Function at 0x100011d0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x19c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1a0], eax
mov eax, dword [0x1006b200]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x19c], 0x9fa3218f
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a4], eax
sub eax, 0x82fa68c0
je 0x10001915
jmp 0x10001214
mov eax, dword [ebp - 0x1a4]
sub eax, 0x84850d2c
je 0x100028ca
jmp 0x1000122a
mov eax, dword [ebp - 0x1a4]
sub eax, 0x86f470b4
je 0x10002181
jmp 0x10001240
mov eax, dword [ebp - 0x1a4]
sub eax, 0x89b15e44
je 0x10002598
jmp 0x10001256
mov eax, dword [ebp - 0x1a4]
sub eax, 0x98ef2ff0
je 0x10002579
jmp 0x1000126c
mov eax, dword [ebp - 0x1a4]
sub eax, 0x9b68d5fa
je 0x1000247e
jmp 0x10001282
mov eax, dword [ebp - 0x1a4]
sub eax, 0x9fa3218f
je 0x100017af
jmp 0x10001298
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa655aa35
je 0x10001d1f
jmp 0x100012ae
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa7ed69a8
je 0x10001f4c
jmp 0x100012c4
mov eax, dword [ebp - 0x1a4]
sub eax, 0xac20be56
je 0x10001c5c
jmp 0x100012da
mov eax, dword [ebp - 0x1a4]
sub eax, 0xbb6c0732
je 0x100027d8
jmp 0x100012f0
mov eax, dword [ebp - 0x1a4]
sub eax, 0xbe61c688
je 0x10001e9d
jmp 0x10001306
mov eax, dword [ebp - 0x1a4]
sub eax, 0xbebbea78
je 0x1000282f
jmp 0x1000131c
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc11b14dd
je 0x100027ba
jmp 0x10001332
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc7a4f244
je 0x1000267d
jmp 0x10001348
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc9a37a57
je 0x10001bdb
jmp 0x1000135e
mov eax, dword [ebp - 0x1a4]
sub eax, 0xd020e8be
je 0x10002549
jmp 0x10001374
mov eax, dword [ebp - 0x1a4]
sub eax, 0xdd6ded41
je 0x10002853
jmp 0x1000138a
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe3177863
je 0x100022d4
jmp 0x100013a0
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe5c7b9c5
je 0x10001d3a
jmp 0x100013b6
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe6aab3bb
je 0x10001cfe
jmp 0x100013cc
mov eax, dword [ebp - 0x1a4]
sub eax, 0xec9ab417
je 0x100025cb
jmp 0x100013e2
mov eax, dword [ebp - 0x1a4]
sub eax, 0xf5bc9b9d
je 0x100026eb
jmp 0x100013f8
mov eax, dword [ebp - 0x1a4]
sub eax, 0xfce66240
je 0x1000246f
jmp 0x1000140e
mov eax, dword [ebp - 0x1a4]
sub eax, 0xff524f96
je 0x10001a1d
jmp 0x10001424
mov eax, dword [ebp - 0x1a4]
sub eax, 0x4336b95
je 0x10001d6a
jmp 0x1000143a
mov eax, dword [ebp - 0x1a4]
sub eax, 0x447486a
je 0x10001b65
jmp 0x10001450
mov eax, dword [ebp - 0x1a4]
sub eax, 0x4f62502
je 0x10002086
jmp 0x10001466
mov eax, dword [ebp - 0x1a4]
sub eax, 0x9066e6b
je 0x10001f8f
jmp 0x1000147c
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc104605
je 0x100028a3
jmp 0x10001492
mov eax, dword [ebp - 0x1a4]
sub eax, 0x12513024
je 0x10002190
jmp 0x100014a8
mov eax, dword [ebp - 0x1a4]
sub eax, 0x15628a7a
je 0x10001d5b
jmp 0x100014be
mov eax, dword [ebp - 0x1a4]
sub eax, 0x1ca16174
je 0x100026fc
jmp 0x100014d4
mov eax, dword [ebp - 0x1a4]
sub eax, 0x1cb49104
je 0x10001af3
jmp 0x100014ea
mov eax, dword [ebp - 0x1a4]
sub eax, 0x1d67ad08
je 0x10001945
jmp 0x10001500
mov eax, dword [ebp - 0x1a4]
sub eax, 0x1e37b4b3
je 0x10002761
jmp 0x10001516
mov eax, dword [ebp - 0x1a4]
sub eax, 0x1e5e8d64
je 0x100020a7
jmp 0x1000152c
mov eax, dword [ebp - 0x1a4]
sub eax, 0x1fdc473c
je 0x10001906
jmp 0x10001542
mov eax, dword [ebp - 0x1a4]
sub eax, 0x1ffa4dba
je 0x100020f0
jmp 0x10001558
mov eax, dword [ebp - 0x1a4]
sub eax, 0x2244ebdf
je 0x10001825
jmp 0x1000156e
mov eax, dword [ebp - 0x1a4]
sub eax, 0x2a325bb2
je 0x100023df
jmp 0x10001584
mov eax, dword [ebp - 0x1a4]
sub eax, 0x30093f39
je 0x10001e8e
jmp 0x1000159a
mov eax, dword [ebp - 0x1a4]
sub eax, 0x3cc069b1
je 0x10001fc1
jmp 0x100015b0
mov eax, dword [ebp - 0x1a4]
sub eax, 0x425ee1cf
je 0x100019cc
jmp 0x100015c6
mov eax, dword [ebp - 0x1a4]
sub eax, 0x433246f5
je 0x10001cad
jmp 0x100015dc
mov eax, dword [ebp - 0x1a4]
sub eax, 0x44af79c3
je 0x100025e6
jmp 0x100015f2
mov eax, dword [ebp - 0x1a4]
sub eax, 0x4b9c7d5d
je 0x100027c9
jmp 0x10001608
mov eax, dword [ebp - 0x1a4]
sub eax, 0x4da3ef7e
je 0x10002844
jmp 0x1000161e
mov eax, dword [ebp - 0x1a4]
sub eax, 0x53fe15f5
je 0x10002868
jmp 0x10001634
mov eax, dword [ebp - 0x1a4]
sub eax, 0x551e3f64
je 0x100021df
jmp 0x1000164a
mov eax, dword [ebp - 0x1a4]
sub eax, 0x57576c57
je 0x10002228
jmp 0x10001660
mov eax, dword [ebp - 0x1a4]
sub eax, 0x57f18d1f
je 0x10001ee6
jmp 0x10001676
mov eax, dword [ebp - 0x1a4]
sub eax, 0x5c67306d
je 0x100022b3
jmp 0x1000168c
mov eax, dword [ebp - 0x1a4]
sub eax, 0x5df4a08b
je 0x10002369
jmp 0x100016a2
mov eax, dword [ebp - 0x1a4]
sub eax, 0x607ade79
je 0x10001fec
jmp 0x100016b8
mov eax, dword [ebp - 0x1a4]
sub eax, 0x61a11439
je 0x10001936
jmp 0x100016ce
mov eax, dword [ebp - 0x1a4]
sub eax, 0x6319754a
je 0x10002607
jmp 0x100016e4
mov eax, dword [ebp - 0x1a4]
sub eax, 0x6c35262e
je 0x10001b14
jmp 0x100016fa
mov eax, dword [ebp - 0x1a4]
sub eax, 0x6c4179a4
je 0x10001bea
jmp 0x10001710
mov eax, dword [ebp - 0x1a4]
sub eax, 0x70054682
je 0x10001c3b
jmp 0x10001726
mov eax, dword [ebp - 0x1a4]
sub eax, 0x70d1771a
je 0x10001dd8
jmp 0x1000173c
mov eax, dword [ebp - 0x1a4]
sub eax, 0x71427be4
je 0x1000251b
jmp 0x10001752
mov eax, dword [ebp - 0x1a4]
sub eax, 0x76eaf8ce
je 0x10001f5b
jmp 0x10001768
mov eax, dword [ebp - 0x1a4]
sub eax, 0x7789b793
je 0x1000252a
jmp 0x1000177e
mov eax, dword [ebp - 0x1a4]
sub eax, 0x780969d4
je 0x1000203d
mov ecx, dword [0x1006c540]
mov eax, dword [0x1006c53c]
mov edx, ecx
sub edx, 0x59114153
sub edx, 1
add edx, 0x59114153
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1ca16174
mov ecx, 0x2244ebdf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov eax, dword [ebp - 0x1a0]
push eax
mov ecx, esp
mov dword [ebp - 0x17c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x178], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x174], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x170], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x16c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x180], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x184], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000cf70
add esp, 0xc
mov eax, dword [ebp - 0x180]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x164], eax
mov eax, dword [0x1006c540]
mov ecx, dword [0x1006c53c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ca16174
mov ecx, 0x1fdc473c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov dword [ebp - 0x19c], 0x82fa68c0
jmp 0x100028d4
mov edx, dword [ebp - 0x164]
mov eax, 0x61a11439
mov ecx, 0x1d67ad08
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov dword [ebp - 0x19c], 0x6319754a
jmp 0x100028d4
mov ecx, dword [ebp - 0x188]
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 0x11c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x188]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x19c], 0x7b16abaf
jmp 0x100028d4
mov eax, dword [0x1006c540]
mov ecx, dword [0x1006c53c]
mov edx, eax
sub edx, 0x34254aa1
sub edx, 1
add edx, 0x34254aa1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1e37b4b3
mov ecx, 0xff524f96
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov eax, dword [ebp - 0x160]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x190], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x190], eax
sete al
and al, 1
mov byte [ebp - 0x15a], al
mov ecx, dword [0x1006c540]
mov eax, dword [0x1006c53c]
mov edx, ecx
sub edx, 0x2c0f7276
sub edx, 1
add edx, 0x2c0f7276
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1e37b4b3
mov ecx, 0x1cb49104
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov dl, byte [ebp - 0x15a]
mov eax, 0x6c4179a4
mov ecx, 0x6c35262e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov eax, dword [0x1006c540]
mov ecx, dword [0x1006c53c]
mov edx, eax
sub edx, 0xcb20b5e1
sub edx, 1
add edx, 0xcb20b5e1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc11b14dd
mov ecx, 0x447486a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov ecx, dword [0x1006c540]
mov eax, dword [0x1006c53c]
mov edx, ecx
add edx, 0x634afcc9
sub edx, 1
sub edx, 0x634afcc9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc11b14dd
mov ecx, 0xc9a37a57
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov dword [ebp - 0x19c], 0x6319754a
jmp 0x100028d4
mov eax, dword [ebp - 0x190]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], 0x70054682
jmp 0x100028d4
cmp dword [ebp - 0x194], 0
setne al
and al, 1
mov byte [ebp - 0x159], al
mov dword [ebp - 0x19c], 0xac20be56
jmp 0x100028d4
mov eax, dword [0x1006c540]
mov ecx, dword [0x1006c53c]
mov edx, eax
add edx, 0xa11176a0
sub edx, 1
sub edx, 0xa11176a0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4b9c7d5d
mov ecx, 0x433246f5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov eax, dword [0x1006c540]
mov ecx, dword [0x1006c53c]
mov edx, eax
add edx, 0xf258d5f
sub edx, 1
sub edx, 0xf258d5f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4b9c7d5d
mov ecx, 0xe6aab3bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov dl, byte [ebp - 0x159]
mov eax, 0xa655aa35
mov ecx, 0x4336b95
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x19c], 0xe5c7b9c5
jmp 0x100028d4
mov eax, dword [ebp - 0x158]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x19c], 0x15628a7a
jmp 0x100028d4
mov dword [ebp - 0x19c], 0x6319754a
jmp 0x100028d4
mov ecx, dword [0x1006c540]
mov eax, dword [0x1006c53c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbb6c0732
mov ecx, 0x70d1771a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov eax, dword [ebp - 0x194]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x17c]
mov dword [eax], ecx
mov ecx, dword [0x1006c540]
mov eax, dword [0x1006c53c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbb6c0732
mov ecx, 0x30093f39
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov dword [ebp - 0x19c], 0xbe61c688
jmp 0x100028d4
mov eax, dword [0x1006c540]
mov ecx, dword [0x1006c53c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbebbea78
mov ecx, 0x57f18d1f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x150], eax
mov eax, dword [0x1006c540]
mov ecx, dword [0x1006c53c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbebbea78
mov ecx, 0xa7ed69a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov dword [ebp - 0x19c], 0x76eaf8ce
jmp 0x100028d4
mov ecx, dword [ebp - 0x154]
mov edx, dword [ebp - 0x150]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x178]
mov dword [eax], ecx
mov eax, dword [ebp - 0x174]
mov word [eax], 0
mov dword [ebp - 0x19c], 0x9066e6b
jmp 0x100028d4
mov eax, dword [ebp - 0x174]
movzx eax, word [eax]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
add eax, 4
add eax, 2
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x19c], 0x3cc069b1
jmp 0x100028d4
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax]
mov eax, dword [ebp - 0x14c]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x141], al
mov dword [ebp - 0x19c], 0x607ade79
jmp 0x100028d4
mov eax, dword [0x1006c540]
mov ecx, dword [0x1006c53c]
mov edx, eax
sub edx, 0xc7a0b86c
sub edx, 1
add edx, 0xc7a0b86c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4da3ef7e
mov ecx, 0x780969d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov dl, byte [ebp - 0x141]
mov eax, 0x89b15e44
mov ecx, 0x1e5e8d64
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov eax, dword [0x1006c540]
mov ecx, dword [0x1006c53c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdd6ded41
mov ecx, 0x1ffa4dba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
sub eax, 0x4d65ab7c
add eax, 0x18
add eax, 0x4d65ab7c
mov dword [ebp - 0x140], eax
mov ecx, dword [0x1006c540]
mov eax, dword [0x1006c53c]
mov edx, ecx
sub edx, 0xd1762382
sub edx, 1
add edx, 0xd1762382
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdd6ded41
mov ecx, 0x86f470b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov dword [ebp - 0x19c], 0x12513024
jmp 0x100028d4
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
movzx edx, word [eax + 0x14]
mov eax, dword [ebp - 0x140]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0x174]
movzx ecx, word [ecx]
imul edx, ecx, 0x28
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x19c], 0x551e3f64
jmp 0x100028d4
mov eax, dword [0x1006c540]
mov ecx, dword [0x1006c53c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x53fe15f5
mov ecx, 0x57576c57
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov ecx, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x170]
mov dword [eax], ecx
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100193b0
call fcn.1000f2e0
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x135], al
mov eax, dword [0x1006c540]
mov ecx, dword [0x1006c53c]
mov edx, eax
add edx, 0xe9009edf
sub edx, 1
sub edx, 0xe9009edf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x53fe15f5
mov ecx, 0x5c67306d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov dl, byte [ebp - 0x135]
mov eax, 0xe3177863
mov ecx, 0x71427be4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov eax, dword [ebp - 0x16c]
mov dword [eax], 0
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0xecdd38f
add edx, eax
add edx, 0xecdd38f
mov eax, dword [ebp - 0x16c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x168]
mov byte [eax], cl
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
add eax, 0xc
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x19c], 0x5df4a08b
jmp 0x100028d4
mov ecx, dword [0x1006c540]
mov eax, dword [0x1006c53c]
mov edx, ecx
add edx, 0xa27e0f0e
sub edx, 1
sub edx, 0xa27e0f0e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc104605
mov ecx, 0x2a325bb2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov eax, dword [ebp - 0x130]
mov edx, dword [eax]
mov eax, dword [ebp - 0x134]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x170]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x128], eax
mov eax, dword [0x1006c540]
mov ecx, dword [0x1006c53c]
mov edx, eax
sub edx, 0x3ae2af41
sub edx, 1
add edx, 0x3ae2af41
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc104605
mov ecx, 0xfce66240
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov dword [ebp - 0x19c], 0x9b68d5fa
jmp 0x100028d4
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x128]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000d0d0
add esp, 0xc
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add esi, 0xdc1cbfaa
add esi, eax
sub esi, 0xdc1cbfaa
mov eax, dword [ebp - 0x16c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x168]
mov byte [eax], cl
mov dword [ebp - 0x19c], 0x71427be4
jmp 0x100028d4
mov dword [ebp - 0x19c], 0x7789b793
jmp 0x100028d4
mov eax, dword [ebp - 0x174]
mov ax, word [eax]
mov word [ebp - 0x124], ax
mov dword [ebp - 0x19c], 0xd020e8be
jmp 0x100028d4
mov ax, word [ebp - 0x124]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x122], ax
mov dword [ebp - 0x19c], 0x98ef2ff0
jmp 0x100028d4
mov eax, dword [ebp - 0x174]
mov cx, word [ebp - 0x122]
mov word [eax], cx
mov dword [ebp - 0x19c], 0x9066e6b
jmp 0x100028d4
mov eax, dword [ebp - 0x190]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x194]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x19c], 0xec9ab417
jmp 0x100028d4
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x19c], 0x44af79c3
jmp 0x100028d4
mov eax, dword [ebp - 0x120]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x19c], 0x6319754a
jmp 0x100028d4
mov ecx, dword [0x1006c540]
mov eax, dword [0x1006c53c]
mov edx, ecx
add edx, 0x51de33b5
sub edx, 1
sub edx, 0x51de33b5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x84850d2c
mov ecx, 0xc7a4f244
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov ecx, dword [0x1006c540]
mov eax, dword [0x1006c53c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x84850d2c
mov ecx, 0xf5bc9b9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100028d4
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1000c370
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x180], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x184], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000cf70
add esp, 0xc
mov eax, dword [ebp - 0x180]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x19c], 0x2244ebdf
jmp 0x100028d4
mov eax, dword [ebp - 0x160]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x19c], 0xff524f96
jmp 0x100028d4
mov dword [ebp - 0x19c], 0x447486a
jmp 0x100028d4
mov dword [ebp - 0x19c], 0x433246f5
jmp 0x100028d4
mov eax, dword [ebp - 0x194]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x17c]
mov dword [eax], ecx
mov dword [ebp - 0x19c], 0x70d1771a
jmp 0x100028d4
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x19c], 0x57f18d1f
jmp 0x100028d4
mov dword [ebp - 0x19c], 0x780969d4
jmp 0x100028d4
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x19c], 0x1ffa4dba
jmp 0x100028d4
mov ecx, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x170]
mov dword [eax], ecx
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100193b0
call fcn.1000f2e0
add esp, 8
mov dword [ebp - 0x19c], 0x57576c57
jmp 0x100028d4
mov eax, dword [ebp - 0x130]
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x19c], 0x2a325bb2
jmp 0x100028d4
mov dword [ebp - 0x19c], 0xc7a4f244
jmp 0x100011f8