Function at 0x100010b0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x194
mov eax, dword [ebp + 8]
mov dword [ebp - 0x198], eax
mov eax, dword [0x1006d600]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x194], 0xadecf08b
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x19c], eax
sub eax, 0x81bc9629
je 0x10001a8f
jmp 0x100010f4
mov eax, dword [ebp - 0x19c]
sub eax, 0x8268ec9a
je 0x10001894
jmp 0x1000110a
mov eax, dword [ebp - 0x19c]
sub eax, 0x8553fcad
je 0x10001b71
jmp 0x10001120
mov eax, dword [ebp - 0x19c]
sub eax, 0x86a86c9c
je 0x100017c1
jmp 0x10001136
mov eax, dword [ebp - 0x19c]
sub eax, 0x8864d063
je 0x10002042
jmp 0x1000114c
mov eax, dword [ebp - 0x19c]
sub eax, 0x88e06022
je 0x10001c20
jmp 0x10001162
mov eax, dword [ebp - 0x19c]
sub eax, 0x896edd92
je 0x10001dac
jmp 0x10001178
mov eax, dword [ebp - 0x19c]
sub eax, 0x8f1478bd
je 0x100020e6
jmp 0x1000118e
mov eax, dword [ebp - 0x19c]
sub eax, 0x96a31dca
je 0x1000223b
jmp 0x100011a4
mov eax, dword [ebp - 0x19c]
sub eax, 0x9acbcb72
je 0x10002334
jmp 0x100011ba
mov eax, dword [ebp - 0x19c]
sub eax, 0xa2530e47
je 0x10001c5c
jmp 0x100011d0
mov eax, dword [ebp - 0x19c]
sub eax, 0xa483d1ab
je 0x1000225c
jmp 0x100011e6
mov eax, dword [ebp - 0x19c]
sub eax, 0xa5b58237
je 0x10001cd7
jmp 0x100011fc
mov eax, dword [ebp - 0x19c]
sub eax, 0xa6bce293
je 0x100021ce
jmp 0x10001212
mov eax, dword [ebp - 0x19c]
sub eax, 0xabbaccdb
je 0x10001779
jmp 0x10001228
mov eax, dword [ebp - 0x19c]
sub eax, 0xadecf08b
je 0x100015c9
jmp 0x1000123e
mov eax, dword [ebp - 0x19c]
sub eax, 0xafecd212
je 0x10001ba1
jmp 0x10001254
mov eax, dword [ebp - 0x19c]
sub eax, 0xaff79894
je 0x10001b05
jmp 0x1000126a
mov eax, dword [ebp - 0x19c]
sub eax, 0xb58bd70e
je 0x10001cad
jmp 0x10001280
mov eax, dword [ebp - 0x19c]
sub eax, 0xb674bb46
je 0x10001934
jmp 0x10001296
mov eax, dword [ebp - 0x19c]
sub eax, 0xbd7589f4
je 0x1000165b
jmp 0x100012ac
mov eax, dword [ebp - 0x19c]
sub eax, 0xc207a661
je 0x10001a53
jmp 0x100012c2
mov eax, dword [ebp - 0x19c]
sub eax, 0xc92f61a4
je 0x100021ed
jmp 0x100012d8
mov eax, dword [ebp - 0x19c]
sub eax, 0xcc197f7a
je 0x100018a3
jmp 0x100012ee
mov eax, dword [ebp - 0x19c]
sub eax, 0xd3d6b4dd
je 0x1000221a
jmp 0x10001304
mov eax, dword [ebp - 0x19c]
sub eax, 0xe1c894b7
je 0x10001686
jmp 0x1000131a
mov eax, dword [ebp - 0x19c]
sub eax, 0xe895a429
je 0x10001e60
jmp 0x10001330
mov eax, dword [ebp - 0x19c]
sub eax, 0xebcbb627
je 0x100021bf
jmp 0x10001346
mov eax, dword [ebp - 0x19c]
sub eax, 0xed3dfafa
je 0x100016f4
jmp 0x1000135c
mov eax, dword [ebp - 0x19c]
sub eax, 0xf39f8bb7
je 0x10002343
jmp 0x10001372
mov eax, dword [ebp - 0x19c]
sub eax, 0xfc4bfe96
je 0x10001fd4
jmp 0x10001388
mov eax, dword [ebp - 0x19c]
sub eax, 0x1cdeb6f
je 0x10001c7b
jmp 0x1000139e
mov eax, dword [ebp - 0x19c]
sub eax, 0x9a16172
je 0x10001d28
jmp 0x100013b4
mov eax, dword [ebp - 0x19c]
sub eax, 0xc492cd7
je 0x100020c7
jmp 0x100013ca
mov eax, dword [ebp - 0x19c]
sub eax, 0x1277f10a
je 0x100020b8
jmp 0x100013e0
mov eax, dword [ebp - 0x19c]
sub eax, 0x1671d668
je 0x10002370
jmp 0x100013f6
mov eax, dword [ebp - 0x19c]
sub eax, 0x1b89f361
je 0x10002361
jmp 0x1000140c
mov eax, dword [ebp - 0x19c]
sub eax, 0x1e8256b7
je 0x10001b92
jmp 0x10001422
mov eax, dword [ebp - 0x19c]
sub eax, 0x2632ecf0
je 0x10001a6e
jmp 0x10001438
mov eax, dword [ebp - 0x19c]
sub eax, 0x2653bd51
je 0x10002385
jmp 0x1000144e
mov eax, dword [ebp - 0x19c]
sub eax, 0x26b75c71
je 0x10001837
jmp 0x10001464
mov eax, dword [ebp - 0x19c]
sub eax, 0x367dcffe
je 0x10002352
jmp 0x1000147a
mov eax, dword [ebp - 0x19c]
sub eax, 0x3dd47161
je 0x10001dbb
jmp 0x10001490
mov eax, dword [ebp - 0x19c]
sub eax, 0x444e3f78
je 0x100022ad
jmp 0x100014a6
mov eax, dword [ebp - 0x19c]
sub eax, 0x45ae1a2d
je 0x10001eb5
jmp 0x100014bc
mov eax, dword [ebp - 0x19c]
sub eax, 0x484f91f9
je 0x100023b1
jmp 0x100014d2
mov eax, dword [ebp - 0x19c]
sub eax, 0x4b6bc554
je 0x10001985
jmp 0x100014e8
mov eax, dword [ebp - 0x19c]
sub eax, 0x4ebd3781
je 0x10001bea
jmp 0x100014fe
mov eax, dword [ebp - 0x19c]
sub eax, 0x50592e5f
je 0x1000176a
jmp 0x10001514
mov eax, dword [ebp - 0x19c]
sub eax, 0x560bfd8a
je 0x10001a02
jmp 0x1000152a
mov eax, dword [ebp - 0x19c]
sub eax, 0x5f8d332b
je 0x10001b62
jmp 0x10001540
mov eax, dword [ebp - 0x19c]
sub eax, 0x5f9019be
je 0x10001e3f
jmp 0x10001556
mov eax, dword [ebp - 0x19c]
sub eax, 0x619232a3
je 0x100019f3
jmp 0x1000156c
mov eax, dword [ebp - 0x19c]
sub eax, 0x665c978b
je 0x10002323
jmp 0x10001582
mov eax, dword [ebp - 0x19c]
sub eax, 0x66bfff9a
je 0x10002394
jmp 0x10001598
mov eax, dword [ebp - 0x19c]
sub eax, 0x7b3ace0b
je 0x10001e8c
jmp 0x100015ae
mov eax, dword [ebp - 0x19c]
sub eax, 0x7c30fd84
je 0x1000212f
jmp 0x100015c4
jmp 0x100023bb
mov eax, dword [ebp - 0x198]
push eax
mov ecx, esp
mov dword [ebp - 0x170], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x16c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x168], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x164], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x160], ecx
mov dword [ebp - 0x174], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000fb70
add esp, 0xc
mov eax, dword [ebp - 0x174]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x194], 0xbd7589f4
jmp 0x100023bb
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x17c], eax
mov eax, 0xe1c894b7
mov ecx, 0xabbaccdb
cmp dword [ebp - 0x17c], 0
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov ecx, dword [0x1006e940]
mov eax, dword [0x1006e93c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9acbcb72
mov ecx, 0xed3dfafa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov ecx, dword [0x1006e940]
mov eax, dword [0x1006e93c]
mov edx, ecx
sub edx, 0xd5834419
sub edx, 1
add edx, 0xd5834419
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9acbcb72
mov ecx, 0x50592e5f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov dword [ebp - 0x194], 0xa483d1ab
jmp 0x100023bb
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 0x11c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x194], 0x86a86c9c
jmp 0x100023bb
mov ecx, dword [0x1006e940]
mov eax, dword [0x1006e93c]
mov edx, ecx
sub edx, 0xc728fe2
sub edx, 1
add edx, 0xc728fe2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf39f8bb7
mov ecx, 0x26b75c71
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
lea eax, [ebp - 0x110]
mov dword [ebp - 0x158], eax
mov eax, dword [0x1006e940]
mov ecx, dword [0x1006e93c]
mov edx, eax
sub edx, 0xff60f64
sub edx, 1
add edx, 0xff60f64
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf39f8bb7
mov ecx, 0x8268ec9a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov dword [ebp - 0x194], 0xcc197f7a
jmp 0x100023bb
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x158]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x110]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x184], eax
mov edx, 0xffffffff
mov eax, 0x560bfd8a
mov ecx, 0xb674bb46
cmp dword [ebp - 0x184], edx
cmove eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov eax, dword [0x1006e940]
mov ecx, dword [0x1006e93c]
mov edx, eax
add edx, 0x2278a33b
sub edx, 1
sub edx, 0x2278a33b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x367dcffe
mov ecx, 0x4b6bc554
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov ecx, dword [0x1006e940]
mov eax, dword [0x1006e93c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x367dcffe
mov ecx, 0x619232a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov dword [ebp - 0x194], 0xa483d1ab
jmp 0x100023bb
mov eax, dword [ebp - 0x184]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x194], 0xc207a661
jmp 0x100023bb
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x194], 0x2632ecf0
jmp 0x100023bb
mov edx, dword [ebp - 0x154]
mov eax, 0x81bc9629
mov ecx, 0xafecd212
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov ecx, dword [0x1006e940]
mov eax, dword [0x1006e93c]
mov edx, ecx
sub edx, 0xc2dced1b
sub edx, 1
add edx, 0xc2dced1b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1b89f361
mov ecx, 0xaff79894
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x150], eax
mov eax, dword [0x1006e940]
mov ecx, dword [0x1006e93c]
mov edx, eax
add edx, 0x18b19bad
sub edx, 1
sub edx, 0x18b19bad
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1b89f361
mov ecx, 0x5f8d332b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov dword [ebp - 0x194], 0x8553fcad
jmp 0x100023bb
mov eax, dword [ebp - 0x150]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x194], 0x1e8256b7
jmp 0x100023bb
mov dword [ebp - 0x194], 0xa483d1ab
jmp 0x100023bb
mov eax, dword [ebp - 0x188]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x194], 0x4ebd3781
jmp 0x100023bb
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x194], 0x88e06022
jmp 0x100023bb
mov ecx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x148]
sub ecx, 0xfe4a4519
add ecx, eax
add ecx, 0xfe4a4519
mov eax, dword [ebp - 0x170]
mov dword [eax], ecx
mov eax, dword [ebp - 0x16c]
mov word [eax], 0
mov dword [ebp - 0x194], 0xa2530e47
jmp 0x100023bb
mov eax, dword [ebp - 0x16c]
mov ax, word [eax]
mov word [ebp - 0x142], ax
mov dword [ebp - 0x194], 0x1cdeb6f
jmp 0x100023bb
mov ax, word [ebp - 0x142]
movzx eax, ax
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov ax, word [eax + 6]
mov word [ebp - 0x13a], ax
mov dword [ebp - 0x194], 0xb58bd70e
jmp 0x100023bb
mov ax, word [ebp - 0x13a]
movzx esi, ax
mov edx, dword [ebp - 0x140]
mov eax, 0xc92f61a4
mov ecx, 0xa5b58237
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov eax, dword [0x1006e940]
mov ecx, dword [0x1006e93c]
mov edx, eax
add edx, 0x85d8216
sub edx, 1
sub edx, 0x85d8216
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1671d668
mov ecx, 0x9a16172
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
mov ecx, dword [0x1006e940]
mov eax, dword [0x1006e93c]
mov edx, ecx
sub edx, 0x8b3cab9b
sub edx, 1
add edx, 0x8b3cab9b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1671d668
mov ecx, 0x896edd92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov dword [ebp - 0x194], 0x3dd47161
jmp 0x100023bb
mov ecx, dword [ebp - 0x138]
sub ecx, 0x6a270a9d
add ecx, 0x18
add ecx, 0x6a270a9d
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
movzx edx, word [eax + 0x14]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x16c]
movzx eax, word [eax]
imul eax, eax, 0x28
sub ecx, 0x4a1ca799
add ecx, eax
add ecx, 0x4a1ca799
mov eax, dword [ebp - 0x168]
mov dword [eax], ecx
mov eax, dword [ebp - 0x168]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001c3b0
call fcn.10011ee0
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x131], al
mov dword [ebp - 0x194], 0x5f9019be
jmp 0x100023bb
mov dl, byte [ebp - 0x131]
mov eax, 0xe895a429
mov ecx, 0xfc4bfe96
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov eax, dword [ebp - 0x164]
mov dword [eax], 0
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x194], 0x7b3ace0b
jmp 0x100023bb
mov eax, dword [ebp - 0x130]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x194], 0x45ae1a2d
jmp 0x100023bb
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
mov ecx, dword [ebp - 0x128]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x12c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x160]
mov byte [eax], cl
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0x66f0ea3e
add edx, eax
add edx, 0x66f0ea3e
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub ecx, eax
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000fcd0
add esp, 0xc
mov eax, dword [ebp - 0x164]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x180]
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub esi, 0x164349e
add esi, eax
add esi, 0x164349e
mov eax, dword [ebp - 0x164]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x160]
mov byte [eax], cl
mov dword [ebp - 0x194], 0xfc4bfe96
jmp 0x100023bb
mov ecx, dword [0x1006e940]
mov eax, dword [0x1006e93c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2653bd51
mov ecx, 0x8864d063
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov ecx, dword [0x1006e940]
mov eax, dword [0x1006e93c]
mov edx, ecx
add edx, 0x6ed9d6f3
sub edx, 1
sub edx, 0x6ed9d6f3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2653bd51
mov ecx, 0x1277f10a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov dword [ebp - 0x194], 0xc492cd7
jmp 0x100023bb
mov eax, dword [ebp - 0x16c]
mov ax, word [eax]
mov word [ebp - 0x124], ax
mov dword [ebp - 0x194], 0x8f1478bd
jmp 0x100023bb
mov eax, dword [0x1006e940]
mov ecx, dword [0x1006e93c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x66bfff9a
mov ecx, 0x7c30fd84
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov ax, word [ebp - 0x124]
add ax, 0xbbbd
add ax, 1
sub ax, 0xbbbd
mov word [ebp - 0x122], ax
mov ecx, dword [0x1006e940]
mov eax, dword [0x1006e93c]
mov edx, ecx
sub edx, 0xcf80c7c4
sub edx, 1
add edx, 0xcf80c7c4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x66bfff9a
mov ecx, 0xebcbb627
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov dword [ebp - 0x194], 0xa6bce293
jmp 0x100023bb
mov eax, dword [ebp - 0x16c]
mov cx, word [ebp - 0x122]
mov word [eax], cx
mov dword [ebp - 0x194], 0xa2530e47
jmp 0x100023bb
mov eax, dword [ebp - 0x184]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x194], 0xd3d6b4dd
jmp 0x100023bb
mov eax, dword [ebp - 0x120]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x194], 0x96a31dca
jmp 0x100023bb
mov eax, dword [ebp - 0x178]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x194], 0xa483d1ab
jmp 0x100023bb
mov eax, dword [0x1006e940]
mov ecx, dword [0x1006e93c]
mov edx, eax
add edx, 0xf0c6971c
sub edx, 1
sub edx, 0xf0c6971c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x484f91f9
mov ecx, 0x444e3f78
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov ecx, dword [0x1006e940]
mov eax, dword [0x1006e93c]
mov edx, ecx
sub edx, 0xf01c2835
sub edx, 1
add edx, 0xf01c2835
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x484f91f9
mov ecx, 0x665c978b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023bb
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1000ef70
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x194], 0xed3dfafa
jmp 0x100023bb
mov dword [ebp - 0x194], 0x26b75c71
jmp 0x100023bb
mov dword [ebp - 0x194], 0x4b6bc554
jmp 0x100023bb
mov dword [ebp - 0x194], 0xaff79894
jmp 0x100023bb
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x194], 0x9a16172
jmp 0x100023bb
mov dword [ebp - 0x194], 0x8864d063
jmp 0x100023bb
mov ax, word [ebp - 0x124]
mov ax, word [ebp - 0x124]
mov dword [ebp - 0x194], 0x7c30fd84
jmp 0x100023bb
mov dword [ebp - 0x194], 0x444e3f78
jmp 0x100010d8