Function at 0x100010a0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x198
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1a0], eax
mov eax, dword [0x100cd804]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x19c], 0x5026554d
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a4], eax
sub eax, 0x81e38725
je 0x10001e48
jmp 0x100010e5
mov eax, dword [ebp - 0x1a4]
sub eax, 0x86647182
je 0x10001f15
jmp 0x100010fb
mov eax, dword [ebp - 0x1a4]
sub eax, 0x87545caf
je 0x10001cfc
jmp 0x10001111
mov eax, dword [ebp - 0x1a4]
sub eax, 0x88bfe791
je 0x100021ae
jmp 0x10001127
mov eax, dword [ebp - 0x1a4]
sub eax, 0x88e5f631
je 0x100024fb
jmp 0x1000113d
mov eax, dword [ebp - 0x1a4]
sub eax, 0x8b476037
je 0x10001b29
jmp 0x10001153
mov eax, dword [ebp - 0x1a4]
sub eax, 0x9099bf68
je 0x10001cad
jmp 0x10001169
mov eax, dword [ebp - 0x1a4]
sub eax, 0x90f868a5
je 0x10002606
jmp 0x1000117f
mov eax, dword [ebp - 0x1a4]
sub eax, 0x973cbfb5
je 0x10001a26
jmp 0x10001195
mov eax, dword [ebp - 0x1a4]
sub eax, 0x995b5422
je 0x1000239c
jmp 0x100011ab
mov eax, dword [ebp - 0x1a4]
sub eax, 0x9b5b8764
je 0x10002356
jmp 0x100011c1
mov eax, dword [ebp - 0x1a4]
sub eax, 0x9f2ac5dd
je 0x1000237f
jmp 0x100011d7
mov eax, dword [ebp - 0x1a4]
sub eax, 0x9fec8c32
je 0x10002128
jmp 0x100011ed
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa0a9cee7
je 0x100023fc
jmp 0x10001203
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa0b6c253
je 0x10001c2e
jmp 0x10001219
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa2cfe212
je 0x1000232a
jmp 0x1000122f
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa4cbfe10
je 0x10001dd6
jmp 0x10001245
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa9e0cb3a
je 0x10001a9c
jmp 0x1000125b
mov eax, dword [ebp - 0x1a4]
sub eax, 0xaa7853af
je 0x100024ce
jmp 0x10001271
mov eax, dword [ebp - 0x1a4]
sub eax, 0xbbe51a23
je 0x100024ec
jmp 0x10001287
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc3b8c288
je 0x10001aed
jmp 0x1000129d
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc560a4cb
je 0x10001bc0
jmp 0x100012b3
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc9092bc4
je 0x10002339
jmp 0x100012c9
mov eax, dword [ebp - 0x1a4]
sub eax, 0xcd6d2ec7
je 0x100023db
jmp 0x100012df
mov eax, dword [ebp - 0x1a4]
sub eax, 0xcf63201d
je 0x10002516
jmp 0x100012f5
mov eax, dword [ebp - 0x1a4]
sub eax, 0xd29e1d2a
je 0x10001997
jmp 0x1000130b
mov eax, dword [ebp - 0x1a4]
sub eax, 0xd9e9e5a5
je 0x10002137
jmp 0x10001321
mov eax, dword [ebp - 0x1a4]
sub eax, 0xdb1aaa3a
je 0x1000240b
jmp 0x10001337
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe5bed616
je 0x10001ce0
jmp 0x1000134d
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe6d9d0cc
je 0x100025f7
jmp 0x10001363
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe7c242b1
je 0x100024dd
jmp 0x10001379
mov eax, dword [ebp - 0x1a4]
sub eax, 0xf3d9e9a6
je 0x100018d8
jmp 0x1000138f
mov eax, dword [ebp - 0x1a4]
sub eax, 0xf7a63533
je 0x100022b4
jmp 0x100013a5
mov eax, dword [ebp - 0x1a4]
sub eax, 0xfb8672b7
je 0x10002590
jmp 0x100013bb
mov eax, dword [ebp - 0x1a4]
sub eax, 0x9b40bf
je 0x10001ecc
jmp 0x100013d1
mov eax, dword [ebp - 0x1a4]
sub eax, 0x50194d7
je 0x1000165f
jmp 0x100013e7
mov eax, dword [ebp - 0x1a4]
sub eax, 0xb1c2a66
je 0x10002079
jmp 0x100013fd
mov eax, dword [ebp - 0x1a4]
sub eax, 0xeb22af5
je 0x10001753
jmp 0x10001413
mov eax, dword [ebp - 0x1a4]
sub eax, 0x14ab14a1
je 0x10001d1b
jmp 0x10001429
mov eax, dword [ebp - 0x1a4]
sub eax, 0x1bd4d6a6
je 0x10001ebd
jmp 0x1000143f
mov eax, dword [ebp - 0x1a4]
sub eax, 0x1ce9256c
je 0x10001c3d
jmp 0x10001455
mov eax, dword [ebp - 0x1a4]
sub eax, 0x21d4a2f8
je 0x10002525
jmp 0x1000146b
mov eax, dword [ebp - 0x1a4]
sub eax, 0x24295467
je 0x1000182c
jmp 0x10001481
mov eax, dword [ebp - 0x1a4]
sub eax, 0x2751afb1
je 0x10001a03
jmp 0x10001497
mov eax, dword [ebp - 0x1a4]
sub eax, 0x303dc505
je 0x10002246
jmp 0x100014ad
mov eax, dword [ebp - 0x1a4]
sub eax, 0x3190f7fd
je 0x1000245c
jmp 0x100014c3
mov eax, dword [ebp - 0x1a4]
sub eax, 0x3ebf549a
je 0x100017d8
jmp 0x100014d9
mov eax, dword [ebp - 0x1a4]
sub eax, 0x471d7104
je 0x10001d6c
jmp 0x100014ef
mov eax, dword [ebp - 0x1a4]
sub eax, 0x4c692da0
je 0x100019a6
jmp 0x10001505
mov eax, dword [ebp - 0x1a4]
sub eax, 0x4f5ed9f1
je 0x100024ad
jmp 0x1000151b
mov eax, dword [ebp - 0x1a4]
sub eax, 0x5026554d
je 0x1000163e
jmp 0x10001531
mov eax, dword [ebp - 0x1a4]
sub eax, 0x512eabfb
je 0x100016dd
jmp 0x10001547
mov eax, dword [ebp - 0x1a4]
sub eax, 0x5bf4a332
je 0x1000200b
jmp 0x1000155d
mov eax, dword [ebp - 0x1a4]
sub eax, 0x5cc8a69b
je 0x10001b0e
jmp 0x10001573
mov eax, dword [ebp - 0x1a4]
sub eax, 0x5dbf8193
je 0x10001df7
jmp 0x10001589
mov eax, dword [ebp - 0x1a4]
sub eax, 0x5ecaa908
je 0x10001fc1
jmp 0x1000159f
mov eax, dword [ebp - 0x1a4]
sub eax, 0x62371b31
je 0x10001fd0
jmp 0x100015b5
mov eax, dword [ebp - 0x1a4]
sub eax, 0x6488be61
je 0x10001b4a
jmp 0x100015cb
mov eax, dword [ebp - 0x1a4]
sub eax, 0x6734359f
je 0x10001921
jmp 0x100015e1
mov eax, dword [ebp - 0x1a4]
sub eax, 0x6d447232
je 0x100024bf
jmp 0x100015f7
mov eax, dword [ebp - 0x1a4]
sub eax, 0x6f0d57a3
je 0x100017c9
jmp 0x1000160d
mov eax, dword [ebp - 0x1a4]
sub eax, 0x7a418045
je 0x10001c58
jmp 0x10001623
mov eax, dword [ebp - 0x1a4]
sub eax, 0x7aee4fa3
je 0x10001847
jmp 0x10001639
jmp 0x10002610
push eax
mov eax, esp
mov dword [ebp - 0x170], eax
push eax
mov eax, esp
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x19c], 0x50194d7
jmp 0x10002610
mov eax, dword [ebp - 0x1a0]
push eax
mov ecx, esp
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x174], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x120]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10007c00
add esp, 0xc
mov eax, dword [ebp - 0x174]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x17c], eax
mov eax, 0x512eabfb
mov ecx, 0x3ebf549a
cmp dword [ebp - 0x17c], 0
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov ecx, dword [0x100ceab8]
mov eax, dword [0x100ceab4]
mov edx, ecx
add edx, 0x7c507504
sub edx, 1
sub edx, 0x7c507504
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6d447232
mov ecx, 0xeb22af5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov ecx, dword [0x100ceab8]
mov eax, dword [0x100ceab4]
mov edx, ecx
sub edx, 0xad05b5f
sub edx, 1
add edx, 0xad05b5f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6d447232
mov ecx, 0x6f0d57a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov dword [ebp - 0x19c], 0xdb1aaa3a
jmp 0x10002610
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x180], eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x19c], 0x24295467
jmp 0x10002610
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x19c], 0x7aee4fa3
jmp 0x10002610
mov eax, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x160]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x184], eax
mov edx, 0xffffffff
mov eax, 0x4c692da0
mov ecx, 0xf3d9e9a6
cmp dword [ebp - 0x184], edx
cmove eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov eax, dword [0x100ceab8]
mov ecx, dword [0x100ceab4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaa7853af
mov ecx, 0x6734359f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov ecx, dword [0x100ceab8]
mov eax, dword [0x100ceab4]
mov edx, ecx
sub edx, 0xc292395
sub edx, 1
add edx, 0xc292395
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xaa7853af
mov ecx, 0xd29e1d2a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov dword [ebp - 0x19c], 0xdb1aaa3a
jmp 0x10002610
mov eax, dword [ebp - 0x184]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x19c], 0x2751afb1
jmp 0x10002610
mov eax, dword [ebp - 0x15c]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x155], al
mov dword [ebp - 0x19c], 0x973cbfb5
jmp 0x10002610
mov ecx, dword [0x100ceab8]
mov eax, dword [0x100ceab4]
mov edx, ecx
add edx, 0xfdfdde49
sub edx, 1
sub edx, 0xfdfdde49
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe7c242b1
mov ecx, 0xa9e0cb3a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov eax, dword [0x100ceab8]
mov ecx, dword [0x100ceab4]
mov edx, eax
sub edx, 0xe5b9f37b
sub edx, 1
add edx, 0xe5b9f37b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe7c242b1
mov ecx, 0xc3b8c288
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov dl, byte [ebp - 0x155]
mov eax, 0x5cc8a69b
mov ecx, 0x1ce9256c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x19c], 0x8b476037
jmp 0x10002610
mov eax, dword [ebp - 0x154]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x19c], 0x6488be61
jmp 0x10002610
mov ecx, dword [0x100ceab8]
mov eax, dword [0x100ceab4]
mov edx, ecx
sub edx, 0xb7e55e5d
sub edx, 1
add edx, 0xb7e55e5d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbbe51a23
mov ecx, 0xc560a4cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov ecx, dword [0x100ceab8]
mov eax, dword [0x100ceab4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbbe51a23
mov ecx, 0xa0b6c253
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov dword [ebp - 0x19c], 0xdb1aaa3a
jmp 0x10002610
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x19c], 0x7a418045
jmp 0x10002610
mov eax, dword [ebp - 0x150]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x19c], 0x9099bf68
jmp 0x10002610
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x190]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x194], eax
mov word [ebp - 0x196], 0
mov dword [ebp - 0x19c], 0xe5bed616
jmp 0x10002610
movzx eax, word [ebp - 0x196]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x19c], 0x87545caf
jmp 0x10002610
mov eax, dword [ebp - 0x194]
movzx eax, word [eax + 6]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x19c], 0x14ab14a1
jmp 0x10002610
mov eax, dword [0x100ceab8]
mov ecx, dword [0x100ceab4]
mov edx, eax
sub edx, 0x7c909eff
sub edx, 1
add edx, 0x7c909eff
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x88e5f631
mov ecx, 0x471d7104
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x148]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x141], al
mov eax, dword [0x100ceab8]
mov ecx, dword [0x100ceab4]
mov edx, eax
sub edx, 0xc01666ad
sub edx, 1
add edx, 0xc01666ad
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x88e5f631
mov ecx, 0xa4cbfe10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov dl, byte [ebp - 0x141]
mov eax, 0x995b5422
mov ecx, 0x5dbf8193
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov eax, dword [0x100ceab8]
mov ecx, dword [0x100ceab4]
mov edx, eax
sub edx, 0x91c7c700
sub edx, 1
add edx, 0x91c7c700
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcf63201d
mov ecx, 0x81e38725
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov eax, dword [ebp - 0x194]
sub eax, 0x3304487c
xor ecx, ecx
add ecx, 0x18
add eax, ecx
add eax, 0x3304487c
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x194]
add eax, 4
mov dword [ebp - 0x13c], eax
mov eax, dword [0x100ceab8]
mov ecx, dword [0x100ceab4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcf63201d
mov ecx, 0x1bd4d6a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov dword [ebp - 0x19c], 0x9b40bf
jmp 0x10002610
mov eax, dword [0x100ceab8]
mov ecx, dword [0x100ceab4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x21d4a2f8
mov ecx, 0x86647182
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov eax, dword [ebp - 0x13c]
movzx eax, word [eax + 0x10]
mov ecx, dword [ebp - 0x140]
sub ecx, 0x53ccf4c7
add ecx, eax
add ecx, 0x53ccf4c7
movzx eax, word [ebp - 0x196]
imul edx, eax, 0x28
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x170]
mov dword [eax], ecx
mov ecx, dword [0x100ceab8]
mov eax, dword [0x100ceab4]
mov edx, ecx
sub edx, 0x4d165d12
sub edx, 1
add edx, 0x4d165d12
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x21d4a2f8
mov ecx, 0x5ecaa908
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov dword [ebp - 0x19c], 0x62371b31
jmp 0x10002610
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10012190
call fcn.10008b90
add esp, 8
mov edx, eax
mov eax, 0x5bf4a332
mov ecx, 0x303dc505
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov ecx, dword [0x100ceab8]
mov eax, dword [0x100ceab4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfb8672b7
mov ecx, 0xb1c2a66
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov eax, dword [ebp - 0x16c]
mov dword [eax], 0
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
mov eax, dword [ebp - 0x16c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x135], al
mov eax, dword [0x100ceab8]
mov ecx, dword [0x100ceab4]
mov edx, eax
add edx, 0xbcce38fd
sub edx, 1
sub edx, 0xbcce38fd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfb8672b7
mov ecx, 0x9fec8c32
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov dword [ebp - 0x19c], 0xd9e9e5a5
jmp 0x10002610
mov cl, byte [ebp - 0x135]
and cl, 1
mov eax, dword [ebp - 0x168]
mov byte [eax], cl
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x170]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
add eax, 0x75be276c
add eax, ecx
sub eax, 0x75be276c
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x170]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
sub eax, 0xb055ffda
add eax, ecx
add eax, 0xb055ffda
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x19c], 0x88bfe791
jmp 0x10002610
mov edx, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x12c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10007d60
add esp, 0xc
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x180]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
xor esi, esi
sub esi, edi
add eax, esi
xor esi, esi
sub esi, eax
mov eax, dword [ebp - 0x16c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x168]
mov byte [eax], cl
mov dword [ebp - 0x19c], 0x303dc505
jmp 0x10002610
mov ecx, dword [0x100ceab8]
mov eax, dword [0x100ceab4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe6d9d0cc
mov ecx, 0xf7a63533
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov ecx, dword [0x100ceab8]
mov eax, dword [0x100ceab4]
mov edx, ecx
sub edx, 0xa734f221
sub edx, 1
add edx, 0xa734f221
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe6d9d0cc
mov ecx, 0xa2cfe212
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov dword [ebp - 0x19c], 0xc9092bc4
jmp 0x10002610
mov ax, word [ebp - 0x196]
mov word [ebp - 0x128], ax
mov dword [ebp - 0x19c], 0x9b5b8764
jmp 0x10002610
mov ax, word [ebp - 0x128]
add ax, 0x3085
add ax, 1
sub ax, 0x3085
mov word [ebp - 0x126], ax
mov dword [ebp - 0x19c], 0x9f2ac5dd
jmp 0x10002610
mov ax, word [ebp - 0x126]
mov word [ebp - 0x196], ax
mov dword [ebp - 0x19c], 0xe5bed616
jmp 0x10002610
mov eax, dword [ebp - 0x184]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x188]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x19c], 0xcd6d2ec7
jmp 0x10002610
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x19c], 0xa0a9cee7
jmp 0x10002610
mov dword [ebp - 0x19c], 0xdb1aaa3a
jmp 0x10002610
mov eax, dword [0x100ceab8]
mov ecx, dword [0x100ceab4]
mov edx, eax
sub edx, 0x33f432fc
sub edx, 1
add edx, 0x33f432fc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x90f868a5
mov ecx, 0x3190f7fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov eax, dword [0x100ceab8]
mov ecx, dword [0x100ceab4]
mov edx, eax
add edx, 0x1cdd1e7f
sub edx, 1
sub edx, 0x1cdd1e7f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x90f868a5
mov ecx, 0x4f5ed9f1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002610
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10006fd0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x19c], 0xeb22af5
jmp 0x10002610
mov dword [ebp - 0x19c], 0x6734359f
jmp 0x10002610
mov dword [ebp - 0x19c], 0xa9e0cb3a
jmp 0x10002610
mov dword [ebp - 0x19c], 0xc560a4cb
jmp 0x10002610
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x19c], 0x471d7104
jmp 0x10002610
mov dword [ebp - 0x19c], 0x81e38725
jmp 0x10002610
mov eax, dword [ebp - 0x13c]
movzx eax, word [eax + 0x10]
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
sub ecx, 0xb48699ac
add ecx, eax
add ecx, 0xb48699ac
movzx eax, word [ebp - 0x196]
imul eax, eax, 0x28
add ecx, 0xb5a16f36
add ecx, eax
sub ecx, 0xb5a16f36
mov eax, dword [ebp - 0x170]
mov dword [eax], ecx
mov dword [ebp - 0x19c], 0x86647182
jmp 0x10002610
mov eax, dword [ebp - 0x16c]
mov dword [eax], 0
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x7322a655
add edx, eax
sub edx, 0x7322a655
mov eax, dword [ebp - 0x16c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x19c], 0xb1c2a66
jmp 0x10002610
mov dword [ebp - 0x19c], 0xf7a63533
jmp 0x10002610
mov dword [ebp - 0x19c], 0x3190f7fd
jmp 0x100010c9