Function at 0x10008ca0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x198
mov eax, dword [ebp + 8]
mov dword [ebp - 0x19c], eax
mov eax, dword [0x10091080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x198], 0xd85911e5
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1a0], eax
sub eax, 0x86406f47
je 0x1000939f
jmp 0x10008ce4
mov eax, dword [ebp - 0x1a0]
sub eax, 0x86745656
je 0x10009570
jmp 0x10008cfa
mov eax, dword [ebp - 0x1a0]
sub eax, 0x8f7a391f
je 0x10009fb1
jmp 0x10008d10
mov eax, dword [ebp - 0x1a0]
sub eax, 0x919b414b
je 0x100099c3
jmp 0x10008d26
mov eax, dword [ebp - 0x1a0]
sub eax, 0x96115784
je 0x10009854
jmp 0x10008d3c
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9a0f2baa
je 0x10009e6d
jmp 0x10008d52
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa2aa65ed
je 0x1000970a
jmp 0x10008d68
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa80bb68a
je 0x10009802
jmp 0x10008d7e
mov eax, dword [ebp - 0x1a0]
sub eax, 0xb7a462b9
je 0x10009adf
jmp 0x10008d94
mov eax, dword [ebp - 0x1a0]
sub eax, 0xbc5cf349
je 0x1000a0db
jmp 0x10008daa
mov eax, dword [ebp - 0x1a0]
sub eax, 0xbcb95423
je 0x10009f91
jmp 0x10008dc0
mov eax, dword [ebp - 0x1a0]
sub eax, 0xbf6b2859
je 0x1000a028
jmp 0x10008dd6
mov eax, dword [ebp - 0x1a0]
sub eax, 0xc469f9d7
je 0x1000a0c6
jmp 0x10008dec
mov eax, dword [ebp - 0x1a0]
sub eax, 0xc7ddcb45
je 0x10009369
jmp 0x10008e02
mov eax, dword [ebp - 0x1a0]
sub eax, 0xca5815e3
je 0x1000954f
jmp 0x10008e18
mov eax, dword [ebp - 0x1a0]
sub eax, 0xd11de16f
je 0x100092f3
jmp 0x10008e2e
mov eax, dword [ebp - 0x1a0]
sub eax, 0xd85911e5
je 0x100091b9
jmp 0x10008e44
mov eax, dword [ebp - 0x1a0]
sub eax, 0xd9cd7253
je 0x10009285
jmp 0x10008e5a
mov eax, dword [ebp - 0x1a0]
sub eax, 0xe21f1340
je 0x10009d46
jmp 0x10008e70
mov eax, dword [ebp - 0x1a0]
sub eax, 0xec92dadc
je 0x10009d55
jmp 0x10008e86
mov eax, dword [ebp - 0x1a0]
sub eax, 0xf9a19ea4
je 0x10009fa0
jmp 0x10008e9c
mov eax, dword [ebp - 0x1a0]
sub eax, 0xfa044411
je 0x10009688
jmp 0x10008eb2
mov eax, dword [ebp - 0x1a0]
sub eax, 0xfb9ffeec
je 0x1000973a
jmp 0x10008ec8
mov eax, dword [ebp - 0x1a0]
sub eax, 0x1d740e
je 0x1000a043
jmp 0x10008ede
mov eax, dword [ebp - 0x1a0]
sub eax, 0x6e3fd9
je 0x10009fc0
jmp 0x10008ef4
mov eax, dword [ebp - 0x1a0]
sub eax, 0x10013ac
je 0x10009e3f
jmp 0x10008f0a
mov eax, dword [ebp - 0x1a0]
sub eax, 0x23fd8f5
je 0x100095d4
jmp 0x10008f20
mov eax, dword [ebp - 0x1a0]
sub eax, 0x7368d67
je 0x10009c33
jmp 0x10008f36
mov eax, dword [ebp - 0x1a0]
sub eax, 0x777b814
je 0x10009bc6
jmp 0x10008f4c
mov eax, dword [ebp - 0x1a0]
sub eax, 0x7a87055
je 0x10009f70
jmp 0x10008f62
mov eax, dword [ebp - 0x1a0]
sub eax, 0x13667b91
je 0x100095f1
jmp 0x10008f78
mov eax, dword [ebp - 0x1a0]
sub eax, 0x13925e7c
je 0x10009e7c
jmp 0x10008f8e
mov eax, dword [ebp - 0x1a0]
sub eax, 0x13b9290b
je 0x10009954
jmp 0x10008fa4
mov eax, dword [ebp - 0x1a0]
sub eax, 0x15a3332d
je 0x10009766
jmp 0x10008fba
mov eax, dword [ebp - 0x1a0]
sub eax, 0x15e81057
je 0x10009cf6
jmp 0x10008fd0
mov eax, dword [ebp - 0x1a0]
sub eax, 0x165828da
je 0x10009aee
jmp 0x10008fe6
mov eax, dword [ebp - 0x1a0]
sub eax, 0x1a7aa0a4
je 0x100097c1
jmp 0x10008ffc
mov eax, dword [ebp - 0x1a0]
sub eax, 0x21c54c53
je 0x1000a019
jmp 0x10009012
mov eax, dword [ebp - 0x1a0]
sub eax, 0x299b1ce1
je 0x10009ba5
jmp 0x10009028
mov eax, dword [ebp - 0x1a0]
sub eax, 0x2d8d1188
je 0x10009481
jmp 0x1000903e
mov eax, dword [ebp - 0x1a0]
sub eax, 0x2ed39a4a
je 0x10009e4e
jmp 0x10009054
mov eax, dword [ebp - 0x1a0]
sub eax, 0x328755d1
je 0x10009749
jmp 0x1000906a
mov eax, dword [ebp - 0x1a0]
sub eax, 0x359295e4
je 0x1000957f
jmp 0x10009080
mov eax, dword [ebp - 0x1a0]
sub eax, 0x3621d699
je 0x10009821
jmp 0x10009096
mov eax, dword [ebp - 0x1a0]
sub eax, 0x3df97706
je 0x10009da6
jmp 0x100090ac
mov eax, dword [ebp - 0x1a0]
sub eax, 0x4062ed88
je 0x10009f61
jmp 0x100090c2
mov eax, dword [ebp - 0x1a0]
sub eax, 0x4106b7e1
je 0x10009228
jmp 0x100090d8
mov eax, dword [ebp - 0x1a0]
sub eax, 0x44b691d9
je 0x1000940b
jmp 0x100090ee
mov eax, dword [ebp - 0x1a0]
sub eax, 0x48e4d262
je 0x10009a14
jmp 0x10009104
mov eax, dword [ebp - 0x1a0]
sub eax, 0x4ba07ba2
je 0x10009719
jmp 0x1000911a
mov eax, dword [ebp - 0x1a0]
sub eax, 0x53ab652f
je 0x10009ec5
jmp 0x10009130
mov eax, dword [ebp - 0x1a0]
sub eax, 0x55417ae9
je 0x100098c2
jmp 0x10009146
mov eax, dword [ebp - 0x1a0]
sub eax, 0x600288c9
je 0x10009b37
jmp 0x1000915c
mov eax, dword [ebp - 0x1a0]
sub eax, 0x6fdae397
je 0x10009975
jmp 0x10009172
mov eax, dword [ebp - 0x1a0]
sub eax, 0x7429b5f1
je 0x1000a0b7
jmp 0x10009188
mov eax, dword [ebp - 0x1a0]
sub eax, 0x78d6a0e5
je 0x10009612
jmp 0x1000919e
mov eax, dword [ebp - 0x1a0]
sub eax, 0x7ddafeb1
je 0x10009378
jmp 0x100091b4
jmp 0x1000a10b
mov eax, dword [ebp - 0x19c]
push eax
mov ecx, esp
mov dword [ebp - 0x180], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x17c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x178], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x174], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x170], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x16c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x168], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x164], ecx
mov dword [ebp - 0x184], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x198], 0x4106b7e1
jmp 0x1000a10b
lea eax, [ebp - 0x11c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.100276a0
add esp, 0xc
mov eax, dword [ebp - 0x184]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x18c], eax
mov eax, 0xd9cd7253
mov ecx, 0x7ddafeb1
cmp dword [ebp - 0x18c], 0
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov ecx, dword [0x100926b4]
mov eax, dword [0x100926b0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8f7a391f
mov ecx, 0xd11de16f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov ecx, dword [0x100926b4]
mov eax, dword [0x100926b0]
mov edx, ecx
sub edx, 0xf994b722
sub edx, 1
add edx, 0xf994b722
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8f7a391f
mov ecx, 0xc7ddcb45
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov dword [ebp - 0x198], 0xf9a19ea4
jmp 0x1000a10b
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x198], 0x86406f47
jmp 0x1000a10b
mov ecx, dword [ebp - 0x160]
mov edx, dword [ebp - 0x15c]
lea eax, [ebp - 0x11c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x190], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x18c]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x198], 0x44b691d9
jmp 0x1000a10b
mov ecx, dword [0x100926b4]
mov eax, dword [0x100926b0]
mov edx, ecx
sub edx, 0x8008c7d9
sub edx, 1
add edx, 0x8008c7d9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6e3fd9
mov ecx, 0x2d8d1188
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
lea eax, [ebp - 0x110]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x194], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x194], eax
sete al
and al, 1
mov byte [ebp - 0x155], al
mov ecx, dword [0x100926b4]
mov eax, dword [0x100926b0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6e3fd9
mov ecx, 0xca5815e3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov dl, byte [ebp - 0x155]
mov eax, 0x359295e4
mov ecx, 0x86745656
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov dword [ebp - 0x198], 0xf9a19ea4
jmp 0x1000a10b
mov eax, dword [ebp - 0x194]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x180]
mov dword [eax], ecx
mov dword [ebp - 0x198], 0x23fd8f5
jmp 0x1000a10b
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x198], 0x13667b91
jmp 0x1000a10b
mov edx, dword [ebp - 0x154]
mov eax, 0x78d6a0e5
mov ecx, 0x328755d1
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov ecx, dword [0x100926b4]
mov eax, dword [0x100926b0]
mov edx, ecx
add edx, 0x8ed0c6d6
sub edx, 1
sub edx, 0x8ed0c6d6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x21c54c53
mov ecx, 0xfa044411
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x150], eax
mov ecx, dword [0x100926b4]
mov eax, dword [0x100926b0]
mov edx, ecx
sub edx, 0xcde6d0d6
sub edx, 1
add edx, 0xcde6d0d6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x21c54c53
mov ecx, 0xa2aa65ed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov dword [ebp - 0x198], 0x4ba07ba2
jmp 0x1000a10b
mov eax, dword [ebp - 0x150]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x198], 0xfb9ffeec
jmp 0x1000a10b
mov dword [ebp - 0x198], 0xf9a19ea4
jmp 0x1000a10b
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x198], 0x15a3332d
jmp 0x1000a10b
mov eax, dword [ebp - 0x14c]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x17c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x178]
mov dword [eax], ecx
mov dword [ebp - 0x198], 0x1a7aa0a4
jmp 0x1000a10b
mov ecx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
add ecx, 0xdb077a87
add ecx, eax
sub ecx, 0xdb077a87
mov eax, dword [ebp - 0x174]
mov dword [eax], ecx
mov eax, dword [ebp - 0x170]
mov word [eax], 0
mov dword [ebp - 0x198], 0xa80bb68a
jmp 0x1000a10b
mov eax, dword [ebp - 0x170]
mov ax, word [eax]
mov word [ebp - 0x146], ax
mov dword [ebp - 0x198], 0x3621d699
jmp 0x1000a10b
mov ax, word [ebp - 0x146]
movzx eax, ax
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
add eax, 4
add eax, 2
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x198], 0x96115784
jmp 0x1000a10b
mov ecx, dword [0x100926b4]
mov eax, dword [0x100926b0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbf6b2859
mov ecx, 0x55417ae9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov eax, dword [ebp - 0x140]
movzx ecx, word [eax]
mov eax, dword [ebp - 0x144]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x139], al
mov ecx, dword [0x100926b4]
mov eax, dword [0x100926b0]
mov edx, ecx
sub edx, 0x4994e028
sub edx, 1
add edx, 0x4994e028
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbf6b2859
mov ecx, 0x13b9290b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov dl, byte [ebp - 0x139]
mov eax, 0x13925e7c
mov ecx, 0x6fdae397
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, 0x18
sub eax, ecx
mov ecx, dword [ebp - 0x174]
mov ecx, dword [ecx]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x170]
mov ax, word [eax]
mov word [ebp - 0x134], ax
mov dword [ebp - 0x198], 0x919b414b
jmp 0x1000a10b
mov eax, dword [0x100926b4]
mov ecx, dword [0x100926b0]
mov edx, eax
add edx, 0xa9ac02f8
sub edx, 1
sub edx, 0xa9ac02f8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1d740e
mov ecx, 0x48e4d262
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov ax, word [ebp - 0x134]
movzx eax, ax
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x138]
sub ecx, 0x51f4f435
add ecx, eax
add ecx, 0x51f4f435
mov eax, dword [ebp - 0x16c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10035b80
call fcn.1002b010
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x131], al
mov ecx, dword [0x100926b4]
mov eax, dword [0x100926b0]
mov edx, ecx
add edx, 0xe734cb1e
sub edx, 1
sub edx, 0xe734cb1e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1d740e
mov ecx, 0xb7a462b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov dword [ebp - 0x198], 0x165828da
jmp 0x1000a10b
mov eax, dword [0x100926b4]
mov ecx, dword [0x100926b0]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7429b5f1
mov ecx, 0x600288c9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov ecx, dword [0x100926b4]
mov eax, dword [0x100926b0]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7429b5f1
mov ecx, 0x299b1ce1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov dl, byte [ebp - 0x131]
mov eax, 0x777b814
mov ecx, 0xe21f1340
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov eax, dword [ebp - 0x168]
mov dword [eax], 0
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x67c6df66
add edx, eax
sub edx, 0x67c6df66
mov eax, dword [ebp - 0x168]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x198], 0x7368d67
jmp 0x1000a10b
mov eax, dword [ebp - 0x130]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x164]
mov byte [eax], cl
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x5cf1ea39
add edx, eax
sub edx, 0x5cf1ea39
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add ecx, 0xea45f9f9
add ecx, eax
sub ecx, 0xea45f9f9
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10027800
add esp, 0xc
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x16c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x198], 0x15e81057
jmp 0x1000a10b
mov esi, dword [ebp - 0x124]
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x128]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x164]
mov byte [eax], cl
mov dword [ebp - 0x198], 0xe21f1340
jmp 0x1000a10b
mov dword [ebp - 0x198], 0xec92dadc
jmp 0x1000a10b
mov eax, dword [0x100926b4]
mov ecx, dword [0x100926b0]
mov edx, eax
add edx, 0xec5d94a7
sub edx, 1
sub edx, 0xec5d94a7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc469f9d7
mov ecx, 0x3df97706
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov eax, dword [ebp - 0x170]
mov ax, word [eax]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x11e], ax
mov ecx, dword [0x100926b4]
mov eax, dword [0x100926b0]
mov edx, ecx
add edx, 0xa230ce67
sub edx, 1
sub edx, 0xa230ce67
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc469f9d7
mov ecx, 0x10013ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov dword [ebp - 0x198], 0x2ed39a4a
jmp 0x1000a10b
mov eax, dword [ebp - 0x170]
mov cx, word [ebp - 0x11e]
mov word [eax], cx
mov dword [ebp - 0x198], 0x9a0f2baa
jmp 0x1000a10b
mov dword [ebp - 0x198], 0xa80bb68a
jmp 0x1000a10b
mov eax, dword [0x100926b4]
mov ecx, dword [0x100926b0]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbc5cf349
mov ecx, 0x53ab652f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov eax, dword [ebp - 0x194]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x100926b4]
mov eax, dword [0x100926b0]
mov edx, ecx
add edx, 0x3ec5c30f
sub edx, 1
sub edx, 0x3ec5c30f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbc5cf349
mov ecx, 0x4062ed88
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000a10b
mov dword [ebp - 0x198], 0x7a87055
jmp 0x1000a10b
mov eax, dword [ebp - 0x188]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x198], 0xbcb95423
jmp 0x1000a10b
mov dword [ebp - 0x198], 0xf9a19ea4
jmp 0x1000a10b
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10026890
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x198], 0xd11de16f
jmp 0x1000a10b
lea eax, [ebp - 0x110]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x198], 0x2d8d1188
jmp 0x1000a10b
mov dword [ebp - 0x198], 0xfa044411
jmp 0x1000a10b
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x198], 0x55417ae9
jmp 0x1000a10b
mov ax, word [ebp - 0x134]
movzx eax, ax
imul edx, eax, 0x28
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x138]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x16c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10035b80
call fcn.1002b010
add esp, 8
mov dword [ebp - 0x198], 0x48e4d262
jmp 0x1000a10b
mov dword [ebp - 0x198], 0x600288c9
jmp 0x1000a10b
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x198], 0x3df97706
jmp 0x1000a10b
mov eax, dword [ebp - 0x194]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x198], 0x53ab652f
jmp 0x10008cc8