Function at 0x100017c0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1a8
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1ac], eax
mov eax, dword [0x1006f404]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1a8], 0x169201c7
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1b0], eax
sub eax, 0x80a1eb6f
je 0x10004f78
jmp 0x10001804
mov eax, dword [ebp - 0x1b0]
sub eax, 0x812fddee
je 0x10004f2f
jmp 0x1000181a
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8262368c
je 0x10004aa1
jmp 0x10001830
mov eax, dword [ebp - 0x1b0]
sub eax, 0x82c38bc9
je 0x10002aae
jmp 0x10001846
mov eax, dword [ebp - 0x1b0]
sub eax, 0x849a3c7c
je 0x10005089
jmp 0x1000185c
mov eax, dword [ebp - 0x1b0]
sub eax, 0x875dde23
je 0x10002fd6
jmp 0x10001872
mov eax, dword [ebp - 0x1b0]
sub eax, 0x899f3d5a
je 0x100050a7
jmp 0x10001888
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8ab4bbaa
je 0x10004bd9
jmp 0x1000189e
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8abf37bc
je 0x10004fab
jmp 0x100018b4
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8b85a55c
je 0x10004ce1
jmp 0x100018ca
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8bcc6ce1
je 0x100050f8
jmp 0x100018e0
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8c201c3b
je 0x10003c51
jmp 0x100018f6
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8de7ae17
je 0x100046de
jmp 0x1000190c
mov eax, dword [ebp - 0x1b0]
sub eax, 0x8ea0c5b9
je 0x100045d8
jmp 0x10001922
mov eax, dword [ebp - 0x1b0]
sub eax, 0x904536b0
je 0x10003334
jmp 0x10001938
mov eax, dword [ebp - 0x1b0]
sub eax, 0x93655a48
je 0x10003fe7
jmp 0x1000194e
mov eax, dword [ebp - 0x1b0]
sub eax, 0x94bd9af5
je 0x10003fbd
jmp 0x10001964
mov eax, dword [ebp - 0x1b0]
sub eax, 0x958855c1
je 0x1000513a
jmp 0x1000197a
mov eax, dword [ebp - 0x1b0]
sub eax, 0x968737c1
je 0x10004d57
jmp 0x10001990
mov eax, dword [ebp - 0x1b0]
sub eax, 0x97b89d87
je 0x10004ba0
jmp 0x100019a6
mov eax, dword [ebp - 0x1b0]
sub eax, 0x98d31f60
je 0x10002ac9
jmp 0x100019bc
mov eax, dword [ebp - 0x1b0]
sub eax, 0x98ec0f0c
je 0x10004775
jmp 0x100019d2
mov eax, dword [ebp - 0x1b0]
sub eax, 0x98ef900f
je 0x10002d8f
jmp 0x100019e8
mov eax, dword [ebp - 0x1b0]
sub eax, 0x9bdfc2b6
je 0x100051af
jmp 0x100019fe
mov eax, dword [ebp - 0x1b0]
sub eax, 0x9c862b93
je 0x1000440f
jmp 0x10001a14
mov eax, dword [ebp - 0x1b0]
sub eax, 0x9f4c0d1e
je 0x1000277a
jmp 0x10001a2a
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa1704f8f
je 0x1000467e
jmp 0x10001a40
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa173b4ba
je 0x10003792
jmp 0x10001a56
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa264b08c
je 0x100050b6
jmp 0x10001a6c
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa2eb76ce
je 0x100049d3
jmp 0x10001a82
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa7484a22
je 0x10004eaa
jmp 0x10001a98
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa9091297
je 0x10005098
jmp 0x10001aae
mov eax, dword [ebp - 0x1b0]
sub eax, 0xa90caaca
je 0x10003ec8
jmp 0x10001ac4
mov eax, dword [ebp - 0x1b0]
sub eax, 0xae0cc9ee
je 0x10004ebf
jmp 0x10001ada
mov eax, dword [ebp - 0x1b0]
sub eax, 0xae94ce53
je 0x10003027
jmp 0x10001af0
mov eax, dword [ebp - 0x1b0]
sub eax, 0xaff18d23
je 0x10002a9f
jmp 0x10001b06
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb02e8a5a
je 0x1000495d
jmp 0x10001b1c
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb08d90ff
je 0x10003224
jmp 0x10001b32
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb091e4b3
je 0x10003a81
jmp 0x10001b48
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb15cbd5a
je 0x100038b6
jmp 0x10001b5e
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb171cee4
je 0x10003601
jmp 0x10001b74
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb1e3e909
je 0x1000447d
jmp 0x10001b8a
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb310aa03
je 0x10003840
jmp 0x10001ba0
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb470b06a
je 0x10003e51
jmp 0x10001bb6
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb7bf7635
je 0x10002bd0
jmp 0x10001bcc
mov eax, dword [ebp - 0x1b0]
sub eax, 0xb9aa1c62
je 0x10003958
jmp 0x10001be2
mov eax, dword [ebp - 0x1b0]
sub eax, 0xbb1c0852
je 0x1000504d
jmp 0x10001bf8
mov eax, dword [ebp - 0x1b0]
sub eax, 0xbb26472d
je 0x10002bc1
jmp 0x10001c0e
mov eax, dword [ebp - 0x1b0]
sub eax, 0xbc84bc55
je 0x10004b85
jmp 0x10001c24
mov eax, dword [ebp - 0x1b0]
sub eax, 0xbfa1625f
je 0x1000519a
jmp 0x10001c3a
mov eax, dword [ebp - 0x1b0]
sub eax, 0xc1ee2947
je 0x100051be
jmp 0x10001c50
mov eax, dword [ebp - 0x1b0]
sub eax, 0xc2458c48
je 0x10004cc3
jmp 0x10001c66
mov eax, dword [ebp - 0x1b0]
sub eax, 0xc2b52c32
je 0x10003805
jmp 0x10001c7c
mov eax, dword [ebp - 0x1b0]
sub eax, 0xc36ea04b
je 0x100044ce
jmp 0x10001c92
mov eax, dword [ebp - 0x1b0]
sub eax, 0xc4a2724a
je 0x10002f85
jmp 0x10001ca8
mov eax, dword [ebp - 0x1b0]
sub eax, 0xca2734cf
je 0x10002d21
jmp 0x10001cbe
mov eax, dword [ebp - 0x1b0]
sub eax, 0xca7bd9fa
je 0x10004ddc
jmp 0x10001cd4
mov eax, dword [ebp - 0x1b0]
sub eax, 0xcbc213a2
je 0x10004134
jmp 0x10001cea
mov eax, dword [ebp - 0x1b0]
sub eax, 0xcf7269df
je 0x100050cb
jmp 0x10001d00
mov eax, dword [ebp - 0x1b0]
sub eax, 0xd130b11f
je 0x100041aa
jmp 0x10001d16
mov eax, dword [ebp - 0x1b0]
sub eax, 0xd499d323
je 0x1000315e
jmp 0x10001d2c
mov eax, dword [ebp - 0x1b0]
sub eax, 0xd6801c82
je 0x100050e9
jmp 0x10001d42
mov eax, dword [ebp - 0x1b0]
sub eax, 0xd791522e
je 0x10002e48
jmp 0x10001d58
mov eax, dword [ebp - 0x1b0]
sub eax, 0xd82b5621
je 0x10004562
jmp 0x10001d6e
mov eax, dword [ebp - 0x1b0]
sub eax, 0xdacd69c1
je 0x10004868
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
add edx, 0x3316616a
sub edx, 1
sub edx, 0x3316616a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1a35a2d3
mov ecx, 0x59432591
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0xdd9cafa3
jmp 0x100051c8
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x1a8], 0x98d31f60
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe9df0449
mov ecx, 0xec0d36b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0xb7bf7635
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2d1c2165
mov ecx, 0x39829c5e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x21f53a9d
mov ecx, 0x98ef900f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0x528d4703
jmp 0x100051c8
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x1a0], eax
mov eax, 0xffffffff
cmp dword [ebp - 0x1a0], eax
sete al
and al, 1
mov byte [ebp - 0x161], al
mov eax, dword [0x100706a8]
mov ecx, dword [0x100706a4]
mov edx, eax
sub edx, 0xd7c63fc3
sub edx, 1
add edx, 0xd7c63fc3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbc84bc55
mov ecx, 0x158a3083
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [ebp - 0x1a0]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x1a8], 0x875dde23
jmp 0x100051c8
mov eax, dword [0x100706a8]
mov ecx, dword [0x100706a4]
mov edx, eax
sub edx, 0xa1190cbb
sub edx, 1
add edx, 0xa1190cbb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7758e125
mov ecx, 0xae94ce53
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x1a4], eax
mov eax, dword [0x100706a8]
mov ecx, dword [0x100706a4]
mov edx, eax
add edx, 0xb78a9aeb
sub edx, 1
sub edx, 0xb78a9aeb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7758e125
mov ecx, 0x27ffcaa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [0x100706a8]
mov ecx, dword [0x100706a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdc2f0c65
mov ecx, 0x48c8355e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [0x100706a8]
mov ecx, dword [0x100706a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x46166958
mov ecx, 0xe1bc322d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [ebp - 0x15c]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x155], al
mov eax, dword [0x100706a8]
mov ecx, dword [0x100706a4]
mov edx, eax
add edx, 0x752bf806
sub edx, 1
sub edx, 0x752bf806
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8ab4bbaa
mov ecx, 0xdfcaf083
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
add edx, 0x5fb2b577
sub edx, 1
sub edx, 0x5fb2b577
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8b85a55c
mov ecx, 0x51a6ce4e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [ebp - 0x180]
movzx eax, word [eax]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov ax, word [eax + 6]
mov word [ebp - 0x144], ax
mov eax, dword [0x100706a8]
mov ecx, dword [0x100706a4]
mov edx, eax
add edx, 0x9fb9fb52
sub edx, 1
sub edx, 0x9fb9fb52
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7ff9a07c
mov ecx, 0xc2b52c32
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0x655fd7cd
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
sub edx, 0xbaab649f
sub edx, 1
add edx, 0xbaab649f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x849a3c7c
mov ecx, 0xb15cbd5a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [0x100706a8]
mov ecx, dword [0x100706a4]
mov edx, eax
add edx, 0xe2dccd3f
sub edx, 1
sub edx, 0xe2dccd3f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x849a3c7c
mov ecx, 0xe82fa515
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
add edx, 0x2e55ddd1
sub edx, 1
sub edx, 0x2e55ddd1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xca7bd9fa
mov ecx, 0x6d1cb08a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
sub edx, 0xa772d866
sub edx, 1
add edx, 0xa772d866
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x899f3d5a
mov ecx, 0xf3c4433b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov dword [ebp - 0x140], eax
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
add edx, 0xafc6ec5f
sub edx, 1
sub edx, 0xafc6ec5f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa264b08c
mov ecx, 0x10c2ca43
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov ecx, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x138]
add ecx, 0xc636e334
add ecx, eax
sub ecx, 0xc636e334
mov eax, dword [ebp - 0x180]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x17c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001c190
call fcn.100134f0
add esp, 8
mov edx, eax
mov eax, 0xa90caaca
mov ecx, 0xcbc213a2
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [ebp - 0x178]
mov dword [eax], 0
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0xf7ba2da4
add edx, eax
sub edx, 0xf7ba2da4
mov eax, dword [ebp - 0x178]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x174]
mov byte [eax], cl
mov edx, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0x30402362
add edx, eax
add edx, 0x30402362
mov eax, dword [ebp - 0x18c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, esi
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.100126c0
add esp, 0xc
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x1a8], 0x94bd9af5
jmp 0x100051c8
mov eax, dword [ebp - 0x130]
mov eax, dword [eax + 8]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x1a8], 0x93655a48
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
sub edx, 0x1692a9b3
sub edx, 1
add edx, 0x1692a9b3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xae0cc9ee
mov ecx, 0x2ff259ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
sub edx, 0xa9217ffb
sub edx, 1
add edx, 0xa9217ffb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x74223f54
mov ecx, 0xd130b11f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [0x100706a8]
mov ecx, dword [0x100706a4]
mov edx, eax
add edx, 0x77bc0e21
sub edx, 1
sub edx, 0x77bc0e21
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb604b90
mov ecx, 0x22e8efb9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd6801c82
mov ecx, 0xb1e3e909
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [0x100706a8]
mov ecx, dword [0x100706a4]
mov edx, eax
add edx, 0x92fed484
sub edx, 1
sub edx, 0x92fed484
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd6801c82
mov ecx, 0xc36ea04b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0x3876a36b
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
sub edx, 0xdf29626f
sub edx, 1
add edx, 0xdf29626f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8bcc6ce1
mov ecx, 0x8ea0c5b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [ebp - 0x1a0]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1a4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x120], eax
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
add edx, 0xc0fb98a1
sub edx, 1
sub edx, 0xc0fb98a1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8bcc6ce1
mov ecx, 0xa1704f8f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [0x100706a8]
mov ecx, dword [0x100706a4]
mov edx, eax
add edx, 0x64055a44
sub edx, 1
sub edx, 0x64055a44
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x80a1eb6f
mov ecx, 0x2f2e94c5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [ebp - 0x120]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a8], 0x58485b1
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
add edx, 0xa046bf45
sub edx, 1
sub edx, 0xa046bf45
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x181c0c86
mov ecx, 0xfcc1585e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
add edx, 0xecc00bd1
sub edx, 1
sub edx, 0xecc00bd1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd489cde
mov ecx, 0xa2eb76ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0x462a6bb0
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0xfd5597b5
jmp 0x100051c8
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a8], 0xd791522e
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0x3108589b
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
sub edx, 0x3b3d3d77
sub edx, 1
add edx, 0x3b3d3d77
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbfa1625f
mov ecx, 0x25ba50c2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0x904536b0
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
sub edx, 0xcc38db82
sub edx, 1
add edx, 0xcc38db82
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9bdfc2b6
mov ecx, 0x968737c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
sub edx, 0x1550da39
sub edx, 1
add edx, 0x1550da39
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9bdfc2b6
mov ecx, 0x2a6646e5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov ecx, dword [0x100706a8]
mov eax, dword [0x100706a4]
mov edx, ecx
sub edx, 0x21bb61b0
sub edx, 1
add edx, 0x21bb61b0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc1ee2947
mov ecx, 0xf3aa167d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a8], eax
jmp 0x100051c8
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1a8], 0xfc30ff1c
jmp 0x100051c8
mov esi, dword [ebp - 0x128]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
sub esi, eax
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x12c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x174]
mov byte [eax], cl
mov dword [ebp - 0x1a8], 0x2ff259ee
jmp 0x100051c8
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov ax, word [ebp - 0x122]
mov cx, word [ebp - 0x122]
add cx, 0x71e
add cx, 1
sub cx, 0x71e
mov eax, dword [ebp - 0x180]
mov word [eax], cx
mov dword [ebp - 0x1a8], 0x7f5cadb6
jmp 0x100051c8
mov eax, dword [ebp - 0x1a0]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1a4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a8], 0xd82b5621
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0x368cee81
jmp 0x100051c8
mov eax, dword [ebp - 0x154]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a8], 0x3fdc08c
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0xb15cbd5a
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0x7ac6f99f
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0xf3c4433b
jmp 0x100051c8
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1a8], 0x8c201c3b
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0xf3dc1c40
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0xb1e3e909
jmp 0x100051c8
mov eax, dword [ebp - 0x1a0]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1a4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1a8], 0x8ea0c5b9
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0xdacd69c1
jmp 0x100051c8
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1a8], 0x25ba50c2
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0x968737c1
jmp 0x100051c8
mov dword [ebp - 0x1a8], 0xf3aa167d
jmp 0x100017e8