Function at 0x1000b440
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xa0
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x10095280]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xa0], 0x5595b33d
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
sub eax, 0x85e07ad8
je 0x1000c5c3
jmp 0x1000b484
mov eax, dword [ebp - 0xa8]
sub eax, 0x8644ecd8
je 0x1000c65a
jmp 0x1000b49a
mov eax, dword [ebp - 0xa8]
sub eax, 0x8ce596f6
je 0x1000c0c6
jmp 0x1000b4b0
mov eax, dword [ebp - 0xa8]
sub eax, 0x903e13d8
je 0x1000bf46
jmp 0x1000b4c6
mov eax, dword [ebp - 0xa8]
sub eax, 0x92e719cb
je 0x1000bbe6
jmp 0x1000b4dc
mov eax, dword [ebp - 0xa8]
sub eax, 0x94b781ee
je 0x1000c7ee
jmp 0x1000b4f2
mov eax, dword [ebp - 0xa8]
sub eax, 0x956be113
je 0x1000c02e
jmp 0x1000b508
mov eax, dword [ebp - 0xa8]
sub eax, 0x99445146
je 0x1000c505
jmp 0x1000b51e
mov eax, dword [ebp - 0xa8]
sub eax, 0x9c5a020a
je 0x1000bcb2
jmp 0x1000b534
mov eax, dword [ebp - 0xa8]
sub eax, 0xa09ec857
je 0x1000c956
jmp 0x1000b54a
mov eax, dword [ebp - 0xa8]
sub eax, 0xa1acc0a2
je 0x1000c01f
jmp 0x1000b560
mov eax, dword [ebp - 0xa8]
sub eax, 0xa4965aa4
je 0x1000befd
jmp 0x1000b576
mov eax, dword [ebp - 0xa8]
sub eax, 0xabf7aae2
je 0x1000c932
jmp 0x1000b58c
mov eax, dword [ebp - 0xa8]
sub eax, 0xb06327c9
je 0x1000be2f
jmp 0x1000b5a2
mov eax, dword [ebp - 0xa8]
sub eax, 0xb29ee4c1
je 0x1000c86e
jmp 0x1000b5b8
mov eax, dword [ebp - 0xa8]
sub eax, 0xbb8435b9
je 0x1000c365
jmp 0x1000b5ce
mov eax, dword [ebp - 0xa8]
sub eax, 0xc282ef1c
je 0x1000c4dd
jmp 0x1000b5e4
mov eax, dword [ebp - 0xa8]
sub eax, 0xc41d5709
je 0x1000c140
jmp 0x1000b5fa
mov eax, dword [ebp - 0xa8]
sub eax, 0xcf3c96da
je 0x1000c6c5
jmp 0x1000b610
mov eax, dword [ebp - 0xa8]
sub eax, 0xcfc6c8c4
je 0x1000bdd6
jmp 0x1000b626
mov eax, dword [ebp - 0xa8]
sub eax, 0xd2d18657
je 0x1000bd5d
jmp 0x1000b63c
mov eax, dword [ebp - 0xa8]
sub eax, 0xd94e44bf
je 0x1000c884
jmp 0x1000b652
mov eax, dword [ebp - 0xa8]
sub eax, 0xdb3d8c20
je 0x1000c4ec
jmp 0x1000b668
mov eax, dword [ebp - 0xa8]
sub eax, 0xdd875c55
je 0x1000c704
jmp 0x1000b67e
mov eax, dword [ebp - 0xa8]
sub eax, 0xdeb7e927
je 0x1000bb77
jmp 0x1000b694
mov eax, dword [ebp - 0xa8]
sub eax, 0xe1a7d110
je 0x1000c7dc
jmp 0x1000b6aa
mov eax, dword [ebp - 0xa8]
sub eax, 0xe38437f8
je 0x1000c1be
jmp 0x1000b6c0
mov eax, dword [ebp - 0xa8]
sub eax, 0xe6aec595
je 0x1000c175
jmp 0x1000b6d6
mov eax, dword [ebp - 0xa8]
sub eax, 0xed7b945e
je 0x1000c902
jmp 0x1000b6ec
mov eax, dword [ebp - 0xa8]
sub eax, 0xf354f94f
je 0x1000beee
jmp 0x1000b702
mov eax, dword [ebp - 0xa8]
sub eax, 0xff0f71e2
je 0x1000c486
jmp 0x1000b718
mov eax, dword [ebp - 0xa8]
sub eax, 0x3b89006
je 0x1000c2a6
jmp 0x1000b72e
mov eax, dword [ebp - 0xa8]
sub eax, 0x9d1363b
je 0x1000c5b4
jmp 0x1000b744
mov eax, dword [ebp - 0xa8]
sub eax, 0xb053841
je 0x1000c5d2
jmp 0x1000b75a
mov eax, dword [ebp - 0xa8]
sub eax, 0xb442133
je 0x1000c2f7
jmp 0x1000b770
mov eax, dword [ebp - 0xa8]
sub eax, 0xb875c47
je 0x1000c7fd
jmp 0x1000b786
mov eax, dword [ebp - 0xa8]
sub eax, 0x1ac7854c
je 0x1000c422
jmp 0x1000b79c
mov eax, dword [ebp - 0xa8]
sub eax, 0x1b673cf7
je 0x1000c54e
jmp 0x1000b7b2
mov eax, dword [ebp - 0xa8]
sub eax, 0x1dc9f669
je 0x1000c6d4
jmp 0x1000b7c8
mov eax, dword [ebp - 0xa8]
sub eax, 0x200052d7
je 0x1000bdbc
jmp 0x1000b7de
mov eax, dword [ebp - 0xa8]
sub eax, 0x20fe8ea8
je 0x1000be11
jmp 0x1000b7f4
mov eax, dword [ebp - 0xa8]
sub eax, 0x24041ad3
je 0x1000c5ec
jmp 0x1000b80a
mov eax, dword [ebp - 0xa8]
sub eax, 0x275d7f2b
je 0x1000bccc
jmp 0x1000b820
mov eax, dword [ebp - 0xa8]
sub eax, 0x2f5b3707
je 0x1000bd6c
jmp 0x1000b836
mov eax, dword [ebp - 0xa8]
sub eax, 0x3ec89f44
je 0x1000bb18
jmp 0x1000b84c
mov eax, dword [ebp - 0xa8]
sub eax, 0x4479bf04
je 0x1000c383
jmp 0x1000b862
mov eax, dword [ebp - 0xa8]
sub eax, 0x460c6c13
je 0x1000bc54
jmp 0x1000b878
mov eax, dword [ebp - 0xa8]
sub eax, 0x462f2cd9
je 0x1000bc63
jmp 0x1000b88e
mov eax, dword [ebp - 0xa8]
sub eax, 0x4a0d8db0
je 0x1000baaa
jmp 0x1000b8a4
mov eax, dword [ebp - 0xa8]
sub eax, 0x4ccf66c4
je 0x1000c05c
jmp 0x1000b8ba
mov eax, dword [ebp - 0xa8]
sub eax, 0x4d7ce55c
je 0x1000c04d
jmp 0x1000b8d0
mov eax, dword [ebp - 0xa8]
sub eax, 0x4eec6f4e
je 0x1000c80c
jmp 0x1000b8e6
mov eax, dword [ebp - 0xa8]
sub eax, 0x5595b33d
je 0x1000b9dd
jmp 0x1000b8fc
mov eax, dword [ebp - 0xa8]
sub eax, 0x5ad1765f
je 0x1000bdf7
jmp 0x1000b912
mov eax, dword [ebp - 0xa8]
sub eax, 0x5d4b1cb0
je 0x1000c075
jmp 0x1000b928
mov eax, dword [ebp - 0xa8]
sub eax, 0x5e9abd49
je 0x1000c755
jmp 0x1000b93e
mov eax, dword [ebp - 0xa8]
sub eax, 0x615293d6
je 0x1000c7cb
jmp 0x1000b954
mov eax, dword [ebp - 0xa8]
sub eax, 0x6f632d57
je 0x1000c131
jmp 0x1000b96a
mov eax, dword [ebp - 0xa8]
sub eax, 0x750b16db
je 0x1000c8f3
jmp 0x1000b980
mov eax, dword [ebp - 0xa8]
sub eax, 0x754e5d54
je 0x1000bb95
jmp 0x1000b996
mov eax, dword [ebp - 0xa8]
sub eax, 0x7b763ded
je 0x1000c15e
jmp 0x1000b9ac
mov eax, dword [ebp - 0xa8]
sub eax, 0x7ba180b6
je 0x1000be78
jmp 0x1000b9c2
mov eax, dword [ebp - 0xa8]
sub eax, 0x7f7d6663
je 0x1000c297
jmp 0x1000b9d8
jmp 0x1000c960
mov eax, dword [ebp - 0xa4]
push eax
mov ecx, esp
mov dword [ebp - 0x94], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x90], ecx
sub esp, 0x104
mov ecx, esp
mov dword [ebp - 0x8c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x88], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x84], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x80], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x7c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x78], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x74], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x70], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x98], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.100284b0
add esp, 0xc
mov eax, dword [ebp - 0x98]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0xa0], 0x4a0d8db0
jmp 0x1000c960
mov ecx, dword [0x1009675c]
mov eax, dword [0x10096758]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe1a7d110
mov ecx, 0x3ec89f44
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov eax, dword [ebp - 0x64]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x5d], al
mov eax, dword [0x1009675c]
mov ecx, dword [0x10096758]
mov edx, eax
add edx, 0x5c04b383
sub edx, 1
sub edx, 0x5c04b383
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe1a7d110
mov ecx, 0xdeb7e927
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov dl, byte [ebp - 0x5d]
mov eax, 0x754e5d54
mov ecx, 0x462f2cd9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov eax, dword [0x1009675c]
mov ecx, dword [0x10096758]
mov edx, eax
add edx, 0xf023c24b
sub edx, 1
sub edx, 0xf023c24b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x94b781ee
mov ecx, 0x92e719cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov ecx, dword [0x1009675c]
mov eax, dword [0x10096758]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x94b781ee
mov ecx, 0x460c6c13
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov dword [ebp - 0xa0], 0xdd875c55
jmp 0x1000c960
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9c]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xa0], 0x9c5a020a
jmp 0x1000c960
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0xa0], 0x275d7f2b
jmp 0x1000c960
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x58]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov edx, dword [ebp - 0x88]
mov esi, 0xffffffff
mov eax, 0x2f5b3707
mov ecx, 0xd2d18657
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov dword [ebp - 0xa0], 0xdd875c55
jmp 0x1000c960
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xa0], 0x200052d7
jmp 0x1000c960
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov dword [ebp - 0xa0], 0xcfc6c8c4
jmp 0x1000c960
mov edx, dword [ebp - 0x84]
mov eax, 0x5ad1765f
mov ecx, 0xa4965aa4
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xa0], 0x20fe8ea8
jmp 0x1000c960
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xb06327c9
jmp 0x1000c960
mov eax, dword [0x1009675c]
mov ecx, dword [0x10096758]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb875c47
mov ecx, 0x7ba180b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov ecx, dword [0x1009675c]
mov eax, dword [0x10096758]
mov edx, ecx
sub edx, 0x8a30e6d2
sub edx, 1
add edx, 0x8a30e6d2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb875c47
mov ecx, 0xf354f94f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov dword [ebp - 0xa0], 0xdd875c55
jmp 0x1000c960
mov eax, dword [0x1009675c]
mov ecx, dword [0x10096758]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4eec6f4e
mov ecx, 0x903e13d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x4c], eax
mov ecx, dword [0x1009675c]
mov eax, dword [0x10096758]
mov edx, ecx
add edx, 0xc2e5ba0
sub edx, 1
sub edx, 0xc2e5ba0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4eec6f4e
mov ecx, 0xa1acc0a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov dword [ebp - 0xa0], 0x956be113
jmp 0x1000c960
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov word [eax], 0
mov dword [ebp - 0xa0], 0x4d7ce55c
jmp 0x1000c960
mov dword [ebp - 0xa0], 0x4ccf66c4
jmp 0x1000c960
mov eax, dword [ebp - 0x74]
mov ax, word [eax]
mov word [ebp - 0x48], ax
mov dword [ebp - 0xa0], 0x5d4b1cb0
jmp 0x1000c960
mov eax, dword [0x1009675c]
mov ecx, dword [0x10096758]
mov edx, eax
add edx, 0x2eb54759
sub edx, 1
sub edx, 0x2eb54759
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb29ee4c1
mov ecx, 0x8ce596f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov ax, word [ebp - 0x48]
movzx eax, ax
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 6]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x45], al
mov eax, dword [0x1009675c]
mov ecx, dword [0x10096758]
mov edx, eax
sub edx, 0x45f34b24
sub edx, 1
add edx, 0x45f34b24
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb29ee4c1
mov ecx, 0x6f632d57
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov dword [ebp - 0xa0], 0xc41d5709
jmp 0x1000c960
mov dl, byte [ebp - 0x45]
mov eax, 0xb053841
mov ecx, 0x7b763ded
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xa0], 0xe6aec595
jmp 0x1000c960
mov eax, dword [0x1009675c]
mov ecx, dword [0x10096758]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd94e44bf
mov ecx, 0xe38437f8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov ecx, dword [ebp - 0x44]
add ecx, 0xc7cf7780
add ecx, 0x18
sub ecx, 0xc7cf7780
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
movzx edx, word [eax + 0x14]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
imul eax, eax, 0x28
sub ecx, 0x42efc587
add ecx, eax
add ecx, 0x42efc587
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10035c40
call fcn.1002be10
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x3d], al
mov ecx, dword [0x1009675c]
mov eax, dword [0x10096758]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd94e44bf
mov ecx, 0x7f7d6663
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov dword [ebp - 0xa0], 0x3b89006
jmp 0x1000c960
mov eax, dword [0x1009675c]
mov ecx, dword [0x10096758]
mov edx, eax
sub edx, 0xac15681
sub edx, 1
add edx, 0xac15681
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x750b16db
mov ecx, 0xb442133
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov ecx, dword [0x1009675c]
mov eax, dword [0x10096758]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x750b16db
mov ecx, 0xbb8435b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov dl, byte [ebp - 0x3d]
mov eax, 0x4479bf04
mov ecx, 0xc282ef1c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x90]
mov edx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x6c8ebc51
add edx, eax
sub edx, 0x6c8ebc51
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
add eax, 0xc
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xa0], 0x1ac7854c
jmp 0x1000c960
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
sub ecx, 0x2db23d7b
add ecx, eax
add ecx, 0x2db23d7b
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x3c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10028610
add esp, 0xc
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xa0], 0xff0f71e2
jmp 0x1000c960
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor esi, esi
sub esi, eax
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov dword [ebp - 0xa0], 0xc282ef1c
jmp 0x1000c960
mov dword [ebp - 0xa0], 0xdb3d8c20
jmp 0x1000c960
mov eax, dword [ebp - 0x74]
mov ax, word [eax]
mov word [ebp - 0x22], ax
mov dword [ebp - 0xa0], 0x99445146
jmp 0x1000c960
mov eax, dword [0x1009675c]
mov ecx, dword [0x10096758]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xed7b945e
mov ecx, 0x1b673cf7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov cx, word [ebp - 0x22]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x74]
mov word [eax], cx
mov eax, dword [0x1009675c]
mov ecx, dword [0x10096758]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xed7b945e
mov ecx, 0x9d1363b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov dword [ebp - 0xa0], 0x85e07ad8
jmp 0x1000c960
mov dword [ebp - 0xa0], 0x4ccf66c4
jmp 0x1000c960
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xa0], 0x24041ad3
jmp 0x1000c960
mov ecx, dword [0x1009675c]
mov eax, dword [0x10096758]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xabf7aae2
mov ecx, 0x8644ecd8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x1009675c]
mov ecx, dword [0x10096758]
mov edx, eax
add edx, 0x8d64ae4c
sub edx, 1
sub edx, 0x8d64ae4c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xabf7aae2
mov ecx, 0xcf3c96da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov dword [ebp - 0xa0], 0x1dc9f669
jmp 0x1000c960
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x9c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xdd875c55
jmp 0x1000c960
mov eax, dword [0x1009675c]
mov ecx, dword [0x10096758]
mov edx, eax
sub edx, 0xc117a05e
sub edx, 1
add edx, 0xc117a05e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa09ec857
mov ecx, 0x5e9abd49
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov ecx, dword [0x1009675c]
mov eax, dword [0x10096758]
mov edx, ecx
sub edx, 0x9d72157b
sub edx, 1
add edx, 0x9d72157b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa09ec857
mov ecx, 0x615293d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000c960
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10027710
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xa0], 0x3ec89f44
jmp 0x1000c960
mov dword [ebp - 0xa0], 0x92e719cb
jmp 0x1000c960
mov dword [ebp - 0xa0], 0x7ba180b6
jmp 0x1000c960
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xa0], 0x903e13d8
jmp 0x1000c960
mov ax, word [ebp - 0x48]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xa0], 0x8ce596f6
jmp 0x1000c960
mov ecx, dword [ebp - 0x44]
add ecx, 0x3e4c6ae2
add ecx, 0x18
sub ecx, 0x3e4c6ae2
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
sub ecx, 0x82a8729d
add ecx, eax
add ecx, 0x82a8729d
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
imul eax, eax, 0x28
sub ecx, 0x8ba44bdc
add ecx, eax
add ecx, 0x8ba44bdc
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10035c40
call fcn.1002be10
add esp, 8
mov dword [ebp - 0xa0], 0xe38437f8
jmp 0x1000c960
mov dword [ebp - 0xa0], 0xb442133
jmp 0x1000c960
mov ax, word [ebp - 0x22]
mov cx, word [ebp - 0x22]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x74]
mov word [eax], cx
mov dword [ebp - 0xa0], 0x1b673cf7
jmp 0x1000c960
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], 0x8644ecd8
jmp 0x1000c960
mov dword [ebp - 0xa0], 0x5e9abd49
jmp 0x1000b468