Function at 0x100094e0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x98
mov eax, dword [ebp + 8]
mov dword [ebp - 0x9c], eax
mov eax, dword [0x10086c80]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x98], 0xfa123c5e
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xa0], eax
sub eax, 0x84f88c43
je 0x1000a9ef
jmp 0x10009524
mov eax, dword [ebp - 0xa0]
sub eax, 0x8e89cf33
je 0x1000a9b3
jmp 0x1000953a
mov eax, dword [ebp - 0xa0]
sub eax, 0x906539fa
je 0x1000b179
jmp 0x10009550
mov eax, dword [ebp - 0xa0]
sub eax, 0x918245fd
je 0x1000a66b
jmp 0x10009566
mov eax, dword [ebp - 0xa0]
sub eax, 0x91a6a412
je 0x1000addd
jmp 0x1000957c
mov eax, dword [ebp - 0xa0]
sub eax, 0x93f0c3b3
je 0x1000b0e8
jmp 0x10009592
mov eax, dword [ebp - 0xa0]
sub eax, 0x98001230
je 0x1000aed3
jmp 0x100095a8
mov eax, dword [ebp - 0xa0]
sub eax, 0x99aa9d68
je 0x1000a4f8
jmp 0x100095be
mov eax, dword [ebp - 0xa0]
sub eax, 0x9b6ac69e
je 0x10009d57
jmp 0x100095d4
mov eax, dword [ebp - 0xa0]
sub eax, 0xa4762334
je 0x10009e4d
jmp 0x100095ea
mov eax, dword [ebp - 0xa0]
sub eax, 0xa51d0705
je 0x10009f69
jmp 0x10009600
mov eax, dword [ebp - 0xa0]
sub eax, 0xa6ff2fbc
je 0x1000a29b
jmp 0x10009616
mov eax, dword [ebp - 0xa0]
sub eax, 0xad2719a9
je 0x1000ad14
jmp 0x1000962c
mov eax, dword [ebp - 0xa0]
sub eax, 0xb4ac4916
je 0x1000a0e4
jmp 0x10009642
mov eax, dword [ebp - 0xa0]
sub eax, 0xba6eaf37
je 0x1000a20a
jmp 0x10009658
mov eax, dword [ebp - 0xa0]
sub eax, 0xbe6dc0a6
je 0x1000b158
jmp 0x1000966e
mov eax, dword [ebp - 0xa0]
sub eax, 0xbef5d20c
je 0x1000b129
jmp 0x10009684
mov eax, dword [ebp - 0xa0]
sub eax, 0xc5da5bc0
je 0x10009fc1
jmp 0x1000969a
mov eax, dword [ebp - 0xa0]
sub eax, 0xc77921ed
je 0x10009ce1
jmp 0x100096b0
mov eax, dword [ebp - 0xa0]
sub eax, 0xca32a91e
je 0x1000a2df
jmp 0x100096c6
mov eax, dword [ebp - 0xa0]
sub eax, 0xcb3181c9
je 0x1000a19c
jmp 0x100096dc
mov eax, dword [ebp - 0xa0]
sub eax, 0xcc89d1af
je 0x10009ef0
jmp 0x100096f2
mov eax, dword [ebp - 0xa0]
sub eax, 0xce6a0659
je 0x1000a995
jmp 0x10009708
mov eax, dword [ebp - 0xa0]
sub eax, 0xd51ae112
je 0x1000abb1
jmp 0x1000971e
mov eax, dword [ebp - 0xa0]
sub eax, 0xdf487607
je 0x10009cd2
jmp 0x10009734
mov eax, dword [ebp - 0xa0]
sub eax, 0xe0de1c9d
je 0x1000a381
jmp 0x1000974a
mov eax, dword [ebp - 0xa0]
sub eax, 0xe17b7557
je 0x1000aff9
jmp 0x10009760
mov eax, dword [ebp - 0xa0]
sub eax, 0xe5068ad1
je 0x1000a2aa
jmp 0x10009776
mov eax, dword [ebp - 0xa0]
sub eax, 0xe87e0b43
je 0x1000a67a
jmp 0x1000978c
mov eax, dword [ebp - 0xa0]
sub eax, 0xe963cf89
je 0x10009e7a
jmp 0x100097a2
mov eax, dword [ebp - 0xa0]
sub eax, 0xeaaaff79
je 0x1000a882
jmp 0x100097b8
mov eax, dword [ebp - 0xa0]
sub eax, 0xec151f94
je 0x1000a2fd
jmp 0x100097ce
mov eax, dword [ebp - 0xa0]
sub eax, 0xf0e6556b
je 0x1000b05d
jmp 0x100097e4
mov eax, dword [ebp - 0xa0]
sub eax, 0xf38289f2
je 0x1000aec4
jmp 0x100097fa
mov eax, dword [ebp - 0xa0]
sub eax, 0xf39d39ee
je 0x1000af35
jmp 0x10009810
mov eax, dword [ebp - 0xa0]
sub eax, 0xf3a8e45f
je 0x1000aeb3
jmp 0x10009826
mov eax, dword [ebp - 0xa0]
sub eax, 0xfa123c5e
je 0x10009c09
jmp 0x1000983c
mov eax, dword [ebp - 0xa0]
sub eax, 0xfc87c693
je 0x1000ae62
jmp 0x10009852
mov eax, dword [ebp - 0xa0]
sub eax, 0xfe08d3c0
je 0x10009f78
jmp 0x10009868
mov eax, dword [ebp - 0xa0]
sub eax, 0xfe3a7cbe
je 0x1000a754
jmp 0x1000987e
mov eax, dword [ebp - 0xa0]
sub eax, 0x3a48e44
je 0x1000a8ff
jmp 0x10009894
mov eax, dword [ebp - 0xa0]
sub eax, 0x925abcb
je 0x1000b0b8
jmp 0x100098aa
mov eax, dword [ebp - 0xa0]
sub eax, 0xaf98fec
je 0x1000abf4
jmp 0x100098c0
mov eax, dword [ebp - 0xa0]
sub eax, 0x11daed71
je 0x1000af6e
jmp 0x100098d6
mov eax, dword [ebp - 0xa0]
sub eax, 0x132d80ab
je 0x1000aad4
jmp 0x100098ec
mov eax, dword [ebp - 0xa0]
sub eax, 0x1757ac51
je 0x1000ab4a
jmp 0x10009902
mov eax, dword [ebp - 0xa0]
sub eax, 0x1799dd13
je 0x1000aba2
jmp 0x10009918
mov eax, dword [ebp - 0xa0]
sub eax, 0x18473eb6
je 0x1000a603
jmp 0x1000992e
mov eax, dword [ebp - 0xa0]
sub eax, 0x1a2cd81f
je 0x10009e6b
jmp 0x10009944
mov eax, dword [ebp - 0xa0]
sub eax, 0x1d238a86
je 0x1000a57e
jmp 0x1000995a
mov eax, dword [ebp - 0xa0]
sub eax, 0x20a0dfe1
je 0x1000a30c
jmp 0x10009970
mov eax, dword [ebp - 0xa0]
sub eax, 0x22fc9611
je 0x1000a0f3
jmp 0x10009986
mov eax, dword [ebp - 0xa0]
sub eax, 0x25a3b8ce
je 0x1000ab93
jmp 0x1000999c
mov eax, dword [ebp - 0xa0]
sub eax, 0x2a984f5f
je 0x1000b06f
jmp 0x100099b2
mov eax, dword [ebp - 0xa0]
sub eax, 0x2b468593
je 0x1000ad05
jmp 0x100099c8
mov eax, dword [ebp - 0xa0]
sub eax, 0x31508f3d
je 0x1000ac2d
jmp 0x100099de
mov eax, dword [ebp - 0xa0]
sub eax, 0x32969faa
je 0x1000aca3
jmp 0x100099f4
mov eax, dword [ebp - 0xa0]
sub eax, 0x33b93afd
je 0x10009c5a
jmp 0x10009a0a
mov eax, dword [ebp - 0xa0]
sub eax, 0x35024018
je 0x1000abca
jmp 0x10009a20
mov eax, dword [ebp - 0xa0]
sub eax, 0x39e320a3
je 0x1000a763
jmp 0x10009a36
mov eax, dword [ebp - 0xa0]
sub eax, 0x3a3944b3
je 0x1000a801
jmp 0x10009a4c
mov eax, dword [ebp - 0xa0]
sub eax, 0x3a4e2975
je 0x1000a0b3
jmp 0x10009a62
mov eax, dword [ebp - 0xa0]
sub eax, 0x3b9c8c89
je 0x1000a18d
jmp 0x10009a78
mov eax, dword [ebp - 0xa0]
sub eax, 0x3fb24055
je 0x1000a13c
jmp 0x10009a8e
mov eax, dword [ebp - 0xa0]
sub eax, 0x3ff595cb
je 0x1000a0c2
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
mov edx, eax
sub edx, 0xc7252b34
sub edx, 1
add edx, 0xc7252b34
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf38289f2
mov ecx, 0x33b93afd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf38289f2
mov ecx, 0xdf487607
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0xc77921ed
jmp 0x1000b183
mov ecx, dword [0x10088174]
mov eax, dword [0x10088170]
mov edx, ecx
add edx, 0x78616e1c
sub edx, 1
sub edx, 0x78616e1c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x98001230
mov ecx, 0x9b6ac69e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov eax, dword [ebp - 0x9c]
push eax
mov ecx, esp
mov dword [ebp - 0x70], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x64], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x8c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10026c20
add esp, 0xc
mov eax, dword [ebp - 0x8c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
setne al
and al, 1
mov byte [ebp - 0x59], al
mov ecx, dword [0x10088174]
mov eax, dword [0x10088170]
mov edx, ecx
sub edx, 0x65b32710
sub edx, 1
add edx, 0x65b32710
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x98001230
mov ecx, 0xa4762334
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dl, byte [ebp - 0x59]
mov eax, 0x1a2cd81f
mov ecx, 0xe963cf89
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0x58d3d1f4
jmp 0x1000b183
mov ecx, dword [0x10088174]
mov eax, dword [0x10088170]
mov edx, ecx
sub edx, 0xd0c723f2
sub edx, 1
add edx, 0xd0c723f2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf39d39ee
mov ecx, 0xcc89d1af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
lea eax, [ebp - 0x18]
mov dword [ebp - 0x58], eax
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf39d39ee
mov ecx, 0xa51d0705
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0xfe08d3c0
jmp 0x1000b183
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x11daed71
mov ecx, 0xc5da5bc0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x94]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x84]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov ecx, dword [0x10088174]
mov eax, dword [0x10088170]
mov edx, ecx
sub edx, 0x37493051
sub edx, 1
add edx, 0x37493051
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x11daed71
mov ecx, 0x3a4e2975
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0x3ff595cb
jmp 0x1000b183
mov dword [ebp - 0x98], 0x58d3d1f4
jmp 0x1000b183
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe17b7557
mov ecx, 0x3fb24055
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe17b7557
mov ecx, 0x3b9c8c89
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0xcb3181c9
jmp 0x1000b183
mov ecx, dword [0x10088174]
mov eax, dword [0x10088170]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x69724836
mov ecx, 0xba6eaf37
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov eax, dword [ebp - 0x54]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x69724836
mov ecx, 0xa6ff2fbc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0xe5068ad1
jmp 0x1000b183
mov edx, dword [ebp - 0x50]
mov eax, 0x68055a63
mov ecx, 0x20a0dfe1
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x98], 0xec151f94
jmp 0x1000b183
mov dword [ebp - 0x98], 0x58d3d1f4
jmp 0x1000b183
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x3c]
add eax, 0xf2d204f7
add eax, ecx
sub eax, 0xf2d204f7
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x98], 0xe0de1c9d
jmp 0x1000b183
mov ecx, dword [0x10088174]
mov eax, dword [0x10088170]
mov edx, ecx
add edx, 0xe3e33b40
sub edx, 1
sub edx, 0xe3e33b40
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf0e6556b
mov ecx, 0x4926e7ed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov word [eax], 0
mov ecx, dword [0x10088174]
mov eax, dword [0x10088170]
mov edx, ecx
add edx, 0x4039db6d
sub edx, 1
sub edx, 0x4039db6d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2a984f5f
mov ecx, 0x1d238a86
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0x7a62de4d
jmp 0x1000b183
mov eax, dword [ebp - 0x6c]
movzx eax, word [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
add eax, 4
add eax, 2
mov dword [ebp - 0x3c], eax
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
mov edx, eax
sub edx, 0x6f927e5a
sub edx, 1
add edx, 0x6f927e5a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x59b662c5
mov ecx, 0x918245fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0xe87e0b43
jmp 0x1000b183
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
mov edx, eax
sub edx, 0xf0b24f5e
sub edx, 1
add edx, 0xf0b24f5e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x79ae6426
mov ecx, 0x42cafda0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0x39e320a3
jmp 0x1000b183
mov dl, byte [ebp - 0x35]
mov eax, 0x7d0422fd
mov ecx, 0x67d009bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov eax, dword [ebp - 0x30]
movzx edx, word [eax + 0x10]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x2c], eax
mov ecx, dword [0x10088174]
mov eax, dword [0x10088170]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x925abcb
mov ecx, 0xeaaaff79
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0x43d91d82
jmp 0x1000b183
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x6c]
movzx eax, word [eax]
imul eax, eax, 0x28
add ecx, 0xe865a7f8
add ecx, eax
sub ecx, 0xe865a7f8
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100347f2
call fcn.1002a580
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x25], al
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
mov edx, eax
add edx, 0xd182032d
sub edx, 1
sub edx, 0xd182032d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x93f0c3b3
mov ecx, 0xce6a0659
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dl, byte [ebp - 0x25]
mov eax, 0x8e89cf33
mov ecx, 0x1799dd13
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov eax, dword [ebp - 0x64]
mov dword [eax], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x98], 0x84f88c43
jmp 0x1000b183
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x24]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov eax, dword [ebp - 0x88]
mov edx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0xbc82f94b
add edx, eax
add edx, 0xbc82f94b
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10026d80
add esp, 0xc
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x88]
mov esi, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub esi, 0x8b463651
add esi, eax
add esi, 0x8b463651
mov eax, dword [ebp - 0x64]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov dword [ebp - 0x98], 0x132d80ab
jmp 0x1000b183
mov ecx, dword [0x10088174]
mov eax, dword [0x10088170]
mov edx, ecx
sub edx, 0xb0b26dbd
sub edx, 1
add edx, 0xb0b26dbd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbef5d20c
mov ecx, 0x1757ac51
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbef5d20c
mov ecx, 0x25a3b8ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0x1799dd13
jmp 0x1000b183
mov dword [ebp - 0x98], 0xd51ae112
jmp 0x1000b183
mov eax, dword [ebp - 0x6c]
mov ax, word [eax]
mov word [ebp - 0x1c], ax
mov dword [ebp - 0x98], 0x35024018
jmp 0x1000b183
mov ax, word [ebp - 0x1c]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x1a], ax
mov dword [ebp - 0x98], 0xaf98fec
jmp 0x1000b183
mov eax, dword [ebp - 0x6c]
mov cx, word [ebp - 0x1a]
mov word [eax], cx
mov dword [ebp - 0x98], 0x7a62de4d
jmp 0x1000b183
mov ecx, dword [0x10088174]
mov eax, dword [0x10088170]
mov edx, ecx
add edx, 0xb3ee19dc
sub edx, 1
sub edx, 0xb3ee19dc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x61d7935e
mov ecx, 0x32969faa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
mov edx, eax
add edx, 0x4318bf5c
sub edx, 1
sub edx, 0x4318bf5c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x61d7935e
mov ecx, 0x2b468593
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0xad2719a9
jmp 0x1000b183
mov ecx, dword [0x10088174]
mov eax, dword [0x10088170]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbe6dc0a6
mov ecx, 0x5d83d0b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov dword [ebp - 0x98], 0x58d3d1f4
jmp 0x1000b183
mov eax, dword [0x10088174]
mov ecx, dword [0x10088170]
mov edx, eax
add edx, 0x788d1a12
sub edx, 1
sub edx, 0x788d1a12
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x906539fa
mov ecx, 0xf3a8e45f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x1000b183
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10025e80
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x98], 0x33b93afd
jmp 0x1000b183
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x8c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10026c20
add esp, 0xc
mov eax, dword [ebp - 0x8c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x98], 0x9b6ac69e
jmp 0x1000b183
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov dword [ebp - 0x98], 0xcc89d1af
jmp 0x1000b183
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x94]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x84]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov dword [ebp - 0x98], 0xc5da5bc0
jmp 0x1000b183
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x98], 0x3fb24055
jmp 0x1000b183
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x98], 0x4926e7ed
jmp 0x1000b183
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov word [eax], 0
mov dword [ebp - 0x98], 0x99aa9d68
jmp 0x1000b183
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x98], 0x3a3944b3
jmp 0x1000b183
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x6c]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100347f2
call fcn.1002a580
add esp, 8
mov dword [ebp - 0x98], 0x3a48e44
jmp 0x1000b183
mov dword [ebp - 0x98], 0x1757ac51
jmp 0x1000b183
mov eax, dword [ebp - 0x90]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x98], 0x5d83d0b9
jmp 0x1000b183
mov dword [ebp - 0x98], 0xfc87c693
jmp 0x10009508