Function at 0x10007980
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x8c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x90], eax
mov eax, dword [0x1007b080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x1007c544]
mov eax, dword [0x1007c540]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x86], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x85], al
mov dword [ebp - 0x8c], 0xbe8747db
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x94], eax
sub eax, 0x843dddd4
je 0x10007f1c
jmp 0x100079fb
mov eax, dword [ebp - 0x94]
sub eax, 0x8818bddd
je 0x100081f1
jmp 0x10007a11
mov eax, dword [ebp - 0x94]
sub eax, 0x8da0c641
je 0x10008527
jmp 0x10007a27
mov eax, dword [ebp - 0x94]
sub eax, 0x94d97919
je 0x10008588
jmp 0x10007a3d
mov eax, dword [ebp - 0x94]
sub eax, 0x964d5047
je 0x1000834b
jmp 0x10007a53
mov eax, dword [ebp - 0x94]
sub eax, 0x96e974e1
je 0x100080d2
jmp 0x10007a69
mov eax, dword [ebp - 0x94]
sub eax, 0x99c0543a
je 0x1000856a
jmp 0x10007a7f
mov eax, dword [ebp - 0x94]
sub eax, 0x9af6a6b4
je 0x10007f2b
jmp 0x10007a95
mov eax, dword [ebp - 0x94]
sub eax, 0xa1228f2d
je 0x1000862d
jmp 0x10007aab
mov eax, dword [ebp - 0x94]
sub eax, 0xa58adf6f
je 0x100085ac
jmp 0x10007ac1
mov eax, dword [ebp - 0x94]
sub eax, 0xb417b0d1
je 0x10007fea
jmp 0x10007ad7
mov eax, dword [ebp - 0x94]
sub eax, 0xb4c37a5a
je 0x100083a3
jmp 0x10007aed
mov eax, dword [ebp - 0x94]
sub eax, 0xbc908384
je 0x100082a8
jmp 0x10007b03
mov eax, dword [ebp - 0x94]
sub eax, 0xbe8747db
je 0x10007e62
jmp 0x10007b19
mov eax, dword [ebp - 0x94]
sub eax, 0xc680ccfe
je 0x10008976
jmp 0x10007b2f
mov eax, dword [ebp - 0x94]
sub eax, 0xc907111a
je 0x10008878
jmp 0x10007b45
mov eax, dword [ebp - 0x94]
sub eax, 0xc996909a
je 0x100082dd
jmp 0x10007b5b
mov eax, dword [ebp - 0x94]
sub eax, 0xcfe4a379
je 0x10008123
jmp 0x10007b71
mov eax, dword [ebp - 0x94]
sub eax, 0xd01937cc
je 0x1000892b
jmp 0x10007b87
mov eax, dword [ebp - 0x94]
sub eax, 0xdc051442
je 0x100080b0
jmp 0x10007b9d
mov eax, dword [ebp - 0x94]
sub eax, 0xdd729bca
je 0x100088ed
jmp 0x10007bb3
mov eax, dword [ebp - 0x94]
sub eax, 0xdfbf9e3d
je 0x100084a1
jmp 0x10007bc9
mov eax, dword [ebp - 0x94]
sub eax, 0xe9703717
je 0x10008027
jmp 0x10007bdf
mov eax, dword [ebp - 0x94]
sub eax, 0xfe4bc922
je 0x1000842b
jmp 0x10007bf5
mov eax, dword [ebp - 0x94]
sub eax, 0xfea819f5
je 0x1000860f
jmp 0x10007c0b
mov eax, dword [ebp - 0x94]
sub eax, 0x13723f7
je 0x100088fe
jmp 0x10007c21
mov eax, dword [ebp - 0x94]
sub eax, 0x4df4ee0
je 0x100081a0
jmp 0x10007c37
mov eax, dword [ebp - 0x94]
sub eax, 0xdc74203
je 0x10007fdb
jmp 0x10007c4d
mov eax, dword [ebp - 0x94]
sub eax, 0xe9ea932
je 0x100088a7
jmp 0x10007c63
mov eax, dword [ebp - 0x94]
sub eax, 0xefaac62
je 0x10008949
jmp 0x10007c79
mov eax, dword [ebp - 0x94]
sub eax, 0xfe53b9e
je 0x10008792
jmp 0x10007c8f
mov eax, dword [ebp - 0x94]
sub eax, 0xffca221
je 0x10008887
jmp 0x10007ca5
mov eax, dword [ebp - 0x94]
sub eax, 0x11d3b6f4
je 0x10008779
jmp 0x10007cbb
mov eax, dword [ebp - 0x94]
sub eax, 0x1d001f6e
je 0x100083c1
jmp 0x10007cd1
mov eax, dword [ebp - 0x94]
sub eax, 0x21411e3e
je 0x1000868a
jmp 0x10007ce7
mov eax, dword [ebp - 0x94]
sub eax, 0x23805335
je 0x100088cf
jmp 0x10007cfd
mov eax, dword [ebp - 0x94]
sub eax, 0x331974fa
je 0x100083b2
jmp 0x10007d13
mov eax, dword [ebp - 0x94]
sub eax, 0x34acae52
je 0x1000854b
jmp 0x10007d29
mov eax, dword [ebp - 0x94]
sub eax, 0x47db1ae7
je 0x100082c6
jmp 0x10007d3f
mov eax, dword [ebp - 0x94]
sub eax, 0x520a59d6
je 0x10008518
jmp 0x10007d55
mov eax, dword [ebp - 0x94]
sub eax, 0x5765f548
je 0x1000891c
jmp 0x10007d6b
mov eax, dword [ebp - 0x94]
sub eax, 0x5cbc1af6
je 0x10008808
jmp 0x10007d81
mov eax, dword [ebp - 0x94]
sub eax, 0x5d75325d
je 0x100086d2
jmp 0x10007d97
mov eax, dword [ebp - 0x94]
sub eax, 0x666c9048
je 0x10008257
jmp 0x10007dad
mov eax, dword [ebp - 0x94]
sub eax, 0x6e2d8a04
je 0x10008191
jmp 0x10007dc3
mov eax, dword [ebp - 0x94]
sub eax, 0x6e57a483
je 0x1000820e
jmp 0x10007dd9
mov eax, dword [ebp - 0x94]
sub eax, 0x6f5008b4
je 0x1000890d
jmp 0x10007def
mov eax, dword [ebp - 0x94]
sub eax, 0x70f60e2e
je 0x10008414
jmp 0x10007e05
mov eax, dword [ebp - 0x94]
sub eax, 0x795ddd10
je 0x10007e91
jmp 0x10007e1b
mov eax, dword [ebp - 0x94]
sub eax, 0x7e58c0b1
je 0x10007f52
jmp 0x10007e31
mov eax, dword [ebp - 0x94]
sub eax, 0x7e9fac81
je 0x1000876a
jmp 0x10007e47
mov eax, dword [ebp - 0x94]
sub eax, 0x7f9642e7
je 0x10008869
jmp 0x10007e5d
jmp 0x100089b1
mov al, byte [ebp - 0x86]
mov cl, byte [ebp - 0x85]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x13723f7
mov ecx, 0x795ddd10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x70], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
mov eax, dword [0x1007c544]
mov ecx, dword [0x1007c540]
mov edx, eax
add edx, 0xf770b5ae
sub edx, 1
sub edx, 0xf770b5ae
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x13723f7
mov ecx, 0x843dddd4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov dword [ebp - 0x8c], 0x9af6a6b4
jmp 0x100089b1
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
push eax
mov eax, esp
mov dword [ebp - 0x5c], eax
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x8c], 0x7e58c0b1
jmp 0x100089b1
mov ecx, dword [ebp - 0x90]
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1001b0c0
add esp, 0xc
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov edx, dword [ebp - 0x78]
mov eax, 0xdc74203
mov ecx, 0xb417b0d1
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov dword [ebp - 0x8c], 0xdd729bca
jmp 0x100089b1
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x80]
mov edx, dword [eax]
mov eax, dword [ebp - 0x7c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x8c], 0xe9703717
jmp 0x100089b1
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x70]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x8c], 0xdc051442
jmp 0x100089b1
mov edx, dword [ebp - 0x44]
mov esi, 0xffffffff
mov eax, 0x4df4ee0
mov ecx, 0x96e974e1
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov eax, dword [0x1007c544]
mov ecx, dword [0x1007c540]
mov edx, eax
sub edx, 0xd614758c
sub edx, 1
add edx, 0xd614758c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6f5008b4
mov ecx, 0xcfe4a379
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov ecx, dword [0x1007c544]
mov eax, dword [0x1007c540]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6f5008b4
mov ecx, 0x6e2d8a04
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov dword [ebp - 0x8c], 0xdd729bca
jmp 0x100089b1
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov dword [ebp - 0x8c], 0x8818bddd
jmp 0x100089b1
mov eax, dword [ebp - 0x68]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x3d], al
mov dword [ebp - 0x8c], 0x6e57a483
jmp 0x100089b1
mov eax, dword [0x1007c544]
mov ecx, dword [0x1007c540]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5765f548
mov ecx, 0x666c9048
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov eax, dword [0x1007c544]
mov ecx, dword [0x1007c540]
mov edx, eax
add edx, 0x2572f642
sub edx, 1
sub edx, 0x2572f642
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5765f548
mov ecx, 0xbc908384
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov dl, byte [ebp - 0x3d]
mov eax, 0x47db1ae7
mov ecx, 0x1d001f6e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x8c], 0xc996909a
jmp 0x100089b1
mov ecx, dword [0x1007c544]
mov eax, dword [0x1007c540]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd01937cc
mov ecx, 0x964d5047
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov eax, dword [ebp - 0x3c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1007c544]
mov ecx, dword [0x1007c540]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd01937cc
mov ecx, 0xb4c37a5a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov dword [ebp - 0x8c], 0x331974fa
jmp 0x100089b1
mov dword [ebp - 0x8c], 0xdd729bca
jmp 0x100089b1
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x64]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x60]
mov dword [eax], ecx
mov dword [ebp - 0x8c], 0x70f60e2e
jmp 0x100089b1
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x8c], 0xfe4bc922
jmp 0x100089b1
mov ecx, dword [0x1007c544]
mov eax, dword [0x1007c540]
mov edx, ecx
add edx, 0x32eff290
sub edx, 1
sub edx, 0x32eff290
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xefaac62
mov ecx, 0xdfbf9e3d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
sub ecx, 0x14f1be6d
add ecx, eax
add ecx, 0x14f1be6d
mov eax, dword [ebp - 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
mov word [eax], 0
mov eax, dword [0x1007c544]
mov ecx, dword [0x1007c540]
mov edx, eax
add edx, 0xc3530fea
sub edx, 1
sub edx, 0xc3530fea
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xefaac62
mov ecx, 0x520a59d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov dword [ebp - 0x8c], 0x8da0c641
jmp 0x100089b1
mov eax, dword [ebp - 0x58]
movzx eax, word [eax]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x8c], 0x34acae52
jmp 0x100089b1
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x29], al
mov dword [ebp - 0x8c], 0x99c0543a
jmp 0x100089b1
mov dl, byte [ebp - 0x29]
mov eax, 0xffca221
mov ecx, 0x94d97919
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
add eax, 0x7a732a86
add eax, 0x18
sub eax, 0x7a732a86
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x8c], 0xa58adf6f
jmp 0x100089b1
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x28]
add ecx, 0x2943a1d5
add ecx, eax
sub ecx, 0x2943a1d5
mov eax, dword [ebp - 0x58]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10028870
call fcn.1001ea20
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x22], al
mov dword [ebp - 0x8c], 0xfea819f5
jmp 0x100089b1
mov dl, byte [ebp - 0x22]
mov eax, 0xa1228f2d
mov ecx, 0x7e9fac81
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov eax, dword [ebp - 0x50]
mov dword [eax], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x74]
mov edx, dword [eax]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
mov eax, dword [ebp - 0x50]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x21], al
mov dword [ebp - 0x8c], 0x21411e3e
jmp 0x100089b1
mov cl, byte [ebp - 0x21]
and cl, 1
mov eax, dword [ebp - 0x4c]
mov byte [eax], cl
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x54]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x8c], 0x5d75325d
jmp 0x100089b1
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x54da80db
add ecx, eax
add ecx, 0x54da80db
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x20]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1001b220
add esp, 0xc
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x74]
mov esi, dword [eax]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add esi, 0x7aed0317
add esi, eax
sub esi, 0x7aed0317
mov eax, dword [ebp - 0x50]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x4c]
mov byte [eax], cl
mov dword [ebp - 0x8c], 0x7e9fac81
jmp 0x100089b1
mov dword [ebp - 0x8c], 0x11d3b6f4
jmp 0x100089b1
mov eax, dword [ebp - 0x58]
mov ax, word [eax]
mov word [ebp - 0x12], ax
mov dword [ebp - 0x8c], 0xfe53b9e
jmp 0x100089b1
mov ecx, dword [0x1007c544]
mov eax, dword [0x1007c540]
mov edx, ecx
sub edx, 0x2b82744c
sub edx, 1
add edx, 0x2b82744c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc680ccfe
mov ecx, 0x5cbc1af6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov cx, word [ebp - 0x12]
add cx, 0x970e
add cx, 1
sub cx, 0x970e
mov eax, dword [ebp - 0x58]
mov word [eax], cx
mov eax, dword [0x1007c544]
mov ecx, dword [0x1007c540]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc680ccfe
mov ecx, 0x7f9642e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x100089b1
mov dword [ebp - 0x8c], 0xc907111a
jmp 0x100089b1
mov dword [ebp - 0x8c], 0x8da0c641
jmp 0x100089b1
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x8c], 0xe9ea932
jmp 0x100089b1
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x8c], 0x23805335
jmp 0x100089b1
mov eax, dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x8c], 0xdd729bca
jmp 0x100089b1
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1001a320
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x8c], 0x795ddd10
jmp 0x100089b1
mov dword [ebp - 0x8c], 0xcfe4a379
jmp 0x100089b1
mov dword [ebp - 0x8c], 0x666c9048
jmp 0x100089b1
mov eax, dword [ebp - 0x3c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x8c], 0x964d5047
jmp 0x100089b1
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
mov word [eax], 0
mov dword [ebp - 0x8c], 0xdfbf9e3d
jmp 0x100089b1
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov cx, word [ebp - 0x12]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x58]
mov word [eax], cx
mov dword [ebp - 0x8c], 0x5cbc1af6
jmp 0x100079df