Function at 0x10001360
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1a4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1ac], eax
mov eax, dword [0x1006e200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1a8], 0x5f679fc
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1b0], eax
sub eax, 0x81cd25d4
je 0x1000257a
jmp 0x100013a5
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8315df23
je 0x10001d0a
jmp 0x100013bb
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8bca9a25
je 0x100028ae
jmp 0x100013d1
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8ca0dba1
je 0x100020c8
jmp 0x100013e7
mov eax, dword [ebp - 0x1b0]
sub eax, 0x90b3fb91
je 0x10001c40
jmp 0x100013fd
mov eax, dword [ebp - 0x1b0]
sub eax, 0x9eb5ddfa
je 0x100026ab
jmp 0x10001413
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa43d2869
je 0x10001c4f
jmp 0x10001429
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa501251a
je 0x10002109
jmp 0x1000143f
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa82e5c1e
je 0x100023a1
jmp 0x10001455
mov eax, dword [ebp - 0x1b0]
sub eax, 0xaa44f796
je 0x1000269c
jmp 0x1000146b
mov eax, dword [ebp - 0x1b0]
sub eax, 0xac4ff407
je 0x100027f2
jmp 0x10001481
mov eax, dword [ebp - 0x1b0]
sub eax, 0xadd27664
je 0x100025aa
jmp 0x10001497
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb2a15ecb
je 0x100027e3
jmp 0x100014ad
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb527042f
je 0x100019b2
jmp 0x100014c3
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb72ae05b
je 0x10002912
jmp 0x100014d9
mov eax, dword [ebp - 0x1b0]
sub eax, 0xbaa99bd4
je 0x100027d1
jmp 0x100014ef
mov eax, dword [ebp - 0x1b0]
sub eax, 0xcce74621
je 0x10001d5b
jmp 0x10001505
mov eax, dword [ebp - 0x1b0]
sub eax, 0xda00eb56
je 0x10002177
jmp 0x1000151b
mov eax, dword [ebp - 0x1b0]
sub eax, 0xdcda2cc5
je 0x10001e8d
jmp 0x10001531
mov eax, dword [ebp - 0x1b0]
sub eax, 0xdd4c3ba4
je 0x10001f6d
jmp 0x10001547
mov eax, dword [ebp - 0x1b0]
sub eax, 0xe3242659
je 0x10001a37
jmp 0x1000155d
mov eax, dword [ebp - 0x1b0]
sub eax, 0xe736c225
je 0x10001dd1
jmp 0x10001573
mov eax, dword [ebp - 0x1b0]
sub eax, 0xe8251df5
je 0x10002618
jmp 0x10001589
mov eax, dword [ebp - 0x1b0]
sub eax, 0xf0ed64d1
je 0x10002944
jmp 0x1000159f
mov eax, dword [ebp - 0x1b0]
sub eax, 0xf3737beb
je 0x10001f7c
jmp 0x100015b5
mov eax, dword [ebp - 0x1b0]
sub eax, 0xfe274a17
je 0x10002719
jmp 0x100015cb
mov eax, dword [ebp - 0x1b0]
sub eax, 0xff113afe
je 0x10001e72
jmp 0x100015e1
mov eax, dword [ebp - 0x1b0]
sub eax, 0x5f679fc
je 0x100018fe
jmp 0x100015f7
mov eax, dword [ebp - 0x1b0]
sub eax, 0x1138a9bc
je 0x10001ce0
jmp 0x1000160d
mov eax, dword [ebp - 0x1b0]
sub eax, 0x18cc3e89
je 0x1000255d
jmp 0x10001623
mov eax, dword [ebp - 0x1b0]
sub eax, 0x1b259844
je 0x100028bd
jmp 0x10001639
mov eax, dword [ebp - 0x1b0]
sub eax, 0x1e2db235
je 0x100021f0
jmp 0x1000164f
mov eax, dword [ebp - 0x1b0]
sub eax, 0x20cd0657
je 0x10001e51
jmp 0x10001665
mov eax, dword [ebp - 0x1b0]
sub eax, 0x2be124d6
je 0x10001f24
jmp 0x1000167b
mov eax, dword [ebp - 0x1b0]
sub eax, 0x2e7f8ca4
je 0x100027c2
jmp 0x10001691
mov eax, dword [ebp - 0x1b0]
sub eax, 0x3275ba22
je 0x100024be
jmp 0x100016a7
mov eax, dword [ebp - 0x1b0]
sub eax, 0x34bd38d7
je 0x10001b8d
jmp 0x100016bd
mov eax, dword [ebp - 0x1b0]
sub eax, 0x34cf7f65
je 0x1000277d
jmp 0x100016d3
mov eax, dword [ebp - 0x1b0]
sub eax, 0x35393a75
je 0x1000246f
jmp 0x100016e9
mov eax, dword [ebp - 0x1b0]
sub eax, 0x35802433
je 0x10001fea
jmp 0x100016ff
mov eax, dword [ebp - 0x1b0]
sub eax, 0x36cb7506
je 0x10001af1
jmp 0x10001715
mov eax, dword [ebp - 0x1b0]
sub eax, 0x37d984f9
je 0x10002312
jmp 0x1000172b
mov eax, dword [ebp - 0x1b0]
sub eax, 0x3a188e02
je 0x100022f1
jmp 0x10001741
mov eax, dword [ebp - 0x1b0]
sub eax, 0x40310ee2
je 0x10001eae
jmp 0x10001757
mov eax, dword [ebp - 0x1b0]
sub eax, 0x4b3b5995
je 0x100021e1
jmp 0x1000176d
mov eax, dword [ebp - 0x1b0]
sub eax, 0x4f3b8ed8
je 0x10001b3c
jmp 0x10001783
mov eax, dword [ebp - 0x1b0]
sub eax, 0x4fa80648
je 0x10001b12
jmp 0x10001799
mov eax, dword [ebp - 0x1b0]
sub eax, 0x555ea113
je 0x100019c1
jmp 0x100017af
mov eax, dword [ebp - 0x1b0]
sub eax, 0x5628465e
je 0x10002126
jmp 0x100017c5
mov eax, dword [ebp - 0x1b0]
sub eax, 0x5ddcd071
je 0x10001cef
jmp 0x100017db
mov eax, dword [ebp - 0x1b0]
sub eax, 0x5f4a82a8
je 0x10001b21
jmp 0x100017f1
mov eax, dword [ebp - 0x1b0]
sub eax, 0x629f7bc0
je 0x1000194f
jmp 0x10001807
mov eax, dword [ebp - 0x1b0]
sub eax, 0x67864523
je 0x100020f1
jmp 0x1000181d
mov eax, dword [ebp - 0x1b0]
sub eax, 0x700c5171
je 0x1000289f
jmp 0x10001833
mov eax, dword [ebp - 0x1b0]
sub eax, 0x747fc558
je 0x10002928
jmp 0x10001849
mov eax, dword [ebp - 0x1b0]
sub eax, 0x75a01b61
je 0x1000276e
jmp 0x1000185f
mov eax, dword [ebp - 0x1b0]
sub eax, 0x75aaa040
je 0x1000254e
jmp 0x10001875
mov eax, dword [ebp - 0x1b0]
sub eax, 0x75e5c436
je 0x100023da
jmp 0x1000188b
mov eax, dword [ebp - 0x1b0]
sub eax, 0x767ead17
je 0x10002857
jmp 0x100018a1
mov eax, dword [ebp - 0x1b0]
sub eax, 0x76eb6e32
je 0x10002362
jmp 0x100018b7
mov eax, dword [ebp - 0x1b0]
sub eax, 0x7aa3c856
je 0x10002266
jmp 0x100018cd
mov eax, dword [ebp - 0x1b0]
sub eax, 0x7ce1b468
je 0x100020b9
jmp 0x100018e3
mov eax, dword [ebp - 0x1b0]
sub eax, 0x7e6ee499
je 0x10002961
jmp 0x100018f9
jmp 0x1000296b
mov eax, dword [0x1006f548]
mov ecx, dword [0x1006f544]
mov edx, eax
add edx, 0xf283249f
sub edx, 1
sub edx, 0xf283249f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb2a15ecb
mov ecx, 0x629f7bc0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
push eax
mov eax, esp
mov dword [ebp - 0x17c], eax
push eax
mov eax, esp
mov dword [ebp - 0x178], eax
mov eax, dword [0x1006f548]
mov ecx, dword [0x1006f544]
mov edx, eax
sub edx, 0xbf63b473
sub edx, 1
add edx, 0xbf63b473
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb2a15ecb
mov ecx, 0xb527042f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0x555ea113
jmp 0x1000296b
mov ecx, dword [0x1006f548]
mov eax, dword [0x1006f544]
mov edx, ecx
add edx, 0x594a0761
sub edx, 1
sub edx, 0x594a0761
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xac4ff407
mov ecx, 0xe3242659
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov eax, dword [ebp - 0x1ac]
push eax
mov ecx, esp
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x180], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x184], eax
lea eax, [ebp - 0x120]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10010600
add esp, 0xc
mov eax, dword [ebp - 0x180]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
setne al
and al, 1
mov byte [ebp - 0x16d], al
mov eax, dword [0x1006f548]
mov ecx, dword [0x1006f544]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xac4ff407
mov ecx, 0x36cb7506
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov dl, byte [ebp - 0x16d]
mov eax, 0x4fa80648
mov ecx, 0x5f4a82a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0xbaa99bd4
jmp 0x1000296b
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x1a8], 0x4f3b8ed8
jmp 0x1000296b
mov eax, dword [0x1006f548]
mov ecx, dword [0x1006f544]
mov edx, eax
sub edx, 0xb1cee359
sub edx, 1
add edx, 0xb1cee359
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x767ead17
mov ecx, 0x34bd38d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov edx, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x16c]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0x168], eax
mov ecx, dword [0x1006f548]
mov eax, dword [0x1006f544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x767ead17
mov ecx, 0x90b3fb91
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0xa43d2869
jmp 0x1000296b
mov ecx, dword [ebp - 0x188]
mov eax, dword [ebp - 0x168]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x190], eax
mov edx, 0xffffffff
mov eax, 0x5ddcd071
mov ecx, 0x1138a9bc
cmp dword [ebp - 0x190], edx
cmove eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0xbaa99bd4
jmp 0x1000296b
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1a8], 0x8315df23
jmp 0x1000296b
mov eax, dword [ebp - 0x164]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1a8], 0xcce74621
jmp 0x1000296b
mov ecx, dword [0x1006f548]
mov eax, dword [0x1006f544]
mov edx, ecx
add edx, 0x4e16553d
sub edx, 1
sub edx, 0x4e16553d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x700c5171
mov ecx, 0xe736c225
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
cmp dword [ebp - 0x194], 0
setne al
and al, 1
mov byte [ebp - 0x15d], al
mov ecx, dword [0x1006f548]
mov eax, dword [0x1006f544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x700c5171
mov ecx, 0x20cd0657
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov dl, byte [ebp - 0x15d]
mov eax, 0xff113afe
mov ecx, 0xf3737beb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x1a8], 0xdcda2cc5
jmp 0x1000296b
mov eax, dword [ebp - 0x15c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a8], 0x40310ee2
jmp 0x1000296b
mov ecx, dword [0x1006f548]
mov eax, dword [0x1006f544]
mov edx, ecx
add edx, 0x7455e9b0
sub edx, 1
sub edx, 0x7455e9b0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8bca9a25
mov ecx, 0x2be124d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov eax, dword [0x1006f548]
mov ecx, dword [0x1006f544]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8bca9a25
mov ecx, 0xdd4c3ba4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0xbaa99bd4
jmp 0x1000296b
mov ecx, dword [0x1006f548]
mov eax, dword [0x1006f544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1b259844
mov ecx, 0x35802433
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov eax, dword [ebp - 0x194]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x19c]
add eax, 0x3c
mov dword [ebp - 0x154], eax
mov ecx, dword [0x1006f548]
mov eax, dword [0x1006f544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1b259844
mov ecx, 0x7ce1b468
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0x8ca0dba1
jmp 0x1000296b
mov eax, dword [ebp - 0x154]
mov edx, dword [eax]
mov eax, dword [ebp - 0x158]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x67864523
jmp 0x1000296b
mov word [ebp - 0x1a2], 0
mov dword [ebp - 0x1a8], 0xa501251a
jmp 0x1000296b
mov ax, word [ebp - 0x1a2]
mov word [ebp - 0x14e], ax
mov dword [ebp - 0x1a8], 0x5628465e
jmp 0x1000296b
mov eax, dword [0x1006f548]
mov ecx, dword [0x1006f544]
mov edx, eax
sub edx, 0xe38e39b3
sub edx, 1
add edx, 0xe38e39b3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb72ae05b
mov ecx, 0xda00eb56
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov ax, word [ebp - 0x14e]
movzx eax, ax
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x1a0]
mov ax, word [eax + 6]
mov word [ebp - 0x148], ax
mov eax, dword [0x1006f548]
mov ecx, dword [0x1006f544]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb72ae05b
mov ecx, 0x4b3b5995
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0x1e2db235
jmp 0x1000296b
mov ecx, dword [0x1006f548]
mov eax, dword [0x1006f544]
mov edx, ecx
add edx, 0xf94d5bab
sub edx, 1
sub edx, 0xf94d5bab
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x747fc558
mov ecx, 0x7aa3c856
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov ax, word [ebp - 0x148]
movzx ecx, ax
mov eax, dword [ebp - 0x14c]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x145], al
mov ecx, dword [0x1006f548]
mov eax, dword [0x1006f544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x747fc558
mov ecx, 0x3a188e02
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov dl, byte [ebp - 0x145]
mov eax, 0x9eb5ddfa
mov ecx, 0x37d984f9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov eax, dword [ebp - 0x1a0]
sub eax, 0x10908380
add eax, 0x18
add eax, 0x10908380
mov ecx, dword [ebp - 0x1a0]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x144], eax
movzx eax, word [ebp - 0x1a2]
imul eax, eax, 0x28
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x1a8], 0x76eb6e32
jmp 0x1000296b
mov ecx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x140]
sub ecx, 0xeb0b3f19
add ecx, eax
add ecx, 0xeb0b3f19
mov eax, dword [ebp - 0x17c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x1a8], 0xa82e5c1e
jmp 0x1000296b
mov ecx, dword [ebp - 0x13c]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001c3b0
call fcn.10012970
add esp, 8
mov edx, eax
mov eax, 0x75e5c436
mov ecx, 0x75aaa040
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov eax, dword [ebp - 0x178]
mov dword [eax], 0
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
mov eax, dword [ebp - 0x178]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x174]
mov byte [eax], cl
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x17c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x1a8], 0x35393a75
jmp 0x1000296b
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x17c]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
add eax, 0x567f7e01
add eax, ecx
sub eax, 0x567f7e01
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x1a8], 0x3275ba22
jmp 0x1000296b
mov edx, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x12c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10010760
add esp, 0xc
mov eax, dword [ebp - 0x178]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, edi
sub esi, eax
mov eax, dword [ebp - 0x178]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x174]
mov byte [eax], cl
mov dword [ebp - 0x1a8], 0x75aaa040
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0x18cc3e89
jmp 0x1000296b
mov ax, word [ebp - 0x1a2]
mov word [ebp - 0x128], ax
mov dword [ebp - 0x1a8], 0x81cd25d4
jmp 0x1000296b
mov ax, word [ebp - 0x128]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x126], ax
mov dword [ebp - 0x1a8], 0xadd27664
jmp 0x1000296b
mov ecx, dword [0x1006f548]
mov eax, dword [0x1006f544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf0ed64d1
mov ecx, 0xe8251df5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov ax, word [ebp - 0x126]
mov word [ebp - 0x1a2], ax
mov ecx, dword [0x1006f548]
mov eax, dword [0x1006f544]
mov edx, ecx
sub edx, 0x2b31ae51
sub edx, 1
add edx, 0x2b31ae51
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf0ed64d1
mov ecx, 0xaa44f796
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0xa501251a
jmp 0x1000296b
mov ecx, dword [0x1006f548]
mov eax, dword [0x1006f544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7e6ee499
mov ecx, 0xfe274a17
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x124], eax
mov eax, dword [0x1006f548]
mov ecx, dword [0x1006f544]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7e6ee499
mov ecx, 0x75a01b61
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0x34cf7f65
jmp 0x1000296b
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x194]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x184]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a8], 0x2e7f8ca4
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0xbaa99bd4
jmp 0x1000296b
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000fa00
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1a8], 0x629f7bc0
jmp 0x1000296b
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x180], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x184], eax
lea eax, [ebp - 0x120]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10010600
add esp, 0xc
mov eax, dword [ebp - 0x180]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x1a8], 0xe3242659
jmp 0x1000296b
mov edx, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x16c]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x1a8], 0x34bd38d7
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0xe736c225
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0x2be124d6
jmp 0x1000296b
mov eax, dword [ebp - 0x194]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1a8], 0x35802433
jmp 0x1000296b
mov ax, word [ebp - 0x14e]
mov dword [ebp - 0x1a8], 0xda00eb56
jmp 0x1000296b
mov ax, word [ebp - 0x148]
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x1a8], 0x7aa3c856
jmp 0x1000296b
mov ax, word [ebp - 0x126]
mov word [ebp - 0x1a2], ax
mov dword [ebp - 0x1a8], 0xe8251df5
jmp 0x1000296b
mov dword [ebp - 0x1a8], 0xfe274a17
jmp 0x10001389