Function at 0x1000dbb0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x190
mov eax, dword [ebp + 8]
mov dword [ebp - 0x194], eax
mov eax, dword [0x10098080]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x190], 0xbe449241
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
sub eax, 0x835054fc
je 0x1000e4e9
jmp 0x1000dbf4
mov eax, dword [ebp - 0x198]
sub eax, 0x83d94a8e
je 0x1000e8e5
jmp 0x1000dc0a
mov eax, dword [ebp - 0x198]
sub eax, 0x870d2f23
je 0x1000ec5c
jmp 0x1000dc20
mov eax, dword [ebp - 0x198]
sub eax, 0x89433527
je 0x1000e9bc
jmp 0x1000dc36
mov eax, dword [ebp - 0x198]
sub eax, 0x8b50d5d8
je 0x1000e5bc
jmp 0x1000dc4c
mov eax, dword [ebp - 0x198]
sub eax, 0x92764e29
je 0x1000e96d
jmp 0x1000dc62
mov eax, dword [ebp - 0x198]
sub eax, 0x92a02037
je 0x1000e6a8
jmp 0x1000dc78
mov eax, dword [ebp - 0x198]
sub eax, 0x944b7c9e
je 0x1000e5ad
jmp 0x1000dc8e
mov eax, dword [ebp - 0x198]
sub eax, 0x94d8e85b
je 0x1000e6b7
jmp 0x1000dca4
mov eax, dword [ebp - 0x198]
sub eax, 0x97aef7f7
je 0x1000e97c
jmp 0x1000dcba
mov eax, dword [ebp - 0x198]
sub eax, 0x9b4271ea
je 0x1000e7ce
jmp 0x1000dcd0
mov eax, dword [ebp - 0x198]
sub eax, 0x9d42943e
je 0x1000f087
jmp 0x1000dce6
mov eax, dword [ebp - 0x198]
sub eax, 0xa2d41ac5
je 0x1000f362
jmp 0x1000dcfc
mov eax, dword [ebp - 0x198]
sub eax, 0xa6e1c095
je 0x1000e46e
jmp 0x1000dd12
mov eax, dword [ebp - 0x198]
sub eax, 0xaf3fda77
je 0x1000e401
jmp 0x1000dd28
mov eax, dword [ebp - 0x198]
sub eax, 0xaf789ea4
je 0x1000f19c
jmp 0x1000dd3e
mov eax, dword [ebp - 0x198]
sub eax, 0xb1acc63d
je 0x1000f329
jmp 0x1000dd54
mov eax, dword [ebp - 0x198]
sub eax, 0xb2569c2f
je 0x1000eefa
jmp 0x1000dd6a
mov eax, dword [ebp - 0x198]
sub eax, 0xb30e223b
je 0x1000e877
jmp 0x1000dd80
mov eax, dword [ebp - 0x198]
sub eax, 0xb329d000
je 0x1000f066
jmp 0x1000dd96
mov eax, dword [ebp - 0x198]
sub eax, 0xb3f6555a
je 0x1000ef7b
jmp 0x1000ddac
mov eax, dword [ebp - 0x198]
sub eax, 0xbe449241
je 0x1000e213
jmp 0x1000ddc2
mov eax, dword [ebp - 0x198]
sub eax, 0xbe90cb1a
je 0x1000e6d8
jmp 0x1000ddd8
mov eax, dword [ebp - 0x198]
sub eax, 0xc22d921f
je 0x1000e5dd
jmp 0x1000ddee
mov eax, dword [ebp - 0x198]
sub eax, 0xc96f763b
je 0x1000f353
jmp 0x1000de04
mov eax, dword [ebp - 0x198]
sub eax, 0xd0858120
je 0x1000e498
jmp 0x1000de1a
mov eax, dword [ebp - 0x198]
sub eax, 0xd1b73b0d
je 0x1000f288
jmp 0x1000de30
mov eax, dword [ebp - 0x198]
sub eax, 0xd32efce7
je 0x1000ea32
jmp 0x1000de46
mov eax, dword [ebp - 0x198]
sub eax, 0xd44dd9e5
je 0x1000f0a2
jmp 0x1000de5c
mov eax, dword [ebp - 0x198]
sub eax, 0xdb9ad233
je 0x1000f4d5
jmp 0x1000de72
mov eax, dword [ebp - 0x198]
sub eax, 0xdcfa3695
je 0x1000e832
jmp 0x1000de88
mov eax, dword [ebp - 0x198]
sub eax, 0xe2e883f6
je 0x1000f118
jmp 0x1000de9e
mov eax, dword [ebp - 0x198]
sub eax, 0xe682b061
je 0x1000eb0f
jmp 0x1000deb4
mov eax, dword [ebp - 0x198]
sub eax, 0xec4dd673
je 0x1000ee8b
jmp 0x1000deca
mov eax, dword [ebp - 0x198]
sub eax, 0xf3322dad
je 0x1000e84d
jmp 0x1000dee0
mov eax, dword [ebp - 0x198]
sub eax, 0xf34acb7b
je 0x1000f299
jmp 0x1000def6
mov eax, dword [ebp - 0x198]
sub eax, 0xff0808a2
je 0x1000e2a0
jmp 0x1000df0c
mov eax, dword [ebp - 0x198]
sub eax, 0x19c7077
je 0x1000ee04
jmp 0x1000df22
mov eax, dword [ebp - 0x198]
sub eax, 0x1eef5bb
je 0x1000e62e
jmp 0x1000df38
mov eax, dword [ebp - 0x198]
sub eax, 0x5cc0ff8
je 0x1000ee9a
jmp 0x1000df4e
mov eax, dword [ebp - 0x198]
sub eax, 0x8450dd4
je 0x1000f450
jmp 0x1000df64
mov eax, dword [ebp - 0x198]
sub eax, 0x912f272
je 0x1000f00e
jmp 0x1000df7a
mov eax, dword [ebp - 0x198]
sub eax, 0x9e490c0
je 0x1000ef6c
jmp 0x1000df90
mov eax, dword [ebp - 0x198]
sub eax, 0xa3748aa
je 0x1000ece1
jmp 0x1000dfa6
mov eax, dword [ebp - 0x198]
sub eax, 0xa6d960b
je 0x1000f212
jmp 0x1000dfbc
mov eax, dword [ebp - 0x198]
sub eax, 0x1489cace
je 0x1000eea9
jmp 0x1000dfd2
mov eax, dword [ebp - 0x198]
sub eax, 0x18d87489
je 0x1000e816
jmp 0x1000dfe8
mov eax, dword [ebp - 0x198]
sub eax, 0x1a68ffe9
je 0x1000e340
jmp 0x1000dffe
mov eax, dword [ebp - 0x198]
sub eax, 0x254fb3e1
je 0x1000e3f2
jmp 0x1000e014
mov eax, dword [ebp - 0x198]
sub eax, 0x321f4749
je 0x1000f057
jmp 0x1000e02a
mov eax, dword [ebp - 0x198]
sub eax, 0x33dfedf1
je 0x1000f4e4
jmp 0x1000e040
mov eax, dword [ebp - 0x198]
sub eax, 0x37d92f6b
je 0x1000eac6
jmp 0x1000e056
mov eax, dword [ebp - 0x198]
sub eax, 0x39b159dc
je 0x1000e7dd
jmp 0x1000e06c
mov eax, dword [ebp - 0x198]
sub eax, 0x3cf0959c
je 0x1000e730
jmp 0x1000e082
mov eax, dword [ebp - 0x198]
sub eax, 0x3fda254d
je 0x1000e779
jmp 0x1000e098
mov eax, dword [ebp - 0x198]
sub eax, 0x44fe411f
je 0x1000ed7f
jmp 0x1000e0ae
mov eax, dword [ebp - 0x198]
sub eax, 0x459541a2
je 0x1000f18d
jmp 0x1000e0c4
mov eax, dword [ebp - 0x198]
sub eax, 0x476f1abc
je 0x1000f4c6
jmp 0x1000e0da
mov eax, dword [ebp - 0x198]
sub eax, 0x4a2a7d68
je 0x1000f517
jmp 0x1000e0f0
mov eax, dword [ebp - 0x198]
sub eax, 0x4b8c3ef0
je 0x1000e6e7
jmp 0x1000e106
mov eax, dword [ebp - 0x198]
sub eax, 0x53c05a50
je 0x1000ef98
jmp 0x1000e11c
mov eax, dword [ebp - 0x198]
sub eax, 0x5b21d233
je 0x1000e2f7
jmp 0x1000e132
mov eax, dword [ebp - 0x198]
sub eax, 0x6696a156
je 0x1000f338
jmp 0x1000e148
mov eax, dword [ebp - 0x198]
sub eax, 0x68f02acf
je 0x1000eaa5
jmp 0x1000e15e
mov eax, dword [ebp - 0x198]
sub eax, 0x6a3ce329
je 0x1000e281
mov eax, dword [ebp - 0x194]
push eax
mov ecx, esp
mov dword [ebp - 0x160], ecx
mov dword [ebp - 0x164], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1002d840
add esp, 0xc
mov eax, dword [ebp - 0x164]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x190], 0x6a3ce329
jmp 0x1000f521
mov dword [ebp - 0x190], 0xaf789ea4
jmp 0x1000f521
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf34acb7b
mov ecx, 0x1a68ffe9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x16c]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x110]
mov dword [ebp - 0x158], eax
mov ecx, dword [0x1009970c]
mov eax, dword [0x10099708]
mov edx, ecx
sub edx, 0xdbfde673
sub edx, 1
add edx, 0xdbfde673
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf34acb7b
mov ecx, 0x254fb3e1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x190], 0xaf3fda77
jmp 0x1000f521
mov eax, dword [ebp - 0x158]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x174], eax
mov edx, 0xffffffff
mov eax, 0x793b3445
mov ecx, 0xa6e1c095
cmp dword [ebp - 0x174], edx
cmove eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x190], 0xaf789ea4
jmp 0x1000f521
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
mov edx, eax
sub edx, 0x48454452
sub edx, 1
add edx, 0x48454452
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x76c80fc5
mov ecx, 0x835054fc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov eax, dword [ebp - 0x154]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x150], eax
mov ecx, dword [0x1009970c]
mov eax, dword [0x10099708]
mov edx, ecx
sub edx, 0x5a11ec2
sub edx, 1
add edx, 0x5a11ec2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x76c80fc5
mov ecx, 0x944b7c9e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x190], 0x8b50d5d8
jmp 0x1000f521
mov edx, dword [ebp - 0x150]
mov eax, 0xc22d921f
mov ecx, 0x4b8c3ef0
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
mov edx, eax
sub edx, 0x42bf6c97
sub edx, 1
add edx, 0x42bf6c97
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1acc63d
mov ecx, 0x1eef5bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x14c], eax
mov ecx, dword [0x1009970c]
mov eax, dword [0x10099708]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb1acc63d
mov ecx, 0x92a02037
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x190], 0x94d8e85b
jmp 0x1000f521
mov eax, dword [ebp - 0x14c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x190], 0xbe90cb1a
jmp 0x1000f521
mov dword [ebp - 0x190], 0xaf789ea4
jmp 0x1000f521
mov eax, dword [ebp - 0x178]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x190], 0x3cf0959c
jmp 0x1000f521
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6696a156
mov ecx, 0x3fda254d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x180], eax
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6696a156
mov ecx, 0x9b4271ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x190], 0x39b159dc
jmp 0x1000f521
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x180]
mov ecx, dword [ecx + 0x3c]
add eax, 0xec4ea775
add eax, ecx
sub eax, 0xec4ea775
mov dword [ebp - 0x184], eax
mov word [ebp - 0x186], 0
mov dword [ebp - 0x190], 0x18d87489
jmp 0x1000f521
movzx eax, word [ebp - 0x186]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x190], 0xdcfa3695
jmp 0x1000f521
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x190], 0xf3322dad
jmp 0x1000f521
mov eax, dword [ebp - 0x144]
movzx esi, word [eax + 6]
mov edx, dword [ebp - 0x148]
mov eax, 0xb329d000
mov ecx, 0xb30e223b
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov ecx, dword [0x1009970c]
mov eax, dword [0x10099708]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc96f763b
mov ecx, 0x83d94a8e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov eax, dword [ebp - 0x184]
xor ecx, ecx
sub ecx, 0x18
sub eax, ecx
mov ecx, dword [ebp - 0x184]
movzx ecx, word [ecx + 0x14]
sub eax, 0x55c929ac
add eax, ecx
add eax, 0x55c929ac
mov dword [ebp - 0x140], eax
mov ax, word [ebp - 0x186]
mov word [ebp - 0x13a], ax
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
mov edx, eax
add edx, 0x6d3931d0
sub edx, 1
sub edx, 0x6d3931d0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc96f763b
mov ecx, 0x92764e29
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x190], 0x97aef7f7
jmp 0x1000f521
mov ax, word [ebp - 0x13a]
movzx eax, ax
imul ecx, eax, 0x28
mov eax, dword [ebp - 0x140]
sub eax, 0x10ce1a36
add eax, ecx
add eax, 0x10ce1a36
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x190], 0x89433527
jmp 0x1000f521
mov ecx, dword [0x1009970c]
mov eax, dword [0x10099708]
mov edx, ecx
add edx, 0xae94e2fd
sub edx, 1
sub edx, 0xae94e2fd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa2d41ac5
mov ecx, 0xd32efce7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov ecx, dword [ebp - 0x138]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1003bec5
call fcn.100311b0
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x131], al
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa2d41ac5
mov ecx, 0x68f02acf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dl, byte [ebp - 0x131]
mov eax, 0x37d92f6b
mov ecx, 0x5cc0ff8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x70b3fd28
mov ecx, 0xe682b061
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x18c]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x18c]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x160]
mov byte [eax], cl
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 0xc]
add edx, 0x60da89b6
add edx, eax
sub edx, 0x60da89b6
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 0xc]
sub ecx, 0xae6f71b4
add ecx, eax
add ecx, 0xae6f71b4
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1002d9a0
add esp, 0xc
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 8]
mov dword [ebp - 0x12c], eax
mov ecx, dword [0x1009970c]
mov eax, dword [0x10099708]
mov edx, ecx
sub edx, 0xed8c5fc4
sub edx, 1
add edx, 0xed8c5fc4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x70b3fd28
mov ecx, 0x870d2f23
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x190], 0x7236bef4
jmp 0x1000f521
mov ecx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x18c]
mov edx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor esi, esi
sub esi, eax
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x12c]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x127], al
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8450dd4
mov ecx, 0x44fe411f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x190], 0x6ab7a34f
jmp 0x1000f521
mov cl, byte [ebp - 0x127]
and cl, 1
mov eax, dword [ebp - 0x160]
mov byte [eax], cl
mov ecx, dword [0x1009970c]
mov eax, dword [0x10099708]
mov edx, ecx
sub edx, 0xb5c8d0fb
sub edx, 1
add edx, 0xb5c8d0fb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x79bf5c0a
mov ecx, 0xec4dd673
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x190], 0x5cc0ff8
jmp 0x1000f521
mov dword [ebp - 0x190], 0x1489cace
jmp 0x1000f521
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
mov edx, eax
add edx, 0x67cf4954
sub edx, 1
sub edx, 0x67cf4954
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x476f1abc
mov ecx, 0xb2569c2f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov ax, word [ebp - 0x186]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x126], ax
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
mov edx, eax
add edx, 0xf80e59d0
sub edx, 1
sub edx, 0xf80e59d0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x476f1abc
mov ecx, 0x9e490c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x190], 0xb3f6555a
jmp 0x1000f521
mov ax, word [ebp - 0x126]
mov word [ebp - 0x186], ax
mov dword [ebp - 0x190], 0x53c05a50
jmp 0x1000f521
mov ecx, dword [0x1009970c]
mov eax, dword [0x10099708]
mov edx, ecx
add edx, 0x26916dde
sub edx, 1
sub edx, 0x26916dde
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdb9ad233
mov ecx, 0x912f272
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdb9ad233
mov ecx, 0x321f4749
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x190], 0x18d87489
jmp 0x1000f521
mov eax, dword [ebp - 0x174]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x190], 0x9d42943e
jmp 0x1000f521
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x190], 0xd44dd9e5
jmp 0x1000f521
mov ecx, dword [0x1009970c]
mov eax, dword [0x10099708]
mov edx, ecx
add edx, 0x490125e7
sub edx, 1
sub edx, 0x490125e7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x33dfedf1
mov ecx, 0xe2e883f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x168]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1009970c]
mov ecx, dword [0x10099708]
mov edx, eax
sub edx, 0x909efd9f
sub edx, 1
add edx, 0x909efd9f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x33dfedf1
mov ecx, 0x459541a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov dword [ebp - 0x190], 0xaf789ea4
jmp 0x1000f521
mov ecx, dword [0x1009970c]
mov eax, dword [0x10099708]
mov edx, ecx
sub edx, 0xd2f658f5
sub edx, 1
add edx, 0xd2f658f5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4a2a7d68
mov ecx, 0xa6d960b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov ecx, dword [0x1009970c]
mov eax, dword [0x10099708]
mov edx, ecx
sub edx, 0x53399bc6
sub edx, 1
add edx, 0x53399bc6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4a2a7d68
mov ecx, 0xd1b73b0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000f521
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1002ca30
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x16c]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x190], 0x1a68ffe9
jmp 0x1000f521
mov dword [ebp - 0x190], 0x1eef5bb
jmp 0x1000f521
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x190], 0x3fda254d
jmp 0x1000f521
mov dword [ebp - 0x190], 0x83d94a8e
jmp 0x1000f521
mov ecx, dword [ebp - 0x138]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1003bec5
call fcn.100311b0
add esp, 8
mov dword [ebp - 0x190], 0xd32efce7
jmp 0x1000f521
mov esi, dword [ebp - 0x170]
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 0xc]
sub esi, 0x89690fa
add esi, eax
add esi, 0x89690fa
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x12c]
lea eax, [ebp - 0x120]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [ebp - 0x190], 0xa3748aa
jmp 0x1000f521
mov dword [ebp - 0x190], 0xb2569c2f
jmp 0x1000f521
mov dword [ebp - 0x190], 0x912f272
jmp 0x1000f521
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x168]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x190], 0xe2e883f6
jmp 0x1000f521
mov dword [ebp - 0x190], 0xa6d960b
jmp 0x1000dbd8