Function at 0x10001220
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1a0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1a4], eax
mov eax, dword [0x10066000]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1a0], 0xeb8888b5
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
sub eax, 0x86297158
je 0x100024c3
jmp 0x10001264
mov eax, dword [ebp - 0x1a8]
sub eax, 0x86900fda
je 0x100017d2
jmp 0x1000127a
mov eax, dword [ebp - 0x1a8]
sub eax, 0x89c582a7
je 0x100024eb
jmp 0x10001290
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8b8d1e6b
je 0x10002410
jmp 0x100012a6
mov eax, dword [ebp - 0x1a8]
sub eax, 0x90219566
je 0x100021b1
jmp 0x100012bc
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9204dcfd
je 0x10001fff
jmp 0x100012d2
mov eax, dword [ebp - 0x1a8]
sub eax, 0xa3bd802a
je 0x10001caf
jmp 0x100012e8
mov eax, dword [ebp - 0x1a8]
sub eax, 0xa483b837
je 0x10001769
jmp 0x100012fe
mov eax, dword [ebp - 0x1a8]
sub eax, 0xaaad716f
je 0x10001f89
jmp 0x10001314
mov eax, dword [ebp - 0x1a8]
sub eax, 0xaea03eaf
je 0x10001b57
jmp 0x1000132a
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb230e554
je 0x10001cd7
jmp 0x10001340
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb6c6d2b0
je 0x10001d24
jmp 0x10001356
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb94a9275
je 0x10001f68
jmp 0x1000136c
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbc464a8a
je 0x100024ae
jmp 0x10001382
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbceed80f
je 0x10002401
jmp 0x10001398
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbe98644e
je 0x10001bf1
jmp 0x100013ae
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc403db8a
je 0x10002193
jmp 0x100013c4
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc4d29aa6
je 0x100022ea
jmp 0x100013da
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc529a05e
je 0x1000249f
jmp 0x100013f0
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc887ab97
je 0x10002421
jmp 0x10001406
mov eax, dword [ebp - 0x1a8]
sub eax, 0xcfa0b72e
je 0x1000247b
jmp 0x1000141c
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd03b39d1
je 0x1000208a
jmp 0x10001432
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd27c4250
je 0x100017e1
jmp 0x10001448
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd301a872
je 0x10001b66
jmp 0x1000145e
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd4ead694
je 0x1000193e
jmp 0x10001474
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe7f0b495
je 0x10001808
jmp 0x1000148a
mov eax, dword [ebp - 0x1a8]
sub eax, 0xea4d290e
je 0x10001e70
jmp 0x100014a0
mov eax, dword [ebp - 0x1a8]
sub eax, 0xeb8888b5
je 0x10001739
jmp 0x100014b6
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf7f870db
je 0x10001bc7
jmp 0x100014cc
mov eax, dword [ebp - 0x1a8]
sub eax, 0xfb04cf68
je 0x10001afa
jmp 0x100014e2
mov eax, dword [ebp - 0x1a8]
sub eax, 0xfc4adf2f
je 0x10001c3a
jmp 0x100014f8
mov eax, dword [ebp - 0x1a8]
sub eax, 0xff0ce5bf
je 0x10002227
jmp 0x1000150e
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1a8ce49
je 0x100018ed
jmp 0x10001524
mov eax, dword [ebp - 0x1a8]
sub eax, 0x92eab3d
je 0x100019b4
jmp 0x1000153a
mov eax, dword [ebp - 0x1a8]
sub eax, 0xa6bb8b6
je 0x10002099
jmp 0x10001550
mov eax, dword [ebp - 0x1a8]
sub eax, 0x10369aa9
je 0x10001df7
jmp 0x10001566
mov eax, dword [ebp - 0x1a8]
sub eax, 0x16a1634d
je 0x10001ac4
jmp 0x1000157c
mov eax, dword [ebp - 0x1a8]
sub eax, 0x207ab098
je 0x100022ab
jmp 0x10001592
mov eax, dword [ebp - 0x1a8]
sub eax, 0x21b8e3fe
je 0x10001ad3
jmp 0x100015a8
mov eax, dword [ebp - 0x1a8]
sub eax, 0x245681f1
je 0x10001e06
jmp 0x100015be
mov eax, dword [ebp - 0x1a8]
sub eax, 0x27b8dc82
je 0x100019c3
jmp 0x100015d4
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2a9693af
je 0x10001d75
jmp 0x100015ea
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2b3f72a7
je 0x10002333
jmp 0x10001600
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2eef8fcc
je 0x10001d03
jmp 0x10001616
mov eax, dword [ebp - 0x1a8]
sub eax, 0x325c2fe1
je 0x100023ce
jmp 0x1000162c
mov eax, dword [ebp - 0x1a8]
sub eax, 0x335d922c
je 0x100022ba
jmp 0x10001642
mov eax, dword [ebp - 0x1a8]
sub eax, 0x398655a3
je 0x100021a2
jmp 0x10001658
mov eax, dword [ebp - 0x1a8]
sub eax, 0x40108f2f
je 0x10001850
jmp 0x1000166e
mov eax, dword [ebp - 0x1a8]
sub eax, 0x4ed63290
je 0x10001b36
jmp 0x10001684
mov eax, dword [ebp - 0x1a8]
sub eax, 0x53751e00
je 0x10001a0c
jmp 0x1000169a
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5495bfa7
je 0x10002430
jmp 0x100016b0
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5a627a3a
je 0x10001b1b
jmp 0x100016c6
mov eax, dword [ebp - 0x1a8]
sub eax, 0x672d3708
je 0x100023a1
jmp 0x100016dc
mov eax, dword [ebp - 0x1a8]
sub eax, 0x729e1433
je 0x100024dc
jmp 0x100016f2
mov eax, dword [ebp - 0x1a8]
sub eax, 0x73b5af63
je 0x10002392
jmp 0x10001708
mov eax, dword [ebp - 0x1a8]
sub eax, 0x74bdc4bf
je 0x10001ede
jmp 0x1000171e
mov eax, dword [ebp - 0x1a8]
sub eax, 0x796d04cd
je 0x10001ca0
jmp 0x10001734
jmp 0x10002503
mov eax, dword [ebp - 0x1a4]
push eax
mov ecx, esp
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x174], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x1a0], 0xa483b837
jmp 0x10002503
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10007650
add esp, 0xc
mov eax, dword [ebp - 0x174]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x17c], eax
mov eax, 0x86900fda
mov ecx, 0xd27c4250
cmp dword [ebp - 0x17c], 0
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov dword [ebp - 0x1a0], 0x8b8d1e6b
jmp 0x10002503
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1a0], 0xe7f0b495
jmp 0x10002503
mov ecx, dword [ebp - 0x168]
mov edx, dword [ebp - 0x164]
lea eax, [ebp - 0x11c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x1a0], 0x40108f2f
jmp 0x10002503
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x180], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x17c]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x110]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x184], eax
mov edx, 0xffffffff
mov eax, 0x27b8dc82
mov ecx, 0x1a8ce49
cmp dword [ebp - 0x184], edx
cmove eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov eax, dword [0x10067350]
mov ecx, dword [0x1006734c]
mov edx, eax
add edx, 0xdafd72b5
sub edx, 1
sub edx, 0xdafd72b5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc887ab97
mov ecx, 0xd4ead694
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov ecx, dword [0x10067350]
mov eax, dword [0x1006734c]
mov edx, ecx
add edx, 0x236982e0
sub edx, 1
sub edx, 0x236982e0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc887ab97
mov ecx, 0x92eab3d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov dword [ebp - 0x1a0], 0x8b8d1e6b
jmp 0x10002503
mov eax, dword [0x10067350]
mov ecx, dword [0x1006734c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5495bfa7
mov ecx, 0x53751e00
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov eax, dword [ebp - 0x184]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x15c], eax
mov ecx, dword [0x10067350]
mov eax, dword [0x1006734c]
mov edx, ecx
sub edx, 0xb2e2fa5d
sub edx, 1
add edx, 0xb2e2fa5d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5495bfa7
mov ecx, 0x16a1634d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov dword [ebp - 0x1a0], 0x21b8e3fe
jmp 0x10002503
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x1a0], 0xfb04cf68
jmp 0x10002503
mov edx, dword [ebp - 0x158]
mov eax, 0x5a627a3a
mov ecx, 0xd301a872
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x1a0], 0x4ed63290
jmp 0x10002503
mov eax, dword [ebp - 0x154]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a0], 0xaea03eaf
jmp 0x10002503
mov dword [ebp - 0x1a0], 0x8b8d1e6b
jmp 0x10002503
mov eax, dword [ebp - 0x188]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x1a0], 0xf7f870db
jmp 0x10002503
mov eax, dword [ebp - 0x190]
mov edx, dword [eax + 0x3c]
mov eax, dword [ebp - 0x150]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x1a0], 0xbe98644e
jmp 0x10002503
mov eax, dword [0x10067350]
mov ecx, dword [0x1006734c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcfa0b72e
mov ecx, 0xfc4adf2f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x194], eax
mov word [ebp - 0x196], 0
mov eax, dword [0x10067350]
mov ecx, dword [0x1006734c]
mov edx, eax
add edx, 0xa5c681fe
sub edx, 1
sub edx, 0xa5c681fe
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcfa0b72e
mov ecx, 0x796d04cd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov dword [ebp - 0x1a0], 0xa3bd802a
jmp 0x10002503
movzx eax, word [ebp - 0x196]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x1a0], 0xb230e554
jmp 0x10002503
mov eax, dword [ebp - 0x144]
movzx ecx, word [eax + 6]
mov eax, dword [ebp - 0x148]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x13d], al
mov dword [ebp - 0x1a0], 0x2eef8fcc
jmp 0x10002503
mov dl, byte [ebp - 0x13d]
mov eax, 0x672d3708
mov ecx, 0xb6c6d2b0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov eax, dword [0x10067350]
mov ecx, dword [0x1006734c]
mov edx, eax
add edx, 0x8ea6b543
sub edx, 1
sub edx, 0x8ea6b543
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc529a05e
mov ecx, 0x2a9693af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x13c], eax
mov ecx, dword [0x10067350]
mov eax, dword [0x1006734c]
mov edx, ecx
sub edx, 0xbcc882bf
sub edx, 1
add edx, 0xbcc882bf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc529a05e
mov ecx, 0x10369aa9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov dword [ebp - 0x1a0], 0x245681f1
jmp 0x10002503
mov eax, dword [ebp - 0x13c]
xor ecx, ecx
sub ecx, 0x18
sub eax, ecx
mov ecx, dword [ebp - 0x194]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
movzx ecx, word [ebp - 0x196]
imul ecx, ecx, 0x28
sub eax, 0x5c73b768
add eax, ecx
add eax, 0x5c73b768
mov dword [ebp - 0x19c], eax
mov ecx, dword [ebp - 0x19c]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10013190
call fcn.100099c0
add esp, 8
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x1a0], 0xea4d290e
jmp 0x10002503
mov ecx, dword [0x10067350]
mov eax, dword [0x1006734c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbc464a8a
mov ecx, 0x74bdc4bf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov eax, dword [ebp - 0x138]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x131], al
mov ecx, dword [0x10067350]
mov eax, dword [0x1006734c]
mov edx, ecx
sub edx, 0xddb80717
sub edx, 1
add edx, 0xddb80717
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbc464a8a
mov ecx, 0xb94a9275
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov dl, byte [ebp - 0x131]
mov eax, 0xaaad716f
mov ecx, 0x398655a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov ecx, dword [0x10067350]
mov eax, dword [0x1006734c]
mov edx, ecx
add edx, 0x317b8624
sub edx, 1
sub edx, 0x317b8624
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x86297158
mov ecx, 0x9204dcfd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x19c]
mov ecx, dword [ecx + 0xc]
sub eax, 0xddc0411d
add eax, ecx
add eax, 0xddc0411d
mov dword [ebp - 0x12c], eax
mov eax, dword [0x10067350]
mov ecx, dword [0x1006734c]
mov edx, eax
sub edx, 0x10b6691b
sub edx, 1
add edx, 0x10b6691b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x86297158
mov ecx, 0xd03b39d1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov dword [ebp - 0x1a0], 0xa6bb8b6
jmp 0x10002503
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x12c]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x170]
mov byte [eax], cl
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
sub edx, eax
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x19c]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, esi
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.100077b0
add esp, 0xc
mov ecx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x19c]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x180]
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 0xc]
add esi, 0xca69304b
add esi, eax
sub esi, 0xca69304b
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x170]
mov byte [eax], cl
mov dword [ebp - 0x1a0], 0xc403db8a
jmp 0x10002503
mov dword [ebp - 0x1a0], 0x398655a3
jmp 0x10002503
mov dword [ebp - 0x1a0], 0x90219566
jmp 0x10002503
mov ecx, dword [0x10067350]
mov eax, dword [0x1006734c]
mov edx, ecx
sub edx, 0xffec4dc0
sub edx, 1
add edx, 0xffec4dc0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x729e1433
mov ecx, 0xff0ce5bf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov ax, word [ebp - 0x196]
mov word [ebp - 0x128], ax
mov ecx, dword [0x10067350]
mov eax, dword [0x1006734c]
mov edx, ecx
add edx, 0xe24dde36
sub edx, 1
sub edx, 0xe24dde36
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x729e1433
mov ecx, 0x207ab098
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov dword [ebp - 0x1a0], 0x335d922c
jmp 0x10002503
mov ax, word [ebp - 0x128]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x126], ax
mov dword [ebp - 0x1a0], 0xc4d29aa6
jmp 0x10002503
mov eax, dword [0x10067350]
mov ecx, dword [0x1006734c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x89c582a7
mov ecx, 0x2b3f72a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov ax, word [ebp - 0x126]
mov word [ebp - 0x196], ax
mov eax, dword [0x10067350]
mov ecx, dword [0x1006734c]
mov edx, eax
add edx, 0x3c70b9a8
sub edx, 1
sub edx, 0x3c70b9a8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x89c582a7
mov ecx, 0x73b5af63
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002503
mov dword [ebp - 0x1a0], 0xa3bd802a
jmp 0x10002503
mov eax, dword [ebp - 0x184]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x1a0], 0x325c2fe1
jmp 0x10002503
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x178]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a0], 0xbceed80f
jmp 0x10002503
mov dword [ebp - 0x1a0], 0x8b8d1e6b
jmp 0x10002503
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10006a50
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1a0], 0xd4ead694
jmp 0x10002503
mov eax, dword [ebp - 0x184]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x1a0], 0x53751e00
jmp 0x10002503
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x194], eax
mov word [ebp - 0x196], 0
mov dword [ebp - 0x1a0], 0xfc4adf2f
jmp 0x10002503
mov dword [ebp - 0x1a0], 0x2a9693af
jmp 0x10002503
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1a0], 0x74bdc4bf
jmp 0x10002503
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x1a0], 0x9204dcfd
jmp 0x10002503
mov dword [ebp - 0x1a0], 0xff0ce5bf
jmp 0x10002503
mov ax, word [ebp - 0x126]
mov word [ebp - 0x196], ax
mov dword [ebp - 0x1a0], 0x2b3f72a7
jmp 0x10001248