Function at 0x100011b0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xa8
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa8], eax
mov eax, dword [0x1007d200]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xa4], 0xaabf1d57
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xac], eax
sub eax, 0x84822010
je 0x10002092
jmp 0x100011f4
mov eax, dword [ebp - 0xac]
sub eax, 0x85cd5344
je 0x10002432
jmp 0x1000120a
mov eax, dword [ebp - 0xac]
sub eax, 0x88489d8f
je 0x10001d0d
jmp 0x10001220
mov eax, dword [ebp - 0xac]
sub eax, 0x8ffb03bf
je 0x10002629
jmp 0x10001236
mov eax, dword [ebp - 0xac]
sub eax, 0x92aaa338
je 0x100027ec
jmp 0x1000124c
mov eax, dword [ebp - 0xac]
sub eax, 0x960f33ba
je 0x10001c9f
jmp 0x10001262
mov eax, dword [ebp - 0xac]
sub eax, 0x9795e4da
je 0x10002882
jmp 0x10001278
mov eax, dword [ebp - 0xac]
sub eax, 0x98c4c15e
je 0x10001c05
jmp 0x1000128e
mov eax, dword [ebp - 0xac]
sub eax, 0x9b8e7da2
je 0x10001abe
jmp 0x100012a4
mov eax, dword [ebp - 0xac]
sub eax, 0xa12d46d8
je 0x10001bd8
jmp 0x100012ba
mov eax, dword [ebp - 0xac]
sub eax, 0xaabf1d57
je 0x100017d1
jmp 0x100012d0
mov eax, dword [ebp - 0xac]
sub eax, 0xacb8a91d
je 0x10001ed8
jmp 0x100012e6
mov eax, dword [ebp - 0xac]
sub eax, 0xadf8283a
je 0x1000229b
jmp 0x100012fc
mov eax, dword [ebp - 0xac]
sub eax, 0xb011212e
je 0x10001c7e
jmp 0x10001312
mov eax, dword [ebp - 0xac]
sub eax, 0xb34adbe1
je 0x1000232e
jmp 0x10001328
mov eax, dword [ebp - 0xac]
sub eax, 0xb4f0b694
je 0x100028af
jmp 0x1000133e
mov eax, dword [ebp - 0xac]
sub eax, 0xb5bce5c5
je 0x10002123
jmp 0x10001354
mov eax, dword [ebp - 0xac]
sub eax, 0xb70dca9a
je 0x10002489
jmp 0x1000136a
mov eax, dword [ebp - 0xac]
sub eax, 0xb96898fc
je 0x100020a1
jmp 0x10001380
mov eax, dword [ebp - 0xac]
sub eax, 0xb9dea8d0
je 0x10001b07
jmp 0x10001396
mov eax, dword [ebp - 0xac]
sub eax, 0xbe121ba2
je 0x10001e21
jmp 0x100013ac
mov eax, dword [ebp - 0xac]
sub eax, 0xc15ee5c0
je 0x10002969
jmp 0x100013c2
mov eax, dword [ebp - 0xac]
sub eax, 0xc2544718
je 0x100025b0
jmp 0x100013d8
mov eax, dword [ebp - 0xac]
sub eax, 0xc2dd05aa
je 0x100026d6
jmp 0x100013ee
mov eax, dword [ebp - 0xac]
sub eax, 0xc59c15cd
je 0x10002199
jmp 0x10001404
mov eax, dword [ebp - 0xac]
sub eax, 0xcb8216c6
je 0x10002957
jmp 0x1000141a
mov eax, dword [ebp - 0xac]
sub eax, 0xd1f7d4d6
je 0x10002982
jmp 0x10001430
mov eax, dword [ebp - 0xac]
sub eax, 0xd2cf7023
je 0x100024e9
jmp 0x10001446
mov eax, dword [ebp - 0xac]
sub eax, 0xd7318880
je 0x1000222d
jmp 0x1000145c
mov eax, dword [ebp - 0xac]
sub eax, 0xd7ed6d59
je 0x10001dc9
jmp 0x10001472
mov eax, dword [ebp - 0xac]
sub eax, 0xdc117192
je 0x1000273f
jmp 0x10001488
mov eax, dword [ebp - 0xac]
sub eax, 0xe3bb3e7b
je 0x10001ff6
jmp 0x1000149e
mov eax, dword [ebp - 0xac]
sub eax, 0xe6013a56
je 0x10001d78
jmp 0x100014b4
mov eax, dword [ebp - 0xac]
sub eax, 0xe78a1b8e
je 0x100020d9
jmp 0x100014ca
mov eax, dword [ebp - 0xac]
sub eax, 0xe7e4c597
je 0x10001c14
jmp 0x100014e0
mov eax, dword [ebp - 0xac]
sub eax, 0xf0e65c63
je 0x1000292f
jmp 0x100014f6
mov eax, dword [ebp - 0xac]
sub eax, 0xf175cb78
je 0x10001e30
jmp 0x1000150c
mov eax, dword [ebp - 0xac]
sub eax, 0xff09c303
je 0x10001c64
jmp 0x10001522
mov eax, dword [ebp - 0xac]
sub eax, 0x4ef54dd
je 0x10001be7
jmp 0x10001538
mov eax, dword [ebp - 0xac]
sub eax, 0xf405399
je 0x1000260b
jmp 0x1000154e
mov eax, dword [ebp - 0xac]
sub eax, 0x18ed0fa1
je 0x100023d0
jmp 0x10001564
mov eax, dword [ebp - 0xac]
sub eax, 0x1f0c7094
je 0x10001966
jmp 0x1000157a
mov eax, dword [ebp - 0xac]
sub eax, 0x24718c45
je 0x10001f71
jmp 0x10001590
mov eax, dword [ebp - 0xac]
sub eax, 0x24f2fffb
je 0x10001f80
jmp 0x100015a6
mov eax, dword [ebp - 0xac]
sub eax, 0x268f4f4e
je 0x10001e3f
jmp 0x100015bc
mov eax, dword [ebp - 0xac]
sub eax, 0x28333a5a
je 0x10002864
jmp 0x100015d2
mov eax, dword [ebp - 0xac]
sub eax, 0x2a300acb
je 0x1000284f
jmp 0x100015e8
mov eax, dword [ebp - 0xac]
sub eax, 0x2a739141
je 0x100027dd
jmp 0x100015fe
mov eax, dword [ebp - 0xac]
sub eax, 0x35a2f0f9
je 0x1000255f
jmp 0x10001614
mov eax, dword [ebp - 0xac]
sub eax, 0x39362d80
je 0x10002660
jmp 0x1000162a
mov eax, dword [ebp - 0xac]
sub eax, 0x3b5f3694
je 0x1000183f
jmp 0x10001640
mov eax, dword [ebp - 0xac]
sub eax, 0x3beea4c5
je 0x100020fd
jmp 0x10001656
mov eax, dword [ebp - 0xac]
sub eax, 0x40350b41
je 0x100019fa
jmp 0x1000166c
mov eax, dword [ebp - 0xac]
sub eax, 0x4625a7bb
je 0x100028eb
jmp 0x10001682
mov eax, dword [ebp - 0xac]
sub eax, 0x4b603f92
je 0x10002498
jmp 0x10001698
mov eax, dword [ebp - 0xac]
sub eax, 0x4ed62e84
je 0x10001e87
jmp 0x100016ae
mov eax, dword [ebp - 0xac]
sub eax, 0x5288c12e
je 0x1000276e
jmp 0x100016c4
mov eax, dword [ebp - 0xac]
sub eax, 0x5a4e6bed
je 0x10001a43
jmp 0x100016da
mov eax, dword [ebp - 0xac]
sub eax, 0x5b4fd400
je 0x1000221e
jmp 0x100016f0
mov eax, dword [ebp - 0xac]
sub eax, 0x5d31e8f5
je 0x10001d69
jmp 0x10001706
mov eax, dword [ebp - 0xac]
sub eax, 0x5e7828db
je 0x10001957
jmp 0x1000171c
mov eax, dword [ebp - 0xac]
sub eax, 0x60a33932
je 0x1000261a
jmp 0x10001732
mov eax, dword [ebp - 0xac]
sub eax, 0x67e80691
je 0x10001a52
jmp 0x10001748
mov eax, dword [ebp - 0xac]
sub eax, 0x69cfcf26
je 0x10002310
jmp 0x1000175e
mov eax, dword [ebp - 0xac]
sub eax, 0x6bbe5020
je 0x10002550
mov ecx, dword [0x1007e548]
mov eax, dword [0x1007e544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5288c12e
mov ecx, 0x3b5f3694
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0xa8]
push eax
mov ecx, esp
mov dword [ebp - 0x98], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x94], ecx
sub esp, 0x104
mov ecx, esp
mov dword [ebp - 0x90], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x8c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x88], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x84], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x80], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x7c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x78], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x74], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x70], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x9c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10010ef0
add esp, 0xc
mov eax, dword [ebp - 0x9c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x98]
mov dword [eax], ecx
mov eax, dword [ebp - 0x98]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x66], al
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
mov edx, eax
sub edx, 0x168a876c
sub edx, 1
add edx, 0x168a876c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5288c12e
mov ecx, 0x5e7828db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov dword [ebp - 0xa4], 0x1f0c7094
jmp 0x1000298c
mov dl, byte [ebp - 0x66]
mov eax, 0x78367221
mov ecx, 0x67e80691
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2a739141
mov ecx, 0x5a4e6bed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov dword [ebp - 0xa4], 0x7450f639
jmp 0x1000298c
mov eax, dword [ebp - 0x98]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xa0]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x98]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0xa4], 0x9b8e7da2
jmp 0x1000298c
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x92aaa338
mov ecx, 0xb9dea8d0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0x90]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x65], al
mov ecx, dword [0x1007e548]
mov eax, dword [0x1007e544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x92aaa338
mov ecx, 0xa12d46d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov dword [ebp - 0xa4], 0x4ef54dd
jmp 0x1000298c
mov dl, byte [ebp - 0x65]
mov eax, 0xe7e4c597
mov ecx, 0x98c4c15e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov dword [ebp - 0xa4], 0x7450f639
jmp 0x1000298c
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0xa4], 0xff09c303
jmp 0x1000298c
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x64]
mov dword [eax], ecx
mov dword [ebp - 0xa4], 0xb011212e
jmp 0x1000298c
mov edx, dword [ebp - 0x88]
mov eax, 0x960f33ba
mov ecx, 0x268f4f4e
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov ecx, dword [0x1007e548]
mov eax, dword [0x1007e544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2a300acb
mov ecx, 0x88489d8f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
mov edx, eax
add edx, 0xe5242ef6
sub edx, 1
sub edx, 0xe5242ef6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2a300acb
mov ecx, 0x5d31e8f5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov dword [ebp - 0xa4], 0xe6013a56
jmp 0x1000298c
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
mov edx, eax
add edx, 0x543acc3f
sub edx, 1
sub edx, 0x543acc3f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x28333a5a
mov ecx, 0xd7ed6d59
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0x60]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x28333a5a
mov ecx, 0xbe121ba2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov dword [ebp - 0xa4], 0xf175cb78
jmp 0x1000298c
mov dword [ebp - 0xa4], 0x7450f639
jmp 0x1000298c
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xa4], 0x4ed62e84
jmp 0x1000298c
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
mov edx, eax
sub edx, 0xad3f0aff
sub edx, 1
add edx, 0xad3f0aff
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9795e4da
mov ecx, 0xacb8a91d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov ecx, dword [0x1007e548]
mov eax, dword [0x1007e544]
mov edx, ecx
add edx, 0x36140eb3
sub edx, 1
sub edx, 0x36140eb3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9795e4da
mov ecx, 0x24718c45
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov dword [ebp - 0xa4], 0x24f2fffb
jmp 0x1000298c
mov ecx, dword [0x1007e548]
mov eax, dword [0x1007e544]
mov edx, ecx
add edx, 0xeab827fd
sub edx, 1
sub edx, 0xeab827fd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb4f0b694
mov ecx, 0xe3bb3e7b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x58]
sub ecx, 0xc45f8471
add ecx, eax
add ecx, 0xc45f8471
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x78]
mov word [eax], 0
mov ecx, dword [0x1007e548]
mov eax, dword [0x1007e544]
mov edx, ecx
add edx, 0x1148af4b
sub edx, 1
sub edx, 0x1148af4b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb4f0b694
mov ecx, 0x84822010
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov dword [ebp - 0xa4], 0xb96898fc
jmp 0x1000298c
mov eax, dword [ebp - 0x78]
movzx eax, word [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xa4], 0x7145c98b
jmp 0x1000298c
mov eax, dword [ebp - 0x4c]
movzx esi, word [eax + 2]
mov edx, dword [ebp - 0x54]
mov eax, 0x8ffb03bf
mov ecx, 0x3beea4c5
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, 0x18
sub eax, ecx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xa4], 0xb5bce5c5
jmp 0x1000298c
mov ecx, dword [0x1007e548]
mov eax, dword [0x1007e544]
mov edx, ecx
sub edx, 0x69623359
sub edx, 1
add edx, 0x69623359
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4625a7bb
mov ecx, 0xc59c15cd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0x44]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x48]
sub ecx, 0x243b434d
add ecx, eax
add ecx, 0x243b434d
mov eax, dword [ebp - 0x78]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
mov edx, eax
sub edx, 0x80983214
sub edx, 1
add edx, 0x80983214
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4625a7bb
mov ecx, 0x5b4fd400
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov dword [ebp - 0xa4], 0xd7318880
jmp 0x1000298c
mov ecx, dword [0x1007e548]
mov eax, dword [0x1007e544]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf0e65c63
mov ecx, 0xadf8283a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov ecx, dword [ebp - 0x40]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001d3b0
call fcn.10013260
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x39], al
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
mov edx, eax
add edx, 0x11162a31
sub edx, 1
sub edx, 0x11162a31
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf0e65c63
mov ecx, 0x69cfcf26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov dl, byte [ebp - 0x39]
mov eax, 0xb34adbe1
mov ecx, 0xb70dca9a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0x70]
mov dword [eax], 0
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x94]
mov edx, dword [eax]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x92cf36e5
add edx, eax
sub edx, 0x92cf36e5
mov eax, dword [ebp - 0x70]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x6c]
mov byte [eax], cl
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xa4], 0x18ed0fa1
jmp 0x1000298c
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
add ecx, 0x5a36eec1
add ecx, eax
sub ecx, 0x5a36eec1
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x38]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10011050
add esp, 0xc
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xa4], 0x85cd5344
jmp 0x1000298c
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov esi, dword [ebp - 0x24]
add esi, 0x770402e7
add esi, eax
sub esi, 0x770402e7
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x6c]
mov byte [eax], cl
mov dword [ebp - 0xa4], 0xb70dca9a
jmp 0x1000298c
mov dword [ebp - 0xa4], 0x4b603f92
jmp 0x1000298c
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
mov edx, eax
sub edx, 0x3f79e6b0
sub edx, 1
add edx, 0x3f79e6b0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcb8216c6
mov ecx, 0xd2cf7023
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0x78]
mov ax, word [eax]
sub ax, 0xaf26
add ax, 1
add ax, 0xaf26
mov word [ebp - 0x1e], ax
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
mov edx, eax
sub edx, 0xd76f83bc
sub edx, 1
add edx, 0xd76f83bc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcb8216c6
mov ecx, 0x6bbe5020
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
mov edx, eax
sub edx, 0x1f792b66
sub edx, 1
add edx, 0x1f792b66
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc15ee5c0
mov ecx, 0xc2544718
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0x78]
mov cx, word [ebp - 0x1e]
mov word [eax], cx
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
mov edx, eax
add edx, 0x585ad9b7
sub edx, 1
sub edx, 0x585ad9b7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc15ee5c0
mov ecx, 0xf405399
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov dword [ebp - 0xa4], 0x60a33932
jmp 0x1000298c
mov dword [ebp - 0xa4], 0xb96898fc
jmp 0x1000298c
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa4], 0x39362d80
jmp 0x1000298c
mov ecx, dword [0x1007e548]
mov eax, dword [0x1007e544]
mov edx, ecx
sub edx, 0x85ef2139
sub edx, 1
add edx, 0x85ef2139
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd1f7d4d6
mov ecx, 0xc2dd05aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x1007e548]
mov ecx, dword [0x1007e544]
mov edx, eax
sub edx, 0xc4d0bf4e
sub edx, 1
add edx, 0xc4d0bf4e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd1f7d4d6
mov ecx, 0x7cad3b8f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x1000298c
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa4], 0x7450f639
jmp 0x1000298c
mov eax, dword [ebp - 0xa8]
push eax
mov ecx, esp
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0x9c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10010ef0
add esp, 0xc
mov eax, dword [ebp - 0x9c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov dword [ebp - 0xa4], 0x3b5f3694
jmp 0x1000298c
mov dword [ebp - 0xa4], 0x40350b41
jmp 0x1000298c
mov eax, dword [ebp - 0x90]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xa4], 0xb9dea8d0
jmp 0x1000298c
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xa4], 0x88489d8f
jmp 0x1000298c
mov eax, dword [ebp - 0x60]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa4], 0xd7ed6d59
jmp 0x1000298c
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xa4], 0xacb8a91d
jmp 0x1000298c
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x58]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x78]
mov word [eax], 0
mov dword [ebp - 0xa4], 0xe3bb3e7b
jmp 0x1000298c
mov eax, dword [ebp - 0x44]
movzx edx, word [eax + 0x14]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x78]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xa4], 0xc59c15cd
jmp 0x1000298c
mov ecx, dword [ebp - 0x40]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001d3b0
call fcn.10013260
add esp, 8
mov dword [ebp - 0xa4], 0xadf8283a
jmp 0x1000298c
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xa4], 0xd2cf7023
jmp 0x1000298c
mov eax, dword [ebp - 0x78]
mov cx, word [ebp - 0x1e]
mov word [eax], cx
mov dword [ebp - 0xa4], 0xc2544718
jmp 0x1000298c
mov dword [ebp - 0xa4], 0xc2dd05aa
jmp 0x100011d8