Function at 0x10001880
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xa0
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x1006fc04]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
sub edx, 0x1785cc4c
sub edx, 1
add edx, 0x1785cc4c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x9a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x99], al
mov dword [ebp - 0xa0], 0xca6038ed
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
sub eax, 0x80be34df
je 0x1000669a
jmp 0x10001903
mov eax, dword [ebp - 0xa8]
sub eax, 0x83a37dba
je 0x100040f8
jmp 0x10001919
mov eax, dword [ebp - 0xa8]
sub eax, 0x83f8ce7e
je 0x10003b4e
jmp 0x1000192f
mov eax, dword [ebp - 0xa8]
sub eax, 0x84efc879
je 0x10003a46
jmp 0x10001945
mov eax, dword [ebp - 0xa8]
sub eax, 0x852474aa
je 0x10006018
jmp 0x1000195b
mov eax, dword [ebp - 0xa8]
sub eax, 0x852d632e
je 0x10005fa2
jmp 0x10001971
mov eax, dword [ebp - 0xa8]
sub eax, 0x85485a02
je 0x10005aba
jmp 0x10001987
mov eax, dword [ebp - 0xa8]
sub eax, 0x8622629e
je 0x10002baa
jmp 0x1000199d
mov eax, dword [ebp - 0xa8]
sub eax, 0x8698b73a
je 0x100062f2
jmp 0x100019b3
mov eax, dword [ebp - 0xa8]
sub eax, 0x8b1199c7
je 0x10005d57
jmp 0x100019c9
mov eax, dword [ebp - 0xa8]
sub eax, 0x8b6d21f8
je 0x100046d8
jmp 0x100019df
mov eax, dword [ebp - 0xa8]
sub eax, 0x8cb27a34
je 0x10004448
jmp 0x100019f5
mov eax, dword [ebp - 0xa8]
sub eax, 0x8e4019e2
je 0x10005f42
jmp 0x10001a0b
mov eax, dword [ebp - 0xa8]
sub eax, 0x8f00f92b
je 0x10004820
jmp 0x10001a21
mov eax, dword [ebp - 0xa8]
sub eax, 0x8f63156c
je 0x10003afd
jmp 0x10001a37
mov eax, dword [ebp - 0xa8]
sub eax, 0x90cc5e27
je 0x10004c69
jmp 0x10001a4d
mov eax, dword [ebp - 0xa8]
sub eax, 0x9113c4ec
je 0x10006251
jmp 0x10001a63
mov eax, dword [ebp - 0xa8]
sub eax, 0x91798a7c
je 0x100059bb
jmp 0x10001a79
mov eax, dword [ebp - 0xa8]
sub eax, 0x924f2b71
je 0x10002df1
jmp 0x10001a8f
mov eax, dword [ebp - 0xa8]
sub eax, 0x93d8370b
je 0x100039ee
jmp 0x10001aa5
mov eax, dword [ebp - 0xa8]
sub eax, 0x940731f2
je 0x100067d2
jmp 0x10001abb
mov eax, dword [ebp - 0xa8]
sub eax, 0x94b4fc6b
je 0x10006215
jmp 0x10001ad1
mov eax, dword [ebp - 0xa8]
sub eax, 0x96bc63aa
je 0x100063c0
jmp 0x10001ae7
mov eax, dword [ebp - 0xa8]
sub eax, 0x97ddae5d
je 0x100030cc
jmp 0x10001afd
mov eax, dword [ebp - 0xa8]
sub eax, 0x99b4ceab
je 0x100062e3
jmp 0x10001b13
mov eax, dword [ebp - 0xa8]
sub eax, 0x9aeb69b8
je 0x1000375f
jmp 0x10001b29
mov eax, dword [ebp - 0xa8]
sub eax, 0x9db143b4
je 0x10005b6e
jmp 0x10001b3f
mov eax, dword [ebp - 0xa8]
sub eax, 0x9e0649bd
je 0x10004499
jmp 0x10001b55
mov eax, dword [ebp - 0xa8]
sub eax, 0x9eb18a23
je 0x10005489
jmp 0x10001b6b
mov eax, dword [ebp - 0xa8]
sub eax, 0xa21e2d97
je 0x10004a4a
jmp 0x10001b81
mov eax, dword [ebp - 0xa8]
sub eax, 0xa2407818
je 0x100047b0
jmp 0x10001b97
mov eax, dword [ebp - 0xa8]
sub eax, 0xa25568c2
je 0x10005b7d
jmp 0x10001bad
mov eax, dword [ebp - 0xa8]
sub eax, 0xa2c4a279
je 0x100040a0
jmp 0x10001bc3
mov eax, dword [ebp - 0xa8]
sub eax, 0xa33c9e47
je 0x10003c06
jmp 0x10001bd9
mov eax, dword [ebp - 0xa8]
sub eax, 0xa3bd4901
je 0x10005023
jmp 0x10001bef
mov eax, dword [ebp - 0xa8]
sub eax, 0xa49ded27
je 0x10006352
jmp 0x10001c05
mov eax, dword [ebp - 0xa8]
sub eax, 0xa4fd2dc5
je 0x100036fd
jmp 0x10001c1b
mov eax, dword [ebp - 0xa8]
sub eax, 0xa5839f39
je 0x1000658f
jmp 0x10001c31
mov eax, dword [ebp - 0xa8]
sub eax, 0xa5c6600b
je 0x1000675b
jmp 0x10001c47
mov eax, dword [ebp - 0xa8]
sub eax, 0xa70cb900
je 0x100046c9
jmp 0x10001c5d
mov eax, dword [ebp - 0xa8]
sub eax, 0xa8dd31ec
je 0x1000388c
jmp 0x10001c73
mov eax, dword [ebp - 0xa8]
sub eax, 0xaa1626e0
je 0x10005277
jmp 0x10001c89
mov eax, dword [ebp - 0xa8]
sub eax, 0xaa5da60d
je 0x1000651c
jmp 0x10001c9f
mov eax, dword [ebp - 0xa8]
sub eax, 0xaad44beb
je 0x100050f1
jmp 0x10001cb5
mov eax, dword [ebp - 0xa8]
sub eax, 0xae082270
je 0x10003fe1
jmp 0x10001ccb
mov eax, dword [ebp - 0xa8]
sub eax, 0xaf4d95b4
je 0x1000673d
jmp 0x10001ce1
mov eax, dword [ebp - 0xa8]
sub eax, 0xb084d3c5
je 0x10005389
jmp 0x10001cf7
mov eax, dword [ebp - 0xa8]
sub eax, 0xb16590c0
je 0x1000591d
jmp 0x10001d0d
mov eax, dword [ebp - 0xa8]
sub eax, 0xb3189bfc
je 0x10003115
jmp 0x10001d23
mov eax, dword [ebp - 0xa8]
sub eax, 0xb34cadc4
je 0x10004dc3
jmp 0x10001d39
mov eax, dword [ebp - 0xa8]
sub eax, 0xb5c5311b
je 0x10005e5e
jmp 0x10001d4f
mov eax, dword [ebp - 0xa8]
sub eax, 0xb5f934b5
je 0x10005286
jmp 0x10001d65
mov eax, dword [ebp - 0xa8]
sub eax, 0xb62d6f68
je 0x10003921
jmp 0x10001d7b
mov eax, dword [ebp - 0xa8]
sub eax, 0xb86a4dc1
je 0x10006343
jmp 0x10001d91
mov eax, dword [ebp - 0xa8]
sub eax, 0xb95494ee
je 0x100036a5
jmp 0x10001da7
mov eax, dword [ebp - 0xa8]
sub eax, 0xbaf7a541
je 0x10005452
jmp 0x10001dbd
mov eax, dword [ebp - 0xa8]
sub eax, 0xbb40f761
je 0x10005c52
jmp 0x10001dd3
mov eax, dword [ebp - 0xa8]
sub eax, 0xbbc01dc4
je 0x1000451e
jmp 0x10001de9
mov eax, dword [ebp - 0xa8]
sub eax, 0xc04442e9
je 0x100057f3
jmp 0x10001dff
mov eax, dword [ebp - 0xa8]
sub eax, 0xc0a25dcb
je 0x10005cf7
jmp 0x10001e15
mov eax, dword [ebp - 0xa8]
sub eax, 0xc4584b98
je 0x100063de
jmp 0x10001e2b
mov eax, dword [ebp - 0xa8]
sub eax, 0xc4c728a9
je 0x10005ecc
jmp 0x10001e41
mov eax, dword [ebp - 0xa8]
sub eax, 0xc4fa28e1
je 0x1000576e
jmp 0x10001e57
mov eax, dword [ebp - 0xa8]
sub eax, 0xc5f94cab
je 0x10005b0b
jmp 0x10001e6d
mov eax, dword [ebp - 0xa8]
sub eax, 0xc68a6f21
je 0x10006313
mov eax, dword [0x10070ea8]
mov ecx, dword [0x10070ea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x94b4fc6b
mov ecx, 0x17f27f73
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov dword [ebp - 0xa0], 0x33e9473b
jmp 0x100067eb
mov eax, dword [0x10070ea8]
mov ecx, dword [0x10070ea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3075d070
mov ecx, 0xb3189bfc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov dword [ebp - 0xa0], 0xc04442e9
jmp 0x100067eb
mov eax, dword [0x10070ea8]
mov ecx, dword [0x10070ea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7d060a92
mov ecx, 0x7d72100c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0xa0], 0x1e79b708
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x99b4ceab
mov ecx, 0x40b9585b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
sub edx, 0xe8722d7
sub edx, 1
add edx, 0xe8722d7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7d7710d6
mov ecx, 0x64496ce3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
sub edx, 0xce026816
sub edx, 1
add edx, 0xce026816
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8698b73a
mov ecx, 0x2644ebf2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov dword [ebp - 0xa0], 0xe7c2c0ef
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x56c60187
mov ecx, 0xd8539c38
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov eax, dword [0x10070ea8]
mov ecx, dword [0x10070ea4]
mov edx, eax
add edx, 0x361be0dc
sub edx, 1
sub edx, 0x361be0dc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc68a6f21
mov ecx, 0x83f8ce7e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov eax, dword [0x10070ea8]
mov ecx, dword [0x10070ea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc68a6f21
mov ecx, 0xf36700f5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
sub edx, 0xe15d0af
sub edx, 1
add edx, 0xe15d0af
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd3699e19
mov ecx, 0x643435d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
sub edx, 0x68da6259
sub edx, 1
add edx, 0x68da6259
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa49ded27
mov ecx, 0x259ee877
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov dword [ebp - 0xa0], 0xc04442e9
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
sub edx, 0x5fd03c0e
sub edx, 1
add edx, 0x5fd03c0e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x73c7b757
mov ecx, 0x388f56e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov eax, dword [0x10070ea8]
mov ecx, dword [0x10070ea4]
mov edx, eax
add edx, 0x2c73d84f
sub edx, 1
sub edx, 0x2c73d84f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x39453dec
mov ecx, 0x9e0649bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
sub edx, 0x4ed3bd31
sub edx, 1
add edx, 0x4ed3bd31
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x39453dec
mov ecx, 0x6ebccd5d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc0a25dcb
mov ecx, 0xf4b02e62
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov dword [ebp - 0xa0], 0x8b6d21f8
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x34a994b7
mov ecx, 0xdbb5874d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ax, word [ebp - 0x2e]
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xa0], 0xca3fc9f2
jmp 0x100067eb
mov eax, dword [0x10070ea8]
mov ecx, dword [0x10070ea4]
mov edx, eax
add edx, 0xbe0bbd4c
sub edx, 1
sub edx, 0xbe0bbd4c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3222dfb9
mov ecx, 0xcdafd4f0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ecx, dword [ebp - 0x24]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001c190
call fcn.10012fb0
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1d], al
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
add edx, 0xbade44d0
sub edx, 1
sub edx, 0xbade44d0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xff9f00ab
mov ecx, 0xd4ec473c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf0528538
mov ecx, 0x4838d196
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov eax, dword [ebp - 0x88]
mov esi, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add esi, 0x11912f43
add esi, eax
sub esi, 0x11912f43
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
add edx, 0x2ebdf920
sub edx, 1
sub edx, 0x2ebdf920
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5c1e83ee
mov ecx, 0x1cab3396
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov eax, dword [0x10070ea8]
mov ecx, dword [0x10070ea4]
mov edx, eax
sub edx, 0xf67186f
sub edx, 1
add edx, 0xf67186f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaa5da60d
mov ecx, 0x3978421c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
add edx, 0x4c168ceb
sub edx, 1
sub edx, 0x4c168ceb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4d5e297
mov ecx, 0xb04aa13
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov dword [ebp - 0xa0], 0xb5f934b5
jmp 0x100067eb
mov eax, dword [ebp - 0x6c]
mov ax, word [eax]
mov word [ebp - 0x14], ax
mov dword [ebp - 0xa0], 0xeb1c167c
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2ada3b4a
mov ecx, 0x68c23c5a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov dword [ebp - 0xa0], 0x8b6d21f8
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
sub edx, 0x99eb39a2
sub edx, 1
add edx, 0x99eb39a2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4df863ac
mov ecx, 0x6ded8f92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
add edx, 0xf0172719
sub edx, 1
sub edx, 0xf0172719
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd218094a
mov ecx, 0xcf6f23de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.100113f0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xa0], 0xee1a8987
jmp 0x100067eb
mov dword [ebp - 0xa0], 0x49b98657
jmp 0x100067eb
mov eax, dword [0x10070ea8]
mov ecx, dword [0x10070ea4]
mov edx, eax
add edx, 0x54f3f3dd
sub edx, 1
sub edx, 0x54f3f3dd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa5839f39
mov ecx, 0xc5f94cab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov eax, dword [ebp - 0x80]
mov eax, dword [0x10070ea8]
mov ecx, dword [0x10070ea4]
mov edx, eax
sub edx, 0x5ccfeb2f
sub edx, 1
add edx, 0x5ccfeb2f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa5839f39
mov ecx, 0x1ac88598
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov dword [ebp - 0xa0], 0xf459ca25
jmp 0x100067eb
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xa0], 0x83a37dba
jmp 0x100067eb
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
add ecx, 0x21ee4639
add ecx, eax
sub ecx, 0x21ee4639
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov word [eax], 0
mov eax, dword [0x10070ea8]
mov ecx, dword [0x10070ea4]
mov edx, eax
sub edx, 0x869e40d3
sub edx, 1
add edx, 0x869e40d3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x26364c4f
mov ecx, 0x2ad92db8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov dword [ebp - 0xa0], 0xf4b02e62
jmp 0x100067eb
mov eax, dword [ebp - 0x6c]
movzx eax, word [eax]
imul edx, eax, 0x28
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
sub edx, 0x8fc9538c
sub edx, 1
add edx, 0x8fc9538c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x80be34df
mov ecx, 0x13bcfd97
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xaf4d95b4
mov ecx, 0xc4c728a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
add edx, 0x67e1a693
sub edx, 1
sub edx, 0x67e1a693
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xaf4d95b4
mov ecx, 0x8e4019e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov dword [ebp - 0xa0], 0x41b175ab
jmp 0x100067eb
mov ecx, dword [0x10070ea8]
mov eax, dword [0x10070ea4]
mov edx, ecx
sub edx, 0xef18346f
sub edx, 1
add edx, 0xef18346f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4bd5d183
mov ecx, 0x852474aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100067eb
mov dword [ebp - 0xa0], 0xb04aa13
jmp 0x100067eb
mov dword [ebp - 0xa0], 0x8622629e
jmp 0x100067eb
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x84]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xa0], 0x155328a3
jmp 0x100067eb
mov dword [ebp - 0xa0], 0x40b9585b
jmp 0x100067eb
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xa0], 0x2644ebf2
jmp 0x100067eb
mov dword [ebp - 0xa0], 0xf66c044a
jmp 0x100067eb
mov dword [ebp - 0xa0], 0xae082270
jmp 0x100067eb
mov dword [ebp - 0xa0], 0x507e802e
jmp 0x100067eb
mov dword [ebp - 0xa0], 0x507a89f1
jmp 0x100067eb
mov dword [ebp - 0xa0], 0x3978421c
jmp 0x100067eb
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xa0], 0xc5f94cab
jmp 0x100067eb
mov eax, dword [ebp - 0x6c]
movzx eax, word [eax]
imul edx, eax, 0x28
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xa0], 0x8b1199c7
jmp 0x100067eb
mov dword [ebp - 0xa0], 0xc4c728a9
jmp 0x100067eb
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov ax, word [ebp - 0x14]
mov dword [ebp - 0xa0], 0x7546fd28
jmp 0x100067eb
mov eax, dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xcb94042
jmp 0x100018e7