Function at 0x100011f0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1b8
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1a0], eax
mov eax, dword [0x10066600]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x19c], 0x4790a772
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a4], eax
sub eax, 0x811c4f38
je 0x10001dcc
jmp 0x10001234
mov eax, dword [ebp - 0x1a4]
sub eax, 0x81806452
je 0x10001c89
jmp 0x1000124a
mov eax, dword [ebp - 0x1a4]
sub eax, 0x82c456be
je 0x10001e5e
jmp 0x10001260
mov eax, dword [ebp - 0x1a4]
sub eax, 0x875cacd4
je 0x10001c09
jmp 0x10001276
mov eax, dword [ebp - 0x1a4]
sub eax, 0x8c70a797
je 0x10002317
jmp 0x1000128c
mov eax, dword [ebp - 0x1a4]
sub eax, 0x91b788ee
je 0x10002625
jmp 0x100012a2
mov eax, dword [ebp - 0x1a4]
sub eax, 0x99dceb02
je 0x10001a5f
jmp 0x100012b8
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa0add55f
je 0x10002563
jmp 0x100012ce
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa10fbf8e
je 0x10001f18
jmp 0x100012e4
mov eax, dword [ebp - 0x1a4]
sub eax, 0xad12a48d
je 0x100025c3
jmp 0x100012fa
mov eax, dword [ebp - 0x1a4]
sub eax, 0xb9290399
je 0x1000195c
jmp 0x10001310
mov eax, dword [ebp - 0x1a4]
sub eax, 0xb9493138
je 0x10002041
jmp 0x10001326
mov eax, dword [ebp - 0x1a4]
sub eax, 0xb977d1ee
je 0x1000241a
jmp 0x1000133c
mov eax, dword [ebp - 0x1a4]
sub eax, 0xba101011
je 0x10001fa2
jmp 0x10001352
mov eax, dword [ebp - 0x1a4]
sub eax, 0xbc22b8e9
je 0x1000224a
jmp 0x10001368
mov eax, dword [ebp - 0x1a4]
sub eax, 0xbc7e4281
je 0x10001820
jmp 0x1000137e
mov eax, dword [ebp - 0x1a4]
sub eax, 0xbf42d631
je 0x1000229b
jmp 0x10001394
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc1c7d390
je 0x100018e4
jmp 0x100013aa
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc25673a3
je 0x100019b5
jmp 0x100013c0
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc663bd91
je 0x1000246b
jmp 0x100013d6
mov eax, dword [ebp - 0x1a4]
sub eax, 0xcf16ca60
je 0x10002429
jmp 0x100013ec
mov eax, dword [ebp - 0x1a4]
sub eax, 0xd569a3f2
je 0x10001b57
jmp 0x10001402
mov eax, dword [ebp - 0x1a4]
sub eax, 0xd6385c71
je 0x1000257e
jmp 0x10001418
mov eax, dword [ebp - 0x1a4]
sub eax, 0xdcef5df1
je 0x100019d8
jmp 0x1000142e
mov eax, dword [ebp - 0x1a4]
sub eax, 0xde3b462c
je 0x100017aa
jmp 0x10001444
mov eax, dword [ebp - 0x1a4]
sub eax, 0xdf1ebfeb
je 0x10001b78
jmp 0x1000145a
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe09ab1b4
je 0x100018d5
jmp 0x10001470
mov eax, dword [ebp - 0x1a4]
sub eax, 0xefc996ed
je 0x10001c98
jmp 0x10001486
mov eax, dword [ebp - 0x1a4]
sub eax, 0xf9a586e7
je 0x100018b4
jmp 0x1000149c
mov eax, dword [ebp - 0x1a4]
sub eax, 0xfb657f8b
je 0x10002593
jmp 0x100014b2
mov eax, dword [ebp - 0x1a4]
sub eax, 0xff57465a
je 0x10002050
jmp 0x100014c8
mov eax, dword [ebp - 0x1a4]
sub eax, 0x617ff0c
je 0x100020f4
jmp 0x100014de
mov eax, dword [ebp - 0x1a4]
sub eax, 0x9eaea66
je 0x100025d8
jmp 0x100014f4
mov eax, dword [ebp - 0x1a4]
sub eax, 0xed73eb4
je 0x10001eb6
jmp 0x1000150a
mov eax, dword [ebp - 0x1a4]
sub eax, 0x160a447f
je 0x10002326
jmp 0x10001520
mov eax, dword [ebp - 0x1a4]
sub eax, 0x18f9f846
je 0x100025b4
jmp 0x10001536
mov eax, dword [ebp - 0x1a4]
sub eax, 0x19df3b63
je 0x1000244a
jmp 0x1000154c
mov eax, dword [ebp - 0x1a4]
sub eax, 0x1b12dcef
je 0x100025e7
jmp 0x10001562
mov eax, dword [ebp - 0x1a4]
sub eax, 0x2e27e2ea
je 0x10002158
jmp 0x10001578
mov eax, dword [ebp - 0x1a4]
sub eax, 0x2fc8baaa
je 0x10002604
jmp 0x1000158e
mov eax, dword [ebp - 0x1a4]
sub eax, 0x30882f2e
je 0x10001d5e
jmp 0x100015a4
mov eax, dword [ebp - 0x1a4]
sub eax, 0x30afb950
je 0x1000254f
jmp 0x100015ba
mov eax, dword [ebp - 0x1a4]
sub eax, 0x343b115e
je 0x10002212
jmp 0x100015d0
mov eax, dword [ebp - 0x1a4]
sub eax, 0x36f641a1
je 0x100020cc
jmp 0x100015e6
mov eax, dword [ebp - 0x1a4]
sub eax, 0x37c4c4a4
je 0x10002386
jmp 0x100015fc
mov eax, dword [ebp - 0x1a4]
sub eax, 0x39244aeb
je 0x10001f51
jmp 0x10001612
mov eax, dword [ebp - 0x1a4]
sub eax, 0x3ac5fe75
je 0x10001b93
jmp 0x10001628
mov eax, dword [ebp - 0x1a4]
sub eax, 0x4790a772
je 0x1000174b
jmp 0x1000163e
mov eax, dword [ebp - 0x1a4]
sub eax, 0x4f9cc0f6
je 0x10001f27
jmp 0x10001654
mov eax, dword [ebp - 0x1a4]
sub eax, 0x52b545ac
je 0x10002335
jmp 0x1000166a
mov eax, dword [ebp - 0x1a4]
sub eax, 0x55cdf2f8
je 0x10001e6d
jmp 0x10001680
mov eax, dword [ebp - 0x1a4]
sub eax, 0x566f9ec7
je 0x100019e7
jmp 0x10001696
mov eax, dword [ebp - 0x1a4]
sub eax, 0x5aaa7c86
je 0x10001a38
jmp 0x100016ac
mov eax, dword [ebp - 0x1a4]
sub eax, 0x5c505b2f
je 0x10001d1f
jmp 0x100016c2
mov eax, dword [ebp - 0x1a4]
sub eax, 0x5c65187e
je 0x10001d3a
jmp 0x100016d8
mov eax, dword [ebp - 0x1a4]
sub eax, 0x6e2d2591
je 0x10002221
jmp 0x100016ee
mov eax, dword [ebp - 0x1a4]
sub eax, 0x74b8d221
je 0x100024e1
jmp 0x10001704
mov eax, dword [ebp - 0x1a4]
sub eax, 0x751db5b3
je 0x1000207d
jmp 0x1000171a
mov eax, dword [ebp - 0x1a4]
sub eax, 0x79783489
je 0x10001acd
jmp 0x10001730
mov eax, dword [ebp - 0x1a4]
sub eax, 0x7d17ca65
je 0x10001ca7
jmp 0x10001746
jmp 0x1000262f
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x16c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10008210
mov eax, dword [ebp - 0x16c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x19c], 0xde3b462c
jmp 0x1000262f
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
mov edx, ecx
sub edx, 0xf21fb9af
sub edx, 1
add edx, 0xf21fb9af
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa0add55f
mov ecx, 0xbc7e4281
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
setne al
and al, 1
mov byte [ebp - 0x161], al
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
mov edx, ecx
sub edx, 0x421a7761
sub edx, 1
add edx, 0x421a7761
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa0add55f
mov ecx, 0xf9a586e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov dl, byte [ebp - 0x161]
mov eax, 0xe09ab1b4
mov ecx, 0xc1c7d390
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov dword [ebp - 0x19c], 0xc663bd91
jmp 0x1000262f
mov ecx, dword [ebp - 0x174]
mov edx, dword [ebp - 0x170]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x174]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x19c], 0xb9290399
jmp 0x1000262f
mov eax, dword [ebp - 0x160]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x19c], 0xc25673a3
jmp 0x1000262f
mov edx, 0xffffffff
mov eax, 0x566f9ec7
mov ecx, 0xdcef5df1
cmp dword [ebp - 0x17c], edx
cmove eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov dword [ebp - 0x19c], 0xc663bd91
jmp 0x1000262f
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x19c], 0x5aaa7c86
jmp 0x1000262f
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x19c], 0x99dceb02
jmp 0x1000262f
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd6385c71
mov ecx, 0x79783489
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov eax, dword [ebp - 0x158]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x151], al
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
mov edx, ecx
add edx, 0x923e191f
sub edx, 1
sub edx, 0x923e191f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd6385c71
mov ecx, 0xd569a3f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov dl, byte [ebp - 0x151]
mov eax, 0xdf1ebfeb
mov ecx, 0x7d17ca65
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x19c], 0x3ac5fe75
jmp 0x1000262f
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
mov edx, ecx
add edx, 0x289cdb88
sub edx, 1
sub edx, 0x289cdb88
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfb657f8b
mov ecx, 0x875cacd4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov eax, dword [ebp - 0x150]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfb657f8b
mov ecx, 0x81806452
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov dword [ebp - 0x19c], 0xefc996ed
jmp 0x1000262f
mov dword [ebp - 0x19c], 0xc663bd91
jmp 0x1000262f
mov eax, dword [ebp - 0x180]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x188]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x19c], 0x5c505b2f
jmp 0x1000262f
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x19c], 0x5c65187e
jmp 0x1000262f
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x18c], eax
mov word [ebp - 0x18e], 0
mov dword [ebp - 0x19c], 0x30882f2e
jmp 0x1000262f
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x18f9f846
mov ecx, 0x811c4f38
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
movzx eax, word [ebp - 0x18e]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x18c]
add eax, 4
mov dword [ebp - 0x140], eax
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
mov edx, ecx
add edx, 0x16c6ce9
sub edx, 1
sub edx, 0x16c6ce9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x18f9f846
mov ecx, 0x82c456be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov dword [ebp - 0x19c], 0x55cdf2f8
jmp 0x1000262f
mov eax, dword [0x10067950]
mov ecx, dword [0x1006794c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xad12a48d
mov ecx, 0xed73eb4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov eax, dword [ebp - 0x140]
mov ax, word [eax + 2]
mov word [ebp - 0x13a], ax
mov eax, dword [0x10067950]
mov ecx, dword [0x1006794c]
mov edx, eax
add edx, 0x84b96db7
sub edx, 1
sub edx, 0x84b96db7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xad12a48d
mov ecx, 0xa10fbf8e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov dword [ebp - 0x19c], 0x4f9cc0f6
jmp 0x1000262f
mov ax, word [ebp - 0x13a]
movzx esi, ax
mov edx, dword [ebp - 0x144]
mov eax, 0x52b545ac
mov ecx, 0x39244aeb
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov eax, dword [0x10067950]
mov ecx, dword [0x1006794c]
mov edx, eax
add edx, 0xfa914633
sub edx, 1
sub edx, 0xfa914633
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9eaea66
mov ecx, 0xba101011
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov eax, dword [ebp - 0x18c]
add eax, 0x440583c5
add eax, 0x18
sub eax, 0x440583c5
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x18c]
movzx eax, word [eax + 0x14]
mov dword [ebp - 0x134], eax
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
mov edx, ecx
add edx, 0x25ee93a1
sub edx, 1
sub edx, 0x25ee93a1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9eaea66
mov ecx, 0xb9493138
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov dword [ebp - 0x19c], 0xff57465a
jmp 0x1000262f
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
sub eax, 0x311a120e
add eax, ecx
add eax, 0x311a120e
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x19c], 0x751db5b3
jmp 0x1000262f
mov eax, dword [ebp - 0x130]
movzx ecx, word [ebp - 0x18e]
imul edx, ecx, 0x28
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x194], eax
mov ecx, dword [ebp - 0x194]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100141a0
call fcn.1000a580
mov edx, eax
mov eax, 0x36f641a1
mov ecx, 0x343b115e
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x194]
add eax, 8
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x19c], 0x617ff0c
jmp 0x1000262f
mov eax, dword [ebp - 0x12c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x194]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x195], al
mov dword [ebp - 0x19c], 0x2e27e2ea
jmp 0x1000262f
mov edx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x194]
mov eax, dword [eax + 0xc]
add edx, 0x4b415d8f
add edx, eax
sub edx, 0x4b415d8f
mov ecx, dword [ebp - 0x184]
mov eax, dword [ebp - 0x194]
mov eax, dword [eax + 0xc]
sub ecx, 0x58d54bd4
add ecx, eax
add ecx, 0x58d54bd4
mov eax, dword [ebp - 0x194]
mov eax, dword [eax + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10008370
mov ecx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x194]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x178]
mov eax, dword [ebp - 0x194]
mov eax, dword [eax + 0xc]
sub esi, 0x654ef057
add esi, eax
add esi, 0x654ef057
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x195], al
mov dword [ebp - 0x19c], 0x343b115e
jmp 0x1000262f
mov dword [ebp - 0x19c], 0x6e2d2591
jmp 0x1000262f
mov ax, word [ebp - 0x18e]
add ax, 0x3688
add ax, 1
sub ax, 0x3688
mov word [ebp - 0x126], ax
mov dword [ebp - 0x19c], 0xbc22b8e9
jmp 0x1000262f
mov eax, dword [0x10067950]
mov ecx, dword [0x1006794c]
mov edx, eax
add edx, 0xe0e6bf58
sub edx, 1
sub edx, 0xe0e6bf58
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1b12dcef
mov ecx, 0xbf42d631
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov ax, word [ebp - 0x126]
mov word [ebp - 0x18e], ax
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1b12dcef
mov ecx, 0x8c70a797
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov dword [ebp - 0x19c], 0x160a447f
jmp 0x1000262f
mov dword [ebp - 0x19c], 0x30882f2e
jmp 0x1000262f
mov eax, dword [0x10067950]
mov ecx, dword [0x1006794c]
mov edx, eax
sub edx, 0x610572fc
sub edx, 1
add edx, 0x610572fc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2fc8baaa
mov ecx, 0x37c4c4a4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov eax, dword [ebp - 0x17c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x124], eax
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
mov edx, ecx
sub edx, 0x5bc8963d
sub edx, 1
add edx, 0x5bc8963d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2fc8baaa
mov ecx, 0xb977d1ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov dword [ebp - 0x19c], 0xcf16ca60
jmp 0x1000262f
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x19c], 0x19df3b63
jmp 0x1000262f
mov eax, dword [ebp - 0x170]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x19c], 0xc663bd91
jmp 0x1000262f
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
mov edx, ecx
sub edx, 0xfa634035
sub edx, 1
add edx, 0xfa634035
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x91b788ee
mov ecx, 0x74b8d221
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov ecx, dword [0x10067950]
mov eax, dword [0x1006794c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x91b788ee
mov ecx, 0x30afb950
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000262f
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.100075f0
add esp, 0x1b8
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x19c], 0xbc7e4281
jmp 0x1000262f
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x19c], 0x79783489
jmp 0x1000262f
mov eax, dword [ebp - 0x150]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x19c], 0x875cacd4
jmp 0x1000262f
mov dword [ebp - 0x19c], 0x811c4f38
jmp 0x1000262f
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x19c], 0xed73eb4
jmp 0x1000262f
mov dword [ebp - 0x19c], 0xba101011
jmp 0x1000262f
mov ax, word [ebp - 0x126]
mov word [ebp - 0x18e], ax
mov dword [ebp - 0x19c], 0xbf42d631
jmp 0x1000262f
mov eax, dword [ebp - 0x17c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x19c], 0x37c4c4a4
jmp 0x1000262f
mov dword [ebp - 0x19c], 0x74b8d221
jmp 0x10001218