Function at 0x10008320
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x19c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1a4], eax
mov eax, dword [0x10089080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1a0], 0x8e3fc193
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
sub eax, 0x84fa7f91
je 0x10008ed7
jmp 0x10008365
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8e3fc193
je 0x100089c6
jmp 0x1000837b
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9a1d1263
je 0x10009626
jmp 0x10008391
mov eax, dword [ebp - 0x1a8]
sub eax, 0x9d32405c
je 0x10008d8b
jmp 0x100083a7
mov eax, dword [ebp - 0x1a8]
sub eax, 0xa74442fd
je 0x10009189
jmp 0x100083bd
mov eax, dword [ebp - 0x1a8]
sub eax, 0xaad15a2d
je 0x1000994b
jmp 0x100083d3
mov eax, dword [ebp - 0x1a8]
sub eax, 0xab9b0929
je 0x10009723
jmp 0x100083e9
mov eax, dword [ebp - 0x1a8]
sub eax, 0xacc502f5
je 0x10008e10
jmp 0x100083ff
mov eax, dword [ebp - 0x1a8]
sub eax, 0xaf0f2563
je 0x100089f0
jmp 0x10008415
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb06638e1
je 0x10009783
jmp 0x1000842b
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb18ccece
je 0x10009c47
jmp 0x10008441
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb632ead6
je 0x10008d09
jmp 0x10008457
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb7286636
je 0x10008a89
jmp 0x1000846d
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbc73d539
je 0x1000939d
jmp 0x10008483
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbd79b9c1
je 0x10008ec8
jmp 0x10008499
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbf513776
je 0x10008fdb
jmp 0x100084af
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc1990eba
je 0x10009cb9
jmp 0x100084c5
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc8a88dc2
je 0x10009138
jmp 0x100084db
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc923918a
je 0x1000922b
jmp 0x100084f1
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd50e9324
je 0x1000930e
jmp 0x10008507
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd95518f1
je 0x1000995a
jmp 0x1000851d
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd9a47efd
je 0x10009d06
jmp 0x10008533
mov eax, dword [ebp - 0x1a8]
sub eax, 0xda7fcf22
je 0x10008fbd
jmp 0x10008549
mov eax, dword [ebp - 0x1a8]
sub eax, 0xdc5ac627
je 0x10009d5a
jmp 0x1000855f
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe2210dd1
je 0x10009bbe
jmp 0x10008575
mov eax, dword [ebp - 0x1a8]
sub eax, 0xec35808a
je 0x100096bd
jmp 0x1000858b
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf87012a0
je 0x100090bf
jmp 0x100085a1
mov eax, dword [ebp - 0x1a8]
sub eax, 0xfc037dd5
je 0x10009ab9
jmp 0x100085b7
mov eax, dword [ebp - 0x1a8]
sub eax, 0xfd592f8d
je 0x10009257
jmp 0x100085cd
mov eax, dword [ebp - 0x1a8]
sub eax, 0xff4dad61
je 0x10009e99
jmp 0x100085e3
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3e6ff2e
je 0x10008fcc
jmp 0x100085f9
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe233d58
je 0x100098b8
jmp 0x1000860f
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf0d26f4
je 0x10009985
jmp 0x10008625
mov eax, dword [ebp - 0x1a8]
sub eax, 0x10d8756c
je 0x10008c6b
jmp 0x1000863b
mov eax, dword [ebp - 0x1a8]
sub eax, 0x129a41e0
je 0x10009bcd
jmp 0x10008651
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1369a0da
je 0x10009a25
jmp 0x10008667
mov eax, dword [ebp - 0x1a8]
sub eax, 0x17388edc
je 0x10009488
jmp 0x1000867d
mov eax, dword [ebp - 0x1a8]
sub eax, 0x1e11e68e
je 0x10009732
jmp 0x10008693
mov eax, dword [ebp - 0x1a8]
sub eax, 0x207c7532
je 0x10008f5a
jmp 0x100086a9
mov eax, dword [ebp - 0x1a8]
sub eax, 0x22a689aa
je 0x10009df7
jmp 0x100086bf
mov eax, dword [ebp - 0x1a8]
sub eax, 0x27de58f8
je 0x100090f7
jmp 0x100086d5
mov eax, dword [ebp - 0x1a8]
sub eax, 0x29597394
je 0x10009b3e
jmp 0x100086eb
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2dac297f
je 0x10009c38
jmp 0x10008701
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2e01a0b9
je 0x100092a0
jmp 0x10008717
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2f79525f
je 0x10008b1f
jmp 0x1000872d
mov eax, dword [ebp - 0x1a8]
sub eax, 0x31dc180c
je 0x10008ae0
jmp 0x10008743
mov eax, dword [ebp - 0x1a8]
sub eax, 0x348a0eaa
je 0x100099a4
jmp 0x10008759
mov eax, dword [ebp - 0x1a8]
sub eax, 0x359ab44a
je 0x10008ef6
jmp 0x1000876f
mov eax, dword [ebp - 0x1a8]
sub eax, 0x39fa7758
je 0x10009024
jmp 0x10008785
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3c1d9395
je 0x10008b95
jmp 0x1000879b
mov eax, dword [ebp - 0x1a8]
sub eax, 0x3fc89585
je 0x10008c8c
jmp 0x100087b1
mov eax, dword [ebp - 0x1a8]
sub eax, 0x4812861d
je 0x10009521
jmp 0x100087c7
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5372665b
je 0x10009647
jmp 0x100087dd
mov eax, dword [ebp - 0x1a8]
sub eax, 0x56928e44
je 0x10008c9b
jmp 0x100087f3
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5776bf84
je 0x10008f11
jmp 0x10008809
mov eax, dword [ebp - 0x1a8]
sub eax, 0x57ad33ce
je 0x10009412
jmp 0x1000881f
mov eax, dword [ebp - 0x1a8]
sub eax, 0x57d64afb
je 0x10008d9a
jmp 0x10008835
mov eax, dword [ebp - 0x1a8]
sub eax, 0x59517e3b
je 0x10008a98
jmp 0x1000884b
mov eax, dword [ebp - 0x1a8]
sub eax, 0x59caaed5
je 0x10009d30
jmp 0x10008861
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5a68e22d
je 0x10009d21
jmp 0x10008877
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5b853c87
je 0x1000921c
jmp 0x1000888d
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5beb6f64
je 0x10009e78
jmp 0x100088a3
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5c3096b1
je 0x100099d4
jmp 0x100088b9
mov eax, dword [ebp - 0x1a8]
sub eax, 0x5fb27e53
je 0x10009403
jmp 0x100088cf
mov eax, dword [ebp - 0x1a8]
sub eax, 0x60d9344c
je 0x10009bdf
push eax
mov eax, esp
mov dword [ebp - 0x184], eax
push eax
mov eax, esp
mov dword [ebp - 0x180], eax
push eax
mov eax, esp
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x1a0], 0xaf0f2563
jmp 0x10009eb5
mov eax, dword [ebp - 0x1a4]
push eax
mov ecx, esp
mov dword [ebp - 0x178], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x174], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x170], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x188], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x120]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10025f80
add esp, 0xc
mov eax, dword [ebp - 0x188]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x190], eax
mov eax, 0xb7286636
mov ecx, 0x59517e3b
cmp dword [ebp - 0x190], 0
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0x129a41e0
jmp 0x10009eb5
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x18c]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1a0], 0x31dc180c
jmp 0x10009eb5
lea eax, [ebp - 0x114]
mov ecx, dword [ebp - 0x190]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x1a0], 0x2f79525f
jmp 0x10009eb5
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
mov edx, ecx
sub edx, 0x7786baa6
sub edx, 1
add edx, 0x7786baa6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x60d9344c
mov ecx, 0x3c1d9395
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x168]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x198], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x198], eax
sete al
and al, 1
mov byte [ebp - 0x161], al
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
mov edx, ecx
add edx, 0xd0ee7a9b
sub edx, 1
sub edx, 0xd0ee7a9b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x60d9344c
mov ecx, 0x10d8756c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dl, byte [ebp - 0x161]
mov eax, 0x56928e44
mov ecx, 0x3fc89585
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0x129a41e0
jmp 0x10009eb5
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2dac297f
mov ecx, 0xb632ead6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x160], eax
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
mov edx, ecx
sub edx, 0x5b60d36a
sub edx, 1
add edx, 0x5b60d36a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2dac297f
mov ecx, 0x9d32405c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0x57d64afb
jmp 0x10009eb5
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
mov edx, ecx
sub edx, 0x14a4f0e3
sub edx, 1
add edx, 0x14a4f0e3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb18ccece
mov ecx, 0xacc502f5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x160]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x19c], eax
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
mov edx, ecx
add edx, 0x57d41fc5
sub edx, 1
sub edx, 0x57d41fc5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb18ccece
mov ecx, 0xbd79b9c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0x84fa7f91
jmp 0x10009eb5
mov eax, 0x359ab44a
mov ecx, 0xbf513776
cmp dword [ebp - 0x19c], 0
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x1a0], 0x5776bf84
jmp 0x10009eb5
mov eax, dword [0x1008a584]
mov ecx, dword [0x1008a580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x735d3fa6
mov ecx, 0x207c7532
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x15c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1008a584]
mov ecx, dword [0x1008a580]
mov edx, eax
add edx, 0x50124d30
sub edx, 1
sub edx, 0x50124d30
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x735d3fa6
mov ecx, 0xda7fcf22
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0x3e6ff2e
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0x129a41e0
jmp 0x10009eb5
mov eax, dword [0x1008a584]
mov ecx, dword [0x1008a580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc1990eba
mov ecx, 0x39fa7758
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x19c]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x184]
mov dword [eax], ecx
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x158], eax
mov eax, dword [0x1008a584]
mov ecx, dword [0x1008a580]
mov edx, eax
sub edx, 0x7ea200ce
sub edx, 1
add edx, 0x7ea200ce
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc1990eba
mov ecx, 0xf87012a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0x7d048fc4
jmp 0x10009eb5
mov ecx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x17c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x178]
mov word [eax], 0
mov dword [ebp - 0x1a0], 0xc8a88dc2
jmp 0x10009eb5
mov eax, dword [0x1008a584]
mov ecx, dword [0x1008a580]
mov edx, eax
add edx, 0xfa5a7fa3
sub edx, 1
sub edx, 0xfa5a7fa3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd9a47efd
mov ecx, 0xa74442fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x178]
movzx eax, word [eax]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
mov edx, ecx
add edx, 0xe73b5c97
sub edx, 1
sub edx, 0xe73b5c97
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd9a47efd
mov ecx, 0x5b853c87
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0xc923918a
jmp 0x10009eb5
mov eax, dword [ebp - 0x14c]
movzx ecx, word [eax + 6]
mov eax, dword [ebp - 0x150]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x145], al
mov dword [ebp - 0x1a0], 0xfd592f8d
jmp 0x10009eb5
mov eax, dword [0x1008a584]
mov ecx, dword [0x1008a580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5a68e22d
mov ecx, 0x2e01a0b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5a68e22d
mov ecx, 0xd50e9324
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dl, byte [ebp - 0x145]
mov eax, 0x7ac8d513
mov ecx, 0x7593ede3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x144], eax
mov eax, dword [0x1008a584]
mov ecx, dword [0x1008a580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x59caaed5
mov ecx, 0x5fb27e53
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0x57ad33ce
jmp 0x10009eb5
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
mov edx, ecx
sub edx, 0xf9663644
sub edx, 1
add edx, 0xf9663644
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7e1bef36
mov ecx, 0x17388edc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
add eax, 4
add eax, 0x10
mov dword [ebp - 0x140], eax
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
mov edx, ecx
sub edx, 0xc5c88a17
sub edx, 1
add edx, 0xc5c88a17
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7e1bef36
mov ecx, 0x659a3fbf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [0x1008a584]
mov ecx, dword [0x1008a580]
mov edx, eax
sub edx, 0x793bc4b6
sub edx, 1
add edx, 0x793bc4b6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdc5ac627
mov ecx, 0x7438708c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dl, byte [ebp - 0x139]
mov eax, 0x5372665b
mov ecx, 0xaad15a2d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
mov edx, ecx
sub edx, 0x27607933
sub edx, 1
add edx, 0x27607933
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7926f29c
mov ecx, 0xec35808a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x170]
mov dword [eax], 0
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x138], eax
mov eax, dword [0x1008a584]
mov ecx, dword [0x1008a580]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7926f29c
mov ecx, 0xab9b0929
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0x1e11e68e
jmp 0x10009eb5
mov eax, dword [0x1008a584]
mov ecx, dword [0x1008a580]
mov edx, eax
sub edx, 0xfcc776a3
sub edx, 1
add edx, 0xfcc776a3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x22a689aa
mov ecx, 0xb06638e1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0xdd144062
add edx, eax
add edx, 0xdd144062
mov eax, dword [ebp - 0x170]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x16c]
mov byte [eax], cl
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x174]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
add eax, 0x9b78369a
add eax, ecx
sub eax, 0x9b78369a
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x174]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
add eax, 0x3430f236
add eax, ecx
sub eax, 0x3430f236
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
mov edx, ecx
add edx, 0xbcf889de
sub edx, 1
sub edx, 0xbcf889de
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x22a689aa
mov ecx, 0x6cc699db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x130]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.100260e0
add esp, 0xc
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x194]
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, edi
sub esi, eax
mov eax, dword [ebp - 0x170]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x16c]
mov byte [eax], cl
mov dword [ebp - 0x1a0], 0xaad15a2d
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0xd95518f1
jmp 0x10009eb5
mov eax, dword [ebp - 0x178]
mov ax, word [eax]
sub ax, 0x66ed
add ax, 1
add ax, 0x66ed
mov word [ebp - 0x126], ax
mov dword [ebp - 0x1a0], 0xf0d26f4
jmp 0x10009eb5
mov eax, dword [ebp - 0x178]
mov cx, word [ebp - 0x126]
mov word [eax], cx
mov dword [ebp - 0x1a0], 0x348a0eaa
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0xc8a88dc2
jmp 0x10009eb5
mov eax, dword [0x1008a584]
mov ecx, dword [0x1008a580]
mov edx, eax
sub edx, 0x146f4158
sub edx, 1
add edx, 0x146f4158
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5beb6f64
mov ecx, 0x1369a0da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov eax, dword [ebp - 0x19c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x124], eax
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
mov edx, ecx
sub edx, 0xa060c457
sub edx, 1
add edx, 0xa060c457
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5beb6f64
mov ecx, 0xfc037dd5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0x7ed6338e
jmp 0x10009eb5
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x1008a584]
mov eax, dword [0x1008a580]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xff4dad61
mov ecx, 0xe2210dd1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0x129a41e0
jmp 0x10009eb5
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100251e0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1a0], 0xb632ead6
jmp 0x10009eb5
mov eax, dword [ebp - 0x160]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1a0], 0xacc502f5
jmp 0x10009eb5
mov eax, dword [ebp - 0x19c]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x184]
mov dword [eax], ecx
mov dword [ebp - 0x1a0], 0x39fa7758
jmp 0x10009eb5
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x1a0], 0xa74442fd
jmp 0x10009eb5
mov dword [ebp - 0x1a0], 0x2e01a0b9
jmp 0x10009eb5
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x1a0], 0xbc73d539
jmp 0x10009eb5
mov eax, dword [ebp - 0x140]
movzx edx, word [eax]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x144]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x178]
movzx eax, word [eax]
imul eax, eax, 0x28
add ecx, 0xebbde276
add ecx, eax
sub ecx, 0xebbde276
mov eax, dword [ebp - 0x174]
mov dword [eax], ecx
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100337d2
call fcn.100298e0
add esp, 8
mov dword [ebp - 0x1a0], 0x7438708c
jmp 0x10009eb5
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x682168de
add edx, eax
sub edx, 0x682168de
mov eax, dword [ebp - 0x170]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x16c]
mov byte [eax], cl
mov eax, dword [ebp - 0x174]
mov eax, dword [ebp - 0x184]
mov eax, dword [ebp - 0x174]
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x1a0], 0xb06638e1
jmp 0x10009eb5
mov eax, dword [ebp - 0x19c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a0], 0x1369a0da
jmp 0x10009eb5
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a0], 0x29597394
jmp 0x10008349