Function at 0x10008bc0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1a8
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1ac], eax
mov eax, dword [0x10093280]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1a8], 0x65673b9c
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1b0], eax
sub eax, 0x81d3ac32
je 0x1000987f
jmp 0x10008c04
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8272d6cc
je 0x1000938f
jmp 0x10008c1a
mov eax, dword [ebp - 0x1b0]
sub eax, 0x85c74765
je 0x10009667
jmp 0x10008c30
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8a1e2997
je 0x10009909
jmp 0x10008c46
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8df00c02
je 0x10009f90
jmp 0x10008c5c
mov eax, dword [ebp - 0x1b0]
sub eax, 0x933751f6
je 0x10009491
jmp 0x10008c72
mov eax, dword [ebp - 0x1b0]
sub eax, 0x939d89cd
je 0x1000a06f
jmp 0x10008c88
mov eax, dword [ebp - 0x1b0]
sub eax, 0x93a507ae
je 0x10009cef
jmp 0x10008c9e
mov eax, dword [ebp - 0x1b0]
sub eax, 0x959c7126
je 0x10009795
jmp 0x10008cb4
mov eax, dword [ebp - 0x1b0]
sub eax, 0x95f16b4b
je 0x1000a25b
jmp 0x10008cca
mov eax, dword [ebp - 0x1b0]
sub eax, 0x964d1805
je 0x1000a1c2
jmp 0x10008ce0
mov eax, dword [ebp - 0x1b0]
sub eax, 0x9bf1d3b3
je 0x100098fa
jmp 0x10008cf6
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa222b4af
je 0x1000a2d6
jmp 0x10008d0c
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa3ef48d3
je 0x10009b07
jmp 0x10008d22
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa4e1e83e
je 0x1000939e
jmp 0x10008d38
mov eax, dword [ebp - 0x1b0]
sub eax, 0xab0c7492
je 0x10009a74
jmp 0x10008d4e
mov eax, dword [ebp - 0x1b0]
sub eax, 0xacd08889
je 0x100097c5
jmp 0x10008d64
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb3834d37
je 0x10009778
jmp 0x10008d7a
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb3939c70
je 0x10009530
jmp 0x10008d90
mov eax, dword [ebp - 0x1b0]
sub eax, 0xbb695dd0
je 0x1000a337
jmp 0x10008da6
mov eax, dword [ebp - 0x1b0]
sub eax, 0xbc616b2e
je 0x10009b9e
jmp 0x10008dbc
mov eax, dword [ebp - 0x1b0]
sub eax, 0xc9098128
je 0x1000a183
jmp 0x10008dd2
mov eax, dword [ebp - 0x1b0]
sub eax, 0xcb799440
je 0x100099fe
jmp 0x10008de8
mov eax, dword [ebp - 0x1b0]
sub eax, 0xcd119652
je 0x1000a37f
jmp 0x10008dfe
mov eax, dword [ebp - 0x1b0]
sub eax, 0xcdcfd5f5
je 0x1000a050
jmp 0x10008e14
mov eax, dword [ebp - 0x1b0]
sub eax, 0xcdef00ab
je 0x10009e72
jmp 0x10008e2a
mov eax, dword [ebp - 0x1b0]
sub eax, 0xcdf3da52
je 0x10009521
jmp 0x10008e40
mov eax, dword [ebp - 0x1b0]
sub eax, 0xd0415b6a
je 0x1000a0e5
jmp 0x10008e56
mov eax, dword [ebp - 0x1b0]
sub eax, 0xd631a2c6
je 0x10009918
jmp 0x10008e6c
mov eax, dword [ebp - 0x1b0]
sub eax, 0xd6879f95
je 0x1000a30c
jmp 0x10008e82
mov eax, dword [ebp - 0x1b0]
sub eax, 0xdeb711df
je 0x1000a1d3
jmp 0x10008e98
mov eax, dword [ebp - 0x1b0]
sub eax, 0xded7d82f
je 0x100091b7
jmp 0x10008eae
mov eax, dword [ebp - 0x1b0]
sub eax, 0xe1777ffc
je 0x10009757
jmp 0x10008ec4
mov eax, dword [ebp - 0x1b0]
sub eax, 0xe259eae3
je 0x1000a2f1
jmp 0x10008eda
mov eax, dword [ebp - 0x1b0]
sub eax, 0xe30ab369
je 0x100092f9
jmp 0x10008ef0
mov eax, dword [ebp - 0x1b0]
sub eax, 0xe4c8643c
je 0x1000a2c1
jmp 0x10008f06
mov eax, dword [ebp - 0x1b0]
sub eax, 0xe99fc503
je 0x10009b28
jmp 0x10008f1c
mov eax, dword [ebp - 0x1b0]
sub eax, 0xefe8eb0f
je 0x10009f81
jmp 0x10008f32
mov eax, dword [ebp - 0x1b0]
sub eax, 0xf71f27f9
je 0x10009274
jmp 0x10008f48
mov eax, dword [ebp - 0x1b0]
sub eax, 0x6c05035
je 0x100096d5
jmp 0x10008f5e
mov eax, dword [ebp - 0x1b0]
sub eax, 0xc81eb97
je 0x1000a008
jmp 0x10008f74
mov eax, dword [ebp - 0x1b0]
sub eax, 0x16a658a2
je 0x100097b6
jmp 0x10008f8a
mov eax, dword [ebp - 0x1b0]
sub eax, 0x1b18351d
je 0x1000a1b3
jmp 0x10008fa0
mov eax, dword [ebp - 0x1b0]
sub eax, 0x1fae3ba3
je 0x1000a192
jmp 0x10008fb6
mov eax, dword [ebp - 0x1b0]
sub eax, 0x23717cea
je 0x10009c16
jmp 0x10008fcc
mov eax, dword [ebp - 0x1b0]
sub eax, 0x23951f55
je 0x10009283
jmp 0x10008fe2
mov eax, dword [ebp - 0x1b0]
sub eax, 0x289dc443
je 0x10009ebb
jmp 0x10008ff8
mov eax, dword [ebp - 0x1b0]
sub eax, 0x2f19ffda
je 0x10009c25
jmp 0x1000900e
mov eax, dword [ebp - 0x1b0]
sub eax, 0x32084510
je 0x100099c2
jmp 0x10009024
mov eax, dword [ebp - 0x1b0]
sub eax, 0x3461b19c
je 0x10009ff9
jmp 0x1000903a
mov eax, dword [ebp - 0x1b0]
sub eax, 0x360d3641
je 0x1000a027
jmp 0x10009050
mov eax, dword [ebp - 0x1b0]
sub eax, 0x4905956b
je 0x1000a21b
jmp 0x10009066
mov eax, dword [ebp - 0x1b0]
sub eax, 0x4bcba5d3
je 0x1000982e
jmp 0x1000907c
mov eax, dword [ebp - 0x1b0]
sub eax, 0x58b33f96
je 0x100099d1
jmp 0x10009092
mov eax, dword [ebp - 0x1b0]
sub eax, 0x5a6227e5
je 0x1000a23e
jmp 0x100090a8
mov eax, dword [ebp - 0x1b0]
sub eax, 0x5d28d271
je 0x10009658
jmp 0x100090be
mov eax, dword [ebp - 0x1b0]
sub eax, 0x5e728a1e
je 0x10009d8f
jmp 0x100090d4
mov eax, dword [ebp - 0x1b0]
sub eax, 0x5f3edb51
je 0x1000a270
jmp 0x100090ea
mov eax, dword [ebp - 0x1b0]
sub eax, 0x646dcda2
je 0x10009db0
jmp 0x10009100
mov eax, dword [ebp - 0x1b0]
sub eax, 0x65673b9c
je 0x1000919f
jmp 0x10009116
mov eax, dword [ebp - 0x1b0]
sub eax, 0x6af3bf4a
je 0x10009969
jmp 0x1000912c
mov eax, dword [ebp - 0x1b0]
sub eax, 0x6e125720
je 0x10009c79
jmp 0x10009142
mov eax, dword [ebp - 0x1b0]
sub eax, 0x75d3ba99
je 0x10009500
jmp 0x10009158
mov eax, dword [ebp - 0x1b0]
sub eax, 0x76ae921c
je 0x100095f9
jmp 0x1000916e
mov eax, dword [ebp - 0x1b0]
sub eax, 0x7b621763
je 0x10009583
push eax
mov eax, esp
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1a8], 0xded7d82f
jmp 0x1000a3b1
mov eax, dword [ebp - 0x1ac]
push eax
mov ecx, esp
mov dword [ebp - 0x190], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x18c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x188], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x184], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x180], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x17c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x178], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x198], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x19c], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10025970
add esp, 0xc
mov eax, dword [ebp - 0x198]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x1a0], eax
mov eax, 0xf71f27f9
mov ecx, 0x23951f55
cmp dword [ebp - 0x1a0], 0
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0x964d1805
jmp 0x1000a3b1
mov ecx, dword [0x10094744]
mov eax, dword [0x10094740]
mov edx, ecx
add edx, 0xcb81c4fe
sub edx, 1
sub edx, 0xcb81c4fe
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdeb711df
mov ecx, 0xe30ab369
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov ecx, dword [ebp - 0x1a0]
mov edx, dword [ebp - 0x19c]
lea eax, [ebp - 0x11c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1a4], eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x170], eax
mov eax, dword [0x10094744]
mov ecx, dword [0x10094740]
mov edx, eax
add edx, 0x6840a356
sub edx, 1
sub edx, 0x6840a356
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdeb711df
mov ecx, 0x8272d6cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0xa4e1e83e
jmp 0x1000a3b1
mov ecx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x170]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x110]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x1a8], 0x7ea81d2d
jmp 0x1000a3b1
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x16c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x194]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x165], al
mov eax, dword [0x10094744]
mov ecx, dword [0x10094740]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4905956b
mov ecx, 0x75d3ba99
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dl, byte [ebp - 0x165]
mov eax, 0xb3939c70
mov ecx, 0xcdf3da52
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0x964d1805
jmp 0x1000a3b1
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1a8], 0x7b621763
jmp 0x1000a3b1
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x164]
mov dword [eax], ecx
mov eax, dword [0x10094744]
mov ecx, dword [0x10094740]
mov edx, eax
add edx, 0x8dd88fac
sub edx, 1
sub edx, 0x8dd88fac
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5a6227e5
mov ecx, 0x5d28d271
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0x85c74765
jmp 0x1000a3b1
mov ecx, dword [0x10094744]
mov eax, dword [0x10094740]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x95f16b4b
mov ecx, 0x6c05035
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov eax, dword [ebp - 0x190]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x15d], al
mov ecx, dword [0x10094744]
mov eax, dword [0x10094740]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x95f16b4b
mov ecx, 0xe1777ffc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dl, byte [ebp - 0x15d]
mov eax, 0xb3834d37
mov ecx, 0xacd08889
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x1a8], 0x959c7126
jmp 0x1000a3b1
mov eax, dword [ebp - 0x15c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a8], 0x16a658a2
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0x964d1805
jmp 0x1000a3b1
mov eax, dword [ebp - 0x190]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x18c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x188]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x1a8], 0x4bcba5d3
jmp 0x1000a3b1
mov eax, dword [0x10094744]
mov ecx, dword [0x10094740]
mov edx, eax
sub edx, 0xcdf96dd2
sub edx, 1
add edx, 0xcdf96dd2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5f3edb51
mov ecx, 0x81d3ac32
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x158]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x184]
mov dword [eax], ecx
mov eax, dword [ebp - 0x180]
mov word [eax], 0
mov eax, dword [0x10094744]
mov ecx, dword [0x10094740]
mov edx, eax
sub edx, 0x1da5586d
sub edx, 1
add edx, 0x1da5586d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5f3edb51
mov ecx, 0x9bf1d3b3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0x8a1e2997
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0xd631a2c6
jmp 0x1000a3b1
mov eax, dword [0x10094744]
mov ecx, dword [0x10094740]
mov edx, eax
sub edx, 0xf8160a2
sub edx, 1
add edx, 0xf8160a2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe4c8643c
mov ecx, 0x6af3bf4a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov eax, dword [ebp - 0x180]
mov ax, word [eax]
mov word [ebp - 0x152], ax
mov eax, dword [0x10094744]
mov ecx, dword [0x10094740]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe4c8643c
mov ecx, 0x32084510
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0x58b33f96
jmp 0x1000a3b1
mov ax, word [ebp - 0x152]
movzx eax, ax
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x1a8], 0xcb799440
jmp 0x1000a3b1
mov ecx, dword [0x10094744]
mov eax, dword [0x10094740]
mov edx, ecx
sub edx, 0xfeed7352
sub edx, 1
add edx, 0xfeed7352
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa222b4af
mov ecx, 0xab0c7492
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov eax, dword [ebp - 0x14c]
movzx ecx, word [eax + 6]
mov eax, dword [ebp - 0x150]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x145], al
mov ecx, dword [0x10094744]
mov eax, dword [0x10094740]
mov edx, ecx
sub edx, 0x5c6c751b
sub edx, 1
add edx, 0x5c6c751b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa222b4af
mov ecx, 0xa3ef48d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dl, byte [ebp - 0x145]
mov eax, 0x939d89cd
mov ecx, 0xe99fc503
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov ecx, dword [0x10094744]
mov eax, dword [0x10094740]
mov edx, ecx
add edx, 0xc4169279
sub edx, 1
sub edx, 0xc4169279
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe259eae3
mov ecx, 0xbc616b2e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
add eax, 0x1a9d46ef
add eax, 0x18
sub eax, 0x1a9d46ef
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
add eax, 4
add eax, 0x10
mov dword [ebp - 0x140], eax
mov eax, dword [0x10094744]
mov ecx, dword [0x10094740]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe259eae3
mov ecx, 0x23717cea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0x2f19ffda
jmp 0x1000a3b1
mov eax, dword [ebp - 0x140]
movzx edx, word [eax]
mov ecx, dword [ebp - 0x144]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x180]
movzx eax, word [eax]
imul eax, eax, 0x28
add ecx, 0xf978bb45
add ecx, eax
sub ecx, 0xf978bb45
mov eax, dword [ebp - 0x17c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x1a8], 0x6e125720
jmp 0x1000a3b1
mov ecx, dword [0x10094744]
mov eax, dword [0x10094740]
mov edx, ecx
sub edx, 0x4a4886a9
sub edx, 1
add edx, 0x4a4886a9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd6879f95
mov ecx, 0x93a507ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov ecx, dword [ebp - 0x13c]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100337ca
call fcn.100292d0
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x135], al
mov ecx, dword [0x10094744]
mov eax, dword [0x10094740]
mov edx, ecx
add edx, 0x5278149e
sub edx, 1
sub edx, 0x5278149e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd6879f95
mov ecx, 0x5e728a1e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dl, byte [ebp - 0x135]
mov eax, 0x646dcda2
mov ecx, 0x3461b19c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov eax, dword [ebp - 0x178]
mov dword [eax], 0
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x500ae332
add edx, eax
sub edx, 0x500ae332
mov eax, dword [ebp - 0x178]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x174]
mov byte [eax], cl
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x17c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x17c]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
add eax, 0xa597f018
add eax, ecx
sub eax, 0xa597f018
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x1a8], 0xcdef00ab
jmp 0x1000a3b1
mov eax, dword [0x10094744]
mov ecx, dword [0x10094740]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbb695dd0
mov ecx, 0x289dc443
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov ecx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x134]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10025ad0
add esp, 0xc
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x124], eax
mov ecx, dword [0x10094744]
mov eax, dword [0x10094740]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbb695dd0
mov ecx, 0xefe8eb0f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0x8df00c02
jmp 0x1000a3b1
mov esi, dword [ebp - 0x124]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub esi, 0x76306e13
add esi, eax
add esi, 0x76306e13
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x12c]
mov edx, dword [ebp - 0x128]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x174]
mov byte [eax], cl
mov dword [ebp - 0x1a8], 0x3461b19c
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0xc81eb97
jmp 0x1000a3b1
mov eax, dword [ebp - 0x180]
mov ax, word [eax]
mov word [ebp - 0x120], ax
mov dword [ebp - 0x1a8], 0x360d3641
jmp 0x1000a3b1
mov ax, word [ebp - 0x120]
add ax, 0xa5c6
add ax, 1
sub ax, 0xa5c6
mov word [ebp - 0x11e], ax
mov dword [ebp - 0x1a8], 0xcdcfd5f5
jmp 0x1000a3b1
mov eax, dword [ebp - 0x180]
mov cx, word [ebp - 0x11e]
mov word [eax], cx
mov dword [ebp - 0x1a8], 0xd631a2c6
jmp 0x1000a3b1
mov ecx, dword [0x10094744]
mov eax, dword [0x10094740]
mov edx, ecx
sub edx, 0x6efca0fb
sub edx, 1
add edx, 0x6efca0fb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcd119652
mov ecx, 0xd0415b6a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x190]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10094744]
mov eax, dword [0x10094740]
mov edx, ecx
add edx, 0x5d217cca
sub edx, 1
sub edx, 0x5d217cca
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcd119652
mov ecx, 0xc9098128
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0x1fae3ba3
jmp 0x1000a3b1
mov eax, dword [ebp - 0x19c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a8], 0x1b18351d
jmp 0x1000a3b1
mov dword [ebp - 0x1a8], 0x964d1805
jmp 0x1000a3b1
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10024bd0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x1a0]
mov edx, dword [ebp - 0x19c]
lea eax, [ebp - 0x11c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a8], 0xe30ab369
jmp 0x1000a3b1
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x16c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1a8], 0x933751f6
jmp 0x1000a3b1
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x164]
mov dword [eax], ecx
mov dword [ebp - 0x1a8], 0x76ae921c
jmp 0x1000a3b1
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1a8], 0x6c05035
jmp 0x1000a3b1
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x158]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x184]
mov dword [eax], ecx
mov eax, dword [ebp - 0x180]
mov word [eax], 0
mov dword [ebp - 0x1a8], 0x81d3ac32
jmp 0x1000a3b1
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x1a8], 0x6af3bf4a
jmp 0x1000a3b1
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x1a8], 0xab0c7492
jmp 0x1000a3b1
mov eax, dword [ebp - 0x184]
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1a8], 0xbc616b2e
jmp 0x1000a3b1
mov ecx, dword [ebp - 0x13c]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100337ca
call fcn.100292d0
add esp, 8
mov dword [ebp - 0x1a8], 0x93a507ae
jmp 0x1000a3b1
mov ecx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x134]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10025ad0
add esp, 0xc
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x1a8], 0x289dc443
jmp 0x1000a3b1
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x190]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a8], 0xd0415b6a
jmp 0x10008be8