Function at 0x10007d00
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x98
mov eax, dword [ebp + 8]
mov dword [ebp - 0x9c], eax
mov eax, dword [0x10087c80]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x98], 0xb54d6683
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xa0], eax
sub eax, 0x850fda18
je 0x10008e5a
jmp 0x10007d44
mov eax, dword [ebp - 0xa0]
sub eax, 0x8b36a4d6
je 0x10008b69
jmp 0x10007d5a
mov eax, dword [ebp - 0xa0]
sub eax, 0x8d991eef
je 0x100092df
jmp 0x10007d70
mov eax, dword [ebp - 0xa0]
sub eax, 0x941258b2
je 0x10008f10
jmp 0x10007d86
mov eax, dword [ebp - 0xa0]
sub eax, 0x961a549c
je 0x10008f87
jmp 0x10007d9c
mov eax, dword [ebp - 0xa0]
sub eax, 0x9b8e874a
je 0x10009247
jmp 0x10007db2
mov eax, dword [ebp - 0xa0]
sub eax, 0x9e954b65
je 0x10008f40
jmp 0x10007dc8
mov eax, dword [ebp - 0xa0]
sub eax, 0x9f3ab7fb
je 0x10008cc8
jmp 0x10007dde
mov eax, dword [ebp - 0xa0]
sub eax, 0x9fc0b449
je 0x100085af
jmp 0x10007df4
mov eax, dword [ebp - 0xa0]
sub eax, 0xa0c05ed4
je 0x100088a4
jmp 0x10007e0a
mov eax, dword [ebp - 0xa0]
sub eax, 0xa81eeb3e
je 0x10008c3c
jmp 0x10007e20
mov eax, dword [ebp - 0xa0]
sub eax, 0xb2f978f0
je 0x10008b18
jmp 0x10007e36
mov eax, dword [ebp - 0xa0]
sub eax, 0xb54d6683
je 0x10008321
jmp 0x10007e4c
mov eax, dword [ebp - 0xa0]
sub eax, 0xc744cb06
je 0x10009127
jmp 0x10007e62
mov eax, dword [ebp - 0xa0]
sub eax, 0xc9e8becf
je 0x10008dd5
jmp 0x10007e78
mov eax, dword [ebp - 0xa0]
sub eax, 0xcd285d73
je 0x10009063
jmp 0x10007e8e
mov eax, dword [ebp - 0xa0]
sub eax, 0xd33fc2f0
je 0x10009270
jmp 0x10007ea4
mov eax, dword [ebp - 0xa0]
sub eax, 0xd96a2794
je 0x1000865a
jmp 0x10007eba
mov eax, dword [ebp - 0xa0]
sub eax, 0xda3be98f
je 0x1000854f
jmp 0x10007ed0
mov eax, dword [ebp - 0xa0]
sub eax, 0xdb035357
je 0x100094d5
jmp 0x10007ee6
mov eax, dword [ebp - 0xa0]
sub eax, 0xdc22d9d9
je 0x10008cff
jmp 0x10007efc
mov eax, dword [ebp - 0xa0]
sub eax, 0xde2c14bd
je 0x100089f0
jmp 0x10007f12
mov eax, dword [ebp - 0xa0]
sub eax, 0xdf916470
je 0x10009339
jmp 0x10007f28
mov eax, dword [ebp - 0xa0]
sub eax, 0xdfbda1d7
je 0x10009484
jmp 0x10007f3e
mov eax, dword [ebp - 0xa0]
sub eax, 0xe2569174
je 0x1000928e
jmp 0x10007f54
mov eax, dword [ebp - 0xa0]
sub eax, 0xe2e0cef3
je 0x10008aa9
jmp 0x10007f6a
mov eax, dword [ebp - 0xa0]
sub eax, 0xe4c8269c
je 0x10008b78
jmp 0x10007f80
mov eax, dword [ebp - 0xa0]
sub eax, 0xeaf027d2
je 0x100090ff
jmp 0x10007f96
mov eax, dword [ebp - 0xa0]
sub eax, 0xed4c2272
je 0x100094ee
jmp 0x10007fac
mov eax, dword [ebp - 0xa0]
sub eax, 0xee2471f4
je 0x1000855e
jmp 0x10007fc2
mov eax, dword [ebp - 0xa0]
sub eax, 0xf09cde5b
je 0x10008419
jmp 0x10007fd8
mov eax, dword [ebp - 0xa0]
sub eax, 0xf3898ca3
je 0x10009328
jmp 0x10007fee
mov eax, dword [ebp - 0xa0]
sub eax, 0xf4235fbe
je 0x10008ef2
jmp 0x10008004
mov eax, dword [ebp - 0xa0]
sub eax, 0xf5a073e0
je 0x100087e1
jmp 0x1000801a
mov eax, dword [ebp - 0xa0]
sub eax, 0xfa012aed
je 0x10008433
jmp 0x10008030
mov eax, dword [ebp - 0xa0]
sub eax, 0xfc88ad3f
je 0x10009078
jmp 0x10008046
mov eax, dword [ebp - 0xa0]
sub eax, 0x504efa3
je 0x10009218
jmp 0x1000805c
mov eax, dword [ebp - 0xa0]
sub eax, 0x8f241e0
je 0x10009472
jmp 0x10008072
mov eax, dword [ebp - 0xa0]
sub eax, 0x90ea30a
je 0x10008973
jmp 0x10008088
mov eax, dword [ebp - 0xa0]
sub eax, 0x97769df
je 0x100084a1
jmp 0x1000809e
mov eax, dword [ebp - 0xa0]
sub eax, 0xb531558
je 0x100086e6
jmp 0x100080b4
mov eax, dword [ebp - 0xa0]
sub eax, 0x12716ef7
je 0x100088ed
jmp 0x100080ca
mov eax, dword [ebp - 0xa0]
sub eax, 0x1301e901
je 0x1000876b
jmp 0x100080e0
mov eax, dword [ebp - 0xa0]
sub eax, 0x147e2bc1
je 0x10008d75
jmp 0x100080f6
mov eax, dword [ebp - 0xa0]
sub eax, 0x14fa2673
je 0x1000940e
jmp 0x1000810c
mov eax, dword [ebp - 0xa0]
sub eax, 0x21a67147
je 0x1000910e
jmp 0x10008122
mov eax, dword [ebp - 0xa0]
sub eax, 0x26792ebc
je 0x10008895
jmp 0x10008138
mov eax, dword [ebp - 0xa0]
sub eax, 0x29c10ce5
je 0x10009227
jmp 0x1000814e
mov eax, dword [ebp - 0xa0]
sub eax, 0x2c681804
je 0x10009458
jmp 0x10008164
mov eax, dword [ebp - 0xa0]
sub eax, 0x2f09b185
je 0x10008678
jmp 0x1000817a
mov eax, dword [ebp - 0xa0]
sub eax, 0x358a8bef
je 0x10008cd7
jmp 0x10008190
mov eax, dword [ebp - 0xa0]
sub eax, 0x38028c69
je 0x10008a92
jmp 0x100081a6
mov eax, dword [ebp - 0xa0]
sub eax, 0x3853a7df
je 0x10009493
jmp 0x100081bc
mov eax, dword [ebp - 0xa0]
sub eax, 0x3e303faa
je 0x10008de4
jmp 0x100081d2
mov eax, dword [ebp - 0xa0]
sub eax, 0x45fb5b91
je 0x100093ff
jmp 0x100081e8
mov eax, dword [ebp - 0xa0]
sub eax, 0x48413a47
je 0x1000840a
jmp 0x100081fe
mov eax, dword [ebp - 0xa0]
sub eax, 0x51e801fc
je 0x10008982
jmp 0x10008214
mov eax, dword [ebp - 0xa0]
sub eax, 0x52153f94
je 0x100093a5
jmp 0x1000822a
mov eax, dword [ebp - 0xa0]
sub eax, 0x58d3e69e
je 0x10008ac7
jmp 0x10008240
mov eax, dword [ebp - 0xa0]
sub eax, 0x5b96b769
je 0x10008ee3
jmp 0x10008256
mov eax, dword [ebp - 0xa0]
sub eax, 0x5f17cb61
je 0x100094c0
jmp 0x1000826c
mov eax, dword [ebp - 0xa0]
sub eax, 0x663f4148
je 0x1000836b
jmp 0x10008282
mov eax, dword [ebp - 0xa0]
sub eax, 0x66fd3568
je 0x1000875c
jmp 0x10008298
mov eax, dword [ebp - 0xa0]
sub eax, 0x6bbf6ff3
je 0x100094ab
jmp 0x100082ae
mov eax, dword [ebp - 0xa0]
sub eax, 0x7337518a
je 0x10008a74
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x8c], eax
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x98], 0x663f4148
jmp 0x100094f8
mov eax, dword [ebp - 0x9c]
push eax
mov ecx, esp
mov dword [ebp - 0x70], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x64], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x60], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x90], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10025ce0
add esp, 0xc
mov eax, dword [ebp - 0x90]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov edx, dword [ebp - 0x88]
mov eax, 0x48413a47
mov ecx, 0xf09cde5b
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov dword [ebp - 0x98], 0xe2569174
jmp 0x100094f8
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x98], 0xfa012aed
jmp 0x100094f8
mov ecx, dword [0x10089154]
mov eax, dword [0x10089150]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdf916470
mov ecx, 0x97769df
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov edx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x58]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x88]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [0x10089154]
mov ecx, dword [0x10089150]
mov edx, eax
add edx, 0x4f9af5ff
sub edx, 1
sub edx, 0x4f9af5ff
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdf916470
mov ecx, 0xda3be98f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov dword [ebp - 0x98], 0xee2471f4
jmp 0x100094f8
mov eax, dword [0x10089154]
mov ecx, dword [0x10089150]
mov edx, eax
add edx, 0x3be0d480
sub edx, 1
sub edx, 0x3be0d480
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x52153f94
mov ecx, 0x9fc0b449
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov eax, dword [ebp - 0x80]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x51], al
mov eax, dword [0x10089154]
mov ecx, dword [0x10089150]
mov edx, eax
add edx, 0x1a2ec41d
sub edx, 1
sub edx, 0x1a2ec41d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x52153f94
mov ecx, 0xd96a2794
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov dl, byte [ebp - 0x51]
mov eax, 0x1301e901
mov ecx, 0x2f09b185
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov ecx, dword [0x10089154]
mov eax, dword [0x10089150]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x45fb5b91
mov ecx, 0xb531558
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov ecx, dword [0x10089154]
mov eax, dword [0x10089150]
mov edx, ecx
sub edx, 0x2230dc93
sub edx, 1
add edx, 0x2230dc93
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x45fb5b91
mov ecx, 0x66fd3568
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov dword [ebp - 0x98], 0xe2569174
jmp 0x100094f8
mov ecx, dword [0x10089154]
mov eax, dword [0x10089150]
mov edx, ecx
add edx, 0xd64dc324
sub edx, 1
sub edx, 0xd64dc324
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x14fa2673
mov ecx, 0xf5a073e0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x50], eax
mov ecx, dword [0x10089154]
mov eax, dword [0x10089150]
mov edx, ecx
sub edx, 0x5d659cb1
sub edx, 1
add edx, 0x5d659cb1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x14fa2673
mov ecx, 0x26792ebc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov dword [ebp - 0x98], 0xa0c05ed4
jmp 0x100094f8
mov eax, dword [0x10089154]
mov ecx, dword [0x10089150]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2c681804
mov ecx, 0x12716ef7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov ecx, dword [0x10089154]
mov eax, dword [0x10089150]
mov edx, ecx
add edx, 0x6ed3bb17
sub edx, 1
sub edx, 0x6ed3bb17
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2c681804
mov ecx, 0x90ea30a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov dword [ebp - 0x98], 0x51e801fc
jmp 0x100094f8
mov ecx, dword [0x10089154]
mov eax, dword [0x10089150]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8f241e0
mov ecx, 0xde2c14bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov eax, dword [ebp - 0x4c]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x45], al
mov ecx, dword [0x10089154]
mov eax, dword [0x10089150]
mov edx, ecx
add edx, 0x24902325
sub edx, 1
sub edx, 0x24902325
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8f241e0
mov ecx, 0x7337518a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x98], 0xe2e0cef3
jmp 0x100094f8
mov eax, dword [ebp - 0x44]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x98], 0x58d3e69e
jmp 0x100094f8
mov eax, dword [0x10089154]
mov ecx, dword [0x10089150]
mov edx, eax
sub edx, 0xea38a72
sub edx, 1
add edx, 0xea38a72
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdfbda1d7
mov ecx, 0xb2f978f0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov eax, dword [0x10089154]
mov ecx, dword [0x10089150]
mov edx, eax
add edx, 0x643b01b5
sub edx, 1
sub edx, 0x643b01b5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdfbda1d7
mov ecx, 0x8b36a4d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov dword [ebp - 0x98], 0xe2569174
jmp 0x100094f8
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov dword [ebp - 0x98], 0x7393f282
jmp 0x100094f8
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x3c], eax
mov ecx, dword [0x10089154]
mov eax, dword [0x10089150]
mov edx, ecx
sub edx, 0x5348f1f7
sub edx, 1
add edx, 0x5348f1f7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3853a7df
mov ecx, 0x9f3ab7fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov dword [ebp - 0x98], 0x358a8bef
jmp 0x100094f8
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov word [eax], 0
mov dword [ebp - 0x98], 0xdc22d9d9
jmp 0x100094f8
mov ecx, dword [0x10089154]
mov eax, dword [0x10089150]
mov edx, ecx
sub edx, 0x6e637d6b
sub edx, 1
add edx, 0x6e637d6b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6bbf6ff3
mov ecx, 0x147e2bc1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov eax, dword [ebp - 0x68]
movzx eax, word [eax]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
add eax, 4
add eax, 2
mov dword [ebp - 0x34], eax
mov eax, dword [0x10089154]
mov ecx, dword [0x10089150]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6bbf6ff3
mov ecx, 0xc9e8becf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov dword [ebp - 0x98], 0x3e303faa
jmp 0x100094f8
mov ecx, dword [0x10089154]
mov eax, dword [0x10089150]
mov edx, ecx
sub edx, 0x5e29610b
sub edx, 1
add edx, 0x5e29610b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5f17cb61
mov ecx, 0x850fda18
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov eax, dword [ebp - 0x34]
movzx ecx, word [eax]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x2d], al
mov ecx, dword [0x10089154]
mov eax, dword [0x10089150]
mov edx, ecx
add edx, 0x5763a615
sub edx, 1
sub edx, 0x5763a615
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5f17cb61
mov ecx, 0x5b96b769
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov dword [ebp - 0x98], 0xf4235fbe
jmp 0x100094f8
mov dl, byte [ebp - 0x2d]
mov eax, 0x29c10ce5
mov ecx, 0x941258b2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
sub eax, 0xb282b509
add eax, 0x18
add eax, 0xb282b509
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x98], 0x9e954b65
jmp 0x100094f8
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x68]
movzx eax, word [eax]
imul eax, eax, 0x28
sub ecx, 0xb4a8d9d7
add ecx, eax
add ecx, 0xb4a8d9d7
mov eax, dword [ebp - 0x64]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x98], 0x961a549c
jmp 0x100094f8
mov ecx, dword [ebp - 0x24]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100338ba
call fcn.10029640
add esp, 8
mov edx, eax
mov eax, 0x7ac8a9c9
mov ecx, 0xeaf027d2
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x98], 0xfc88ad3f
jmp 0x100094f8
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10025e40
add esp, 0xc
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x84]
mov esi, dword [eax]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add esi, 0xe6576cdb
add esi, eax
sub esi, 0xe6576cdb
mov eax, dword [ebp - 0x60]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x5c]
mov byte [eax], cl
mov dword [ebp - 0x98], 0xeaf027d2
jmp 0x100094f8
mov dword [ebp - 0x98], 0x21a67147
jmp 0x100094f8
mov eax, dword [ebp - 0x68]
mov ax, word [eax]
mov word [ebp - 0x14], ax
mov dword [ebp - 0x98], 0xc744cb06
jmp 0x100094f8
mov ax, word [ebp - 0x14]
xor ecx, ecx
sub cx, 1
sub ax, cx
mov word [ebp - 0x12], ax
mov dword [ebp - 0x98], 0x7779e206
jmp 0x100094f8
mov dword [ebp - 0x98], 0xdc22d9d9
jmp 0x100094f8
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x98], 0x9b8e874a
jmp 0x100094f8
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x98], 0xd33fc2f0
jmp 0x100094f8
mov eax, dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x98], 0xe2569174
jmp 0x100094f8
mov eax, dword [0x10089154]
mov ecx, dword [0x10089150]
mov edx, eax
add edx, 0x8d238281
sub edx, 1
sub edx, 0x8d238281
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xed4c2272
mov ecx, 0x8d991eef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov eax, dword [0x10089154]
mov ecx, dword [0x10089150]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xed4c2272
mov ecx, 0xf3898ca3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100094f8
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10024f40
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov edx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x58]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x88]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x98], 0x97769df
jmp 0x100094f8
mov eax, dword [ebp - 0x80]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x98], 0x9fc0b449
jmp 0x100094f8
mov dword [ebp - 0x98], 0xb531558
jmp 0x100094f8
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x98], 0xf5a073e0
jmp 0x100094f8
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x98], 0x12716ef7
jmp 0x100094f8
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x98], 0xde2c14bd
jmp 0x100094f8
mov dword [ebp - 0x98], 0xb2f978f0
jmp 0x100094f8
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x98], 0xa81eeb3e
jmp 0x100094f8
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x98], 0x147e2bc1
jmp 0x100094f8
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x98], 0x850fda18
jmp 0x100094f8
mov eax, dword [ebp - 0x68]
mov cx, word [ebp - 0x12]
mov word [eax], cx
mov dword [ebp - 0x98], 0x77cae2f8
jmp 0x100094f8
mov dword [ebp - 0x98], 0x8d991eef
jmp 0x10007d28