Function at 0x100010b0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1ac
mov eax, dword [ebp + 8]
mov eax, dword [0x1006c800]
xor eax, ebp
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000fcf0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x194], 0x7b8024d3
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x198], eax
sub eax, 0x87e79607
je 0x100023a7
jmp 0x1000112f
mov eax, dword [ebp - 0x198]
sub eax, 0x888be5d3
je 0x10002128
jmp 0x10001145
mov eax, dword [ebp - 0x198]
sub eax, 0x8898d006
je 0x10001c41
jmp 0x1000115b
mov eax, dword [ebp - 0x198]
sub eax, 0x8f3b0db7
je 0x10002062
jmp 0x10001171
mov eax, dword [ebp - 0x198]
sub eax, 0x90264a0f
je 0x10001900
jmp 0x10001187
mov eax, dword [ebp - 0x198]
sub eax, 0x980e960b
je 0x10002300
jmp 0x1000119d
mov eax, dword [ebp - 0x198]
sub eax, 0xa196531b
je 0x10002323
jmp 0x100011b3
mov eax, dword [ebp - 0x198]
sub eax, 0xa71848a7
je 0x100016b4
jmp 0x100011c9
mov eax, dword [ebp - 0x198]
sub eax, 0xa7d70555
je 0x10001a21
jmp 0x100011df
mov eax, dword [ebp - 0x198]
sub eax, 0xacf64aee
je 0x10001aba
jmp 0x100011f5
mov eax, dword [ebp - 0x198]
sub eax, 0xb40ac4b8
je 0x100022af
jmp 0x1000120b
mov eax, dword [ebp - 0x198]
sub eax, 0xc39e2598
je 0x10002338
jmp 0x10001221
mov eax, dword [ebp - 0x198]
sub eax, 0xc3cd68c7
je 0x10001e5b
jmp 0x10001237
mov eax, dword [ebp - 0x198]
sub eax, 0xc553ff3b
je 0x100023b6
jmp 0x1000124d
mov eax, dword [ebp - 0x198]
sub eax, 0xd0dcaa4c
je 0x10001b7d
jmp 0x10001263
mov eax, dword [ebp - 0x198]
sub eax, 0xd2a2f7b8
je 0x10002119
jmp 0x10001279
mov eax, dword [ebp - 0x198]
sub eax, 0xd4abd3db
je 0x1000194b
jmp 0x1000128f
mov eax, dword [ebp - 0x198]
sub eax, 0xd9f4fce8
je 0x100021d9
jmp 0x100012a5
mov eax, dword [ebp - 0x198]
sub eax, 0xdc232502
je 0x10002356
jmp 0x100012bb
mov eax, dword [ebp - 0x198]
sub eax, 0xdced15ce
je 0x100017f3
jmp 0x100012d1
mov eax, dword [ebp - 0x198]
sub eax, 0xdea93fa6
je 0x10001de0
jmp 0x100012e7
mov eax, dword [ebp - 0x198]
sub eax, 0xdfeadc10
je 0x10001e06
jmp 0x100012fd
mov eax, dword [ebp - 0x198]
sub eax, 0xe4b418a0
je 0x10001a9f
jmp 0x10001313
mov eax, dword [ebp - 0x198]
sub eax, 0xea948935
je 0x1000188a
jmp 0x10001329
mov eax, dword [ebp - 0x198]
sub eax, 0xef52e038
je 0x100020c8
jmp 0x1000133f
mov eax, dword [ebp - 0x198]
sub eax, 0xf52ee9be
je 0x10001bd5
jmp 0x10001355
mov eax, dword [ebp - 0x198]
sub eax, 0xf762192f
je 0x10001fc9
jmp 0x1000136b
mov eax, dword [ebp - 0x198]
sub eax, 0xf7d1aa44
je 0x10002188
jmp 0x10001381
mov eax, dword [ebp - 0x198]
sub eax, 0xf81f8e2e
je 0x1000202d
jmp 0x10001397
mov eax, dword [ebp - 0x198]
sub eax, 0xfb178779
je 0x10002143
jmp 0x100013ad
mov eax, dword [ebp - 0x198]
sub eax, 0x3b4eb64
je 0x10001da2
jmp 0x100013c3
mov eax, dword [ebp - 0x198]
sub eax, 0x91dc705
je 0x10001a06
jmp 0x100013d9
mov eax, dword [ebp - 0x198]
sub eax, 0xaaadd77
je 0x10001814
jmp 0x100013ef
mov eax, dword [ebp - 0x198]
sub eax, 0x1bf31e33
je 0x10002398
jmp 0x10001405
mov eax, dword [ebp - 0x198]
sub eax, 0x1c7ee298
je 0x10001b2c
jmp 0x1000141b
mov eax, dword [ebp - 0x198]
sub eax, 0x1f7fec0e
je 0x10001736
jmp 0x10001431
mov eax, dword [ebp - 0x198]
sub eax, 0x257beeaa
je 0x10002239
jmp 0x10001447
mov eax, dword [ebp - 0x198]
sub eax, 0x27d3252b
je 0x10002347
jmp 0x1000145d
mov eax, dword [ebp - 0x198]
sub eax, 0x2864bfca
je 0x1000203c
jmp 0x10001473
mov eax, dword [ebp - 0x198]
sub eax, 0x301a032c
je 0x10002314
jmp 0x10001489
mov eax, dword [ebp - 0x198]
sub eax, 0x343326e2
je 0x10001b8c
jmp 0x1000149f
mov eax, dword [ebp - 0x198]
sub eax, 0x35bfec4e
je 0x10001cbe
jmp 0x100014b5
mov eax, dword [ebp - 0x198]
sub eax, 0x43af8772
je 0x10001bf0
jmp 0x100014cb
mov eax, dword [ebp - 0x198]
sub eax, 0x4652ba6f
je 0x10001796
jmp 0x100014e1
mov eax, dword [ebp - 0x198]
sub eax, 0x489cfaea
je 0x10001db1
jmp 0x100014f7
mov eax, dword [ebp - 0x198]
sub eax, 0x48ab8e30
je 0x100019d4
jmp 0x1000150d
mov eax, dword [ebp - 0x198]
sub eax, 0x4becd0ed
je 0x10001ec7
jmp 0x10001523
mov eax, dword [ebp - 0x198]
sub eax, 0x4c2b7824
je 0x10001d1e
jmp 0x10001539
mov eax, dword [ebp - 0x198]
sub eax, 0x4cab1a01
je 0x10001e21
jmp 0x1000154f
mov eax, dword [ebp - 0x198]
sub eax, 0x54f05bc5
je 0x10001f57
jmp 0x10001565
mov eax, dword [ebp - 0x198]
sub eax, 0x55c4d053
je 0x100019f7
jmp 0x1000157b
mov eax, dword [ebp - 0x198]
sub eax, 0x5bc7165f
je 0x1000190f
jmp 0x10001591
mov eax, dword [ebp - 0x198]
sub eax, 0x60e9caeb
je 0x1000207f
jmp 0x100015a7
mov eax, dword [ebp - 0x198]
sub eax, 0x615d9bb2
je 0x10001adb
jmp 0x100015bd
mov eax, dword [ebp - 0x198]
sub eax, 0x65c039a0
je 0x1000222a
jmp 0x100015d3
mov eax, dword [ebp - 0x198]
sub eax, 0x68c5a064
je 0x10001745
jmp 0x100015e9
mov eax, dword [ebp - 0x198]
sub eax, 0x707dcb6e
je 0x10001a7e
jmp 0x100015ff
mov eax, dword [ebp - 0x198]
sub eax, 0x7993e99e
je 0x10002389
jmp 0x10001615
mov eax, dword [ebp - 0x198]
sub eax, 0x7b8024d3
je 0x10001646
jmp 0x1000162b
mov eax, dword [ebp - 0x198]
sub eax, 0x7c66f9c6
je 0x10001ccd
jmp 0x10001641
jmp 0x100023c0
mov ecx, dword [0x1006db40]
mov eax, dword [0x1006db3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x301a032c
mov ecx, 0xa71848a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x164], eax
mov ecx, dword [0x1006db40]
mov eax, dword [0x1006db3c]
mov edx, ecx
add edx, 0xc536aa35
sub edx, 1
sub edx, 0xc536aa35
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x301a032c
mov ecx, 0x1f7fec0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov dword [ebp - 0x194], 0x68c5a064
jmp 0x100023c0
mov eax, dword [0x1006db40]
mov ecx, dword [0x1006db3c]
mov edx, eax
sub edx, 0x9461764
sub edx, 1
add edx, 0x9461764
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa196531b
mov ecx, 0x4652ba6f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov eax, dword [ebp - 0x164]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x15d], al
mov eax, dword [0x1006db40]
mov ecx, dword [0x1006db3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa196531b
mov ecx, 0xdced15ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov dl, byte [ebp - 0x15d]
mov eax, 0xaaadd77
mov ecx, 0x5bc7165f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov ecx, dword [0x1006db40]
mov eax, dword [0x1006db3c]
mov edx, ecx
add edx, 0x26cd1465
sub edx, 1
sub edx, 0x26cd1465
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc39e2598
mov ecx, 0xea948935
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov ecx, dword [0x1006db40]
mov eax, dword [0x1006db3c]
mov edx, ecx
add edx, 0x50b80169
sub edx, 1
sub edx, 0x50b80169
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc39e2598
mov ecx, 0x90264a0f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov dword [ebp - 0x194], 0x257beeaa
jmp 0x100023c0
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov dword [ebp - 0x194], 0xd4abd3db
jmp 0x100023c0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x16c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x194], 0x48ab8e30
jmp 0x100023c0
mov edx, 0xffffffff
mov eax, 0x91dc705
mov ecx, 0x55c4d053
cmp dword [ebp - 0x174], edx
cmove eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov dword [ebp - 0x194], 0x257beeaa
jmp 0x100023c0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x194], 0xa7d70555
jmp 0x100023c0
mov eax, dword [ebp - 0x15c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x194], 0x707dcb6e
jmp 0x100023c0
mov edx, dword [ebp - 0x158]
mov eax, 0xe4b418a0
mov ecx, 0x343326e2
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x194], 0xacf64aee
jmp 0x100023c0
mov eax, dword [ebp - 0x154]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x194], 0x615d9bb2
jmp 0x100023c0
mov eax, dword [0x1006db40]
mov ecx, dword [0x1006db3c]
mov edx, eax
sub edx, 0x41a27bac
sub edx, 1
add edx, 0x41a27bac
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x27d3252b
mov ecx, 0x1c7ee298
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov eax, dword [0x1006db40]
mov ecx, dword [0x1006db3c]
mov edx, eax
sub edx, 0xcd7efc27
sub edx, 1
add edx, 0xcd7efc27
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x27d3252b
mov ecx, 0xd0dcaa4c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov dword [ebp - 0x194], 0x257beeaa
jmp 0x100023c0
mov eax, dword [ebp - 0x178]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x194], 0xf52ee9be
jmp 0x100023c0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x194], 0x43af8772
jmp 0x100023c0
mov eax, dword [0x1006db40]
mov ecx, dword [0x1006db3c]
mov edx, eax
sub edx, 0x73f9ae2f
sub edx, 1
add edx, 0x73f9ae2f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdc232502
mov ecx, 0x8898d006
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x180]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x184], eax
mov word [ebp - 0x186], 0
mov eax, dword [0x1006db40]
mov ecx, dword [0x1006db3c]
mov edx, eax
sub edx, 0xebe1d5d4
sub edx, 1
add edx, 0xebe1d5d4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdc232502
mov ecx, 0x35bfec4e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov dword [ebp - 0x194], 0x7c66f9c6
jmp 0x100023c0
mov eax, dword [0x1006db40]
mov ecx, dword [0x1006db3c]
mov edx, eax
add edx, 0xffa8aad7
sub edx, 1
sub edx, 0xffa8aad7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7993e99e
mov ecx, 0x4c2b7824
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov ax, word [ebp - 0x186]
mov word [ebp - 0x14e], ax
mov ecx, dword [0x1006db40]
mov eax, dword [0x1006db3c]
mov edx, ecx
add edx, 0xd2f6ff28
sub edx, 1
sub edx, 0xd2f6ff28
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7993e99e
mov ecx, 0x3b4eb64
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov dword [ebp - 0x194], 0x489cfaea
jmp 0x100023c0
mov ax, word [ebp - 0x14e]
movzx eax, ax
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x184]
movzx eax, word [eax + 6]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x194], 0xdea93fa6
jmp 0x100023c0
mov edx, dword [ebp - 0x14c]
mov esi, dword [ebp - 0x148]
mov eax, 0x888be5d3
mov ecx, 0xdfeadc10
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x194], 0x4cab1a01
jmp 0x100023c0
mov eax, dword [ebp - 0x144]
add eax, 0xb8a27f9
add eax, 0x18
sub eax, 0xb8a27f9
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x184]
add eax, 4
add eax, 0x10
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x194], 0xc3cd68c7
jmp 0x100023c0
mov eax, dword [ebp - 0x13c]
movzx edx, word [eax]
mov eax, dword [ebp - 0x140]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
movzx ecx, word [ebp - 0x186]
imul ecx, ecx, 0x28
sub eax, 0xf3e93d15
add eax, ecx
add eax, 0xf3e93d15
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x18c]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001c3b0
call fcn.10012060
mov edx, eax
mov eax, 0x4becd0ed
mov ecx, 0xf81f8e2e
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x18c]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x18c]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x18d], al
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x18c]
mov ecx, dword [ecx + 0xc]
sub eax, 0x65f3006
add eax, ecx
add eax, 0x65f3006
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x194], 0x54f05bc5
jmp 0x100023c0
mov edx, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 0xc]
sub ecx, 0x13382431
add ecx, eax
add ecx, 0x13382431
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000fe50
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x194], 0xf762192f
jmp 0x100023c0
mov esi, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 0xc]
add esi, 0xe711876e
add esi, eax
sub esi, 0xe711876e
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x130]
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x18d], al
mov dword [ebp - 0x194], 0xf81f8e2e
jmp 0x100023c0
mov dword [ebp - 0x194], 0x2864bfca
jmp 0x100023c0
mov ax, word [ebp - 0x186]
xor ecx, ecx
sub cx, 1
sub ax, cx
mov word [ebp - 0x126], ax
mov dword [ebp - 0x194], 0x8f3b0db7
jmp 0x100023c0
mov ax, word [ebp - 0x126]
mov word [ebp - 0x186], ax
mov dword [ebp - 0x194], 0x60e9caeb
jmp 0x100023c0
mov eax, dword [0x1006db40]
mov ecx, dword [0x1006db3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1bf31e33
mov ecx, 0xef52e038
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov eax, dword [0x1006db40]
mov ecx, dword [0x1006db3c]
mov edx, eax
add edx, 0xe0d73e99
sub edx, 1
sub edx, 0xe0d73e99
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1bf31e33
mov ecx, 0xd2a2f7b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov dword [ebp - 0x194], 0x7c66f9c6
jmp 0x100023c0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x194], 0xfb178779
jmp 0x100023c0
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x178]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x168]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x194], 0xf7d1aa44
jmp 0x100023c0
mov eax, dword [0x1006db40]
mov ecx, dword [0x1006db3c]
mov edx, eax
sub edx, 0x4b26933d
sub edx, 1
add edx, 0x4b26933d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x87e79607
mov ecx, 0xd9f4fce8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov eax, dword [0x1006db40]
mov ecx, dword [0x1006db3c]
mov edx, eax
sub edx, 0xc40d2aa0
sub edx, 1
add edx, 0xc40d2aa0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x87e79607
mov ecx, 0x65c039a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov dword [ebp - 0x194], 0x257beeaa
jmp 0x100023c0
mov ecx, dword [0x1006db40]
mov eax, dword [0x1006db3c]
mov edx, ecx
sub edx, 0x9579a72
sub edx, 1
add edx, 0x9579a72
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc553ff3b
mov ecx, 0xb40ac4b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov eax, dword [0x1006db40]
mov ecx, dword [0x1006db3c]
mov edx, eax
add edx, 0xea7577e0
sub edx, 1
sub edx, 0xea7577e0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc553ff3b
mov ecx, 0x980e960b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100023c0
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1000f0f0
add esp, 0x1ac
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x194], 0xa71848a7
jmp 0x100023c0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x194], 0x4652ba6f
jmp 0x100023c0
mov dword [ebp - 0x194], 0xea948935
jmp 0x100023c0
mov dword [ebp - 0x194], 0x1c7ee298
jmp 0x100023c0
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x180]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x184], eax
mov word [ebp - 0x186], 0
mov dword [ebp - 0x194], 0x8898d006
jmp 0x100023c0
mov dword [ebp - 0x194], 0x4c2b7824
jmp 0x100023c0
mov dword [ebp - 0x194], 0xef52e038
jmp 0x100023c0
mov dword [ebp - 0x194], 0xd9f4fce8
jmp 0x100023c0
mov dword [ebp - 0x194], 0xb40ac4b8
jmp 0x10001113