Function at 0x10007a00
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x8c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x94], eax
mov eax, dword [0x10092080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1009357c]
mov eax, dword [0x10093578]
mov edx, ecx
add edx, 0x67d92d45
sub edx, 1
sub edx, 0x67d92d45
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x8a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x89], al
mov dword [ebp - 0x90], 0x99d6212e
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x98], eax
sub eax, 0x838031a6
je 0x1000862f
jmp 0x10007a84
mov eax, dword [ebp - 0x98]
sub eax, 0x86fb783f
je 0x10009015
jmp 0x10007a9a
mov eax, dword [ebp - 0x98]
sub eax, 0x88df1f0e
je 0x10008568
jmp 0x10007ab0
mov eax, dword [ebp - 0x98]
sub eax, 0x8a0546d6
je 0x100088a8
jmp 0x10007ac6
mov eax, dword [ebp - 0x98]
sub eax, 0x8e435e04
je 0x10008aac
jmp 0x10007adc
mov eax, dword [ebp - 0x98]
sub eax, 0x8e928481
je 0x1000863e
jmp 0x10007af2
mov eax, dword [ebp - 0x98]
sub eax, 0x97d34084
je 0x1000868f
jmp 0x10007b08
mov eax, dword [ebp - 0x98]
sub eax, 0x99d6212e
je 0x100080b9
jmp 0x10007b1e
mov eax, dword [ebp - 0x98]
sub eax, 0x99e3ccd3
je 0x10008314
jmp 0x10007b34
mov eax, dword [ebp - 0x98]
sub eax, 0xa0332909
je 0x10008938
jmp 0x10007b4a
mov eax, dword [ebp - 0x98]
sub eax, 0xa0455d6a
je 0x10008ee2
jmp 0x10007b60
mov eax, dword [ebp - 0x98]
sub eax, 0xa706c682
je 0x1000877d
jmp 0x10007b76
mov eax, dword [ebp - 0x98]
sub eax, 0xa924da10
je 0x10008f9b
jmp 0x10007b8c
mov eax, dword [ebp - 0x98]
sub eax, 0xab1882c5
je 0x10008483
jmp 0x10007ba2
mov eax, dword [ebp - 0x98]
sub eax, 0xaf8aa4b8
je 0x1000854a
jmp 0x10007bb8
mov eax, dword [ebp - 0x98]
sub eax, 0xb157ac59
je 0x100090c2
jmp 0x10007bce
mov eax, dword [ebp - 0x98]
sub eax, 0xb1b74332
je 0x100091c5
jmp 0x10007be4
mov eax, dword [ebp - 0x98]
sub eax, 0xb295a710
je 0x100085b9
jmp 0x10007bfa
mov eax, dword [ebp - 0x98]
sub eax, 0xb5603e2f
je 0x10008b1a
jmp 0x10007c10
mov eax, dword [ebp - 0x98]
sub eax, 0xb61d0bc4
je 0x100081a7
jmp 0x10007c26
mov eax, dword [ebp - 0x98]
sub eax, 0xbd547805
je 0x10008722
jmp 0x10007c3c
mov eax, dword [ebp - 0x98]
sub eax, 0xbdcc07d1
je 0x10009126
jmp 0x10007c52
mov eax, dword [ebp - 0x98]
sub eax, 0xbdda7a85
je 0x10008a0c
jmp 0x10007c68
mov eax, dword [ebp - 0x98]
sub eax, 0xc56d7302
je 0x10009135
jmp 0x10007c7e
mov eax, dword [ebp - 0x98]
sub eax, 0xc7477795
je 0x1000841a
jmp 0x10007c94
mov eax, dword [ebp - 0x98]
sub eax, 0xc93f19dc
je 0x10009033
jmp 0x10007caa
mov eax, dword [ebp - 0x98]
sub eax, 0xcc3e3c3d
je 0x10008cdf
jmp 0x10007cc0
mov eax, dword [ebp - 0x98]
sub eax, 0xce8072dd
je 0x10008731
jmp 0x10007cd6
mov eax, dword [ebp - 0x98]
sub eax, 0xcf784abc
je 0x10008a8e
jmp 0x10007cec
mov eax, dword [ebp - 0x98]
sub eax, 0xd42d46d4
je 0x10008c37
jmp 0x10007d02
mov eax, dword [ebp - 0x98]
sub eax, 0xda54cf99
je 0x10008f52
jmp 0x10007d18
mov eax, dword [ebp - 0x98]
sub eax, 0xdaa804ff
je 0x10008e87
jmp 0x10007d2e
mov eax, dword [ebp - 0x98]
sub eax, 0xded3b68a
je 0x100081d1
jmp 0x10007d44
mov eax, dword [ebp - 0x98]
sub eax, 0xdefdb19d
je 0x10009045
jmp 0x10007d5a
mov eax, dword [ebp - 0x98]
sub eax, 0xe25296cd
je 0x10008ba7
jmp 0x10007d70
mov eax, dword [ebp - 0x98]
sub eax, 0xe6bd4c0e
je 0x10008826
jmp 0x10007d86
mov eax, dword [ebp - 0x98]
sub eax, 0xeb276d3e
je 0x100087ce
jmp 0x10007d9c
mov eax, dword [ebp - 0x98]
sub eax, 0xeb2972a6
je 0x10008b98
jmp 0x10007db2
mov eax, dword [ebp - 0x98]
sub eax, 0xf458f01b
je 0x10009144
jmp 0x10007dc8
mov eax, dword [ebp - 0x98]
sub eax, 0xf5b40f9a
je 0x10008c4f
jmp 0x10007dde
mov eax, dword [ebp - 0x98]
sub eax, 0xf8945770
je 0x100092f5
jmp 0x10007df4
mov eax, dword [ebp - 0x98]
sub eax, 0xf93c0a6e
je 0x100081b6
jmp 0x10007e0a
mov eax, dword [ebp - 0x98]
sub eax, 0xfbcf29fd
je 0x10009006
jmp 0x10007e20
mov eax, dword [ebp - 0x98]
sub eax, 0x4e5ce97
je 0x100080e8
jmp 0x10007e36
mov eax, dword [ebp - 0x98]
sub eax, 0x568fd9f
je 0x100084f9
jmp 0x10007e4c
mov eax, dword [ebp - 0x98]
sub eax, 0x9b91dff
je 0x100088e7
jmp 0x10007e62
mov eax, dword [ebp - 0x98]
sub eax, 0xc502cc4
je 0x100091b3
jmp 0x10007e78
mov eax, dword [ebp - 0x98]
sub eax, 0xd86c25d
je 0x10008222
jmp 0x10007e8e
mov eax, dword [ebp - 0x98]
sub eax, 0x14aaa979
je 0x100089bb
jmp 0x10007ea4
mov eax, dword [ebp - 0x98]
sub eax, 0x1a6513eb
je 0x10008ef1
jmp 0x10007eba
mov eax, dword [ebp - 0x98]
sub eax, 0x1eae3fec
je 0x10008844
jmp 0x10007ed0
mov eax, dword [ebp - 0x98]
sub eax, 0x2736555c
je 0x10008889
jmp 0x10007ee6
mov eax, dword [ebp - 0x98]
sub eax, 0x2f6108e3
je 0x10009054
jmp 0x10007efc
mov eax, dword [ebp - 0x98]
sub eax, 0x310d88d0
je 0x10008c69
jmp 0x10007f12
mov eax, dword [ebp - 0x98]
sub eax, 0x363b2fbe
je 0x10008e36
jmp 0x10007f28
mov eax, dword [ebp - 0x98]
sub eax, 0x3fdd49c9
je 0x1000898b
jmp 0x10007f3e
mov eax, dword [ebp - 0x98]
sub eax, 0x475dcdf4
je 0x10008e27
jmp 0x10007f54
mov eax, dword [ebp - 0x98]
sub eax, 0x47b20965
je 0x100091da
jmp 0x10007f6a
mov eax, dword [ebp - 0x98]
sub eax, 0x4a77b7a6
je 0x10008365
jmp 0x10007f80
mov eax, dword [ebp - 0x98]
sub eax, 0x4bad8702
je 0x10008f2a
jmp 0x10007f96
mov eax, dword [ebp - 0x98]
sub eax, 0x5a63a909
je 0x10008766
jmp 0x10007fac
mov eax, dword [ebp - 0x98]
sub eax, 0x5b7debe5
je 0x100082e7
jmp 0x10007fc2
mov eax, dword [ebp - 0x98]
sub eax, 0x606103bc
je 0x10009195
jmp 0x10007fd8
mov eax, dword [ebp - 0x98]
sub eax, 0x612cfee6
je 0x10008f11
jmp 0x10007fee
mov eax, dword [ebp - 0x98]
sub eax, 0x682196da
je 0x10008748
mov al, byte [ebp - 0x8a]
mov cl, byte [ebp - 0x89]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdefdb19d
mov ecx, 0x4e5ce97
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
mov ecx, dword [0x1009357c]
mov eax, dword [0x10093578]
mov edx, ecx
sub edx, 0xeb28a90b
sub edx, 1
add edx, 0xeb28a90b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdefdb19d
mov ecx, 0xb61d0bc4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov dword [ebp - 0x90], 0xf93c0a6e
jmp 0x10009314
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
push eax
mov eax, esp
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x90], 0xded3b68a
jmp 0x10009314
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
add edx, 0x2a369b21
sub edx, 1
sub edx, 0x2a369b21
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2f6108e3
mov ecx, 0xd86c25d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov ecx, dword [ebp - 0x94]
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.100241a0
add esp, 0xc
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x4a], al
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2f6108e3
mov ecx, 0x5b7debe5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov dl, byte [ebp - 0x4a]
mov eax, 0x6f2ae018
mov ecx, 0x99e3ccd3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
sub edx, 0xeabec909
sub edx, 1
add edx, 0xeabec909
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb157ac59
mov ecx, 0x4a77b7a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x84]
mov edx, dword [eax]
mov eax, dword [ebp - 0x80]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
sub edx, 0x879f8c55
sub edx, 1
add edx, 0x879f8c55
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb157ac59
mov ecx, 0x79523451
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [ebp - 0x74]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x49], al
mov dword [ebp - 0x90], 0xab1882c5
jmp 0x10009314
mov ecx, dword [0x1009357c]
mov eax, dword [0x10093578]
mov edx, ecx
sub edx, 0x5617a99d
sub edx, 1
add edx, 0x5617a99d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbdcc07d1
mov ecx, 0x568fd9f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
add edx, 0x7d755c10
sub edx, 1
sub edx, 0x7d755c10
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbdcc07d1
mov ecx, 0xaf8aa4b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov dl, byte [ebp - 0x49]
mov eax, 0x8e928481
mov ecx, 0x88df1f0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
add edx, 0xc7de73ac
sub edx, 1
sub edx, 0xc7de73ac
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc56d7302
mov ecx, 0xb295a710
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov ecx, dword [0x1009357c]
mov eax, dword [0x10093578]
mov edx, ecx
sub edx, 0x5a07b702
sub edx, 1
add edx, 0x5a07b702
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc56d7302
mov ecx, 0x838031a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov dword [ebp - 0x90], 0xc93f19dc
jmp 0x10009314
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
sub edx, 0x52e110a2
sub edx, 1
add edx, 0x52e110a2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf458f01b
mov ecx, 0x97d34084
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
sub edx, 0xa11ac35d
sub edx, 1
add edx, 0xa11ac35d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf458f01b
mov ecx, 0xbd547805
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov dword [ebp - 0x90], 0xce8072dd
jmp 0x10009314
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x90], 0x682196da
jmp 0x10009314
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x90], 0xa706c682
jmp 0x10009314
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
sub edx, 0xdd850018
sub edx, 1
add edx, 0xdd850018
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x606103bc
mov ecx, 0xeb276d3e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [ebp - 0x44]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x606103bc
mov ecx, 0xe6bd4c0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov dword [ebp - 0x90], 0x7c7eeaf0
jmp 0x10009314
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x90], 0x2736555c
jmp 0x10009314
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x40]
mov dword [eax], ecx
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x90], 0x8a0546d6
jmp 0x10009314
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
sub ecx, 0x11110348
add ecx, eax
add ecx, 0x11110348
mov eax, dword [ebp - 0x60]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5c]
mov word [eax], 0
mov dword [ebp - 0x90], 0x9b91dff
jmp 0x10009314
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
add edx, 0x67a09085
sub edx, 1
sub edx, 0x67a09085
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc502cc4
mov ecx, 0xa0332909
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [ebp - 0x5c]
mov ax, word [eax]
mov word [ebp - 0x36], ax
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc502cc4
mov ecx, 0x3fdd49c9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov dword [ebp - 0x90], 0x6fb8957a
jmp 0x10009314
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
add edx, 0x176fe437
sub edx, 1
sub edx, 0x176fe437
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1b74332
mov ecx, 0xbdda7a85
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [ebp - 0x30]
movzx ecx, word [eax + 6]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x29], al
mov ecx, dword [0x1009357c]
mov eax, dword [0x10093578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb1b74332
mov ecx, 0xcf784abc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov dl, byte [ebp - 0x29]
mov eax, 0x4bad8702
mov ecx, 0x8e435e04
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov ecx, dword [0x1009357c]
mov eax, dword [0x10093578]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x47b20965
mov ecx, 0xb5603e2f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov ecx, dword [0x1009357c]
mov eax, dword [0x10093578]
mov edx, ecx
add edx, 0x82c3d2b2
sub edx, 1
sub edx, 0x82c3d2b2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x47b20965
mov ecx, 0xeb2972a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov dword [ebp - 0x90], 0xe25296cd
jmp 0x10009314
mov ecx, dword [ebp - 0x28]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 0x18
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
movzx edx, word [eax + 0x14]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x5c]
movzx eax, word [eax]
imul eax, eax, 0x28
add ecx, 0xede92b7a
add ecx, eax
sub ecx, 0xede92b7a
mov eax, dword [ebp - 0x58]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100317e2
call fcn.10027b00
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x21], al
mov dword [ebp - 0x90], 0x6f694ab6
jmp 0x10009314
mov eax, dword [ebp - 0x54]
mov dword [eax], 0
mov dword [ebp - 0x90], 0xf5b40f9a
jmp 0x10009314
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x90], 0x310d88d0
jmp 0x10009314
mov ecx, dword [0x1009357c]
mov eax, dword [0x10093578]
mov edx, ecx
sub edx, 0xb7902a5c
sub edx, 1
add edx, 0xb7902a5c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6f1eb9d7
mov ecx, 0xcc3e3c3d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [ebp - 0x78]
mov edx, dword [eax]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
sub edx, eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x20]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x50]
mov byte [eax], cl
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub ecx, 0x668277a
add ecx, eax
add ecx, 0x668277a
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10024300
add esp, 0xc
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x78]
mov esi, dword [eax]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
xor esi, esi
sub esi, edi
add eax, esi
xor esi, esi
sub esi, eax
mov eax, dword [ebp - 0x54]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x50]
mov byte [eax], cl
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
sub edx, 0x6da79f74
sub edx, 1
add edx, 0x6da79f74
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6f1eb9d7
mov ecx, 0x6918f02f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov dword [ebp - 0x90], 0x363b2fbe
jmp 0x10009314
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
add edx, 0xf6003ef9
sub edx, 1
sub edx, 0xf6003ef9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7372bc78
mov ecx, 0xdaa804ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [ebp - 0x5c]
mov ax, word [eax]
mov word [ebp - 0x1c], ax
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
sub edx, 0x46091a28
sub edx, 1
add edx, 0x46091a28
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7372bc78
mov ecx, 0xa0455d6a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov dword [ebp - 0x90], 0x1a6513eb
jmp 0x10009314
mov ax, word [ebp - 0x1c]
xor ecx, ecx
sub cx, 1
sub ax, cx
mov word [ebp - 0x1a], ax
mov dword [ebp - 0x90], 0x612cfee6
jmp 0x10009314
mov eax, dword [ebp - 0x5c]
mov cx, word [ebp - 0x1a]
mov word [eax], cx
mov dword [ebp - 0x90], 0x9b91dff
jmp 0x10009314
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x90], 0xda54cf99
jmp 0x10009314
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf8945770
mov ecx, 0xa924da10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov eax, dword [0x1009357c]
mov ecx, dword [0x10093578]
mov edx, eax
add edx, 0xcd29e011
sub edx, 1
sub edx, 0xcd29e011
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf8945770
mov ecx, 0xfbcf29fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x10009314
mov dword [ebp - 0x90], 0x86fb783f
jmp 0x10009314
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x90], 0xc93f19dc
jmp 0x10009314
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10023400
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x90], 0x4e5ce97
jmp 0x10009314
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.100241a0
add esp, 0xc
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x90], 0xd86c25d
jmp 0x10009314
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x84]
mov edx, dword [eax]
mov eax, dword [ebp - 0x80]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x90], 0x4a77b7a6
jmp 0x10009314
mov dword [ebp - 0x90], 0x568fd9f
jmp 0x10009314
mov dword [ebp - 0x90], 0xb295a710
jmp 0x10009314
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], ecx
mov dword [ebp - 0x90], 0x97d34084
jmp 0x10009314
mov eax, dword [ebp - 0x44]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x90], 0xeb276d3e
jmp 0x10009314
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x90], 0xa0332909
jmp 0x10009314
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x90], 0xbdda7a85
jmp 0x10009314
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x90], 0xb5603e2f
jmp 0x10009314
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x90], 0xa924da10
jmp 0x10007a68