Function at 0x10b9ce4
Capabilities:
Access peb ldr_data
Encode data using xor
Parse pe header
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [0xd0005081]
pop edx
int3
nop
mov edi, dword [esi + ecx + 0x20]
mov eax, dword [esi + ecx + 0x1c]
mov ebx, dword [esi + ecx + 0x24]
xor edx, edx
add edi, ecx
add eax, ecx
add ebx, ecx
je 0x10b89f4
jne 0x10b89f4
jmp 0x2c503ebe
mov dword [esp + 4], eax
mov dword [esp], ebx
jmp 0x10b77b6
push 0
call dword [ebx]
mov ecx, dword [ebp + 0xc]
test edi, edi
je 0x10b8b30
test ecx, ecx
je 0x10b8c7d
jne 0x10b8c7d
jmp 0x348054b9
test ecx, ecx
je 0x10b8b67
push 0x8000
push 0
je 0x10b8b5f
jne 0x10b8b5f
add byte [eax], al
add byte [eax], al
cmova edi, esi
test edi, edi
mov dword [ebp - 0x34], edi
je 0x10b8b53
jne 0x10b8b53
add byte [eax], al
add byte [eax], al
jle 0x10b8b30
mov dword [ebp - 0x10], eax
pushal
je 0x10b8bab
jne 0x10b8bab
je 0xd214b4
push ecx
mov esi, eax
call dword [ebx + 0xc]
mov eax, esi
push ebx
or al, 0x89
invalid
add esp, 0x28
pop esi
je 0x10b8b7c
jne 0x10b8b7c
je 0x755f70fe
push edx
jne 0x10b8bc8
add byte [eax], al
add byte [eax], al
pop edi
pop ebx
pop ebp
ret
push ecx
mov edi, ecx
call dword [ebx + 8]
mov ecx, edi
mov edi, dword [ebp - 0x28]
xor eax, eax
je 0x10b8be2
jne 0x10b8be2
je 0x10b7b1d
jne 0x10b6fd1
jmp 0x8c17d92e
mov ecx, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
je 0x10b8b30
jne 0x10b8b30
je 0x10f4013a
mov esi, dword [ebp - 0x18]
je 0x10b8c47
test byte [ebx + 0xf000000], dl
test dword [ebp + 0xf000000], ecx
test byte [ebp + 0xfffffe2], cl
test dword [edi], esi
sti
invalid
jne 0x10b8c47
je 0x10b6e4d
jne 0x10b86fd
je 0xed8ee223
push edi
push esi
sub esp, 0x28
mov ecx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
xor eax, eax
sub byte [ebx + 0x758b0c4d], cl
adc byte [ebx - 0x3fcef7a3], cl
mov edi, 0
je 0x10b8c07
jne 0x10b8c07
jmp 0x851b826b
test esi, esi
je 0x10b8b30
push 4
push 0x3000
push esi
je 0x10b8b16
jne 0x10b8b16
je 0x10b8c07
jne 0x10b875e
jmp 0xd8805590
test ecx, ecx
je 0x10b8be2
lea eax, [ebp - 0x34]
push 0x1c
je 0x10b8c24
jne 0x10b8c24
je 0x10b6f25
jne 0x10b8617
add byte [eax], al
add byte [eax], al
push eax
je 0x10b8b81
jne 0x10b8b81
je 0x10b8353
jne 0x10b7595
add byte [eax], al
add byte [eax], al
cmp edi, esi
je 0x10b8c63
jne 0x10b8c63
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x34]
rep movsb byte es:[edi], byte [esi]
popal
mov eax, dword [ebp - 0x10]
je 0x10b8b9f
jne 0x10b8b9f
add byte [eax], al
add byte [eax], al
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], eax
je 0x10b8b43
jne 0x10b8b43
je 0x10b8c41
jne 0x10b8672
je 0x10b8b30
test eax, eax
je 0x10b8b30
je 0x10b8c41
jne 0x10b8c41
je 0x10b777c
jne 0x10b876d
nop word [eax + eax]
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1c
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
cmp word [eax + 6], 0
je 0x10b8d21
jne 0x10b8d21
pop edi
je 0x10b8d43
jne 0x10b8d43
jmp 0x1d710d8
je 0x10b8d96
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], edi
pushal
mov edi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
xor eax, eax
je 0x10b8d58
jne 0x10b8d58
mov esi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
rep movsb byte es:[edi], byte [esi]
popal
je 0x10b8e2c
jne 0x10b8e2c
je 0x10b7256
jne 0x10b89f4
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x28], ebx
je 0x10b8d47
jne 0x10b8d47
mov dword [esi], ecx
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x18], 0
mov dword [ebp - 0x1c], ecx
je 0x10b8cc5
jne 0x10b8cc5
je 0x4b96e599
je 0x10b8d7b
mov ecx, dword [edx + 4]
xor edi, edi
mov dword [ebp - 0x24], ecx
movzx ecx, word [eax + 0x14]
lea esi, [eax + ecx + 0x20]
je 0x10b8de7
add al, 0x31
dec dword [ecx - 0x48f023b3]
dec eax
adc al, 0x8d
je 0x10b8d3a
and byte [edi], cl
test byte [esi + 0xf000000], ch
jne 0x10b8de7
test dword [eax], ebp
add byte [eax], al
add byte [ebx + 0x5d], bl
add byte [eax], al
add byte [eax], al
pop ebx
pop ebp
ret
pushal
je 0x10b8cde
jne 0x10b8cde
je 0x10b7ec9
jne 0x10b8382
mov al, byte ds:[ebp - 0x18]
rep stosb byte es:[edi], al
popal
mov edi, dword [ebp - 0x10]
mov esi, dword [ebp - 0x14]
mov edx, dword [ebp + 0x10]
jmp 0x10b8d96
add esp, 0x1c
pop esi
je 0x10b8cbb
jne 0x10b8cbb
je 0x10c407a
jmp 0x10b8e44
add byte [esi - 0x70], ah
mov dword [esi], ebx
mov eax, dword [edx]
inc edi
add esi, 0x28
movzx eax, word [eax + 6]
cmp edi, eax
je 0x10b8e19
jne 0x10b8e19
je 0x10b78b0
jne 0x10b75ff
je 0x8643ce43
mov eax, dword [eax + 0x38]
test eax, eax
jle 0x10b8d96
sar byte [esi - 0x25], 0x8b
dec esi
add al, 3
dec ebp
fmul qword [edi]
test byte [eax - 1], cl
invalid
mov ecx, dword [esi + 4]
add ecx, dword [ebp - 0x24]
je 0x10b8d0f
jne 0x10b8d0f
je 0x8c0fec5e
mov ebx, dword [esi + 4]
mov ecx, dword [esi + 0xc]
mov dword [ebp - 0x20], eax
add ebx, dword [ebp - 0x24]
add ecx, dword [ebp + 8]
test eax, eax
mov dword [ebp - 0x1c], ecx
dec esi
or al, 0x89
inc ebp
loopne 0x10b8ddc
pop ebp
fadd qword [ebx]
dec ebp
or byte [ebp - 0x1bb27640], al
je 0x10b8df2
jne 0x10b8df2
mov eax, dword [esi + 8]
test eax, eax
jne 0x10b8dcf
je 0x10b8d8d
jne 0x10b8d8d
mov dword [ebp - 0x18], ebx
jle 0x10b8d94
test ebx, ebx
je 0x10b8d94
test ecx, ecx
je 0x10b8d94
je 0x10b8d02
jne 0x10b8d02
je 0x10b6e83
jne 0x10b7ec9
je 0x68112c
jae 0x10b8d7b
invalid
mov eax, dword [esi + 8]
test eax, eax
je 0x10b8e44
je 0x10b8dcf
jne 0x10b8dcf
je 0x8ce3ebbb
mov ebx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x10]
jge 0x10b8e22
mov esi, dword [ebp - 0x14]
mov edx, dword [ebp + 0x10]
jmp 0x10b8d94
mov eax, dword [ebp + 0xc]
je 0x10b8db4
jne 0x10b8db4
nop
push ebp
push ebx
push edi
push esi
sub esp, 0x2c
mov eax, dword [esp + 0x44]
mov dword [esp + 8], 1
mov dword [esp + 0xc], 8
je 0x10b8fd1
jne 0x10b8fd1
je 0x10b82f4
jne 0x10b8532
test eax, eax
je 0x10b8f95
push dword [ebx + 8]
push dword [ebx]
push 0xffffffffffffffff
mov eax, dword [esp + 0x4c]
call dword [eax + 0x10]
je 0x10b8f76
jne 0x10b8f76
je 0x10b7bab
jne 0x10b71e4
je 0x10c51b2
test edx, 0x2000000
add byte [edx], al
jne 0x10b8fa4
je 0x10b9098
jne 0x10b9098
je 0x10b89d3
jne 0x10b8df2
add byte [eax], al
add byte [eax], al
and ecx, 8
je 0x10b9074
jne 0x10b9074
je 0x30c7075
and ecx, 0x200
add byte [eax], al
or ecx, dword [eax + edi*4]
mov eax, dword [ebx + 8]
test eax, eax
jne 0x10b9024
test dl, 0x40
jne 0x10b8f67
je 0x10b8f39
jne 0x10b8f39
je 0x210ceba0
lea ebx, [ecx + eax + 0x20]
mov edx, dword [ebx + 0x1c]
test edx, 0x2000000
jne 0x10b8fa4
jmp 0x10b9098
mov eax, esi
je 0x10b8edf
jne 0x10b8edf
add byte [eax], al
add byte [eax], al
test dl, dl
jns 0x10b8fa4
je 0x10b8f56
jne 0x10b8f56
add byte [eax], al
add byte [eax], al
lea eax, [esp + 0x28]
push eax
push ecx
push edx
push dword [ebx]
mov eax, dword [esp + 0x50]
je 0x10b8fba
jne 0x10b8fba
mov edx, dword [esp]
add edx, 0x24
cmp dword [edx], 0
jne 0x10b9024
jmp 0x10b8fa4
mov edx, dword [esp]
je 0x10b901b
jne 0x10b901b
jmp 0x10b8fa4
je 0x10b908f
jne 0x10b908f
je 0x101d794b
shr ecx, 0x11
je 0x10b8ef0
test byte [ecx - 1], ah
invalid
jne 0x10b8ef0
test eax, eax
je 0x10b8f78
nop word cs:[eax + eax]
nop
mov eax, dword [esp + 0x44]
inc ebp
add ebx, 0x28
je 0x10b9032
jne 0x10b9032
je 0x860fe0bd
call dword [eax + 4]
test esi, esi
je 0x10b8f95
div byte [esp + edx*8 + 0xf]
test al, al
invalid
je 0x10b8e87
jne 0x10b8e87
add byte [eax], al
add byte [eax], al
mov dword [esp + 0x10], 2
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0x10
mov dword [esp + 0x1c], 0x80
mov dword [esp + 0x20], 0x20
mov dword [esp + 0x24], 0x40
mov eax, dword [eax]
cmp word [eax + 6], 0
mov dword [esp], eax
je 0x10b9041
jne 0x10b9041
je 0x10b87ed
jne 0x10b7ab5
add edx, 0x20
cmp dword [edx], 0
je 0x10b8fa4
nop
mov edx, eax
je 0x10b8f45
jne 0x10b8f45
mov eax, dword [eax]
mov dword [esp], eax
movzx eax, word [eax + 6]
cmp ebp, eax
je 0x10b905e
jne 0x10b905e
je 0x10b8f78
mov ecx, dword [esp]
xor ebp, ebp
movzx eax, word [ecx + 0x14]
je 0x10b8f0f
jne 0x10b8f0f
je 0x201371
jae 0x10b8f78
invalid
mov edx, dword [ebx + 0x1c]
je 0x10b8eb7
jne 0x10b8eb7
jmp 0x8c257939
shr eax, 0x19
mov edi, dword [esp + 4]
lea eax, [esp + eax + 8]
add eax, ecx
mov ecx, edx
je 0x10b8f86
jne 0x10b8f86
add esp, 0x2c
pop esi
pop edi
pop ebx
pop ebp
ret
mov esi, edx
mov eax, edx
mov ecx, edx
shr eax, 0x1f
and esi, 0x20000000
shr ecx, 0x1b
mov dword [esp + 4], eax
je 0x10b8f2f
jne 0x10b8f2f
nop word cs:[eax + eax]
mov eax, dword [esp + 4]
mov ecx, dword [eax + 8]
mov eax, dword [ecx + eax + 0x58]
ret
cmp eax, 8
je 0x10b9144
add esi, dword [esp]
xor ebp, ebp
je 0x10b915c
jne 0x10b915c
add byte [eax], al
add byte [eax], al
lea eax, [ebx - 8]
inc ebp
shr eax, 1
cmp ebp, eax
jae 0x10b9144
je 0x10b9234
jne 0x10b9234
je 0x10b87ed
jne 0x10b888a
add byte [eax], al
add byte [eax], al
mov edx, dword [esp + 0x20]
and eax, 0xfff
add dword [eax + esi], edx
mov edi, dword [ecx + 4]
je 0x10b92d8
jne 0x10b92d8
nop word [eax + eax]
je 0x10b9259
jne 0x10b9259
je 0x10b7466
jne 0x10b7f35
jmp 0x10b9104
je 0x10b90fa
jne 0x10b90fa
je 0x101489f1
cmp eax, 8
je 0x10b92b7
test byte [ecx + eax], al
add byte [edi], cl
test byte [edi], bl
add dword [eax], eax
add byte [edi], cl
test dword [ecx], ebx
add dword [eax], eax
add byte [edi], cl
test byte [eax + edi*8 - 0x7af00001], bl
mov ch, 0xe4
invalid
je 0x10b9298
jne 0x10b9298
je 0x10b8a21
jne 0x10b7640
add byte [eax], al
add byte [eax], al
pop edi
pop ebx
pop ebp
ret
mov edi, dword [esp + 0x28]
jmp 0x10b9262
inc ebx
shr eax, 1
cmp ebx, eax
jae 0x10b92b7
je 0x10b91e0
jne 0x10b91e0
je 0x5a5048f3
movzx eax, word [ecx + ebx*2 + 8]
mov ebp, eax
and ebp, 0xf000
or byte [ecx + 0xe581c5], cl
lock add byte [eax], al
cmp ebp, 0x3000
jne 0x10b92a4
je 0x10b92ea
jne 0x10b92ea
je 0x10b74fc
jne 0x10b6fa7
je 0x8a15c6a2
adc al, 0x24
test esi, esi
je 0x10b92da
add ecx, dword [esp]
cmp dword [esp + 0x24], 0
je 0x10b92c0
je 0x10b91b9
jne 0x10b91b9
jmp 0x6a604947
movzx edx, word [ecx + ebp*2 + 8]
mov eax, edx
and eax, 0xf000
cmp eax, 0x3000
jne 0x10b9164
and edx, 0xfff
je 0x10b9278
jne 0x10b9278
add byte [eax], al
add byte [eax], al
mov esi, dword [ebx + ecx]
add ecx, ebx
test esi, esi
je 0x10b92da
mov ebx, dword [ecx + 4]
mov eax, ebx
and eax, 0xfffffffe
je 0x10b90e8
jne 0x10b90e8
je 0x323d9707
mov eax, dword [edx + esi]
xor eax, edi
clc
add eax, dword [esp + 0x20]
mov dword [edx + esi], eax
mov ebx, dword [ecx + 4]
jmp 0x10b9164
add esi, dword [esp]
xor ebx, ebx
jmp 0x10b91da
lea eax, [edi - 8]
je 0x10b91cf
jne 0x10b91cf
add byte [eax], al
add byte [eax], al
mov esi, dword [edi + ecx]
add ecx, edi
test esi, esi
je 0x10b92da
mov edi, dword [ecx + 4]
mov eax, edi
and eax, 0xfffffffe
je 0x10b916a
jne 0x10b916a
add byte [eax], al
add byte [eax], al
jmp 0x10b92a4
add esp, 4
pop esi
je 0x10b918f
jne 0x10b918f
je 0x10b9120
jne 0x10b9120
nop word cs:[eax + eax]
nop dword [eax]
je 0x10b9316
jne 0x10b9316
je 0x10b82d1
jne 0x10b72dd
je 0x52fdfa5
mov ecx, dword [esp + 4]
imul eax, dword [ecx], 0x343fd
add eax, 0x269ec3
mov dword [ecx], eax
shr eax, 0x10
and eax, 0x7fff
ret
add ecx, 0x269ec3
je 0x10b936c
jne 0x10b936c
je 0x8a1c7f0f
shr ebx, 0x10
mov esi, ebx
and esi, 0x7fff
imul esi, esi, 0xcccd
fiadd word [ecx + 0x7fffe6]
add byte [ecx - 0xa], ch
int 0xcc
add byte [eax], al
shr esi, 0x12
and esi, 0xfffffffe
lea esi, [esi + esi*4]
je 0x10b937e
jne 0x10b937e
add byte [eax], al
add byte [eax], al
mov ebx, ecx
je 0x10b934a
jne 0x10b934a
je 0x10b7791
jne 0x10b70e5
sub ebx, esi
mov byte [edx], bl
inc edx
dec eax
jne 0x10b93a4
pop esi
pop ebx
ret
imul ecx, ecx, 0x343fd
je 0x10b933e
jne 0x10b933e
nop word [eax + eax]
push ebx
push esi
je 0x10b93d5
jne 0x10b93d5
cmp eax, esi
jne 0x10b93f4
je 0x10b93fd
jne 0x10b93fd
add byte [eax], al
add byte [eax], al
test bl, bl
je 0x10b93be
xor bl, byte [edx + esi]
mov byte [ecx + esi], bl
inc esi
je 0x10b93ba
jne 0x10b93ba
mov eax, dword [esp + 0x10]
test eax, eax
je 0x10b93be
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
xor esi, esi
nop word cs:[eax + eax]
nop dword [eax]
movzx ebx, byte [ecx + esi]
je 0x10b93c6
jne 0x10b93c6
jmp 0x10ceef5f
pop esi
pop ebx
ret
push ebp
mov ebp, esp
push ebx
je 0x10b9796
jne 0x10b9796
mov esi, dword [edx]
test esi, esi
je 0x10b9b54
mov eax, dword [ebp - 0x10]
mov edi, dword [edx + 0x10]
add esi, eax
add edi, eax
je 0x10b9aa0
jne 0x10b9aa0
je 0x10b6e91
jne 0x10b93fd
add byte [eax], al
add byte [eax], al
je 0x10b9724
je 0x10b9698
jne 0x10b9698
jmp 0x348592c
add esp, 0x23c
pop esi
pop edi
je 0x10b959e
jne 0x10b959e
je 0x10b7182
jne 0x10b8a4b
jmp 0x41219db
jne 0x10b97d4
je 0x10b96fe
jne 0x10b96fe
je 0x10b9ae6
jne 0x10b9ae6
je 0x86efe277
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
leave
jne 0x10b96af
jmp 0x10b9507
xor ebx, ebx
mov eax, ebx
je 0x10b94a7
jne 0x10b94a7
add byte [eax], al
add byte [eax], al
mov eax, dword [ebp + 8]
call dword [eax + 0xc]
mov edi, dword [ebp - 0x14]
mov esi, dword [ebp + 0xc]
mov edx, dword [ebp - 0x20]
test edi, edi
mov dword [esi + 8], edi
je 0x10b94f5
je 0x10b9b01
jne 0x10b9b01
je 0x10b9b1d
jne 0x10b8be2
je 0x32fbda38
add eax, dword [ebp - 0x10]
xor ecx, ecx
leave
nop word cs:[eax + eax]
nop dword [eax]
je 0x10b976b
jne 0x10b976b
add byte [eax], al
add byte [eax], al
call dword [eax + 0x18]
test eax, eax
mov dword [edi + ebx], eax
je 0x10b94f5
je 0x10b98db
jne 0x10b98db
mov eax, dword [eax + 0xc]
lea esi, [eax*4 + 4]
test ecx, ecx
je 0x10b96f0
je 0x10b9b1d
jne 0x10b9b1d
jmp 0x13db18
mov eax, dword [ebp + 8]
call dword [eax + 0x14]
mov ebx, eax
je 0x10b9909
jne 0x10b9909
jmp 0xeacef2fd
pop ebx
pop ebp
ret
and esi, 0x7fff
imul esi, esi, 0xcccd
shr esi, 0x12
je 0x10b9853
jne 0x10b9853
je 0x2f19d2
je 0x10b94e8
invalid
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x10b9724
je 0x10b9843
jne 0x10b9843
je 0x10b7c34
jne 0x10b9853
mov ecx, edi
jne 0x10b94f7
mov eax, dword [esi + 0xc]
test eax, eax
je 0x10b94f7
je 0x10b9786
jne 0x10b9786
je 0xffc41b9a
lea eax, [ebp - 0x148]
jmp 0x10b9824
invalid
je 0x10b9821
jne 0x10b9821
add byte [eax], al
add byte [eax], al
mov esi, dword [eax + 0x80]
mov ecx, dword [ebp + 8]
add esi, edi
push 0x14
push esi
call dword [ecx + 0x20]
test eax, eax
jne 0x10b94f7
mov ecx, dword [ebp + 0x14]
je 0x10b99ff
jne 0x10b99ff
jmp 0x27aa5956
add eax, 0x269ec3
mov edx, eax
shr edx, 0x10
mov esi, edx
je 0x10b95a2
jne 0x10b95a2
add byte [eax], al
add byte [eax], al
mov eax, dword [esi]
test eax, eax
jne 0x10b9aa6
jmp 0x10b9a47
jle 0x10b9724
je 0x10b9a6d
jne 0x10b9a6d
je 0x10efe425
mov dword [ebp - 0x1c], ecx
je 0x10b99bc
test byte [ebx], bl
add eax, dword [eax]
add byte [edi], cl
test dword [0xf000003], edx
test byte [edi], cl
test byte [eax - 2], bl
jne 0x10b99bc
je 0xff641abc
je 0x10b9507
invalid
je 0x10b9889
jne 0x10b9889
je 0x10b7c9d
jne 0x10b8382
add byte [eax], al
add byte [eax], al
test ecx, ecx
je 0x10b9614
je 0x10b9531
jne 0x10b9531
add byte [eax], al
add byte [eax], al
mov eax, dword [ebp + 8]
mov edi, ecx
call dword [eax + 8]
mov ecx, edi
mov edi, dword [ebp - 0x3c]
je 0x10b98fa
jne 0x10b98fa
je 0xffc41c8f
lea eax, [ebp - 0x148]
push eax
je 0x10b97f1
invalid
jne 0x10b97f1
je 0x10b719d
jne 0x10b6da6
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x18]
nop
test ecx, ecx
je 0x10b96a9
jne 0x10b96a9
je 0x8623e837
call dword [eax + 0x18]
test eax, eax
mov dword [edi], eax
je 0x10b94f5
ror byte [ecx - 0x4b7bf0f9], 0xfd
invalid
mov eax, dword [esi + 4]
add edi, 4
add esi, 4
test eax, eax
je 0x10b9a47
je 0x10b94da
jne 0x10b94da
je 0x10b74c4
jne 0x10b7f88
jmp 0x9204d7e
movzx edx, byte [eax + ecx]
mov byte [ebp + ecx - 0x148], dl
je 0x10b985f
jne 0x10b985f
add byte [eax], al
add byte [eax], al
je 0x10b96cb
jne 0x10b96cb
add byte [eax], al
add byte [eax], al
push edi
push esi
sub esp, 0x23c
mov edi, dword [ebp + 0xc]
cmp dword [ebp + 0x14], 0
je 0x10b9833
jne 0x10b9833
jmp 0x10f3f53f
mov dword [ebp - 0x18], ebx
je 0x10b9494
jne 0x10b9494
add byte [eax], al
add byte [eax], al
jne 0x10b9af4
mov eax, 0xffffff00
nop dword [eax]
movzx ecx, byte [ebp + eax - 0x48]
test cl, cl
je 0x10b96fe
je 0x10b9a87
jne 0x10b9a87
add byte [eax], al
add byte [eax], al
push dword [ebp - 0x18]
call dword [ebx + 0x18]
test eax, eax
mov dword [edi], eax
jne 0x10b9741
jmp 0x10b94f5
add eax, dword [ebp - 0x10]
push eax
je 0x10b9589
jne 0x10b9589
je 0x851b12ab
je 0x10b98af
je 0x10b9961
add dword es:[eax], eax
add byte [edi], cl
test dword [eax], esp
add dword [eax], eax
add byte [edi], cl
test byte [ebx + 0xf00ec7d], al
test byte [ecx + 1], cl
add byte [eax], al
jne 0x10b9961
je 0x1f815ca
cmp dword [ebp - 0x14], 0
je 0x10b9996
jne 0x10b9996
and esi, 0xfffffffe
lea esi, [esi + esi*4]
sub edx, esi
je 0x10b98a1
jne 0x10b98a1
cmp byte [eax + ecx], 0
lea ecx, [ecx + 1]
jne 0x10b9544
mov eax, 0xffffff00
nop dword [eax]
movzx ecx, byte [ebp + eax - 0x48]
test cl, cl
je 0x10b9934
jne 0x10b9934
je 0x18b98f5
push 0x8000
push 0
add byte [edx], ch
push ecx
je 0x10b9501
jne 0x10b9501
add byte [eax], al
add byte [eax], al
mov byte [ebp + ecx - 0x148], dl
inc ecx
jne 0x10b9974
mov eax, dword [edi]
mov ebx, 1
cmp dword [eax + 0x84], 0
je 0x10b94f7
mov edi, dword [edi + 4]
je 0x10b9624
jne 0x10b9624
je 0x10b89d3
jne 0x10b98a1
jmp 0x529dd6a
mov eax, dword [esi + ebx + 4]
add ebx, 4
test eax, eax
jne 0x10b99e4
je 0x10b9ac2
jne 0x10b9ac2
add byte [eax], al
add byte [eax], al
test esi, esi
je 0x10b97b2
jne 0x10b97b2
jmp 0x110b9190
cmp eax, 0xffffffff
je 0x10b94f5
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x20], esi
mov edi, 0
mov dword [ebp - 0x14], 0
mov ecx, dword [eax + 8]
je 0x10b956a
jne 0x10b956a
jmp 0x8d3dabac
je 0x10b9948
xor cl, byte [ebp + eax - 0x148]
mov byte [ebp + eax - 0x48], cl
inc eax
jne 0x10b9874
je 0x10b9609
jne 0x10b9609
je 0x10b964d
jne 0x10b8d0f
jmp 0xba1bdef0
mov eax, dword [ebp + 0x10]
mov ecx, 0xffffff00
nop word cs:[eax + eax]
nop
imul eax, eax, 0x343fd
je 0x10b964d
jne 0x10b964d
je 0x10b91e0
jne 0x10b8f0f
add byte [eax], al
add byte [eax], al
je 0x10b9724
mov eax, dword [ebp - 0x14]
cmp edi, esi
mov dword [ebp - 0x2c], ecx
cmova edi, esi
test edi, edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x28], eax
je 0x10b9684
jne 0x10b9684
jmp 0x1739e2a
push 4
push 0x3000
push esi
push 0
mov eax, dword [ebp + 8]
call dword [eax]
test edi, edi
mov dword [ebp - 0x14], eax
je 0x10b95bf
jne 0x10b95bf
jmp 0x18bb8f0
nop dword [eax]
mov ecx, dword [ebp - 0x24]
test eax, eax
lea ecx, [ecx + eax]
movzx eax, ax
cmovns eax, ecx
je 0x10b9b34
jne 0x10b9b34
jmp 0x8a0de190
lea eax, [edi + 2]
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x24], eax
mov eax, dword [esi + 0xc]
test eax, eax
jne 0x10b95fb
jmp 0x10b94f7
movzx edx, byte [eax + ecx]
mov byte [ebp + ecx - 0x148], dl
cmp byte [eax + ecx], 0
lea ecx, [ecx + 1]
je 0x10b97c5
jne 0x10b97c5
jmp 0x84ec0fd6
mov esi, dword [ebp - 0x20]
add esi, 0x14
push 0x14
push esi
mov eax, dword [ebp + 8]
call dword [eax + 0x20]
mov edi, dword [ebp + 0x14]
test eax, eax
mov ebx, 1
je 0x10b95e8
jne 0x10b95e8
jmp 0xd58125d1
pushal
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x48]
rep movsb byte es:[edi], byte [esi]
popal
je 0x10b971d
jne 0x10b971d
jmp 0xb91126bd
xor cl, byte [ebp + eax - 0x148]
mov byte [ebp + eax - 0x48], cl
inc eax
je 0x10b94c8
jne 0x10b94c8
jmp 0xc190a12f
mov eax, dword [esi]
test eax, eax
je 0x10b9a47
cmp dword [ebp + 0x14], 0
jne 0x10b94da
xor ebx, ebx
je 0x10b99dd
jne 0x10b99dd
add byte [eax], al
add byte [eax], al
jmp 0x10b9a47
movzx eax, ax
push eax
push dword [ebp - 0x18]
mov eax, dword [ebp + 8]
je 0x10b9734
jne 0x10b9734
je 0x10b6f51
jne 0x10b8e87
test eax, eax
js 0x10b9ac4
add eax, dword [ebp - 0x24]
mov ebx, dword [ebp + 8]
xor ecx, ecx
nop
je 0x10b9a28
jne 0x10b9a28
jmp 0x8e17e190
mov eax, dword [esi + 0xc]
lea ecx, [eax + 1]
mov dword [esi + 0xc], ecx
mov dword [edi + eax*4], ebx
je 0x10b9464
jne 0x10b9464
add byte [eax], al
add byte [eax], al
push 0x1c
lea eax, [ebp - 0x48]
push eax
push ecx
je 0x10b96e3
jne 0x10b96e3
add byte [eax], al
add byte [eax], al
push eax
push dword [ebp - 0x18]
mov eax, dword [ebp + 8]
je 0x10b9554
jne 0x10b9554
je 0x10b908f
jne 0x10b8729
jmp 0x41c0de3
mov esi, dword [edx + 0x10]
add esi, dword [ebp - 0x10]
mov edi, esi
je 0x10b9669
jne 0x10b9669
nop word cs:[eax + eax]
nop
push ebx
push edi
je 0x10b9be2
jne 0x10b9be2
je 0x10b7979
jne 0x10b97c5
mov eax, dword [esi + 4]
test eax, eax
je 0x10b9b99
push 0x8000
push 0
push eax
call dword [edi + 0xc]
push 0x8000
je 0x10b9bb8
jne 0x10b9bb8
jmp 0x1880922c
test esi, esi
je 0x10b9bbe
cmp dword [esi + 0x10], 0
je 0x10b9c6d
jne 0x10b9c6d
jmp 0x619c26
push 0
push esi
call dword [edi + 0xc]
pop esi
pop edi
je 0x10b9bef
jne 0x10b9bef
mov dword [esi + 0x10], 0
mov eax, dword [esi + 8]
mov edi, dword [esp + 0x10]
test eax, eax
je 0x10b9ca6
jne 0x10b9ca6
je 0xaa8fab3c
push esi
je 0x10b9c92
add byte [eax], al
add byte [edi], cl
test dword [ebx + 0x5b000000], esp
jne 0x10b9c92
pop ebx
ret
xor ebx, ebx
mov edx, dword [eax + ebx*4]
cmp edx, 0xffffffff
jne 0x10b9c21
nop word [eax + eax]
inc ebx
cmp ebx, ecx
jge 0x10b9c46
je 0x10b9c19
jne 0x10b9c19
je 0x10b94e8
jne 0x10b79bf
mov edx, dword [eax + ebx*4]
cmp edx, 0xffffffff
je 0x10b9c04
push edx
call dword [edi + 0x1c]
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
inc ebx
cmp ebx, ecx
je 0x10b9ccb
jne 0x10b9ccb
je 0x10b87b1
jne 0x10b7968
test eax, eax
je 0x10b9c55
push 0x8000
push 0
push eax
call dword [edi + 0xc]
je 0x10b9b87
jne 0x10b9b87
je 0x10b93fd
jne 0x10b71e4
je 0x10b9bcb
mov eax, dword [esi]
mov ecx, dword [esi + 4]
mov eax, dword [eax + 0x28]
add eax, ecx
push 0
push 0
push ecx
call eax
je 0x10b9bc4
jne 0x10b9bc4
je 0x15301121
mov esi, dword [esp + 0x14]
je 0x10b9ba3
jne 0x10b9ba3
add byte [eax], al
add byte [eax], al
je 0x10b9c55
mov ecx, dword [esi + 0xc]
test ecx, ecx
jle 0x10b9c4a
je 0x10b9bf1
jne 0x10b9bf1
je 0x10b77c4
jne 0x10b875e
add byte [eax], al
add byte [eax], al
jl 0x10b9c09
je 0x10b9c46
jne 0x10b9c46
nop dword [eax]
push ebp
mov ebp, esp
push ebx
push edi
push esi
je 0x10b9e5a
jne 0x10b9e5a
je 0xc58f5d2d
xor eax, eax
add esp, 0x38
pop esi
pop edi
cmp byte [esi + 0x5f], bl
pop ebx
pop ebp
je 0x10ba10f
jne 0x10ba10f
je 0x8c0ffb9e
mov ebx, dword [esi + 4]
mov ecx, dword [esi + 0xc]
mov dword [ebp - 0x1c], edx
add ebx, dword [ebp - 0x10]
add ecx, dword [ebp + 0xc]
dec esi
or al, 0x89
push ebp
in al, 3
pop ebp
lock add ecx, dword [ebp + 0xc]
test edx, edx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x14], ebx
jle 0x10ba194
je 0x10ba5d9
jne 0x10ba5d9
jmp 0xe981289d
pushal
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
rep movsb byte es:[edi], byte [esi]
popal
je 0x10ba64a
jne 0x10ba64a
je 0x10e3eae3
mov ecx, dword [ebp - 0x28]
je 0x10b9f36
test cl, bl
add dword [eax], eax
add byte [edi], cl
test ebx, edx
add dword [eax], eax
add byte [ebx - 0x74ac23a3], cl
jge 0x10b9d72
jne 0x10b9f36
mov ebx, dword [ebp - 0x24]
push ebx
mov edi, dword [ebp + 8]
push edi
call fcn.010b9454
add esp, 0x10
test eax, eax
je 0x10b9fe4
adc byte [ebp + 0x69840fc0], al
add al, byte [eax]
add byte [edi], cl
test byte [eax + 0xf000006], al
test dword [edx + 6], edi
add byte [eax], al
je 0x10ba401
jne 0x10ba401
je 0x10b7640
jne 0x10b6f9b
add byte [eax], al
add byte [eax], al
shr ecx, 1
cmp edi, ecx
jae 0x10ba604
movzx ecx, word [eax + edi*2 + 8]
mov ebx, ecx
and ebx, 0xf000
cmp ebx, 0x3000
jne 0x10b9e14
je 0x10ba5ab
jne 0x10ba5ab
je 0x4dfeafb
xor ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x20]
je 0x10ba5ee
dec ebp
loopne 0x10b9dda
test byte [esi], bl
or byte [eax], al
add byte [edi], cl
test dword [eax], ebx
or byte [eax], al
add byte [edi], cl
test byte [edi], cl
test byte [esi], dh
push es
jne 0x10ba5ee
je 0x74221eb
je 0x10ba414
push es
add byte [eax], al
jne 0x10ba414
jmp 0x851b676e
test ecx, ecx
je 0x10b9ece
xor edx, edx
cmp byte [ebp - 0x30], 0
je 0x10ba42d
jne 0x10ba42d
je 0x10149d88
cmp edi, 8
je 0x10ba604
test dl, bh
pop es
add byte [eax], al
add edx, dword [ebp - 0x10]
xor edi, edi
jmp 0x10b9da1
je 0x10ba334
jne 0x10ba334
je 0x8ed413b1
mov esi, dword [ebp - 0x38]
lea ecx, [esi + edx]
or al, 0x16
mov dword [eax], ecx
mov dword [esi + edx + 0x34], esi
je 0x10b9e8e
jne 0x10b9e8e
jmp 0xec100ec2
mov esi, dword [eax + 4]
jmp 0x10b9e14
push dword [ebp - 0x34]
push dword [ebp - 0x2c]
je 0x10b9d63
jne 0x10b9d63
je 0x10b9dc4
jne 0x10b8395
add byte [eax], al
add byte [eax], al
sub esp, 0x38
mov eax, dword [ebp + 0xc]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x10b9f93
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x3c]
mov edx, eax
je 0x10b9ff4
jne 0x10b9ff4
je 0x10b99ff
jne 0x10b7c76
mov edx, dword [eax]
mov ecx, dword [eax + 4]
cmp word [edx + 6], 0
mov dword [ebp - 0x10], ecx
je 0x10ba27f
movzx ecx, word [edx + 0x14]
xor edi, edi
lea esi, [edx + ecx + 0x20]
je 0x10ba179
jne 0x10ba179
je 0x10b73c5
jne 0x10b789b
jmp 0x861b7a4d
test ebx, ebx
jne 0x10ba0ef
jmp 0x10b9f40
mov eax, ebx
jmp 0x10b9cfa
push 0
push 1
je 0x10ba19e
jne 0x10ba19e
add byte [eax], al
add byte [eax], al
mov ecx, dword [ebx + 0xc]
je 0x10ba482
jne 0x10ba482
push 0
push 0
push ecx
call edx
mov dword [ebx + 0x10], 0
mov eax, dword [ebx + 8]
test eax, eax
je 0x10ba1e0
je 0x10b9dd8
jne 0x10b9dd8
mov esi, dword [ebp - 0x38]
push esi
call dword [edi + 4]
mov eax, dword [ebx]
mov ecx, dword [eax + 0x28]
je 0x10b9de5
jne 0x10b9de5
jmp 0x755fe8c5
mov ecx, dword [ecx + 0x54]
je 0x10b9f4c
jne 0x10b9f4c
call dword [edi + 0xc]
je 0x10b9cf8
jne 0x10b9cf8
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], edi
add ecx, edx
test ecx, ecx
mov dword [ebp - 0x1c], ecx
jle 0x10ba3a8
je 0x10b9d39
jne 0x10b9d39
je 0x10b7bab
jne 0x10b77d9
je 0x1d7e544
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
jmp 0x10ba356
add byte [eax], al
add bh, al
inc ebp
rol byte [eax], 1
add byte [eax], al
add bh, al
inc ebp
aam 0
add byte [eax], al
add cl, ch
ret
mov ecx, dword [ebp + 0xc]
xor eax, eax
cmp dword [ecx], 0x474e5089
jne 0x10b9cfa
je 0x10ba566
jne 0x10ba566
je 0x10b8edf
jne 0x10b7f46
and ecx, 0xfff
add dword [ecx + edx], esi
je 0x10b9e33
jne 0x10b9e33
add ecx, esi
test byte [eax + 0x17], 0x20
jne 0x10b9ed5
call ecx
jmp 0x10ba1a9
je 0x10b9ec4
jne 0x10b9ec4
add byte [eax], al
add byte [eax], al
xor eax, eax
cmp dword [edx + ecx], 0x4550
jne 0x10b9cfa
add ecx, dword [ebp + 0xc]
je 0x10b9f79
jne 0x10b9f79
je 0x10b71b3
jne 0x10b98fa
je 0x14bbf33
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0x38]
test edx, edx
jle 0x10ba14e
je 0x10ba2fe
jne 0x10ba2fe
je 0x173a4ae
push 4
push 0x1000
push dword [edi + 0x50]
adc byte [eax], al
add bh, bh
ja 0x10ba09a
push 0
je 0x10ba634
jne 0x10ba634
je 0x84bbb4e9
mov edx, dword [eax + esi*4]
cmp edx, 0xffffffff
je 0x10ba2e1
cli
dec dword [edi]
test byte [ebx + 2], bh
add byte [eax], al
push edx
call dword [edi + 0x1c]
mov eax, dword [ebx + 8]
je 0x10b9ee9
jne 0x10b9ee9
je 0x10b81b7
jne 0x10b89f4
inc esi
cmp esi, ecx
jge 0x10ba48b
je 0x10ba05a
jne 0x10ba05a
jmp 0xf4efee22
mov ecx, dword [ebp - 0x1c]
rep movsb byte es:[edi], byte [esi]
popal
mov ebx, dword [ebp - 0x40]
mov edi, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x20]
pop ebp
ror byte [ebx + 0x758bc47d], 0xe0
mov eax, dword [ebp - 0x24]
jmp 0x10ba194
mov ecx, dword [ebp + 0xc]
cmp byte [ebp - 0x30], 0
mov dword [eax + 4], edi
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov dword [eax + 0x10], 0
mov dword [ebp - 0x24], eax
je 0x10ba1be
jne 0x10ba1be
mov eax, ebx
jmp 0x10b9cfa
cmp dword [ebx + 0x10], 0
je 0x10b9f06
mov eax, dword [ebx]
mov ecx, dword [ebx + 4]
mov edx, dword [eax + 0x28]
add edx, ecx
je 0x10b9ef8
jne 0x10b9ef8
ret
jmp 0x10ba3a8
push dword [ecx + 0x34]
mov edi, ecx
call dword [esi]
test eax, eax
jne 0x10ba3b4
je 0x10ba040
jne 0x10ba040
je 0x10b6e83
jne 0x10b8478
mov edx, dword [eax]
inc edi
add esi, 0x28
movzx ecx, word [edx + 6]
cmp edi, ecx
jae 0x10ba279
je 0x10ba4ab
jne 0x10ba4ab
je 0x10b8b30
jne 0x10b76d7
jmp 0x8613f808
mov edx, dword [esi + 8]
test edx, edx
jne 0x10b9d0f
jmp 0x10ba024
mov dword [esi], ebx
je 0x10ba14e
jne 0x10ba14e
add byte [eax], al
add byte [eax], al
push esi
call ecx
test eax, eax
je 0x10ba0ef
mov dword [ebx + 0x10], 1
je 0x10ba0e8
jne 0x10ba0e8
je 0x8ad41f4b
mov dword [ebp - 0x38], edi
mov esi, ecx
into
je 0x10ba540
mov edx, dword [ecx + 8]
je 0x10b9d54
jne 0x10b9d54
add byte [eax], al
add byte [eax], al
push eax
call dword [edi + 0xc]
mov eax, dword [ebx + 4]
test eax, eax
je 0x10ba25e
push 0x8000
je 0x10ba258
jne 0x10ba258
jmp 0x8c146678
add esp, 8
mov eax, dword [ebx]
lea ecx, [ebp - 0x44]
push ecx
push 0x40
push dword [eax + 0x50]
je 0x10b9f1d
jne 0x10b9f1d
je 0xc7eff79a
mov dword [ebp - 0x1c], edx
mov byte [ebp - 0x14], 0
mov dword [ebp - 0x18], ecx
je 0x10ba14e
inc ebp
in al, dx
add byte [ecx - 0x7bf017b3], cl
xor edi, edi
invalid
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x3c], edi
je 0x10ba2a5
jne 0x10ba2a5
add byte [eax], al
add byte [eax], al
sub esi, dword [ecx + 0x34]
cmp dword [ebp - 0x34], 0
mov dword [ebp - 0x20], esi
jne 0x10ba5c4
jmp 0x10ba476
mov edx, dword [esi + eax]
add eax, esi
test edx, edx
je 0x10ba5be
jne 0x10ba5be
jmp 0x5ba2c6
push 0
push eax
call dword [edi + 0xc]
push 0x8000
push 0
push ebx
je 0x10b9f3d
jne 0x10b9f3d
je 0x10a7861
jmp 0x10ba14e
dec dword [ebx + 0x45890440]
invalid
mov eax, dword [eax + 4]
mov dword [ebp - 0x10], eax
cmp dword [edx + 0xa4], 0
je 0x10b9e38
mov eax, dword [edx + 0xa0]
mov ecx, dword [ebp - 0x10]
je 0x10ba520
jne 0x10ba520
add byte [eax], al
add byte [eax], al
pushal
mov edi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
xor eax, eax
mov al, byte ds:[ebp - 0x14]
rep stosb byte es:[edi], al
popal
je 0x10ba595
jne 0x10ba595
jmp 0x18ba32e
push 0x8000
push 0
je 0x10ba1dc
jne 0x10ba1dc
je 0x10b7288
jne 0x10b9f36
je 0x10ba085
jne 0x10ba085
jmp 0x851b7423
xor ecx, edx
je 0x10b9fd1
jne 0x10b9fd1
je 0x40ff18d
mov ecx, dword [esi + 4]
add ecx, dword [ebp - 0x10]
mov dword [esi], ecx
je 0x10ba20d
dec ebp
invalid
jne 0x10ba20d
je 0x19a3127
jle 0x10ba3a8
add byte [eax], al
pushal
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
rep movsb byte es:[edi], byte [esi]
je 0x10ba614
jne 0x10ba614
je 0x4903f1c5
lea ecx, [esi - 8]
inc edi
je 0x10b9d97
jne 0x10b9d97
add byte [eax], al
add byte [eax], al
mov eax, dword [ecx + eax + 0x58]
add ecx, edx
mov dword [ebp - 0x2c], eax
mov al, 1
mov dword [ebp - 0x30], eax
mov esi, dword [ebp + 8]
push 4
push 0x1000
push dword [ecx + 0x50]
je 0x10ba127
jne 0x10ba127
jmp 0xe9812ed4
pushal
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x14]
je 0x10ba093
jne 0x10ba093
je 0x84bbb814
mov edx, dword [eax + esi*4]
cmp edx, 0xffffffff
jne 0x10ba066
cli
dec dword [edi]
test ebp, edx
cld
invalid
nop dword [eax]
je 0x10ba2e1
jne 0x10ba2e1
je 0x8ce7e931
mov eax, dword [ebp - 0x24]
mov edx, dword [ebx + 0x3c]
push ebx
cmp al, 0xf
test byte [edx + edi*8 - 1], dh
dec dword [edi]
test dword [esi - 6], ebp
invalid
je 0x10b9e22
jne 0x10b9e22
mov dword [ebp - 0x28], edi
push 4
push 0x3000
push 0x14
je 0x10ba458
jne 0x10ba458
je 0x10b7a89
jne 0x10b93d5
mov ecx, ebx
and ecx, 0xf000
cmp ecx, 0x3000
jne 0x10ba504
and ebx, 0xfff
mov ecx, dword [ebx + edx]
je 0x10b9dc4
jne 0x10b9dc4
push ebx
push edi
call 0x10b8e54
je 0x10ba1f1
jne 0x10ba1f1
mov ecx, dword [ebx + 0xc]
test ecx, ecx
jle 0x10ba2c2
xor esi, esi
je 0x10ba385
jne 0x10ba385
cmovne edx, dword [ebp - 0x2c]
je 0x10ba2ee
jne 0x10ba2ee
je 0x10b8919
jne 0x10b9889
je 0x79685b5e
movzx ebx, word [eax + edi*2 + 8]
je 0x10ba3d8
or byte [esi + eax*4 + 0x75], dh
test byte [eax], al
add byte [eax], al
add byte [edx], ch
jne 0x10ba3d8
add byte [eax], al
add byte [eax], al
push 0
mov edi, eax
call dword [esi]
je 0x10ba0ba
jne 0x10ba0ba
je 0xd3919471
add eax, esi
test edx, edx
je 0x10b9e38
je 0x10ba660
jne 0x10ba660
inc esi
cmp esi, ecx
jl 0x10ba05a
test eax, eax
je 0x10ba1e0
je 0x10ba2c2
jne 0x10ba2c2
je 0x10b6e40
jne 0x10b94e8
mov edx, dword [esi + 8]
test edx, edx
je 0x10ba024
je 0x10b9d0f
jne 0x10b9d0f
jmp 0x851b6e4c
test ecx, ecx
je 0x10ba194
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x40], ebx
je 0x10ba370
jne 0x10ba370
je 0x10149e69
cmp ecx, 8
je 0x10ba244
test byte [ecx - 3], bl
invalid
add edx, dword [ebp - 0x10]
xor edi, edi
jmp 0x10ba67f
lea ecx, [esi - 8]
je 0x10ba674
jne 0x10ba674
je 0x10b7f46
jne 0x10b87e5
jmp 0x860cb9af
mov edx, dword [ecx + eax]
test edx, edx
je 0x10b9e38
mov esi, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x28]
add eax, dword [ebp - 0x10]
je 0x10ba22f
jne 0x10ba22f
mov edx, dword [ecx + 0x3c]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx + 0x54]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x14], edi
add ecx, edx
test ecx, ecx
mov dword [ebp - 0x1c], ecx
je 0x10ba314
jne 0x10ba314
add byte [eax], al
add byte [eax], al
mov ecx, dword [ebp + 0xc]
cmp dword [ecx + 4], 0xa1a0a0d
jne 0x10b9cfa
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x34], 1
mov ecx, dword [eax + 8]
mov edx, eax
je 0x10ba348
jne 0x10ba348
add byte [eax], al
add byte [eax], al
mov edi, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
je 0x10ba274
jne 0x10ba274
jmp 0x10ec1b3a
mov esi, dword [ebp - 0x20]
je 0x10b9fbc
jne 0x10b9fbc
add byte [eax], al
add byte [eax], al
je 0x10b9e38
mov esi, dword [eax + 4]
mov ecx, esi
and ecx, 0xfffffffe
je 0x10ba4e2
jne 0x10ba4e2
jmp 0x851b8162
test ebx, ebx
je 0x10ba194
je 0x10ba4c3
jne 0x10ba4c3
jmp 0x8c1eb27b
mov dword [ebx + edx], ecx
mov esi, dword [eax + 4]
jmp 0x10ba504
mov edx, dword [esi + eax]
je 0x10ba46c
jne 0x10ba46c
jmp 0xd693179
popal
mov ebx, dword [ebp + 0xc]
je 0x10ba3a2
jne 0x10ba3a2
je 0x10b6dc9
jne 0x10b6ea8
add byte [eax], al
add byte [eax], al
call dword [esi]
test eax, eax
je 0x10b9f40
je 0x10ba3b4
jne 0x10ba3b4
mov ebx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebx + 8]
je 0x10ba114
jne 0x10ba114
jmp 0x8a1016ef
mov esi, dword [eax + 4]
mov edi, esi
and edi, 0xfffffffe
je 0x10b9e01
jne 0x10b9e01
inc edi
shr ecx, 1
cmp edi, ecx
jae 0x10ba244
je 0x10ba44b
jne 0x10ba44b
nop word [eax + eax]
push ebp
push ebx
push edi
push esi
push eax
mov edx, dword [esp + 0x1c]
xor eax, eax
mov ecx, dword [edx]
cmp dword [ecx + 0x7c], 0
je 0x10ba725
jne 0x10ba725
je 0x10b80c9
jne 0x10b88cb
jb 0x10ba6c3
mov eax, dword [esi + edi + 0x1c]
lea ecx, [esi + ecx*4]
add esi, dword [eax + ecx]
mov eax, esi
add esp, 4
pop esi
pop edi
je 0x10ba7a4
jne 0x10ba7a4
je 0x10b7a5d
jne 0x10b6dab
add byte [eax], al
add byte [eax], al
mov dword [esp], eax
nop word cs:[eax + eax]
nop dword [eax]
mov eax, dword [ebx + ebp*4]
add eax, esi
je 0x10ba70b
jne 0x10ba70b
je 0x10b73e8
jne 0x10b7819
je 0x2580a65f
push eax
push dword [esp + 0x24]
mov eax, dword [esp + 0x20]
and al, 0x8b
inc esp
and al, 0x20
call dword [eax + 0x24]
test eax, eax
je 0x10ba7a0
je 0x10ba78e
jne 0x10ba78e
je 0x2480439d
je 0x10ba6c3
je 0x10ba74c
jne 0x10ba74c
je 0x2549ebbc
mov eax, dword [esi + edi + 0x24]
mov ebx, dword [esi + edi + 0x20]
xor ebp, ebp
add eax, esi
add ebx, esi
je 0x10ba6e4
jne 0x10ba6e4
je 0x10b9531
jne 0x10ba414
jmp 0x8c1019db
mov esi, dword [edx + 4]
mov edi, dword [ecx + 0x78]
cmp dword [edi + esi + 0x18], 0
je 0x10ba75c
jne 0x10ba75c
jmp 0x6d2b6f
je 0x10ba6c3
cmp dword [esi + edi + 0x14], 0
je 0x10ba6c3
je 0x10ba72d
jne 0x10ba72d
ret
mov eax, dword [esp]
movzx ecx, word [eax + ebp*2]
xor eax, eax
cmp dword [esi + edi + 0x14], ecx
je 0x10ba6b5
jne 0x10ba6b5
jmp 0x3f77e2d7
inc ebp
cmp ebp, dword [esi + edi + 0x18]
jb 0x10ba6f4
xor eax, eax
jmp 0x10ba6c3
je 0x10ba774
jne 0x10ba774
pop ebx
pop ebp
je 0x10ba771
jne 0x10ba771
nop word cs:[eax + eax]
push ebp
je 0x10ba7b9
jne 0x10ba7b9
push ebx
push edi
push esi
mov ebp, dword [esp + 0x18]
xor esi, esi
movzx eax, word [ebp]
je 0x10ba818
jne 0x10ba818
je 0x8a101059
mov dword [eax + 4], ebp
mov dword [eax], ebx
mov edi, eax
mov dword [eax + 0xc], 0
sbb byte [ecx + 0xc40c7c7], cl
add byte [eax], al
add byte [eax], al
je 0x10ba86a
jne 0x10ba86a
test eax, eax
je 0x10ba832
mov esi, edi
mov dword [edi + 0x10], 1
je 0x10ba830
jne 0x10ba830
jmp 0x15302487
mov edi, dword [esp + 0x14]
add ebx, ebp
push 4
push 0x3000
push 0x14
je 0x10ba83b
jne 0x10ba83b
je 0x10b933e
jne 0x10b91b9
jmp 0x165f559
cmp eax, 0x5a4d
jne 0x10ba855
mov ebx, dword [ebp + 0x3c]
cmp dword [ebp + ebx], 0x4550
jne 0x10ba855
je 0x10ba7f8
jne 0x10ba7f8
jmp 0x10ba855
test edi, edi
je 0x10ba855
je 0x10ba84a
jne 0x10ba84a
jmp 0x190aa8a9
push 0
call dword [edi]
mov ecx, edi
je 0x10ba7cc
jne 0x10ba7cc
pop ebx
pop ebp
ret
push 0x8000
push 0
push edi
call dword [ebx + 0xc]
mov eax, esi
pop esi
pop edi
je 0x10ba845
jne 0x10ba845
je 0x10b9259
jne 0x10b7df8
jmp 0x113e935
mov dword [eax + 8], 0
mov dword [eax + 0x10], 0
mov ebx, ecx
push dword [esp + 0x20]
push dword [esp + 0x20]
push eax
push ecx
call fcn.010b9454
add esp, 0x10
je 0x10ba7e6
jne 0x10ba7e6
nop word cs:[eax + eax]
nop
ret
or eax, 0x51c24474
inc edx
pop esp
mov cl, byte [ebx - 0x16a6be77]
test al, 2
scasd eax, dword es:[edi]
jne 0x127144e8
add byte [ebp + eax - 0x17], ch
ljmp 0x2988
ret 0x4826
dec eax
sbb cl, byte [edi]
xor al, 0x84
xor dword [edx], edx
or eax, 0xf200502b
pop ds
jmp 0x81dad17
sub eax, 0x4c15beb
push 0x10
je 0x10c515f
mov al, byte [0xe90fa275]
in eax, dx
jne 0x10c5160
psubsw mm5, mm5
neg byte [ecx + 0x5202c2f9]
add dword [ecx + ebp*8], ecx
xor bp, word [ebx + 0x70]
adc eax, 0xaa92e922
xchg esp, eax
inc ebx
jne 0x10c51bc
mov bl, 1
test dword [edx + 0x12], esp
add ah, byte [ecx + ebp*8 + 0x14]
sal dword [esi*2 + 0x100a5f15], 0x12
jmp 0x2ce1e30