Function at 0x10001220
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x9c
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x1006b000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xa0], 0xa3e4d1b9
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
sub eax, 0x833fbbc2
je 0x10001950
jmp 0x10001265
mov eax, dword [ebp - 0xa8]
sub eax, 0x856eb0ec
je 0x10001da3
jmp 0x1000127b
mov eax, dword [ebp - 0xa8]
sub eax, 0x86d27dfc
je 0x100028cb
jmp 0x10001291
mov eax, dword [ebp - 0xa8]
sub eax, 0x86fa6eef
je 0x100022e7
jmp 0x100012a7
mov eax, dword [ebp - 0xa8]
sub eax, 0x8b803185
je 0x10001f5b
jmp 0x100012bd
mov eax, dword [ebp - 0xa8]
sub eax, 0x8bdb2b16
je 0x10002a74
jmp 0x100012d3
mov eax, dword [ebp - 0xa8]
sub eax, 0x90ce2fab
je 0x10002029
jmp 0x100012e9
mov eax, dword [ebp - 0xa8]
sub eax, 0x921ee5e4
je 0x100023e1
jmp 0x100012ff
mov eax, dword [ebp - 0xa8]
sub eax, 0x955f27b2
je 0x10002173
jmp 0x10001315
mov eax, dword [ebp - 0xa8]
sub eax, 0x9fdf72a0
je 0x10001e47
jmp 0x1000132b
mov eax, dword [ebp - 0xa8]
sub eax, 0xa3d5a026
je 0x10001e29
jmp 0x10001341
mov eax, dword [ebp - 0xa8]
sub eax, 0xa3e4d1b9
je 0x10001884
jmp 0x10001357
mov eax, dword [ebp - 0xa8]
sub eax, 0xa4f2efa8
je 0x10002292
jmp 0x1000136d
mov eax, dword [ebp - 0xa8]
sub eax, 0xae231621
je 0x10002aa1
jmp 0x10001383
mov eax, dword [ebp - 0xa8]
sub eax, 0xb6f6fb2a
je 0x100026a4
jmp 0x10001399
mov eax, dword [ebp - 0xa8]
sub eax, 0xb8328d3a
je 0x100020d7
jmp 0x100013af
mov eax, dword [ebp - 0xa8]
sub eax, 0xc026f1de
je 0x10002799
jmp 0x100013c5
mov eax, dword [ebp - 0xa8]
sub eax, 0xc383d3a6
je 0x100024a1
jmp 0x100013db
mov eax, dword [ebp - 0xa8]
sub eax, 0xc4e36660
je 0x1000256c
jmp 0x100013f1
mov eax, dword [ebp - 0xa8]
sub eax, 0xc7839d52
je 0x10002748
jmp 0x10001407
mov eax, dword [ebp - 0xa8]
sub eax, 0xc815304f
je 0x100021a6
jmp 0x1000141d
mov eax, dword [ebp - 0xa8]
sub eax, 0xc92730ed
je 0x10002708
jmp 0x10001433
mov eax, dword [ebp - 0xa8]
sub eax, 0xcc8ee4a5
je 0x10002808
jmp 0x10001449
mov eax, dword [ebp - 0xa8]
sub eax, 0xcda881ca
je 0x100018c6
jmp 0x1000145f
mov eax, dword [ebp - 0xa8]
sub eax, 0xd46179b8
je 0x100028aa
jmp 0x10001475
mov eax, dword [ebp - 0xa8]
sub eax, 0xda4509ac
je 0x10001ba3
jmp 0x1000148b
mov eax, dword [ebp - 0xa8]
sub eax, 0xda64aeb8
je 0x10002a83
jmp 0x100014a1
mov eax, dword [ebp - 0xa8]
sub eax, 0xda7b6e88
je 0x10002904
jmp 0x100014b7
mov eax, dword [ebp - 0xa8]
sub eax, 0xdb39cc34
je 0x1000251b
jmp 0x100014cd
mov eax, dword [ebp - 0xa8]
sub eax, 0xdbb422c4
je 0x1000235d
jmp 0x100014e3
mov eax, dword [ebp - 0xa8]
sub eax, 0xdbccf6bd
je 0x10002164
jmp 0x100014f9
mov eax, dword [ebp - 0xa8]
sub eax, 0xdf4a6635
je 0x10001ecf
jmp 0x1000150f
mov eax, dword [ebp - 0xa8]
sub eax, 0xe03e7096
je 0x10001a4f
jmp 0x10001525
mov eax, dword [ebp - 0xa8]
sub eax, 0xe1339133
je 0x100026ef
jmp 0x1000153b
mov eax, dword [ebp - 0xa8]
sub eax, 0xe20ece95
je 0x10001d2d
jmp 0x10001551
mov eax, dword [ebp - 0xa8]
sub eax, 0xea42d479
je 0x100021c6
jmp 0x10001567
mov eax, dword [ebp - 0xa8]
sub eax, 0xeb896d1d
je 0x100023ff
jmp 0x1000157d
mov eax, dword [ebp - 0xa8]
sub eax, 0xf333f307
je 0x10002653
jmp 0x10001593
mov eax, dword [ebp - 0xa8]
sub eax, 0xf5240f92
je 0x1000218b
jmp 0x100015a9
mov eax, dword [ebp - 0xa8]
sub eax, 0xf6011d4d
je 0x10001fac
jmp 0x100015bf
mov eax, dword [ebp - 0xa8]
sub eax, 0xf6dc04ae
je 0x1000195f
jmp 0x100015d5
mov eax, dword [ebp - 0xa8]
sub eax, 0xfbe23e44
je 0x1000201a
jmp 0x100015eb
mov eax, dword [ebp - 0xa8]
sub eax, 0x19e4257
je 0x10002283
jmp 0x10001601
mov eax, dword [ebp - 0xa8]
sub eax, 0x6daecc1
je 0x10002217
jmp 0x10001617
mov eax, dword [ebp - 0xa8]
sub eax, 0x143215cb
je 0x10001f4c
jmp 0x1000162d
mov eax, dword [ebp - 0xa8]
sub eax, 0x1be19e6d
je 0x100028b9
jmp 0x10001643
mov eax, dword [ebp - 0xa8]
sub eax, 0x1c5164b7
je 0x10002043
jmp 0x10001659
mov eax, dword [ebp - 0xa8]
sub eax, 0x1ec8fdf1
je 0x10001cb7
jmp 0x1000166f
mov eax, dword [ebp - 0xa8]
sub eax, 0x1ed442d5
je 0x10001b94
jmp 0x10001685
mov eax, dword [ebp - 0xa8]
sub eax, 0x21f1dae5
je 0x100029e2
jmp 0x1000169b
mov eax, dword [ebp - 0xa8]
sub eax, 0x25482be3
je 0x10001db2
jmp 0x100016b1
mov eax, dword [ebp - 0xa8]
sub eax, 0x2c34ebed
je 0x10002859
jmp 0x100016c7
mov eax, dword [ebp - 0xa8]
sub eax, 0x2e88394f
je 0x10001e61
jmp 0x100016dd
mov eax, dword [ebp - 0xa8]
sub eax, 0x2eb30aa3
je 0x100025ce
jmp 0x100016f3
mov eax, dword [ebp - 0xa8]
sub eax, 0x37ae509f
je 0x100026cc
jmp 0x10001709
mov eax, dword [ebp - 0xa8]
sub eax, 0x3808f35d
je 0x100029b5
jmp 0x1000171f
mov eax, dword [ebp - 0xa8]
sub eax, 0x38204130
je 0x100029a6
jmp 0x10001735
mov eax, dword [ebp - 0xa8]
sub eax, 0x4255ba82
je 0x10001dcc
jmp 0x1000174b
mov eax, dword [ebp - 0xa8]
sub eax, 0x45ff9449
je 0x10002a42
jmp 0x10001761
mov eax, dword [ebp - 0xa8]
sub eax, 0x46cc28de
je 0x100029d3
jmp 0x10001777
mov eax, dword [ebp - 0xa8]
sub eax, 0x4e138cdd
je 0x100026b3
jmp 0x1000178d
mov eax, dword [ebp - 0xa8]
sub eax, 0x5c9868f2
je 0x10001abd
jmp 0x100017a3
mov eax, dword [ebp - 0xa8]
sub eax, 0x5f6f5b8f
je 0x100027f9
jmp 0x100017b9
mov eax, dword [ebp - 0xa8]
sub eax, 0x6cfb3f64
je 0x10002a54
jmp 0x100017cf
mov eax, dword [ebp - 0xa8]
sub eax, 0x6f02d507
je 0x10001c19
push eax
sub esp, 0x100
mov eax, esp
mov dword [ebp - 0x8c], eax
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
mov dword [ebp - 0xa0], 0xcda881ca
jmp 0x10002aab
mov eax, dword [ebp - 0xa4]
push eax
mov ecx, esp
mov dword [ebp - 0x74], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x70], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x90], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x1c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000c2d0
add esp, 0xc
mov eax, dword [ebp - 0x90]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x98], eax
mov eax, 0x833fbbc2
mov ecx, 0xf6dc04ae
cmp dword [ebp - 0x98], 0
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov dword [ebp - 0xa0], 0x1be19e6d
jmp 0x10002aab
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x86d27dfc
mov ecx, 0x7d32f256
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov ecx, dword [0x1006c340]
mov eax, dword [0x1006c33c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xda7b6e88
mov ecx, 0x5c9868f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x98]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
mov edx, eax
sub edx, 0x4eea713
sub edx, 1
add edx, 0x4eea713
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xda7b6e88
mov ecx, 0x1ed442d5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov dword [ebp - 0xa0], 0xda4509ac
jmp 0x10002aab
mov ecx, dword [0x1006c340]
mov eax, dword [0x1006c33c]
mov edx, ecx
sub edx, 0x99fda9d6
sub edx, 1
add edx, 0x99fda9d6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x744b9f8d
mov ecx, 0x6f02d507
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov ecx, dword [0x1006c340]
mov eax, dword [0x1006c33c]
mov edx, ecx
add edx, 0xd090a4f9
sub edx, 1
sub edx, 0xd090a4f9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x38204130
mov ecx, 0xe20ece95
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov ecx, dword [0x1006c340]
mov eax, dword [0x1006c33c]
mov edx, ecx
sub edx, 0x485015d2
sub edx, 1
add edx, 0x485015d2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x38204130
mov ecx, 0x856eb0ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov dword [ebp - 0xa0], 0x1be19e6d
jmp 0x10002aab
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xa0], 0x4255ba82
jmp 0x10002aab
mov eax, dword [ebp - 0x5c]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0xa0], 0xa3d5a026
jmp 0x10002aab
mov edx, dword [ebp - 0x58]
mov eax, 0x9fdf72a0
mov ecx, 0x90ce2fab
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xa0], 0x2e88394f
jmp 0x10002aab
mov ecx, dword [0x1006c340]
mov eax, dword [0x1006c33c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3808f35d
mov ecx, 0xdf4a6635
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov eax, dword [ebp - 0x54]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x1006c340]
mov eax, dword [0x1006c33c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3808f35d
mov ecx, 0x143215cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov dword [ebp - 0xa0], 0x8b803185
jmp 0x10002aab
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
mov edx, eax
sub edx, 0x6a261dcc
sub edx, 1
add edx, 0x6a261dcc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x46cc28de
mov ecx, 0xf6011d4d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov ecx, dword [0x1006c340]
mov eax, dword [0x1006c33c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x46cc28de
mov ecx, 0xfbe23e44
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov dword [ebp - 0xa0], 0x1be19e6d
jmp 0x10002aab
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xa0], 0x1c5164b7
jmp 0x10002aab
mov eax, dword [ebp - 0x50]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0xa0], 0x78f70277
jmp 0x10002aab
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
add ecx, 0x7548a47e
add ecx, eax
sub ecx, 0x7548a47e
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov word [eax], 0
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
mov edx, eax
add edx, 0xfa139c47
sub edx, 1
sub edx, 0xfa139c47
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x21f1dae5
mov ecx, 0xdbccf6bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov dword [ebp - 0xa0], 0x955f27b2
jmp 0x10002aab
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0xa0], 0xf5240f92
jmp 0x10002aab
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xa0], 0xc815304f
jmp 0x10002aab
mov edx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
mov eax, 0xc92730ed
mov ecx, 0xea42d479
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
mov edx, eax
sub edx, 0xf99043fe
sub edx, 1
add edx, 0xf99043fe
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x72162d65
mov ecx, 0x6daecc1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x72162d65
mov ecx, 0x19e4257
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov dword [ebp - 0xa0], 0xa4f2efa8
jmp 0x10002aab
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
imul eax, eax, 0x28
sub ecx, 0x157b25b6
add ecx, eax
add ecx, 0x157b25b6
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100183b0
call fcn.1000e640
add esp, 8
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xa0], 0x86fa6eef
jmp 0x10002aab
mov ecx, dword [0x1006c340]
mov eax, dword [0x1006c33c]
mov edx, ecx
sub edx, 0x4bd75c61
sub edx, 1
add edx, 0x4bd75c61
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x45ff9449
mov ecx, 0xdbb422c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov eax, dword [ebp - 0x38]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x31], al
mov ecx, dword [0x1006c340]
mov eax, dword [0x1006c33c]
mov edx, ecx
sub edx, 0xbcea18a5
sub edx, 1
add edx, 0xbcea18a5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x45ff9449
mov ecx, 0x921ee5e4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov dl, byte [ebp - 0x31]
mov eax, 0xeb896d1d
mov ecx, 0x7b2430e5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x7612a326
add edx, eax
sub edx, 0x7612a326
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
sub eax, 0x9b9676a6
add eax, ecx
add eax, 0x9b9676a6
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
sub eax, 0xceabdbbf
add eax, ecx
add eax, 0xceabdbbf
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xa0], 0xc383d3a6
jmp 0x10002aab
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000c430
add esp, 0xc
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
xor esi, esi
sub esi, edi
add eax, esi
xor esi, esi
sub esi, eax
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xa0], 0xdb39cc34
jmp 0x10002aab
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
mov edx, eax
add edx, 0x699ab01d
sub edx, 1
sub edx, 0x699ab01d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6cfb3f64
mov ecx, 0xc4e36660
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov eax, dword [ebp - 0x28]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
mov edx, eax
add edx, 0xc9dfc9aa
sub edx, 1
sub edx, 0xc9dfc9aa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6cfb3f64
mov ecx, 0x2eb30aa3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov dword [ebp - 0xa0], 0x7b2430e5
jmp 0x10002aab
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
mov edx, eax
add edx, 0xf571b0da
sub edx, 1
sub edx, 0xf571b0da
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8bdb2b16
mov ecx, 0xb6f6fb2a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov dword [ebp - 0xa0], 0x4e138cdd
jmp 0x10002aab
mov eax, dword [ebp - 0x74]
mov ax, word [eax]
mov word [ebp - 0x24], ax
mov dword [ebp - 0xa0], 0x37ae509f
jmp 0x10002aab
mov ax, word [ebp - 0x24]
sub ax, 0xbcda
add ax, 1
add ax, 0xbcda
mov word [ebp - 0x22], ax
mov dword [ebp - 0xa0], 0xe1339133
jmp 0x10002aab
mov eax, dword [ebp - 0x74]
mov cx, word [ebp - 0x22]
mov word [eax], cx
mov dword [ebp - 0xa0], 0x955f27b2
jmp 0x10002aab
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xa0], 0xc7839d52
jmp 0x10002aab
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
mov edx, eax
add edx, 0x46cec8c2
sub edx, 1
sub edx, 0x46cec8c2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xda64aeb8
mov ecx, 0xc026f1de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
mov edx, eax
add edx, 0xa3a6fdf1
sub edx, 1
sub edx, 0xa3a6fdf1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xda64aeb8
mov ecx, 0x5f6f5b8f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov dword [ebp - 0xa0], 0xcc8ee4a5
jmp 0x10002aab
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
mov edx, eax
add edx, 0xd846a380
sub edx, 1
sub edx, 0xd846a380
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xae231621
mov ecx, 0x2c34ebed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov eax, dword [0x1006c340]
mov ecx, dword [0x1006c33c]
mov edx, eax
add edx, 0xcf10e39f
sub edx, 1
sub edx, 0xcf10e39f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xae231621
mov ecx, 0xd46179b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10002aab
mov dword [ebp - 0xa0], 0x1be19e6d
jmp 0x10002aab
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000b6c0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
lea eax, [ebp - 0x1c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov dword [ebp - 0xa0], 0x7d32f256
jmp 0x10002aab
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x98]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xa0], 0x5c9868f2
jmp 0x10002aab
mov dword [ebp - 0xa0], 0xe20ece95
jmp 0x10002aab
mov eax, dword [ebp - 0x54]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xdf4a6635
jmp 0x10002aab
mov dword [ebp - 0xa0], 0xf6011d4d
jmp 0x10002aab
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
sub ecx, 0x6b9e19f3
add ecx, eax
add ecx, 0x6b9e19f3
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov word [eax], 0
mov dword [ebp - 0xa0], 0xb8328d3a
jmp 0x10002aab
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xa0], 0xdbb422c4
jmp 0x10002aab
mov eax, dword [ebp - 0x28]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov dword [ebp - 0xa0], 0xc4e36660
jmp 0x10002aab
mov dword [ebp - 0xa0], 0xf333f307
jmp 0x10002aab
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xc026f1de
jmp 0x10002aab
mov dword [ebp - 0xa0], 0x2c34ebed
jmp 0x10001249