Function at 0x10001440
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1a8
mov eax, dword [ebp + 8]
mov dword [ebp - 0x190], eax
mov eax, dword [0x1006be00]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x18c], 0x4bb693b0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x194], eax
sub eax, 0x8788dbfd
je 0x10001db5
jmp 0x10001484
mov eax, dword [ebp - 0x194]
sub eax, 0x8d6fbdf4
je 0x10002688
jmp 0x1000149a
mov eax, dword [ebp - 0x194]
sub eax, 0x92b0fc96
je 0x10001c5c
jmp 0x100014b0
mov eax, dword [ebp - 0x194]
sub eax, 0x93a1f67d
je 0x10002a0c
jmp 0x100014c6
mov eax, dword [ebp - 0x194]
sub eax, 0x943dc447
je 0x10002586
jmp 0x100014dc
mov eax, dword [ebp - 0x194]
sub eax, 0xa02bd37a
je 0x100027ea
jmp 0x100014f2
mov eax, dword [ebp - 0x194]
sub eax, 0xace67176
je 0x10001d96
jmp 0x10001508
mov eax, dword [ebp - 0x194]
sub eax, 0xb128875c
je 0x10002a30
jmp 0x1000151e
mov eax, dword [ebp - 0x194]
sub eax, 0xb4e2b72c
je 0x10002787
jmp 0x10001534
mov eax, dword [ebp - 0x194]
sub eax, 0xb97d4242
je 0x100022c6
jmp 0x1000154a
mov eax, dword [ebp - 0x194]
sub eax, 0xbdb24d3d
je 0x10002969
jmp 0x10001560
mov eax, dword [ebp - 0x194]
sub eax, 0xc5b2e636
je 0x100029ca
jmp 0x10001576
mov eax, dword [ebp - 0x194]
sub eax, 0xcdefbb63
je 0x10001fba
jmp 0x1000158c
mov eax, dword [ebp - 0x194]
sub eax, 0xcfd02fb3
je 0x100022e7
jmp 0x100015a2
mov eax, dword [ebp - 0x194]
sub eax, 0xd1287f82
je 0x100029ac
jmp 0x100015b8
mov eax, dword [ebp - 0x194]
sub eax, 0xd3c9d32d
je 0x10001fc9
jmp 0x100015ce
mov eax, dword [ebp - 0x194]
sub eax, 0xd63312b8
je 0x100026b4
jmp 0x100015e4
mov eax, dword [ebp - 0x194]
sub eax, 0xdb7e31fe
je 0x10001f32
jmp 0x100015fa
mov eax, dword [ebp - 0x194]
sub eax, 0xdd419c6f
je 0x100027b7
jmp 0x10001610
mov eax, dword [ebp - 0x194]
sub eax, 0xdfc6bd90
je 0x100020e2
jmp 0x10001626
mov eax, dword [ebp - 0x194]
sub eax, 0xee3bacce
je 0x10001fd8
jmp 0x1000163c
mov eax, dword [ebp - 0x194]
sub eax, 0xf1270327
je 0x10001b4b
jmp 0x10001652
mov eax, dword [ebp - 0x194]
sub eax, 0xf2213391
je 0x10001e2b
jmp 0x10001668
mov eax, dword [ebp - 0x194]
sub eax, 0xf454285a
je 0x10001c6b
jmp 0x1000167e
mov eax, dword [ebp - 0x194]
sub eax, 0xf48e72
je 0x10002939
jmp 0x10001694
mov eax, dword [ebp - 0x194]
sub eax, 0x56268c1
je 0x1000222c
jmp 0x100016aa
mov eax, dword [ebp - 0x194]
sub eax, 0x837a623
je 0x10001b5a
jmp 0x100016c0
mov eax, dword [ebp - 0x194]
sub eax, 0xa50076d
je 0x10002446
jmp 0x100016d6
mov eax, dword [ebp - 0x194]
sub eax, 0xf506319
je 0x10002355
jmp 0x100016ec
mov eax, dword [ebp - 0x194]
sub eax, 0x11746b5a
je 0x10002796
jmp 0x10001702
mov eax, dword [ebp - 0x194]
sub eax, 0x13ccbc28
je 0x10001bd2
jmp 0x10001718
mov eax, dword [ebp - 0x194]
sub eax, 0x18d7da0f
je 0x10001d32
jmp 0x1000172e
mov eax, dword [ebp - 0x194]
sub eax, 0x1a46e2d1
je 0x10002563
jmp 0x10001744
mov eax, dword [ebp - 0x194]
sub eax, 0x1cc4b11f
je 0x10002275
jmp 0x1000175a
mov eax, dword [ebp - 0x194]
sub eax, 0x1f38fa7e
je 0x10001c37
jmp 0x10001770
mov eax, dword [ebp - 0x194]
sub eax, 0x214b4574
je 0x100021f1
jmp 0x10001786
mov eax, dword [ebp - 0x194]
sub eax, 0x2150b7ac
je 0x10002029
jmp 0x1000179c
mov eax, dword [ebp - 0x194]
sub eax, 0x2664b2d1
je 0x100028b1
jmp 0x100017b2
mov eax, dword [ebp - 0x194]
sub eax, 0x280eb0b7
je 0x100024c8
jmp 0x100017c8
mov eax, dword [ebp - 0x194]
sub eax, 0x2db80d7e
je 0x10002595
jmp 0x100017de
mov eax, dword [ebp - 0x194]
sub eax, 0x37c95b34
je 0x10001b11
jmp 0x100017f4
mov eax, dword [ebp - 0x194]
sub eax, 0x3e0996ce
je 0x10002948
jmp 0x1000180a
mov eax, dword [ebp - 0x194]
sub eax, 0x3fe6778f
je 0x100020bb
jmp 0x10001820
mov eax, dword [ebp - 0x194]
sub eax, 0x41dd5783
je 0x100029bb
jmp 0x10001836
mov eax, dword [ebp - 0x194]
sub eax, 0x4bb693b0
je 0x10001a1f
jmp 0x1000184c
mov eax, dword [ebp - 0x194]
sub eax, 0x4e0dba58
je 0x100023eb
jmp 0x10001862
mov eax, dword [ebp - 0x194]
sub eax, 0x4e536c0f
je 0x1000283b
jmp 0x10001878
mov eax, dword [ebp - 0x194]
sub eax, 0x52001b26
je 0x1000211d
jmp 0x1000188e
mov eax, dword [ebp - 0x194]
sub eax, 0x5286413c
je 0x10002425
jmp 0x100018a4
mov eax, dword [ebp - 0x194]
sub eax, 0x57580726
je 0x10002200
jmp 0x100018ba
mov eax, dword [ebp - 0x194]
sub eax, 0x578cf153
je 0x1000216e
jmp 0x100018d0
mov eax, dword [ebp - 0x194]
sub eax, 0x57bffa85
je 0x10001a70
jmp 0x100018e6
mov eax, dword [ebp - 0x194]
sub eax, 0x58164156
je 0x100028c5
jmp 0x100018fc
mov eax, dword [ebp - 0x194]
sub eax, 0x5d4754c1
je 0x10001cbc
jmp 0x10001912
mov eax, dword [ebp - 0x194]
sub eax, 0x5e96084e
je 0x100020ac
jmp 0x10001928
mov eax, dword [ebp - 0x194]
sub eax, 0x60bc37df
je 0x10001b20
jmp 0x1000193e
mov eax, dword [ebp - 0x194]
sub eax, 0x622d1154
je 0x10002705
jmp 0x10001954
mov eax, dword [ebp - 0x194]
sub eax, 0x62cf2638
je 0x10001ebc
jmp 0x1000196a
mov eax, dword [ebp - 0x194]
sub eax, 0x66825adf
je 0x10002a3f
jmp 0x10001980
mov eax, dword [ebp - 0x194]
sub eax, 0x6859b3e8
je 0x10002628
jmp 0x10001996
mov eax, dword [ebp - 0x194]
sub eax, 0x69603cb8
je 0x10001ead
jmp 0x100019ac
mov eax, dword [ebp - 0x194]
sub eax, 0x6ccaf109
je 0x10001d87
jmp 0x100019c2
mov eax, dword [ebp - 0x194]
sub eax, 0x731b1198
je 0x100023fa
jmp 0x100019d8
mov eax, dword [ebp - 0x194]
sub eax, 0x74a6f036
je 0x1000291e
jmp 0x100019ee
mov eax, dword [ebp - 0x194]
sub eax, 0x78ff4983
je 0x100025b2
mov eax, dword [0x1006d150]
mov ecx, dword [0x1006d14c]
mov edx, eax
sub edx, 0xda16da17
sub edx, 1
add edx, 0xda16da17
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x58164156
mov ecx, 0x57bffa85
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x15c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10008370
mov eax, dword [ebp - 0x15c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x158], eax
mov eax, dword [0x1006d150]
mov ecx, dword [0x1006d14c]
mov edx, eax
sub edx, 0xa984c5d3
sub edx, 1
add edx, 0xa984c5d3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x58164156
mov ecx, 0x37c95b34
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dword [ebp - 0x18c], 0x60bc37df
jmp 0x10002a49
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x164], eax
mov eax, 0xf1270327
mov ecx, 0x837a623
cmp dword [ebp - 0x164], 0
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dword [ebp - 0x18c], 0xa02bd37a
jmp 0x10002a49
mov ecx, dword [ebp - 0x164]
mov edx, dword [ebp - 0x160]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x164]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x18c], 0x13ccbc28
jmp 0x10002a49
mov eax, dword [ebp - 0x154]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x18c], 0x1f38fa7e
jmp 0x10002a49
mov edx, dword [ebp - 0x150]
mov esi, 0xffffffff
mov eax, 0xf454285a
mov ecx, 0x92b0fc96
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dword [ebp - 0x18c], 0xa02bd37a
jmp 0x10002a49
mov eax, dword [ebp - 0x16c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x18c], 0x5d4754c1
jmp 0x10002a49
mov ecx, dword [0x1006d150]
mov eax, dword [0x1006d14c]
mov edx, ecx
add edx, 0x18bec1ca
sub edx, 1
sub edx, 0x18bec1ca
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x74a6f036
mov ecx, 0x18d7da0f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x170], eax
mov eax, dword [0x1006d150]
mov ecx, dword [0x1006d14c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x74a6f036
mov ecx, 0x6ccaf109
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dword [ebp - 0x18c], 0xace67176
jmp 0x10002a49
mov eax, 0x8788dbfd
mov ecx, 0xee3bacce
cmp dword [ebp - 0x170], 0
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov ecx, dword [0x1006d150]
mov eax, dword [0x1006d14c]
mov edx, ecx
sub edx, 0xe7652c8a
sub edx, 1
add edx, 0xe7652c8a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf48e72
mov ecx, 0xf2213391
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x148], eax
mov ecx, dword [0x1006d150]
mov eax, dword [0x1006d14c]
mov edx, ecx
add edx, 0x3af5d3d5
sub edx, 1
sub edx, 0x3af5d3d5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf48e72
mov ecx, 0x69603cb8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dword [ebp - 0x18c], 0x62cf2638
jmp 0x10002a49
mov ecx, dword [0x1006d150]
mov eax, dword [0x1006d14c]
mov edx, ecx
sub edx, 0x88e91315
sub edx, 1
add edx, 0x88e91315
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3e0996ce
mov ecx, 0xdb7e31fe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov eax, dword [ebp - 0x148]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov ecx, dword [0x1006d150]
mov eax, dword [0x1006d14c]
mov edx, ecx
sub edx, 0x87eb4a0e
sub edx, 1
add edx, 0x87eb4a0e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3e0996ce
mov ecx, 0xcdefbb63
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dword [ebp - 0x18c], 0xd3c9d32d
jmp 0x10002a49
mov dword [ebp - 0x18c], 0xa02bd37a
jmp 0x10002a49
mov eax, dword [0x1006d150]
mov ecx, dword [0x1006d14c]
mov edx, eax
sub edx, 0x92f71725
sub edx, 1
add edx, 0x92f71725
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbdb24d3d
mov ecx, 0x2150b7ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov eax, dword [ebp - 0x170]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x144], eax
mov eax, dword [0x1006d150]
mov ecx, dword [0x1006d14c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbdb24d3d
mov ecx, 0x5e96084e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dword [ebp - 0x18c], 0x3fe6778f
jmp 0x10002a49
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x18c], 0xdfc6bd90
jmp 0x10002a49
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x178]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x17c], eax
mov word [ebp - 0x17e], 0
mov dword [ebp - 0x18c], 0x52001b26
jmp 0x10002a49
mov eax, dword [0x1006d150]
mov ecx, dword [0x1006d14c]
mov edx, eax
add edx, 0x4612070
sub edx, 1
sub edx, 0x4612070
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd1287f82
mov ecx, 0x578cf153
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
movzx eax, word [ebp - 0x17e]
mov dword [ebp - 0x140], eax
mov ecx, dword [0x1006d150]
mov eax, dword [0x1006d14c]
mov edx, ecx
add edx, 0xbfb4c927
sub edx, 1
sub edx, 0xbfb4c927
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd1287f82
mov ecx, 0x214b4574
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dword [ebp - 0x18c], 0x57580726
jmp 0x10002a49
mov eax, dword [ebp - 0x17c]
movzx ecx, word [eax + 6]
mov eax, dword [ebp - 0x140]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x139], al
mov dword [ebp - 0x18c], 0x56268c1
jmp 0x10002a49
mov eax, dword [0x1006d150]
mov ecx, dword [0x1006d14c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x41dd5783
mov ecx, 0x1cc4b11f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov eax, dword [0x1006d150]
mov ecx, dword [0x1006d14c]
mov edx, eax
add edx, 0x3611ddd4
sub edx, 1
sub edx, 0x3611ddd4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x41dd5783
mov ecx, 0xb97d4242
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dl, byte [ebp - 0x139]
mov eax, 0xd63312b8
mov ecx, 0xcfd02fb3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov ecx, dword [0x1006d150]
mov eax, dword [0x1006d14c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc5b2e636
mov ecx, 0xf506319
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0x17c]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
movzx ecx, word [ebp - 0x17e]
imul ecx, ecx, 0x28
sub eax, 0x3b73d570
add eax, ecx
add eax, 0x3b73d570
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x138], eax
mov eax, dword [0x1006d150]
mov ecx, dword [0x1006d14c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc5b2e636
mov ecx, 0x4e0dba58
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dword [ebp - 0x18c], 0x731b1198
jmp 0x10002a49
mov ecx, dword [ebp - 0x138]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100141a0
call fcn.1000a6e0
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x18c], 0x5286413c
jmp 0x10002a49
mov edx, dword [ebp - 0x134]
mov eax, 0xa50076d
mov ecx, 0x943dc447
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x184]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x184]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x185], al
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x184]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x18c], 0x280eb0b7
jmp 0x10002a49
mov edx, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x184]
mov eax, dword [eax + 0xc]
add ecx, 0xe6e8787f
add ecx, eax
sub ecx, 0xe6e8787f
mov eax, dword [ebp - 0x184]
mov eax, dword [eax + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.100084d0
mov ecx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x184]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x168]
mov eax, dword [ebp - 0x184]
mov eax, dword [eax + 0xc]
sub esi, 0x689f4bad
add esi, eax
add esi, 0x689f4bad
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x18c], 0x1a46e2d1
jmp 0x10002a49
mov eax, dword [ebp - 0x12c]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x185], al
mov dword [ebp - 0x18c], 0x943dc447
jmp 0x10002a49
mov dword [ebp - 0x18c], 0x2db80d7e
jmp 0x10002a49
mov ax, word [ebp - 0x17e]
mov word [ebp - 0x128], ax
mov dword [ebp - 0x18c], 0x78ff4983
jmp 0x10002a49
mov ax, word [ebp - 0x128]
xor ecx, ecx
sub cx, 1
sub ax, cx
mov word [ebp - 0x126], ax
mov eax, dword [0x1006d150]
mov ecx, dword [0x1006d14c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x93a1f67d
mov ecx, 0x8d6fbdf4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dword [ebp - 0x18c], 0x7dd715e5
jmp 0x10002a49
mov eax, dword [0x1006d150]
mov ecx, dword [0x1006d14c]
mov edx, eax
add edx, 0xf01101e6
sub edx, 1
sub edx, 0xf01101e6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb128875c
mov ecx, 0x622d1154
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x124], eax
mov ecx, dword [0x1006d150]
mov eax, dword [0x1006d14c]
mov edx, ecx
sub edx, 0x26c35be9
sub edx, 1
add edx, 0x26c35be9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb128875c
mov ecx, 0xb4e2b72c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov dword [ebp - 0x18c], 0x11746b5a
jmp 0x10002a49
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x18c], 0xdd419c6f
jmp 0x10002a49
mov eax, dword [ebp - 0x170]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x160]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x18c], 0xa02bd37a
jmp 0x10002a49
mov eax, dword [0x1006d150]
mov ecx, dword [0x1006d14c]
mov edx, eax
add edx, 0xbda95990
sub edx, 1
sub edx, 0xbda95990
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x66825adf
mov ecx, 0x4e536c0f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov ecx, dword [0x1006d150]
mov eax, dword [0x1006d14c]
mov edx, ecx
sub edx, 0xdb2b545b
sub edx, 1
add edx, 0xdb2b545b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x66825adf
mov ecx, 0x2664b2d1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10002a49
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10007750
add esp, 0x1a8
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x15c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10008370
mov eax, dword [ebp - 0x15c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x18c], 0x57bffa85
jmp 0x10002a49
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x18c], 0x18d7da0f
jmp 0x10002a49
mov dword [ebp - 0x18c], 0xf2213391
jmp 0x10002a49
mov eax, dword [ebp - 0x148]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x18c], 0xdb7e31fe
jmp 0x10002a49
mov eax, dword [ebp - 0x170]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x18c], 0x2150b7ac
jmp 0x10002a49
mov dword [ebp - 0x18c], 0x578cf153
jmp 0x10002a49
mov dword [ebp - 0x18c], 0x1cc4b11f
jmp 0x10002a49
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
sub ecx, 0x18
sub eax, ecx
mov ecx, dword [ebp - 0x17c]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
movzx ecx, word [ebp - 0x17e]
imul edx, ecx, 0x28
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 0xf506319
jmp 0x10002a49
mov ax, word [ebp - 0x128]
mov ax, word [ebp - 0x128]
mov ax, word [ebp - 0x128]
mov dword [ebp - 0x18c], 0x6859b3e8
jmp 0x10002a49
mov dword [ebp - 0x18c], 0x622d1154
jmp 0x10002a49
mov dword [ebp - 0x18c], 0x4e536c0f
jmp 0x10001468