Function at 0x100011d0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x198
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1a0], eax
mov eax, dword [0x10096600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x19c], 0x77d2af1a
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a4], eax
sub eax, 0x829bceb9
je 0x100025ea
jmp 0x10001215
mov eax, dword [ebp - 0x1a4]
sub eax, 0x858e14a6
je 0x10001ac7
jmp 0x1000122b
mov eax, dword [ebp - 0x1a4]
sub eax, 0x892ddded
je 0x10002439
jmp 0x10001241
mov eax, dword [ebp - 0x1a4]
sub eax, 0x8a9537b3
je 0x10001ce6
jmp 0x10001257
mov eax, dword [ebp - 0x1a4]
sub eax, 0x8ac02f94
je 0x10001e60
jmp 0x1000126d
mov eax, dword [ebp - 0x1a4]
sub eax, 0x8cc864ef
je 0x1000182a
jmp 0x10001283
mov eax, dword [ebp - 0x1a4]
sub eax, 0x8dac1bf8
je 0x10002448
jmp 0x10001299
mov eax, dword [ebp - 0x1a4]
sub eax, 0x8f10fccb
je 0x100017bc
jmp 0x100012af
mov eax, dword [ebp - 0x1a4]
sub eax, 0x9f6e1802
je 0x10001e92
jmp 0x100012c5
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa0141b56
je 0x10001b7f
jmp 0x100012db
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa9d27a10
je 0x100018e5
jmp 0x100012f1
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa9f5abac
je 0x10001f87
jmp 0x10001307
mov eax, dword [ebp - 0x1a4]
sub eax, 0xaa85b150
je 0x10001b8e
jmp 0x1000131d
mov eax, dword [ebp - 0x1a4]
sub eax, 0xb8b5b1c0
je 0x10001bdc
jmp 0x10001333
mov eax, dword [ebp - 0x1a4]
sub eax, 0xba331429
je 0x10001a38
jmp 0x10001349
mov eax, dword [ebp - 0x1a4]
sub eax, 0xbf64253b
je 0x10001a67
jmp 0x1000135f
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc056b178
je 0x10001c61
jmp 0x10001375
mov eax, dword [ebp - 0x1a4]
sub eax, 0xc8e591b0
je 0x100017ad
jmp 0x1000138b
mov eax, dword [ebp - 0x1a4]
sub eax, 0xcceb468d
je 0x100025c3
jmp 0x100013a1
mov eax, dword [ebp - 0x1a4]
sub eax, 0xcd54f115
je 0x10002564
jmp 0x100013b7
mov eax, dword [ebp - 0x1a4]
sub eax, 0xd7d070e8
je 0x10001bbb
jmp 0x100013cd
mov eax, dword [ebp - 0x1a4]
sub eax, 0xd913a312
je 0x10001f11
jmp 0x100013e3
mov eax, dword [ebp - 0x1a4]
sub eax, 0xdae61a33
je 0x10001c18
jmp 0x100013f9
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe09f7a1d
je 0x100024a2
jmp 0x1000140f
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe9d73b43
je 0x10001e6f
jmp 0x10001425
mov eax, dword [ebp - 0x1a4]
sub eax, 0xeadf9c3a
je 0x10001e08
jmp 0x1000143b
mov eax, dword [ebp - 0x1a4]
sub eax, 0xefb3731b
je 0x100020a8
jmp 0x10001451
mov eax, dword [ebp - 0x1a4]
sub eax, 0xf496fd03
je 0x10002588
jmp 0x10001467
mov eax, dword [ebp - 0x1a4]
sub eax, 0xfe240871
je 0x10001a29
jmp 0x1000147d
mov eax, dword [ebp - 0x1a4]
sub eax, 0x493c474
je 0x10002519
jmp 0x10001493
mov eax, dword [ebp - 0x1a4]
sub eax, 0x871e0f0
je 0x10002148
jmp 0x100014a9
mov eax, dword [ebp - 0x1a4]
sub eax, 0xa87d927
je 0x10001a76
jmp 0x100014bf
mov eax, dword [ebp - 0x1a4]
sub eax, 0xb322baa
je 0x10001d5b
jmp 0x100014d5
mov eax, dword [ebp - 0x1a4]
sub eax, 0xe6f0745
je 0x10001945
jmp 0x100014eb
mov eax, dword [ebp - 0x1a4]
sub eax, 0x101b1465
je 0x10001d79
jmp 0x10001501
mov eax, dword [ebp - 0x1a4]
sub eax, 0x18657095
je 0x10001ebb
jmp 0x10001517
mov eax, dword [ebp - 0x1a4]
sub eax, 0x2119653e
je 0x100022d2
jmp 0x1000152d
mov eax, dword [ebp - 0x1a4]
sub eax, 0x23c9e81a
je 0x100022e1
jmp 0x10001543
mov eax, dword [ebp - 0x1a4]
sub eax, 0x2839fb31
je 0x10002573
jmp 0x10001559
mov eax, dword [ebp - 0x1a4]
sub eax, 0x28b416d0
je 0x1000202f
jmp 0x1000156f
mov eax, dword [ebp - 0x1a4]
sub eax, 0x2b46d286
je 0x100022a0
jmp 0x10001585
mov eax, dword [ebp - 0x1a4]
sub eax, 0x2d5ea585
je 0x10002281
jmp 0x1000159b
mov eax, dword [ebp - 0x1a4]
sub eax, 0x39dcf99e
je 0x10001db7
jmp 0x100015b1
mov eax, dword [ebp - 0x1a4]
sub eax, 0x44a08957
je 0x10002329
jmp 0x100015c7
mov eax, dword [ebp - 0x1a4]
sub eax, 0x45424aff
je 0x10002255
jmp 0x100015dd
mov eax, dword [ebp - 0x1a4]
sub eax, 0x45807676
je 0x1000203e
jmp 0x100015f3
mov eax, dword [ebp - 0x1a4]
sub eax, 0x4723e27f
je 0x100022fc
jmp 0x10001609
mov eax, dword [ebp - 0x1a4]
sub eax, 0x47f17a82
je 0x10002272
jmp 0x1000161f
mov eax, dword [ebp - 0x1a4]
sub eax, 0x4c637683
je 0x10002139
jmp 0x10001635
mov eax, dword [ebp - 0x1a4]
sub eax, 0x52625fff
je 0x1000170b
jmp 0x1000164b
mov eax, dword [ebp - 0x1a4]
sub eax, 0x54d0e9f5
je 0x1000205f
jmp 0x10001661
mov eax, dword [ebp - 0x1a4]
sub eax, 0x6e1c3bfc
je 0x10001cd7
jmp 0x10001677
mov eax, dword [ebp - 0x1a4]
sub eax, 0x6e5e9e6d
je 0x10001bf7
jmp 0x1000168d
mov eax, dword [ebp - 0x1a4]
sub eax, 0x70a412b0
je 0x100018f4
jmp 0x100016a3
mov eax, dword [ebp - 0x1a4]
sub eax, 0x77d2af1a
je 0x100016ea
jmp 0x100016b9
mov eax, dword [ebp - 0x1a4]
sub eax, 0x7dfcce38
je 0x1000239f
jmp 0x100016cf
mov eax, dword [ebp - 0x1a4]
sub eax, 0x7fb61ba3
je 0x1000245a
jmp 0x100016e5
jmp 0x10002618
push eax
mov eax, esp
mov dword [ebp - 0x180], eax
push eax
mov eax, esp
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x19c], 0x52625fff
jmp 0x10002618
mov eax, dword [ebp - 0x1a0]
push eax
mov ecx, esp
mov dword [ebp - 0x178], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x174], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x170], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x16c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x184], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x120]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000d700
add esp, 0xc
mov eax, dword [ebp - 0x184]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x18c], eax
mov eax, 0xc8e591b0
mov ecx, 0x8f10fccb
cmp dword [ebp - 0x18c], 0
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov dword [ebp - 0x19c], 0x8dac1bf8
jmp 0x10002618
mov ecx, dword [0x10097938]
mov eax, dword [0x10097934]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7fb61ba3
mov ecx, 0x8cc864ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x188]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x190], eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0x164], eax
mov ecx, dword [0x10097938]
mov eax, dword [0x10097934]
mov edx, ecx
add edx, 0xbd39127e
sub edx, 1
sub edx, 0xbd39127e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7fb61ba3
mov ecx, 0xa9d27a10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov dword [ebp - 0x19c], 0x70a412b0
jmp 0x10002618
mov eax, dword [0x10097938]
mov ecx, dword [0x10097934]
mov edx, eax
add edx, 0x4cd74dc3
sub edx, 1
sub edx, 0x4cd74dc3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe09f7a1d
mov ecx, 0xe6f0745
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x164]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x160], eax
mov ecx, dword [0x10097938]
mov eax, dword [0x10097934]
mov edx, ecx
add edx, 0xfc11728e
sub edx, 1
sub edx, 0xfc11728e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe09f7a1d
mov ecx, 0xfe240871
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov dword [ebp - 0x19c], 0xba331429
jmp 0x10002618
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x194], eax
mov edx, 0xffffffff
mov eax, 0xa87d927
mov ecx, 0xbf64253b
cmp dword [ebp - 0x194], edx
cmove eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov dword [ebp - 0x19c], 0x8dac1bf8
jmp 0x10002618
mov eax, dword [0x10097938]
mov ecx, dword [0x10097934]
mov edx, eax
add edx, 0x8371a515
sub edx, 1
sub edx, 0x8371a515
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x493c474
mov ecx, 0x858e14a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov eax, dword [ebp - 0x194]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x15c], eax
mov ecx, dword [0x10097938]
mov eax, dword [0x10097934]
mov edx, ecx
sub edx, 0x6786dc9f
sub edx, 1
add edx, 0x6786dc9f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x493c474
mov ecx, 0xa0141b56
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov dword [ebp - 0x19c], 0xaa85b150
jmp 0x10002618
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0
setne al
and al, 1
mov byte [ebp - 0x155], al
mov dword [ebp - 0x19c], 0xd7d070e8
jmp 0x10002618
mov dl, byte [ebp - 0x155]
mov eax, 0xb8b5b1c0
mov ecx, 0x8a9537b3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x19c], 0x6e5e9e6d
jmp 0x10002618
mov eax, dword [ebp - 0x154]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x19c], 0xdae61a33
jmp 0x10002618
mov eax, dword [0x10097938]
mov ecx, dword [0x10097934]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcd54f115
mov ecx, 0xc056b178
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov ecx, dword [0x10097938]
mov eax, dword [0x10097934]
mov edx, ecx
add edx, 0x7e7a649c
sub edx, 1
sub edx, 0x7e7a649c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcd54f115
mov ecx, 0x6e1c3bfc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov dword [ebp - 0x19c], 0x8dac1bf8
jmp 0x10002618
mov eax, dword [ebp - 0x198]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x180]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x17c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x19c], 0xb322baa
jmp 0x10002618
mov eax, dword [ebp - 0x14c]
add eax, 0x3c
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x19c], 0x101b1465
jmp 0x10002618
mov eax, dword [ebp - 0x148]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x150]
add ecx, 0xd1ce40b8
add ecx, eax
sub ecx, 0xd1ce40b8
mov eax, dword [ebp - 0x178]
mov dword [eax], ecx
mov eax, dword [ebp - 0x174]
mov word [eax], 0
mov dword [ebp - 0x19c], 0x39dcf99e
jmp 0x10002618
mov eax, dword [0x10097938]
mov ecx, dword [0x10097934]
mov edx, eax
add edx, 0x1beddaa3
sub edx, 1
sub edx, 0x1beddaa3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2839fb31
mov ecx, 0xeadf9c3a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov eax, dword [ebp - 0x174]
movzx eax, word [eax]
mov dword [ebp - 0x144], eax
mov eax, dword [0x10097938]
mov ecx, dword [0x10097934]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2839fb31
mov ecx, 0x8ac02f94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov dword [ebp - 0x19c], 0xe9d73b43
jmp 0x10002618
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
add eax, 4
add eax, 2
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x19c], 0x9f6e1802
jmp 0x10002618
mov eax, dword [ebp - 0x140]
movzx esi, word [eax]
mov edx, dword [ebp - 0x144]
mov eax, 0x23c9e81a
mov ecx, 0x18657095
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
sub eax, 0x14bb9c22
add eax, 0x18
add eax, 0x14bb9c22
mov ecx, dword [ebp - 0x178]
mov ecx, dword [ecx]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x174]
movzx ecx, word [ecx]
imul edx, ecx, 0x28
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x19c], 0xd913a312
jmp 0x10002618
mov ecx, dword [0x10097938]
mov eax, dword [0x10097934]
mov edx, ecx
add edx, 0x5a3af256
sub edx, 1
sub edx, 0x5a3af256
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf496fd03
mov ecx, 0xa9f5abac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x13c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100193b0
call fcn.1000fa70
add esp, 8
mov dword [ebp - 0x138], eax
mov ecx, dword [0x10097938]
mov eax, dword [0x10097934]
mov edx, ecx
add edx, 0x18b1c7fa
sub edx, 1
sub edx, 0x18b1c7fa
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf496fd03
mov ecx, 0x28b416d0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov dword [ebp - 0x19c], 0x45807676
jmp 0x10002618
mov edx, dword [ebp - 0x138]
mov eax, 0x54d0e9f5
mov ecx, 0x47f17a82
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov eax, dword [0x10097938]
mov ecx, dword [0x10097934]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcceb468d
mov ecx, 0xefb3731b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov eax, dword [ebp - 0x16c]
mov dword [eax], 0
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x170]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
sub eax, 0xf6bb01f6
add eax, ecx
add eax, 0xf6bb01f6
mov dword [ebp - 0x130], eax
mov eax, dword [0x10097938]
mov ecx, dword [0x10097934]
mov edx, eax
sub edx, 0xc0c5404e
sub edx, 1
add edx, 0xc0c5404e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcceb468d
mov ecx, 0x4c637683
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov dword [ebp - 0x19c], 0x871e0f0
jmp 0x10002618
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x130]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x168]
mov byte [eax], cl
mov ecx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, esi
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000d860
add esp, 0xc
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x190]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
xor esi, esi
sub esi, edi
add eax, esi
xor esi, esi
sub esi, eax
mov eax, dword [ebp - 0x16c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x12b], al
mov dword [ebp - 0x19c], 0x45424aff
jmp 0x10002618
mov eax, dword [ebp - 0x168]
mov cl, byte [ebp - 0x12b]
mov byte [eax], cl
mov dword [ebp - 0x19c], 0x47f17a82
jmp 0x10002618
mov dword [ebp - 0x19c], 0x2d5ea585
jmp 0x10002618
mov eax, dword [ebp - 0x174]
mov ax, word [eax]
mov word [ebp - 0x12a], ax
mov dword [ebp - 0x19c], 0x2b46d286
jmp 0x10002618
mov cx, word [ebp - 0x12a]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x174]
mov word [eax], cx
mov dword [ebp - 0x19c], 0x2119653e
jmp 0x10002618
mov dword [ebp - 0x19c], 0x39dcf99e
jmp 0x10002618
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x19c], 0x4723e27f
jmp 0x10002618
mov eax, dword [ebp - 0x128]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x19c], 0x44a08957
jmp 0x10002618
mov ecx, dword [0x10097938]
mov eax, dword [0x10097934]
mov edx, ecx
add edx, 0x8bb83f01
sub edx, 1
sub edx, 0x8bb83f01
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x829bceb9
mov ecx, 0x7dfcce38
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x188]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10097938]
mov eax, dword [0x10097934]
mov edx, ecx
sub edx, 0x3b2e5762
sub edx, 1
add edx, 0x3b2e5762
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x829bceb9
mov ecx, 0x892ddded
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x10002618
mov dword [ebp - 0x19c], 0x8dac1bf8
jmp 0x10002618
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000cb00
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x188]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x19c], 0x8cc864ef
jmp 0x10002618
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x164]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x19c], 0xe6f0745
jmp 0x10002618
mov eax, dword [ebp - 0x194]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x19c], 0x858e14a6
jmp 0x10002618
mov dword [ebp - 0x19c], 0xc056b178
jmp 0x10002618
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x19c], 0xeadf9c3a
jmp 0x10002618
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x13c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x170]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100193b0
call fcn.1000fa70
add esp, 8
mov dword [ebp - 0x19c], 0xa9f5abac
jmp 0x10002618
mov eax, dword [ebp - 0x16c]
mov dword [eax], 0
mov eax, dword [ebp - 0x170]
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x19c], 0xefb3731b
jmp 0x10002618
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x188]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x19c], 0x7dfcce38
jmp 0x100011f9