Function at 0x10007dc0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1ac
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1b0], eax
mov eax, dword [0x1008fa80]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1ac], 0x4feff290
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b4], eax
sub eax, 0x84637d6a
je 0x100084c2
jmp 0x10007e04
mov eax, dword [ebp - 0x1b4]
sub eax, 0x8ce4afca
je 0x10008650
jmp 0x10007e1a
mov eax, dword [ebp - 0x1b4]
sub eax, 0x923af0b9
je 0x10008562
jmp 0x10007e30
mov eax, dword [ebp - 0x1b4]
sub eax, 0x956d192a
je 0x10008bb7
jmp 0x10007e46
mov eax, dword [ebp - 0x1b4]
sub eax, 0x998ddf56
je 0x10008a5f
jmp 0x10007e5c
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa1316d8a
je 0x10008620
jmp 0x10007e72
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa537384a
je 0x10008553
jmp 0x10007e88
mov eax, dword [ebp - 0x1b4]
sub eax, 0xb41d4863
je 0x100086b9
jmp 0x10007e9e
mov eax, dword [ebp - 0x1b4]
sub eax, 0xb74aebb0
je 0x100086d6
jmp 0x10007eb4
mov eax, dword [ebp - 0x1b4]
sub eax, 0xbb1516f8
je 0x10008bec
jmp 0x10007eca
mov eax, dword [ebp - 0x1b4]
sub eax, 0xc8981bd2
je 0x100087e2
jmp 0x10007ee0
mov eax, dword [ebp - 0x1b4]
sub eax, 0xcd85ebc4
je 0x1000886f
jmp 0x10007ef6
mov eax, dword [ebp - 0x1b4]
sub eax, 0xd0b77e2b
je 0x100085e4
jmp 0x10007f0c
mov eax, dword [ebp - 0x1b4]
sub eax, 0xd23c7c16
je 0x100083b5
jmp 0x10007f22
mov eax, dword [ebp - 0x1b4]
sub eax, 0xd489b0d1
je 0x10008744
jmp 0x10007f38
mov eax, dword [ebp - 0x1b4]
sub eax, 0xe044aa2f
je 0x10008641
jmp 0x10007f4e
mov eax, dword [ebp - 0x1b4]
sub eax, 0xe513bb81
je 0x10008b5b
jmp 0x10007f64
mov eax, dword [ebp - 0x1b4]
sub eax, 0xe88d41b8
je 0x100082ec
jmp 0x10007f7a
mov eax, dword [ebp - 0x1b4]
sub eax, 0xf2c0c510
je 0x10008c7b
jmp 0x10007f90
mov eax, dword [ebp - 0x1b4]
sub eax, 0xff4f4c7c
je 0x10008ccc
jmp 0x10007fa6
mov eax, dword [ebp - 0x1b4]
sub eax, 0x3d523e2
je 0x10008860
jmp 0x10007fbc
mov eax, dword [ebp - 0x1b4]
sub eax, 0x4f2676b
je 0x10008715
jmp 0x10007fd2
mov eax, dword [ebp - 0x1b4]
sub eax, 0x594bfa2
je 0x10008cfb
jmp 0x10007fe8
mov eax, dword [ebp - 0x1b4]
sub eax, 0x128bc48f
je 0x10008b3c
jmp 0x10007ffe
mov eax, dword [ebp - 0x1b4]
sub eax, 0x19515998
je 0x100082fb
jmp 0x10008014
mov eax, dword [ebp - 0x1b4]
sub eax, 0x1e830e51
je 0x1000898c
jmp 0x1000802a
mov eax, dword [ebp - 0x1b4]
sub eax, 0x20cc1456
je 0x10008b8d
jmp 0x10008040
mov eax, dword [ebp - 0x1b4]
sub eax, 0x29685101
je 0x100088c0
jmp 0x10008056
mov eax, dword [ebp - 0x1b4]
sub eax, 0x32e30b39
je 0x10008c0d
jmp 0x1000806c
mov eax, dword [ebp - 0x1b4]
sub eax, 0x35662a44
je 0x10008cdd
jmp 0x10008082
mov eax, dword [ebp - 0x1b4]
sub eax, 0x37d81566
je 0x10008911
jmp 0x10008098
mov eax, dword [ebp - 0x1b4]
sub eax, 0x384372d3
je 0x10008605
jmp 0x100080ae
mov eax, dword [ebp - 0x1b4]
sub eax, 0x3846a404
je 0x1000845f
jmp 0x100080c4
mov eax, dword [ebp - 0x1b4]
sub eax, 0x3e20697d
je 0x10008b2d
jmp 0x100080da
mov eax, dword [ebp - 0x1b4]
sub eax, 0x419c2308
je 0x10008289
jmp 0x100080f0
mov eax, dword [ebp - 0x1b4]
sub eax, 0x4a6b82cf
je 0x10008770
jmp 0x10008106
mov eax, dword [ebp - 0x1b4]
sub eax, 0x4a9524cb
je 0x10008d16
jmp 0x1000811c
mov eax, dword [ebp - 0x1b4]
sub eax, 0x4c1f94e9
je 0x10008d41
jmp 0x10008132
mov eax, dword [ebp - 0x1b4]
sub eax, 0x4feff290
je 0x10008213
jmp 0x10008148
mov eax, dword [ebp - 0x1b4]
sub eax, 0x543ff860
je 0x100089ad
jmp 0x1000815e
mov eax, dword [ebp - 0x1b4]
sub eax, 0x578be04c
je 0x1000846e
jmp 0x10008174
mov eax, dword [ebp - 0x1b4]
sub eax, 0x5c032ea2
je 0x100085b3
jmp 0x1000818a
mov eax, dword [ebp - 0x1b4]
sub eax, 0x5cc9df48
je 0x10008b9c
jmp 0x100081a0
mov eax, dword [ebp - 0x1b4]
sub eax, 0x5e4546e7
je 0x100083a6
jmp 0x100081b6
mov eax, dword [ebp - 0x1b4]
sub eax, 0x5f89b8a6
je 0x10008cec
jmp 0x100081cc
mov eax, dword [ebp - 0x1b4]
sub eax, 0x711b11e8
je 0x100083fe
jmp 0x100081e2
mov eax, dword [ebp - 0x1b4]
sub eax, 0x7194209f
je 0x10008add
jmp 0x100081f8
mov eax, dword [ebp - 0x1b4]
sub eax, 0x758d1ff9
je 0x10008791
jmp 0x1000820e
jmp 0x10008d4b
mov ecx, dword [0x10090f5c]
mov eax, dword [0x10090f58]
mov edx, ecx
sub edx, 0xbb221bac
sub edx, 1
add edx, 0xbb221bac
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x35662a44
mov ecx, 0x419c2308
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
push eax
mov eax, esp
mov dword [ebp - 0x194], eax
push eax
mov eax, esp
mov dword [ebp - 0x190], eax
mov eax, dword [0x10090f5c]
mov ecx, dword [0x10090f58]
mov edx, eax
sub edx, 0xc25d5686
sub edx, 1
add edx, 0xc25d5686
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x35662a44
mov ecx, 0xe88d41b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov dword [ebp - 0x1ac], 0x19515998
jmp 0x10008d4b
mov eax, dword [ebp - 0x1b0]
push eax
mov ecx, esp
mov dword [ebp - 0x18c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x188], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x184], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x180], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x17c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x198], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x19c], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.100232b0
add esp, 0xc
mov eax, dword [ebp - 0x198]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x1a0], eax
mov eax, 0x5e4546e7
mov ecx, 0xd23c7c16
cmp dword [ebp - 0x1a0], 0
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov dword [ebp - 0x1ac], 0x32e30b39
jmp 0x10008d4b
mov eax, dword [0x10090f5c]
mov ecx, dword [0x10090f58]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5f89b8a6
mov ecx, 0x711b11e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x170], eax
mov eax, dword [0x10090f5c]
mov ecx, dword [0x10090f58]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5f89b8a6
mov ecx, 0x3846a404
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov dword [ebp - 0x1ac], 0x578be04c
jmp 0x10008d4b
mov ecx, dword [ebp - 0x174]
mov edx, dword [ebp - 0x170]
lea eax, [ebp - 0x11c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1a4], eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x1ac], 0x84637d6a
jmp 0x10008d4b
mov ecx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x16c]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x110]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1a8], eax
mov edx, 0xffffffff
mov eax, 0x923af0b9
mov ecx, 0xa537384a
cmp dword [ebp - 0x1a8], edx
cmove eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov dword [ebp - 0x1ac], 0x32e30b39
jmp 0x10008d4b
mov eax, dword [ebp - 0x1a8]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x1ac], 0x5c032ea2
jmp 0x10008d4b
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x168]
mov dword [eax], ecx
mov eax, dword [ebp - 0x194]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x161], al
mov dword [ebp - 0x1ac], 0xd0b77e2b
jmp 0x10008d4b
mov dl, byte [ebp - 0x161]
mov eax, 0x384372d3
mov ecx, 0x8ce4afca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x1ac], 0xa1316d8a
jmp 0x10008d4b
mov eax, dword [ebp - 0x160]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1ac], 0xe044aa2f
jmp 0x10008d4b
mov dword [ebp - 0x1ac], 0x32e30b39
jmp 0x10008d4b
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x190]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x18c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x1ac], 0xb41d4863
jmp 0x10008d4b
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x1ac], 0xb74aebb0
jmp 0x10008d4b
mov eax, dword [ebp - 0x158]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x15c]
sub ecx, 0xe0db101a
add ecx, eax
add ecx, 0xe0db101a
mov eax, dword [ebp - 0x188]
mov dword [eax], ecx
mov eax, dword [ebp - 0x184]
mov word [eax], 0
mov dword [ebp - 0x1ac], 0x4f2676b
jmp 0x10008d4b
mov eax, dword [ebp - 0x184]
movzx eax, word [eax]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x1ac], 0xd489b0d1
jmp 0x10008d4b
mov eax, dword [ebp - 0x150]
movzx ecx, word [eax + 2]
mov eax, dword [ebp - 0x154]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x149], al
mov dword [ebp - 0x1ac], 0x4a6b82cf
jmp 0x10008d4b
mov dl, byte [ebp - 0x149]
mov eax, 0x5cc9df48
mov ecx, 0x758d1ff9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov eax, dword [0x10090f5c]
mov ecx, dword [0x10090f58]
mov edx, eax
sub edx, 0xb78c2746
sub edx, 1
add edx, 0xb78c2746
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x594bfa2
mov ecx, 0xc8981bd2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
add eax, 0x8ec80f82
add eax, 0x18
sub eax, 0x8ec80f82
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov dword [ebp - 0x144], eax
mov eax, dword [0x10090f5c]
mov ecx, dword [0x10090f58]
mov edx, eax
add edx, 0xb4099bba
sub edx, 1
sub edx, 0xb4099bba
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x594bfa2
mov ecx, 0x3d523e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov dword [ebp - 0x1ac], 0xcd85ebc4
jmp 0x10008d4b
mov ecx, dword [ebp - 0x148]
mov edx, dword [ebp - 0x144]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x184]
movzx eax, word [eax]
imul eax, eax, 0x28
sub ecx, 0xb0c50eb
add ecx, eax
add ecx, 0xb0c50eb
mov eax, dword [ebp - 0x180]
mov dword [eax], ecx
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x1ac], 0x29685101
jmp 0x10008d4b
mov eax, dword [0x10090f5c]
mov ecx, dword [0x10090f58]
mov edx, eax
add edx, 0x6f17eb05
sub edx, 1
sub edx, 0x6f17eb05
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4a9524cb
mov ecx, 0x37d81566
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov ecx, dword [ebp - 0x140]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100307ca
call fcn.10026c10
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x139], al
mov eax, dword [0x10090f5c]
mov ecx, dword [0x10090f58]
mov edx, eax
sub edx, 0x147855e
sub edx, 1
add edx, 0x147855e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4a9524cb
mov ecx, 0x1e830e51
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov dl, byte [ebp - 0x139]
mov eax, 0x543ff860
mov ecx, 0x3e20697d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov eax, dword [ebp - 0x17c]
mov dword [eax], 0
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
mov eax, dword [ebp - 0x17c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x178]
mov byte [eax], cl
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x180]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
sub eax, 0x50c8540
add eax, ecx
add eax, 0x50c8540
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x190]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x180]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x1ac], 0x998ddf56
jmp 0x10008d4b
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x134]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10023410
add esp, 0xc
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x180]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
add eax, 0xd7c1b0c9
add eax, ecx
sub eax, 0xd7c1b0c9
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x1ac], 0x7194209f
jmp 0x10008d4b
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x12c]
mov esi, dword [ebp - 0x128]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x178]
mov byte [eax], cl
mov dword [ebp - 0x1ac], 0x3e20697d
jmp 0x10008d4b
mov dword [ebp - 0x1ac], 0x128bc48f
jmp 0x10008d4b
mov eax, dword [ebp - 0x184]
mov ax, word [eax]
mov word [ebp - 0x122], ax
mov dword [ebp - 0x1ac], 0xe513bb81
jmp 0x10008d4b
mov cx, word [ebp - 0x122]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x184]
mov word [eax], cx
mov dword [ebp - 0x1ac], 0x20cc1456
jmp 0x10008d4b
mov dword [ebp - 0x1ac], 0x4f2676b
jmp 0x10008d4b
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x1ac], 0x956d192a
jmp 0x10008d4b
mov eax, dword [ebp - 0x120]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1ac], 0xbb1516f8
jmp 0x10008d4b
mov eax, dword [ebp - 0x19c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1ac], 0x32e30b39
jmp 0x10008d4b
mov ecx, dword [0x10090f5c]
mov eax, dword [0x10090f58]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4c1f94e9
mov ecx, 0xf2c0c510
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov eax, dword [0x10090f5c]
mov ecx, dword [0x10090f58]
mov edx, eax
add edx, 0x61da46c6
sub edx, 1
sub edx, 0x61da46c6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4c1f94e9
mov ecx, 0xff4f4c7c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1ac], eax
jmp 0x10008d4b
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10022510
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x1ac], 0x419c2308
jmp 0x10008d4b
mov dword [ebp - 0x1ac], 0x711b11e8
jmp 0x10008d4b
mov eax, dword [ebp - 0x188]
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x1ac], 0xc8981bd2
jmp 0x10008d4b
mov ecx, dword [ebp - 0x140]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100307ca
call fcn.10026c10
add esp, 8
mov dword [ebp - 0x1ac], 0x37d81566
jmp 0x10008d4b
mov dword [ebp - 0x1ac], 0xf2c0c510
jmp 0x10007de8