Function at 0x1000a540
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x98
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa0], eax
mov eax, dword [0x10092080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x9c], 0x94b0d719
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], eax
sub eax, 0x81e32a16
je 0x1000b3ed
jmp 0x1000a585
mov eax, dword [ebp - 0xa4]
sub eax, 0x84a3bcf3
je 0x1000b95d
jmp 0x1000a59b
mov eax, dword [ebp - 0xa4]
sub eax, 0x850e02ab
je 0x1000ba43
jmp 0x1000a5b1
mov eax, dword [ebp - 0xa4]
sub eax, 0x85c70590
je 0x1000ade9
jmp 0x1000a5c7
mov eax, dword [ebp - 0xa4]
sub eax, 0x88b3ae9e
je 0x1000ac83
jmp 0x1000a5dd
mov eax, dword [ebp - 0xa4]
sub eax, 0x94b0d719
je 0x1000ab62
jmp 0x1000a5f3
mov eax, dword [ebp - 0xa4]
sub eax, 0x9542e3bf
je 0x1000bd42
jmp 0x1000a609
mov eax, dword [ebp - 0xa4]
sub eax, 0x95b2caf3
je 0x1000bba8
jmp 0x1000a61f
mov eax, dword [ebp - 0xa4]
sub eax, 0x97c18d47
je 0x1000bb11
jmp 0x1000a635
mov eax, dword [ebp - 0xa4]
sub eax, 0x9fa63ea2
je 0x1000b169
jmp 0x1000a64b
mov eax, dword [ebp - 0xa4]
sub eax, 0xa30a5471
je 0x1000afea
jmp 0x1000a661
mov eax, dword [ebp - 0xa4]
sub eax, 0xa4f328f2
je 0x1000bc6b
jmp 0x1000a677
mov eax, dword [ebp - 0xa4]
sub eax, 0xa6d42a3f
je 0x1000b724
jmp 0x1000a68d
mov eax, dword [ebp - 0xa4]
sub eax, 0xa8c98bc2
je 0x1000b08d
jmp 0x1000a6a3
mov eax, dword [ebp - 0xa4]
sub eax, 0xaad62c26
je 0x1000b8ec
jmp 0x1000a6b9
mov eax, dword [ebp - 0xa4]
sub eax, 0xab011d6d
je 0x1000ba8c
jmp 0x1000a6cf
mov eax, dword [ebp - 0xa4]
sub eax, 0xac9e326b
je 0x1000b56b
jmp 0x1000a6e5
mov eax, dword [ebp - 0xa4]
sub eax, 0xadd14251
je 0x1000b11a
jmp 0x1000a6fb
mov eax, dword [ebp - 0xa4]
sub eax, 0xb0744cd1
je 0x1000bbc9
jmp 0x1000a711
mov eax, dword [ebp - 0xa4]
sub eax, 0xb995a79c
je 0x1000b686
jmp 0x1000a727
mov eax, dword [ebp - 0xa4]
sub eax, 0xc198d31e
je 0x1000b6bc
jmp 0x1000a73d
mov eax, dword [ebp - 0xa4]
sub eax, 0xc22c8b6b
je 0x1000bd8a
jmp 0x1000a753
mov eax, dword [ebp - 0xa4]
sub eax, 0xc6be33a6
je 0x1000b526
jmp 0x1000a769
mov eax, dword [ebp - 0xa4]
sub eax, 0xc77d8246
je 0x1000bc7d
jmp 0x1000a77f
mov eax, dword [ebp - 0xa4]
sub eax, 0xc85f154f
je 0x1000b2cf
jmp 0x1000a795
mov eax, dword [ebp - 0xa4]
sub eax, 0xcae39cb4
je 0x1000b214
jmp 0x1000a7ab
mov eax, dword [ebp - 0xa4]
sub eax, 0xd2f9e55c
je 0x1000b1bc
jmp 0x1000a7c1
mov eax, dword [ebp - 0xa4]
sub eax, 0xd3150836
je 0x1000b316
jmp 0x1000a7d7
mov eax, dword [ebp - 0xa4]
sub eax, 0xe126a02e
je 0x1000ae07
jmp 0x1000a7ed
mov eax, dword [ebp - 0xa4]
sub eax, 0xe341ac4d
je 0x1000b10b
jmp 0x1000a803
mov eax, dword [ebp - 0xa4]
sub eax, 0xe6b6b5f4
je 0x1000bd33
jmp 0x1000a819
mov eax, dword [ebp - 0xa4]
sub eax, 0xe9e004dc
je 0x1000bcfd
jmp 0x1000a82f
mov eax, dword [ebp - 0xa4]
sub eax, 0xefbd7f89
je 0x1000b1cb
jmp 0x1000a845
mov eax, dword [ebp - 0xa4]
sub eax, 0xf058df14
je 0x1000b677
jmp 0x1000a85b
mov eax, dword [ebp - 0xa4]
sub eax, 0xf5a993ce
je 0x1000ba9b
jmp 0x1000a871
mov eax, dword [ebp - 0xa4]
sub eax, 0xf745a379
je 0x1000b017
jmp 0x1000a887
mov eax, dword [ebp - 0xa4]
sub eax, 0xf81c4dde
je 0x1000af53
jmp 0x1000a89d
mov eax, dword [ebp - 0xa4]
sub eax, 0xfcc1b8b7
je 0x1000bceb
jmp 0x1000a8b3
mov eax, dword [ebp - 0xa4]
sub eax, 0x1cf435e
je 0x1000b8fb
jmp 0x1000a8c9
mov eax, dword [ebp - 0xa4]
sub eax, 0x3e9900b
je 0x1000b9fa
jmp 0x1000a8df
mov eax, dword [ebp - 0xa4]
sub eax, 0x40e288d
je 0x1000b914
jmp 0x1000a8f5
mov eax, dword [ebp - 0xa4]
sub eax, 0x4975945
je 0x1000b38c
jmp 0x1000a90b
mov eax, dword [ebp - 0xa4]
sub eax, 0x85d2a70
je 0x1000bb79
jmp 0x1000a921
mov eax, dword [ebp - 0xa4]
sub eax, 0x17e3fa35
je 0x1000b44d
jmp 0x1000a937
mov eax, dword [ebp - 0xa4]
sub eax, 0x1b167633
je 0x1000ad08
jmp 0x1000a94d
mov eax, dword [ebp - 0xa4]
sub eax, 0x1cc2bd7b
je 0x1000bbdb
jmp 0x1000a963
mov eax, dword [ebp - 0xa4]
sub eax, 0x1e8446d1
je 0x1000b800
jmp 0x1000a979
mov eax, dword [ebp - 0xa4]
sub eax, 0x2726589e
je 0x1000abd8
jmp 0x1000a98f
mov eax, dword [ebp - 0xa4]
sub eax, 0x292f94a6
je 0x1000b19e
jmp 0x1000a9a5
mov eax, dword [ebp - 0xa4]
sub eax, 0x2c909e89
je 0x1000b008
jmp 0x1000a9bb
mov eax, dword [ebp - 0xa4]
sub eax, 0x30158259
je 0x1000b784
jmp 0x1000a9d1
mov eax, dword [ebp - 0xa4]
sub eax, 0x357c4cba
je 0x1000b5d9
jmp 0x1000a9e7
mov eax, dword [ebp - 0xa4]
sub eax, 0x39c82376
je 0x1000bc59
jmp 0x1000a9fd
mov eax, dword [ebp - 0xa4]
sub eax, 0x3a1723f5
je 0x1000bd99
jmp 0x1000aa13
mov eax, dword [ebp - 0xa4]
sub eax, 0x3db39e49
je 0x1000b187
jmp 0x1000aa29
mov eax, dword [ebp - 0xa4]
sub eax, 0x4318ff0c
je 0x1000b9eb
jmp 0x1000aa3f
mov eax, dword [ebp - 0xa4]
sub eax, 0x47001577
je 0x1000ae16
jmp 0x1000aa55
mov eax, dword [ebp - 0xa4]
sub eax, 0x4e9c5030
je 0x1000b3fc
jmp 0x1000aa6b
mov eax, dword [ebp - 0xa4]
sub eax, 0x5506d3c0
je 0x1000b4cd
jmp 0x1000aa81
mov eax, dword [ebp - 0xa4]
sub eax, 0x5639f005
je 0x1000aedd
jmp 0x1000aa97
mov eax, dword [ebp - 0xa4]
sub eax, 0x5bdbd17f
je 0x1000ac92
jmp 0x1000aaad
mov eax, dword [ebp - 0xa4]
sub eax, 0x5c1edd96
je 0x1000afdb
jmp 0x1000aac3
mov eax, dword [ebp - 0xa4]
sub eax, 0x5d5bff85
je 0x1000bbea
jmp 0x1000aad9
mov eax, dword [ebp - 0xa4]
sub eax, 0x62166ad9
je 0x1000bccc
jmp 0x1000aaef
mov eax, dword [ebp - 0xa4]
sub eax, 0x6fbfe5e3
je 0x1000b4dc
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
add edx, 0x62281711
sub edx, 1
sub edx, 0x62281711
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1cc2bd7b
mov ecx, 0x2726589e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
mov eax, dword [0x10093554]
mov ecx, dword [0x10093550]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1cc2bd7b
mov ecx, 0x88b3ae9e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0x5bdbd17f
jmp 0x1000bda6
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
sub edx, 0xa19fc936
sub edx, 1
add edx, 0xa19fc936
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5d5bff85
mov ecx, 0x1b167633
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x94], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x90]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.100266f0
add esp, 0xc
mov eax, dword [ebp - 0x94]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x59], al
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
add edx, 0xae0ba2ab
sub edx, 1
sub edx, 0xae0ba2ab
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5d5bff85
mov ecx, 0x85c70590
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dl, byte [ebp - 0x59]
mov eax, 0xe126a02e
mov ecx, 0x47001577
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0xb0744cd1
jmp 0x1000bda6
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x90]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x84]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x9c], 0x5639f005
jmp 0x1000bda6
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
add edx, 0xe57bfcb8
sub edx, 1
sub edx, 0xe57bfcb8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x39c82376
mov ecx, 0xf81c4dde
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov eax, dword [ebp - 0x58]
mov ecx, 0xffffffff
cmp eax, ecx
sete al
and al, 1
mov byte [ebp - 0x51], al
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
sub edx, 0xdff7000d
sub edx, 1
add edx, 0xdff7000d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x39c82376
mov ecx, 0x5c1edd96
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0xa30a5471
jmp 0x1000bda6
mov dl, byte [ebp - 0x51]
mov eax, 0xf745a379
mov ecx, 0x2c909e89
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0xb0744cd1
jmp 0x1000bda6
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
sub edx, 0x11fce2ca
sub edx, 1
add edx, 0x11fce2ca
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa4f328f2
mov ecx, 0xa8c98bc2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
sub edx, 0x6190d8d3
sub edx, 1
add edx, 0x6190d8d3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa4f328f2
mov ecx, 0xe341ac4d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0xadd14251
jmp 0x1000bda6
mov eax, dword [ebp - 0x50]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov dword [ebp - 0x9c], 0x9fa63ea2
jmp 0x1000bda6
mov edx, dword [ebp - 0x7c]
mov eax, 0x3db39e49
mov ecx, 0xefbd7f89
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x9c], 0x292f94a6
jmp 0x1000bda6
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x9c], 0xd2f9e55c
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0xb0744cd1
jmp 0x1000bda6
mov eax, dword [0x10093554]
mov ecx, dword [0x10093550]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc77d8246
mov ecx, 0xcae39cb4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
add edx, 0x7d4cbce5
sub edx, 1
sub edx, 0x7d4cbce5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc77d8246
mov ecx, 0xc85f154f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0x7dcae835
jmp 0x1000bda6
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
sub edx, 0x2b3fe51e
sub edx, 1
add edx, 0x2b3fe51e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x62166ad9
mov ecx, 0x4975945
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov word [eax], 0
mov eax, dword [0x10093554]
mov ecx, dword [0x10093550]
mov edx, eax
add edx, 0x1ede8c0
sub edx, 1
sub edx, 0x1ede8c0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x62166ad9
mov ecx, 0x81e32a16
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0x4e9c5030
jmp 0x1000bda6
mov eax, dword [0x10093554]
mov ecx, dword [0x10093550]
mov edx, eax
sub edx, 0xefc638d6
sub edx, 1
add edx, 0xefc638d6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfcc1b8b7
mov ecx, 0x17e3fa35
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov eax, dword [ebp - 0x6c]
mov ax, word [eax]
mov word [ebp - 0x3e], ax
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
sub edx, 0x22bd7e23
sub edx, 1
add edx, 0x22bd7e23
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfcc1b8b7
mov ecx, 0x5506d3c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0x6fbfe5e3
jmp 0x1000bda6
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
sub eax, 0x9a9f2d86
add eax, ecx
add eax, 0x9a9f2d86
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x6c]
mov ax, word [eax]
mov word [ebp - 0x2e], ax
mov dword [ebp - 0x9c], 0xac9e326b
jmp 0x1000bda6
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe9e004dc
mov ecx, 0x357c4cba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov ax, word [ebp - 0x2e]
movzx eax, ax
imul edx, eax, 0x28
mov ecx, dword [ebp - 0x34]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
sub edx, 0xd2752d46
sub edx, 1
add edx, 0xd2752d46
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe9e004dc
mov ecx, 0xf058df14
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0xb995a79c
jmp 0x1000bda6
mov ecx, dword [ebp - 0x2c]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10033c50
call fcn.1002a050
add esp, 8
mov edx, eax
mov eax, 0xc198d31e
mov ecx, 0x1e8446d1
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov eax, dword [ebp - 0x64]
mov dword [eax], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x88]
mov edx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0x579a5338
add edx, eax
add edx, 0x579a5338
mov eax, dword [ebp - 0x64]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x25], al
mov dword [ebp - 0x9c], 0xa6d42a3f
jmp 0x1000bda6
mov cl, byte [ebp - 0x25]
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
sub eax, 0xf31b924d
add eax, ecx
add eax, 0xf31b924d
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x68]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
add eax, 0x51df226f
add eax, ecx
sub eax, 0x51df226f
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x9c], 0x30158259
jmp 0x1000bda6
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10026850
add esp, 0xc
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x88]
mov esi, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, edi
sub esi, eax
mov eax, dword [ebp - 0x64]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov dword [ebp - 0x9c], 0x1e8446d1
jmp 0x1000bda6
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
sub edx, 0xdfe95b7a
sub edx, 1
add edx, 0xdfe95b7a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe6b6b5f4
mov ecx, 0x7ebcfa52
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0x1cf435e
jmp 0x1000bda6
mov eax, dword [ebp - 0x6c]
mov ax, word [eax]
mov word [ebp - 0x16], ax
mov dword [ebp - 0x9c], 0x40e288d
jmp 0x1000bda6
mov eax, dword [0x10093554]
mov ecx, dword [0x10093550]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9542e3bf
mov ecx, 0x84a3bcf3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov cx, word [ebp - 0x16]
add cx, 0x8381
add cx, 1
sub cx, 0x8381
mov eax, dword [ebp - 0x6c]
mov word [eax], cx
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
add edx, 0x7a3dd398
sub edx, 1
sub edx, 0x7a3dd398
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9542e3bf
mov ecx, 0x4318ff0c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0x3e9900b
jmp 0x1000bda6
mov eax, dword [0x10093554]
mov ecx, dword [0x10093550]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc22c8b6b
mov ecx, 0x850e02ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov eax, dword [0x10093554]
mov ecx, dword [0x10093550]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc22c8b6b
mov ecx, 0xab011d6d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0x4e9c5030
jmp 0x1000bda6
mov ecx, dword [0x10093554]
mov eax, dword [0x10093550]
mov edx, ecx
sub edx, 0xae00b2bd
sub edx, 1
add edx, 0xae00b2bd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3a1723f5
mov ecx, 0x97c18d47
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov eax, dword [0x10093554]
mov ecx, dword [0x10093550]
mov edx, eax
sub edx, 0x61ba116f
sub edx, 1
add edx, 0x61ba116f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3a1723f5
mov ecx, 0x731c7bc4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000bda6
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x9c], 0x95b2caf3
jmp 0x1000bda6
mov eax, dword [ebp - 0x98]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x9c], 0xb0744cd1
jmp 0x1000bda6
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10025950
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x9c], 0x2726589e
jmp 0x1000bda6
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x94], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x90]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.100266f0
add esp, 0xc
mov eax, dword [ebp - 0x94]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x9c], 0x1b167633
jmp 0x1000bda6
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x9c], 0xf81c4dde
jmp 0x1000bda6
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x9c], 0xa8c98bc2
jmp 0x1000bda6
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x9c], 0xcae39cb4
jmp 0x1000bda6
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov word [eax], 0
mov dword [ebp - 0x9c], 0x4975945
jmp 0x1000bda6
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x9c], 0x17e3fa35
jmp 0x1000bda6
mov ax, word [ebp - 0x2e]
movzx eax, ax
imul edx, eax, 0x28
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x9c], 0x357c4cba
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0x7ebcfa52
jmp 0x1000bda6
mov ax, word [ebp - 0x16]
mov ax, word [ebp - 0x16]
mov ax, word [ebp - 0x16]
mov ax, word [ebp - 0x16]
mov ax, word [ebp - 0x16]
mov ax, word [ebp - 0x16]
mov ax, word [ebp - 0x16]
mov cx, word [ebp - 0x16]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x6c]
mov word [eax], cx
mov dword [ebp - 0x9c], 0x84a3bcf3
jmp 0x1000bda6
mov dword [ebp - 0x9c], 0x850e02ab
jmp 0x1000bda6
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x9c], 0x97c18d47
jmp 0x1000a569