Function at 0x100010b0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1d0
mov eax, dword [ebp + 8]
mov eax, dword [0x1006d800]
xor eax, ebp
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10010090
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1b8], 0xdd02c672
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1bc], eax
sub eax, 0x85420fb0
je 0x100018ff
jmp 0x1000112f
mov eax, dword [ebp - 0x1bc]
sub eax, 0x87042fbb
je 0x10001b60
jmp 0x10001145
mov eax, dword [ebp - 0x1bc]
sub eax, 0x8d2e0359
je 0x10001f6b
jmp 0x1000115b
mov eax, dword [ebp - 0x1bc]
sub eax, 0x8e1ab0b0
je 0x1000293d
jmp 0x10001171
mov eax, dword [ebp - 0x1bc]
sub eax, 0x8e56c2de
je 0x10001a36
jmp 0x10001187
mov eax, dword [ebp - 0x1bc]
sub eax, 0x94fc4c1b
je 0x10001c92
jmp 0x1000119d
mov eax, dword [ebp - 0x1bc]
sub eax, 0x9d3faf08
je 0x100020d0
jmp 0x100011b3
mov eax, dword [ebp - 0x1bc]
sub eax, 0xb22512bc
je 0x100027c0
jmp 0x100011c9
mov eax, dword [ebp - 0x1bc]
sub eax, 0xb4721240
je 0x10001a96
jmp 0x100011df
mov eax, dword [ebp - 0x1bc]
sub eax, 0xb6d7c70d
je 0x10001956
jmp 0x100011f5
mov eax, dword [ebp - 0x1bc]
sub eax, 0xc13c793a
je 0x10002311
jmp 0x1000120b
mov eax, dword [ebp - 0x1bc]
sub eax, 0xc479e0f8
je 0x100028f3
jmp 0x10001221
mov eax, dword [ebp - 0x1bc]
sub eax, 0xc60a08fc
je 0x10001ed7
jmp 0x10001237
mov eax, dword [ebp - 0x1bc]
sub eax, 0xce74c5fa
je 0x1000259c
jmp 0x1000124d
mov eax, dword [ebp - 0x1bc]
sub eax, 0xd4535c54
je 0x100022f0
jmp 0x10001263
mov eax, dword [ebp - 0x1bc]
sub eax, 0xdc70dba1
je 0x10001b3f
jmp 0x10001279
mov eax, dword [ebp - 0x1bc]
sub eax, 0xdd02c672
je 0x1000174e
jmp 0x1000128f
mov eax, dword [ebp - 0x1bc]
sub eax, 0xe0975c12
je 0x10002705
jmp 0x100012a5
mov eax, dword [ebp - 0x1bc]
sub eax, 0xe10e1e0b
je 0x10002714
jmp 0x100012bb
mov eax, dword [ebp - 0x1bc]
sub eax, 0xe209dd73
je 0x10001fe7
jmp 0x100012d1
mov eax, dword [ebp - 0x1bc]
sub eax, 0xe53666c1
je 0x1000223d
jmp 0x100012e7
mov eax, dword [ebp - 0x1bc]
sub eax, 0xe5a50d7d
je 0x10001797
jmp 0x100012fd
mov eax, dword [ebp - 0x1bc]
sub eax, 0xe6f76c08
je 0x10001ddb
jmp 0x10001313
mov eax, dword [ebp - 0x1bc]
sub eax, 0xe729f1a6
je 0x100019a7
jmp 0x10001329
mov eax, dword [ebp - 0x1bc]
sub eax, 0xe95195a4
je 0x10001f5c
jmp 0x1000133f
mov eax, dword [ebp - 0x1bc]
sub eax, 0xec7be09c
je 0x100027e4
jmp 0x10001355
mov eax, dword [ebp - 0x1bc]
sub eax, 0xed2872aa
je 0x100027cf
jmp 0x1000136b
mov eax, dword [ebp - 0x1bc]
sub eax, 0xf0193a12
je 0x10001f3b
jmp 0x10001381
mov eax, dword [ebp - 0x1bc]
sub eax, 0xf3011587
je 0x10002362
jmp 0x10001397
mov eax, dword [ebp - 0x1bc]
sub eax, 0xffddb29d
je 0x100020fc
jmp 0x100013ad
mov eax, dword [ebp - 0x1bc]
sub eax, 0xffe0067b
je 0x10001f86
jmp 0x100013c3
mov eax, dword [ebp - 0x1bc]
sub eax, 0x1316d86
je 0x100028de
jmp 0x100013d9
mov eax, dword [ebp - 0x1bc]
sub eax, 0x1a269a7
je 0x10001bb1
jmp 0x100013ef
mov eax, dword [ebp - 0x1bc]
sub eax, 0x298c369
je 0x1000275e
jmp 0x10001405
mov eax, dword [ebp - 0x1bc]
sub eax, 0x698a1e6
je 0x10001c24
jmp 0x1000141b
mov eax, dword [ebp - 0x1bc]
sub eax, 0x937b1a7
je 0x10002038
jmp 0x10001431
mov eax, dword [ebp - 0x1bc]
sub eax, 0xf5d1875
je 0x100021cf
jmp 0x10001447
mov eax, dword [ebp - 0x1bc]
sub eax, 0x16b32a5d
je 0x100018de
jmp 0x1000145d
mov eax, dword [ebp - 0x1bc]
sub eax, 0x1880e1ee
je 0x10001819
jmp 0x10001473
mov eax, dword [ebp - 0x1bc]
sub eax, 0x19985802
je 0x10002a19
jmp 0x10001489
mov eax, dword [ebp - 0x1bc]
sub eax, 0x1ba6387e
je 0x10001e65
jmp 0x1000149f
mov eax, dword [ebp - 0x1bc]
sub eax, 0x1ed4efd5
je 0x10002627
jmp 0x100014b5
mov eax, dword [ebp - 0x1bc]
sub eax, 0x1f6886ff
je 0x10002731
jmp 0x100014cb
mov eax, dword [ebp - 0x1bc]
sub eax, 0x20fbec9e
je 0x10002191
jmp 0x100014e1
mov eax, dword [ebp - 0x1bc]
sub eax, 0x270c5170
je 0x1000269d
jmp 0x100014f7
mov eax, dword [ebp - 0x1bc]
sub eax, 0x274bd37b
je 0x10002825
jmp 0x1000150d
mov eax, dword [ebp - 0x1bc]
sub eax, 0x2868ebfd
je 0x1000212d
jmp 0x10001523
mov eax, dword [ebp - 0x1bc]
sub eax, 0x391ee674
je 0x10002489
jmp 0x10001539
mov eax, dword [ebp - 0x1bc]
sub eax, 0x39de90bc
je 0x1000190e
jmp 0x1000154f
mov eax, dword [ebp - 0x1bc]
sub eax, 0x3abf0ce2
je 0x100020df
jmp 0x10001565
mov eax, dword [ebp - 0x1bc]
sub eax, 0x3d361e64
je 0x10001f2c
jmp 0x1000157b
mov eax, dword [ebp - 0x1bc]
sub eax, 0x4141ae66
je 0x10001e86
jmp 0x10001591
mov eax, dword [ebp - 0x1bc]
sub eax, 0x4307a42e
je 0x1000288d
jmp 0x100015a7
mov eax, dword [ebp - 0x1bc]
sub eax, 0x48148718
je 0x1000247a
jmp 0x100015bd
mov eax, dword [ebp - 0x1bc]
sub eax, 0x51e4585f
je 0x1000287e
jmp 0x100015d3
mov eax, dword [ebp - 0x1bc]
sub eax, 0x540f3c71
je 0x1000253c
jmp 0x100015e9
mov eax, dword [ebp - 0x1bc]
sub eax, 0x54219c54
je 0x10002a0a
jmp 0x100015ff
mov eax, dword [ebp - 0x1bc]
sub eax, 0x561de333
je 0x1000278b
jmp 0x10001615
mov eax, dword [ebp - 0x1bc]
sub eax, 0x5850505f
je 0x100027ac
jmp 0x1000162b
mov eax, dword [ebp - 0x1bc]
sub eax, 0x5bc3a67c
je 0x10001c09
jmp 0x10001641
mov eax, dword [ebp - 0x1bc]
sub eax, 0x5c5ca2ae
je 0x10001828
jmp 0x10001657
mov eax, dword [ebp - 0x1bc]
sub eax, 0x5f26f990
je 0x1000299b
jmp 0x1000166d
mov eax, dword [ebp - 0x1bc]
sub eax, 0x666d451c
je 0x10002618
jmp 0x10001683
mov eax, dword [ebp - 0x1bc]
sub eax, 0x668b763d
je 0x10001a45
jmp 0x10001699
mov eax, dword [ebp - 0x1bc]
sub eax, 0x6de7d356
je 0x1000254b
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb22512bc
mov ecx, 0xe5a50d7d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x188], eax
mov ecx, dword [0x1006eb48]
mov eax, dword [0x1006eb44]
mov edx, ecx
sub edx, 0xcb667171
sub edx, 1
add edx, 0xcb667171
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb22512bc
mov ecx, 0x1880e1ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0x5c5ca2ae
jmp 0x10002a31
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
mov edx, eax
add edx, 0x5209e64
sub edx, 1
sub edx, 0x5209e64
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xed2872aa
mov ecx, 0x7dcb350b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dl, byte [ebp - 0x181]
mov eax, 0x85420fb0
mov ecx, 0x39de90bc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0x5850505f
jmp 0x10002a31
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x18c]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x1b8], 0xb6d7c70d
jmp 0x10002a31
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
mov edx, eax
sub edx, 0xe56e8e5
sub edx, 1
add edx, 0xe56e8e5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xec7be09c
mov ecx, 0xe729f1a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov dword [ebp - 0x194], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x190]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
mov dword [ebp - 0x17c], eax
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
mov edx, eax
add edx, 0x92ee70d0
sub edx, 1
sub edx, 0x92ee70d0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xec7be09c
mov ecx, 0x8e56c2de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0x668b763d
jmp 0x10002a31
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
mov edx, eax
add edx, 0x32f2f26d
sub edx, 1
sub edx, 0x32f2f26d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x274bd37b
mov ecx, 0xb4721240
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x198], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x198], eax
sete al
and al, 1
mov byte [ebp - 0x175], al
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x274bd37b
mov ecx, 0xdc70dba1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dl, byte [ebp - 0x175]
mov eax, 0x5bc3a67c
mov ecx, 0x87042fbb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
mov edx, eax
sub edx, 0xaf9fb1d5
sub edx, 1
add edx, 0xaf9fb1d5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x51e4585f
mov ecx, 0x1a269a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x51e4585f
mov ecx, 0x7d8f90d0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x1b8], 0x698a1e6
jmp 0x10002a31
mov ecx, dword [0x1006eb48]
mov eax, dword [0x1006eb44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4307a42e
mov ecx, 0x94fc4c1b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [ebp - 0x174]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x170], eax
mov ecx, dword [0x1006eb48]
mov eax, dword [0x1006eb44]
mov edx, ecx
sub edx, 0x80c8651f
sub edx, 1
add edx, 0x80c8651f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4307a42e
mov ecx, 0x71ba6ef3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [ebp - 0x170]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x169], al
mov ecx, dword [0x1006eb48]
mov eax, dword [0x1006eb44]
mov edx, ecx
add edx, 0x24ae77a0
sub edx, 1
sub edx, 0x24ae77a0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1316d86
mov ecx, 0x1ba6387e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dl, byte [ebp - 0x169]
mov eax, 0x4141ae66
mov ecx, 0x8d2e0359
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
mov edx, eax
add edx, 0x6a90c0ec
sub edx, 1
sub edx, 0x6a90c0ec
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc479e0f8
mov ecx, 0xc60a08fc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x168], eax
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc479e0f8
mov ecx, 0x3d361e64
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0xf0193a12
jmp 0x10002a31
mov eax, dword [ebp - 0x168]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1b8], 0xe95195a4
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0x5850505f
jmp 0x10002a31
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1b8], 0xffe0067b
jmp 0x10002a31
mov eax, dword [ebp - 0x164]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x1b8], 0xe209dd73
jmp 0x10002a31
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
mov edx, eax
sub edx, 0x52a93146
sub edx, 1
add edx, 0x52a93146
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x793185f0
mov ecx, 0x937b1a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x1a4]
mov ecx, dword [ecx + 0x3c]
sub eax, 0x5c5d11e4
add eax, ecx
add eax, 0x5c5d11e4
mov dword [ebp - 0x1a8], eax
mov word [ebp - 0x1aa], 0
mov ecx, dword [0x1006eb48]
mov eax, dword [0x1006eb44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x793185f0
mov ecx, 0x9d3faf08
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0x3abf0ce2
jmp 0x10002a31
mov ax, word [ebp - 0x1aa]
mov word [ebp - 0x15a], ax
mov dword [ebp - 0x1b8], 0xffddb29d
jmp 0x10002a31
mov ax, word [ebp - 0x15a]
movzx eax, ax
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x1a8]
add eax, 4
add eax, 2
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x1b8], 0x2868ebfd
jmp 0x10002a31
mov eax, dword [ebp - 0x154]
movzx esi, word [eax]
mov edx, dword [ebp - 0x158]
mov eax, 0x1f6886ff
mov ecx, 0x76de0248
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov ax, word [ebp - 0x14a]
movzx ecx, ax
mov eax, dword [ebp - 0x150]
add eax, 0xf88b9623
add eax, ecx
sub eax, 0xf88b9623
mov dword [ebp - 0x148], eax
movzx eax, word [ebp - 0x1aa]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x1b8], 0xf5d1875
jmp 0x10002a31
mov ecx, dword [0x1006eb48]
mov eax, dword [0x1006eb44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8e1ab0b0
mov ecx, 0xe53666c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [ebp - 0x144]
imul ecx, eax, 0x28
mov eax, dword [ebp - 0x148]
add eax, 0x3acaddc8
add eax, ecx
sub eax, 0x3acaddc8
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x1b0]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001c3b0
call fcn.10012400
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x13d], al
mov ecx, dword [0x1006eb48]
mov eax, dword [0x1006eb44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8e1ab0b0
mov ecx, 0xd4535c54
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dl, byte [ebp - 0x13d]
mov eax, 0xc13c793a
mov ecx, 0x540f3c71
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
mov edx, eax
add edx, 0xf17a2088
sub edx, 1
sub edx, 0xf17a2088
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5f26f990
mov ecx, 0xf3011587
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x1b0]
mov eax, dword [eax + 0xc]
add edx, 0x5f806652
add edx, eax
sub edx, 0x5f806652
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1b1], al
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x1b0]
mov ecx, dword [ecx + 0xc]
add eax, 0xd8654f73
add eax, ecx
sub eax, 0xd8654f73
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x1b0]
mov ecx, dword [ecx + 0xc]
add eax, 0x3849ca41
add eax, ecx
sub eax, 0x3849ca41
mov dword [ebp - 0x138], eax
mov ecx, dword [0x1006eb48]
mov eax, dword [0x1006eb44]
mov edx, ecx
add edx, 0x8f19751e
sub edx, 1
sub edx, 0x8f19751e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5f26f990
mov ecx, 0x48148718
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0x391ee674
jmp 0x10002a31
mov eax, dword [ebp - 0x1b0]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x138]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.100101f0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x1b8], 0x7d5b11f1
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0x6de7d356
jmp 0x10002a31
mov ax, word [ebp - 0x1aa]
mov word [ebp - 0x12c], ax
mov ecx, dword [0x1006eb48]
mov eax, dword [0x1006eb44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x54219c54
mov ecx, 0x666d451c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0x1ed4efd5
jmp 0x10002a31
mov ecx, dword [0x1006eb48]
mov eax, dword [0x1006eb44]
mov edx, ecx
sub edx, 0xfd15e58f
sub edx, 1
add edx, 0xfd15e58f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x19985802
mov ecx, 0x270c5170
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov ax, word [ebp - 0x12c]
xor ecx, ecx
sub cx, 1
sub ax, cx
mov word [ebp - 0x12a], ax
mov eax, dword [0x1006eb48]
mov ecx, dword [0x1006eb44]
mov edx, eax
add edx, 0xd39d42df
sub edx, 1
sub edx, 0xd39d42df
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x19985802
mov ecx, 0xe0975c12
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b8], eax
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0xe10e1e0b
jmp 0x10002a31
mov ax, word [ebp - 0x12a]
mov word [ebp - 0x1aa], ax
mov dword [ebp - 0x1b8], 0x3abf0ce2
jmp 0x10002a31
mov eax, dword [ebp - 0x198]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x1b8], 0x298c369
jmp 0x10002a31
mov eax, dword [ebp - 0x128]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x1b8], 0x561de333
jmp 0x10002a31
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1b8], 0x5850505f
jmp 0x10002a31
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1000f490
add esp, 0x1d0
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1b8], 0xe5a50d7d
jmp 0x10002a31
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x1b8], 0x7dcb350b
jmp 0x10002a31
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov dword [ebp - 0x194], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x190]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
mov dword [ebp - 0x1b8], 0xe729f1a6
jmp 0x10002a31
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x1b8], 0xb4721240
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0x1a269a7
jmp 0x10002a31
mov eax, dword [ebp - 0x174]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1b8], 0x94fc4c1b
jmp 0x10002a31
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x1b8], 0xe6f76c08
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0xc60a08fc
jmp 0x10002a31
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
imul edx, eax, 0x28
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x148]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x1b0]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001c3b0
call fcn.10012400
mov dword [ebp - 0x1b8], 0xe53666c1
jmp 0x10002a31
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x1b0]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1b1], al
mov dword [ebp - 0x1b8], 0xf3011587
jmp 0x10002a31
mov dword [ebp - 0x1b8], 0xce74c5fa
jmp 0x10002a31
mov ax, word [ebp - 0x12c]
mov ax, word [ebp - 0x12c]
mov dword [ebp - 0x1b8], 0x270c5170
jmp 0x10001113