Function at 0x100010b0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x19c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1a4], eax
mov eax, dword [0x1006c800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1a0], 0xb5a7c5ce
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
sub eax, 0x8824b7db
je 0x1000210c
jmp 0x100010f5
mov eax, dword [ebp - 0x1a8]
sub eax, 0x88614a1a
je 0x10001ebe
jmp 0x1000110b
mov eax, dword [ebp - 0x1a8]
sub eax, 0x889492eb
je 0x100020fd
jmp 0x10001121
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8963e0e9
je 0x1000217b
jmp 0x10001137
mov eax, dword [ebp - 0x1a8]
sub eax, 0x89fcf4a8
je 0x1000191b
jmp 0x1000114d
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8c3dd555
je 0x10001aec
jmp 0x10001163
mov eax, dword [ebp - 0x1a8]
sub eax, 0x8ca975a8
je 0x1000174a
jmp 0x10001179
mov eax, dword [ebp - 0x1a8]
sub eax, 0x90c0ba38
je 0x1000216c
jmp 0x1000118f
mov eax, dword [ebp - 0x1a8]
sub eax, 0x92ca90d0
je 0x10001a1b
jmp 0x100011a5
mov eax, dword [ebp - 0x1a8]
sub eax, 0xa42279e3
je 0x10002011
jmp 0x100011bb
mov eax, dword [ebp - 0x1a8]
sub eax, 0xabc7219b
je 0x10001aa5
jmp 0x100011d1
mov eax, dword [ebp - 0x1a8]
sub eax, 0xad34ffcd
je 0x10001e96
jmp 0x100011e7
mov eax, dword [ebp - 0x1a8]
sub eax, 0xae8bc58d
je 0x10002269
jmp 0x100011fd
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb5a7c5ce
je 0x10001588
jmp 0x10001213
mov eax, dword [ebp - 0x1a8]
sub eax, 0xb6a840d8
je 0x10001e78
jmp 0x10001229
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbb237a87
je 0x10001a59
jmp 0x1000123f
mov eax, dword [ebp - 0x1a8]
sub eax, 0xbc7d1cd6
je 0x10001d2d
jmp 0x10001255
mov eax, dword [ebp - 0x1a8]
sub eax, 0xc51b06af
je 0x10001f68
jmp 0x1000126b
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd616c03c
je 0x10002071
jmp 0x10001281
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd77a7ae8
je 0x10002278
jmp 0x10001297
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd84ea451
je 0x10001759
jmp 0x100012ad
mov eax, dword [ebp - 0x1a8]
sub eax, 0xd8cc1cff
je 0x10001acf
jmp 0x100012c3
mov eax, dword [ebp - 0x1a8]
sub eax, 0xda9df67b
je 0x10001896
jmp 0x100012d9
mov eax, dword [ebp - 0x1a8]
sub eax, 0xdbb9e392
je 0x1000224a
jmp 0x100012ef
mov eax, dword [ebp - 0x1a8]
sub eax, 0xdbf7f051
je 0x100018b7
jmp 0x10001305
mov eax, dword [ebp - 0x1a8]
sub eax, 0xdedb7b04
je 0x10001c01
jmp 0x1000131b
mov eax, dword [ebp - 0x1a8]
sub eax, 0xe94d6c79
je 0x10002020
jmp 0x10001331
mov eax, dword [ebp - 0x1a8]
sub eax, 0xec6e4d53
je 0x10001e87
jmp 0x10001347
mov eax, dword [ebp - 0x1a8]
sub eax, 0xf335ec36
je 0x10001656
jmp 0x1000135d
mov eax, dword [ebp - 0x1a8]
sub eax, 0x273b96
je 0x100018d2
jmp 0x10001373
mov eax, dword [ebp - 0x1a8]
sub eax, 0xee51780
je 0x10001626
jmp 0x10001389
mov eax, dword [ebp - 0x1a8]
sub eax, 0x148834ee
je 0x1000197e
jmp 0x1000139f
mov eax, dword [ebp - 0x1a8]
sub eax, 0x164dee70
je 0x100017c5
jmp 0x100013b5
mov eax, dword [ebp - 0x1a8]
sub eax, 0x297b5667
je 0x1000215a
jmp 0x100013cb
mov eax, dword [ebp - 0x1a8]
sub eax, 0x30cd32ca
je 0x1000180e
jmp 0x100013e1
mov eax, dword [ebp - 0x1a8]
sub eax, 0x346b5ff8
je 0x100016c2
jmp 0x100013f7
mov eax, dword [ebp - 0x1a8]
sub eax, 0x34cb1f96
je 0x100017aa
jmp 0x1000140d
mov eax, dword [ebp - 0x1a8]
sub eax, 0x4086324b
je 0x1000171b
jmp 0x10001423
mov eax, dword [ebp - 0x1a8]
sub eax, 0x4680312b
je 0x100021b7
jmp 0x10001439
mov eax, dword [ebp - 0x1a8]
sub eax, 0x4e3b6dfa
je 0x10001f77
jmp 0x1000144f
mov eax, dword [ebp - 0x1a8]
sub eax, 0x53cbe606
je 0x1000198d
jmp 0x10001465
mov eax, dword [ebp - 0x1a8]
sub eax, 0x56ad623c
je 0x1000199c
jmp 0x1000147b
mov eax, dword [ebp - 0x1a8]
sub eax, 0x59c6d613
je 0x1000219c
jmp 0x10001491
mov eax, dword [ebp - 0x1a8]
sub eax, 0x59cf5349
je 0x10002139
jmp 0x100014a7
mov eax, dword [ebp - 0x1a8]
sub eax, 0x600d6c5d
je 0x10001fc0
jmp 0x100014bd
mov eax, dword [ebp - 0x1a8]
sub eax, 0x680e9e0d
je 0x10001da3
jmp 0x100014d3
mov eax, dword [ebp - 0x1a8]
sub eax, 0x681a3445
je 0x10001647
jmp 0x100014e9
mov eax, dword [ebp - 0x1a8]
sub eax, 0x68b7f987
je 0x10001c5e
jmp 0x100014ff
mov eax, dword [ebp - 0x1a8]
sub eax, 0x6ee607a9
je 0x10001f0f
jmp 0x10001515
mov eax, dword [ebp - 0x1a8]
sub eax, 0x725f322f
je 0x100019fd
jmp 0x1000152b
mov eax, dword [ebp - 0x1a8]
sub eax, 0x74dfe5aa
je 0x10001b93
jmp 0x10001541
mov eax, dword [ebp - 0x1a8]
sub eax, 0x76557d06
je 0x10001c6d
jmp 0x10001557
mov eax, dword [ebp - 0x1a8]
sub eax, 0x7bdf3fbd
je 0x10001b07
jmp 0x1000156d
mov eax, dword [ebp - 0x1a8]
sub eax, 0x7d94f49c
je 0x10001a85
jmp 0x10001583
jmp 0x10002294
mov eax, dword [ebp - 0x1a4]
push eax
mov ecx, esp
mov dword [ebp - 0x17c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x178], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x174], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x170], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x180], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x184], eax
lea eax, [ebp - 0x120]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.100107f0
add esp, 0xc
mov eax, dword [ebp - 0x180]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x1a0], 0xee51780
jmp 0x10002294
mov edx, dword [ebp - 0x168]
mov eax, 0x681a3445
mov ecx, 0xf335ec36
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov dword [ebp - 0x1a0], 0x297b5667
jmp 0x10002294
mov ecx, dword [ebp - 0x188]
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x114]
mov ecx, dword [ebp - 0x188]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x1a0], 0x346b5ff8
jmp 0x10002294
lea eax, [ebp - 0x114]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1a0], 0x4086324b
jmp 0x10002294
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x190], eax
mov edx, 0xffffffff
mov eax, 0xd84ea451
mov ecx, 0x8ca975a8
cmp dword [ebp - 0x190], edx
cmove eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov dword [ebp - 0x1a0], 0x297b5667
jmp 0x10002294
mov eax, dword [ebp - 0x190]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x1a0], 0x34cb1f96
jmp 0x10002294
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1a0], 0x164dee70
jmp 0x10002294
mov eax, dword [0x1006db48]
mov ecx, dword [0x1006db44]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x90c0ba38
mov ecx, 0x30cd32ca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
cmp dword [ebp - 0x194], 0
setne al
and al, 1
mov byte [ebp - 0x159], al
mov ecx, dword [0x1006db48]
mov eax, dword [0x1006db44]
mov edx, ecx
sub edx, 0xe568f48
sub edx, 1
add edx, 0xe568f48
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x90c0ba38
mov ecx, 0xda9df67b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov dl, byte [ebp - 0x159]
mov eax, 0xdbf7f051
mov ecx, 0x56ad623c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x1a0], 0x273b96
jmp 0x10002294
mov eax, dword [0x1006db48]
mov ecx, dword [0x1006db44]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8963e0e9
mov ecx, 0x89fcf4a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov eax, dword [ebp - 0x158]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1006db48]
mov ecx, dword [0x1006db44]
mov edx, eax
sub edx, 0xf22a030a
sub edx, 1
add edx, 0xf22a030a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8963e0e9
mov ecx, 0x148834ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov dword [ebp - 0x1a0], 0x53cbe606
jmp 0x10002294
mov dword [ebp - 0x1a0], 0x297b5667
jmp 0x10002294
mov eax, dword [ebp - 0x194]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x1a0], 0x725f322f
jmp 0x10002294
mov eax, dword [ebp - 0x19c]
add eax, 0x3c
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x1a0], 0x92ca90d0
jmp 0x10002294
mov eax, dword [ebp - 0x150]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x154]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x17c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x178]
mov word [eax], 0
mov dword [ebp - 0x1a0], 0xbb237a87
jmp 0x10002294
mov eax, dword [ebp - 0x178]
movzx eax, word [eax]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1a0], 0x7d94f49c
jmp 0x10002294
mov eax, dword [ebp - 0x148]
mov ax, word [eax + 6]
mov word [ebp - 0x142], ax
mov dword [ebp - 0x1a0], 0xabc7219b
jmp 0x10002294
mov ax, word [ebp - 0x142]
movzx esi, ax
mov edx, dword [ebp - 0x14c]
mov eax, 0xe94d6c79
mov ecx, 0xd8cc1cff
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x1a0], 0x8c3dd555
jmp 0x10002294
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x1a0], 0x7bdf3fbd
jmp 0x10002294
mov ecx, dword [ebp - 0x13c]
add ecx, 0x81adff89
add ecx, 0x18
sub ecx, 0x81adff89
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
sub ecx, 0xefc4f3fb
add ecx, eax
add ecx, 0xefc4f3fb
mov eax, dword [ebp - 0x178]
movzx eax, word [eax]
imul eax, eax, 0x28
add ecx, 0x8da150d8
add ecx, eax
sub ecx, 0x8da150d8
mov eax, dword [ebp - 0x174]
mov dword [eax], ecx
mov eax, dword [ebp - 0x174]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001c3b0
call fcn.10012b70
add esp, 8
mov edx, eax
mov eax, 0x74dfe5aa
mov ecx, 0xec6e4d53
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov ecx, dword [0x1006db48]
mov eax, dword [0x1006db44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x59c6d613
mov ecx, 0xdedb7b04
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov eax, dword [ebp - 0x170]
mov dword [eax], 0
mov eax, dword [0x1006db48]
mov ecx, dword [0x1006db44]
mov edx, eax
add edx, 0x9e5511b0
sub edx, 1
sub edx, 0x9e5511b0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x59c6d613
mov ecx, 0x68b7f987
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov dword [ebp - 0x1a0], 0x76557d06
jmp 0x10002294
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x170]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x16c]
mov byte [eax], cl
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x174]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
sub eax, 0xf4554aea
add eax, ecx
add eax, 0xf4554aea
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x174]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
add eax, 0x7d3d7a73
add eax, ecx
sub eax, 0x7d3d7a73
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x1a0], 0xbc7d1cd6
jmp 0x10002294
mov ecx, dword [0x1006db48]
mov eax, dword [0x1006db44]
mov edx, ecx
sub edx, 0x48c9f054
sub edx, 1
add edx, 0x48c9f054
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4680312b
mov ecx, 0x680e9e0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov eax, dword [ebp - 0x130]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10010950
add esp, 0xc
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
xor esi, esi
sub esi, edi
add eax, esi
xor esi, esi
sub esi, eax
mov eax, dword [ebp - 0x170]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x16c]
mov byte [eax], cl
mov eax, dword [0x1006db48]
mov ecx, dword [0x1006db44]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4680312b
mov ecx, 0xb6a840d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov dword [ebp - 0x1a0], 0xec6e4d53
jmp 0x10002294
mov dword [ebp - 0x1a0], 0xad34ffcd
jmp 0x10002294
mov eax, dword [ebp - 0x178]
mov ax, word [eax]
xor ecx, ecx
sub cx, 1
sub ax, cx
mov word [ebp - 0x12a], ax
mov dword [ebp - 0x1a0], 0x88614a1a
jmp 0x10002294
mov eax, dword [0x1006db48]
mov ecx, dword [0x1006db44]
mov edx, eax
sub edx, 0xe17b0feb
sub edx, 1
add edx, 0xe17b0feb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdbb9e392
mov ecx, 0x6ee607a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov eax, dword [ebp - 0x178]
mov cx, word [ebp - 0x12a]
mov word [eax], cx
mov eax, dword [0x1006db48]
mov ecx, dword [0x1006db44]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdbb9e392
mov ecx, 0xc51b06af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov dword [ebp - 0x1a0], 0x4e3b6dfa
jmp 0x10002294
mov eax, dword [0x1006db48]
mov ecx, dword [0x1006db44]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xae8bc58d
mov ecx, 0x600d6c5d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov eax, dword [0x1006db48]
mov ecx, dword [0x1006db44]
mov edx, eax
sub edx, 0xda9dad58
sub edx, 1
add edx, 0xda9dad58
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xae8bc58d
mov ecx, 0xa42279e3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov dword [ebp - 0x1a0], 0xbb237a87
jmp 0x10002294
mov eax, dword [0x1006db48]
mov ecx, dword [0x1006db44]
mov edx, eax
add edx, 0x7af8cf54
sub edx, 1
sub edx, 0x7af8cf54
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd77a7ae8
mov ecx, 0xd616c03c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov eax, dword [ebp - 0x190]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x128], eax
mov ecx, dword [0x1006db48]
mov eax, dword [0x1006db44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd77a7ae8
mov ecx, 0x889492eb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a0], eax
jmp 0x10002294
mov dword [ebp - 0x1a0], 0x8824b7db
jmp 0x10002294
mov eax, dword [ebp - 0x128]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x1a0], 0x59cf5349
jmp 0x10002294
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a0], 0x297b5667
jmp 0x10002294
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000fbf0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1a0], 0x30cd32ca
jmp 0x10002294
mov eax, dword [ebp - 0x158]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a0], 0x89fcf4a8
jmp 0x10002294
mov eax, dword [ebp - 0x170]
mov dword [eax], 0
mov dword [ebp - 0x1a0], 0xdedb7b04
jmp 0x10002294
mov eax, dword [ebp - 0x130]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10010950
add esp, 0xc
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, edi
sub esi, eax
mov eax, dword [ebp - 0x170]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x16c]
mov byte [eax], cl
mov dword [ebp - 0x1a0], 0x680e9e0d
jmp 0x10002294
mov eax, dword [ebp - 0x178]
mov cx, word [ebp - 0x12a]
mov word [eax], cx
mov dword [ebp - 0x1a0], 0x6ee607a9
jmp 0x10002294
mov dword [ebp - 0x1a0], 0x600d6c5d
jmp 0x10002294
mov eax, dword [ebp - 0x190]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a0], 0xd616c03c
jmp 0x100010d9