Function at 0x100010a0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xa0
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x1006d800]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xa0], 0x78906951
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
sub eax, 0x8c919099
je 0x10002227
jmp 0x100010e4
mov eax, dword [ebp - 0xa8]
sub eax, 0x90f4cf80
je 0x1000250a
jmp 0x100010fa
mov eax, dword [ebp - 0xa8]
sub eax, 0x9123d1ca
je 0x10001d6a
jmp 0x10001110
mov eax, dword [ebp - 0xa8]
sub eax, 0x9461ba40
je 0x100022a6
jmp 0x10001126
mov eax, dword [ebp - 0xa8]
sub eax, 0x94ddd653
je 0x10001cb1
jmp 0x1000113c
mov eax, dword [ebp - 0xa8]
sub eax, 0x955f2a5c
je 0x10001d16
jmp 0x10001152
mov eax, dword [ebp - 0xa8]
sub eax, 0x99e28788
je 0x1000172a
jmp 0x10001168
mov eax, dword [ebp - 0xa8]
sub eax, 0xa1406896
je 0x10001e00
jmp 0x1000117e
mov eax, dword [ebp - 0xa8]
sub eax, 0xa24b85cf
je 0x100019ab
jmp 0x10001194
mov eax, dword [ebp - 0xa8]
sub eax, 0xb1cd243a
je 0x10001a4d
jmp 0x100011aa
mov eax, dword [ebp - 0xa8]
sub eax, 0xb2d0a401
je 0x10001b3f
jmp 0x100011c0
mov eax, dword [ebp - 0xa8]
sub eax, 0xb794ac31
je 0x10002499
jmp 0x100011d6
mov eax, dword [ebp - 0xa8]
sub eax, 0xb828300f
je 0x10002488
jmp 0x100011ec
mov eax, dword [ebp - 0xa8]
sub eax, 0xbc359b55
je 0x1000210e
jmp 0x10001202
mov eax, dword [ebp - 0xa8]
sub eax, 0xbe065ad4
je 0x1000265b
jmp 0x10001218
mov eax, dword [ebp - 0xa8]
sub eax, 0xc34221ae
je 0x10001ec5
jmp 0x1000122e
mov eax, dword [ebp - 0xa8]
sub eax, 0xc432222c
je 0x10001ffd
jmp 0x10001244
mov eax, dword [ebp - 0xa8]
sub eax, 0xc8654041
je 0x10001f55
jmp 0x1000125a
mov eax, dword [ebp - 0xa8]
sub eax, 0xc9c32210
je 0x100021cf
jmp 0x10001270
mov eax, dword [ebp - 0xa8]
sub eax, 0xcf8c2431
je 0x10002157
jmp 0x10001286
mov eax, dword [ebp - 0xa8]
sub eax, 0xd15e8d25
je 0x100018ad
jmp 0x1000129c
mov eax, dword [ebp - 0xa8]
sub eax, 0xd4c1c824
je 0x100023a1
jmp 0x100012b2
mov eax, dword [ebp - 0xa8]
sub eax, 0xd84061d8
je 0x1000171b
jmp 0x100012c8
mov eax, dword [ebp - 0xa8]
sub eax, 0xeb536340
je 0x10001cf2
jmp 0x100012de
mov eax, dword [ebp - 0xa8]
sub eax, 0xeb5d9989
je 0x100025c7
jmp 0x100012f4
mov eax, dword [ebp - 0xa8]
sub eax, 0xedc4e4f8
je 0x100021de
jmp 0x1000130a
mov eax, dword [ebp - 0xa8]
sub eax, 0xf7274fca
je 0x10001d92
jmp 0x10001320
mov eax, dword [ebp - 0xa8]
sub eax, 0xf891d935
je 0x10001b6c
jmp 0x10001336
mov eax, dword [ebp - 0xa8]
sub eax, 0xfc6ec2c3
je 0x1000241a
jmp 0x1000134c
mov eax, dword [ebp - 0xa8]
sub eax, 0xffc033d5
je 0x10001bfb
jmp 0x10001362
mov eax, dword [ebp - 0xa8]
sub eax, 0x6b33e2
je 0x10001c15
jmp 0x10001378
mov eax, dword [ebp - 0xa8]
sub eax, 0x2ce4d68
je 0x10002543
jmp 0x1000138e
mov eax, dword [ebp - 0xa8]
sub eax, 0x3916300
je 0x10001d53
jmp 0x100013a4
mov eax, dword [ebp - 0xa8]
sub eax, 0x955ee25
je 0x10001edd
jmp 0x100013ba
mov eax, dword [ebp - 0xa8]
sub eax, 0x13c8429e
je 0x100017a0
jmp 0x100013d0
mov eax, dword [ebp - 0xa8]
sub eax, 0x19512444
je 0x10001ea7
jmp 0x100013e6
mov eax, dword [ebp - 0xa8]
sub eax, 0x2492a0e7
je 0x10002297
jmp 0x100013fc
mov eax, dword [ebp - 0xa8]
sub eax, 0x24e7337e
je 0x10002642
jmp 0x10001412
mov eax, dword [ebp - 0xa8]
sub eax, 0x2626bf29
je 0x100026a2
jmp 0x10001428
mov eax, dword [ebp - 0xa8]
sub eax, 0x294939a4
je 0x100023d1
jmp 0x1000143e
mov eax, dword [ebp - 0xa8]
sub eax, 0x2a4cef13
je 0x10001bdd
jmp 0x10001454
mov eax, dword [ebp - 0xa8]
sub eax, 0x2ba58b68
je 0x100020ff
jmp 0x1000146a
mov eax, dword [ebp - 0xa8]
sub eax, 0x3555d21f
je 0x10001c42
jmp 0x10001480
mov eax, dword [ebp - 0xa8]
sub eax, 0x3a1266a8
je 0x1000168e
jmp 0x10001496
mov eax, dword [ebp - 0xa8]
sub eax, 0x3b282212
je 0x10001c33
jmp 0x100014ac
mov eax, dword [ebp - 0xa8]
sub eax, 0x3df928f1
je 0x10002025
jmp 0x100014c2
mov eax, dword [ebp - 0xa8]
sub eax, 0x45a2b7bb
je 0x1000231c
jmp 0x100014d8
mov eax, dword [ebp - 0xa8]
sub eax, 0x50436e98
je 0x100019ba
jmp 0x100014ee
mov eax, dword [ebp - 0xa8]
sub eax, 0x5099eb5e
je 0x10002627
jmp 0x10001504
mov eax, dword [ebp - 0xa8]
sub eax, 0x5b3e91b9
je 0x10001bc3
jmp 0x1000151a
mov eax, dword [ebp - 0xa8]
sub eax, 0x5c0591cc
je 0x100024a8
jmp 0x10001530
mov eax, dword [ebp - 0xa8]
sub eax, 0x5e883caf
je 0x100019df
jmp 0x10001546
mov eax, dword [ebp - 0xa8]
sub eax, 0x6070f162
je 0x1000200c
jmp 0x1000155c
mov eax, dword [ebp - 0xa8]
sub eax, 0x6200ed86
je 0x10002684
jmp 0x10001572
mov eax, dword [ebp - 0xa8]
sub eax, 0x6387e6a8
je 0x1000188f
jmp 0x10001588
mov eax, dword [ebp - 0xa8]
sub eax, 0x65552503
je 0x10001d35
jmp 0x1000159e
mov eax, dword [ebp - 0xa8]
sub eax, 0x67bbfeff
je 0x10001b5d
jmp 0x100015b4
mov eax, dword [ebp - 0xa8]
sub eax, 0x7120efc9
je 0x100018bc
jmp 0x100015ca
mov eax, dword [ebp - 0xa8]
sub eax, 0x723b6f3f
je 0x1000190d
jmp 0x100015e0
mov eax, dword [ebp - 0xa8]
sub eax, 0x74643a08
je 0x1000206e
jmp 0x100015f6
mov eax, dword [ebp - 0xa8]
sub eax, 0x78906951
je 0x1000163d
jmp 0x1000160c
mov eax, dword [ebp - 0xa8]
sub eax, 0x7df0cb8e
je 0x10001ce3
jmp 0x10001622
mov eax, dword [ebp - 0xa8]
sub eax, 0x7e352377
je 0x100023b0
jmp 0x10001638
jmp 0x100026ac
mov eax, dword [0x1006eb50]
mov ecx, dword [0x1006eb4c]
mov edx, eax
add edx, 0xb64c9f2e
sub edx, 1
sub edx, 0xb64c9f2e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb794ac31
mov ecx, 0x3a1266a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x8c], eax
mov ecx, dword [0x1006eb50]
mov eax, dword [0x1006eb4c]
mov edx, ecx
add edx, 0xc914f6a9
sub edx, 1
sub edx, 0xc914f6a9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb794ac31
mov ecx, 0xd84061d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov dword [ebp - 0xa0], 0x99e28788
jmp 0x100026ac
mov ecx, dword [0x1006eb50]
mov eax, dword [0x1006eb4c]
mov edx, ecx
sub edx, 0xe3562e8e
sub edx, 1
add edx, 0xe3562e8e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5c0591cc
mov ecx, 0x13c8429e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov eax, dword [ebp - 0xa4]
push eax
mov ecx, esp
mov dword [ebp - 0x88], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x84], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x80], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x7c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x78], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x74], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x70], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x94], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10007f10
add esp, 0xc
mov eax, dword [ebp - 0x94]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
setne al
and al, 1
mov byte [ebp - 0x61], al
mov eax, dword [0x1006eb50]
mov ecx, dword [0x1006eb4c]
mov edx, eax
add edx, 0x9b854d9f
sub edx, 1
sub edx, 0x9b854d9f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5c0591cc
mov ecx, 0x6387e6a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov dl, byte [ebp - 0x61]
mov eax, 0xd15e8d25
mov ecx, 0x7120efc9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov dword [ebp - 0xa0], 0x294939a4
jmp 0x100026ac
mov eax, dword [0x1006eb50]
mov ecx, dword [0x1006eb4c]
mov edx, eax
sub edx, 0x1133a2cc
sub edx, 1
add edx, 0x1133a2cc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x90f4cf80
mov ecx, 0x723b6f3f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x98]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
lea eax, [ebp - 0x18]
mov dword [ebp - 0x60], eax
mov ecx, dword [0x1006eb50]
mov eax, dword [0x1006eb4c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x90f4cf80
mov ecx, 0xa24b85cf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov dword [ebp - 0xa0], 0x50436e98
jmp 0x100026ac
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xa0], 0x5e883caf
jmp 0x100026ac
mov ecx, dword [0x1006eb50]
mov eax, dword [0x1006eb4c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2ce4d68
mov ecx, 0xb1cd243a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x5c]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x55], al
mov ecx, dword [0x1006eb50]
mov eax, dword [0x1006eb4c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2ce4d68
mov ecx, 0xb2d0a401
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov dl, byte [ebp - 0x55]
mov eax, 0xf891d935
mov ecx, 0x67bbfeff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov dword [ebp - 0xa0], 0x294939a4
jmp 0x100026ac
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov dword [ebp - 0xa0], 0x5b3e91b9
jmp 0x100026ac
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xa0], 0x2a4cef13
jmp 0x100026ac
mov edx, dword [ebp - 0x54]
mov eax, 0xffc033d5
mov ecx, 0x3555d21f
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xa0], 0x6b33e2
jmp 0x100026ac
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0x3b282212
jmp 0x100026ac
mov dword [ebp - 0xa0], 0x294939a4
jmp 0x100026ac
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
add eax, 0x3c
mov dword [ebp - 0x48], eax
mov dword [ebp - 0xa0], 0x94ddd653
jmp 0x100026ac
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c]
sub ecx, 0xf93d50aa
add ecx, eax
add ecx, 0xf93d50aa
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov word [eax], 0
mov dword [ebp - 0xa0], 0x7df0cb8e
jmp 0x100026ac
mov dword [ebp - 0xa0], 0xeb536340
jmp 0x100026ac
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xa0], 0x955f2a5c
jmp 0x100026ac
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x39], al
mov dword [ebp - 0xa0], 0x65552503
jmp 0x100026ac
mov dl, byte [ebp - 0x39]
mov eax, 0xedc4e4f8
mov ecx, 0x3916300
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xa0], 0x9123d1ca
jmp 0x100026ac
mov eax, dword [ebp - 0x38]
xor ecx, ecx
sub ecx, 0x18
sub eax, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xa0], 0xf7274fca
jmp 0x100026ac
mov ecx, dword [0x1006eb50]
mov eax, dword [0x1006eb4c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xeb5d9989
mov ecx, 0xa1406896
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100141a0
call fcn.1000a280
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x29], al
mov eax, dword [0x1006eb50]
mov ecx, dword [0x1006eb4c]
mov edx, eax
add edx, 0xdce30d68
sub edx, 1
sub edx, 0xdce30d68
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeb5d9989
mov ecx, 0x19512444
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov dl, byte [ebp - 0x29]
mov eax, 0xc34221ae
mov ecx, 0xc432222c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0
mov dword [ebp - 0xa0], 0x955ee25
jmp 0x100026ac
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x90]
mov edx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xa0], 0xc8654041
jmp 0x100026ac
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
add edx, 0x265b0669
add edx, eax
sub edx, 0x265b0669
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub ecx, eax
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10008070
add esp, 0xc
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x90]
mov esi, dword [eax]
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub esi, 0x3e2b1c19
add esi, eax
add esi, 0x3e2b1c19
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x68]
mov byte [eax], cl
mov dword [ebp - 0xa0], 0xc432222c
jmp 0x100026ac
mov dword [ebp - 0xa0], 0x6070f162
jmp 0x100026ac
mov eax, dword [ebp - 0x74]
mov ax, word [eax]
mov word [ebp - 0x20], ax
mov dword [ebp - 0xa0], 0x3df928f1
jmp 0x100026ac
mov eax, dword [0x1006eb50]
mov ecx, dword [0x1006eb4c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5099eb5e
mov ecx, 0x74643a08
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov ax, word [ebp - 0x20]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x1e], ax
mov ecx, dword [0x1006eb50]
mov eax, dword [0x1006eb4c]
mov edx, ecx
add edx, 0x2a416e98
sub edx, 1
sub edx, 0x2a416e98
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5099eb5e
mov ecx, 0x2ba58b68
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov dword [ebp - 0xa0], 0xbc359b55
jmp 0x100026ac
mov eax, dword [0x1006eb50]
mov ecx, dword [0x1006eb4c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x24e7337e
mov ecx, 0xcf8c2431
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov eax, dword [ebp - 0x74]
mov cx, word [ebp - 0x1e]
mov word [eax], cx
mov ecx, dword [0x1006eb50]
mov eax, dword [0x1006eb4c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x24e7337e
mov ecx, 0xc9c32210
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov dword [ebp - 0xa0], 0xeb536340
jmp 0x100026ac
mov eax, dword [0x1006eb50]
mov ecx, dword [0x1006eb4c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbe065ad4
mov ecx, 0x8c919099
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x1006eb50]
mov ecx, dword [0x1006eb4c]
mov edx, eax
add edx, 0x4ff83e5
sub edx, 1
sub edx, 0x4ff83e5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbe065ad4
mov ecx, 0x2492a0e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov dword [ebp - 0xa0], 0x9461ba40
jmp 0x100026ac
mov ecx, dword [0x1006eb50]
mov eax, dword [0x1006eb4c]
mov edx, ecx
add edx, 0xa3592ced
sub edx, 1
sub edx, 0xa3592ced
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6200ed86
mov ecx, 0x45a2b7bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x1006eb50]
mov eax, dword [0x1006eb4c]
mov edx, ecx
sub edx, 0xf1674fec
sub edx, 1
add edx, 0xf1674fec
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6200ed86
mov ecx, 0xd4c1c824
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov dword [ebp - 0xa0], 0x7e352377
jmp 0x100026ac
mov eax, dword [ebp - 0x98]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0x294939a4
jmp 0x100026ac
mov eax, dword [0x1006eb50]
mov ecx, dword [0x1006eb4c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2626bf29
mov ecx, 0xfc6ec2c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov ecx, dword [0x1006eb50]
mov eax, dword [0x1006eb4c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2626bf29
mov ecx, 0xb828300f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x100026ac
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.100072f0
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0xa0], 0x3a1266a8
jmp 0x100026ac
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x94], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x18]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10007f10
add esp, 0xc
mov eax, dword [ebp - 0x94]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa0], 0x13c8429e
jmp 0x100026ac
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x98]
lea eax, [ebp - 0x18]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov dword [ebp - 0xa0], 0x723b6f3f
jmp 0x100026ac
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x5c]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xa0], 0xb1cd243a
jmp 0x100026ac
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
sub ecx, 0x1ee2c7fc
add ecx, eax
add ecx, 0x1ee2c7fc
mov eax, dword [ebp - 0x74]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100141a0
call fcn.1000a280
add esp, 8
mov dword [ebp - 0xa0], 0xa1406896
jmp 0x100026ac
mov ax, word [ebp - 0x20]
mov ax, word [ebp - 0x20]
mov ax, word [ebp - 0x20]
mov dword [ebp - 0xa0], 0x74643a08
jmp 0x100026ac
mov eax, dword [ebp - 0x74]
mov cx, word [ebp - 0x1e]
mov word [eax], cx
mov dword [ebp - 0xa0], 0xcf8c2431
jmp 0x100026ac
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xa0], 0x8c919099
jmp 0x100026ac
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0x45a2b7bb
jmp 0x100026ac
mov dword [ebp - 0xa0], 0xfc6ec2c3
jmp 0x100010c8