Function at 0x10008e60
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1ac
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1b0], eax
mov eax, dword [0x1005cc80]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1ac], 0x2b54fecd
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b4], eax
sub eax, 0x85b4541f
je 0x10009cc1
jmp 0x10008ea4
mov eax, dword [ebp - 0x1b4]
sub eax, 0x8634a009
je 0x1000a211
jmp 0x10008eba
mov eax, dword [ebp - 0x1b4]
sub eax, 0x87c7f66b
je 0x1000a55e
jmp 0x10008ed0
mov eax, dword [ebp - 0x1b4]
sub eax, 0x88a37836
je 0x1000a45c
jmp 0x10008ee6
mov eax, dword [ebp - 0x1b4]
sub eax, 0x8c8c4a82
je 0x1000a090
jmp 0x10008efc
mov eax, dword [ebp - 0x1b4]
sub eax, 0x90678fc4
je 0x1000a4a4
jmp 0x10008f12
mov eax, dword [ebp - 0x1b4]
sub eax, 0x95a2bb7f
je 0x1000999f
jmp 0x10008f28
mov eax, dword [ebp - 0x1b4]
sub eax, 0x9e6dc14a
je 0x1000a4c2
jmp 0x10008f3e
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa12b8e5e
je 0x10009c42
jmp 0x10008f54
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa13d506c
je 0x10009e2d
jmp 0x10008f6a
mov eax, dword [ebp - 0x1b4]
sub eax, 0xaa243872
je 0x1000a43c
jmp 0x10008f80
mov eax, dword [ebp - 0x1b4]
sub eax, 0xacd56b4c
je 0x100098b3
jmp 0x10008f96
mov eax, dword [ebp - 0x1b4]
sub eax, 0xb42b6702
je 0x100095b4
jmp 0x10008fac
mov eax, dword [ebp - 0x1b4]
sub eax, 0xb99b047b
je 0x100097b8
jmp 0x10008fc2
mov eax, dword [ebp - 0x1b4]
sub eax, 0xca85fec2
je 0x100095a5
jmp 0x10008fd8
mov eax, dword [ebp - 0x1b4]
sub eax, 0xd25f53b8
je 0x10009fb9
jmp 0x10008fee
mov eax, dword [ebp - 0x1b4]
sub eax, 0xd708d4cb
je 0x10009ecd
jmp 0x10009004
mov eax, dword [ebp - 0x1b4]
sub eax, 0xd754b627
je 0x1000a00a
jmp 0x1000901a
mov eax, dword [ebp - 0x1b4]
sub eax, 0xd863593e
je 0x10009c51
jmp 0x10009030
mov eax, dword [ebp - 0x1b4]
sub eax, 0xdf1f176e
je 0x1000a333
jmp 0x10009046
mov eax, dword [ebp - 0x1b4]
sub eax, 0xe0d8b8c8
je 0x1000a56d
jmp 0x1000905c
mov eax, dword [ebp - 0x1b4]
sub eax, 0xe386e601
je 0x1000a27f
jmp 0x10009072
mov eax, dword [ebp - 0x1b4]
sub eax, 0xe98b82a6
je 0x10009554
jmp 0x10009088
mov eax, dword [ebp - 0x1b4]
sub eax, 0xea0f43f0
je 0x10009460
jmp 0x1000909e
mov eax, dword [ebp - 0x1b4]
sub eax, 0xef700c2b
je 0x10009ef9
jmp 0x100090b4
mov eax, dword [ebp - 0x1b4]
sub eax, 0xf57d2fff
je 0x1000a2ed
jmp 0x100090ca
mov eax, dword [ebp - 0x1b4]
sub eax, 0xf89815b6
je 0x10009718
jmp 0x100090e0
mov eax, dword [ebp - 0x1b4]
sub eax, 0xf8cf78d5
je 0x100095db
jmp 0x100090f6
mov eax, dword [ebp - 0x1b4]
sub eax, 0xfa285ac6
je 0x10009f54
jmp 0x1000910c
mov eax, dword [ebp - 0x1b4]
sub eax, 0x61ab74
je 0x1000982e
jmp 0x10009122
mov eax, dword [ebp - 0x1b4]
sub eax, 0x521c6a5
je 0x1000a1a1
jmp 0x10009138
mov eax, dword [ebp - 0x1b4]
sub eax, 0x6208f37
je 0x1000a39f
jmp 0x1000914e
mov eax, dword [ebp - 0x1b4]
sub eax, 0x701f5f1
je 0x10009a36
jmp 0x10009164
mov eax, dword [ebp - 0x1b4]
sub eax, 0x9c3a7f2
je 0x10009b5e
jmp 0x1000917a
mov eax, dword [ebp - 0x1b4]
sub eax, 0x11447375
je 0x10009727
jmp 0x10009190
mov eax, dword [ebp - 0x1b4]
sub eax, 0x1217078a
je 0x1000a34e
jmp 0x100091a6
mov eax, dword [ebp - 0x1b4]
sub eax, 0x158d2a7d
je 0x1000a2de
jmp 0x100091bc
mov eax, dword [ebp - 0x1b4]
sub eax, 0x1ad36806
je 0x1000a4d1
jmp 0x100091d2
mov eax, dword [ebp - 0x1b4]
sub eax, 0x21e0b6ba
je 0x100094de
jmp 0x100091e8
mov eax, dword [ebp - 0x1b4]
sub eax, 0x2463b1ee
je 0x10009651
jmp 0x100091fe
mov eax, dword [ebp - 0x1b4]
sub eax, 0x26375c64
je 0x10009ea2
jmp 0x10009214
mov eax, dword [ebp - 0x1b4]
sub eax, 0x27795c01
je 0x100098a4
jmp 0x1000922a
mov eax, dword [ebp - 0x1b4]
sub eax, 0x2b3cd8ce
je 0x10009bd4
jmp 0x10009240
mov eax, dword [ebp - 0x1b4]
sub eax, 0x2b54fecd
je 0x1000943f
jmp 0x10009256
mov eax, dword [ebp - 0x1b4]
sub eax, 0x2fff3d63
je 0x1000a525
jmp 0x1000926c
mov eax, dword [ebp - 0x1b4]
sub eax, 0x3853d7c6
je 0x1000a4b3
jmp 0x10009282
mov eax, dword [ebp - 0x1b4]
sub eax, 0x3b9f4329
je 0x10009aac
jmp 0x10009298
mov eax, dword [ebp - 0x1b4]
sub eax, 0x405e4db8
je 0x10009da8
jmp 0x100092ae
mov eax, dword [ebp - 0x1b4]
sub eax, 0x411b8350
je 0x10009e93
jmp 0x100092c4
mov eax, dword [ebp - 0x1b4]
sub eax, 0x44b233b5
je 0x1000a4e0
jmp 0x100092da
mov eax, dword [ebp - 0x1b4]
sub eax, 0x49373f33
je 0x1000a06f
jmp 0x100092f0
mov eax, dword [ebp - 0x1b4]
sub eax, 0x4e65fa65
je 0x10009931
jmp 0x10009306
mov eax, dword [ebp - 0x1b4]
sub eax, 0x4fe76b76
je 0x1000a114
jmp 0x1000931c
mov eax, dword [ebp - 0x1b4]
sub eax, 0x5051495a
je 0x10009a15
jmp 0x10009332
mov eax, dword [ebp - 0x1b4]
sub eax, 0x512b8007
je 0x1000a549
jmp 0x10009348
mov eax, dword [ebp - 0x1b4]
sub eax, 0x514d3ff9
je 0x1000a316
jmp 0x1000935e
mov eax, dword [ebp - 0x1b4]
sub eax, 0x51de8b36
je 0x1000a202
jmp 0x10009374
mov eax, dword [ebp - 0x1b4]
sub eax, 0x540fdad3
je 0x10009d12
jmp 0x1000938a
mov eax, dword [ebp - 0x1b4]
sub eax, 0x59658464
je 0x10009b3d
jmp 0x100093a0
mov eax, dword [ebp - 0x1b4]
sub eax, 0x5aa69db8
je 0x1000a44d
jmp 0x100093b6
mov eax, dword [ebp - 0x1b4]
sub eax, 0x5c7158db
je 0x1000a409
jmp 0x100093cc
mov eax, dword [ebp - 0x1b4]
sub eax, 0x5cb9cfed
je 0x10009f1a
jmp 0x100093e2
mov eax, dword [ebp - 0x1b4]
sub eax, 0x5f5051e4
je 0x10009db7
jmp 0x100093f8
mov eax, dword [ebp - 0x1b4]
sub eax, 0x6aeae733
je 0x1000a3fa
jmp 0x1000940e
mov eax, dword [ebp - 0x1b4]
sub eax, 0x6e41bce0
je 0x10009b2e
push eax
mov eax, esp
mov dword [ebp - 0x180], eax
push eax
mov eax, esp
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x1ac], 0xea0f43f0
jmp 0x1000a589
mov eax, dword [ebp - 0x1b0]
push eax
mov ecx, esp
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x184], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10023840
add esp, 0xc
mov eax, dword [ebp - 0x184]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x18c], eax
mov eax, 0x21e0b6ba
mov ecx, 0xb42b6702
cmp dword [ebp - 0x18c], 0
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
mov edx, ecx
sub edx, 0xd121229
sub edx, 1
add edx, 0xd121229
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5aa69db8
mov ecx, 0xe98b82a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov eax, dword [0x1005e16c]
mov ecx, dword [0x1005e168]
mov edx, eax
add edx, 0x986410d0
sub edx, 1
sub edx, 0x986410d0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5aa69db8
mov ecx, 0xca85fec2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0xaa243872
jmp 0x1000a589
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x1ac], 0xf8cf78d5
jmp 0x1000a589
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
mov edx, ecx
sub edx, 0xde15f80c
sub edx, 1
add edx, 0xde15f80c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x88a37836
mov ecx, 0x2463b1ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov ecx, dword [ebp - 0x174]
mov edx, dword [ebp - 0x170]
lea eax, [ebp - 0x11c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x190], eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x168], eax
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
mov edx, ecx
sub edx, 0x665bc8af
sub edx, 1
add edx, 0x665bc8af
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x88a37836
mov ecx, 0xf89815b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0x11447375
jmp 0x1000a589
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x168]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x110]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x194], eax
mov edx, 0xffffffff
mov eax, 0xacd56b4c
mov ecx, 0xb99b047b
cmp dword [ebp - 0x194], edx
cmove eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
mov edx, ecx
sub edx, 0x1e4a77e9
sub edx, 1
add edx, 0x1e4a77e9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x90678fc4
mov ecx, 0x61ab74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
mov edx, ecx
sub edx, 0xde2d132f
sub edx, 1
add edx, 0xde2d132f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x90678fc4
mov ecx, 0x27795c01
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0xaa243872
jmp 0x1000a589
mov eax, dword [ebp - 0x194]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1ac], 0x749d50be
jmp 0x1000a589
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3853d7c6
mov ecx, 0x95a2bb7f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
mov edx, ecx
add edx, 0xead7a4c3
sub edx, 1
sub edx, 0xead7a4c3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3853d7c6
mov ecx, 0x5051495a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov dl, byte [ebp - 0x15d]
mov eax, 0x701f5f1
mov ecx, 0xd863593e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
mov edx, ecx
add edx, 0x11fe2d13
sub edx, 1
sub edx, 0x11fe2d13
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9e6dc14a
mov ecx, 0x3b9f4329
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x15c], eax
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
mov edx, ecx
sub edx, 0x69282f7a
sub edx, 1
add edx, 0x69282f7a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9e6dc14a
mov ecx, 0x6e41bce0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov eax, dword [ebp - 0x15c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1ac], 0x9c3a7f2
jmp 0x1000a589
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
mov edx, ecx
add edx, 0x8f1a0910
sub edx, 1
sub edx, 0x8f1a0910
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1ad36806
mov ecx, 0x2b3cd8ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1ad36806
mov ecx, 0xa12b8e5e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0xaa243872
jmp 0x1000a589
mov eax, dword [ebp - 0x198]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x1a0]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x1ac], 0x85b4541f
jmp 0x1000a589
mov eax, dword [0x1005e16c]
mov ecx, dword [0x1005e168]
mov edx, eax
sub edx, 0xecb58ff1
sub edx, 1
add edx, 0xecb58ff1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x44b233b5
mov ecx, 0x540fdad3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov eax, dword [ebp - 0x158]
mov edx, dword [ebp - 0x154]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x150], eax
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
mov edx, ecx
sub edx, 0xa59abbe6
sub edx, 1
add edx, 0xa59abbe6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x44b233b5
mov ecx, 0x405e4db8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0x5f5051e4
jmp 0x1000a589
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
mov edx, ecx
sub edx, 0x734203cf
sub edx, 1
add edx, 0x734203cf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2fff3d63
mov ecx, 0xa13d506c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x1a4], eax
mov word [ebp - 0x1a6], 0
mov eax, dword [0x1005e16c]
mov ecx, dword [0x1005e168]
mov edx, eax
sub edx, 0xfb62595f
sub edx, 1
add edx, 0xfb62595f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2fff3d63
mov ecx, 0x411b8350
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0x26375c64
jmp 0x1000a589
movzx eax, word [ebp - 0x1a6]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x1a4]
add eax, 4
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1ac], 0xd708d4cb
jmp 0x1000a589
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax + 2]
mov eax, dword [ebp - 0x14c]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x141], al
mov dword [ebp - 0x1ac], 0xef700c2b
jmp 0x1000a589
mov dl, byte [ebp - 0x141]
mov eax, 0xdf1f176e
mov ecx, 0x5cb9cfed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov eax, dword [ebp - 0x1a4]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x1a4]
movzx eax, word [eax + 0x14]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x1ac], 0xfa285ac6
jmp 0x1000a589
mov ecx, dword [ebp - 0x140]
mov edx, dword [ebp - 0x13c]
xor eax, eax
sub eax, edx
sub ecx, eax
movzx eax, word [ebp - 0x1a6]
imul edx, eax, 0x28
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x180]
mov dword [eax], ecx
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10030c7d
call fcn.100271a0
add esp, 8
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x1ac], 0xd25f53b8
jmp 0x1000a589
mov eax, dword [0x1005e16c]
mov ecx, dword [0x1005e168]
mov edx, eax
add edx, 0x1bf32a36
sub edx, 1
sub edx, 0x1bf32a36
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x512b8007
mov ecx, 0xd754b627
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov eax, dword [ebp - 0x138]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x131], al
mov eax, dword [0x1005e16c]
mov ecx, dword [0x1005e168]
mov edx, eax
sub edx, 0x9dc98c71
sub edx, 1
add edx, 0x9dc98c71
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x512b8007
mov ecx, 0x49373f33
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov dl, byte [ebp - 0x131]
mov eax, 0x8c8c4a82
mov ecx, 0x51de8b36
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov eax, dword [ebp - 0x17c]
mov dword [eax], 0
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x171a9b8f
add edx, eax
sub edx, 0x171a9b8f
mov eax, dword [ebp - 0x17c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x178]
mov byte [eax], cl
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x1ac], 0x4fe76b76
jmp 0x1000a589
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x130]
add edx, 0x2b103e74
add edx, eax
sub edx, 0x2b103e74
mov ecx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, esi
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.100239a0
add esp, 0xc
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x1ac], 0x521c6a5
jmp 0x1000a589
mov esi, dword [ebp - 0x190]
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
sub esi, eax
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x128]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x178]
mov byte [eax], cl
mov dword [ebp - 0x1ac], 0x51de8b36
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0x8634a009
jmp 0x1000a589
mov ecx, dword [0x1005e16c]
mov eax, dword [0x1005e168]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x87c7f66b
mov ecx, 0xe386e601
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov ax, word [ebp - 0x1a6]
mov word [ebp - 0x124], ax
mov eax, dword [0x1005e16c]
mov ecx, dword [0x1005e168]
mov edx, eax
sub edx, 0xc008010e
sub edx, 1
add edx, 0xc008010e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x87c7f66b
mov ecx, 0x158d2a7d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0xf57d2fff
jmp 0x1000a589
mov ax, word [ebp - 0x124]
sub ax, 0xa37
add ax, 1
add ax, 0xa37
mov word [ebp - 0x122], ax
mov dword [ebp - 0x1ac], 0x514d3ff9
jmp 0x1000a589
mov ax, word [ebp - 0x122]
mov word [ebp - 0x1a6], ax
mov dword [ebp - 0x1ac], 0x26375c64
jmp 0x1000a589
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x1ac], 0x1217078a
jmp 0x1000a589
mov eax, dword [0x1005e16c]
mov ecx, dword [0x1005e168]
mov edx, eax
sub edx, 0xab79ab0c
sub edx, 1
add edx, 0xab79ab0c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe0d8b8c8
mov ecx, 0x6208f37
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov eax, dword [ebp - 0x120]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1005e16c]
mov ecx, dword [0x1005e168]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe0d8b8c8
mov ecx, 0x6aeae733
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0x5c7158db
jmp 0x1000a589
mov eax, dword [ebp - 0x198]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x188]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1ac], 0xaa243872
jmp 0x1000a589
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10022aa0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1ac], 0xe98b82a6
jmp 0x1000a589
mov ecx, dword [ebp - 0x174]
mov edx, dword [ebp - 0x170]
lea eax, [ebp - 0x11c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1ac], 0x2463b1ee
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0x61ab74
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0x95a2bb7f
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0x3b9f4329
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0x2b3cd8ce
jmp 0x1000a589
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x154]
mov eax, dword [ebp - 0x154]
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x154]
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x154]
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x1ac], 0x540fdad3
jmp 0x1000a589
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x1a4], eax
mov word [ebp - 0x1a6], 0
mov dword [ebp - 0x1ac], 0xa13d506c
jmp 0x1000a589
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1ac], 0xd754b627
jmp 0x1000a589
mov dword [ebp - 0x1ac], 0xe386e601
jmp 0x1000a589
mov eax, dword [ebp - 0x120]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1ac], 0x6208f37
jmp 0x10008e88