Function at 0x10008c30
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x9c
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x10083880]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10084d5c]
mov eax, dword [0x10084d58]
mov edx, ecx
sub edx, 0xe2a48bbd
sub edx, 1
add edx, 0xe2a48bbd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x9a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x99], al
mov dword [ebp - 0xa0], 0x985edb47
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
sub eax, 0x8cf54248
je 0x10009df5
jmp 0x10008cb4
mov eax, dword [ebp - 0xa8]
sub eax, 0x95b1544d
je 0x10009c97
jmp 0x10008cca
mov eax, dword [ebp - 0xa8]
sub eax, 0x95c41660
je 0x10009e43
jmp 0x10008ce0
mov eax, dword [ebp - 0xa8]
sub eax, 0x985edb47
je 0x1000919f
jmp 0x10008cf6
mov eax, dword [ebp - 0xa8]
sub eax, 0x9b3e0ec3
je 0x10009cb0
jmp 0x10008d0c
mov eax, dword [ebp - 0xa8]
sub eax, 0xa5ad4ec8
je 0x10009862
jmp 0x10008d22
mov eax, dword [ebp - 0xa8]
sub eax, 0xaa1cef2a
je 0x10009cdc
jmp 0x10008d38
mov eax, dword [ebp - 0xa8]
sub eax, 0xac52005b
je 0x10009c79
jmp 0x10008d4e
mov eax, dword [ebp - 0xa8]
sub eax, 0xacf2007b
je 0x100097cd
jmp 0x10008d64
mov eax, dword [ebp - 0xa8]
sub eax, 0xb0d20a92
je 0x10009c88
jmp 0x10008d7a
mov eax, dword [ebp - 0xa8]
sub eax, 0xb3bf3618
je 0x10009786
jmp 0x10008d90
mov eax, dword [ebp - 0xa8]
sub eax, 0xb7444283
je 0x10009732
jmp 0x10008da6
mov eax, dword [ebp - 0xa8]
sub eax, 0xb8d077f5
je 0x100097dc
jmp 0x10008dbc
mov eax, dword [ebp - 0xa8]
sub eax, 0xb9c83055
je 0x100097f4
jmp 0x10008dd2
mov eax, dword [ebp - 0xa8]
sub eax, 0xba4b4f1e
je 0x100092d0
jmp 0x10008de8
mov eax, dword [ebp - 0xa8]
sub eax, 0xbaf71faf
je 0x10009278
jmp 0x10008dfe
mov eax, dword [ebp - 0xa8]
sub eax, 0xbc0d445f
je 0x100095a6
jmp 0x10008e14
mov eax, dword [ebp - 0xa8]
sub eax, 0xbe2a5721
je 0x10009526
jmp 0x10008e2a
mov eax, dword [ebp - 0xa8]
sub eax, 0xc1917500
je 0x100096df
jmp 0x10008e40
mov eax, dword [ebp - 0xa8]
sub eax, 0xc2b7d599
je 0x10009741
jmp 0x10008e56
mov eax, dword [ebp - 0xa8]
sub eax, 0xcb3e933b
je 0x10009ea0
jmp 0x10008e6c
mov eax, dword [ebp - 0xa8]
sub eax, 0xcbf7b4e0
je 0x100094b8
jmp 0x10008e82
mov eax, dword [ebp - 0xa8]
sub eax, 0xd3744274
je 0x10009939
jmp 0x10008e98
mov eax, dword [ebp - 0xa8]
sub eax, 0xd8baef7a
je 0x1000968e
jmp 0x10008eae
mov eax, dword [ebp - 0xa8]
sub eax, 0xda648f5b
je 0x10009e64
jmp 0x10008ec4
mov eax, dword [ebp - 0xa8]
sub eax, 0xda77677b
je 0x10009e76
jmp 0x10008eda
mov eax, dword [ebp - 0xa8]
sub eax, 0xdffe171a
je 0x10009ceb
jmp 0x10008ef0
mov eax, dword [ebp - 0xa8]
sub eax, 0xe03622fd
je 0x10009a7f
jmp 0x10008f06
mov eax, dword [ebp - 0xa8]
sub eax, 0xe20e4d74
je 0x100099c5
jmp 0x10008f1c
mov eax, dword [ebp - 0xa8]
sub eax, 0xe2f1f7d3
je 0x100098e0
jmp 0x10008f32
mov eax, dword [ebp - 0xa8]
sub eax, 0xe655b1a4
je 0x10009336
jmp 0x10008f48
mov eax, dword [ebp - 0xa8]
sub eax, 0xe66b0f28
je 0x100095c4
jmp 0x10008f5e
mov eax, dword [ebp - 0xa8]
sub eax, 0xf6d7c071
je 0x100093d4
jmp 0x10008f74
mov eax, dword [ebp - 0xa8]
sub eax, 0x9ac909e
je 0x10009e25
jmp 0x10008f8a
mov eax, dword [ebp - 0xa8]
sub eax, 0xd9d6405
je 0x10009de6
jmp 0x10008fa0
mov eax, dword [ebp - 0xa8]
sub eax, 0xee28827
je 0x10009d1c
jmp 0x10008fb6
mov eax, dword [ebp - 0xa8]
sub eax, 0x16d3dfc5
je 0x10009620
jmp 0x10008fcc
mov eax, dword [ebp - 0xa8]
sub eax, 0x187f020f
je 0x10009e13
jmp 0x10008fe2
mov eax, dword [ebp - 0xa8]
sub eax, 0x1b1a6936
je 0x10009974
jmp 0x10008ff8
mov eax, dword [ebp - 0xa8]
sub eax, 0x21d40a96
je 0x10009f22
jmp 0x1000900e
mov eax, dword [ebp - 0xa8]
sub eax, 0x23eef563
je 0x100093f9
jmp 0x10009024
mov eax, dword [ebp - 0xa8]
sub eax, 0x253629d8
je 0x10009a61
jmp 0x1000903a
mov eax, dword [ebp - 0xa8]
sub eax, 0x253935a9
je 0x10009913
jmp 0x10009050
mov eax, dword [ebp - 0xa8]
sub eax, 0x2572e9e0
je 0x10009287
jmp 0x10009066
mov eax, dword [ebp - 0xa8]
sub eax, 0x2a56638e
je 0x10009b47
jmp 0x1000907c
mov eax, dword [ebp - 0xa8]
sub eax, 0x2b5d8db9
je 0x100091ce
jmp 0x10009092
mov eax, dword [ebp - 0xa8]
sub eax, 0x300e4489
je 0x100093c5
jmp 0x100090a8
mov eax, dword [ebp - 0xa8]
sub eax, 0x31e06119
je 0x100095d3
jmp 0x100090be
mov eax, dword [ebp - 0xa8]
sub eax, 0x3e8b05c0
je 0x100096fd
jmp 0x100090d4
mov eax, dword [ebp - 0xa8]
sub eax, 0x561f02d9
je 0x10009b11
jmp 0x100090ea
mov eax, dword [ebp - 0xa8]
sub eax, 0x5623bcba
je 0x10009d8a
jmp 0x10009100
mov eax, dword [ebp - 0xa8]
sub eax, 0x5b50ff5d
je 0x100098ef
jmp 0x10009116
mov eax, dword [ebp - 0xa8]
sub eax, 0x5e2c8b98
je 0x10009327
jmp 0x1000912c
mov eax, dword [ebp - 0xa8]
sub eax, 0x657d472d
je 0x10009645
jmp 0x10009142
mov eax, dword [ebp - 0xa8]
sub eax, 0x6884c5b6
je 0x10009e55
jmp 0x10009158
mov eax, dword [ebp - 0xa8]
sub eax, 0x6fca6c2e
je 0x10009bbd
jmp 0x1000916e
mov eax, dword [ebp - 0xa8]
sub eax, 0x7627a0d4
je 0x10009714
jmp 0x10009184
mov eax, dword [ebp - 0xa8]
sub eax, 0x7ad973fe
je 0x10009e34
jmp 0x1000919a
jmp 0x10009f32
mov al, byte [ebp - 0x9a]
mov cl, byte [ebp - 0x99]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9ac909e
mov ecx, 0x2b5d8db9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
push eax
mov eax, esp
mov dword [ebp - 0x94], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
mov eax, dword [0x10084d5c]
mov ecx, dword [0x10084d58]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9ac909e
mov ecx, 0xbaf71faf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov dword [ebp - 0xa0], 0x2572e9e0
jmp 0x10009f32
mov eax, dword [0x10084d5c]
mov ecx, dword [0x10084d58]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7ad973fe
mov ecx, 0xba4b4f1e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
mov eax, dword [0x10084d5c]
mov ecx, dword [0x10084d58]
mov edx, eax
add edx, 0x2f0d82ff
sub edx, 1
sub edx, 0x2f0d82ff
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7ad973fe
mov ecx, 0x5e2c8b98
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov dword [ebp - 0xa0], 0xe655b1a4
jmp 0x10009f32
mov ecx, dword [ebp - 0xa4]
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x98]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10023630
add esp, 0xc
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x8c]
mov eax, 0x300e4489
mov ecx, 0xf6d7c071
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov dword [ebp - 0xa0], 0x187f020f
jmp 0x10009f32
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0xa0], 0x23eef563
jmp 0x10009f32
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x84]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xa0], 0xcbf7b4e0
jmp 0x10009f32
mov ecx, dword [0x10084d5c]
mov eax, dword [0x10084d58]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x95c41660
mov ecx, 0xbe2a5721
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov eax, dword [ebp - 0x54]
mov ecx, 0xffffffff
cmp eax, ecx
sete al
and al, 1
mov byte [ebp - 0x4d], al
mov ecx, dword [0x10084d5c]
mov eax, dword [0x10084d58]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x95c41660
mov ecx, 0xbc0d445f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov dl, byte [ebp - 0x4d]
mov eax, 0x31e06119
mov ecx, 0xe66b0f28
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov dword [ebp - 0xa0], 0x187f020f
jmp 0x10009f32
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0xa0], 0x16d3dfc5
jmp 0x10009f32
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x45], al
mov dword [ebp - 0xa0], 0x657d472d
jmp 0x10009f32
mov eax, dword [0x10084d5c]
mov ecx, dword [0x10084d58]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6884c5b6
mov ecx, 0xd8baef7a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov eax, dword [0x10084d5c]
mov ecx, dword [0x10084d58]
mov edx, eax
add edx, 0xcfbd1ad8
sub edx, 1
sub edx, 0xcfbd1ad8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6884c5b6
mov ecx, 0xc1917500
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov dl, byte [ebp - 0x45]
mov eax, 0x3e8b05c0
mov ecx, 0xc2b7d599
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xa0], 0x7627a0d4
jmp 0x10009f32
mov eax, dword [ebp - 0x44]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xb7444283
jmp 0x10009f32
mov dword [ebp - 0xa0], 0x187f020f
jmp 0x10009f32
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xa0], 0xb3bf3618
jmp 0x10009f32
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x40]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov word [eax], 0
mov dword [ebp - 0xa0], 0xacf2007b
jmp 0x10009f32
mov dword [ebp - 0xa0], 0xb8d077f5
jmp 0x10009f32
mov eax, dword [ebp - 0x6c]
movzx eax, word [eax]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0xa0], 0xb9c83055
jmp 0x10009f32
mov ecx, dword [0x10084d5c]
mov eax, dword [0x10084d58]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xda648f5b
mov ecx, 0xa5ad4ec8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov ecx, dword [0x10084d5c]
mov eax, dword [0x10084d58]
mov edx, ecx
sub edx, 0x22bff7ad
sub edx, 1
add edx, 0x22bff7ad
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xda648f5b
mov ecx, 0xe2f1f7d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov dword [ebp - 0xa0], 0x5b50ff5d
jmp 0x10009f32
mov eax, dword [ebp - 0x38]
movzx esi, word [eax + 6]
mov edx, dword [ebp - 0x3c]
mov eax, 0xdffe171a
mov ecx, 0x253935a9
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, 0x18
sub eax, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xa0], 0xd3744274
jmp 0x10009f32
mov eax, dword [ebp - 0x30]
movzx edx, word [eax + 0x14]
mov ecx, dword [ebp - 0x34]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x6c]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov dword [ebp - 0xa0], 0x1b1a6936
jmp 0x10009f32
mov eax, dword [0x10084d5c]
mov ecx, dword [0x10084d58]
mov edx, eax
add edx, 0x35e637ee
sub edx, 1
sub edx, 0x35e637ee
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xda77677b
mov ecx, 0xe20e4d74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100307da
call fcn.10026f90
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x29], al
mov ecx, dword [0x10084d5c]
mov eax, dword [0x10084d58]
mov edx, ecx
sub edx, 0xdffe90a3
sub edx, 1
add edx, 0xdffe90a3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xda77677b
mov ecx, 0x253629d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov dl, byte [ebp - 0x29]
mov eax, 0xe03622fd
mov ecx, 0xb0d20a92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov eax, dword [ebp - 0x64]
mov dword [eax], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x88]
mov edx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x4fb24dc
add edx, eax
sub edx, 0x4fb24dc
mov eax, dword [ebp - 0x64]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
add eax, 0x1c340458
add eax, ecx
sub eax, 0x1c340458
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xa0], 0x561f02d9
jmp 0x10009f32
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa0], 0x2a56638e
jmp 0x10009f32
mov ecx, dword [0x10084d5c]
mov eax, dword [0x10084d58]
mov edx, ecx
add edx, 0xb99dfdc7
sub edx, 1
sub edx, 0xb99dfdc7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcb3e933b
mov ecx, 0x6fca6c2e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10023790
add esp, 0xc
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x88]
mov esi, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, edi
sub esi, eax
mov eax, dword [ebp - 0x64]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov eax, dword [0x10084d5c]
mov ecx, dword [0x10084d58]
mov edx, eax
sub edx, 0xbd99c611
sub edx, 1
add edx, 0xbd99c611
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcb3e933b
mov ecx, 0xac52005b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov dword [ebp - 0xa0], 0xb0d20a92
jmp 0x10009f32
mov dword [ebp - 0xa0], 0x95b1544d
jmp 0x10009f32
mov eax, dword [ebp - 0x6c]
mov ax, word [eax]
mov word [ebp - 0x16], ax
mov dword [ebp - 0xa0], 0x9b3e0ec3
jmp 0x10009f32
mov cx, word [ebp - 0x16]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x6c]
mov word [eax], cx
mov dword [ebp - 0xa0], 0xaa1cef2a
jmp 0x10009f32
mov dword [ebp - 0xa0], 0xb8d077f5
jmp 0x10009f32
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xee28827
jmp 0x10009f32
mov ecx, dword [0x10084d5c]
mov eax, dword [0x10084d58]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x21d40a96
mov ecx, 0x5623bcba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov eax, dword [0x10084d5c]
mov ecx, dword [0x10084d58]
mov edx, eax
sub edx, 0x3ce06392
sub edx, 1
add edx, 0x3ce06392
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x21d40a96
mov ecx, 0xd9d6405
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10009f32
mov dword [ebp - 0xa0], 0x8cf54248
jmp 0x10009f32
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0x187f020f
jmp 0x10009f32
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10022890
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0xa0], 0x2b5d8db9
jmp 0x10009f32
mov dword [ebp - 0xa0], 0xba4b4f1e
jmp 0x10009f32
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xa0], 0xbe2a5721
jmp 0x10009f32
mov dword [ebp - 0xa0], 0xd8baef7a
jmp 0x10009f32
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xa0], 0xa5ad4ec8
jmp 0x10009f32
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100307da
call fcn.10026f90
add esp, 8
mov dword [ebp - 0xa0], 0xe20e4d74
jmp 0x10009f32
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10023790
add esp, 0xc
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x88]
mov esi, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add esi, 0x5b860916
add esi, eax
sub esi, 0x5b860916
mov eax, dword [ebp - 0x64]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov dword [ebp - 0xa0], 0x6fca6c2e
jmp 0x10009f32
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xa0], 0x5623bcba
jmp 0x10008c98