Function at 0x1000a9a0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1a0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1a4], eax
mov eax, dword [0x10088880]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1a0], 0x5cc2d1b1
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
sub eax, 0x81bff4de
je 0x1000b252
jmp 0x1000a9e4
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8e60158f
je 0x1000b685
jmp 0x1000a9fa
mov eax, dword [ebp - 0x1a8]
sub eax, 0x91967712
je 0x1000bda3
jmp 0x1000aa10
mov eax, dword [ebp - 0x1a8]
sub eax, 0x92cd7e95
je 0x1000b761
jmp 0x1000aa26
mov eax, dword [ebp - 0x1a8]
sub eax, 0x93498417
je 0x1000be16
jmp 0x1000aa3c
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9de775ab
je 0x1000b462
jmp 0x1000aa52
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9fd90b66
je 0x1000be07
jmp 0x1000aa68
mov eax, dword [ebp - 0x1a8]
sub eax, 0xa7262144
je 0x1000bc9c
jmp 0x1000aa7e
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb0b8d5a9
je 0x1000be88
jmp 0x1000aa94
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb7a3be04
je 0x1000bf9a
jmp 0x1000aaaa
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb9333e5b
je 0x1000b039
jmp 0x1000aac0
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbafbca97
je 0x1000b0f6
jmp 0x1000aad6
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbc599d3c
je 0x1000b216
jmp 0x1000aaec
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbf6796b2
je 0x1000b349
jmp 0x1000ab02
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc1ff3c2d
je 0x1000bd06
jmp 0x1000ab18
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc2210abd
je 0x1000bbfc
jmp 0x1000ab2e
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc2eeef4d
je 0x1000b237
jmp 0x1000ab44
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc44f3c7f
je 0x1000b4bb
jmp 0x1000ab5a
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc80c3991
je 0x1000bdf8
jmp 0x1000ab70
mov eax, dword [ebp - 0x1a8]
sub eax, 0xce758958
je 0x1000b8fe
jmp 0x1000ab86
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd34dc2a1
je 0x1000bd74
jmp 0x1000ab9c
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd9167a92
je 0x1000b6af
jmp 0x1000abb2
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe09b5881
je 0x1000bb7f
jmp 0x1000abc8
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe2980ac3
je 0x1000b50c
jmp 0x1000abde
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe60c17ec
je 0x1000bd94
jmp 0x1000abf4
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe8c8fba7
je 0x1000b4ac
jmp 0x1000ac0a
mov eax, dword [ebp - 0x1a8]
sub eax, 0xece9fe04
je 0x1000b676
jmp 0x1000ac20
mov eax, dword [ebp - 0x1a8]
sub eax, 0xed4f850f
je 0x1000b2e9
jmp 0x1000ac36
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf964f9c3
je 0x1000b8ad
jmp 0x1000ac4c
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2566cbe
je 0x1000ba7f
jmp 0x1000ac62
mov eax, dword [ebp - 0x1a8]
sub eax, 0x37538e8
je 0x1000b3bf
jmp 0x1000ac78
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3e4734c
je 0x1000bf0d
jmp 0x1000ac8e
mov eax, dword [ebp - 0x1a8]
sub eax, 0x44ec00a
je 0x1000b6ca
jmp 0x1000aca4
mov eax, dword [ebp - 0x1a8]
sub eax, 0x6ea58e3
je 0x1000af6d
jmp 0x1000acba
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc4594a2
je 0x1000b5ef
jmp 0x1000acd0
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd1087b4
je 0x1000b9fa
jmp 0x1000ace6
mov eax, dword [ebp - 0x1a8]
sub eax, 0xef8fdab
je 0x1000bb1f
jmp 0x1000acfc
mov eax, dword [ebp - 0x1a8]
sub eax, 0x12f8cbdf
je 0x1000bb2e
jmp 0x1000ad12
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1532310f
je 0x1000bcbd
jmp 0x1000ad28
mov eax, dword [ebp - 0x1a8]
sub eax, 0x177649b5
je 0x1000bc4e
jmp 0x1000ad3e
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1c5ea01c
je 0x1000b0e7
jmp 0x1000ad54
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1df84720
je 0x1000b56a
jmp 0x1000ad6a
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1ebbeacf
je 0x1000bbed
jmp 0x1000ad80
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2234f391
je 0x1000b33a
jmp 0x1000ad96
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2652aaf0
je 0x1000bd85
jmp 0x1000adac
mov eax, dword [ebp - 0x1a8]
sub eax, 0x26a1021e
je 0x1000bc22
jmp 0x1000adc2
mov eax, dword [ebp - 0x1a8]
sub eax, 0x27ab894a
je 0x1000b471
jmp 0x1000add8
mov eax, dword [ebp - 0x1a8]
sub eax, 0x280a7c90
je 0x1000b728
jmp 0x1000adee
mov eax, dword [ebp - 0x1a8]
sub eax, 0x283a0f1c
je 0x1000bc6f
jmp 0x1000ae04
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2b579769
je 0x1000b147
jmp 0x1000ae1a
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3603d5cb
je 0x1000b579
jmp 0x1000ae30
mov eax, dword [ebp - 0x1a8]
sub eax, 0x39aac73a
je 0x1000bf8b
jmp 0x1000ae46
mov eax, dword [ebp - 0x1a8]
sub eax, 0x39e27149
je 0x1000b7d7
jmp 0x1000ae5c
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3c64e357
je 0x1000b0c2
jmp 0x1000ae72
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3da15a51
je 0x1000ba09
jmp 0x1000ae88
mov eax, dword [ebp - 0x1a8]
sub eax, 0x4c0a8d1e
je 0x1000b273
jmp 0x1000ae9e
mov eax, dword [ebp - 0x1a8]
sub eax, 0x501b00b3
je 0x1000bc3f
jmp 0x1000aeb4
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5cc2d1b1
je 0x1000af3d
jmp 0x1000aeca
mov eax, dword [ebp - 0x1a8]
sub eax, 0x60ac5664
je 0x1000b1a4
jmp 0x1000aee0
mov eax, dword [ebp - 0x1a8]
sub eax, 0x648c8917
je 0x1000afe5
jmp 0x1000aef6
mov eax, dword [ebp - 0x1a8]
sub eax, 0x67031c99
je 0x1000b1b3
jmp 0x1000af0c
mov eax, dword [ebp - 0x1a8]
sub eax, 0x785dfc6b
je 0x1000b89e
jmp 0x1000af22
mov eax, dword [ebp - 0x1a8]
sub eax, 0x7d0e70cd
je 0x1000afd6
jmp 0x1000af38
jmp 0x1000bfa4
mov eax, dword [ebp - 0x1a4]
push eax
mov ecx, esp
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x174], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x1a0], 0x6ea58e3
jmp 0x1000bfa4
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1001b2b0
add esp, 0xc
mov eax, dword [ebp - 0x174]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x17c], eax
mov eax, 0x7d0e70cd
mov ecx, 0x648c8917
cmp dword [ebp - 0x17c], 0
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0x1532310f
jmp 0x1000bfa4
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ebp - 0x178]
lea eax, [ebp - 0x11c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x180], eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x1a0], 0xb9333e5b
jmp 0x1000bfa4
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x168]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x110]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1a0], 0x3c64e357
jmp 0x1000bfa4
mov edx, dword [ebp - 0x164]
mov esi, 0xffffffff
mov eax, 0xbafbca97
mov ecx, 0x1c5ea01c
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0x1532310f
jmp 0x1000bfa4
mov eax, dword [0x10089d34]
mov ecx, dword [0x10089d30]
mov edx, eax
add edx, 0xd2623fa8
sub edx, 1
sub edx, 0xd2623fa8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2652aaf0
mov ecx, 0x2b579769
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x160], eax
mov eax, dword [0x10089d34]
mov ecx, dword [0x10089d30]
mov edx, eax
sub edx, 0x8e5d07dc
sub edx, 1
add edx, 0x8e5d07dc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2652aaf0
mov ecx, 0x60ac5664
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0x67031c99
jmp 0x1000bfa4
mov eax, dword [ebp - 0x160]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
setne al
and al, 1
mov byte [ebp - 0x159], al
mov dword [ebp - 0x1a0], 0xbc599d3c
jmp 0x1000bfa4
mov dl, byte [ebp - 0x159]
mov eax, 0xc2eeef4d
mov ecx, 0xbf6796b2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x1a0], 0x81bff4de
jmp 0x1000bfa4
mov eax, dword [ebp - 0x158]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a0], 0x4c0a8d1e
jmp 0x1000bfa4
mov ecx, dword [0x10089d34]
mov eax, dword [0x10089d30]
mov edx, ecx
add edx, 0x3cc9a2c8
sub edx, 1
sub edx, 0x3cc9a2c8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe60c17ec
mov ecx, 0xed4f850f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov eax, dword [0x10089d34]
mov ecx, dword [0x10089d30]
mov edx, eax
sub edx, 0xf91d9a0c
sub edx, 1
add edx, 0xf91d9a0c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe60c17ec
mov ecx, 0x2234f391
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0x1532310f
jmp 0x1000bfa4
mov ecx, dword [0x10089d34]
mov eax, dword [0x10089d30]
mov edx, ecx
add edx, 0x605c0f48
sub edx, 1
sub edx, 0x605c0f48
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x91967712
mov ecx, 0x37538e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov eax, dword [ebp - 0x188]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x154], eax
mov eax, dword [0x10089d34]
mov ecx, dword [0x10089d30]
mov edx, eax
add edx, 0xe800a45b
sub edx, 1
sub edx, 0xe800a45b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x91967712
mov ecx, 0x9de775ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0x27ab894a
jmp 0x1000bfa4
mov eax, dword [ebp - 0x190]
mov edx, dword [eax + 0x3c]
mov eax, dword [ebp - 0x154]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x194], eax
mov word [ebp - 0x196], 0
mov dword [ebp - 0x1a0], 0xe8c8fba7
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0xc44f3c7f
jmp 0x1000bfa4
mov eax, dword [0x10089d34]
mov ecx, dword [0x10089d30]
mov edx, eax
add edx, 0xdf349c4a
sub edx, 1
sub edx, 0xdf349c4a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc80c3991
mov ecx, 0xe2980ac3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
movzx eax, word [ebp - 0x196]
mov dword [ebp - 0x150], eax
mov eax, dword [0x10089d34]
mov ecx, dword [0x10089d30]
mov edx, eax
sub edx, 0xad9dba06
sub edx, 1
add edx, 0xad9dba06
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc80c3991
mov ecx, 0x1df84720
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0x3603d5cb
jmp 0x1000bfa4
mov ecx, dword [0x10089d34]
mov eax, dword [0x10089d30]
mov edx, ecx
sub edx, 0xc94a3209
sub edx, 1
add edx, 0xc94a3209
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9fd90b66
mov ecx, 0xc4594a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov eax, dword [ebp - 0x194]
mov ax, word [eax + 6]
mov word [ebp - 0x14a], ax
mov ecx, dword [0x10089d34]
mov eax, dword [0x10089d30]
mov edx, ecx
add edx, 0x40e6bbef
sub edx, 1
sub edx, 0x40e6bbef
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9fd90b66
mov ecx, 0xece9fe04
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0x8e60158f
jmp 0x1000bfa4
mov ax, word [ebp - 0x14a]
movzx esi, ax
mov edx, dword [ebp - 0x150]
mov eax, 0x177649b5
mov ecx, 0xd9167a92
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1a0], 0x44ec00a
jmp 0x1000bfa4
mov eax, dword [ebp - 0x148]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0x194]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
movzx ecx, word [ebp - 0x196]
imul edx, ecx, 0x28
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x1a0], 0x280a7c90
jmp 0x1000bfa4
mov ecx, dword [ebp - 0x144]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10028d05
call fcn.1001ec10
add esp, 8
mov edx, eax
mov eax, 0x92cd7e95
mov ecx, 0x12f8cbdf
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov ecx, dword [0x10089d34]
mov eax, dword [0x10089d30]
mov edx, ecx
add edx, 0x1fac3002
sub edx, 1
sub edx, 0x1fac3002
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x93498417
mov ecx, 0x39e27149
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x19c]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x170]
mov byte [eax], cl
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x19c]
add eax, 0xc
mov dword [ebp - 0x13c], eax
mov eax, dword [0x10089d34]
mov ecx, dword [0x10089d30]
mov edx, eax
sub edx, 0x162120b1
sub edx, 1
add edx, 0x162120b1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x93498417
mov ecx, 0x785dfc6b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0xf964f9c3
jmp 0x1000bfa4
mov eax, dword [0x10089d34]
mov ecx, dword [0x10089d30]
mov edx, eax
add edx, 0x9f989116
sub edx, 1
sub edx, 0x9f989116
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb0b8d5a9
mov ecx, 0xce758958
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov eax, dword [ebp - 0x13c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x140]
xor eax, eax
sub eax, ecx
sub edx, eax
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 0xc]
sub ecx, 0xa1289416
add ecx, eax
add ecx, 0xa1289416
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1001b410
add esp, 0xc
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x19c]
add eax, 0xc
mov dword [ebp - 0x12c], eax
mov ecx, dword [0x10089d34]
mov eax, dword [0x10089d30]
mov edx, ecx
add edx, 0xe633f6bc
sub edx, 1
sub edx, 0xe633f6bc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb0b8d5a9
mov ecx, 0xd1087b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0x3da15a51
jmp 0x1000bfa4
mov ecx, dword [0x10089d34]
mov eax, dword [0x10089d30]
mov edx, ecx
add edx, 0x5ff84163
sub edx, 1
sub edx, 0x5ff84163
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3e4734c
mov ecx, 0x2566cbe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov eax, dword [ebp - 0x12c]
mov ecx, dword [eax]
mov esi, dword [ebp - 0x130]
xor eax, eax
sub eax, ecx
sub esi, eax
mov ecx, dword [ebp - 0x138]
mov edx, dword [ebp - 0x134]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x170]
mov byte [eax], cl
mov eax, dword [0x10089d34]
mov ecx, dword [0x10089d30]
mov edx, eax
sub edx, 0x4f797ae5
sub edx, 1
add edx, 0x4f797ae5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3e4734c
mov ecx, 0xef8fdab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0x12f8cbdf
jmp 0x1000bfa4
mov eax, dword [0x10089d34]
mov ecx, dword [0x10089d30]
mov edx, eax
add edx, 0xe72d38b
sub edx, 1
sub edx, 0xe72d38b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x39aac73a
mov ecx, 0xe09b5881
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov ecx, dword [0x10089d34]
mov eax, dword [0x10089d30]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x39aac73a
mov ecx, 0x1ebbeacf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0xc2210abd
jmp 0x1000bfa4
mov ax, word [ebp - 0x196]
xor ecx, ecx
sub cx, 1
sub ax, cx
mov word [ebp - 0x126], ax
mov dword [ebp - 0x1a0], 0x26a1021e
jmp 0x1000bfa4
mov ax, word [ebp - 0x126]
mov word [ebp - 0x196], ax
mov dword [ebp - 0x1a0], 0x501b00b3
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0xc44f3c7f
jmp 0x1000bfa4
mov eax, dword [ebp - 0x184]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a0], 0x283a0f1c
jmp 0x1000bfa4
mov eax, dword [ebp - 0x188]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x1a0], 0xa7262144
jmp 0x1000bfa4
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a0], 0x1532310f
jmp 0x1000bfa4
mov eax, dword [0x10089d34]
mov ecx, dword [0x10089d30]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb7a3be04
mov ecx, 0xc1ff3c2d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov ecx, dword [0x10089d34]
mov eax, dword [0x10089d30]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb7a3be04
mov ecx, 0xd34dc2a1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x1000bfa4
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1001a510
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1a0], 0x2b579769
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0xed4f850f
jmp 0x1000bfa4
mov eax, dword [ebp - 0x188]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1a0], 0x37538e8
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0xe2980ac3
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0xc4594a2
jmp 0x1000bfa4
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x19c]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x170]
mov byte [eax], cl
mov dword [ebp - 0x1a0], 0x39e27149
jmp 0x1000bfa4
mov eax, dword [ebp - 0x13c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov edx, dword [ebp - 0x140]
sub edx, 0xc60fb0b
add edx, eax
add edx, 0xc60fb0b
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x19c]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, esi
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1001b410
add esp, 0xc
mov dword [ebp - 0x1a0], 0xce758958
jmp 0x1000bfa4
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x130]
mov esi, dword [ebp - 0x130]
add esi, 0xfe84f654
add esi, eax
sub esi, 0xfe84f654
mov ecx, dword [ebp - 0x138]
mov edx, dword [ebp - 0x134]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x170]
mov byte [eax], cl
mov dword [ebp - 0x1a0], 0x2566cbe
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0xe09b5881
jmp 0x1000bfa4
mov dword [ebp - 0x1a0], 0xc1ff3c2d
jmp 0x1000a9c8