Function at 0x100093b0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xa0
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x10082280]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xa0], 0x81e520e0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
sub eax, 0x80cd0c71
je 0x1000a5a0
jmp 0x100093f4
mov eax, dword [ebp - 0xa8]
sub eax, 0x81e520e0
je 0x100098c9
jmp 0x1000940a
mov eax, dword [ebp - 0xa8]
sub eax, 0x8b69ec3c
je 0x10009d39
jmp 0x10009420
mov eax, dword [ebp - 0xa8]
sub eax, 0x8f0505ae
je 0x10009af9
jmp 0x10009436
mov eax, dword [ebp - 0xa8]
sub eax, 0x8fb574b5
je 0x1000a5d5
jmp 0x1000944c
mov eax, dword [ebp - 0xa8]
sub eax, 0x95139fd9
je 0x1000a0f7
jmp 0x10009462
mov eax, dword [ebp - 0xa8]
sub eax, 0xa13ee267
je 0x1000a49a
jmp 0x10009478
mov eax, dword [ebp - 0xa8]
sub eax, 0xa9d68cc0
je 0x1000a05d
jmp 0x1000948e
mov eax, dword [ebp - 0xa8]
sub eax, 0xb0dfeac9
je 0x1000a313
jmp 0x100094a4
mov eax, dword [ebp - 0xa8]
sub eax, 0xcd1006d5
je 0x1000a4b2
jmp 0x100094ba
mov eax, dword [ebp - 0xa8]
sub eax, 0xd3046f2d
je 0x10009fea
jmp 0x100094d0
mov eax, dword [ebp - 0xa8]
sub eax, 0xd43a6af7
je 0x10009f0c
jmp 0x100094e6
mov eax, dword [ebp - 0xa8]
sub eax, 0xd57a7d2a
je 0x1000a5f5
jmp 0x100094fc
mov eax, dword [ebp - 0xa8]
sub eax, 0xdc7b1488
je 0x1000a188
jmp 0x10009512
mov eax, dword [ebp - 0xa8]
sub eax, 0xdce9effc
je 0x10009c69
jmp 0x10009528
mov eax, dword [ebp - 0xa8]
sub eax, 0xdd09f2f8
je 0x1000a106
jmp 0x1000953e
mov eax, dword [ebp - 0xa8]
sub eax, 0xdf468d57
je 0x10009f91
jmp 0x10009554
mov eax, dword [ebp - 0xa8]
sub eax, 0xe15f785f
je 0x1000a16a
jmp 0x1000956a
mov eax, dword [ebp - 0xa8]
sub eax, 0xe9135470
je 0x10009da6
jmp 0x10009580
mov eax, dword [ebp - 0xa8]
sub eax, 0xeb4f8a6d
je 0x1000a58f
jmp 0x10009596
mov eax, dword [ebp - 0xa8]
sub eax, 0xecebf524
je 0x10009e9d
jmp 0x100095ac
mov eax, dword [ebp - 0xa8]
sub eax, 0xf2967903
je 0x1000a454
jmp 0x100095c2
mov eax, dword [ebp - 0xa8]
sub eax, 0x32d6490
je 0x1000a521
jmp 0x100095d8
mov eax, dword [ebp - 0xa8]
sub eax, 0x4abde0c
je 0x10009c78
jmp 0x100095ee
mov eax, dword [ebp - 0xa8]
sub eax, 0x83ceb58
je 0x1000a322
jmp 0x10009604
mov eax, dword [ebp - 0xa8]
sub eax, 0xe98a816
je 0x10009cc3
jmp 0x1000961a
mov eax, dword [ebp - 0xa8]
sub eax, 0x165ad1c4
je 0x10009a04
jmp 0x10009630
mov eax, dword [ebp - 0xa8]
sub eax, 0x1767f5ba
je 0x1000a1fb
jmp 0x10009646
mov eax, dword [ebp - 0xa8]
sub eax, 0x1d766faf
je 0x10009dc4
jmp 0x1000965c
mov eax, dword [ebp - 0xa8]
sub eax, 0x21f1fa8f
je 0x1000a00c
jmp 0x10009672
mov eax, dword [ebp - 0xa8]
sub eax, 0x25dab670
je 0x10009b8f
jmp 0x10009688
mov eax, dword [ebp - 0xa8]
sub eax, 0x2740f20c
je 0x100099ba
jmp 0x1000969e
mov eax, dword [ebp - 0xa8]
sub eax, 0x2956230c
je 0x10009e3a
jmp 0x100096b4
mov eax, dword [ebp - 0xa8]
sub eax, 0x35c83d8e
je 0x1000a419
jmp 0x100096ca
mov eax, dword [ebp - 0xa8]
sub eax, 0x396041ed
je 0x1000a14c
jmp 0x100096e0
mov eax, dword [ebp - 0xa8]
sub eax, 0x3e514fcf
je 0x1000a655
jmp 0x100096f6
mov eax, dword [ebp - 0xa8]
sub eax, 0x40041b0f
je 0x10009a8b
jmp 0x1000970c
mov eax, dword [ebp - 0xa8]
sub eax, 0x43d9a608
je 0x1000a24c
jmp 0x10009722
mov eax, dword [ebp - 0xa8]
sub eax, 0x4401648b
je 0x1000999c
jmp 0x10009738
mov eax, dword [ebp - 0xa8]
sub eax, 0x47423478
je 0x10009bad
jmp 0x1000974e
mov eax, dword [ebp - 0xa8]
sub eax, 0x48d7c4df
je 0x10009ebb
jmp 0x10009764
mov eax, dword [ebp - 0xa8]
sub eax, 0x4ab86876
je 0x10009bbc
jmp 0x1000977a
mov eax, dword [ebp - 0xa8]
sub eax, 0x4d238885
je 0x10009f82
jmp 0x10009790
mov eax, dword [ebp - 0xa8]
sub eax, 0x54ea5521
je 0x1000a4d0
jmp 0x100097a6
mov eax, dword [ebp - 0xa8]
sub eax, 0x56d62e7b
je 0x1000a129
jmp 0x100097bc
mov eax, dword [ebp - 0xa8]
sub eax, 0x5825781c
je 0x100099c9
jmp 0x100097d2
mov eax, dword [ebp - 0xa8]
sub eax, 0x587ff7d7
je 0x1000a40a
jmp 0x100097e8
mov eax, dword [ebp - 0xa8]
sub eax, 0x588a3869
je 0x1000a463
jmp 0x100097fe
mov eax, dword [ebp - 0xa8]
sub eax, 0x5cd72d3b
je 0x1000a1a3
jmp 0x10009814
mov eax, dword [ebp - 0xa8]
sub eax, 0x5dd52eaa
je 0x1000a6b2
jmp 0x1000982a
mov eax, dword [ebp - 0xa8]
sub eax, 0x603fc730
je 0x10009c0d
jmp 0x10009840
mov eax, dword [ebp - 0xa8]
sub eax, 0x60c0a1ad
je 0x1000a619
jmp 0x10009856
mov eax, dword [ebp - 0xa8]
sub eax, 0x62f052c2
je 0x1000a432
jmp 0x1000986c
mov eax, dword [ebp - 0xa8]
sub eax, 0x69328858
je 0x1000a60a
jmp 0x10009882
mov eax, dword [ebp - 0xa8]
sub eax, 0x72889fee
je 0x1000a5c0
jmp 0x10009898
mov eax, dword [ebp - 0xa8]
sub eax, 0x7c8690db
je 0x1000a358
jmp 0x100098ae
mov eax, dword [ebp - 0xa8]
sub eax, 0x7f34c541
je 0x10009e8e
jmp 0x100098c4
jmp 0x1000a6bc
mov eax, dword [ebp - 0xa4]
push eax
mov ecx, esp
mov dword [ebp - 0x94], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x90], ecx
sub esp, 0x104
mov ecx, esp
mov dword [ebp - 0x8c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x88], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x84], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x80], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x7c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x78], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x74], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x70], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x98], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.100235e0
add esp, 0xc
mov eax, dword [ebp - 0x98]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
mov eax, dword [ebp - 0x94]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x61], al
mov dword [ebp - 0xa0], 0x4401648b
jmp 0x1000a6bc
mov dl, byte [ebp - 0x61]
mov eax, 0x2740f20c
mov ecx, 0x5825781c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov dword [ebp - 0xa0], 0x54ea5521
jmp 0x1000a6bc
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x9c]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov dword [ebp - 0xa0], 0x165ad1c4
jmp 0x1000a6bc
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0xa0], 0x40041b0f
jmp 0x1000a6bc
mov ecx, dword [0x1008378c]
mov eax, dword [0x10083788]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x80cd0c71
mov ecx, 0x8f0505ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x60]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x59], al
mov ecx, dword [0x1008378c]
mov eax, dword [0x10083788]
mov edx, ecx
sub edx, 0x741a5b85
sub edx, 1
add edx, 0x741a5b85
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x80cd0c71
mov ecx, 0x25dab670
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov dl, byte [ebp - 0x59]
mov eax, 0x4ab86876
mov ecx, 0x47423478
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov dword [ebp - 0xa0], 0x54ea5521
jmp 0x1000a6bc
mov eax, dword [0x1008378c]
mov ecx, dword [0x10083788]
mov edx, eax
add edx, 0x2b8f8f22
sub edx, 1
sub edx, 0x2b8f8f22
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x72889fee
mov ecx, 0x603fc730
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov eax, dword [0x1008378c]
mov ecx, dword [0x10083788]
mov edx, eax
add edx, 0x26ffee81
sub edx, 1
sub edx, 0x26ffee81
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x72889fee
mov ecx, 0xdce9effc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov dword [ebp - 0xa0], 0x4abde0c
jmp 0x1000a6bc
mov eax, dword [ebp - 0x58]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xa0], 0xe98a816
jmp 0x1000a6bc
mov ecx, dword [0x1008378c]
mov eax, dword [0x10083788]
mov edx, ecx
sub edx, 0xc5530f16
sub edx, 1
add edx, 0xc5530f16
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8fb574b5
mov ecx, 0x8b69ec3c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x4d], al
mov eax, dword [0x1008378c]
mov ecx, dword [0x10083788]
mov edx, eax
add edx, 0x50bcb831
sub edx, 1
sub edx, 0x50bcb831
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8fb574b5
mov ecx, 0xe9135470
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov dl, byte [ebp - 0x4d]
mov eax, 0x1d766faf
mov ecx, 0xdf468d57
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov ecx, dword [0x1008378c]
mov eax, dword [0x10083788]
mov edx, ecx
add edx, 0xa060c735
sub edx, 1
sub edx, 0xa060c735
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd57a7d2a
mov ecx, 0x2956230c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov eax, dword [0x1008378c]
mov ecx, dword [0x10083788]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd57a7d2a
mov ecx, 0x7f34c541
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov dword [ebp - 0xa0], 0xecebf524
jmp 0x1000a6bc
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0x48d7c4df
jmp 0x1000a6bc
mov eax, dword [0x1008378c]
mov ecx, dword [0x10083788]
mov edx, eax
sub edx, 0x6f96df7
sub edx, 1
add edx, 0x6f96df7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x69328858
mov ecx, 0xd43a6af7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov ecx, dword [0x1008378c]
mov eax, dword [0x10083788]
mov edx, ecx
add edx, 0x3aeedf63
sub edx, 1
sub edx, 0x3aeedf63
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x69328858
mov ecx, 0x4d238885
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov dword [ebp - 0xa0], 0x54ea5521
jmp 0x1000a6bc
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov dword [ebp - 0xa0], 0xd3046f2d
jmp 0x1000a6bc
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xa0], 0x21f1fa8f
jmp 0x1000a6bc
mov eax, dword [0x1008378c]
mov ecx, dword [0x10083788]
mov edx, eax
sub edx, 0xf8c5f591
sub edx, 1
add edx, 0xf8c5f591
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x60c0a1ad
mov ecx, 0xa9d68cc0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x48]
sub ecx, 0xde47c3f4
add ecx, eax
add ecx, 0xde47c3f4
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov word [eax], 0
mov ecx, dword [0x1008378c]
mov eax, dword [0x10083788]
mov edx, ecx
sub edx, 0x72934496
sub edx, 1
add edx, 0x72934496
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x60c0a1ad
mov ecx, 0x95139fd9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov dword [ebp - 0xa0], 0xdd09f2f8
jmp 0x1000a6bc
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0xa0], 0x56d62e7b
jmp 0x1000a6bc
mov eax, dword [ebp - 0x3c]
movzx ecx, word [eax + 2]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x35], al
mov dword [ebp - 0xa0], 0x396041ed
jmp 0x1000a6bc
mov dl, byte [ebp - 0x35]
mov eax, 0x588a3869
mov ecx, 0xe15f785f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, 0x18
sub eax, ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xa0], 0xdc7b1488
jmp 0x1000a6bc
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xa0], 0x5cd72d3b
jmp 0x1000a6bc
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x10030c7d
call fcn.10026f40
add esp, 8
mov edx, eax
mov eax, 0x1767f5ba
mov ecx, 0x587ff7d7
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov eax, dword [0x1008378c]
mov ecx, dword [0x10083788]
mov edx, eax
sub edx, 0xdcffcdde
sub edx, 1
add edx, 0xdcffcdde
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3e514fcf
mov ecx, 0x43d9a608
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x90]
mov edx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x2c], eax
mov ecx, dword [0x1008378c]
mov eax, dword [0x10083788]
mov edx, ecx
sub edx, 0x495c1c32
sub edx, 1
add edx, 0x495c1c32
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3e514fcf
mov ecx, 0xb0dfeac9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov dword [ebp - 0xa0], 0x83ceb58
jmp 0x1000a6bc
mov eax, dword [ebp - 0x2c]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
add eax, 0xc
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xa0], 0x7c8690db
jmp 0x1000a6bc
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov edx, dword [ebp - 0x28]
add edx, 0xb05fd2d4
add edx, eax
sub edx, 0xb05fd2d4
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, esi
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10023740
add esp, 0xc
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x90]
mov esi, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub esi, 0xb8f400fe
add esi, eax
add esi, 0xb8f400fe
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov dword [ebp - 0xa0], 0x587ff7d7
jmp 0x1000a6bc
mov dword [ebp - 0xa0], 0x35c83d8e
jmp 0x1000a6bc
mov eax, dword [ebp - 0x74]
mov ax, word [eax]
mov word [ebp - 0x1e], ax
mov dword [ebp - 0xa0], 0x62f052c2
jmp 0x1000a6bc
mov cx, word [ebp - 0x1e]
xor eax, eax
sub ax, 1
sub cx, ax
mov eax, dword [ebp - 0x74]
mov word [eax], cx
mov dword [ebp - 0xa0], 0xf2967903
jmp 0x1000a6bc
mov dword [ebp - 0xa0], 0xdd09f2f8
jmp 0x1000a6bc
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xa13ee267
jmp 0x1000a6bc
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa0], 0xcd1006d5
jmp 0x1000a6bc
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0x54ea5521
jmp 0x1000a6bc
mov eax, dword [0x1008378c]
mov ecx, dword [0x10083788]
mov edx, eax
add edx, 0x5e03874d
sub edx, 1
sub edx, 0x5e03874d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5dd52eaa
mov ecx, 0x32d6490
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov ecx, dword [0x1008378c]
mov eax, dword [0x10083788]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5dd52eaa
mov ecx, 0xeb4f8a6d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000a6bc
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10022840
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x60]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xa0], 0x8f0505ae
jmp 0x1000a6bc
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xa0], 0x603fc730
jmp 0x1000a6bc
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], 0x8b69ec3c
jmp 0x1000a6bc
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xa0], 0x2956230c
jmp 0x1000a6bc
mov dword [ebp - 0xa0], 0xd43a6af7
jmp 0x1000a6bc
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
add ecx, 0xd634b0fb
add ecx, eax
sub ecx, 0xd634b0fb
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov word [eax], 0
mov dword [ebp - 0xa0], 0xa9d68cc0
jmp 0x1000a6bc
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x90]
mov edx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0xa0], 0x43d9a608
jmp 0x1000a6bc
mov dword [ebp - 0xa0], 0x32d6490
jmp 0x100093d8