Function at 0x10001090
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1bc
mov eax, dword [ebp + 8]
mov eax, dword [0x10067800]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1a4], 0x12d7e6c7
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a8], eax
sub eax, 0x87093d81
je 0x10001c4c
jmp 0x100010ce
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8a6c2ddb
je 0x10002369
jmp 0x100010e4
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8c21f5bd
je 0x10001c6a
jmp 0x100010fa
mov eax, dword [ebp - 0x1a8]
sub eax, 0x98218a85
je 0x1000259a
jmp 0x10001110
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9a1299e7
je 0x1000256c
jmp 0x10001126
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9aef36af
je 0x10001677
jmp 0x1000113c
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9dd8cee8
je 0x100025a9
jmp 0x10001152
mov eax, dword [ebp - 0x1a8]
sub eax, 0xa969f0d4
je 0x10001aeb
jmp 0x10001168
mov eax, dword [ebp - 0x1a8]
sub eax, 0xadd80f4b
je 0x10001cf5
jmp 0x1000117e
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb3b74170
je 0x10001f2d
jmp 0x10001194
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbbd7b10d
je 0x100023ba
jmp 0x100011aa
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbfbd3203
je 0x10001fad
jmp 0x100011c0
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc1ca9db9
je 0x1000179d
jmp 0x100011d6
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc487de88
je 0x10001970
jmp 0x100011ec
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc5dddcf6
je 0x10001a4a
jmp 0x10001202
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc94ddff6
je 0x10001ccb
jmp 0x10001218
mov eax, dword [ebp - 0x1a8]
sub eax, 0xcb0c6c98
je 0x10002108
jmp 0x1000122e
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd31203e7
je 0x1000245d
jmp 0x10001244
mov eax, dword [ebp - 0x1a8]
sub eax, 0xdab759c4
je 0x10001ddd
jmp 0x1000125a
mov eax, dword [ebp - 0x1a8]
sub eax, 0xdbf000f8
je 0x10001f0c
jmp 0x10001270
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe252cfbb
je 0x100021a3
jmp 0x10001286
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe30000a0
je 0x1000249f
jmp 0x1000129c
mov eax, dword [ebp - 0x1a8]
sub eax, 0xea4de232
je 0x10001e09
jmp 0x100012b2
mov eax, dword [ebp - 0x1a8]
sub eax, 0xea7b8090
je 0x10002490
jmp 0x100012c8
mov eax, dword [ebp - 0x1a8]
sub eax, 0xed5c7e8f
je 0x10002305
jmp 0x100012de
mov eax, dword [ebp - 0x1a8]
sub eax, 0xeea0b2f3
je 0x10001dec
jmp 0x100012f4
mov eax, dword [ebp - 0x1a8]
sub eax, 0xefc54457
je 0x100024ef
jmp 0x1000130a
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf332fb6a
je 0x100016a5
jmp 0x10001320
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf7219755
je 0x100019dc
jmp 0x10001336
mov eax, dword [ebp - 0x1a8]
sub eax, 0xfec23c9b
je 0x10002581
jmp 0x1000134c
mov eax, dword [ebp - 0x1a8]
sub eax, 0xfefa7885
je 0x10002331
jmp 0x10001362
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1784edf
je 0x100018f3
jmp 0x10001378
mov eax, dword [ebp - 0x1a8]
sub eax, 0x65c36f1
je 0x10001aca
jmp 0x1000138e
mov eax, dword [ebp - 0x1a8]
sub eax, 0x6c9ed5c
je 0x1000205a
jmp 0x100013a4
mov eax, dword [ebp - 0x1a8]
sub eax, 0x7059b12
je 0x10002314
jmp 0x100013ba
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc7321bc
je 0x10001d6b
jmp 0x100013d0
mov eax, dword [ebp - 0x1a8]
sub eax, 0x104965de
je 0x10001b34
jmp 0x100013e6
mov eax, dword [ebp - 0x1a8]
sub eax, 0x119628a6
je 0x100020f9
jmp 0x100013fc
mov eax, dword [ebp - 0x1a8]
sub eax, 0x12d7e6c7
je 0x10001627
jmp 0x10001412
mov eax, dword [ebp - 0x1a8]
sub eax, 0x137036c4
je 0x10001961
jmp 0x10001428
mov eax, dword [ebp - 0x1a8]
sub eax, 0x153b3a2c
je 0x10001885
jmp 0x1000143e
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1e481d7f
je 0x10001b98
jmp 0x10001454
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1ed0ebd5
je 0x100024d1
jmp 0x1000146a
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1f88f01a
je 0x1000235a
jmp 0x10001480
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2790e670
je 0x100024e0
jmp 0x10001496
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2e0ee302
je 0x1000171b
jmp 0x100014ac
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2eba2d2b
je 0x1000198b
jmp 0x100014c2
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2f8f259c
je 0x10001c5b
jmp 0x100014d8
mov eax, dword [ebp - 0x1a8]
sub eax, 0x32712206
je 0x10001e79
jmp 0x100014ee
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3b957776
je 0x10001f64
jmp 0x10001504
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3c60575f
je 0x10001e28
jmp 0x1000151a
mov eax, dword [ebp - 0x1a8]
sub eax, 0x46068aac
je 0x10001696
jmp 0x10001530
mov eax, dword [ebp - 0x1a8]
sub eax, 0x4d1fd83f
je 0x10002246
jmp 0x10001546
mov eax, dword [ebp - 0x1a8]
sub eax, 0x4dd285c1
je 0x100017f4
jmp 0x1000155c
mov eax, dword [ebp - 0x1a8]
sub eax, 0x51dcd909
je 0x10001fec
jmp 0x10001572
mov eax, dword [ebp - 0x1a8]
sub eax, 0x56d60f1c
je 0x100022bc
jmp 0x10001588
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5960e6be
je 0x100017ac
jmp 0x1000159e
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5ddcd463
je 0x1000244e
jmp 0x100015b4
mov eax, dword [ebp - 0x1a8]
sub eax, 0x6be87d53
je 0x100024c2
jmp 0x100015ca
mov eax, dword [ebp - 0x1a8]
sub eax, 0x6e1b9b44
je 0x100024b3
jmp 0x100015e0
mov eax, dword [ebp - 0x1a8]
sub eax, 0x75e489c5
je 0x10001be9
jmp 0x100015f6
mov eax, dword [ebp - 0x1a8]
sub eax, 0x7b0469e9
je 0x10002510
jmp 0x1000160c
mov eax, dword [ebp - 0x1a8]
sub eax, 0x7c78e5a7
je 0x10001b89
jmp 0x10001622
jmp 0x100025c5
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000bc80
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x1a4], 0x9aef36af
jmp 0x100025c5
mov eax, 0x46068aac
mov ecx, 0xf332fb6a
cmp dword [ebp - 0x17c], 0
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0xe30000a0
jmp 0x100025c5
mov ecx, dword [0x10068b40]
mov eax, dword [0x10068b3c]
mov edx, ecx
add edx, 0x93531765
sub edx, 1
sub edx, 0x93531765
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6e1b9b44
mov ecx, 0x2e0ee302
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x174], eax
mov ecx, dword [0x10068b40]
mov eax, dword [0x10068b3c]
mov edx, ecx
sub edx, 0x8f6eb064
sub edx, 1
add edx, 0x8f6eb064
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6e1b9b44
mov ecx, 0xc1ca9db9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0x5960e6be
jmp 0x100025c5
mov edx, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x174]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x1a4], 0x4dd285c1
jmp 0x100025c5
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x17c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x184], eax
mov edx, 0xffffffff
mov eax, 0xc487de88
mov ecx, 0x153b3a2c
cmp dword [ebp - 0x184], edx
cmove eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov ecx, dword [0x10068b40]
mov eax, dword [0x10068b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6be87d53
mov ecx, 0x1784edf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov ecx, dword [0x10068b40]
mov eax, dword [0x10068b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6be87d53
mov ecx, 0x137036c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0xe30000a0
jmp 0x100025c5
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x1a4], 0x2eba2d2b
jmp 0x100025c5
mov eax, dword [ebp - 0x170]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x1a4], 0xf7219755
jmp 0x100025c5
mov ecx, dword [0x10068b40]
mov eax, dword [0x10068b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1ed0ebd5
mov ecx, 0xc5dddcf6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
cmp dword [ebp - 0x188], 0
setne al
and al, 1
mov byte [ebp - 0x169], al
mov ecx, dword [0x10068b40]
mov eax, dword [0x10068b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1ed0ebd5
mov ecx, 0x65c36f1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov dl, byte [ebp - 0x169]
mov eax, 0xa969f0d4
mov ecx, 0x8c21f5bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov eax, dword [0x10068b40]
mov ecx, dword [0x10068b3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2790e670
mov ecx, 0x104965de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x168], eax
mov eax, dword [0x10068b40]
mov ecx, dword [0x10068b3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2790e670
mov ecx, 0x7c78e5a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0x1e481d7f
jmp 0x100025c5
mov eax, dword [0x10068b40]
mov ecx, dword [0x10068b3c]
mov edx, eax
sub edx, 0x2f293be
sub edx, 1
add edx, 0x2f293be
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xefc54457
mov ecx, 0x75e489c5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov eax, dword [ebp - 0x168]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [0x10068b40]
mov ecx, dword [0x10068b3c]
mov edx, eax
sub edx, 0x464383c2
sub edx, 1
add edx, 0x464383c2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xefc54457
mov ecx, 0x87093d81
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0x2f8f259c
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0xe30000a0
jmp 0x100025c5
mov eax, dword [ebp - 0x188]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1a4], 0xc94ddff6
jmp 0x100025c5
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x1a4], 0xadd80f4b
jmp 0x100025c5
mov ecx, dword [0x10068b40]
mov eax, dword [0x10068b3c]
mov edx, ecx
sub edx, 0x8c85d41a
sub edx, 1
add edx, 0x8c85d41a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7b0469e9
mov ecx, 0xc7321bc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov eax, dword [ebp - 0x160]
mov edx, dword [ebp - 0x15c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x194], eax
mov word [ebp - 0x196], 0
mov eax, dword [0x10068b40]
mov ecx, dword [0x10068b3c]
mov edx, eax
sub edx, 0x54716db6
sub edx, 1
add edx, 0x54716db6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7b0469e9
mov ecx, 0xdab759c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0xeea0b2f3
jmp 0x100025c5
mov ax, word [ebp - 0x196]
mov word [ebp - 0x156], ax
mov dword [ebp - 0x1a4], 0xea4de232
jmp 0x100025c5
mov ax, word [ebp - 0x156]
movzx eax, ax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x1a4], 0x3c60575f
jmp 0x100025c5
mov eax, dword [0x10068b40]
mov ecx, dword [0x10068b3c]
mov edx, eax
add edx, 0x3d130be3
sub edx, 1
sub edx, 0x3d130be3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9a1299e7
mov ecx, 0x32712206
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov eax, dword [ebp - 0x194]
movzx ecx, word [eax + 6]
mov eax, dword [ebp - 0x154]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x14d], al
mov ecx, dword [0x10068b40]
mov eax, dword [0x10068b3c]
mov edx, ecx
add edx, 0xea0911c9
sub edx, 1
sub edx, 0xea0911c9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9a1299e7
mov ecx, 0xdbf000f8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov dl, byte [ebp - 0x14d]
mov eax, 0x8a6c2ddb
mov ecx, 0xb3b74170
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov eax, dword [ebp - 0x194]
add eax, 0x3b07b58d
add eax, 0x18
sub eax, 0x3b07b58d
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x194]
add eax, 4
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1a4], 0x3b957776
jmp 0x100025c5
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax + 0x10]
mov eax, dword [ebp - 0x14c]
sub eax, 0x11e58094
add eax, ecx
add eax, 0x11e58094
movzx ecx, word [ebp - 0x196]
imul edx, ecx, 0x28
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x1a4], 0xbfbd3203
jmp 0x100025c5
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x19c], eax
mov ecx, dword [ebp - 0x19c]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100173b0
call fcn.1000dff0
mov edx, eax
mov eax, 0x51dcd909
mov ecx, 0x4d1fd83f
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov ecx, dword [0x10068b40]
mov eax, dword [0x10068b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfec23c9b
mov ecx, 0x6c9ed5c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x138], eax
mov ecx, dword [0x10068b40]
mov eax, dword [0x10068b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfec23c9b
mov ecx, 0x119628a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0xcb0c6c98
jmp 0x100025c5
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x13c]
add edx, 0xbf8c4930
add edx, eax
sub edx, 0xbf8c4930
mov ecx, dword [ebp - 0x140]
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x19d], al
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x19c]
mov ecx, dword [ecx + 0xc]
sub eax, 0x9b2dd73a
add eax, ecx
add eax, 0x9b2dd73a
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x1a4], 0xe252cfbb
jmp 0x100025c5
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x130]
sub ecx, 0xb90ca494
add ecx, eax
add ecx, 0xb90ca494
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x134]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000bde0
mov ecx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x19c]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x180]
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 0xc]
add esi, 0x87954510
add esi, eax
sub esi, 0x87954510
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x19d], al
mov dword [ebp - 0x1a4], 0x4d1fd83f
jmp 0x100025c5
mov ecx, dword [0x10068b40]
mov eax, dword [0x10068b3c]
mov edx, ecx
add edx, 0xf628fdd4
sub edx, 1
sub edx, 0xf628fdd4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x98218a85
mov ecx, 0x56d60f1c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov eax, dword [0x10068b40]
mov ecx, dword [0x10068b3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x98218a85
mov ecx, 0xed5c7e8f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0x7059b12
jmp 0x100025c5
mov ax, word [ebp - 0x196]
mov word [ebp - 0x126], ax
mov dword [ebp - 0x1a4], 0xfefa7885
jmp 0x100025c5
mov ax, word [ebp - 0x126]
add ax, 0x76f
add ax, 1
sub ax, 0x76f
mov word [ebp - 0x196], ax
mov dword [ebp - 0x1a4], 0x1f88f01a
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0xeea0b2f3
jmp 0x100025c5
mov eax, dword [0x10068b40]
mov ecx, dword [0x10068b3c]
mov edx, eax
sub edx, 0x172330f3
sub edx, 1
add edx, 0x172330f3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9dd8cee8
mov ecx, 0xbbd7b10d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov eax, dword [ebp - 0x184]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x124], eax
mov ecx, dword [0x10068b40]
mov eax, dword [0x10068b3c]
mov edx, ecx
add edx, 0xd3927b7f
sub edx, 1
sub edx, 0xd3927b7f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9dd8cee8
mov ecx, 0x5ddcd463
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0xd31203e7
jmp 0x100025c5
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x178]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a4], 0xea7b8090
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0xe30000a0
jmp 0x100025c5
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1000b080
add esp, 0x1bc
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1a4], 0x2e0ee302
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0x1784edf
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0xc5dddcf6
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0x104965de
jmp 0x100025c5
mov eax, dword [ebp - 0x168]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a4], 0x75e489c5
jmp 0x100025c5
mov eax, dword [ebp - 0x160]
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x160]
mov edx, dword [ebp - 0x15c]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x194], eax
mov word [ebp - 0x196], 0
mov dword [ebp - 0x1a4], 0xc7321bc
jmp 0x100025c5
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x1a4], 0x32712206
jmp 0x100025c5
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x1a4], 0x6c9ed5c
jmp 0x100025c5
mov dword [ebp - 0x1a4], 0x56d60f1c
jmp 0x100025c5
mov eax, dword [ebp - 0x184]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a4], 0xbbd7b10d
jmp 0x100010b2