Function at 0x100011d0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x98
mov eax, dword [ebp + 8]
mov dword [ebp - 0x9c], eax
mov eax, dword [0x1006b200]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x1006c548]
mov eax, dword [0x1006c544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x92], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x91], al
mov dword [ebp - 0x98], 0x63eafc3
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xa0], eax
sub eax, 0x80399c7e
je 0x10001a75
jmp 0x1000124b
mov eax, dword [ebp - 0xa0]
sub eax, 0x8118004f
je 0x10002281
jmp 0x10001261
mov eax, dword [ebp - 0xa0]
sub eax, 0x85060a7c
je 0x10001f8c
jmp 0x10001277
mov eax, dword [ebp - 0xa0]
sub eax, 0x8629d0e4
je 0x100024fc
jmp 0x1000128d
mov eax, dword [ebp - 0xa0]
sub eax, 0x8945dd62
je 0x100020cb
jmp 0x100012a3
mov eax, dword [ebp - 0xa0]
sub eax, 0x8c39cc64
je 0x10002486
jmp 0x100012b9
mov eax, dword [ebp - 0xa0]
sub eax, 0x8fffd8c8
je 0x10001f36
jmp 0x100012cf
mov eax, dword [ebp - 0xa0]
sub eax, 0x928235b1
je 0x100019af
jmp 0x100012e5
mov eax, dword [ebp - 0xa0]
sub eax, 0x929e7c91
je 0x10002742
jmp 0x100012fb
mov eax, dword [ebp - 0xa0]
sub eax, 0x9376425a
je 0x1000245e
jmp 0x10001311
mov eax, dword [ebp - 0xa0]
sub eax, 0x989d85fc
je 0x100025a0
jmp 0x10001327
mov eax, dword [ebp - 0xa0]
sub eax, 0x9a8db9e7
je 0x10002041
jmp 0x1000133d
mov eax, dword [ebp - 0xa0]
sub eax, 0xa3ca70db
je 0x10002721
jmp 0x10001353
mov eax, dword [ebp - 0xa0]
sub eax, 0xa662141e
je 0x10001b6b
jmp 0x10001369
mov eax, dword [ebp - 0xa0]
sub eax, 0xa6b4cdf3
je 0x10002609
jmp 0x1000137f
mov eax, dword [ebp - 0xa0]
sub eax, 0xa7b9c425
je 0x10001eb8
jmp 0x10001395
mov eax, dword [ebp - 0xa0]
sub eax, 0xa926d527
je 0x10002591
jmp 0x100013ab
mov eax, dword [ebp - 0xa0]
sub eax, 0xa9d0e1ad
je 0x1000269f
jmp 0x100013c1
mov eax, dword [ebp - 0xa0]
sub eax, 0xb0b2a6e8
je 0x10002197
jmp 0x100013d7
mov eax, dword [ebp - 0xa0]
sub eax, 0xb5a0180c
je 0x10002305
jmp 0x100013ed
mov eax, dword [ebp - 0xa0]
sub eax, 0xb77ea8f1
je 0x10002690
jmp 0x10001403
mov eax, dword [ebp - 0xa0]
sub eax, 0xb9c92e5d
je 0x10001ff0
jmp 0x10001419
mov eax, dword [ebp - 0xa0]
sub eax, 0xb9e7c776
je 0x1000277c
jmp 0x1000142f
mov eax, dword [ebp - 0xa0]
sub eax, 0xbe18ee44
je 0x10001c97
jmp 0x10001445
mov eax, dword [ebp - 0xa0]
sub eax, 0xc1c81967
je 0x10002323
jmp 0x1000145b
mov eax, dword [ebp - 0xa0]
sub eax, 0xc6a67348
je 0x1000246d
jmp 0x10001471
mov eax, dword [ebp - 0xa0]
sub eax, 0xc877505a
je 0x100025c0
jmp 0x10001487
mov eax, dword [ebp - 0xa0]
sub eax, 0xced00662
je 0x1000209c
jmp 0x1000149d
mov eax, dword [ebp - 0xa0]
sub eax, 0xcf5238de
je 0x10001b54
jmp 0x100014b3
mov eax, dword [ebp - 0xa0]
sub eax, 0xcff8aa91
je 0x100019be
jmp 0x100014c9
mov eax, dword [ebp - 0xa0]
sub eax, 0xd47b52cc
je 0x1000278e
jmp 0x100014df
mov eax, dword [ebp - 0xa0]
sub eax, 0xd70a2a9d
je 0x1000182b
jmp 0x100014f5
mov eax, dword [ebp - 0xa0]
sub eax, 0xe350dd8b
je 0x10002582
jmp 0x1000150b
mov eax, dword [ebp - 0xa0]
sub eax, 0xe4010932
je 0x10001b45
jmp 0x10001521
mov eax, dword [ebp - 0xa0]
sub eax, 0xe9d3b287
je 0x10002754
jmp 0x10001537
mov eax, dword [ebp - 0xa0]
sub eax, 0xee8f8dfa
je 0x10001d74
jmp 0x1000154d
mov eax, dword [ebp - 0xa0]
sub eax, 0xfda02988
je 0x10001a50
jmp 0x10001563
mov eax, dword [ebp - 0xa0]
sub eax, 0x4f4796b
je 0x100026f1
jmp 0x10001579
mov eax, dword [ebp - 0xa0]
sub eax, 0x60402f1
je 0x10001f45
jmp 0x1000158f
mov eax, dword [ebp - 0xa0]
sub eax, 0x63d3d7b
je 0x10001c62
jmp 0x100015a5
mov eax, dword [ebp - 0xa0]
sub eax, 0x63eafc3
je 0x100017fc
jmp 0x100015bb
mov eax, dword [ebp - 0xa0]
sub eax, 0x933c9e7
je 0x100026e2
jmp 0x100015d1
mov eax, dword [ebp - 0xa0]
sub eax, 0xf5ec653
je 0x100023dd
jmp 0x100015e7
mov eax, dword [ebp - 0xa0]
sub eax, 0x108c49cb
je 0x10001fcd
jmp 0x100015fd
mov eax, dword [ebp - 0xa0]
sub eax, 0x1114251b
je 0x10001a41
jmp 0x10001613
mov eax, dword [ebp - 0xa0]
sub eax, 0x16be6f6d
je 0x10002204
jmp 0x10001629
mov eax, dword [ebp - 0xa0]
sub eax, 0x19a99c4e
je 0x100026d3
jmp 0x1000163f
mov eax, dword [ebp - 0xa0]
sub eax, 0x20dea94a
je 0x100018fd
jmp 0x10001655
mov eax, dword [ebp - 0xa0]
sub eax, 0x2c701f5f
je 0x100027bd
jmp 0x1000166b
mov eax, dword [ebp - 0xa0]
sub eax, 0x2d3cd0c3
je 0x100018ee
jmp 0x10001681
mov eax, dword [ebp - 0xa0]
sub eax, 0x2e12c7b0
je 0x10001b23
jmp 0x10001697
mov eax, dword [ebp - 0xa0]
sub eax, 0x2e36a854
je 0x100023bd
jmp 0x100016ad
mov eax, dword [ebp - 0xa0]
sub eax, 0x37494d90
je 0x10001c0b
jmp 0x100016c3
mov eax, dword [ebp - 0xa0]
sub eax, 0x383fdc4a
je 0x100026c2
jmp 0x100016d9
mov eax, dword [ebp - 0xa0]
sub eax, 0x458e0220
je 0x100020ab
jmp 0x100016ef
mov eax, dword [ebp - 0xa0]
sub eax, 0x46d4d35a
je 0x10002730
jmp 0x10001705
mov eax, dword [ebp - 0xa0]
sub eax, 0x48bf1a2f
je 0x10001bc2
jmp 0x1000171b
mov eax, dword [ebp - 0xa0]
sub eax, 0x5651f44f
je 0x10002703
jmp 0x10001731
mov eax, dword [ebp - 0xa0]
sub eax, 0x565b63b9
je 0x10002213
jmp 0x10001747
mov eax, dword [ebp - 0xa0]
sub eax, 0x57516f87
je 0x1000194e
jmp 0x1000175d
mov eax, dword [ebp - 0xa0]
sub eax, 0x582c5c4f
je 0x10002121
jmp 0x10001773
mov eax, dword [ebp - 0xa0]
sub eax, 0x63f06a2d
je 0x10001c80
jmp 0x10001789
mov eax, dword [ebp - 0xa0]
sub eax, 0x6a6f8ea5
je 0x10001de2
jmp 0x1000179f
mov eax, dword [ebp - 0xa0]
sub eax, 0x6accf2e9
je 0x10001e42
jmp 0x100017b5
mov eax, dword [ebp - 0xa0]
sub eax, 0x6e11b99b
je 0x10001d65
mov al, byte [ebp - 0x92]
mov cl, byte [ebp - 0x91]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x19a99c4e
mov ecx, 0xd70a2a9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
mov ecx, dword [0x1006c548]
mov eax, dword [0x1006c544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x19a99c4e
mov ecx, 0x2d3cd0c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov dword [ebp - 0x98], 0x20dea94a
jmp 0x100027d8
mov eax, dword [0x1006c548]
mov ecx, dword [0x1006c544]
mov edx, eax
sub edx, 0x41134c1b
sub edx, 1
add edx, 0x41134c1b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x933c9e7
mov ecx, 0x57516f87
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
push eax
mov eax, esp
mov dword [ebp - 0x5c], eax
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
mov eax, dword [0x1006c548]
mov ecx, dword [0x1006c544]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x933c9e7
mov ecx, 0x928235b1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov dword [ebp - 0x98], 0xcff8aa91
jmp 0x100027d8
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000fda0
add esp, 0xc
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov edx, dword [ebp - 0x84]
mov eax, 0x1114251b
mov ecx, 0xfda02988
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov dword [ebp - 0x98], 0x383fdc4a
jmp 0x100027d8
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x98], 0x80399c7e
jmp 0x100027d8
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x50]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x84]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x7c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov dword [ebp - 0x98], 0x2e12c7b0
jmp 0x100027d8
mov edx, dword [ebp - 0x78]
mov esi, 0xffffffff
mov eax, 0xcf5238de
mov ecx, 0xe4010932
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov dword [ebp - 0x98], 0x383fdc4a
jmp 0x100027d8
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x98], 0xa662141e
jmp 0x100027d8
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x98], 0x48bf1a2f
jmp 0x100027d8
mov eax, dword [0x1006c548]
mov ecx, dword [0x1006c544]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4f4796b
mov ecx, 0x37494d90
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov eax, dword [ebp - 0x48]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x41], al
mov eax, dword [0x1006c548]
mov ecx, dword [0x1006c544]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4f4796b
mov ecx, 0x63d3d7b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov dl, byte [ebp - 0x41]
mov eax, 0x63f06a2d
mov ecx, 0x6accf2e9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x98], 0xbe18ee44
jmp 0x100027d8
mov ecx, dword [0x1006c548]
mov eax, dword [0x1006c544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5651f44f
mov ecx, 0x6e363551
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov ecx, dword [0x1006c548]
mov eax, dword [0x1006c544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa3ca70db
mov ecx, 0x6a6f8ea5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov eax, dword [0x1006c548]
mov ecx, dword [0x1006c544]
mov edx, eax
sub edx, 0x8a8c33c3
sub edx, 1
add edx, 0x8a8c33c3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa3ca70db
mov ecx, 0x72d8d4da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov ecx, dword [0x1006c548]
mov eax, dword [0x1006c544]
mov edx, ecx
sub edx, 0xaf2375aa
sub edx, 1
add edx, 0xaf2375aa
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x46d4d35a
mov ecx, 0xa7b9c425
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov ecx, dword [0x1006c548]
mov eax, dword [0x1006c544]
mov edx, ecx
add edx, 0x6c203560
sub edx, 1
sub edx, 0x6c203560
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x46d4d35a
mov ecx, 0x8fffd8c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov dword [ebp - 0x98], 0x60402f1
jmp 0x100027d8
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov dword [ebp - 0x98], 0x85060a7c
jmp 0x100027d8
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
add ecx, 0xb2913eba
add ecx, eax
sub ecx, 0xb2913eba
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
mov word [eax], 0
mov dword [ebp - 0x98], 0x108c49cb
jmp 0x100027d8
mov eax, dword [ebp - 0x64]
movzx eax, word [eax]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x98], 0xb9c92e5d
jmp 0x100027d8
mov eax, dword [0x1006c548]
mov ecx, dword [0x1006c544]
mov edx, eax
add edx, 0xbfa74dec
sub edx, 1
sub edx, 0xbfa74dec
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x929e7c91
mov ecx, 0x9a8db9e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov eax, dword [ebp - 0x34]
movzx eax, word [eax + 2]
mov dword [ebp - 0x30], eax
mov eax, dword [0x1006c548]
mov ecx, dword [0x1006c544]
mov edx, eax
add edx, 0xfbc0d9af
sub edx, 1
sub edx, 0xfbc0d9af
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x929e7c91
mov ecx, 0xced00662
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov dword [ebp - 0x98], 0x458e0220
jmp 0x100027d8
mov edx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x30]
mov eax, 0x989d85fc
mov ecx, 0x8945dd62
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
xor eax, eax
sub eax, 0x18
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
movzx edx, word [eax + 0x14]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x64]
movzx eax, word [eax]
imul eax, eax, 0x28
add ecx, 0xd608acbd
add ecx, eax
sub ecx, 0xd608acbd
mov eax, dword [ebp - 0x60]
mov dword [eax], ecx
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x98], 0x582c5c4f
jmp 0x100027d8
mov ecx, dword [0x1006c548]
mov eax, dword [0x1006c544]
mov edx, ecx
sub edx, 0x6d9130ad
sub edx, 1
add edx, 0x6d9130ad
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe9d3b287
mov ecx, 0xb0b2a6e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov ecx, dword [ebp - 0x2c]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001c3b0
call fcn.10012110
add esp, 8
mov dword [ebp - 0x28], eax
mov eax, dword [0x1006c548]
mov ecx, dword [0x1006c544]
mov edx, eax
sub edx, 0xd038eefb
sub edx, 1
add edx, 0xd038eefb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe9d3b287
mov ecx, 0x16be6f6d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov dword [ebp - 0x98], 0x565b63b9
jmp 0x100027d8
mov ecx, dword [0x1006c548]
mov eax, dword [0x1006c544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb9e7c776
mov ecx, 0x8118004f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov eax, dword [ebp - 0x28]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x21], al
mov ecx, dword [0x1006c548]
mov eax, dword [0x1006c544]
mov edx, ecx
sub edx, 0x8c94170f
sub edx, 1
add edx, 0x8c94170f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb9e7c776
mov ecx, 0xb5a0180c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov dl, byte [ebp - 0x21]
mov eax, 0xc1c81967
mov ecx, 0x9376425a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov eax, dword [ebp - 0x5c]
mov dword [eax], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x80]
mov edx, dword [eax]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
mov eax, dword [ebp - 0x5c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x58]
mov byte [eax], cl
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
sub eax, 0x8659885
add eax, ecx
add eax, 0x8659885
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x98], 0x2e36a854
jmp 0x100027d8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x98], 0xf5ec653
jmp 0x100027d8
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000ff00
add esp, 0xc
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x80]
mov esi, dword [eax]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub esi, 0x9d66f575
add esi, eax
add esi, 0x9d66f575
mov eax, dword [ebp - 0x5c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x58]
mov byte [eax], cl
mov dword [ebp - 0x98], 0x9376425a
jmp 0x100027d8
mov dword [ebp - 0x98], 0xc6a67348
jmp 0x100027d8
mov eax, dword [ebp - 0x64]
mov ax, word [eax]
mov word [ebp - 0xe], ax
mov dword [ebp - 0x98], 0x8c39cc64
jmp 0x100027d8
mov ecx, dword [0x1006c548]
mov eax, dword [0x1006c544]
mov edx, ecx
add edx, 0xd741c529
sub edx, 1
sub edx, 0xd741c529
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd47b52cc
mov ecx, 0x8629d0e4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov cx, word [ebp - 0xe]
sub cx, 0xeb0
add cx, 1
add cx, 0xeb0
mov eax, dword [ebp - 0x64]
mov word [eax], cx
mov ecx, dword [0x1006c548]
mov eax, dword [0x1006c544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd47b52cc
mov ecx, 0xe350dd8b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov dword [ebp - 0x98], 0xa926d527
jmp 0x100027d8
mov dword [ebp - 0x98], 0x108c49cb
jmp 0x100027d8
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x98], 0xc877505a
jmp 0x100027d8
mov eax, dword [0x1006c548]
mov ecx, dword [0x1006c544]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2c701f5f
mov ecx, 0xa6b4cdf3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x1006c548]
mov eax, dword [0x1006c544]
mov edx, ecx
sub edx, 0xc2f64a45
sub edx, 1
add edx, 0xc2f64a45
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2c701f5f
mov ecx, 0xb77ea8f1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x100027d8
mov dword [ebp - 0x98], 0xa9d0e1ad
jmp 0x100027d8
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x98], 0x383fdc4a
jmp 0x100027d8
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1000f1a0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x98], 0xd70a2a9d
jmp 0x100027d8
mov dword [ebp - 0x98], 0x57516f87
jmp 0x100027d8
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x98], 0x37494d90
jmp 0x100027d8
mov eax, dword [ebp - 0x40]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x98], 0x6e363551
jmp 0x100027d8
mov dword [ebp - 0x98], 0x6a6f8ea5
jmp 0x100027d8
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x98], 0xa7b9c425
jmp 0x100027d8
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x98], 0x9a8db9e7
jmp 0x100027d8
mov ecx, dword [ebp - 0x2c]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001c3b0
call fcn.10012110
add esp, 8
mov dword [ebp - 0x98], 0xb0b2a6e8
jmp 0x100027d8
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x98], 0x8118004f
jmp 0x100027d8
mov ax, word [ebp - 0xe]
mov ax, word [ebp - 0xe]
mov cx, word [ebp - 0xe]
sub cx, 0x185f
add cx, 1
add cx, 0x185f
mov eax, dword [ebp - 0x64]
mov word [eax], cx
mov dword [ebp - 0x98], 0x8629d0e4
jmp 0x100027d8
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x98], 0xa6b4cdf3
jmp 0x1000122f