Function at 0x100011d0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1b4
mov eax, dword [ebp + 8]
mov eax, dword [0x10068800]
xor eax, ebp
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000ca30
mov eax, dword [ebp + 8]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x19c], 0x44d60ecc
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a0], eax
sub eax, 0x8274d34d
je 0x10002109
jmp 0x10001243
mov eax, dword [ebp - 0x1a0]
sub eax, 0x83ff4f28
je 0x1000194b
jmp 0x10001259
mov eax, dword [ebp - 0x1a0]
sub eax, 0x85383770
je 0x10002687
jmp 0x1000126f
mov eax, dword [ebp - 0x1a0]
sub eax, 0x869ecd80
je 0x10002055
jmp 0x10001285
mov eax, dword [ebp - 0x1a0]
sub eax, 0x8c0c5e33
je 0x10001d18
jmp 0x1000129b
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9266ce58
je 0x100018a9
jmp 0x100012b1
mov eax, dword [ebp - 0x1a0]
sub eax, 0x95841ae8
je 0x10002552
jmp 0x100012c7
mov eax, dword [ebp - 0x1a0]
sub eax, 0x96c64463
je 0x1000246a
jmp 0x100012dd
mov eax, dword [ebp - 0x1a0]
sub eax, 0x97ef7430
je 0x10001d75
jmp 0x100012f3
mov eax, dword [ebp - 0x1a0]
sub eax, 0x986e9056
je 0x10001d39
jmp 0x10001309
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9aa32275
je 0x100027ce
jmp 0x1000131f
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa412d811
je 0x1000245b
jmp 0x10001335
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa731fd23
je 0x10001bf1
jmp 0x1000134b
mov eax, dword [ebp - 0x1a0]
sub eax, 0xab63d9a5
je 0x100026e0
jmp 0x10001361
mov eax, dword [ebp - 0x1a0]
sub eax, 0xbac6e65c
je 0x1000202f
jmp 0x10001377
mov eax, dword [ebp - 0x1a0]
sub eax, 0xc04fe4ca
je 0x10001d5a
jmp 0x1000138d
mov eax, dword [ebp - 0x1a0]
sub eax, 0xc4b922c0
je 0x1000269b
jmp 0x100013a3
mov eax, dword [ebp - 0x1a0]
sub eax, 0xc5a4eca7
je 0x10001d96
jmp 0x100013b9
mov eax, dword [ebp - 0x1a0]
sub eax, 0xca766039
je 0x100026ef
jmp 0x100013cf
mov eax, dword [ebp - 0x1a0]
sub eax, 0xcc1b0b73
je 0x10002001
jmp 0x100013e5
mov eax, dword [ebp - 0x1a0]
sub eax, 0xd31628f2
je 0x1000196c
jmp 0x100013fb
mov eax, dword [ebp - 0x1a0]
sub eax, 0xd6a3072c
je 0x10001a3a
jmp 0x10001411
mov eax, dword [ebp - 0x1a0]
sub eax, 0xd869046a
je 0x100026c2
jmp 0x10001427
mov eax, dword [ebp - 0x1a0]
sub eax, 0xdeb8531c
je 0x10001e55
jmp 0x1000143d
mov eax, dword [ebp - 0x1a0]
sub eax, 0xdef5df92
je 0x100018fa
jmp 0x10001453
mov eax, dword [ebp - 0x1a0]
sub eax, 0xe7701097
je 0x100021f1
jmp 0x10001469
mov eax, dword [ebp - 0x1a0]
sub eax, 0xf5d3c79b
je 0x10001eef
jmp 0x1000147f
mov eax, dword [ebp - 0x1a0]
sub eax, 0xf8ffb10a
je 0x10002561
jmp 0x10001495
mov eax, dword [ebp - 0x1a0]
sub eax, 0xfd30db6a
je 0x100020e8
jmp 0x100014ab
mov eax, dword [ebp - 0x1a0]
sub eax, 0x3d73518
je 0x100026d1
jmp 0x100014c1
mov eax, dword [ebp - 0x1a0]
sub eax, 0x6124499
je 0x1000223e
jmp 0x100014d7
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9291acf
je 0x10002740
jmp 0x100014ed
mov eax, dword [ebp - 0x1a0]
sub eax, 0xbe594cb
je 0x10002010
jmp 0x10001503
mov eax, dword [ebp - 0x1a0]
sub eax, 0x13f8b023
je 0x10002602
jmp 0x10001519
mov eax, dword [ebp - 0x1a0]
sub eax, 0x159b2ac6
je 0x1000234e
jmp 0x1000152f
mov eax, dword [ebp - 0x1a0]
sub eax, 0x1a48a924
je 0x10001827
jmp 0x10001545
mov eax, dword [ebp - 0x1a0]
sub eax, 0x25922167
je 0x1000274f
jmp 0x1000155b
mov eax, dword [ebp - 0x1a0]
sub eax, 0x25de3b95
je 0x1000189a
jmp 0x10001571
mov eax, dword [ebp - 0x1a0]
sub eax, 0x2a55be0d
je 0x10001ba8
jmp 0x10001587
mov eax, dword [ebp - 0x1a0]
sub eax, 0x2dc1d595
je 0x10001acd
jmp 0x1000159d
mov eax, dword [ebp - 0x1a0]
sub eax, 0x354fd920
je 0x10001c00
jmp 0x100015b3
mov eax, dword [ebp - 0x1a0]
sub eax, 0x35ec391a
je 0x10001c51
jmp 0x100015c9
mov eax, dword [ebp - 0x1a0]
sub eax, 0x365124c3
je 0x10001d09
jmp 0x100015df
mov eax, dword [ebp - 0x1a0]
sub eax, 0x37e09bfa
je 0x10001a2b
jmp 0x100015f5
mov eax, dword [ebp - 0x1a0]
sub eax, 0x3d5be9ba
je 0x10001de7
jmp 0x1000160b
mov eax, dword [ebp - 0x1a0]
sub eax, 0x3daf6ef2
je 0x100027ef
jmp 0x10001621
mov eax, dword [ebp - 0x1a0]
sub eax, 0x44d22021
je 0x1000276d
jmp 0x10001637
mov eax, dword [ebp - 0x1a0]
sub eax, 0x44d60ecc
je 0x100017de
jmp 0x1000164d
mov eax, dword [ebp - 0x1a0]
sub eax, 0x46f6d5a3
je 0x10001e64
jmp 0x10001663
mov eax, dword [ebp - 0x1a0]
sub eax, 0x4753c180
je 0x10001b3a
jmp 0x10001679
mov eax, dword [ebp - 0x1a0]
sub eax, 0x47c0d20e
je 0x10002678
jmp 0x1000168f
mov eax, dword [ebp - 0x1a0]
sub eax, 0x47ed5e18
je 0x10001f7a
jmp 0x100016a5
mov eax, dword [ebp - 0x1a0]
sub eax, 0x48342572
je 0x1000233f
jmp 0x100016bb
mov eax, dword [ebp - 0x1a0]
sub eax, 0x48fda94f
je 0x100024ca
jmp 0x100016d1
mov eax, dword [ebp - 0x1a0]
sub eax, 0x5043dc72
je 0x100019da
jmp 0x100016e7
mov eax, dword [ebp - 0x1a0]
sub eax, 0x514ff39f
je 0x10001f29
jmp 0x100016fd
mov eax, dword [ebp - 0x1a0]
sub eax, 0x5820ed75
je 0x10001a55
jmp 0x10001713
mov eax, dword [ebp - 0x1a0]
sub eax, 0x5f3150b4
je 0x10002594
jmp 0x10001729
mov eax, dword [ebp - 0x1a0]
sub eax, 0x61073101
je 0x100023c4
jmp 0x1000173f
mov eax, dword [ebp - 0x1a0]
sub eax, 0x65be090c
je 0x10001e7f
jmp 0x10001755
mov eax, dword [ebp - 0x1a0]
sub eax, 0x68203641
je 0x1000275e
jmp 0x1000176b
mov eax, dword [ebp - 0x1a0]
sub eax, 0x6b7bd9bb
je 0x10002479
jmp 0x10001781
mov eax, dword [ebp - 0x1a0]
sub eax, 0x73c13f40
je 0x1000226a
jmp 0x10001797
mov eax, dword [ebp - 0x1a0]
sub eax, 0x797c3ac9
je 0x100020a5
jmp 0x100017ad
mov eax, dword [ebp - 0x1a0]
sub eax, 0x79cf5bc4
je 0x100022bb
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc4b922c0
mov ecx, 0x1a48a924
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov eax, dword [ebp - 0x16c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
setne al
and al, 1
mov byte [ebp - 0x165], al
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc4b922c0
mov ecx, 0x25de3b95
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x9266ce58
jmp 0x100027f9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
add edx, 0xf0fd519f
sub edx, 1
sub edx, 0xf0fd519f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd869046a
mov ecx, 0xdef5df92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
add edx, 0xdcf9bebb
sub edx, 1
sub edx, 0xdcf9bebb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd869046a
mov ecx, 0x83ff4f28
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov dl, byte [ebp - 0x165]
mov eax, 0xd31628f2
mov ecx, 0xd6a3072c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3d73518
mov ecx, 0x5043dc72
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
add edx, 0x8c5aa082
sub edx, 1
sub edx, 0x8c5aa082
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3d73518
mov ecx, 0x37e09bfa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x85383770
jmp 0x100027f9
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x19c], 0x5820ed75
jmp 0x100027f9
mov edx, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x164]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x174]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x19c], 0x2dc1d595
jmp 0x100027f9
mov eax, dword [ebp - 0x160]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x17c], eax
mov edx, 0xffffffff
mov eax, 0x354fd920
mov ecx, 0x4753c180
cmp dword [ebp - 0x17c], edx
cmove eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xab63d9a5
mov ecx, 0x2a55be0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xab63d9a5
mov ecx, 0xa731fd23
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x85383770
jmp 0x100027f9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
add edx, 0xea75a867
sub edx, 1
sub edx, 0xea75a867
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xca766039
mov ecx, 0x35ec391a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x180], eax
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
mov edx, ecx
sub edx, 0x218ec02b
sub edx, 1
add edx, 0x218ec02b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xca766039
mov ecx, 0x365124c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x8c0c5e33
jmp 0x100027f9
cmp dword [ebp - 0x180], 0
setne al
and al, 1
mov byte [ebp - 0x159], al
mov dword [ebp - 0x19c], 0x986e9056
jmp 0x100027f9
mov dl, byte [ebp - 0x159]
mov eax, 0xc04fe4ca
mov ecx, 0x46f6d5a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x19c], 0x97ef7430
jmp 0x100027f9
mov eax, dword [ebp - 0x158]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x19c], 0xc5a4eca7
jmp 0x100027f9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
sub edx, 0x2127ea0d
sub edx, 1
add edx, 0x2127ea0d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9291acf
mov ecx, 0x3d5be9ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9291acf
mov ecx, 0xdeb8531c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x85383770
jmp 0x100027f9
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x19c], 0x65be090c
jmp 0x100027f9
mov eax, dword [ebp - 0x154]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x188]
add eax, 0x3c
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x19c], 0xf5d3c79b
jmp 0x100027f9
mov eax, dword [ebp - 0x14c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x150]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x18c], eax
mov word [ebp - 0x18e], 0
mov dword [ebp - 0x19c], 0x514ff39f
jmp 0x100027f9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
add edx, 0x21ad060
sub edx, 1
sub edx, 0x21ad060
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x25922167
mov ecx, 0x47ed5e18
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
movzx eax, word [ebp - 0x18e]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x144], eax
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x25922167
mov ecx, 0xcc1b0b73
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov dword [ebp - 0x19c], 0xbe594cb
jmp 0x100027f9
mov eax, dword [ebp - 0x144]
movzx eax, word [eax + 6]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x19c], 0xbac6e65c
jmp 0x100027f9
mov edx, dword [ebp - 0x148]
mov esi, dword [ebp - 0x140]
mov eax, 0x6b7bd9bb
mov ecx, 0x869ecd80
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov eax, dword [ebp - 0x18c]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0x18c]
movzx ecx, word [ecx + 0x14]
sub eax, 0xc002376
add eax, ecx
add eax, 0xc002376
mov dword [ebp - 0x13c], eax
movzx eax, word [ebp - 0x18e]
imul eax, eax, 0x28
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x19c], 0x797c3ac9
jmp 0x100027f9
mov eax, dword [ebp - 0x13c]
mov edx, dword [ebp - 0x138]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x194], eax
mov ecx, dword [ebp - 0x194]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100183b0
call fcn.1000eda0
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x19c], 0xfd30db6a
jmp 0x100027f9
mov edx, dword [ebp - 0x134]
mov eax, 0x8274d34d
mov ecx, 0x7a910fdb
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x194]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x194]
mov eax, dword [eax + 0xc]
sub edx, 0x19b6703a
add edx, eax
add edx, 0x19b6703a
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x195], al
mov edx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x194]
mov ecx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
sub edx, eax
mov ecx, dword [ebp - 0x184]
mov eax, dword [ebp - 0x194]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub ecx, eax
mov eax, dword [ebp - 0x194]
mov eax, dword [eax + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000cb90
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x194]
mov eax, dword [eax + 8]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x194]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x19c], 0xe7701097
jmp 0x100027f9
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x12c]
mov esi, dword [ebp - 0x128]
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x123], al
mov dword [ebp - 0x19c], 0x6124499
jmp 0x100027f9
mov al, byte [ebp - 0x123]
and al, 1
mov byte [ebp - 0x195], al
mov dword [ebp - 0x19c], 0x7a910fdb
jmp 0x100027f9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
add edx, 0xaf27027d
sub edx, 1
sub edx, 0xaf27027d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x68203641
mov ecx, 0x79cf5bc4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x159b2ac6
jmp 0x100027f9
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
mov edx, ecx
add edx, 0x49443681
sub edx, 1
sub edx, 0x49443681
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x44d22021
mov ecx, 0x61073101
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov ax, word [ebp - 0x122]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x18e], ax
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
mov edx, ecx
add edx, 0x86666ce1
sub edx, 1
sub edx, 0x86666ce1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x44d22021
mov ecx, 0xa412d811
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x96c64463
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x514ff39f
jmp 0x100027f9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
sub edx, 0x724baf5e
sub edx, 1
add edx, 0x724baf5e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9aa32275
mov ecx, 0x48fda94f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov eax, dword [ebp - 0x17c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
mov edx, ecx
add edx, 0x1c9bc5ee
sub edx, 1
sub edx, 0x1c9bc5ee
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9aa32275
mov ecx, 0x95841ae8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov dword [ebp - 0x19c], 0xf8ffb10a
jmp 0x100027f9
mov eax, dword [ebp - 0x180]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x170]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x19c], 0x5f3150b4
jmp 0x100027f9
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3daf6ef2
mov ecx, 0x13f8b023
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
mov edx, ecx
sub edx, 0x106f2f39
sub edx, 1
add edx, 0x106f2f39
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3daf6ef2
mov ecx, 0x47c0d20e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x85383770
jmp 0x100027f9
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1000be30
add esp, 0x1b4
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x16c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x19c], 0x1a48a924
jmp 0x100027f9
mov dword [ebp - 0x19c], 0xdef5df92
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x5043dc72
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x2a55be0d
jmp 0x100027f9
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x19c], 0x35ec391a
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x3d5be9ba
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x47ed5e18
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x79cf5bc4
jmp 0x100027f9
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
sub ax, 0x5da4
add ax, 1
add ax, 0x5da4
mov word [ebp - 0x18e], ax
mov dword [ebp - 0x19c], 0x61073101
jmp 0x100027f9
mov eax, dword [ebp - 0x17c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x19c], 0x48fda94f
jmp 0x100027f9
mov dword [ebp - 0x19c], 0x13f8b023
jmp 0x10001227