Function at 0x100011c0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1ac
mov eax, dword [ebp + 8]
mov eax, dword [0x1006a800]
xor eax, ebp
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x16c], eax
lea eax, [ebp - 0x120]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000d140
mov dword [ebp - 0x198], 0x249a75ce
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x19c], eax
sub eax, 0x89517026
je 0x10001c2d
jmp 0x1000122b
mov eax, dword [ebp - 0x19c]
sub eax, 0x8cc2f8dc
je 0x10001a9f
jmp 0x10001241
mov eax, dword [ebp - 0x19c]
sub eax, 0x8d7e7bd8
je 0x100024a4
jmp 0x10001257
mov eax, dword [ebp - 0x19c]
sub eax, 0x904c4043
je 0x10002753
jmp 0x1000126d
mov eax, dword [ebp - 0x19c]
sub eax, 0x9da888e4
je 0x100026bc
jmp 0x10001283
mov eax, dword [ebp - 0x19c]
sub eax, 0xa4e7e5e0
je 0x100026cb
jmp 0x10001299
mov eax, dword [ebp - 0x19c]
sub eax, 0xa9ec271a
je 0x100021f1
jmp 0x100012af
mov eax, dword [ebp - 0x19c]
sub eax, 0xac77a2f8
je 0x100018a7
jmp 0x100012c5
mov eax, dword [ebp - 0x19c]
sub eax, 0xacf47c47
je 0x10001bcd
jmp 0x100012db
mov eax, dword [ebp - 0x19c]
sub eax, 0xada20822
je 0x100021a2
jmp 0x100012f1
mov eax, dword [ebp - 0x19c]
sub eax, 0xaebc2eb6
je 0x10001d7d
jmp 0x10001307
mov eax, dword [ebp - 0x19c]
sub eax, 0xb02c39b6
je 0x10001e7e
jmp 0x1000131d
mov eax, dword [ebp - 0x19c]
sub eax, 0xb59f8067
je 0x10002320
jmp 0x10001333
mov eax, dword [ebp - 0x19c]
sub eax, 0xb7b41993
je 0x10001c76
jmp 0x10001349
mov eax, dword [ebp - 0x19c]
sub eax, 0xb89b5269
je 0x1000269e
jmp 0x1000135f
mov eax, dword [ebp - 0x19c]
sub eax, 0xba402031
je 0x10001b84
jmp 0x10001375
mov eax, dword [ebp - 0x19c]
sub eax, 0xbb656cc6
je 0x10001b63
jmp 0x1000138b
mov eax, dword [ebp - 0x19c]
sub eax, 0xbc201c0d
je 0x10001f03
jmp 0x100013a1
mov eax, dword [ebp - 0x19c]
sub eax, 0xbd28f47a
je 0x10001868
jmp 0x100013b7
mov eax, dword [ebp - 0x19c]
sub eax, 0xc05ad21a
je 0x1000182c
jmp 0x100013cd
mov eax, dword [ebp - 0x19c]
sub eax, 0xc66245d3
je 0x10002013
jmp 0x100013e3
mov eax, dword [ebp - 0x19c]
sub eax, 0xce40336d
je 0x10001923
jmp 0x100013f9
mov eax, dword [ebp - 0x19c]
sub eax, 0xd20a64ac
je 0x10001914
jmp 0x1000140f
mov eax, dword [ebp - 0x19c]
sub eax, 0xd251e3aa
je 0x1000253b
jmp 0x10001425
mov eax, dword [ebp - 0x19c]
sub eax, 0xd37891b2
je 0x100020d5
jmp 0x1000143b
mov eax, dword [ebp - 0x19c]
sub eax, 0xd4db7a6c
je 0x10002689
jmp 0x10001451
mov eax, dword [ebp - 0x19c]
sub eax, 0xda30b90c
je 0x100019c9
jmp 0x10001467
mov eax, dword [ebp - 0x19c]
sub eax, 0xdd0ea0be
je 0x10002720
jmp 0x1000147d
mov eax, dword [ebp - 0x19c]
sub eax, 0xde3c9a70
je 0x10001d4d
jmp 0x10001493
mov eax, dword [ebp - 0x19c]
sub eax, 0xde422b48
je 0x1000181d
jmp 0x100014a9
mov eax, dword [ebp - 0x19c]
sub eax, 0xdf4e1dd3
je 0x10001d3e
jmp 0x100014bf
mov eax, dword [ebp - 0x19c]
sub eax, 0xea318582
je 0x100020a1
jmp 0x100014d5
mov eax, dword [ebp - 0x19c]
sub eax, 0xf7d11278
je 0x10002352
jmp 0x100014eb
mov eax, dword [ebp - 0x19c]
sub eax, 0xfb8a92d0
je 0x10001c1e
jmp 0x10001501
mov eax, dword [ebp - 0x19c]
sub eax, 0xc89774
je 0x100017fc
jmp 0x10001517
mov eax, dword [ebp - 0x19c]
sub eax, 0x10b6b2e
je 0x10001f92
jmp 0x1000152d
mov eax, dword [ebp - 0x19c]
sub eax, 0x22dde8e
je 0x1000241f
jmp 0x10001543
mov eax, dword [ebp - 0x19c]
sub eax, 0x5fed5d7
je 0x1000254a
jmp 0x10001559
mov eax, dword [ebp - 0x19c]
sub eax, 0x1328ac96
je 0x10002126
jmp 0x1000156f
mov eax, dword [ebp - 0x19c]
sub eax, 0x1efa4322
je 0x100027a1
jmp 0x10001585
mov eax, dword [ebp - 0x19c]
sub eax, 0x20fe5c3f
je 0x10002193
jmp 0x1000159b
mov eax, dword [ebp - 0x19c]
sub eax, 0x22fa105b
je 0x10002647
jmp 0x100015b1
mov eax, dword [ebp - 0x19c]
sub eax, 0x249a75ce
je 0x100017c6
jmp 0x100015c7
mov eax, dword [ebp - 0x19c]
sub eax, 0x27146a32
je 0x1000242e
jmp 0x100015dd
mov eax, dword [ebp - 0x19c]
sub eax, 0x2c964839
je 0x10001b48
jmp 0x100015f3
mov eax, dword [ebp - 0x19c]
sub eax, 0x31a28ba4
je 0x1000276e
jmp 0x10001609
mov eax, dword [ebp - 0x19c]
sub eax, 0x366984cc
je 0x10001e8d
jmp 0x1000161f
mov eax, dword [ebp - 0x19c]
sub eax, 0x381b207b
je 0x100027b0
jmp 0x10001635
mov eax, dword [ebp - 0x19c]
sub eax, 0x3920f376
je 0x100026ad
jmp 0x1000164b
mov eax, dword [ebp - 0x19c]
sub eax, 0x400f9d5f
je 0x10002744
jmp 0x10001661
mov eax, dword [ebp - 0x19c]
sub eax, 0x40810cac
je 0x100019d8
jmp 0x10001677
mov eax, dword [ebp - 0x19c]
sub eax, 0x4201fb92
je 0x10001a29
jmp 0x1000168d
mov eax, dword [ebp - 0x19c]
sub eax, 0x436d57f0
je 0x10002285
jmp 0x100016a3
mov eax, dword [ebp - 0x19c]
sub eax, 0x4812507e
je 0x10001b27
jmp 0x100016b9
mov eax, dword [ebp - 0x19c]
sub eax, 0x4ae4b345
je 0x10002080
jmp 0x100016cf
mov eax, dword [ebp - 0x19c]
sub eax, 0x50b08682
je 0x10002343
jmp 0x100016e5
mov eax, dword [ebp - 0x19c]
sub eax, 0x51904a18
je 0x100027cd
jmp 0x100016fb
mov eax, dword [ebp - 0x19c]
sub eax, 0x51ebe5d5
je 0x10002626
jmp 0x10001711
mov eax, dword [ebp - 0x19c]
sub eax, 0x558d70b9
je 0x100025c0
jmp 0x10001727
mov eax, dword [ebp - 0x19c]
sub eax, 0x561285a2
je 0x10001fc2
jmp 0x1000173d
mov eax, dword [ebp - 0x19c]
sub eax, 0x56ef0e01
je 0x10001974
jmp 0x10001753
mov eax, dword [ebp - 0x19c]
sub eax, 0x5b5f1ae7
je 0x10001fa1
jmp 0x10001769
mov eax, dword [ebp - 0x19c]
sub eax, 0x66bf598f
je 0x1000239b
jmp 0x1000177f
mov eax, dword [ebp - 0x19c]
sub eax, 0x6a4b760f
je 0x1000267a
jmp 0x10001795
mov eax, dword [ebp - 0x19c]
sub eax, 0x7586abc0
je 0x10002617
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
setne al
and al, 1
mov byte [ebp - 0x165], al
mov dword [ebp - 0x198], 0xc89774
jmp 0x100027e5
mov dl, byte [ebp - 0x165]
mov eax, 0xde422b48
mov ecx, 0xc05ad21a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dword [ebp - 0x198], 0xd4db7a6c
jmp 0x100027e5
mov ecx, dword [ebp - 0x170]
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov dword [ebp - 0x198], 0xbd28f47a
jmp 0x100027e5
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0x114]
mov ecx, dword [ebp - 0x170]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
mov dword [ebp - 0x198], 0xac77a2f8
jmp 0x100027e5
lea eax, [ebp - 0x114]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x178], eax
mov edx, 0xffffffff
mov eax, 0xce40336d
mov ecx, 0xd20a64ac
cmp dword [ebp - 0x178], edx
cmove eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dword [ebp - 0x198], 0xd4db7a6c
jmp 0x100027e5
mov eax, dword [0x1006bb40]
mov ecx, dword [0x1006bb3c]
mov edx, eax
add edx, 0x7d542838
sub edx, 1
sub edx, 0x7d542838
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb89b5269
mov ecx, 0x56ef0e01
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x164], eax
mov eax, dword [0x1006bb40]
mov ecx, dword [0x1006bb3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb89b5269
mov ecx, 0xda30b90c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dword [ebp - 0x198], 0x40810cac
jmp 0x100027e5
mov eax, dword [ebp - 0x164]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x198], 0x4201fb92
jmp 0x100027e5
mov ecx, dword [0x1006bb40]
mov eax, dword [0x1006bb3c]
mov edx, ecx
sub edx, 0x1d69534c
sub edx, 1
add edx, 0x1d69534c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3920f376
mov ecx, 0x8cc2f8dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
cmp dword [ebp - 0x17c], 0
setne al
and al, 1
mov byte [ebp - 0x15d], al
mov ecx, dword [0x1006bb40]
mov eax, dword [0x1006bb3c]
mov edx, ecx
add edx, 0x77c9279
sub edx, 1
sub edx, 0x77c9279
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3920f376
mov ecx, 0x4812507e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dl, byte [ebp - 0x15d]
mov eax, 0x2c964839
mov ecx, 0x89517026
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x198], 0xbb656cc6
jmp 0x100027e5
mov eax, dword [ebp - 0x15c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x198], 0xba402031
jmp 0x100027e5
mov eax, dword [0x1006bb40]
mov ecx, dword [0x1006bb3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9da888e4
mov ecx, 0xacf47c47
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov eax, dword [0x1006bb40]
mov ecx, dword [0x1006bb3c]
mov edx, eax
add edx, 0x76eb79f0
sub edx, 1
sub edx, 0x76eb79f0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9da888e4
mov ecx, 0xfb8a92d0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dword [ebp - 0x198], 0xd4db7a6c
jmp 0x100027e5
mov eax, dword [0x1006bb40]
mov ecx, dword [0x1006bb3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa4e7e5e0
mov ecx, 0xb7b41993
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x158], eax
mov ecx, dword [0x1006bb40]
mov eax, dword [0x1006bb3c]
mov edx, ecx
sub edx, 0x61eb67d4
sub edx, 1
add edx, 0x61eb67d4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa4e7e5e0
mov ecx, 0xdf4e1dd3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dword [ebp - 0x198], 0xde3c9a70
jmp 0x100027e5
mov eax, dword [ebp - 0x184]
mov ecx, dword [eax + 0x3c]
mov eax, dword [ebp - 0x158]
sub eax, 0xf2da3a1b
add eax, ecx
add eax, 0xf2da3a1b
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x198], 0xaebc2eb6
jmp 0x100027e5
mov ecx, dword [0x1006bb40]
mov eax, dword [0x1006bb3c]
mov edx, ecx
add edx, 0xeda387b5
sub edx, 1
sub edx, 0xeda387b5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdd0ea0be
mov ecx, 0x7a39658e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dword [ebp - 0x198], 0x366984cc
jmp 0x100027e5
mov ecx, dword [0x1006bb40]
mov eax, dword [0x1006bb3c]
mov edx, ecx
sub edx, 0xa18b3ea2
sub edx, 1
add edx, 0xa18b3ea2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x400f9d5f
mov ecx, 0xbc201c0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
movzx eax, word [ebp - 0x18a]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x14c], eax
mov ecx, dword [0x1006bb40]
mov eax, dword [0x1006bb3c]
mov edx, ecx
add edx, 0xa96a7320
sub edx, 1
sub edx, 0xa96a7320
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x400f9d5f
mov ecx, 0x10b6b2e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dword [ebp - 0x198], 0x5b5f1ae7
jmp 0x100027e5
mov eax, dword [ebp - 0x14c]
add eax, 4
add eax, 2
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x198], 0x561285a2
jmp 0x100027e5
mov eax, dword [0x1006bb40]
mov ecx, dword [0x1006bb3c]
mov edx, eax
sub edx, 0xc452b7cd
sub edx, 1
add edx, 0xc452b7cd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x904c4043
mov ecx, 0xc66245d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
mov eax, dword [ebp - 0x150]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x141], al
mov eax, dword [0x1006bb40]
mov ecx, dword [0x1006bb3c]
mov edx, eax
add edx, 0x8be12a33
sub edx, 1
sub edx, 0x8be12a33
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x904c4043
mov ecx, 0x4ae4b345
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dl, byte [ebp - 0x141]
mov eax, 0x51ebe5d5
mov ecx, 0xea318582
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov eax, dword [ebp - 0x188]
sub eax, 0xc009858a
add eax, 0x18
add eax, 0xc009858a
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x198], 0xd37891b2
jmp 0x100027e5
mov eax, dword [0x1006bb40]
mov ecx, dword [0x1006bb3c]
mov edx, eax
sub edx, 0xeea3697c
sub edx, 1
add edx, 0xeea3697c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x31a28ba4
mov ecx, 0x1328ac96
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov eax, dword [ebp - 0x13c]
movzx edx, word [eax + 0x14]
mov eax, dword [ebp - 0x140]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x138], eax
mov eax, dword [0x1006bb40]
mov ecx, dword [0x1006bb3c]
mov edx, eax
add edx, 0xee2e0570
sub edx, 1
sub edx, 0xee2e0570
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x31a28ba4
mov ecx, 0x20fe5c3f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dword [ebp - 0x198], 0xada20822
jmp 0x100027e5
movzx eax, word [ebp - 0x18a]
imul edx, eax, 0x28
mov eax, dword [ebp - 0x138]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x190], eax
mov ecx, dword [ebp - 0x190]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100193b0
call fcn.1000f4b0
mov edx, eax
mov eax, 0xa9ec271a
mov ecx, 0x50b08682
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x190]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x190]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
lea eax, [ebp - 0x124]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x191], al
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x190]
mov ecx, dword [ecx + 0xc]
add eax, 0xd810fa07
add eax, ecx
sub eax, 0xd810fa07
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x198], 0x436d57f0
jmp 0x100027e5
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x130]
add ecx, 0x248dac1b
add ecx, eax
sub ecx, 0x248dac1b
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x134]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000d2a0
mov ecx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x190]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x174]
mov eax, dword [ebp - 0x190]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
xor esi, esi
sub esi, edi
add eax, esi
xor esi, esi
sub esi, eax
lea eax, [ebp - 0x124]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x198], 0xb59f8067
jmp 0x100027e5
mov eax, dword [ebp - 0x12c]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x191], al
mov dword [ebp - 0x198], 0x50b08682
jmp 0x100027e5
mov dword [ebp - 0x198], 0xf7d11278
jmp 0x100027e5
mov eax, dword [0x1006bb40]
mov ecx, dword [0x1006bb3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1efa4322
mov ecx, 0x66bf598f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov ax, word [ebp - 0x18a]
mov word [ebp - 0x128], ax
mov ecx, dword [0x1006bb40]
mov eax, dword [0x1006bb3c]
mov edx, ecx
add edx, 0x742b60d6
sub edx, 1
sub edx, 0x742b60d6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1efa4322
mov ecx, 0x22dde8e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dword [ebp - 0x198], 0x27146a32
jmp 0x100027e5
mov ecx, dword [0x1006bb40]
mov eax, dword [0x1006bb3c]
mov edx, ecx
sub edx, 0xd5ca6fd4
sub edx, 1
add edx, 0xd5ca6fd4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x381b207b
mov ecx, 0x8d7e7bd8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov ax, word [ebp - 0x128]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x126], ax
mov ecx, dword [0x1006bb40]
mov eax, dword [0x1006bb3c]
mov edx, ecx
sub edx, 0x40cc2df9
sub edx, 1
add edx, 0x40cc2df9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x381b207b
mov ecx, 0xd251e3aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov dword [ebp - 0x198], 0x5fed5d7
jmp 0x100027e5
mov ecx, dword [0x1006bb40]
mov eax, dword [0x1006bb3c]
mov edx, ecx
sub edx, 0xbdb06f5e
sub edx, 1
add edx, 0xbdb06f5e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x51904a18
mov ecx, 0x558d70b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov ax, word [ebp - 0x126]
mov word [ebp - 0x18a], ax
mov eax, dword [0x1006bb40]
mov ecx, dword [0x1006bb3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x51904a18
mov ecx, 0x7586abc0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x100027e5
mov eax, dword [ebp - 0x178]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x198], 0x22fa105b
jmp 0x100027e5
mov eax, dword [ebp - 0x17c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x16c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x198], 0x6a4b760f
jmp 0x100027e5
mov dword [ebp - 0x198], 0xd4db7a6c
jmp 0x100027e5
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000c540
add esp, 0x1ac
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x198], 0x56ef0e01
jmp 0x100027e5
mov dword [ebp - 0x198], 0x8cc2f8dc
jmp 0x100027e5
mov dword [ebp - 0x198], 0xacf47c47
jmp 0x100027e5
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x198], 0xb7b41993
jmp 0x100027e5
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x188], eax
mov word [ebp - 0x18a], 0
mov dword [ebp - 0x198], 0x7a39658e
jmp 0x100027e5
mov dword [ebp - 0x198], 0xbc201c0d
jmp 0x100027e5
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x198], 0xc66245d3
jmp 0x100027e5
mov eax, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x198], 0x1328ac96
jmp 0x100027e5
mov dword [ebp - 0x198], 0x66bf598f
jmp 0x100027e5
mov ax, word [ebp - 0x128]
mov ax, word [ebp - 0x128]
mov dword [ebp - 0x198], 0x8d7e7bd8
jmp 0x100027e5
mov ax, word [ebp - 0x126]
mov word [ebp - 0x18a], ax
mov dword [ebp - 0x198], 0x558d70b9
jmp 0x1000120f