Function at 0x10010360
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x9c
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa0], eax
mov eax, dword [0x1008e880]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x9c], 0x42b11756
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], eax
sub eax, 0x8184f521
je 0x10010cff
jmp 0x100103a4
mov eax, dword [ebp - 0xa4]
sub eax, 0x868366bf
je 0x10010f42
jmp 0x100103ba
mov eax, dword [ebp - 0xa4]
sub eax, 0x879b37cb
je 0x100113c3
jmp 0x100103d0
mov eax, dword [ebp - 0xa4]
sub eax, 0x8e3e32d7
je 0x1001090c
jmp 0x100103e6
mov eax, dword [ebp - 0xa4]
sub eax, 0x930dda44
je 0x100117b4
jmp 0x100103fc
mov eax, dword [ebp - 0xa4]
sub eax, 0x948329de
je 0x1001175f
jmp 0x10010412
mov eax, dword [ebp - 0xa4]
sub eax, 0x9758a393
je 0x10010afa
jmp 0x10010428
mov eax, dword [ebp - 0xa4]
sub eax, 0x982ea8d2
je 0x100115fe
jmp 0x1001043e
mov eax, dword [ebp - 0xa4]
sub eax, 0x995c1169
je 0x10011780
jmp 0x10010454
mov eax, dword [ebp - 0xa4]
sub eax, 0x9fac2efc
je 0x1001159f
jmp 0x1001046a
mov eax, dword [ebp - 0xa4]
sub eax, 0xa2fadb64
je 0x10010c24
jmp 0x10010480
mov eax, dword [ebp - 0xa4]
sub eax, 0xac94b41e
je 0x10010f8b
jmp 0x10010496
mov eax, dword [ebp - 0xa4]
sub eax, 0xb19c5e2d
je 0x10010ff8
jmp 0x100104ac
mov eax, dword [ebp - 0xa4]
sub eax, 0xb480b9da
je 0x100109b8
jmp 0x100104c2
mov eax, dword [ebp - 0xa4]
sub eax, 0xb7be9683
je 0x100114d4
jmp 0x100104d8
mov eax, dword [ebp - 0xa4]
sub eax, 0xc1216b5b
je 0x10010c5d
jmp 0x100104ee
mov eax, dword [ebp - 0xa4]
sub eax, 0xca51c9d8
je 0x10010e9c
jmp 0x10010504
mov eax, dword [ebp - 0xa4]
sub eax, 0xcb2dc22c
je 0x1001109b
jmp 0x1001051a
mov eax, dword [ebp - 0xa4]
sub eax, 0xcec9a5c5
je 0x10010ec0
jmp 0x10010530
mov eax, dword [ebp - 0xa4]
sub eax, 0xd15e3695
je 0x10011007
jmp 0x10010546
mov eax, dword [ebp - 0xa4]
sub eax, 0xd3948097
je 0x100113d2
jmp 0x1001055c
mov eax, dword [ebp - 0xa4]
sub eax, 0xdebe3c0f
je 0x10010d79
jmp 0x10010572
mov eax, dword [ebp - 0xa4]
sub eax, 0xdee50cb0
je 0x100114b6
jmp 0x10010588
mov eax, dword [ebp - 0xa4]
sub eax, 0xe01c4d70
je 0x10011660
jmp 0x1001059e
mov eax, dword [ebp - 0xa4]
sub eax, 0xe231adb5
je 0x100111cf
jmp 0x100105b4
mov eax, dword [ebp - 0xa4]
sub eax, 0xe325a81b
je 0x10010b18
jmp 0x100105ca
mov eax, dword [ebp - 0xa4]
sub eax, 0xebd9c283
je 0x10010c03
jmp 0x100105e0
mov eax, dword [ebp - 0xa4]
sub eax, 0xec28b9e2
je 0x10010d97
jmp 0x100105f6
mov eax, dword [ebp - 0xa4]
sub eax, 0xee5929f1
je 0x100111de
jmp 0x1001060c
mov eax, dword [ebp - 0xa4]
sub eax, 0xfa13c34c
je 0x100115ae
jmp 0x10010622
mov eax, dword [ebp - 0xa4]
sub eax, 0xfc6f8271
je 0x10010dde
jmp 0x10010638
mov eax, dword [ebp - 0xa4]
sub eax, 0xe28d7aa
je 0x100112eb
jmp 0x1001064e
mov eax, dword [ebp - 0xa4]
sub eax, 0xf310a39
je 0x10011423
jmp 0x10010664
mov eax, dword [ebp - 0xa4]
sub eax, 0x11fa9698
je 0x100112a2
jmp 0x1001067a
mov eax, dword [ebp - 0xa4]
sub eax, 0x13756f63
je 0x10011343
jmp 0x10010690
mov eax, dword [ebp - 0xa4]
sub eax, 0x13ad6183
je 0x10010db1
jmp 0x100106a6
mov eax, dword [ebp - 0xa4]
sub eax, 0x15d26933
je 0x10010e83
jmp 0x100106bc
mov eax, dword [ebp - 0xa4]
sub eax, 0x2078e09c
je 0x10010bf4
jmp 0x100106d2
mov eax, dword [ebp - 0xa4]
sub eax, 0x2115e623
je 0x10011697
jmp 0x100106e8
mov eax, dword [ebp - 0xa4]
sub eax, 0x362adeae
je 0x1001176e
jmp 0x100106fe
mov eax, dword [ebp - 0xa4]
sub eax, 0x3e7ff0bb
je 0x10010b86
jmp 0x10010714
mov eax, dword [ebp - 0xa4]
sub eax, 0x412a7cb4
je 0x10010e4e
jmp 0x1001072a
mov eax, dword [ebp - 0xa4]
sub eax, 0x41d84462
je 0x10011025
jmp 0x10010740
mov eax, dword [ebp - 0xa4]
sub eax, 0x42b11756
je 0x100108bb
jmp 0x10010756
mov eax, dword [ebp - 0xa4]
sub eax, 0x42b9465d
je 0x10010d0e
jmp 0x1001076c
mov eax, dword [ebp - 0xa4]
sub eax, 0x46ef2a77
je 0x10010d62
jmp 0x10010782
mov eax, dword [ebp - 0xa4]
sub eax, 0x47981840
je 0x10010e34
jmp 0x10010798
mov eax, dword [ebp - 0xa4]
sub eax, 0x4cacec25
je 0x10010a10
jmp 0x100107ae
mov eax, dword [ebp - 0xa4]
sub eax, 0x4dc61a63
je 0x100111f5
jmp 0x100107c4
mov eax, dword [ebp - 0xa4]
sub eax, 0x52c07b1c
je 0x1001166f
jmp 0x100107da
mov eax, dword [ebp - 0xa4]
sub eax, 0x571a9d56
je 0x10011251
jmp 0x100107f0
mov eax, dword [ebp - 0xa4]
sub eax, 0x591e0c21
je 0x100115ef
jmp 0x10010806
mov eax, dword [ebp - 0xa4]
sub eax, 0x63ace7d3
je 0x100114c5
jmp 0x1001081c
mov eax, dword [ebp - 0xa4]
sub eax, 0x663e62f5
je 0x10011537
jmp 0x10010832
mov eax, dword [ebp - 0xa4]
sub eax, 0x66c1b873
je 0x10010dcf
jmp 0x10010848
mov eax, dword [ebp - 0xa4]
sub eax, 0x69cb9494
je 0x100114ee
jmp 0x1001085e
mov eax, dword [ebp - 0xa4]
sub eax, 0x78f470b8
je 0x10010ee4
jmp 0x10010874
mov eax, dword [ebp - 0xa4]
sub eax, 0x7ae91295
je 0x100115de
jmp 0x1001088a
mov eax, dword [ebp - 0xa4]
sub eax, 0x7baf5145
je 0x100112fa
jmp 0x100108a0
mov eax, dword [ebp - 0xa4]
sub eax, 0x7e4c2762
je 0x100109c7
jmp 0x100108b6
jmp 0x100117d0
mov eax, dword [0x1008fd64]
mov ecx, dword [0x1008fd60]
mov edx, eax
add edx, 0xa2e558a
sub edx, 1
sub edx, 0xa2e558a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x591e0c21
mov ecx, 0x8e3e32d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
mov ecx, dword [0x1008fd64]
mov eax, dword [0x1008fd60]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x591e0c21
mov ecx, 0xb480b9da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov dword [ebp - 0x9c], 0x7e4c2762
jmp 0x100117d0
mov eax, dword [0x1008fd64]
mov ecx, dword [0x1008fd60]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x982ea8d2
mov ecx, 0x4cacec25
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov eax, dword [ebp - 0xa0]
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x90], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1002c830
add esp, 0xc
mov eax, dword [ebp - 0x90]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
setne al
and al, 1
mov byte [ebp - 0x5d], al
mov ecx, dword [0x1008fd64]
mov eax, dword [0x1008fd60]
mov edx, ecx
add edx, 0xb0385199
sub edx, 1
sub edx, 0xb0385199
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x982ea8d2
mov ecx, 0x9758a393
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov dl, byte [ebp - 0x5d]
mov eax, 0xe325a81b
mov ecx, 0xebd9c283
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov ecx, dword [0x1008fd64]
mov eax, dword [0x1008fd60]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe01c4d70
mov ecx, 0x3e7ff0bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov ecx, dword [0x1008fd64]
mov eax, dword [0x1008fd60]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe01c4d70
mov ecx, 0x2078e09c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov dword [ebp - 0x9c], 0x7ae91295
jmp 0x100117d0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x9c], 0xa2fadb64
jmp 0x100117d0
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x9c], 0xc1216b5b
jmp 0x100117d0
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x98]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x88]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov edx, dword [ebp - 0x84]
mov esi, 0xffffffff
mov eax, 0x42b9465d
mov ecx, 0x8184f521
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov dword [ebp - 0x9c], 0x7ae91295
jmp 0x100117d0
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov dword [ebp - 0x9c], 0x46ef2a77
jmp 0x100117d0
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x9c], 0xdebe3c0f
jmp 0x100117d0
mov edx, dword [ebp - 0x50]
mov eax, 0xec28b9e2
mov ecx, 0xfc6f8271
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x9c], 0x13ad6183
jmp 0x100117d0
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x9c], 0x66c1b873
jmp 0x100117d0
mov dword [ebp - 0x9c], 0x7ae91295
jmp 0x100117d0
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov dword [ebp - 0x9c], 0x47981840
jmp 0x100117d0
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x9c], 0x412a7cb4
jmp 0x100117d0
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x48]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
mov word [eax], 0
mov dword [ebp - 0x9c], 0x15d26933
jmp 0x100117d0
mov eax, dword [ebp - 0x70]
mov ax, word [eax]
mov word [ebp - 0x42], ax
mov dword [ebp - 0x9c], 0xca51c9d8
jmp 0x100117d0
mov ax, word [ebp - 0x42]
movzx eax, ax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x9c], 0xcec9a5c5
jmp 0x100117d0
mov eax, dword [ebp - 0x3c]
movzx esi, word [eax + 2]
mov edx, dword [ebp - 0x40]
mov eax, 0xb7be9683
mov ecx, 0x78f470b8
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov eax, dword [ebp - 0x74]
mov ecx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 0x18
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
sub ecx, 0xc8e0c31e
add ecx, eax
add ecx, 0xc8e0c31e
mov eax, dword [ebp - 0x70]
movzx eax, word [eax]
imul eax, eax, 0x28
sub ecx, 0xd2f147b5
add ecx, eax
add ecx, 0xd2f147b5
mov eax, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x9c], 0x868366bf
jmp 0x100117d0
mov eax, dword [0x1008fd64]
mov ecx, dword [0x1008fd60]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x52c07b1c
mov ecx, 0xac94b41e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov ecx, dword [ebp - 0x38]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10039f02
call fcn.10030190
add esp, 8
mov dword [ebp - 0x34], eax
mov eax, dword [0x1008fd64]
mov ecx, dword [0x1008fd60]
mov edx, eax
sub edx, 0x4615864a
sub edx, 1
add edx, 0x4615864a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x52c07b1c
mov ecx, 0xb19c5e2d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov dword [ebp - 0x9c], 0xd15e3695
jmp 0x100117d0
mov edx, dword [ebp - 0x34]
mov eax, 0x41d84462
mov ecx, 0x571a9d56
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov ecx, dword [0x1008fd64]
mov eax, dword [0x1008fd60]
mov edx, ecx
add edx, 0xe3c1cdcb
sub edx, 1
sub edx, 0xe3c1cdcb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2115e623
mov ecx, 0xcb2dc22c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov eax, dword [ebp - 0x68]
mov dword [eax], 0
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x8c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
mov eax, dword [ebp - 0x68]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x64]
mov byte [eax], cl
mov eax, dword [ebp - 0x8c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x91c9d3b7
add edx, eax
sub edx, 0x91c9d3b7
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, esi
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1002c990
add esp, 0xc
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x2c], eax
mov ecx, dword [0x1008fd64]
mov eax, dword [0x1008fd60]
mov edx, ecx
add edx, 0xda9730b6
sub edx, 1
sub edx, 0xda9730b6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2115e623
mov ecx, 0xe231adb5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov dword [ebp - 0x9c], 0xee5929f1
jmp 0x100117d0
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x9c], 0x4dc61a63
jmp 0x100117d0
mov eax, dword [ebp - 0x8c]
mov esi, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub esi, 0x44b771ad
add esi, eax
add esi, 0x44b771ad
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x28]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x64]
mov byte [eax], cl
mov dword [ebp - 0x9c], 0x571a9d56
jmp 0x100117d0
mov eax, dword [0x1008fd64]
mov ecx, dword [0x1008fd60]
mov edx, eax
sub edx, 0x237d14d6
sub edx, 1
add edx, 0x237d14d6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x948329de
mov ecx, 0x11fa9698
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov eax, dword [0x1008fd64]
mov ecx, dword [0x1008fd60]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x948329de
mov ecx, 0xe28d7aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov dword [ebp - 0x9c], 0x7baf5145
jmp 0x100117d0
mov eax, dword [0x1008fd64]
mov ecx, dword [0x1008fd60]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x362adeae
mov ecx, 0x13756f63
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov eax, dword [ebp - 0x70]
mov ax, word [eax]
mov word [ebp - 0x22], ax
mov ecx, dword [0x1008fd64]
mov eax, dword [0x1008fd60]
mov edx, ecx
add edx, 0x8b8a7090
sub edx, 1
sub edx, 0x8b8a7090
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x362adeae
mov ecx, 0x879b37cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov dword [ebp - 0x9c], 0xd3948097
jmp 0x100117d0
mov eax, dword [0x1008fd64]
mov ecx, dword [0x1008fd60]
mov edx, eax
sub edx, 0xade2d19b
sub edx, 1
add edx, 0xade2d19b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x995c1169
mov ecx, 0xf310a39
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov cx, word [ebp - 0x22]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x70]
mov word [eax], cx
mov ecx, dword [0x1008fd64]
mov eax, dword [0x1008fd60]
mov edx, ecx
add edx, 0xdf7bff62
sub edx, 1
sub edx, 0xdf7bff62
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x995c1169
mov ecx, 0xdee50cb0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov dword [ebp - 0x9c], 0x63ace7d3
jmp 0x100117d0
mov dword [ebp - 0x9c], 0x15d26933
jmp 0x100117d0
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x9c], 0x69cb9494
jmp 0x100117d0
mov eax, dword [0x1008fd64]
mov ecx, dword [0x1008fd60]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x930dda44
mov ecx, 0x663e62f5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x1008fd64]
mov ecx, dword [0x1008fd60]
mov edx, eax
add edx, 0xd0c408f5
sub edx, 1
sub edx, 0xd0c408f5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x930dda44
mov ecx, 0x9fac2efc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x100117d0
mov dword [ebp - 0x9c], 0xfa13c34c
jmp 0x100117d0
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x94]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x9c], 0x7ae91295
jmp 0x100117d0
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1002ba90
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x9c], 0x8e3e32d7
jmp 0x100117d0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x90], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1002c830
add esp, 0xc
mov eax, dword [ebp - 0x90]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x9c], 0x4cacec25
jmp 0x100117d0
mov dword [ebp - 0x9c], 0x3e7ff0bb
jmp 0x100117d0
mov ecx, dword [ebp - 0x38]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10039f02
call fcn.10030190
add esp, 8
mov dword [ebp - 0x9c], 0xac94b41e
jmp 0x100117d0
mov eax, dword [ebp - 0x68]
mov dword [eax], 0
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x8c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0xa9d0b79
add edx, eax
sub edx, 0xa9d0b79
mov eax, dword [ebp - 0x68]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x64]
mov byte [eax], cl
mov eax, dword [ebp - 0x8c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0x2e90e032
add edx, eax
add edx, 0x2e90e032
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, esi
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1002c990
add esp, 0xc
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x9c], 0xcb2dc22c
jmp 0x100117d0
mov dword [ebp - 0x9c], 0x11fa9698
jmp 0x100117d0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x9c], 0x13756f63
jmp 0x100117d0
mov ax, word [ebp - 0x22]
mov ax, word [ebp - 0x22]
mov cx, word [ebp - 0x22]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x70]
mov word [eax], cx
mov dword [ebp - 0x9c], 0xf310a39
jmp 0x100117d0
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x9c], 0x663e62f5
jmp 0x10010388