 0x10030165
je 0x10030160
clc
jae 0x1003016a
push esp
xor eax, 0x396
xor eax, 0x396
xor edx, eax
add eax, edx
sub edx, 0x396
push eax
pop edx
xor edx, 0xac2
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x396
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x100301b2
jmp 0x100301ad
call 0x100301b4
jae 0x100301ad
add esp, 4
jmp 0x100301b9
dec dword [esp]
jno 0x100301be
jns 0x100301a9
jp 0x100301c2
add esp, 4
popf
jmp 0x100301c9
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100301e2
jne 0x100301e2
call 0x1fc33536
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0x1007936c
lea ecx, [ebp - 0x1b8]
push ecx
call fcn.100290f0
add esp, 8
movzx edx, al
test edx, edx
je 0x100303e7
push 0
push 0
push 0
push 0x10028210
push 0
push 0
call fcn.10048bf0
add esp, 0x18
test eax, eax
jne 0x100303e7
mov eax, 0xedef1b5b
push eax
lea ecx, [ebp - 0x3c8]
call fcn.10029380
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x398]
mov dword [ebp - 0x39c], ecx
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x39c]
push edx
call fcn.10032ab0
add esp, 4
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x3c8]
call fcn.1001c880
mov dword [ebp - 0x3a0], 1
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x158]
call fcn.100037b0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x170]
call fcn.100037b0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x188]
call fcn.100037b0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x128]
call fcn.100037b0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x2c0]
call fcn.100037b0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x1a0]
call fcn.100037b0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x2d8]
call fcn.100037b0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2f0]
call fcn.100037b0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1b8]
call fcn.100037b0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1d0]
call fcn.100037b0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x140]
call fcn.100037b0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1e8]
call fcn.100037b0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x308]
call fcn.100037b0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x200]
call fcn.100037b0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x218]
call fcn.100037b0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xf8]
call fcn.100037b0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x230]
call fcn.100037b0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x248]
call fcn.100037b0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x260]
call fcn.100037b0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x278]
call fcn.100037b0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x290]
call fcn.100037b0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2a8]
call fcn.100037b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
call fcn.100037b0
mov eax, dword [ebp - 0x3a0]
jmp 0x10031632
xor eax, eax
test eax, eax
je 0x100303f0
jne 0x100303ef
call 0x9306f477
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
aaa
xor eax, 3
add eax, 4
xor eax, 5
jl 0x100303fe
jmp 0x10030400
je 0x100303fb
clc
jae 0x10030405
wait
aaa
xor eax, 0x3a0
xor edx, eax
add eax, edx
sub edx, 0x3a0
push eax
pop edx
xor edx, 0xae0
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x3a0
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x1003044d
jmp 0x10030448
call 0x1003044f
jae 0x10030448
add esp, 4
jmp 0x10030454
dec dword [esp]
jno 0x10030459
jns 0x10030444
jp 0x1003045d
add esp, 4
popf
jmp 0x10030464
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x1003047d
jne 0x1003047d
call 0x1fc337d1
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
push 0x1007936c
lea eax, [ebp - 0x128]
push eax
call fcn.100290f0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x1003065a
call fcn.1003e040
push 0
push 0
push 0
push 0x10012810
push 0
push 0
call fcn.10048bf0
add esp, 0x18
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jne 0x1003064d
mov dword [ebp - 0x3a4], 1
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x158]
call fcn.100037b0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x170]
call fcn.100037b0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x188]
call fcn.100037b0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x128]
call fcn.100037b0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x2c0]
call fcn.100037b0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x1a0]
call fcn.100037b0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x2d8]
call fcn.100037b0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2f0]
call fcn.100037b0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1b8]
call fcn.100037b0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1d0]
call fcn.100037b0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x140]
call fcn.100037b0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1e8]
call fcn.100037b0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x308]
call fcn.100037b0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x200]
call fcn.100037b0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x218]
call fcn.100037b0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xf8]
call fcn.100037b0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x230]
call fcn.100037b0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x248]
call fcn.100037b0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x260]
call fcn.100037b0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x278]
call fcn.100037b0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x290]
call fcn.100037b0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2a8]
call fcn.100037b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
call fcn.100037b0
mov eax, dword [ebp - 0x3a4]
jmp 0x10031632
mov edx, dword [ebp - 0x32c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
test eax, eax
je 0x10030663
jne 0x10030662
call 0x9306f6ea
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
lcall 0x8702, 0x73f8fb74
lcall 0x3300, 0x3ac35
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10030671
jmp 0x10030673
je 0x1003066e
clc
jae 0x10030678
xchg dword [edx + 0x3ac35], ebx
add byte [ebx], dh
xor eax, 0x3ac
xor edx, eax
add eax, edx
sub edx, 0x3ac
push eax
pop edx
xor edx, 0xb04
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x3ac
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
rol byte [ebx], 1
ret 0xea81
jae 0x100306c0
jmp 0x100306bb
call 0x100306c2
jae 0x100306bb
add esp, 4
jmp 0x100306c7
dec dword [esp]
jno 0x100306cc
jns 0x100306b7
jp 0x100306d0
add esp, 4
popf
jmp 0x100306d7
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x100306f0
jne 0x100306f0
call 0x1fc33a44
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x10030706
xor dword [ebx + 0x66], esp
pushfd
pushf
push 0xa
jae 0x10030713
jmp 0x1003070e
call 0x10030715
jae 0x1003070e
add esp, 4
jmp 0x1003071a
dec dword [esp]
jno 0x1003071f
jns 0x1003070a
jp 0x10030723
add esp, 4
popf
jmp 0x1003072a
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x3ae
xor edx, eax
add eax, edx
sub edx, 0x3ae
push eax
pop edx
xor edx, 0xb0a
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x3ae
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x1003077e
jmp 0x10030780
je 0x1003077b
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x1003079a
jne 0x10030799
call 0x9306f821
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x100307a8
jne 0x100307a8
call 0x17967414
adc byte [ebp - 0x1877b], cl
call dword [eax - 0x18]
aaa
mov edi, edi
inc dword [ebx - 0x49f0f73c]
enter 0xffffffffffffc985, 0xf
test byte [ecx + eax + 0xa6a0000], ah
push 0x1007936c
lea eax, [ebp - 0x188]
push eax
call fcn.100290f0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x1003096b
push 0xa
push 0
lea edx, [ebp - 0x170]
push edx
call fcn.1001c420
add esp, 0xc
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
push eax
call fcn.10031650
add esp, 4
movzx ecx, al
test ecx, ecx
je 0x1003096b
mov dword [ebp - 0x3ac], 0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x158]
call fcn.100037b0
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x170]
call fcn.100037b0
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x188]
call fcn.100037b0
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x128]
call fcn.100037b0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x2c0]
call fcn.100037b0
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x1a0]
call fcn.100037b0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x2d8]
call fcn.100037b0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x2f0]
call fcn.100037b0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1b8]
call fcn.100037b0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1d0]
call fcn.100037b0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x140]
call fcn.100037b0
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1e8]
call fcn.100037b0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x308]
call fcn.100037b0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x200]
call fcn.100037b0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x218]
call fcn.100037b0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xf8]
call fcn.100037b0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x230]
call fcn.100037b0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x248]
call fcn.100037b0
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x260]
call fcn.100037b0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x278]
call fcn.100037b0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x290]
call fcn.100037b0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2a8]
call fcn.100037b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
call fcn.100037b0
mov eax, dword [ebp - 0x3ac]
jmp 0x10031632
clc
jae 0x10030970
into
fsub qword [esi - 0x64]
pushf
push 0xa
jae 0x1003097d
jmp 0x10030978
call 0x1003097f
jae 0x10030978
add esp, 4
jmp 0x10030984
dec dword [esp]
jno 0x10030989
jns 0x10030974
jp 0x1003098d
add esp, 4
popf
jmp 0x10030994
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x3b6
xor edx, eax
add eax, edx
sub edx, 0x3b6
push eax
pop edx
xor edx, 0xb22
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x3b6
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x100309e8
jmp 0x100309ea
je 0x100309e5
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10030a04
jne 0x10030a03
call 0x9306fa8b
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10030a12
jne 0x10030a12
call 0x1796767e
adc byte [ebp - 0x1576b], cl
call dword [edx - 0x18]
int 0x86
invalid
push 0x1007936c
lea edx, [ebp - 0x158]
push edx
call fcn.100290f0
add esp, 8
movzx eax, al
test eax, eax
je 0x10030bd7
push 0
push 0
push 0
push 0x1002a6c0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
jne 0x10030bca
xor eax, eax
test eax, eax
je 0x10030be0