Function at 0x100011e0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1c4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1ac], eax
mov eax, dword [0x10068200]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1a8], 0x457acc61
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1b0], eax
sub eax, 0x80baa0a5
je 0x10002799
jmp 0x10001224
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8978b3d4
je 0x100023b8
jmp 0x1000123a
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8d9c6c45
je 0x10002679
jmp 0x10001250
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8ede7ac1
je 0x10001c40
jmp 0x10001266
mov eax, dword [ebp - 0x1b0]
sub eax, 0x900c4aec
je 0x100020f8
jmp 0x1000127c
mov eax, dword [ebp - 0x1b0]
sub eax, 0x96acd44e
je 0x10002f41
jmp 0x10001292
mov eax, dword [ebp - 0x1b0]
sub eax, 0x97149ddf
je 0x10002ed1
jmp 0x100012a8
mov eax, dword [ebp - 0x1b0]
sub eax, 0x972475ae
je 0x10001e09
jmp 0x100012be
mov eax, dword [ebp - 0x1b0]
sub eax, 0x975c9f4b
je 0x10001fc8
jmp 0x100012d4
mov eax, dword [ebp - 0x1b0]
sub eax, 0x9915f313
je 0x10002d49
jmp 0x100012ea
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa08aa7a3
je 0x1000243c
jmp 0x10001300
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa176ce2f
je 0x10001ec2
jmp 0x10001316
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa5199068
je 0x1000247b
jmp 0x1000132c
mov eax, dword [ebp - 0x1b0]
sub eax, 0xac6c6932
je 0x10002d64
jmp 0x10001342
mov eax, dword [ebp - 0x1b0]
sub eax, 0xadfdea78
je 0x10001d93
jmp 0x10001358
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb3417f6e
je 0x10001a62
jmp 0x1000136e
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb76ed690
je 0x1000229e
jmp 0x10001384
mov eax, dword [ebp - 0x1b0]
sub eax, 0xbc4e6edf
je 0x10001924
jmp 0x1000139a
mov eax, dword [ebp - 0x1b0]
sub eax, 0xbfba661f
je 0x10002c7b
jmp 0x100013b0
mov eax, dword [ebp - 0x1b0]
sub eax, 0xc2118ce2
je 0x10001f3d
jmp 0x100013c6
mov eax, dword [ebp - 0x1b0]
sub eax, 0xc2236d23
je 0x10002b43
jmp 0x100013dc
mov eax, dword [ebp - 0x1b0]
sub eax, 0xc37ddd68
je 0x10001a41
jmp 0x100013f2
mov eax, dword [ebp - 0x1b0]
sub eax, 0xc3b58f98
je 0x10002557
jmp 0x10001408
mov eax, dword [ebp - 0x1b0]
sub eax, 0xc4e853cc
je 0x10002c28
jmp 0x1000141e
mov eax, dword [ebp - 0x1b0]
sub eax, 0xdc2ddbb5
je 0x10001ca0
jmp 0x10001434
mov eax, dword [ebp - 0x1b0]
sub eax, 0xe24683b8
je 0x10001c4f
jmp 0x1000144a
mov eax, dword [ebp - 0x1b0]
sub eax, 0xe3e2b025
je 0x10002c8a
jmp 0x10001460
mov eax, dword [ebp - 0x1b0]
sub eax, 0xe8d726dc
je 0x10001b30
jmp 0x10001476
mov eax, dword [ebp - 0x1b0]
sub eax, 0xea94b1f8
je 0x10002119
jmp 0x1000148c
mov eax, dword [ebp - 0x1b0]
sub eax, 0xeaf8af12
je 0x10001fd7
jmp 0x100014a2
mov eax, dword [ebp - 0x1b0]
sub eax, 0xf41a4b82
je 0x10001ad8
jmp 0x100014b8
mov eax, dword [ebp - 0x1b0]
sub eax, 0xf72275af
je 0x10001ed1
jmp 0x100014ce
mov eax, dword [ebp - 0x1b0]
sub eax, 0xfa696cf3
je 0x10001b9e
jmp 0x100014e4
mov eax, dword [ebp - 0x1b0]
sub eax, 0xfd368a77
je 0x10002f50
jmp 0x100014fa
mov eax, dword [ebp - 0x1b0]
sub eax, 0xfe02c81a
je 0x10002c14
jmp 0x10001510
mov eax, dword [ebp - 0x1b0]
sub eax, 0xffd34498
je 0x10002750
jmp 0x10001526
mov eax, dword [ebp - 0x1b0]
sub eax, 0x21d56d0
je 0x1000223e
jmp 0x1000153c
mov eax, dword [ebp - 0x1b0]
sub eax, 0x54249d5
je 0x10001975
jmp 0x10001552
mov eax, dword [ebp - 0x1b0]
sub eax, 0x64424aa
je 0x10002abe
jmp 0x10001568
mov eax, dword [ebp - 0x1b0]
sub eax, 0x9095f12
je 0x10002926
jmp 0x1000157e
mov eax, dword [ebp - 0x1b0]
sub eax, 0xfc51eaf
je 0x10002985
jmp 0x10001594
mov eax, dword [ebp - 0x1b0]
sub eax, 0x136095e9
je 0x1000266a
jmp 0x100015aa
mov eax, dword [ebp - 0x1b0]
sub eax, 0x17cee754
je 0x10002333
jmp 0x100015c0
mov eax, dword [ebp - 0x1b0]
sub eax, 0x19b33fca
je 0x10002cd2
jmp 0x100015d6
mov eax, dword [ebp - 0x1b0]
sub eax, 0x1a4f2a3b
je 0x10001eec
jmp 0x100015ec
mov eax, dword [ebp - 0x1b0]
sub eax, 0x1a7fb4e7
je 0x1000204d
jmp 0x10001602
mov eax, dword [ebp - 0x1b0]
sub eax, 0x1a8f3a3f
je 0x10002c05
jmp 0x10001618
mov eax, dword [ebp - 0x1b0]
sub eax, 0x1ed42ed7
je 0x10002daf
jmp 0x1000162e
mov eax, dword [ebp - 0x1b0]
sub eax, 0x230e29bd
je 0x1000224d
jmp 0x10001644
mov eax, dword [ebp - 0x1b0]
sub eax, 0x23d47973
je 0x10002bd2
jmp 0x1000165a
mov eax, dword [ebp - 0x1b0]
sub eax, 0x242986ea
je 0x10002a92
jmp 0x10001670
mov eax, dword [ebp - 0x1b0]
sub eax, 0x27abafce
je 0x10002f1c
jmp 0x10001686
mov eax, dword [ebp - 0x1b0]
sub eax, 0x27bcc412
je 0x10002854
jmp 0x1000169c
mov eax, dword [ebp - 0x1b0]
sub eax, 0x2a74ac92
je 0x100026c2
jmp 0x100016b2
mov eax, dword [ebp - 0x1b0]
sub eax, 0x30bd55f9
je 0x100025c9
jmp 0x100016c8
mov eax, dword [ebp - 0x1b0]
sub eax, 0x33b24c4b
je 0x1000244b
jmp 0x100016de
mov eax, dword [ebp - 0x1b0]
sub eax, 0x34141d3e
je 0x10002741
jmp 0x100016f4
mov eax, dword [ebp - 0x1b0]
sub eax, 0x358510a9
je 0x100024e9
jmp 0x1000170a
mov eax, dword [ebp - 0x1b0]
sub eax, 0x363a41f9
je 0x100029b1
jmp 0x10001720
mov eax, dword [ebp - 0x1b0]
sub eax, 0x381cf422
je 0x100020dd
jmp 0x10001736
mov eax, dword [ebp - 0x1b0]
sub eax, 0x3a916501
je 0x10002e1f
jmp 0x1000174c
mov eax, dword [ebp - 0x1b0]
sub eax, 0x3b773300
je 0x10001ea1
jmp 0x10001762
mov eax, dword [ebp - 0x1b0]
sub eax, 0x3d4f4e30
je 0x10002342
jmp 0x10001778
mov eax, dword [ebp - 0x1b0]
sub eax, 0x43894805
je 0x10002194
jmp 0x1000178e
mov eax, dword [ebp - 0x1b0]
sub eax, 0x457acc61
je 0x10001909
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
mov edx, eax
sub edx, 0x9bef9e3e
sub edx, 1
add edx, 0x9bef9e3e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc4e853cc
mov ecx, 0x54249d5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x17c], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10008fe0
mov eax, dword [ebp - 0x178]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
setne al
and al, 1
mov byte [ebp - 0x171], al
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
mov edx, ecx
add edx, 0x640ae04c
sub edx, 1
sub edx, 0x640ae04c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc4e853cc
mov ecx, 0xc37ddd68
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dl, byte [ebp - 0x171]
mov eax, 0xb3417f6e
mov ecx, 0xe8d726dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
mov edx, ecx
add edx, 0x4edbb571
sub edx, 1
sub edx, 0x4edbb571
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbfba661f
mov ecx, 0xf41a4b82
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbfba661f
mov ecx, 0x4ab451ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe3e2b025
mov ecx, 0xfa696cf3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov ecx, dword [ebp - 0x180]
mov edx, dword [ebp - 0x17c]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x184], eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x16c], eax
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
mov edx, eax
sub edx, 0x37c6afdc
sub edx, 1
add edx, 0x37c6afdc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe3e2b025
mov ecx, 0x8ede7ac1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0xe24683b8
jmp 0x10002f6c
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
mov edx, eax
sub edx, 0x54fa72ce
sub edx, 1
add edx, 0x54fa72ce
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x19b33fca
mov ecx, 0xdc2ddbb5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x168], eax
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
mov edx, ecx
add edx, 0x9252c48f
sub edx, 1
sub edx, 0x9252c48f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x19b33fca
mov ecx, 0x57bedd74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
mov edx, ecx
add edx, 0xa72e888e
sub edx, 1
sub edx, 0xa72e888e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9915f313
mov ecx, 0x972475ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x188], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x188], eax
sete al
and al, 1
mov byte [ebp - 0x161], al
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
mov edx, ecx
add edx, 0xc90b7a01
sub edx, 1
sub edx, 0xc90b7a01
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9915f313
mov ecx, 0x3b773300
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dl, byte [ebp - 0x161]
mov eax, 0xf72275af
mov ecx, 0xa176ce2f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0xfe02c81a
jmp 0x10002f6c
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x1a8], 0x1a4f2a3b
jmp 0x10002f6c
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
mov edx, eax
sub edx, 0xecb1280a
sub edx, 1
add edx, 0xecb1280a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xac6c6932
mov ecx, 0xc2118ce2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov eax, dword [ebp - 0x160]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x15c], eax
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xac6c6932
mov ecx, 0x975c9f4b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0xeaf8af12
jmp 0x10002f6c
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
mov edx, ecx
add edx, 0xe62a101e
sub edx, 1
sub edx, 0xe62a101e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1ed42ed7
mov ecx, 0x1a7fb4e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
setne al
and al, 1
mov byte [ebp - 0x155], al
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
mov edx, eax
add edx, 0xbf90d078
sub edx, 1
sub edx, 0xbf90d078
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ed42ed7
mov ecx, 0x64833e00
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x1a8], 0x900c4aec
jmp 0x10002f6c
mov eax, dword [ebp - 0x154]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a8], 0xea94b1f8
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0xfe02c81a
jmp 0x10002f6c
mov eax, dword [ebp - 0x150]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x194]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x148], eax
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x746b4d8c
mov ecx, 0x21d56d0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0x230e29bd
jmp 0x10002f6c
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
mov edx, eax
sub edx, 0xebbeb4a0
sub edx, 1
add edx, 0xebbeb4a0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3a916501
mov ecx, 0xb76ed690
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x148]
add eax, 0x12586a71
add eax, ecx
sub eax, 0x12586a71
mov dword [ebp - 0x198], eax
mov word [ebp - 0x19a], 0
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3a916501
mov ecx, 0x17cee754
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0x3d4f4e30
jmp 0x10002f6c
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
mov edx, ecx
sub edx, 0xfd5b3deb
sub edx, 1
add edx, 0xfd5b3deb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6abdc7f1
mov ecx, 0x8978b3d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov ax, word [ebp - 0x19a]
mov word [ebp - 0x142], ax
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
mov edx, ecx
add edx, 0xfa36acd0
sub edx, 1
sub edx, 0xfa36acd0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6abdc7f1
mov ecx, 0xa08aa7a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0x33b24c4b
jmp 0x10002f6c
mov ax, word [ebp - 0x142]
movzx eax, ax
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x198]
mov ax, word [eax + 6]
mov word [ebp - 0x13c], ax
mov dword [ebp - 0x1a8], 0xa5199068
jmp 0x10002f6c
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4e0ce99a
mov ecx, 0x358510a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov ax, word [ebp - 0x13c]
movzx ecx, ax
mov eax, dword [ebp - 0x140]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x139], al
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
mov edx, eax
add edx, 0xdd25df19
sub edx, 1
sub edx, 0xdd25df19
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4e0ce99a
mov ecx, 0xc3b58f98
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dl, byte [ebp - 0x139]
mov eax, 0x614c6288
mov ecx, 0x6c1bec8a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov eax, dword [ebp - 0x198]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0x198]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x138], eax
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
mov edx, ecx
add edx, 0x8846630
sub edx, 1
sub edx, 0x8846630
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5ba41a68
mov ecx, 0x136095e9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0x8d9c6c45
jmp 0x10002f6c
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x97149ddf
mov ecx, 0x2a74ac92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
movzx eax, word [ebp - 0x19a]
imul ecx, eax, 0x28
mov eax, dword [ebp - 0x138]
sub eax, 0xf5253026
add eax, ecx
add eax, 0xf5253026
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x134], eax
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
mov edx, eax
sub edx, 0xe02ff10b
sub edx, 1
add edx, 0xe02ff10b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x97149ddf
mov ecx, 0x34141d3e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0xffd34498
jmp 0x10002f6c
mov eax, dword [0x10069558]
mov ecx, dword [0x10069554]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x27abafce
mov ecx, 0x80baa0a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov ecx, dword [ebp - 0x134]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100151a0
call fcn.1000b350
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x12d], al
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
mov edx, ecx
sub edx, 0x4eed8111
sub edx, 1
add edx, 0x4eed8111
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x27abafce
mov ecx, 0x4fc070af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x184]
mov eax, dword [ebp - 0x1a0]
mov eax, dword [eax + 0xc]
sub edx, 0x7c909ef7
add edx, eax
add edx, 0x7c909ef7
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1a1], al
mov edx, dword [ebp - 0x184]
mov eax, dword [ebp - 0x1a0]
mov eax, dword [eax + 0xc]
add edx, 0x86b5a510
add edx, eax
sub edx, 0x86b5a510
mov ecx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x1a0]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub ecx, eax
mov eax, dword [ebp - 0x1a0]
mov eax, dword [eax + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10009140
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x1a8], 0x9095f12
jmp 0x10002f6c
mov eax, dword [ebp - 0x128]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x184]
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
sub esi, eax
mov ecx, dword [ebp - 0x12c]
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x123], al
mov dword [ebp - 0x1a8], 0xfc51eaf
jmp 0x10002f6c
mov al, byte [ebp - 0x123]
and al, 1
mov byte [ebp - 0x1a1], al
mov dword [ebp - 0x1a8], 0x733fce93
jmp 0x10002f6c
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
mov edx, ecx
add edx, 0x944105b3
sub edx, 1
sub edx, 0x944105b3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x96acd44e
mov ecx, 0x6912e8e3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0x629dfaa3
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0x3d4f4e30
jmp 0x10002f6c
mov eax, dword [ebp - 0x188]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov ecx, dword [0x10069558]
mov eax, dword [0x10069554]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfd368a77
mov ecx, 0x4fb08d3c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x10002f6c
mov eax, dword [ebp - 0x18c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x17c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a8], 0x1a8f3a3f
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0xfe02c81a
jmp 0x10002f6c
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.100083c0
add esp, 0x1c4
pop esi
pop ebx
pop ebp
ret
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x17c], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10008fe0
mov eax, dword [ebp - 0x178]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x1a8], 0x54249d5
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0xf41a4b82
jmp 0x10002f6c
mov ecx, dword [ebp - 0x180]
mov edx, dword [ebp - 0x17c]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x1a8], 0xfa696cf3
jmp 0x10002f6c
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x16c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x1a8], 0xdc2ddbb5
jmp 0x10002f6c
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x1a8], 0x972475ae
jmp 0x10002f6c
mov eax, dword [ebp - 0x160]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x1a8], 0xc2118ce2
jmp 0x10002f6c
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x1a8], 0x1a7fb4e7
jmp 0x10002f6c
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x148]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x198], eax
mov word [ebp - 0x19a], 0
mov dword [ebp - 0x1a8], 0xb76ed690
jmp 0x10002f6c
movzx eax, word [ebp - 0x19a]
imul edx, eax, 0x28
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0x2a74ac92
jmp 0x10002f6c
mov ecx, dword [ebp - 0x134]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100151a0
call fcn.1000b350
mov dword [ebp - 0x1a8], 0x80baa0a5
jmp 0x10002f6c
mov dword [ebp - 0x1a8], 0x6912e8e3
jmp 0x10002f6c
mov eax, dword [ebp - 0x188]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a8], 0xc2236d23
jmp 0x10001208