Function at 0x10001320
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1ac
mov eax, dword [ebp + 8]
mov eax, dword [0x10068800]
xor eax, ebp
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x194], 0xb1d75b35
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x198], eax
sub eax, 0x8112b71a
je 0x10001f33
jmp 0x1000136a
mov eax, dword [ebp - 0x198]
sub eax, 0x82f221dc
je 0x10001f88
jmp 0x10001380
mov eax, dword [ebp - 0x198]
sub eax, 0x87ef7f54
je 0x100023f2
jmp 0x10001396
mov eax, dword [ebp - 0x198]
sub eax, 0x88201d8b
je 0x10001d72
jmp 0x100013ac
mov eax, dword [ebp - 0x198]
sub eax, 0x8f88a66d
je 0x10001c35
jmp 0x100013c2
mov eax, dword [ebp - 0x198]
sub eax, 0x903ae80c
je 0x10002744
jmp 0x100013d8
mov eax, dword [ebp - 0x198]
sub eax, 0x91716793
je 0x100027d6
jmp 0x100013ee
mov eax, dword [ebp - 0x198]
sub eax, 0xa2cc92a8
je 0x10002324
jmp 0x10001404
mov eax, dword [ebp - 0x198]
sub eax, 0xae773ed5
je 0x100028d1
jmp 0x1000141a
mov eax, dword [ebp - 0x198]
sub eax, 0xafa8be35
je 0x10001be6
jmp 0x10001430
mov eax, dword [ebp - 0x198]
sub eax, 0xb1d75b35
je 0x10001905
jmp 0x10001446
mov eax, dword [ebp - 0x198]
sub eax, 0xb3ff7331
je 0x10002767
jmp 0x1000145c
mov eax, dword [ebp - 0x198]
sub eax, 0xc174d83a
je 0x100027f7
jmp 0x10001472
mov eax, dword [ebp - 0x198]
sub eax, 0xca74a7cc
je 0x1000212f
jmp 0x10001488
mov eax, dword [ebp - 0x198]
sub eax, 0xd0e286e4
je 0x10001c0b
jmp 0x1000149e
mov eax, dword [ebp - 0x198]
sub eax, 0xd2c1917a
je 0x10002854
jmp 0x100014b4
mov eax, dword [ebp - 0x198]
sub eax, 0xd737eca2
je 0x100025de
jmp 0x100014ca
mov eax, dword [ebp - 0x198]
sub eax, 0xd7af9ba3
je 0x10002806
jmp 0x100014e0
mov eax, dword [ebp - 0x198]
sub eax, 0xdc40c5c6
je 0x100021ca
jmp 0x100014f6
mov eax, dword [ebp - 0x198]
sub eax, 0xdc83c861
je 0x10001d8d
jmp 0x1000150c
mov eax, dword [ebp - 0x198]
sub eax, 0xe5d8355e
je 0x1000209d
jmp 0x10001522
mov eax, dword [ebp - 0x198]
sub eax, 0xe6cc5e64
je 0x100024d6
jmp 0x10001538
mov eax, dword [ebp - 0x198]
sub eax, 0xea9545a8
je 0x10001b14
jmp 0x1000154e
mov eax, dword [ebp - 0x198]
sub eax, 0xf4fc4452
je 0x100026e4
jmp 0x10001564
mov eax, dword [ebp - 0x198]
sub eax, 0xfbed7806
je 0x10002785
jmp 0x1000157a
mov eax, dword [ebp - 0x198]
sub eax, 0x31980d5
je 0x100020b9
jmp 0x10001590
mov eax, dword [ebp - 0x198]
sub eax, 0x65bba12
je 0x10002192
jmp 0x100015a6
mov eax, dword [ebp - 0x198]
sub eax, 0x7d35c83
je 0x10001fd9
jmp 0x100015bc
mov eax, dword [ebp - 0x198]
sub eax, 0x8b66da9
je 0x10002616
jmp 0x100015d2
mov eax, dword [ebp - 0x198]
sub eax, 0xec17dcb
je 0x1000258d
jmp 0x100015e8
mov eax, dword [ebp - 0x198]
sub eax, 0x1046634d
je 0x10002863
jmp 0x100015fe
mov eax, dword [ebp - 0x198]
sub eax, 0x1b14b816
je 0x100023d1
jmp 0x10001614
mov eax, dword [ebp - 0x198]
sub eax, 0x1efe4c3e
je 0x100026c6
jmp 0x1000162a
mov eax, dword [ebp - 0x198]
sub eax, 0x2142ebc3
je 0x10002845
jmp 0x10001640
mov eax, dword [ebp - 0x198]
sub eax, 0x25663de0
je 0x100026d5
jmp 0x10001656
mov eax, dword [ebp - 0x198]
sub eax, 0x2bc22b45
je 0x1000207f
jmp 0x1000166c
mov eax, dword [ebp - 0x198]
sub eax, 0x2d1c79a3
je 0x10001f24
jmp 0x10001682
mov eax, dword [ebp - 0x198]
sub eax, 0x2d55b442
je 0x10002723
jmp 0x10001698
mov eax, dword [ebp - 0x198]
sub eax, 0x2e9324d5
je 0x10001d51
jmp 0x100016ae
mov eax, dword [ebp - 0x198]
sub eax, 0x31b794f8
je 0x10001cab
jmp 0x100016c4
mov eax, dword [ebp - 0x198]
sub eax, 0x32ed271b
je 0x1000253c
jmp 0x100016da
mov eax, dword [ebp - 0x198]
sub eax, 0x3a150bdf
je 0x10002776
jmp 0x100016f0
mov eax, dword [ebp - 0x198]
sub eax, 0x3b440d7a
je 0x10001e31
jmp 0x10001706
mov eax, dword [ebp - 0x198]
sub eax, 0x3dea6e6d
je 0x10001d42
jmp 0x1000171c
mov eax, dword [ebp - 0x198]
sub eax, 0x3efafc5d
je 0x1000208e
jmp 0x10001732
mov eax, dword [ebp - 0x198]
sub eax, 0x467a39b2
je 0x100024ac
jmp 0x10001748
mov eax, dword [ebp - 0x198]
sub eax, 0x4772e014
je 0x100028c2
jmp 0x1000175e
mov eax, dword [ebp - 0x198]
sub eax, 0x4b37a41f
je 0x10002213
jmp 0x10001774
mov eax, dword [ebp - 0x198]
sub eax, 0x4cfc2e6c
je 0x10001955
jmp 0x1000178a
mov eax, dword [ebp - 0x198]
sub eax, 0x4da4bce0
je 0x10001eb6
jmp 0x100017a0
mov eax, dword [ebp - 0x198]
sub eax, 0x548e6064
je 0x10002667
jmp 0x100017b6
mov eax, dword [ebp - 0x198]
sub eax, 0x58838258
je 0x10001bd7
jmp 0x100017cc
mov eax, dword [ebp - 0x198]
sub eax, 0x5902c2be
je 0x100019a6
jmp 0x100017e2
mov eax, dword [ebp - 0x198]
sub eax, 0x5acbe7db
je 0x100022ae
jmp 0x100017f8
mov eax, dword [ebp - 0x198]
sub eax, 0x5b606cd1
je 0x100025ed
jmp 0x1000180e
mov eax, dword [ebp - 0x198]
sub eax, 0x5f2e1a4d
je 0x10001b82
jmp 0x10001824
mov eax, dword [ebp - 0x198]
sub eax, 0x6c0d8668
je 0x100021a1
jmp 0x1000183a
mov eax, dword [ebp - 0x198]
sub eax, 0x6f3616c7
je 0x10001a2e
jmp 0x10001850
mov eax, dword [ebp - 0x198]
sub eax, 0x75f12a45
je 0x10002753
jmp 0x10001866
mov eax, dword [ebp - 0x198]
sub eax, 0x76a5d5f6
je 0x10001a5e
jmp 0x1000187c
mov eax, dword [ebp - 0x198]
sub eax, 0x7a798f46
je 0x10002281
jmp 0x10001892
mov eax, dword [ebp - 0x198]
sub eax, 0x7ba56b18
je 0x10001a4f
jmp 0x100018a8
mov eax, dword [ebp - 0x198]
sub eax, 0x7cae4c73
je 0x10001dd6
jmp 0x100018be
mov eax, dword [ebp - 0x198]
sub eax, 0x7cf73c7c
je 0x10001e40
jmp 0x100018d4
mov eax, dword [ebp - 0x198]
sub eax, 0x7d1e4568
je 0x10002290
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000c0e0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x194], 0x4cfc2e6c
jmp 0x100028e9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
sub edx, 0x58d2e5e3
sub edx, 1
add edx, 0x58d2e5e3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb3ff7331
mov ecx, 0x5902c2be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
cmp dword [ebp - 0x16c], 0
setne al
and al, 1
mov byte [ebp - 0x15d], al
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
mov edx, ecx
add edx, 0x3a508d82
sub edx, 1
sub edx, 0x3a508d82
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb3ff7331
mov ecx, 0x6f3616c7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dl, byte [ebp - 0x15d]
mov eax, 0x7ba56b18
mov ecx, 0x76a5d5f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dword [ebp - 0x194], 0x75f12a45
jmp 0x100028e9
mov ecx, dword [ebp - 0x16c]
mov edx, dword [ebp - 0x168]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x16c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x194], 0xea9545a8
jmp 0x100028e9
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3a150bdf
mov ecx, 0x5f2e1a4d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x15c], eax
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3a150bdf
mov ecx, 0x58838258
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dword [ebp - 0x194], 0xafa8be35
jmp 0x100028e9
mov edx, dword [ebp - 0x15c]
mov esi, 0xffffffff
mov eax, 0x7daac004
mov ecx, 0xd0e286e4
cmp edx, esi
cmove eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dword [ebp - 0x194], 0x75f12a45
jmp 0x100028e9
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
mov edx, ecx
add edx, 0xaf2e58ab
sub edx, 1
sub edx, 0xaf2e58ab
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfbed7806
mov ecx, 0x31b794f8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov eax, dword [ebp - 0x158]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x154], eax
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfbed7806
mov ecx, 0x3dea6e6d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dword [ebp - 0x194], 0x2e9324d5
jmp 0x100028e9
mov edx, dword [ebp - 0x154]
mov eax, 0x88201d8b
mov ecx, 0x8112b71a
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x194], 0xdc83c861
jmp 0x100028e9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x91716793
mov ecx, 0x7cae4c73
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov eax, dword [ebp - 0x150]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x91716793
mov ecx, 0x3b440d7a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dword [ebp - 0x194], 0x7cf73c7c
jmp 0x100028e9
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
mov edx, ecx
add edx, 0x6b9c6068
sub edx, 1
sub edx, 0x6b9c6068
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc174d83a
mov ecx, 0x4da4bce0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc174d83a
mov ecx, 0x2d1c79a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dword [ebp - 0x194], 0x75f12a45
jmp 0x100028e9
mov eax, dword [ebp - 0x178]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x194], 0x82f221dc
jmp 0x100028e9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
add edx, 0x8eea2841
sub edx, 1
sub edx, 0x8eea2841
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd7af9ba3
mov ecx, 0x7d35c83
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x180]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x184], eax
mov word [ebp - 0x186], 0
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd7af9ba3
mov ecx, 0x2bc22b45
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dword [ebp - 0x194], 0x3efafc5d
jmp 0x100028e9
mov dword [ebp - 0x194], 0xe5d8355e
jmp 0x100028e9
movzx eax, word [ebp - 0x186]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x194], 0x31980d5
jmp 0x100028e9
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
mov edx, ecx
sub edx, 0xdb29326d
sub edx, 1
add edx, 0xdb29326d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2142ebc3
mov ecx, 0xca74a7cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov eax, dword [ebp - 0x184]
add eax, 4
add eax, 2
mov dword [ebp - 0x144], eax
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
add edx, 0xc55cb577
sub edx, 1
sub edx, 0xc55cb577
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2142ebc3
mov ecx, 0x65bba12
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dword [ebp - 0x194], 0x6c0d8668
jmp 0x100028e9
mov eax, dword [ebp - 0x144]
movzx esi, word [eax]
mov edx, dword [ebp - 0x148]
mov eax, 0xf4fc4452
mov ecx, 0xdc40c5c6
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd2c1917a
mov ecx, 0x4b37a41f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov eax, dword [ebp - 0x184]
sub eax, 0x701572d
add eax, 0x18
add eax, 0x701572d
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x13c], eax
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd2c1917a
mov ecx, 0x7a798f46
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dword [ebp - 0x194], 0x7d1e4568
jmp 0x100028e9
mov ecx, dword [0x10069b40]
mov eax, dword [0x10069b3c]
mov edx, ecx
sub edx, 0x6fde4ccd
sub edx, 1
add edx, 0x6fde4ccd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1046634d
mov ecx, 0xa2cc92a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov eax, dword [ebp - 0x138]
movzx ecx, word [eax + 0x10]
mov eax, dword [ebp - 0x140]
sub eax, 0x9db8be49
add eax, ecx
add eax, 0x9db8be49
movzx ecx, word [ebp - 0x186]
imul ecx, ecx, 0x28
add eax, 0xec21008
add eax, ecx
sub eax, 0xec21008
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x18c]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100183b0
call fcn.1000e450
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x131], al
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
add edx, 0xf8f06565
sub edx, 1
sub edx, 0xf8f06565
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1046634d
mov ecx, 0x1b14b816
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dl, byte [ebp - 0x131]
mov eax, 0x87ef7f54
mov ecx, 0x32ed271b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x18c]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 0xc]
sub edx, 0x48b12668
add edx, eax
add edx, 0x48b12668
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x18d], al
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x18c]
mov ecx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
sub edx, eax
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 0xc]
add ecx, 0x4f071a2f
add ecx, eax
sub ecx, 0x4f071a2f
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000c240
mov dword [ebp - 0x194], 0x467a39b2
jmp 0x100028e9
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x18c]
add eax, 8
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x194], 0xe6cc5e64
jmp 0x100028e9
mov eax, dword [ebp - 0x12c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x18c]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, esi
add eax, ecx
xor esi, esi
sub esi, eax
mov ecx, dword [ebp - 0x130]
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x18d], al
mov dword [ebp - 0x194], 0x32ed271b
jmp 0x100028e9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
sub edx, 0x21f8aedd
sub edx, 1
add edx, 0x21f8aedd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4772e014
mov ecx, 0xec17dcb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
add edx, 0x25ad2c90
sub edx, 1
sub edx, 0x25ad2c90
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4772e014
mov ecx, 0xd737eca2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dword [ebp - 0x194], 0x5b606cd1
jmp 0x100028e9
mov ax, word [ebp - 0x186]
add ax, 0x5fe2
add ax, 1
sub ax, 0x5fe2
mov word [ebp - 0x126], ax
mov dword [ebp - 0x194], 0x8b66da9
jmp 0x100028e9
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
add edx, 0xd067ca7d
sub edx, 1
sub edx, 0xd067ca7d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xae773ed5
mov ecx, 0x548e6064
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov ax, word [ebp - 0x126]
mov word [ebp - 0x186], ax
mov eax, dword [0x10069b40]
mov ecx, dword [0x10069b3c]
mov edx, eax
sub edx, 0x157ae398
sub edx, 1
add edx, 0x157ae398
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xae773ed5
mov ecx, 0x1efe4c3e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x194], eax
jmp 0x100028e9
mov dword [ebp - 0x194], 0x25663de0
jmp 0x100028e9
mov dword [ebp - 0x194], 0xe5d8355e
jmp 0x100028e9
mov eax, dword [ebp - 0x174]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x178]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x194], 0x2d55b442
jmp 0x100028e9
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x194], 0x903ae80c
jmp 0x100028e9
mov dword [ebp - 0x194], 0x75f12a45
jmp 0x100028e9
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1000b4e0
add esp, 0x1ac
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0x194], 0x5902c2be
jmp 0x100028e9
mov dword [ebp - 0x194], 0x5f2e1a4d
jmp 0x100028e9
mov eax, dword [ebp - 0x158]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x194], 0x31b794f8
jmp 0x100028e9
mov eax, dword [ebp - 0x150]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x194], 0x7cae4c73
jmp 0x100028e9
mov dword [ebp - 0x194], 0x4da4bce0
jmp 0x100028e9
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x180]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x184], eax
mov word [ebp - 0x186], 0
mov dword [ebp - 0x194], 0x7d35c83
jmp 0x100028e9
mov dword [ebp - 0x194], 0xca74a7cc
jmp 0x100028e9
mov dword [ebp - 0x194], 0x4b37a41f
jmp 0x100028e9
mov eax, dword [ebp - 0x138]
movzx edx, word [eax + 0x10]
mov eax, dword [ebp - 0x140]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
movzx ecx, word [ebp - 0x186]
imul ecx, ecx, 0x28
sub eax, 0x1d047062
add eax, ecx
add eax, 0x1d047062
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x18c]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100183b0
call fcn.1000e450
mov dword [ebp - 0x194], 0xa2cc92a8
jmp 0x100028e9
mov dword [ebp - 0x194], 0xec17dcb
jmp 0x100028e9
mov ax, word [ebp - 0x126]
mov word [ebp - 0x186], ax
mov dword [ebp - 0x194], 0x548e6064
jmp 0x1000134e