Function at 0x100012d0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x18c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x194], eax
mov eax, dword [0x10066000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x190], 0xaa501a05
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
sub eax, 0x810f2890
je 0x100018b5
jmp 0x10001315
mov eax, dword [ebp - 0x198]
sub eax, 0x87b82af8
je 0x1000185e
jmp 0x1000132b
mov eax, dword [ebp - 0x198]
sub eax, 0x88dc4bc0
je 0x10001d93
jmp 0x10001341
mov eax, dword [ebp - 0x198]
sub eax, 0x94df07c8
je 0x1000217a
jmp 0x10001357
mov eax, dword [ebp - 0x198]
sub eax, 0x981029da
je 0x10001e47
jmp 0x1000136d
mov eax, dword [ebp - 0x198]
sub eax, 0xa3de569d
je 0x10002189
jmp 0x10001383
mov eax, dword [ebp - 0x198]
sub eax, 0xaa501a05
je 0x100017a8
jmp 0x10001399
mov eax, dword [ebp - 0x198]
sub eax, 0xaad6c277
je 0x10002030
jmp 0x100013af
mov eax, dword [ebp - 0x198]
sub eax, 0xabfb7196
je 0x10001da2
jmp 0x100013c5
mov eax, dword [ebp - 0x198]
sub eax, 0xac9e6ede
je 0x10002401
jmp 0x100013db
mov eax, dword [ebp - 0x198]
sub eax, 0xad091ec2
je 0x10001bb4
jmp 0x100013f1
mov eax, dword [ebp - 0x198]
sub eax, 0xaf920adc
je 0x10001cfc
jmp 0x10001407
mov eax, dword [ebp - 0x198]
sub eax, 0xaf94061a
je 0x100024a9
jmp 0x1000141d
mov eax, dword [ebp - 0x198]
sub eax, 0xb6bd2119
je 0x10001cb3
jmp 0x10001433
mov eax, dword [ebp - 0x198]
sub eax, 0xb93cbe9f
je 0x10002321
jmp 0x10001449
mov eax, dword [ebp - 0x198]
sub eax, 0xbf7f5703
je 0x10002494
jmp 0x1000145f
mov eax, dword [ebp - 0x198]
sub eax, 0xc54b693c
je 0x10001ca4
jmp 0x10001475
mov eax, dword [ebp - 0x198]
sub eax, 0xcb87ea8f
je 0x100023bf
jmp 0x1000148b
mov eax, dword [ebp - 0x198]
sub eax, 0xcd4d0064
je 0x1000255b
jmp 0x100014a1
mov eax, dword [ebp - 0x198]
sub eax, 0xd8107050
je 0x10001e21
jmp 0x100014b7
mov eax, dword [ebp - 0x198]
sub eax, 0xd8cc5ad4
je 0x10002422
jmp 0x100014cd
mov eax, dword [ebp - 0x198]
sub eax, 0xd974f3d6
je 0x100024b8
jmp 0x100014e3
mov eax, dword [ebp - 0x198]
sub eax, 0xdd6823b1
je 0x100023b0
jmp 0x100014f9
mov eax, dword [ebp - 0x198]
sub eax, 0xe3408eb4
je 0x10001a7d
jmp 0x1000150f
mov eax, dword [ebp - 0x198]
sub eax, 0xe4634cab
je 0x10001fd8
jmp 0x10001525
mov eax, dword [ebp - 0x198]
sub eax, 0xeecbb6e9
je 0x10001d84
jmp 0x1000153b
mov eax, dword [ebp - 0x198]
sub eax, 0xf0395e4a
je 0x100021d7
jmp 0x10001551
mov eax, dword [ebp - 0x198]
sub eax, 0xf6261770
je 0x10001eaf
jmp 0x10001567
mov eax, dword [ebp - 0x198]
sub eax, 0xf84171ab
je 0x1000183d
jmp 0x1000157d
mov eax, dword [ebp - 0x198]
sub eax, 0x508a18f
je 0x10001970
jmp 0x10001593
mov eax, dword [ebp - 0x198]
sub eax, 0xe768397
je 0x10001fe7
jmp 0x100015a9
mov eax, dword [ebp - 0x198]
sub eax, 0x13ace290
je 0x10001c22
jmp 0x100015bf
mov eax, dword [ebp - 0x198]
sub eax, 0x1999db16
je 0x10001deb
jmp 0x100015d5
mov eax, dword [ebp - 0x198]
sub eax, 0x1e0cabf3
je 0x10001e66
jmp 0x100015eb
mov eax, dword [ebp - 0x198]
sub eax, 0x23949746
je 0x10001932
jmp 0x10001601
mov eax, dword [ebp - 0x198]
sub eax, 0x26597be0
je 0x10001b93
jmp 0x10001617
mov eax, dword [ebp - 0x198]
sub eax, 0x32715192
je 0x10001afa
jmp 0x1000162d
mov eax, dword [ebp - 0x198]
sub eax, 0x3590dd39
je 0x100019de
jmp 0x10001643
mov eax, dword [ebp - 0x198]
sub eax, 0x3932ba0d
je 0x100024f4
jmp 0x10001659
mov eax, dword [ebp - 0x198]
sub eax, 0x3b02ab17
je 0x10001b84
jmp 0x1000166f
mov eax, dword [ebp - 0x198]
sub eax, 0x4797a72f
je 0x10002285
jmp 0x10001685
mov eax, dword [ebp - 0x198]
sub eax, 0x47a0ac70
je 0x10001eca
jmp 0x1000169b
mov eax, dword [ebp - 0x198]
sub eax, 0x4f66d0f0
je 0x100023ce
jmp 0x100016b1
mov eax, dword [ebp - 0x198]
sub eax, 0x502c3185
je 0x1000186d
jmp 0x100016c7
mov eax, dword [ebp - 0x198]
sub eax, 0x5a819d28
je 0x10002443
jmp 0x100016dd
mov eax, dword [ebp - 0x198]
sub eax, 0x5aaeeebe
je 0x100022b3
jmp 0x100016f3
mov eax, dword [ebp - 0x198]
sub eax, 0x5afd2b76
je 0x10002294
jmp 0x10001709
mov eax, dword [ebp - 0x198]
sub eax, 0x5ff148c6
je 0x10002431
jmp 0x1000171f
mov eax, dword [ebp - 0x198]
sub eax, 0x66e8ec60
je 0x10001e85
jmp 0x10001735
mov eax, dword [ebp - 0x198]
sub eax, 0x685cc4ba
je 0x10001f1b
jmp 0x1000174b
mov eax, dword [ebp - 0x198]
sub eax, 0x6a6ebdd7
je 0x100020a6
jmp 0x10001761
mov eax, dword [ebp - 0x198]
sub eax, 0x6e047c00
je 0x10001961
jmp 0x10001777
mov eax, dword [ebp - 0x198]
sub eax, 0x75472693
je 0x100024d9
jmp 0x1000178d
mov eax, dword [ebp - 0x198]
sub eax, 0x77ccc8e1
je 0x10001a8c
jmp 0x100017a3
jmp 0x100025b2
mov eax, dword [ebp - 0x194]
push eax
mov ecx, esp
mov dword [ebp - 0x168], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x164], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x160], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x16c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x120]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000bd10
add esp, 0xc
mov eax, dword [ebp - 0x16c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x190], 0xf84171ab
jmp 0x100025b2
mov edx, dword [ebp - 0x158]
mov eax, 0x87b82af8
mov ecx, 0x502c3185
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov dword [ebp - 0x190], 0x5ff148c6
jmp 0x100025b2
mov ecx, dword [ebp - 0x174]
mov edx, dword [ebp - 0x170]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x190], 0x810f2890
jmp 0x100025b2
lea eax, [ebp - 0x114]
mov ecx, dword [ebp - 0x174]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x190], 0x23949746
jmp 0x100025b2
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x17c], eax
mov edx, 0xffffffff
mov eax, 0x508a18f
mov ecx, 0x6e047c00
cmp dword [ebp - 0x17c], edx
cmove eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov dword [ebp - 0x190], 0x5ff148c6
jmp 0x100025b2
mov ecx, dword [0x10067340]
mov eax, dword [0x1006733c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5a819d28
mov ecx, 0x3590dd39
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x150], eax
mov eax, dword [0x10067340]
mov ecx, dword [0x1006733c]
mov edx, eax
add edx, 0xe79a4847
sub edx, 1
sub edx, 0xe79a4847
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5a819d28
mov ecx, 0xe3408eb4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov dword [ebp - 0x190], 0x77ccc8e1
jmp 0x100025b2
mov ecx, dword [0x10067340]
mov eax, dword [0x1006733c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbf7f5703
mov ecx, 0x32715192
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov eax, dword [ebp - 0x150]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x149], al
mov ecx, dword [0x10067340]
mov eax, dword [0x1006733c]
mov edx, ecx
sub edx, 0x3d301f4f
sub edx, 1
add edx, 0x3d301f4f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbf7f5703
mov ecx, 0x3b02ab17
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov dword [ebp - 0x190], 0x26597be0
jmp 0x100025b2
mov dl, byte [ebp - 0x149]
mov eax, 0xad091ec2
mov ecx, 0xabfb7196
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov ecx, dword [0x10067340]
mov eax, dword [0x1006733c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xaf94061a
mov ecx, 0x13ace290
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x148], eax
mov ecx, dword [0x10067340]
mov eax, dword [0x1006733c]
mov edx, ecx
sub edx, 0xa2d2064a
sub edx, 1
add edx, 0xa2d2064a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xaf94061a
mov ecx, 0xc54b693c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov dword [ebp - 0x190], 0xb6bd2119
jmp 0x100025b2
mov eax, dword [0x10067340]
mov ecx, dword [0x1006733c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd974f3d6
mov ecx, 0xaf920adc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov eax, dword [ebp - 0x148]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10067340]
mov eax, dword [0x1006733c]
mov edx, ecx
add edx, 0xc245563f
sub edx, 1
sub edx, 0xc245563f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd974f3d6
mov ecx, 0xeecbb6e9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov dword [ebp - 0x190], 0x88dc4bc0
jmp 0x100025b2
mov dword [ebp - 0x190], 0x5ff148c6
jmp 0x100025b2
mov eax, dword [ebp - 0x180]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x190], 0x1999db16
jmp 0x100025b2
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x188]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x190], 0xd8107050
jmp 0x100025b2
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x168]
mov word [eax], 0
mov dword [ebp - 0x190], 0x981029da
jmp 0x100025b2
mov eax, dword [ebp - 0x168]
mov ax, word [eax]
mov word [ebp - 0x13e], ax
mov dword [ebp - 0x190], 0x1e0cabf3
jmp 0x100025b2
mov ax, word [ebp - 0x13e]
movzx eax, ax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x190], 0x66e8ec60
jmp 0x100025b2
mov eax, dword [ebp - 0x18c]
movzx esi, word [eax + 6]
mov edx, dword [ebp - 0x13c]
mov eax, 0x4f66d0f0
mov ecx, 0xf6261770
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x190], 0x47a0ac70
jmp 0x100025b2
mov eax, dword [0x10067340]
mov ecx, dword [0x1006733c]
mov edx, eax
add edx, 0x9905fc5d
sub edx, 1
sub edx, 0x9905fc5d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x75472693
mov ecx, 0x685cc4ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov eax, dword [ebp - 0x138]
sub eax, 0xaadd21c8
add eax, 0x18
add eax, 0xaadd21c8
mov ecx, dword [ebp - 0x18c]
movzx ecx, word [ecx + 0x14]
add eax, 0xf3dab1f2
add eax, ecx
sub eax, 0xf3dab1f2
mov ecx, dword [ebp - 0x168]
movzx ecx, word [ecx]
imul ecx, ecx, 0x28
sub eax, 0xbc0c0413
add eax, ecx
add eax, 0xbc0c0413
mov dword [ebp - 0x134], eax
mov ecx, dword [0x10067340]
mov eax, dword [0x1006733c]
mov edx, ecx
add edx, 0x9e76938b
sub edx, 1
sub edx, 0x9e76938b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x75472693
mov ecx, 0xe4634cab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov dword [ebp - 0x190], 0xe768397
jmp 0x100025b2
mov eax, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x134]
mov dword [eax], ecx
mov eax, dword [ebp - 0x164]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100173b0
call fcn.1000e080
add esp, 8
mov edx, eax
mov eax, 0xaad6c277
mov ecx, 0x4797a72f
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov ecx, dword [0x10067340]
mov eax, dword [0x1006733c]
mov edx, ecx
sub edx, 0x1798ea36
sub edx, 1
add edx, 0x1798ea36
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3932ba0d
mov ecx, 0x6a6ebdd7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov eax, dword [ebp - 0x160]
mov dword [eax], 0
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0x3322c258
add edx, eax
add edx, 0x3322c258
mov eax, dword [ebp - 0x160]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x12d], al
mov ecx, dword [0x10067340]
mov eax, dword [0x1006733c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3932ba0d
mov ecx, 0x94df07c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov dword [ebp - 0x190], 0xa3de569d
jmp 0x100025b2
mov eax, dword [ebp - 0x15c]
mov cl, byte [ebp - 0x12d]
mov byte [eax], cl
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x164]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x190], 0xf0395e4a
jmp 0x100025b2
mov ecx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x12c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000be70
add esp, 0xc
mov eax, dword [ebp - 0x160]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x178]
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
xor esi, esi
sub esi, edi
add eax, esi
xor esi, esi
sub esi, eax
mov eax, dword [ebp - 0x160]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x15c]
mov byte [eax], cl
mov dword [ebp - 0x190], 0x4797a72f
jmp 0x100025b2
mov dword [ebp - 0x190], 0x5afd2b76
jmp 0x100025b2
mov eax, dword [ebp - 0x168]
mov ax, word [eax]
mov word [ebp - 0x122], ax
mov dword [ebp - 0x190], 0x5aaeeebe
jmp 0x100025b2
mov ecx, dword [0x10067340]
mov eax, dword [0x1006733c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcd4d0064
mov ecx, 0xb93cbe9f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov cx, word [ebp - 0x122]
xor eax, eax
sub ax, 1
sub cx, ax
mov eax, dword [ebp - 0x168]
mov word [eax], cx
mov ecx, dword [0x10067340]
mov eax, dword [0x1006733c]
mov edx, ecx
sub edx, 0xbbc0166
sub edx, 1
add edx, 0xbbc0166
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcd4d0064
mov ecx, 0xdd6823b1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x100025b2
mov dword [ebp - 0x190], 0xcb87ea8f
jmp 0x100025b2
mov dword [ebp - 0x190], 0x981029da
jmp 0x100025b2
mov eax, dword [ebp - 0x17c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x180]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x190], 0xac9e6ede
jmp 0x100025b2
mov eax, dword [ebp - 0x170]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x190], 0xd8cc5ad4
jmp 0x100025b2
mov dword [ebp - 0x190], 0x5ff148c6
jmp 0x100025b2
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000b110
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x190], 0x3590dd39
jmp 0x100025b2
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x190], 0x32715192
jmp 0x100025b2
mov dword [ebp - 0x190], 0x13ace290
jmp 0x100025b2
mov eax, dword [ebp - 0x148]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x190], 0xaf920adc
jmp 0x100025b2
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x190], 0x685cc4ba
jmp 0x100025b2
mov eax, dword [ebp - 0x160]
mov dword [eax], 0
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0xb4a1ae8b
add edx, eax
add edx, 0xb4a1ae8b
mov eax, dword [ebp - 0x160]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x190], 0x6a6ebdd7
jmp 0x100025b2
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov cx, word [ebp - 0x122]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x168]
mov word [eax], cx
mov dword [ebp - 0x190], 0xb93cbe9f
jmp 0x100012f9