Function at 0x100010b0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1b8
mov eax, dword [ebp + 8]
mov eax, dword [0x10074e04]
xor eax, ebp
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x1a0], 0x37f38e7d
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a4], eax
sub eax, 0x80087e26
je 0x100024d3
jmp 0x100010fa
mov eax, dword [ebp - 0x1a4]
sub eax, 0x84c6dabf
je 0x100028dc
jmp 0x10001110
mov eax, dword [ebp - 0x1a4]
sub eax, 0x89ab3fe4
je 0x1000213a
jmp 0x10001126
mov eax, dword [ebp - 0x1a4]
sub eax, 0x8a3a52b4
je 0x10001fb2
jmp 0x1000113c
mov eax, dword [ebp - 0x1a4]
sub eax, 0x8d2c9b57
je 0x10002a3d
jmp 0x10001152
mov eax, dword [ebp - 0x1a4]
sub eax, 0x8d42a7e7
je 0x10002be1
jmp 0x10001168
mov eax, dword [ebp - 0x1a4]
sub eax, 0x8f302f2b
je 0x10002a0a
jmp 0x1000117e
mov eax, dword [ebp - 0x1a4]
sub eax, 0x90247730
je 0x10001c29
jmp 0x10001194
mov eax, dword [ebp - 0x1a4]
sub eax, 0x9ae52af9
je 0x10002a19
jmp 0x100011aa
mov eax, dword [ebp - 0x1a4]
sub eax, 0x9ba5dc16
je 0x10002465
jmp 0x100011c0
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa34bd4fd
je 0x10001f2a
jmp 0x100011d6
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa5d54944
je 0x10001c38
jmp 0x100011ec
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa752bb00
je 0x100018b7
jmp 0x10001202
mov eax, dword [ebp - 0x1a4]
sub eax, 0xac607c2e
je 0x10002ab4
jmp 0x10001218
mov eax, dword [ebp - 0x1a4]
sub eax, 0xafd52246
je 0x10001abb
jmp 0x1000122e
mov eax, dword [ebp - 0x1a4]
sub eax, 0xb3447160
je 0x10001da4
jmp 0x10001244
mov eax, dword [ebp - 0x1a4]
sub eax, 0xb75a950e
je 0x10001883
jmp 0x1000125a
mov eax, dword [ebp - 0x1a4]
sub eax, 0xb9512dfb
je 0x10002879
jmp 0x10001270
mov eax, dword [ebp - 0x1a4]
sub eax, 0xba64ff43
je 0x100020c8
jmp 0x10001286
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc0e342bb
je 0x10001c95
jmp 0x1000129c
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc16c338c
je 0x10001d0b
jmp 0x100012b2
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc354bda9
je 0x1000216f
jmp 0x100012c8
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc5949c20
je 0x10001874
jmp 0x100012de
mov eax, dword [ebp - 0x1a4]
sub eax, 0xcaaabd95
je 0x1000265e
jmp 0x100012f4
mov eax, dword [ebp - 0x1a4]
sub eax, 0xd01e5ee2
je 0x10001f5a
jmp 0x1000130a
mov eax, dword [ebp - 0x1a4]
sub eax, 0xd14bbcd8
je 0x100029e6
jmp 0x10001320
mov eax, dword [ebp - 0x1a4]
sub eax, 0xd1a6e4aa
je 0x10001d95
jmp 0x10001336
mov eax, dword [ebp - 0x1a4]
sub eax, 0xd245d15a
je 0x10002bd2
jmp 0x1000134c
mov eax, dword [ebp - 0x1a4]
sub eax, 0xd4681a80
je 0x1000264f
jmp 0x10001362
mov eax, dword [ebp - 0x1a4]
sub eax, 0xdee5c439
je 0x100029b7
jmp 0x10001378
mov eax, dword [ebp - 0x1a4]
sub eax, 0xdf86545d
je 0x10001be0
jmp 0x1000138e
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe3679473
je 0x10001b49
jmp 0x100013a4
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe6c7b552
je 0x10001ecd
jmp 0x100013ba
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe6f84b55
je 0x100022b6
jmp 0x100013d0
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe7fdff1c
je 0x10002772
jmp 0x100013e6
mov eax, dword [ebp - 0x1a4]
sub eax, 0xea4b1d93
je 0x100029f5
jmp 0x100013fc
mov eax, dword [ebp - 0x1a4]
sub eax, 0xecd519d2
je 0x100025fe
jmp 0x10001412
mov eax, dword [ebp - 0x1a4]
sub eax, 0xed3f76a1
je 0x10002888
jmp 0x10001428
mov eax, dword [ebp - 0x1a4]
sub eax, 0xf53f4259
je 0x10002b76
jmp 0x1000143e
mov eax, dword [ebp - 0x1a4]
sub eax, 0xf65398b4
je 0x100021e5
jmp 0x10001454
mov eax, dword [ebp - 0x1a4]
sub eax, 0xf7bc2d24
je 0x1000198d
jmp 0x1000146a
mov eax, dword [ebp - 0x1a4]
sub eax, 0xfa7d57d6
je 0x10002733
jmp 0x10001480
mov eax, dword [ebp - 0x1a4]
sub eax, 0x779feb
je 0x10002274
jmp 0x10001496
mov eax, dword [ebp - 0x1a4]
sub eax, 0x478586e
je 0x100020f5
jmp 0x100014ac
mov eax, dword [ebp - 0x1a4]
sub eax, 0x5f09c0e
je 0x10001ded
jmp 0x100014c2
mov eax, dword [ebp - 0x1a4]
sub eax, 0xdf9f8e9
je 0x1000242c
jmp 0x100014d8
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe485b17
je 0x10002bff
jmp 0x100014ee
mov eax, dword [ebp - 0x1a4]
sub eax, 0xfba2c42
je 0x10001908
jmp 0x10001504
mov eax, dword [ebp - 0x1a4]
sub eax, 0x125eed79
je 0x10002283
jmp 0x1000151a
mov eax, dword [ebp - 0x1a4]
sub eax, 0x160a7548
je 0x10001a43
jmp 0x10001530
mov eax, dword [ebp - 0x1a4]
sub eax, 0x172d0a6d
je 0x1000201e
jmp 0x10001546
mov eax, dword [ebp - 0x1a4]
sub eax, 0x178e3c33
je 0x1000197e
jmp 0x1000155c
mov eax, dword [ebp - 0x1a4]
sub eax, 0x1b554326
je 0x100025ad
jmp 0x10001572
mov eax, dword [ebp - 0x1a4]
sub eax, 0x1fe4487c
je 0x10001f39
jmp 0x10001588
mov eax, dword [ebp - 0x1a4]
sub eax, 0x28debb1c
je 0x1000200f
jmp 0x1000159e
mov eax, dword [ebp - 0x1a4]
sub eax, 0x2b77b853
je 0x10002742
jmp 0x100015b4
mov eax, dword [ebp - 0x1a4]
sub eax, 0x2d0dd615
je 0x10002781
jmp 0x100015ca
mov eax, dword [ebp - 0x1a4]
sub eax, 0x2f9b3fb9
je 0x1000243b
jmp 0x100015e0
mov eax, dword [ebp - 0x1a4]
sub eax, 0x32a545ce
je 0x1000259e
jmp 0x100015f6
mov eax, dword [ebp - 0x1a4]
sub eax, 0x3508997c
je 0x10001a6a
jmp 0x1000160c
mov eax, dword [ebp - 0x1a4]
sub eax, 0x37f38e7d
je 0x1000179d
jmp 0x10001622
mov eax, dword [ebp - 0x1a4]
sub eax, 0x393a27ff
je 0x10002a2e
jmp 0x10001638
mov eax, dword [ebp - 0x1a4]
sub eax, 0x3d954951
je 0x100027f7
jmp 0x1000164e
mov eax, dword [ebp - 0x1a4]
sub eax, 0x3ee5bd1f
je 0x10002a5b
jmp 0x10001664
mov eax, dword [ebp - 0x1a4]
sub eax, 0x46683a4c
je 0x10001f69
mov eax, dword [0x100760b8]
mov ecx, dword [0x100760b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdee5c439
mov ecx, 0x4c1b13b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0xb75a950e
jmp 0x10002c09
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x178], eax
mov eax, 0xa752bb00
mov ecx, 0xf7bc2d24
cmp dword [ebp - 0x178], 0
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov eax, dword [0x100760b8]
mov ecx, dword [0x100760b4]
mov edx, eax
add edx, 0xf849850e
sub edx, 1
sub edx, 0xf849850e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd14bbcd8
mov ecx, 0xfba2c42
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov ecx, dword [0x100760b8]
mov eax, dword [0x100760b4]
mov edx, ecx
sub edx, 0x5ee35362
sub edx, 1
add edx, 0x5ee35362
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd14bbcd8
mov ecx, 0x178e3c33
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0x84c6dabf
jmp 0x10002c09
mov ecx, dword [ebp - 0x178]
mov edx, dword [ebp - 0x174]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x17c], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x178]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x1a0], 0x160a7548
jmp 0x10002c09
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x1a0], 0x3508997c
jmp 0x10002c09
mov eax, dword [0x100760b8]
mov ecx, dword [0x100760b4]
mov edx, eax
add edx, 0xc8a8052c
sub edx, 1
sub edx, 0xc8a8052c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xea4b1d93
mov ecx, 0xafd52246
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov eax, dword [ebp - 0x16c]
mov ecx, 0xffffffff
cmp eax, ecx
sete al
and al, 1
mov byte [ebp - 0x165], al
mov ecx, dword [0x100760b8]
mov eax, dword [0x100760b4]
mov edx, ecx
add edx, 0x746b4f96
sub edx, 1
sub edx, 0x746b4f96
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xea4b1d93
mov ecx, 0xe3679473
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dl, byte [ebp - 0x165]
mov eax, 0xa5d54944
mov ecx, 0x7ea3c84e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov eax, dword [0x100760b8]
mov ecx, dword [0x100760b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8f302f2b
mov ecx, 0x90247730
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0x84c6dabf
jmp 0x10002c09
mov eax, dword [ebp - 0x180]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1a0], 0xc0e342bb
jmp 0x10002c09
mov ecx, dword [0x100760b8]
mov eax, dword [0x100760b4]
mov edx, ecx
sub edx, 0xb2099482
sub edx, 1
add edx, 0xb2099482
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9ae52af9
mov ecx, 0xc16c338c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov eax, dword [ebp - 0x164]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x15d], al
mov ecx, dword [0x100760b8]
mov eax, dword [0x100760b4]
mov edx, ecx
add edx, 0xe9907760
sub edx, 1
sub edx, 0xe9907760
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9ae52af9
mov ecx, 0xd1a6e4aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0xb3447160
jmp 0x10002c09
mov eax, dword [0x100760b8]
mov ecx, dword [0x100760b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x393a27ff
mov ecx, 0x5f09c0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov ecx, dword [0x100760b8]
mov eax, dword [0x100760b4]
mov edx, ecx
sub edx, 0xbecf3ed9
sub edx, 1
add edx, 0xbecf3ed9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x393a27ff
mov ecx, 0x593ba56d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x15c], eax
mov eax, dword [0x100760b8]
mov ecx, dword [0x100760b4]
mov edx, eax
sub edx, 0x76e92ebb
sub edx, 1
add edx, 0x76e92ebb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8d2c9b57
mov ecx, 0xa34bd4fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0x1fe4487c
jmp 0x10002c09
mov eax, dword [ebp - 0x15c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a0], 0xd01e5ee2
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0x84c6dabf
jmp 0x10002c09
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x158], eax
mov eax, dword [0x100760b8]
mov ecx, dword [0x100760b4]
mov edx, eax
sub edx, 0xea64f1db
sub edx, 1
add edx, 0xea64f1db
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5dd88605
mov ecx, 0x28debb1c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0x172d0a6d
jmp 0x10002c09
mov eax, dword [ebp - 0x158]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x18c]
add eax, 0x3c
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x1a0], 0x740cc443
jmp 0x10002c09
movzx eax, word [ebp - 0x192]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x190]
mov ax, word [eax + 6]
mov word [ebp - 0x146], ax
mov dword [ebp - 0x1a0], 0x478586e
jmp 0x10002c09
mov ax, word [ebp - 0x146]
movzx eax, ax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x1a0], 0x6ebb361c
jmp 0x10002c09
mov eax, dword [ebp - 0x190]
xor ecx, ecx
mov edx, ecx
add edx, 0x18
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x190]
add eax, 4
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x1a0], 0xc354bda9
jmp 0x10002c09
mov ecx, dword [0x100760b8]
mov eax, dword [0x100760b4]
mov edx, ecx
add edx, 0xeacf9af8
sub edx, 1
sub edx, 0xeacf9af8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3ee5bd1f
mov ecx, 0xf65398b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov eax, dword [ebp - 0x13c]
movzx edx, word [eax + 0x10]
mov eax, dword [ebp - 0x140]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
movzx ecx, word [ebp - 0x192]
imul ecx, ecx, 0x28
add eax, 0xd45957ec
add eax, ecx
sub eax, 0xd45957ec
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x138], eax
mov eax, dword [0x100760b8]
mov ecx, dword [0x100760b4]
mov edx, eax
sub edx, 0xd4dd7fab
sub edx, 1
add edx, 0xd4dd7fab
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3ee5bd1f
mov ecx, 0x779feb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0x125eed79
jmp 0x10002c09
mov ecx, dword [ebp - 0x138]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10012190
call fcn.100099b0
mov edx, eax
mov eax, 0xe6f84b55
mov ecx, 0x1b554326
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov eax, dword [0x100760b8]
mov ecx, dword [0x100760b4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xac607c2e
mov ecx, 0x7491f4a4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0x2f9b3fb9
jmp 0x10002c09
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 8]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x1a0], 0x9ba5dc16
jmp 0x10002c09
mov ecx, dword [0x100760b8]
mov eax, dword [0x100760b4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf53f4259
mov ecx, 0x80087e26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov ecx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x198]
mov edx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor esi, esi
sub esi, eax
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x130]
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x199], al
mov ecx, dword [0x100760b8]
mov eax, dword [0x100760b4]
mov edx, ecx
add edx, 0xacbe0398
sub edx, 1
sub edx, 0xacbe0398
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf53f4259
mov ecx, 0x32a545ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0x1b554326
jmp 0x10002c09
mov eax, dword [0x100760b8]
mov ecx, dword [0x100760b4]
mov edx, eax
sub edx, 0xb3f99029
sub edx, 1
add edx, 0xb3f99029
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd245d15a
mov ecx, 0xecd519d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov eax, dword [0x100760b8]
mov ecx, dword [0x100760b4]
mov edx, eax
sub edx, 0xfa5ad59a
sub edx, 1
add edx, 0xfa5ad59a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd245d15a
mov ecx, 0xd4681a80
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0xcaaabd95
jmp 0x10002c09
mov ecx, dword [0x100760b8]
mov eax, dword [0x100760b4]
mov edx, ecx
sub edx, 0xf5f21dd4
sub edx, 1
add edx, 0xf5f21dd4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8d42a7e7
mov ecx, 0x733a9423
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0x2b77b853
jmp 0x10002c09
mov ax, word [ebp - 0x126]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x192], ax
mov dword [ebp - 0x1a0], 0xe7fdff1c
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0xba64ff43
jmp 0x10002c09
mov ecx, dword [0x100760b8]
mov eax, dword [0x100760b4]
mov edx, ecx
add edx, 0x7098a31b
sub edx, 1
sub edx, 0x7098a31b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x55768252
mov ecx, 0x3d954951
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x124], eax
mov ecx, dword [0x100760b8]
mov eax, dword [0x100760b4]
mov edx, ecx
add edx, 0x42d8b746
sub edx, 1
sub edx, 0x42d8b746
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x55768252
mov ecx, 0xb9512dfb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0xed3f76a1
jmp 0x10002c09
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x184]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x174]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1a0], 0x5549dd64
jmp 0x10002c09
mov eax, dword [0x100760b8]
mov ecx, dword [0x100760b4]
mov edx, eax
sub edx, 0x918eda8
sub edx, 1
add edx, 0x918eda8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe485b17
mov ecx, 0x743b9601
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002c09
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10008a20
mov dword [ebp - 0x1a0], 0x4c1b13b6
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0xfba2c42
jmp 0x10002c09
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1a0], 0xafd52246
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0xdf86545d
jmp 0x10002c09
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x1a0], 0xc16c338c
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0x5f09c0e
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0xe6c7b552
jmp 0x10002c09
mov eax, dword [ebp - 0x13c]
movzx ecx, word [eax + 0x10]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
sub eax, 0x9bf3109c
add eax, ecx
add eax, 0x9bf3109c
movzx ecx, word [ebp - 0x192]
imul ecx, ecx, 0x28
add eax, 0xdb971272
add eax, ecx
sub eax, 0xdb971272
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x1a0], 0xf65398b4
jmp 0x10002c09
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x198]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0xc]
sub edx, 0x6d50edbd
add edx, eax
add edx, 0x6d50edbd
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x199], al
mov edx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0xc]
add edx, 0x23021c4d
add edx, eax
sub edx, 0x23021c4d
mov ecx, dword [ebp - 0x188]
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 0xc]
sub ecx, 0x3e888a71
add ecx, eax
add ecx, 0x3e888a71
mov eax, dword [ebp - 0x198]
mov eax, dword [eax + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10008b80
mov dword [ebp - 0x1a0], 0x7491f4a4
jmp 0x10002c09
mov esi, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x198]
mov ecx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
sub esi, eax
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x130]
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x199], al
mov dword [ebp - 0x1a0], 0x80087e26
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0xecd519d2
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0x733a9423
jmp 0x10002c09
mov dword [ebp - 0x1a0], 0x743b9601
jmp 0x100010de