Function at 0x100011b0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xa0
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x1006a200]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xa0], 0x169f42a2
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
sub eax, 0x81151104
je 0x100028eb
jmp 0x100011f4
mov eax, dword [ebp - 0xa8]
sub eax, 0x87b13005
je 0x10002989
jmp 0x1000120a
mov eax, dword [ebp - 0xa8]
sub eax, 0x8b4a9a29
je 0x100022c6
jmp 0x10001220
mov eax, dword [ebp - 0xa8]
sub eax, 0x8d63a3e4
je 0x10001e46
jmp 0x10001236
mov eax, dword [ebp - 0xa8]
sub eax, 0x8e992b35
je 0x1000259b
jmp 0x1000124c
mov eax, dword [ebp - 0xa8]
sub eax, 0x90db03eb
je 0x10001b1c
jmp 0x10001262
mov eax, dword [ebp - 0xa8]
sub eax, 0x91eff3ed
je 0x10001b92
jmp 0x10001278
mov eax, dword [ebp - 0xa8]
sub eax, 0x94b5a0be
je 0x100022a2
jmp 0x1000128e
mov eax, dword [ebp - 0xa8]
sub eax, 0x97bb3ba8
je 0x10001efd
jmp 0x100012a4
mov eax, dword [ebp - 0xa8]
sub eax, 0x98644308
je 0x10002a52
jmp 0x100012ba
mov eax, dword [ebp - 0xa8]
sub eax, 0x9f76b9ce
je 0x10002889
jmp 0x100012d0
mov eax, dword [ebp - 0xa8]
sub eax, 0xa6275edd
je 0x10002210
jmp 0x100012e6
mov eax, dword [ebp - 0xa8]
sub eax, 0xa6da6ef1
je 0x10001fe1
jmp 0x100012fc
mov eax, dword [ebp - 0xa8]
sub eax, 0xa7e4e2f9
je 0x10001f31
jmp 0x10001312
mov eax, dword [ebp - 0xa8]
sub eax, 0xafee7668
je 0x100029c8
jmp 0x10001328
mov eax, dword [ebp - 0xa8]
sub eax, 0xb6accf80
je 0x10002420
jmp 0x1000133e
mov eax, dword [ebp - 0xa8]
sub eax, 0xba683723
je 0x100028dc
jmp 0x10001354
mov eax, dword [ebp - 0xa8]
sub eax, 0xbae9520c
je 0x10002261
jmp 0x1000136a
mov eax, dword [ebp - 0xa8]
sub eax, 0xbc6a9957
je 0x100025e4
jmp 0x10001380
mov eax, dword [ebp - 0xa8]
sub eax, 0xbe71ee8b
je 0x10001c85
jmp 0x10001396
mov eax, dword [ebp - 0xa8]
sub eax, 0xbf3ca442
je 0x100019e4
jmp 0x100013ac
mov eax, dword [ebp - 0xa8]
sub eax, 0xc3b9025d
je 0x10002170
jmp 0x100013c2
mov eax, dword [ebp - 0xa8]
sub eax, 0xc574f786
je 0x10001cff
jmp 0x100013d8
mov eax, dword [ebp - 0xa8]
sub eax, 0xc6a40428
je 0x10002857
jmp 0x100013ee
mov eax, dword [ebp - 0xa8]
sub eax, 0xcb4ea1a1
je 0x1000230f
jmp 0x10001404
mov eax, dword [ebp - 0xa8]
sub eax, 0xcbe4aa8b
je 0x10002720
jmp 0x1000141a
mov eax, dword [ebp - 0xa8]
sub eax, 0xd763275f
je 0x10001aa6
jmp 0x10001430
mov eax, dword [ebp - 0xa8]
sub eax, 0xdb570f44
je 0x10001a88
jmp 0x10001446
mov eax, dword [ebp - 0xa8]
sub eax, 0xddc04e66
je 0x1000299b
jmp 0x1000145c
mov eax, dword [ebp - 0xa8]
sub eax, 0xe14794d4
je 0x10002796
jmp 0x10001472
mov eax, dword [ebp - 0xa8]
sub eax, 0xec4dc3e7
je 0x10002827
jmp 0x10001488
mov eax, dword [ebp - 0xa8]
sub eax, 0xeeaee34f
je 0x10001d2f
jmp 0x1000149e
mov eax, dword [ebp - 0xa8]
sub eax, 0xf6866457
je 0x100029b9
jmp 0x100014b4
mov eax, dword [ebp - 0xa8]
sub eax, 0xfc6f85ee
je 0x10002638
jmp 0x100014ca
mov eax, dword [ebp - 0xa8]
sub eax, 0xfe635b76
je 0x10002360
jmp 0x100014e0
mov eax, dword [ebp - 0xa8]
sub eax, 0x241c06a
je 0x10002105
jmp 0x100014f6
mov eax, dword [ebp - 0xa8]
sub eax, 0x4fcf389
je 0x10001bf2
jmp 0x1000150c
mov eax, dword [ebp - 0xa8]
sub eax, 0x7f5ff58
je 0x1000293c
jmp 0x10001522
mov eax, dword [ebp - 0xa8]
sub eax, 0xe7720b1
je 0x10002836
jmp 0x10001538
mov eax, dword [ebp - 0xa8]
sub eax, 0xeb0937f
je 0x10002019
jmp 0x1000154e
mov eax, dword [ebp - 0xa8]
sub eax, 0xfa712a6
je 0x100021a2
jmp 0x10001564
mov eax, dword [ebp - 0xa8]
sub eax, 0x12a1361f
je 0x100025f3
jmp 0x1000157a
mov eax, dword [ebp - 0xa8]
sub eax, 0x169f42a2
je 0x10001813
jmp 0x10001590
mov eax, dword [ebp - 0xa8]
sub eax, 0x1be40960
je 0x100020e7
jmp 0x100015a6
mov eax, dword [ebp - 0xa8]
sub eax, 0x1cfe0263
je 0x10002681
jmp 0x100015bc
mov eax, dword [ebp - 0xa8]
sub eax, 0x1ea533ac
je 0x10001f0c
jmp 0x100015d2
mov eax, dword [ebp - 0xa8]
sub eax, 0x215ea42f
je 0x100022f4
jmp 0x100015e8
mov eax, dword [ebp - 0xa8]
sub eax, 0x2c671413
je 0x10001fff
jmp 0x100015fe
mov eax, dword [ebp - 0xa8]
sub eax, 0x2d8bc374
je 0x10002a43
jmp 0x10001614
mov eax, dword [ebp - 0xa8]
sub eax, 0x358fbb29
je 0x10001de6
jmp 0x1000162a
mov eax, dword [ebp - 0xa8]
sub eax, 0x397b54c6
je 0x10002288
jmp 0x10001640
mov eax, dword [ebp - 0xa8]
sub eax, 0x3b606931
je 0x10001ba1
jmp 0x10001656
mov eax, dword [ebp - 0xa8]
sub eax, 0x40c1306f
je 0x1000208f
jmp 0x1000166c
mov eax, dword [ebp - 0xa8]
sub eax, 0x44165068
je 0x10001889
jmp 0x10001682
mov eax, dword [ebp - 0xa8]
sub eax, 0x4451ee91
je 0x100020f6
jmp 0x10001698
mov eax, dword [ebp - 0xa8]
sub eax, 0x4ad37589
je 0x100024b5
jmp 0x100016ae
mov eax, dword [ebp - 0xa8]
sub eax, 0x4cc32d49
je 0x10001d9d
jmp 0x100016c4
mov eax, dword [ebp - 0xa8]
sub eax, 0x4e132b74
je 0x10002492
jmp 0x100016da
mov eax, dword [ebp - 0xa8]
sub eax, 0x4ea6506b
je 0x10001c76
jmp 0x100016f0
mov eax, dword [ebp - 0xa8]
sub eax, 0x5059459b
je 0x10002a34
jmp 0x10001706
mov eax, dword [ebp - 0xa8]
sub eax, 0x54c48ce4
je 0x10002706
jmp 0x1000171c
mov eax, dword [ebp - 0xa8]
sub eax, 0x5632e0c0
je 0x1000196e
jmp 0x10001732
mov eax, dword [ebp - 0xa8]
sub eax, 0x5baace68
je 0x10002552
jmp 0x10001748
mov eax, dword [ebp - 0xa8]
sub eax, 0x5da81390
je 0x1000260c
jmp 0x1000175e
mov eax, dword [ebp - 0xa8]
sub eax, 0x5f890b41
je 0x1000195f
mov ecx, dword [0x1006b540]
mov eax, dword [0x1006b53c]
mov edx, ecx
add edx, 0xae59926a
sub edx, 1
sub edx, 0xae59926a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6474df12
mov ecx, 0x44165068
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov eax, dword [ebp - 0xa4]
push eax
sub esp, 0x100
mov ecx, esp
mov dword [ebp - 0x8c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x88], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x84], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x80], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x7c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x78], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x74], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x70], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x90], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x64], eax
mov ecx, dword [0x1006b540]
mov eax, dword [0x1006b53c]
mov edx, ecx
add edx, 0x28a63bcc
sub edx, 1
sub edx, 0x28a63bcc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6474df12
mov ecx, 0x5f890b41
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov ecx, dword [0x1006b540]
mov eax, dword [0x1006b53c]
mov edx, ecx
add edx, 0x8af752e6
sub edx, 1
sub edx, 0x8af752e6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9f76b9ce
mov ecx, 0xbf3ca442
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000c710
add esp, 0xc
mov eax, dword [ebp - 0x90]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
setne al
and al, 1
mov byte [ebp - 0x5d], al
mov eax, dword [0x1006b540]
mov ecx, dword [0x1006b53c]
mov edx, eax
sub edx, 0x6db0eabd
sub edx, 1
add edx, 0x6db0eabd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9f76b9ce
mov ecx, 0xdb570f44
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov dl, byte [ebp - 0x5d]
mov eax, 0xd763275f
mov ecx, 0x3b606931
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov ecx, dword [0x1006b540]
mov eax, dword [0x1006b53c]
mov edx, ecx
add edx, 0x49bec1f2
sub edx, 1
sub edx, 0x49bec1f2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xba683723
mov ecx, 0x90db03eb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov ecx, dword [0x1006b540]
mov eax, dword [0x1006b53c]
mov edx, ecx
sub edx, 0x31e8a38c
sub edx, 1
add edx, 0x31e8a38c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xba683723
mov ecx, 0x91eff3ed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0xc6a40428
jmp 0x10002a7f
mov eax, dword [0x1006b540]
mov ecx, dword [0x1006b53c]
mov edx, eax
sub edx, 0x95089e8b
sub edx, 1
add edx, 0x95089e8b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x81151104
mov ecx, 0x4fcf389
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x9c], eax
mov eax, dword [0x1006b540]
mov ecx, dword [0x1006b53c]
mov edx, eax
add edx, 0x1132b5a5
sub edx, 1
sub edx, 0x1132b5a5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x81151104
mov ecx, 0x4ea6506b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0xbe71ee8b
jmp 0x10002a7f
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x98]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xa0], 0xc574f786
jmp 0x10002a7f
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x88]
mov esi, 0xffffffff
mov eax, 0x651ab03e
mov ecx, 0xeeaee34f
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov ecx, dword [0x1006b540]
mov eax, dword [0x1006b53c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x67b286dd
mov ecx, 0x4cc32d49
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov eax, dword [0x1006b540]
mov ecx, dword [0x1006b53c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x67b286dd
mov ecx, 0x358fbb29
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0xc6a40428
jmp 0x10002a7f
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x58], eax
mov ecx, dword [0x1006b540]
mov eax, dword [0x1006b53c]
mov edx, ecx
add edx, 0x6f1acc0e
sub edx, 1
sub edx, 0x6f1acc0e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7f5ff58
mov ecx, 0x97bb3ba8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0x1ea533ac
jmp 0x10002a7f
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xa0], 0xa7e4e2f9
jmp 0x10002a7f
mov eax, dword [0x1006b540]
mov ecx, dword [0x1006b53c]
mov edx, eax
sub edx, 0xedf519b4
sub edx, 1
add edx, 0xedf519b4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x87b13005
mov ecx, 0x6cbf5b9e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov dl, byte [ebp - 0x4d]
mov eax, 0x2c671413
mov ecx, 0x241c06a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0xa0], 0xeb0937f
jmp 0x10002a7f
mov ecx, dword [0x1006b540]
mov eax, dword [0x1006b53c]
mov edx, ecx
add edx, 0x87d9cb24
sub edx, 1
sub edx, 0x87d9cb24
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xddc04e66
mov ecx, 0x40c1306f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1006b540]
mov ecx, dword [0x1006b53c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xddc04e66
mov ecx, 0x1be40960
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0x4451ee91
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0xc6a40428
jmp 0x10002a7f
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
add eax, 0x3c
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xa0], 0xc3b9025d
jmp 0x10002a7f
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48]
add ecx, 0xa5a32fdb
add ecx, eax
sub ecx, 0xa5a32fdb
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov word [eax], 0
mov dword [ebp - 0xa0], 0xfa712a6
jmp 0x10002a7f
mov ecx, dword [0x1006b540]
mov eax, dword [0x1006b53c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf6866457
mov ecx, 0xa6275edd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov eax, dword [0x1006b540]
mov ecx, dword [0x1006b53c]
mov edx, eax
add edx, 0xd129db4c
sub edx, 1
sub edx, 0xd129db4c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf6866457
mov ecx, 0xbae9520c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0x64d21c74
jmp 0x10002a7f
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0xa0], 0x94b5a0be
jmp 0x10002a7f
mov eax, dword [ebp - 0x3c]
movzx esi, word [eax + 2]
mov edx, dword [ebp - 0x40]
mov eax, 0x54c48ce4
mov ecx, 0x8b4a9a29
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xa0], 0x215ea42f
jmp 0x10002a7f
mov eax, dword [ebp - 0x34]
add eax, 4
add eax, 0x10
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xa0], 0xcb4ea1a1
jmp 0x10002a7f
mov eax, dword [0x1006b540]
mov ecx, dword [0x1006b53c]
mov edx, eax
add edx, 0x8b285da
sub edx, 1
sub edx, 0x8b285da
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xafee7668
mov ecx, 0xfe635b76
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov eax, dword [ebp - 0x30]
movzx eax, word [eax]
mov ecx, dword [ebp - 0x38]
add ecx, 0xd6faa596
add ecx, eax
sub ecx, 0xd6faa596
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100183b0
call fcn.1000ea80
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x29], al
mov eax, dword [0x1006b540]
mov ecx, dword [0x1006b53c]
mov edx, eax
add edx, 0x185629e9
sub edx, 1
sub edx, 0x185629e9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xafee7668
mov ecx, 0x7de9a1d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0xf38986c
add edx, eax
add edx, 0xf38986c
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xa0], 0x4e132b74
jmp 0x10002a7f
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x28]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xa0], 0x4ad37589
jmp 0x10002a7f
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, esi
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000c870
add esp, 0xc
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add esi, 0x2e4fa3de
add esi, eax
sub esi, 0x2e4fa3de
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov dword [ebp - 0xa0], 0x5baace68
jmp 0x10002a7f
mov eax, dword [0x1006b540]
mov ecx, dword [0x1006b53c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5059459b
mov ecx, 0x8e992b35
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov eax, dword [0x1006b540]
mov ecx, dword [0x1006b53c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5059459b
mov ecx, 0xbc6a9957
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0x12a1361f
jmp 0x10002a7f
mov eax, dword [ebp - 0x74]
mov ax, word [eax]
mov word [ebp - 0x1e], ax
mov dword [ebp - 0xa0], 0x5da81390
jmp 0x10002a7f
mov cx, word [ebp - 0x1e]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x74]
mov word [eax], cx
mov dword [ebp - 0xa0], 0xfc6f85ee
jmp 0x10002a7f
mov eax, dword [0x1006b540]
mov ecx, dword [0x1006b53c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2d8bc374
mov ecx, 0x1cfe0263
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov ecx, dword [0x1006b540]
mov eax, dword [0x1006b53c]
mov edx, ecx
add edx, 0xf8ccf1b4
sub edx, 1
sub edx, 0xf8ccf1b4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2d8bc374
mov ecx, 0x63b5d501
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa0], 0xcbe4aa8b
jmp 0x10002a7f
mov ecx, dword [0x1006b540]
mov eax, dword [0x1006b53c]
mov edx, ecx
sub edx, 0x29efd1a6
sub edx, 1
add edx, 0x29efd1a6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x98644308
mov ecx, 0xe14794d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x1006b540]
mov eax, dword [0x1006b53c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x98644308
mov ecx, 0xec4dc3e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0xe7720b1
jmp 0x10002a7f
mov eax, dword [ebp - 0x94]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xc6a40428
jmp 0x10002a7f
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1000bb10
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000c710
add esp, 0xc
mov eax, dword [ebp - 0x90]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 0xbf3ca442
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0x90db03eb
jmp 0x10002a7f
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa0], 0x4fcf389
jmp 0x10002a7f
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0xa0], 0x8d63a3e4
jmp 0x10002a7f
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xa0], 0x6cbf5b9e
jmp 0x10002a7f
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0x40c1306f
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0xa6275edd
jmp 0x10002a7f
mov eax, dword [ebp - 0x30]
movzx edx, word [eax]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
imul eax, eax, 0x28
sub ecx, 0xfbabe522
add ecx, eax
add ecx, 0xfbabe522
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100183b0
call fcn.1000ea80
add esp, 8
mov dword [ebp - 0xa0], 0xfe635b76
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0x8e992b35
jmp 0x10002a7f
mov dword [ebp - 0xa0], 0x1cfe0263
jmp 0x10002a7f
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xe14794d4
jmp 0x100011d8