Function at 0x1000d850
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xa0
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x10090080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
mov edx, ecx
sub edx, 0x181b76f5
sub edx, 1
add edx, 0x181b76f5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x9a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x99], al
mov dword [ebp - 0xa0], 0x9ba64f44
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
sub eax, 0x8002d04c
je 0x1000eff0
jmp 0x1000d8d3
mov eax, dword [ebp - 0xa8]
sub eax, 0x8f1fd7cb
je 0x1000ef17
jmp 0x1000d8e9
mov eax, dword [ebp - 0xa8]
sub eax, 0x911a7b5b
je 0x1000ee9a
jmp 0x1000d8ff
mov eax, dword [ebp - 0xa8]
sub eax, 0x996df98e
je 0x1000e23f
jmp 0x1000d915
mov eax, dword [ebp - 0xa8]
sub eax, 0x9ba64f44
je 0x1000df08
jmp 0x1000d92b
mov eax, dword [ebp - 0xa8]
sub eax, 0x9bdcd007
je 0x1000e623
jmp 0x1000d941
mov eax, dword [ebp - 0xa8]
sub eax, 0xa11c4547
je 0x1000e855
jmp 0x1000d957
mov eax, dword [ebp - 0xa8]
sub eax, 0xa2fea75d
je 0x1000eddb
jmp 0x1000d96d
mov eax, dword [ebp - 0xa8]
sub eax, 0xa44f0a11
je 0x1000e114
jmp 0x1000d983
mov eax, dword [ebp - 0xa8]
sub eax, 0xa77597d7
je 0x1000f125
jmp 0x1000d999
mov eax, dword [ebp - 0xa8]
sub eax, 0xace32fd3
je 0x1000e6c8
jmp 0x1000d9af
mov eax, dword [ebp - 0xa8]
sub eax, 0xb28648c0
je 0x1000ed56
jmp 0x1000d9c5
mov eax, dword [ebp - 0xa8]
sub eax, 0xb2fe0f31
je 0x1000e614
jmp 0x1000d9db
mov eax, dword [ebp - 0xa8]
sub eax, 0xb97bdb3c
je 0x1000e580
jmp 0x1000d9f1
mov eax, dword [ebp - 0xa8]
sub eax, 0xbc322119
je 0x1000f146
jmp 0x1000da07
mov eax, dword [ebp - 0xa8]
sub eax, 0xbe4cc29e
je 0x1000efff
jmp 0x1000da1d
mov eax, dword [ebp - 0xa8]
sub eax, 0xbf8fae1a
je 0x1000e719
jmp 0x1000da33
mov eax, dword [ebp - 0xa8]
sub eax, 0xbff1a990
je 0x1000e291
jmp 0x1000da49
mov eax, dword [ebp - 0xa8]
sub eax, 0xc00daf09
je 0x1000e69e
jmp 0x1000da5f
mov eax, dword [ebp - 0xa8]
sub eax, 0xc4611622
je 0x1000f134
jmp 0x1000da75
mov eax, dword [ebp - 0xa8]
sub eax, 0xc8f2f7a3
je 0x1000e782
jmp 0x1000da8b
mov eax, dword [ebp - 0xa8]
sub eax, 0xca93c932
je 0x1000f02c
jmp 0x1000daa1
mov eax, dword [ebp - 0xa8]
sub eax, 0xcc9720c8
je 0x1000e39c
jmp 0x1000dab7
mov eax, dword [ebp - 0xa8]
sub eax, 0xcfc35bb3
je 0x1000f085
jmp 0x1000dacd
mov eax, dword [ebp - 0xa8]
sub eax, 0xd06e6ae7
je 0x1000e773
jmp 0x1000dae3
mov eax, dword [ebp - 0xa8]
sub eax, 0xd1fa99c9
je 0x1000eea9
jmp 0x1000daf9
mov eax, dword [ebp - 0xa8]
sub eax, 0xd2635e9f
je 0x1000ea90
jmp 0x1000db0f
mov eax, dword [ebp - 0xa8]
sub eax, 0xd9f1525b
je 0x1000efad
jmp 0x1000db25
mov eax, dword [ebp - 0xa8]
sub eax, 0xda60aa41
je 0x1000ee24
jmp 0x1000db3b
mov eax, dword [ebp - 0xa8]
sub eax, 0xdb500bdf
je 0x1000e512
jmp 0x1000db51
mov eax, dword [ebp - 0xa8]
sub eax, 0xe610c931
je 0x1000e4dd
jmp 0x1000db67
mov eax, dword [ebp - 0xa8]
sub eax, 0xe8c79abd
je 0x1000ecfe
jmp 0x1000db7d
mov eax, dword [ebp - 0xa8]
sub eax, 0xea3370f9
je 0x1000e91c
jmp 0x1000db93
mov eax, dword [ebp - 0xa8]
sub eax, 0xecdaf4bc
je 0x1000f0c7
jmp 0x1000dba9
mov eax, dword [ebp - 0xa8]
sub eax, 0xf8fb05e8
je 0x1000e093
jmp 0x1000dbbf
mov eax, dword [ebp - 0xa8]
sub eax, 0xfbdce91d
je 0x1000f0fd
jmp 0x1000dbd5
mov eax, dword [ebp - 0xa8]
sub eax, 0xfd710f9d
je 0x1000e7f8
jmp 0x1000dbeb
mov eax, dword [ebp - 0xa8]
sub eax, 0xf687b3c
je 0x1000e679
jmp 0x1000dc01
mov eax, dword [ebp - 0xa8]
sub eax, 0x1130d1df
je 0x1000ec5a
jmp 0x1000dc17
mov eax, dword [ebp - 0xa8]
sub eax, 0x1a3cd380
je 0x1000e8c7
jmp 0x1000dc2d
mov eax, dword [ebp - 0xa8]
sub eax, 0x1a5d203e
je 0x1000e25d
jmp 0x1000dc43
mov eax, dword [ebp - 0xa8]
sub eax, 0x1ab98212
je 0x1000f10c
jmp 0x1000dc59
mov eax, dword [ebp - 0xa8]
sub eax, 0x1b82d726
je 0x1000e93a
jmp 0x1000dc6f
mov eax, dword [ebp - 0xa8]
sub eax, 0x1c23208f
je 0x1000ea2b
jmp 0x1000dc85
mov eax, dword [ebp - 0xa8]
sub eax, 0x234a4977
je 0x1000e864
jmp 0x1000dc9b
mov eax, dword [ebp - 0xa8]
sub eax, 0x27c2e16e
je 0x1000e4fb
jmp 0x1000dcb1
mov eax, dword [ebp - 0xa8]
sub eax, 0x2d7b056d
je 0x1000e605
jmp 0x1000dcc7
mov eax, dword [ebp - 0xa8]
sub eax, 0x2da1cdb9
je 0x1000f097
jmp 0x1000dcdd
mov eax, dword [ebp - 0xa8]
sub eax, 0x317b6545
je 0x1000f0b5
jmp 0x1000dcf3
mov eax, dword [ebp - 0xa8]
sub eax, 0x347644bd
je 0x1000efbc
jmp 0x1000dd09
mov eax, dword [ebp - 0xa8]
sub eax, 0x3c18c419
je 0x1000df5c
jmp 0x1000dd1f
mov eax, dword [ebp - 0xa8]
sub eax, 0x3d0ff49a
je 0x1000e9b0
jmp 0x1000dd35
mov eax, dword [ebp - 0xa8]
sub eax, 0x42ebac4c
je 0x1000f0d9
jmp 0x1000dd4b
mov eax, dword [ebp - 0xa8]
sub eax, 0x437e04a1
je 0x1000e2eb
jmp 0x1000dd61
mov eax, dword [ebp - 0xa8]
sub eax, 0x46531849
je 0x1000edcc
jmp 0x1000dd77
mov eax, dword [ebp - 0xa8]
sub eax, 0x4844d1be
je 0x1000e123
jmp 0x1000dd8d
mov eax, dword [ebp - 0xa8]
sub eax, 0x4aa9e18e
je 0x1000e3eb
jmp 0x1000dda3
mov eax, dword [ebp - 0xa8]
sub eax, 0x4c25a176
je 0x1000e376
jmp 0x1000ddb9
mov eax, dword [ebp - 0xa8]
sub eax, 0x53ad982a
je 0x1000e884
jmp 0x1000ddcf
mov eax, dword [ebp - 0xa8]
sub eax, 0x553e225d
je 0x1000eb3d
jmp 0x1000dde5
mov eax, dword [ebp - 0xa8]
sub eax, 0x57028c62
je 0x1000ea3a
jmp 0x1000ddfb
mov eax, dword [ebp - 0xa8]
sub eax, 0x59777e71
je 0x1000ed0d
jmp 0x1000de11
mov eax, dword [ebp - 0xa8]
sub eax, 0x5b34b665
je 0x1000e01d
jmp 0x1000de27
mov eax, dword [ebp - 0xa8]
sub eax, 0x5d531aba
je 0x1000ec38
jmp 0x1000de3d
mov eax, dword [ebp - 0xa8]
sub eax, 0x60859247
je 0x1000e199
mov bl, byte [ebp - 0x9a]
mov dh, byte [ebp - 0x99]
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8002d04c
mov ecx, 0x3c18c419
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
push eax
mov eax, esp
mov dword [ebp - 0x94], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
mov eax, dword [0x10091714]
mov ecx, dword [0x10091710]
mov edx, eax
sub edx, 0x5b0be435
sub edx, 1
add edx, 0x5b0be435
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8002d04c
mov ecx, 0x62748f24
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
mov edx, ecx
add edx, 0xf2c4ad38
sub edx, 1
sub edx, 0xf2c4ad38
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbe4cc29e
mov ecx, 0xf8fb05e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov ecx, dword [ebp - 0xa4]
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x98]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
mov eax, dword [0x10091714]
mov ecx, dword [0x10091710]
mov edx, eax
add edx, 0x801a932b
sub edx, 1
sub edx, 0x801a932b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbe4cc29e
mov ecx, 0xa44f0a11
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dword [ebp - 0xa0], 0x4844d1be
jmp 0x1000f170
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
mov edx, ecx
sub edx, 0xfb207e13
sub edx, 1
add edx, 0xfb207e13
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xca93c932
mov ecx, 0x60859247
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dl, byte [ebp - 0x59]
mov eax, 0x1a5d203e
mov ecx, 0x64607be7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dword [ebp - 0xa0], 0x6a8bc335
jmp 0x1000f170
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x54]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0xa0], 0x437e04a1
jmp 0x1000f170
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x4c]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x84]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov edx, dword [ebp - 0x80]
mov esi, 0xffffffff
mov eax, 0x78be3dd3
mov ecx, 0x4c25a176
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dword [ebp - 0xa0], 0x6a8bc335
jmp 0x1000f170
mov eax, dword [ebp - 0x48]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov dword [ebp - 0xa0], 0x4aa9e18e
jmp 0x1000f170
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcfc35bb3
mov ecx, 0x7ccdc454
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dl, byte [ebp - 0x41]
mov eax, 0x27c2e16e
mov ecx, 0x9bdcd007
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xa0], 0xdb500bdf
jmp 0x1000f170
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2da1cdb9
mov ecx, 0xb97bdb3c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov eax, dword [ebp - 0x40]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
mov edx, ecx
sub edx, 0xc28cd66e
sub edx, 1
add edx, 0xc28cd66e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2da1cdb9
mov ecx, 0x2d7b056d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dword [ebp - 0xa0], 0xb2fe0f31
jmp 0x1000f170
mov dword [ebp - 0xa0], 0x6a8bc335
jmp 0x1000f170
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov dword [ebp - 0xa0], 0xf687b3c
jmp 0x1000f170
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
add eax, 0x3c
mov dword [ebp - 0x38], eax
mov dword [ebp - 0xa0], 0xc00daf09
jmp 0x1000f170
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x3c]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov word [eax], 0
mov dword [ebp - 0xa0], 0xace32fd3
jmp 0x1000f170
mov eax, dword [0x10091714]
mov ecx, dword [0x10091710]
mov edx, eax
sub edx, 0x77a4b313
sub edx, 1
add edx, 0x77a4b313
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x317b6545
mov ecx, 0xbf8fae1a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov eax, dword [ebp - 0x6c]
movzx eax, word [eax]
mov dword [ebp - 0x34], eax
mov eax, dword [0x10091714]
mov ecx, dword [0x10091710]
mov edx, eax
add edx, 0xabf36eb1
sub edx, 1
sub edx, 0xabf36eb1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x317b6545
mov ecx, 0xd06e6ae7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dword [ebp - 0xa0], 0xc8f2f7a3
jmp 0x1000f170
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
mov edx, ecx
sub edx, 0x7926da88
sub edx, 1
add edx, 0x7926da88
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xecdaf4bc
mov ecx, 0xfd710f9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov dword [ebp - 0x30], eax
mov eax, dword [0x10091714]
mov ecx, dword [0x10091710]
mov edx, eax
sub edx, 0xfcee67e7
sub edx, 1
add edx, 0xfcee67e7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xecdaf4bc
mov ecx, 0xa11c4547
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dword [ebp - 0xa0], 0x234a4977
jmp 0x1000f170
mov edx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
mov eax, 0xa2fea75d
mov ecx, 0x53ad982a
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
add eax, 0x26b04d44
add eax, 0x18
sub eax, 0x26b04d44
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
sub eax, 0x2c63df8
add eax, ecx
add eax, 0x2c63df8
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x6c]
mov ax, word [eax]
mov word [ebp - 0x28], ax
mov dword [ebp - 0xa0], 0x1a3cd380
jmp 0x1000f170
mov ax, word [ebp - 0x28]
movzx eax, ax
imul eax, eax, 0x28
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x1446df2d
add ecx, eax
add ecx, 0x1446df2d
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1003cecd
call fcn.10032420
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x25], al
mov dword [ebp - 0xa0], 0xea3370f9
jmp 0x1000f170
mov dl, byte [ebp - 0x25]
mov eax, 0x1b82d726
mov ecx, 0x553e225d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
mov edx, ecx
add edx, 0xc81917b2
sub edx, 1
sub edx, 0xc81917b2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x42ebac4c
mov ecx, 0x3d0ff49a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov eax, dword [ebp - 0x64]
mov dword [eax], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x10091714]
mov ecx, dword [0x10091710]
mov edx, eax
add edx, 0x85549c32
sub edx, 1
sub edx, 0x85549c32
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x42ebac4c
mov ecx, 0x1c23208f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dword [ebp - 0xa0], 0x57028c62
jmp 0x1000f170
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
xor eax, eax
sub eax, ecx
sub edx, eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x24]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xa0], 0xd2635e9f
jmp 0x1000f170
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1002ec10
add esp, 0xc
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x88]
mov esi, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub esi, 0x41e0f4db
add esi, eax
add esi, 0x41e0f4db
mov eax, dword [ebp - 0x64]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov dword [ebp - 0xa0], 0x553e225d
jmp 0x1000f170
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
mov edx, ecx
add edx, 0x8275a105
sub edx, 1
sub edx, 0x8275a105
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfbdce91d
mov ecx, 0x6d7201fc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov eax, dword [ebp - 0x6c]
mov ax, word [eax]
xor ecx, ecx
sub cx, 1
sub ax, cx
mov word [ebp - 0x12], ax
mov dword [ebp - 0xa0], 0x1130d1df
jmp 0x1000f170
mov eax, dword [0x10091714]
mov ecx, dword [0x10091710]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ab98212
mov ecx, 0x7b16c6fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dword [ebp - 0xa0], 0x59777e71
jmp 0x1000f170
mov eax, dword [0x10091714]
mov ecx, dword [0x10091710]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa77597d7
mov ecx, 0xb28648c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
mov edx, ecx
sub edx, 0x691f29b8
sub edx, 1
add edx, 0x691f29b8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa77597d7
mov ecx, 0x46531849
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dword [ebp - 0xa0], 0xace32fd3
jmp 0x1000f170
mov eax, dword [0x10091714]
mov ecx, dword [0x10091710]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc4611622
mov ecx, 0xda60aa41
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc4611622
mov ecx, 0x911a7b5b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dword [ebp - 0xa0], 0xd1fa99c9
jmp 0x1000f170
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbc322119
mov ecx, 0x8f1fd7cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov eax, dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10091714]
mov eax, dword [0x10091710]
mov edx, ecx
add edx, 0xc6f1e649
sub edx, 1
sub edx, 0xc6f1e649
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbc322119
mov ecx, 0xd9f1525b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x1000f170
mov dword [ebp - 0xa0], 0x347644bd
jmp 0x1000f170
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0x6a8bc335
jmp 0x1000f170
mov dword [ebp - 0xa0], 0x3c18c419
jmp 0x1000f170
mov ecx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x98]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
mov dword [ebp - 0xa0], 0xf8fb05e8
jmp 0x1000f170
mov eax, dword [ebp - 0x90]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1002eab0
add esp, 0xc
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xa0], 0x60859247
jmp 0x1000f170
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xa0], 0x7ccdc454
jmp 0x1000f170
mov eax, dword [ebp - 0x40]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xb97bdb3c
jmp 0x1000f170
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa0], 0xbf8fae1a
jmp 0x1000f170
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xa0], 0xfd710f9d
jmp 0x1000f170
mov eax, dword [ebp - 0x64]
mov dword [eax], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xa0], 0x3d0ff49a
jmp 0x1000f170
mov dword [ebp - 0xa0], 0x6d7201fc
jmp 0x1000f170
mov eax, dword [ebp - 0x6c]
mov cx, word [ebp - 0x12]
mov word [eax], cx
mov dword [ebp - 0xa0], 0x7b16c6fd
jmp 0x1000f170
mov dword [ebp - 0xa0], 0xb28648c0
jmp 0x1000f170
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xa0], 0xda60aa41
jmp 0x1000f170
mov eax, dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0x8f1fd7cb
jmp 0x1000d8b7