Function at 0x100011c0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xac
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb0], eax
mov eax, dword [0x1008b800]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xac], 0xb1da2d95
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xb4], eax
sub eax, 0x85f341d7
je 0x10001a1a
jmp 0x10001204
mov eax, dword [ebp - 0xb4]
sub eax, 0x8c1ae228
je 0x10001991
jmp 0x1000121a
mov eax, dword [ebp - 0xb4]
sub eax, 0x8cc9ad37
je 0x1000216b
jmp 0x10001230
mov eax, dword [ebp - 0xb4]
sub eax, 0x8e219cfc
je 0x10001739
jmp 0x10001246
mov eax, dword [ebp - 0xb4]
sub eax, 0x91c3569f
je 0x10001751
jmp 0x1000125c
mov eax, dword [ebp - 0xb4]
sub eax, 0x922d1d16
je 0x10001d30
jmp 0x10001272
mov eax, dword [ebp - 0xb4]
sub eax, 0x99b26b0d
je 0x10001827
jmp 0x10001288
mov eax, dword [ebp - 0xb4]
sub eax, 0xa4bbeb90
je 0x10002030
jmp 0x1000129e
mov eax, dword [ebp - 0xb4]
sub eax, 0xaa8377ad
je 0x10001b6b
jmp 0x100012b4
mov eax, dword [ebp - 0xb4]
sub eax, 0xab15dc49
je 0x10002021
jmp 0x100012ca
mov eax, dword [ebp - 0xb4]
sub eax, 0xab83d1dd
je 0x10002062
jmp 0x100012e0
mov eax, dword [ebp - 0xb4]
sub eax, 0xb1da2d95
je 0x10001655
jmp 0x100012f6
mov eax, dword [ebp - 0xb4]
sub eax, 0xb307698f
je 0x10001cdf
jmp 0x1000130c
mov eax, dword [ebp - 0xb4]
sub eax, 0xb5400762
je 0x100021c1
jmp 0x10001322
mov eax, dword [ebp - 0xb4]
sub eax, 0xb596fe3c
je 0x10001fc6
jmp 0x10001338
mov eax, dword [ebp - 0xb4]
sub eax, 0xbc547fed
je 0x10001ab5
jmp 0x1000134e
mov eax, dword [ebp - 0xb4]
sub eax, 0xbe19ae03
je 0x10001f50
jmp 0x10001364
mov eax, dword [ebp - 0xb4]
sub eax, 0xbf7a7114
je 0x10001bac
jmp 0x1000137a
mov eax, dword [ebp - 0xb4]
sub eax, 0xcc3ad544
je 0x10001982
jmp 0x10001390
mov eax, dword [ebp - 0xb4]
sub eax, 0xd7741a92
je 0x10001906
jmp 0x100013a6
mov eax, dword [ebp - 0xb4]
sub eax, 0xd89f23fb
je 0x10001f2e
jmp 0x100013bc
mov eax, dword [ebp - 0xb4]
sub eax, 0xd8e19eb3
je 0x10001836
jmp 0x100013d2
mov eax, dword [ebp - 0xb4]
sub eax, 0xdf38f3fc
je 0x10002235
jmp 0x100013e8
mov eax, dword [ebp - 0xb4]
sub eax, 0xe8537d2b
je 0x10001e1d
jmp 0x100013fe
mov eax, dword [ebp - 0xb4]
sub eax, 0xf251fe22
je 0x10001f1f
jmp 0x10001414
mov eax, dword [ebp - 0xb4]
sub eax, 0xf3b61b1d
je 0x100019c9
jmp 0x1000142a
mov eax, dword [ebp - 0xb4]
sub eax, 0xfaa159eb
je 0x1000172a
jmp 0x10001440
mov eax, dword [ebp - 0xb4]
sub eax, 0x30e39d0
je 0x10001ec8
jmp 0x10001456
mov eax, dword [ebp - 0xb4]
sub eax, 0x3cbb480
je 0x10001aa6
jmp 0x1000146c
mov eax, dword [ebp - 0xb4]
sub eax, 0x757df3a
je 0x10001dcc
jmp 0x10001482
mov eax, dword [ebp - 0xb4]
sub eax, 0xd782b5c
je 0x1000221c
jmp 0x10001498
mov eax, dword [ebp - 0xb4]
sub eax, 0x162a9450
je 0x1000203f
jmp 0x100014ae
mov eax, dword [ebp - 0xb4]
sub eax, 0x16a0738d
je 0x10001cac
jmp 0x100014c4
mov eax, dword [ebp - 0xb4]
sub eax, 0x1794ce30
je 0x10001c74
jmp 0x100014da
mov eax, dword [ebp - 0xb4]
sub eax, 0x17c22a4f
je 0x1000215c
jmp 0x100014f0
mov eax, dword [ebp - 0xb4]
sub eax, 0x1a4a58a1
je 0x1000218e
jmp 0x10001506
mov eax, dword [ebp - 0xb4]
sub eax, 0x1d2ea26f
je 0x10001b04
jmp 0x1000151c
mov eax, dword [ebp - 0xb4]
sub eax, 0x2bcc3616
je 0x10001697
jmp 0x10001532
mov eax, dword [ebp - 0xb4]
sub eax, 0x36707cd5
je 0x10001eb9
jmp 0x10001548
mov eax, dword [ebp - 0xb4]
sub eax, 0x39531430
je 0x10001bfd
jmp 0x1000155e
mov eax, dword [ebp - 0xb4]
sub eax, 0x3dd25863
je 0x10001b94
jmp 0x10001574
mov eax, dword [ebp - 0xb4]
sub eax, 0x4096f1f9
je 0x100019af
jmp 0x1000158a
mov eax, dword [ebp - 0xb4]
sub eax, 0x42528a6b
je 0x10001787
jmp 0x100015a0
mov eax, dword [ebp - 0xb4]
sub eax, 0x45738e53
je 0x10001c56
jmp 0x100015b6
mov eax, dword [ebp - 0xb4]
sub eax, 0x4d14cd3d
je 0x1000217c
jmp 0x100015cc
mov eax, dword [ebp - 0xb4]
sub eax, 0x555e801a
je 0x1000208e
jmp 0x100015e2
mov eax, dword [ebp - 0xb4]
sub eax, 0x63486c15
je 0x10001898
jmp 0x100015f8
mov eax, dword [ebp - 0xb4]
sub eax, 0x65f0171b
je 0x100020d7
jmp 0x1000160e
mov eax, dword [ebp - 0xb4]
sub eax, 0x72b7387e
je 0x100021ac
jmp 0x10001624
mov eax, dword [ebp - 0xb4]
sub eax, 0x79dd1680
je 0x10001b35
jmp 0x1000163a
mov eax, dword [ebp - 0xb4]
sub eax, 0x7d2fc646
je 0x10001a97
jmp 0x10001650
jmp 0x1000224e
push eax
sub esp, 0x100
mov eax, esp
mov dword [ebp - 0x98], eax
push eax
mov eax, esp
mov dword [ebp - 0x94], eax
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
mov dword [ebp - 0xac], 0x2bcc3616
jmp 0x1000224e
mov eax, dword [ebp - 0xb0]
push eax
mov ecx, esp
mov dword [ebp - 0x84], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x80], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x7c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x78], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x9c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000c670
add esp, 0xc
mov eax, dword [ebp - 0x9c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xa4], eax
mov eax, 0xfaa159eb
mov ecx, 0x8e219cfc
cmp dword [ebp - 0xa4], 0
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov dword [ebp - 0xac], 0x8cc9ad37
jmp 0x1000224e
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0xac], 0x91c3569f
jmp 0x1000224e
mov edx, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x70]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov dword [ebp - 0xac], 0x42528a6b
jmp 0x1000224e
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0xa4]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x98]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
mov edx, dword [ebp - 0x94]
mov esi, 0xffffffff
mov eax, 0xd8e19eb3
mov ecx, 0x99b26b0d
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov dword [ebp - 0xac], 0x8cc9ad37
jmp 0x1000224e
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0xac], 0x63486c15
jmp 0x1000224e
mov ecx, dword [0x1008cb40]
mov eax, dword [0x1008cb3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4d14cd3d
mov ecx, 0xd7741a92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov eax, dword [ebp - 0x6c]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x65], al
mov ecx, dword [0x1008cb40]
mov eax, dword [0x1008cb3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4d14cd3d
mov ecx, 0xcc3ad544
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov dword [ebp - 0xac], 0x8c1ae228
jmp 0x1000224e
mov dl, byte [ebp - 0x65]
mov eax, 0x4096f1f9
mov ecx, 0xbc547fed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0xac], 0xf3b61b1d
jmp 0x1000224e
mov eax, dword [0x1008cb40]
mov ecx, dword [0x1008cb3c]
mov edx, eax
sub edx, 0x37ff6903
sub edx, 1
add edx, 0x37ff6903
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1a4a58a1
mov ecx, 0x85f341d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov eax, dword [ebp - 0x64]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x1008cb40]
mov eax, dword [0x1008cb3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1a4a58a1
mov ecx, 0x7d2fc646
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov dword [ebp - 0xac], 0x3cbb480
jmp 0x1000224e
mov dword [ebp - 0xac], 0x8cc9ad37
jmp 0x1000224e
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov dword [ebp - 0xac], 0x1d2ea26f
jmp 0x1000224e
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xac], 0x79dd1680
jmp 0x1000224e
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x60]
add ecx, 0x7a749cfd
add ecx, eax
sub ecx, 0x7a749cfd
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov word [eax], 0
mov dword [ebp - 0xac], 0xaa8377ad
jmp 0x1000224e
mov eax, dword [ebp - 0x80]
movzx eax, word [eax]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
add eax, 4
add eax, 2
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xac], 0x3dd25863
jmp 0x1000224e
mov eax, dword [ebp - 0x54]
movzx eax, word [eax]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xac], 0xbf7a7114
jmp 0x1000224e
mov eax, dword [0x1008cb40]
mov ecx, dword [0x1008cb3c]
mov edx, eax
add edx, 0x69bbde2d
sub edx, 1
sub edx, 0x69bbde2d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x72b7387e
mov ecx, 0x39531430
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x50]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x49], al
mov eax, dword [0x1008cb40]
mov ecx, dword [0x1008cb3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x72b7387e
mov ecx, 0x45738e53
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov dl, byte [ebp - 0x49]
mov eax, 0x162a9450
mov ecx, 0x1794ce30
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
add eax, 0xfab720d4
add eax, 0x18
sub eax, 0xfab720d4
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
add eax, 4
add eax, 0x10
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xac], 0x16a0738d
jmp 0x1000224e
mov eax, dword [ebp - 0x44]
movzx ecx, word [eax]
mov eax, dword [ebp - 0x48]
add eax, 0x686eaf47
add eax, ecx
sub eax, 0x686eaf47
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x80]
movzx eax, word [eax]
imul eax, eax, 0x28
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0xac], 0xb307698f
jmp 0x1000224e
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100183b0
call fcn.1000e9e0
add esp, 8
mov edx, eax
mov eax, 0x922d1d16
mov ecx, 0xf251fe22
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov eax, dword [ebp - 0x78]
mov dword [eax], 0
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0xc05931a7
add edx, eax
add edx, 0xc05931a7
mov eax, dword [ebp - 0x78]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x74]
mov byte [eax], cl
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
add eax, 0x4744a49
add eax, ecx
sub eax, 0x4744a49
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
add eax, 0xc
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xac], 0x757df3a
jmp 0x1000224e
mov eax, dword [0x1008cb40]
mov ecx, dword [0x1008cb3c]
mov edx, eax
add edx, 0xf2219f23
sub edx, 1
sub edx, 0xf2219f23
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb5400762
mov ecx, 0xe8537d2b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
sub ecx, 0xab22878d
add ecx, eax
add ecx, 0xab22878d
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x38]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000c7d0
add esp, 0xc
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x24], eax
mov eax, dword [0x1008cb40]
mov ecx, dword [0x1008cb3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb5400762
mov ecx, 0x36707cd5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov dword [ebp - 0xac], 0x30e39d0
jmp 0x1000224e
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov esi, dword [ebp - 0x24]
add esi, 0xf19c4fb6
add esi, eax
sub esi, 0xf19c4fb6
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x74]
mov byte [eax], cl
mov dword [ebp - 0xac], 0xf251fe22
jmp 0x1000224e
mov dword [ebp - 0xac], 0xd89f23fb
jmp 0x1000224e
mov eax, dword [ebp - 0x80]
mov ax, word [eax]
xor ecx, ecx
sub cx, 1
sub ax, cx
mov word [ebp - 0x1e], ax
mov dword [ebp - 0xac], 0xbe19ae03
jmp 0x1000224e
mov ecx, dword [0x1008cb40]
mov eax, dword [0x1008cb3c]
mov edx, ecx
add edx, 0x636add8a
sub edx, 1
sub edx, 0x636add8a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd782b5c
mov ecx, 0xb596fe3c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov eax, dword [ebp - 0x80]
mov cx, word [ebp - 0x1e]
mov word [eax], cx
mov eax, dword [0x1008cb40]
mov ecx, dword [0x1008cb3c]
mov edx, eax
sub edx, 0x2883735c
sub edx, 1
add edx, 0x2883735c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd782b5c
mov ecx, 0xab15dc49
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov dword [ebp - 0xac], 0xa4bbeb90
jmp 0x1000224e
mov dword [ebp - 0xac], 0xaa8377ad
jmp 0x1000224e
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xac], 0xab83d1dd
jmp 0x1000224e
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xac], 0x555e801a
jmp 0x1000224e
mov eax, dword [0x1008cb40]
mov ecx, dword [0x1008cb3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdf38f3fc
mov ecx, 0x65f0171b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x1008cb40]
mov eax, dword [0x1008cb3c]
mov edx, ecx
add edx, 0xfb85613
sub edx, 1
sub edx, 0xfb85613
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdf38f3fc
mov ecx, 0x17c22a4f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x1000224e
mov dword [ebp - 0xac], 0x8cc9ad37
jmp 0x1000224e
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1000ba70
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xac], 0xd7741a92
jmp 0x1000224e
mov eax, dword [ebp - 0x64]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xac], 0x85f341d7
jmp 0x1000224e
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xac], 0x39531430
jmp 0x1000224e
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
sub ecx, 0xc9f27725
add ecx, eax
add ecx, 0xc9f27725
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x38]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000c7d0
add esp, 0xc
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xac], 0xe8537d2b
jmp 0x1000224e
mov eax, dword [ebp - 0x80]
mov cx, word [ebp - 0x1e]
mov word [eax], cx
mov dword [ebp - 0xac], 0xb596fe3c
jmp 0x1000224e
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xac], 0x65f0171b
jmp 0x100011e8