Function at 0x1000a710
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1bc
mov eax, dword [ebp + 8]
mov eax, dword [0x1008a080]
xor eax, ebp
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x1a4], 0x3b7459bc
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a8], eax
sub eax, 0x82216325
je 0x1000b8e0
jmp 0x1000a75a
mov eax, dword [ebp - 0x1a8]
sub eax, 0x898dbf2b
je 0x1000aeb4
jmp 0x1000a770
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8cc6b497
je 0x1000b2bd
jmp 0x1000a786
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8d95351a
je 0x1000b339
jmp 0x1000a79c
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9195c502
je 0x1000b646
jmp 0x1000a7b2
mov eax, dword [ebp - 0x1a8]
sub eax, 0x91be1a53
je 0x1000ba1b
jmp 0x1000a7c8
mov eax, dword [ebp - 0x1a8]
sub eax, 0x91e1edc3
je 0x1000ba36
jmp 0x1000a7de
mov eax, dword [ebp - 0x1a8]
sub eax, 0x91e86a9d
je 0x1000b85c
jmp 0x1000a7f4
mov eax, dword [ebp - 0x1a8]
sub eax, 0x94ccb109
je 0x1000b166
jmp 0x1000a80a
mov eax, dword [ebp - 0x1a8]
sub eax, 0x94e795c8
je 0x1000b9ba
jmp 0x1000a820
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9cc28dc6
je 0x1000b474
jmp 0x1000a836
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9da04a0e
je 0x1000b035
jmp 0x1000a84c
mov eax, dword [ebp - 0x1a8]
sub eax, 0xa1b7a760
je 0x1000b3ed
jmp 0x1000a862
mov eax, dword [ebp - 0x1a8]
sub eax, 0xa3aeaa93
je 0x1000b1a8
jmp 0x1000a878
mov eax, dword [ebp - 0x1a8]
sub eax, 0xa722b6f9
je 0x1000adda
jmp 0x1000a88e
mov eax, dword [ebp - 0x1a8]
sub eax, 0xa9d16683
je 0x1000bab0
jmp 0x1000a8a4
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb2ee1116
je 0x1000b9c9
jmp 0x1000a8ba
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbeb9ca9f
je 0x1000b01a
jmp 0x1000a8d0
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbfd1fb4b
je 0x1000b7ae
jmp 0x1000a8e6
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc24d4d86
je 0x1000aff9
jmp 0x1000a8fc
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc9bf99ea
je 0x1000b2e8
jmp 0x1000a912
mov eax, dword [ebp - 0x1a8]
sub eax, 0xcd438c49
je 0x1000ac85
jmp 0x1000a928
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd201a955
je 0x1000b056
jmp 0x1000a93e
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd4c1f197
je 0x1000af05
jmp 0x1000a954
mov eax, dword [ebp - 0x1a8]
sub eax, 0xda225cd1
je 0x1000aea5
jmp 0x1000a96a
mov eax, dword [ebp - 0x1a8]
sub eax, 0xda3f9def
je 0x1000b6d2
jmp 0x1000a980
mov eax, dword [ebp - 0x1a8]
sub eax, 0xdb462e58
je 0x1000b065
jmp 0x1000a996
mov eax, dword [ebp - 0x1a8]
sub eax, 0xdc0d2d17
je 0x1000b0b6
jmp 0x1000a9ac
mov eax, dword [ebp - 0x1a8]
sub eax, 0xdc781a2b
je 0x1000ade9
jmp 0x1000a9c2
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe3632489
je 0x1000b3cc
jmp 0x1000a9d8
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe5cfb0c8
je 0x1000b574
jmp 0x1000a9ee
mov eax, dword [ebp - 0x1a8]
sub eax, 0xefee2045
je 0x1000acb5
jmp 0x1000aa04
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf0a18919
je 0x1000b90a
jmp 0x1000aa1a
mov eax, dword [ebp - 0x1a8]
sub eax, 0x27c0361
je 0x1000b7e6
jmp 0x1000aa30
mov eax, dword [ebp - 0x1a8]
sub eax, 0x7191d83
je 0x1000b6e1
jmp 0x1000aa46
mov eax, dword [ebp - 0x1a8]
sub eax, 0x89d20a3
je 0x1000b97e
jmp 0x1000aa5c
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8ae04a5
je 0x1000b96a
jmp 0x1000aa72
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb7e18df
je 0x1000af32
jmp 0x1000aa88
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc10ad80
je 0x1000b74f
jmp 0x1000aa9e
mov eax, dword [ebp - 0x1a8]
sub eax, 0xec82f75
je 0x1000b541
jmp 0x1000aab4
mov eax, dword [ebp - 0x1a8]
sub eax, 0x120a8f60
je 0x1000b423
jmp 0x1000aaca
mov eax, dword [ebp - 0x1a8]
sub eax, 0x165629ce
je 0x1000b5e3
jmp 0x1000aae0
mov eax, dword [ebp - 0x1a8]
sub eax, 0x18a89055
je 0x1000b1e1
jmp 0x1000aaf6
mov eax, dword [ebp - 0x1a8]
sub eax, 0x203042e0
je 0x1000b7bd
jmp 0x1000ab0c
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2132fc29
je 0x1000b257
jmp 0x1000ab22
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2230a7d5
je 0x1000afa8
jmp 0x1000ab38
mov eax, dword [ebp - 0x1a8]
sub eax, 0x31c97305
je 0x1000ae80
jmp 0x1000ab4e
mov eax, dword [ebp - 0x1a8]
sub eax, 0x31de1c70
je 0x1000ba0c
jmp 0x1000ab64
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3258a5a9
je 0x1000aca6
jmp 0x1000ab7a
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3b7459bc
je 0x1000ac2f
jmp 0x1000ab90
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3beaa648
je 0x1000b175
jmp 0x1000aba6
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3c95cf56
je 0x1000b949
jmp 0x1000abbc
mov eax, dword [ebp - 0x1a8]
sub eax, 0x439d8b94
je 0x1000baa1
jmp 0x1000abd2
mov eax, dword [ebp - 0x1a8]
sub eax, 0x4511bf46
je 0x1000ad2b
jmp 0x1000abe8
mov eax, dword [ebp - 0x1a8]
sub eax, 0x55263609
je 0x1000b2ae
jmp 0x1000abfe
mov eax, dword [ebp - 0x1a8]
sub eax, 0x714ddb18
je 0x1000b8ef
jmp 0x1000ac14
mov eax, dword [ebp - 0x1a8]
sub eax, 0x7bc6c09b
je 0x1000b532
jmp 0x1000ac2a
jmp 0x1000bac8
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1001d0b0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
setne al
and al, 1
mov byte [ebp - 0x171], al
mov dword [ebp - 0x1a4], 0xcd438c49
jmp 0x1000bac8
mov dl, byte [ebp - 0x171]
mov eax, 0x3258a5a9
mov ecx, 0xefee2045
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0x8ae04a5
jmp 0x1000bac8
mov ecx, dword [0x1008b554]
mov eax, dword [0x1008b550]
mov edx, ecx
sub edx, 0x26780117
sub edx, 1
add edx, 0x26780117
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x89d20a3
mov ecx, 0x4511bf46
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x170], eax
mov ecx, dword [0x1008b554]
mov eax, dword [0x1008b550]
mov edx, ecx
sub edx, 0xce139ebc
sub edx, 1
add edx, 0xce139ebc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x89d20a3
mov ecx, 0xa722b6f9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0xdc781a2b
jmp 0x1000bac8
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov dword [ebp - 0x180], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x17c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x1a4], 0x31c97305
jmp 0x1000bac8
mov edx, dword [ebp - 0x16c]
mov esi, 0xffffffff
mov eax, 0x898dbf2b
mov ecx, 0xda225cd1
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0x8ae04a5
jmp 0x1000bac8
mov eax, dword [ebp - 0x184]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x1a4], 0xd4c1f197
jmp 0x1000bac8
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
setne al
and al, 1
mov byte [ebp - 0x161], al
mov dword [ebp - 0x1a4], 0xb7e18df
jmp 0x1000bac8
mov ecx, dword [0x1008b554]
mov eax, dword [0x1008b550]
mov edx, ecx
sub edx, 0xe027c10
sub edx, 1
add edx, 0xe027c10
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x94e795c8
mov ecx, 0x2230a7d5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov eax, dword [0x1008b554]
mov ecx, dword [0x1008b550]
mov edx, eax
add edx, 0x7807d778
sub edx, 1
sub edx, 0x7807d778
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x94e795c8
mov ecx, 0xc24d4d86
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov dl, byte [ebp - 0x161]
mov eax, 0xbeb9ca9f
mov ecx, 0xdb462e58
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x1a4], 0x9da04a0e
jmp 0x1000bac8
mov eax, dword [ebp - 0x160]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a4], 0xd201a955
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0x8ae04a5
jmp 0x1000bac8
mov eax, dword [0x1008b554]
mov ecx, dword [0x1008b550]
mov edx, eax
sub edx, 0x2c56c6a0
sub edx, 1
add edx, 0x2c56c6a0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb2ee1116
mov ecx, 0xdc0d2d17
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov eax, dword [ebp - 0x188]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x15c], eax
mov ecx, dword [0x1008b554]
mov eax, dword [0x1008b550]
mov edx, ecx
add edx, 0xef4eaae7
sub edx, 1
sub edx, 0xef4eaae7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb2ee1116
mov ecx, 0x94ccb109
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0x3beaa648
jmp 0x1000bac8
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x1a4], 0xa3aeaa93
jmp 0x1000bac8
mov eax, dword [ebp - 0x190]
mov ecx, dword [eax + 0x3c]
mov eax, dword [ebp - 0x158]
sub eax, 0x60042741
add eax, ecx
add eax, 0x60042741
mov dword [ebp - 0x194], eax
mov word [ebp - 0x196], 0
mov dword [ebp - 0x1a4], 0x18a89055
jmp 0x1000bac8
mov ecx, dword [0x1008b554]
mov eax, dword [0x1008b550]
mov edx, ecx
add edx, 0x9539d46d
sub edx, 1
sub edx, 0x9539d46d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x31de1c70
mov ecx, 0x2132fc29
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov ax, word [ebp - 0x196]
mov word [ebp - 0x152], ax
mov eax, dword [0x1008b554]
mov ecx, dword [0x1008b550]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x31de1c70
mov ecx, 0x55263609
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0x8cc6b497
jmp 0x1000bac8
mov ax, word [ebp - 0x152]
movzx eax, ax
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x1a4], 0xc9bf99ea
jmp 0x1000bac8
mov eax, dword [0x1008b554]
mov ecx, dword [0x1008b550]
mov edx, eax
add edx, 0xe8feb216
sub edx, 1
sub edx, 0xe8feb216
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x91be1a53
mov ecx, 0x8d95351a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov eax, dword [ebp - 0x14c]
movzx ecx, word [eax + 6]
mov eax, dword [ebp - 0x150]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x145], al
mov ecx, dword [0x1008b554]
mov eax, dword [0x1008b550]
mov edx, ecx
sub edx, 0xea492b67
sub edx, 1
add edx, 0xea492b67
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x91be1a53
mov ecx, 0xe3632489
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov dl, byte [ebp - 0x145]
mov eax, 0x714ddb18
mov ecx, 0xa1b7a760
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov eax, dword [ebp - 0x194]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x1a4], 0x120a8f60
jmp 0x1000bac8
mov eax, dword [0x1008b554]
mov ecx, dword [0x1008b550]
mov edx, eax
add edx, 0xddd8de07
sub edx, 1
sub edx, 0xddd8de07
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x91e1edc3
mov ecx, 0x9cc28dc6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov eax, dword [ebp - 0x140]
movzx edx, word [eax + 0x14]
mov eax, dword [ebp - 0x144]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
movzx ecx, word [ebp - 0x196]
imul edx, ecx, 0x28
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x13c], eax
mov ecx, dword [0x1008b554]
mov eax, dword [0x1008b550]
mov edx, ecx
sub edx, 0xcdcecf00
sub edx, 1
add edx, 0xcdcecf00
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x91e1edc3
mov ecx, 0x7bc6c09b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0xec82f75
jmp 0x1000bac8
mov ecx, dword [ebp - 0x13c]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1002acf5
call fcn.10020a10
mov edx, eax
mov eax, 0xe5cfb0c8
mov ecx, 0xda3f9def
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 0xc]
add edx, 0x5e28f775
add edx, eax
sub edx, 0x5e28f775
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x135], al
mov dword [ebp - 0x1a4], 0x165629ce
jmp 0x1000bac8
mov al, byte [ebp - 0x135]
and al, 1
mov byte [ebp - 0x19d], al
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x19c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x19c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x1a4], 0x9195c502
jmp 0x1000bac8
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x130]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1001d210
mov ecx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x19c]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x180]
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 0xc]
sub esi, 0xf1ca1692
add esi, eax
add esi, 0xf1ca1692
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x19d], al
mov dword [ebp - 0x1a4], 0xda3f9def
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0x7191d83
jmp 0x1000bac8
mov ecx, dword [0x1008b554]
mov eax, dword [0x1008b550]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x439d8b94
mov ecx, 0xc10ad80
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov ax, word [ebp - 0x196]
mov word [ebp - 0x12c], ax
mov eax, dword [0x1008b554]
mov ecx, dword [0x1008b550]
mov edx, eax
add edx, 0xa0ca8c5
sub edx, 1
sub edx, 0xa0ca8c5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x439d8b94
mov ecx, 0xbfd1fb4b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0x203042e0
jmp 0x1000bac8
mov ax, word [ebp - 0x12c]
add ax, 0x4f5
add ax, 1
sub ax, 0x4f5
mov word [ebp - 0x12a], ax
mov dword [ebp - 0x1a4], 0x27c0361
jmp 0x1000bac8
mov ecx, dword [0x1008b554]
mov eax, dword [0x1008b550]
mov edx, ecx
sub edx, 0xb4b3d01
sub edx, 1
add edx, 0xb4b3d01
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa9d16683
mov ecx, 0x91e86a9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov ax, word [ebp - 0x12a]
mov word [ebp - 0x196], ax
mov ecx, dword [0x1008b554]
mov eax, dword [0x1008b550]
mov edx, ecx
add edx, 0xb27dbdd1
sub edx, 1
sub edx, 0xb27dbdd1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa9d16683
mov ecx, 0x82216325
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0x18a89055
jmp 0x1000bac8
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x1a4], 0xf0a18919
jmp 0x1000bac8
mov eax, dword [ebp - 0x128]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x188]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x1a4], 0x3c95cf56
jmp 0x1000bac8
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a4], 0x8ae04a5
jmp 0x1000bac8
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1001c310
add esp, 0x1bc
pop esi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov dword [ebp - 0x1a4], 0x4511bf46
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0x2230a7d5
jmp 0x1000bac8
mov eax, dword [ebp - 0x188]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x1a4], 0xdc0d2d17
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0x2132fc29
jmp 0x1000bac8
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x1a4], 0x8d95351a
jmp 0x1000bac8
mov eax, dword [ebp - 0x140]
movzx ecx, word [eax + 0x14]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
sub eax, 0xaa7f69b6
add eax, ecx
add eax, 0xaa7f69b6
movzx ecx, word [ebp - 0x196]
imul edx, ecx, 0x28
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1a4], 0x9cc28dc6
jmp 0x1000bac8
mov dword [ebp - 0x1a4], 0xc10ad80
jmp 0x1000bac8
mov ax, word [ebp - 0x12a]
mov word [ebp - 0x196], ax
mov dword [ebp - 0x1a4], 0x91e86a9d
jmp 0x1000a73e