Function at 0x1000e040
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1b0
mov eax, dword [ebp + 8]
mov eax, dword [0x10089280]
xor eax, ebp
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x198], 0x9b539354
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x19c], eax
sub eax, 0x82f7b54a
je 0x1000ea1d
jmp 0x1000e08a
mov eax, dword [ebp - 0x19c]
sub eax, 0x862f8e0e
je 0x1000e866
jmp 0x1000e0a0
mov eax, dword [ebp - 0x19c]
sub eax, 0x86b4c9d7
je 0x1000ea66
jmp 0x1000e0b6
mov eax, dword [ebp - 0x19c]
sub eax, 0x9195e91b
je 0x1000e555
jmp 0x1000e0cc
mov eax, dword [ebp - 0x19c]
sub eax, 0x9b539354
je 0x1000e51d
jmp 0x1000e0e2
mov eax, dword [ebp - 0x19c]
sub eax, 0xb6e1601a
je 0x1000e6cd
jmp 0x1000e0f8
mov eax, dword [ebp - 0x19c]
sub eax, 0xb8b62718
je 0x1000f172
jmp 0x1000e10e
mov eax, dword [ebp - 0x19c]
sub eax, 0xb95c5b42
je 0x1000eaec
jmp 0x1000e124
mov eax, dword [ebp - 0x19c]
sub eax, 0xc21ede61
je 0x1000e6b2
jmp 0x1000e13a
mov eax, dword [ebp - 0x19c]
sub eax, 0xc549576e
je 0x1000f1ac
jmp 0x1000e150
mov eax, dword [ebp - 0x19c]
sub eax, 0xca44ab2f
je 0x1000ebac
jmp 0x1000e166
mov eax, dword [ebp - 0x19c]
sub eax, 0xd85e685b
je 0x1000ee38
jmp 0x1000e17c
mov eax, dword [ebp - 0x19c]
sub eax, 0xda051c44
je 0x1000ef51
jmp 0x1000e192
mov eax, dword [ebp - 0x19c]
sub eax, 0xdbf10503
je 0x1000ee55
jmp 0x1000e1a8
mov eax, dword [ebp - 0x19c]
sub eax, 0xe3f2482e
je 0x1000e82a
jmp 0x1000e1be
mov eax, dword [ebp - 0x19c]
sub eax, 0xe7fdc259
je 0x1000ef42
jmp 0x1000e1d4
mov eax, dword [ebp - 0x19c]
sub eax, 0xe99abaa8
je 0x1000e59b
jmp 0x1000e1ea
mov eax, dword [ebp - 0x19c]
sub eax, 0xf270d9c9
je 0x1000e682
jmp 0x1000e200
mov eax, dword [ebp - 0x19c]
sub eax, 0xf5fd4ccc
je 0x1000eccd
jmp 0x1000e216
mov eax, dword [ebp - 0x19c]
sub eax, 0xf7d8bfa5
je 0x1000e9a9
jmp 0x1000e22c
mov eax, dword [ebp - 0x19c]
sub eax, 0xfdaea86d
je 0x1000ee7b
jmp 0x1000e242
mov eax, dword [ebp - 0x19c]
sub eax, 0xfe636078
je 0x1000f12b
jmp 0x1000e258
mov eax, dword [ebp - 0x19c]
sub eax, 0xffbbd052
je 0x1000f089
jmp 0x1000e26e
mov eax, dword [ebp - 0x19c]
sub eax, 0x50f0fa
je 0x1000f187
jmp 0x1000e284
mov eax, dword [ebp - 0x19c]
sub eax, 0x1f45c50
je 0x1000edc5
jmp 0x1000e29a
mov eax, dword [ebp - 0x19c]
sub eax, 0x1fbf604
je 0x1000e84b
jmp 0x1000e2b0
mov eax, dword [ebp - 0x19c]
sub eax, 0x3424374
je 0x1000eb6e
jmp 0x1000e2c6
mov eax, dword [ebp - 0x19c]
sub eax, 0x92526d8
je 0x1000e887
jmp 0x1000e2dc
mov eax, dword [ebp - 0x19c]
sub eax, 0xe476aaf
je 0x1000f1bb
jmp 0x1000e2f2
mov eax, dword [ebp - 0x19c]
sub eax, 0xef26db0
je 0x1000e8df
jmp 0x1000e308
mov eax, dword [ebp - 0x19c]
sub eax, 0x10360912
je 0x1000f163
jmp 0x1000e31e
mov eax, dword [ebp - 0x19c]
sub eax, 0x11e466bd
je 0x1000e8fa
jmp 0x1000e334
mov eax, dword [ebp - 0x19c]
sub eax, 0x149f72f1
je 0x1000f047
jmp 0x1000e34a
mov eax, dword [ebp - 0x19c]
sub eax, 0x15b5b9cc
je 0x1000efbf
jmp 0x1000e360
mov eax, dword [ebp - 0x19c]
sub eax, 0x16a17691
je 0x1000f13a
jmp 0x1000e376
mov eax, dword [ebp - 0x19c]
sub eax, 0x16d044b8
je 0x1000e933
jmp 0x1000e38c
mov eax, dword [ebp - 0x19c]
sub eax, 0x1b7f2fc5
je 0x1000e7a0
jmp 0x1000e3a2
mov eax, dword [ebp - 0x19c]
sub eax, 0x251fdcbd
je 0x1000ecac
jmp 0x1000e3b8
mov eax, dword [ebp - 0x19c]
sub eax, 0x2b794fd3
je 0x1000e651
jmp 0x1000e3ce
mov eax, dword [ebp - 0x19c]
sub eax, 0x31796ba3
je 0x1000f1dc
jmp 0x1000e3e4
mov eax, dword [ebp - 0x19c]
sub eax, 0x3713b2c7
je 0x1000eef1
jmp 0x1000e3fa
mov eax, dword [ebp - 0x19c]
sub eax, 0x37e4a7f9
je 0x1000ea0e
jmp 0x1000e410
mov eax, dword [ebp - 0x19c]
sub eax, 0x41403f21
je 0x1000f056
jmp 0x1000e426
mov eax, dword [ebp - 0x19c]
sub eax, 0x441f7bc2
je 0x1000ee29
jmp 0x1000e43c
mov eax, dword [ebp - 0x19c]
sub eax, 0x49104072
je 0x1000eafb
jmp 0x1000e452
mov eax, dword [ebp - 0x19c]
sub eax, 0x526de5d2
je 0x1000ec1a
jmp 0x1000e468
mov eax, dword [ebp - 0x19c]
sub eax, 0x5a4d4b75
je 0x1000eb21
jmp 0x1000e47e
mov eax, dword [ebp - 0x19c]
sub eax, 0x5c9f6e38
je 0x1000e6a3
jmp 0x1000e494
mov eax, dword [ebp - 0x19c]
sub eax, 0x604d4bd8
je 0x1000ed3c
jmp 0x1000e4aa
mov eax, dword [ebp - 0x19c]
sub eax, 0x647cf81b
je 0x1000e58c
jmp 0x1000e4c0
mov eax, dword [ebp - 0x19c]
sub eax, 0x67865e70
je 0x1000e896
jmp 0x1000e4d6
mov eax, dword [ebp - 0x19c]
sub eax, 0x6ca21491
je 0x1000f14e
jmp 0x1000e4ec
mov eax, dword [ebp - 0x19c]
sub eax, 0x6e268fe3
je 0x1000e72a
jmp 0x1000e502
mov eax, dword [ebp - 0x19c]
sub eax, 0x73bcd440
je 0x1000f0da
jmp 0x1000e518
jmp 0x1000f1e6
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1002a5f0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x198], 0x9195e91b
jmp 0x1000f1e6
mov eax, dword [ebp - 0x168]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x170], eax
mov eax, 0x647cf81b
mov ecx, 0xe99abaa8
cmp dword [ebp - 0x170], 0
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov dword [ebp - 0x198], 0x16a17691
jmp 0x1000f1e6
mov ecx, dword [ebp - 0x170]
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x174], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x170]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x198], 0x2b794fd3
jmp 0x1000f1e6
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x178], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x178], eax
sete al
and al, 1
mov byte [ebp - 0x15d], al
mov dword [ebp - 0x198], 0xf270d9c9
jmp 0x1000f1e6
mov dl, byte [ebp - 0x15d]
mov eax, 0xc21ede61
mov ecx, 0x5c9f6e38
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov dword [ebp - 0x198], 0x16a17691
jmp 0x1000f1e6
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x198], 0xb6e1601a
jmp 0x1000f1e6
mov eax, dword [ebp - 0x15c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x198], 0x6e268fe3
jmp 0x1000f1e6
mov ecx, dword [0x1008a744]
mov eax, dword [0x1008a740]
mov edx, ecx
add edx, 0xb8a2c5c0
sub edx, 1
sub edx, 0xb8a2c5c0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6ca21491
mov ecx, 0x1b7f2fc5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov eax, dword [ebp - 0x158]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x151], al
mov ecx, dword [0x1008a744]
mov eax, dword [0x1008a740]
mov edx, ecx
sub edx, 0x334e14cd
sub edx, 1
add edx, 0x334e14cd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6ca21491
mov ecx, 0xe3f2482e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov dl, byte [ebp - 0x151]
mov eax, 0x1fbf604
mov ecx, 0x67865e70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x198], 0x862f8e0e
jmp 0x1000f1e6
mov eax, dword [ebp - 0x150]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x198], 0x92526d8
jmp 0x1000f1e6
mov dword [ebp - 0x198], 0x16a17691
jmp 0x1000f1e6
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x198], 0xef26db0
jmp 0x1000f1e6
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x198], 0x11e466bd
jmp 0x1000f1e6
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x184]
mov ecx, dword [ecx + 0x3c]
sub eax, 0xe6178f68
add eax, ecx
add eax, 0xe6178f68
mov dword [ebp - 0x188], eax
mov word [ebp - 0x18a], 0
mov dword [ebp - 0x198], 0x16d044b8
jmp 0x1000f1e6
mov ecx, dword [0x1008a744]
mov eax, dword [0x1008a740]
mov edx, ecx
add edx, 0xa50d77ae
sub edx, 1
sub edx, 0xa50d77ae
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x10360912
mov ecx, 0xf7d8bfa5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
movzx eax, word [ebp - 0x18a]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x188]
add eax, 4
mov dword [ebp - 0x148], eax
mov eax, dword [0x1008a744]
mov ecx, dword [0x1008a740]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x10360912
mov ecx, 0x37e4a7f9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov dword [ebp - 0x198], 0x82f7b54a
jmp 0x1000f1e6
mov eax, dword [0x1008a744]
mov ecx, dword [0x1008a740]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb8b62718
mov ecx, 0x86b4c9d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov eax, dword [ebp - 0x148]
movzx eax, word [eax + 2]
mov dword [ebp - 0x144], eax
mov ecx, dword [0x1008a744]
mov eax, dword [0x1008a740]
mov edx, ecx
add edx, 0xdccaf4d4
sub edx, 1
sub edx, 0xdccaf4d4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb8b62718
mov ecx, 0xb95c5b42
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov dword [ebp - 0x198], 0x49104072
jmp 0x1000f1e6
mov edx, dword [ebp - 0x14c]
mov esi, dword [ebp - 0x144]
mov eax, 0xda051c44
mov ecx, 0x5a4d4b75
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov eax, dword [ebp - 0x188]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0x188]
movzx ecx, word [ecx + 0x14]
add eax, 0xc9e83bb3
add eax, ecx
sub eax, 0xc9e83bb3
mov dword [ebp - 0x140], eax
movzx eax, word [ebp - 0x18a]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x198], 0x3424374
jmp 0x1000f1e6
mov eax, dword [ebp - 0x13c]
imul edx, eax, 0x28
mov eax, dword [ebp - 0x140]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x198], 0xca44ab2f
jmp 0x1000f1e6
mov ecx, dword [0x1008a744]
mov eax, dword [0x1008a740]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x50f0fa
mov ecx, 0x526de5d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov ecx, dword [ebp - 0x138]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100378de
call fcn.1002df50
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x131], al
mov ecx, dword [0x1008a744]
mov eax, dword [0x1008a740]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x50f0fa
mov ecx, 0x251fdcbd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov dl, byte [ebp - 0x131]
mov eax, 0xf5fd4ccc
mov ecx, 0x441f7bc2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x190]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 0xc]
sub edx, 0xd9c93a80
add edx, eax
add edx, 0xd9c93a80
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x191], al
mov dword [ebp - 0x198], 0x604d4bd8
jmp 0x1000f1e6
mov edx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 0xc]
sub edx, 0xd331acec
add edx, eax
add edx, 0xd331acec
mov ecx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 0xc]
sub ecx, 0x9b0cdca3
add ecx, eax
add ecx, 0x9b0cdca3
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1002a750
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 8]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x198], 0x1f45c50
jmp 0x1000f1e6
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 0xc]
mov esi, dword [ebp - 0x128]
add esi, 0xb0140b8c
add esi, eax
sub esi, 0xb0140b8c
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x12c]
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x191], al
mov dword [ebp - 0x198], 0x441f7bc2
jmp 0x1000f1e6
mov dword [ebp - 0x198], 0xd85e685b
jmp 0x1000f1e6
mov ax, word [ebp - 0x18a]
mov word [ebp - 0x122], ax
mov dword [ebp - 0x198], 0xdbf10503
jmp 0x1000f1e6
mov ax, word [ebp - 0x122]
xor ecx, ecx
sub cx, 1
sub ax, cx
mov word [ebp - 0x18a], ax
mov dword [ebp - 0x198], 0xfdaea86d
jmp 0x1000f1e6
mov ecx, dword [0x1008a744]
mov eax, dword [0x1008a740]
mov edx, ecx
add edx, 0x4b6d4fa1
sub edx, 1
sub edx, 0x4b6d4fa1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc549576e
mov ecx, 0x3713b2c7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov eax, dword [0x1008a744]
mov ecx, dword [0x1008a740]
mov edx, eax
sub edx, 0x3aa4fbaa
sub edx, 1
add edx, 0x3aa4fbaa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc549576e
mov ecx, 0xe7fdc259
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov dword [ebp - 0x198], 0x16d044b8
jmp 0x1000f1e6
mov ecx, dword [0x1008a744]
mov eax, dword [0x1008a740]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe476aaf
mov ecx, 0x15b5b9cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov eax, dword [ebp - 0x178]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov ecx, dword [0x1008a744]
mov eax, dword [0x1008a740]
mov edx, ecx
sub edx, 0x982f172
sub edx, 1
add edx, 0x982f172
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe476aaf
mov ecx, 0x149f72f1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov dword [ebp - 0x198], 0x41403f21
jmp 0x1000f1e6
mov eax, dword [ebp - 0x17c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x16c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x198], 0xffbbd052
jmp 0x1000f1e6
mov eax, dword [0x1008a744]
mov ecx, dword [0x1008a740]
mov edx, eax
add edx, 0x63bdbf8e
sub edx, 1
sub edx, 0x63bdbf8e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x31796ba3
mov ecx, 0x73bcd440
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov eax, dword [0x1008a744]
mov ecx, dword [0x1008a740]
mov edx, eax
add edx, 0x76b1b235
sub edx, 1
sub edx, 0x76b1b235
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x31796ba3
mov ecx, 0xfe636078
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000f1e6
mov dword [ebp - 0x198], 0x16a17691
jmp 0x1000f1e6
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10029850
add esp, 0x1b0
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x198], 0x1b7f2fc5
jmp 0x1000f1e6
mov dword [ebp - 0x198], 0xf7d8bfa5
jmp 0x1000f1e6
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x198], 0x86b4c9d7
jmp 0x1000f1e6
mov ecx, dword [ebp - 0x138]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100378de
call fcn.1002df50
mov dword [ebp - 0x198], 0x526de5d2
jmp 0x1000f1e6
mov dword [ebp - 0x198], 0x3713b2c7
jmp 0x1000f1e6
mov eax, dword [ebp - 0x178]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x198], 0x15b5b9cc
jmp 0x1000f1e6
mov dword [ebp - 0x198], 0x73bcd440
jmp 0x1000e06e