Function at 0x100011d0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x19c
mov eax, dword [ebp + 8]
mov eax, dword [0x1009ce00]
xor eax, ebp
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000f530
mov eax, dword [ebp + 8]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x184], 0xafe8af3e
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x188], eax
sub eax, 0x8018b978
je 0x100017c3
jmp 0x1000124f
mov eax, dword [ebp - 0x188]
sub eax, 0x80e42d74
je 0x10001c8e
jmp 0x10001265
mov eax, dword [ebp - 0x188]
sub eax, 0x877b12fd
je 0x10002138
jmp 0x1000127b
mov eax, dword [ebp - 0x188]
sub eax, 0x8b3b2509
je 0x100017f1
jmp 0x10001291
mov eax, dword [ebp - 0x188]
sub eax, 0x91c56d69
je 0x10002088
jmp 0x100012a7
mov eax, dword [ebp - 0x188]
sub eax, 0x93aaf52d
je 0x10001c7f
jmp 0x100012bd
mov eax, dword [ebp - 0x188]
sub eax, 0x99a7695d
je 0x10001e1c
jmp 0x100012d3
mov eax, dword [ebp - 0x188]
sub eax, 0x9b95e487
je 0x100021fe
jmp 0x100012e9
mov eax, dword [ebp - 0x188]
sub eax, 0x9f22d974
je 0x100022a4
jmp 0x100012ff
mov eax, dword [ebp - 0x188]
sub eax, 0xa967b5f9
je 0x10001e91
jmp 0x10001315
mov eax, dword [ebp - 0x188]
sub eax, 0xafe8af3e
je 0x100017a8
jmp 0x1000132b
mov eax, dword [ebp - 0x188]
sub eax, 0xb0590f75
je 0x10001f7b
jmp 0x10001341
mov eax, dword [ebp - 0x188]
sub eax, 0xb07219be
je 0x10001a3a
jmp 0x10001357
mov eax, dword [ebp - 0x188]
sub eax, 0xb7effaf1
je 0x10001b4e
jmp 0x1000136d
mov eax, dword [ebp - 0x188]
sub eax, 0xbfc48803
je 0x10001ac3
jmp 0x10001383
mov eax, dword [ebp - 0x188]
sub eax, 0xc231098a
je 0x100024bd
jmp 0x10001399
mov eax, dword [ebp - 0x188]
sub eax, 0xc38fd915
je 0x1000222e
jmp 0x100013af
mov eax, dword [ebp - 0x188]
sub eax, 0xca8d31e6
je 0x10002623
jmp 0x100013c5
mov eax, dword [ebp - 0x188]
sub eax, 0xca96216a
je 0x100023b2
jmp 0x100013db
mov eax, dword [ebp - 0x188]
sub eax, 0xcf472e9f
je 0x10002312
jmp 0x100013f1
mov eax, dword [ebp - 0x188]
sub eax, 0xd23a2e38
je 0x100025ef
jmp 0x10001407
mov eax, dword [ebp - 0x188]
sub eax, 0xd3ead40d
je 0x10001ec4
jmp 0x1000141d
mov eax, dword [ebp - 0x188]
sub eax, 0xd743d2af
je 0x10001ce8
jmp 0x10001433
mov eax, dword [ebp - 0x188]
sub eax, 0xd7abdb54
je 0x10002303
jmp 0x10001449
mov eax, dword [ebp - 0x188]
sub eax, 0xd8ef5f08
je 0x100018a7
jmp 0x1000145f
mov eax, dword [ebp - 0x188]
sub eax, 0xd906ba83
je 0x10001839
jmp 0x10001475
mov eax, dword [ebp - 0x188]
sub eax, 0xdb341922
je 0x10002597
jmp 0x1000148b
mov eax, dword [ebp - 0x188]
sub eax, 0xdb531444
je 0x100026e9
jmp 0x100014a1
mov eax, dword [ebp - 0x188]
sub eax, 0xe2859cd9
je 0x100021a6
jmp 0x100014b7
mov eax, dword [ebp - 0x188]
sub eax, 0xe3a160d3
je 0x10001bf4
jmp 0x100014cd
mov eax, dword [ebp - 0x188]
sub eax, 0xf1324adc
je 0x10001983
jmp 0x100014e3
mov eax, dword [ebp - 0x188]
sub eax, 0xf4fb3a0b
je 0x10002474
jmp 0x100014f9
mov eax, dword [ebp - 0x188]
sub eax, 0xfaccb9b9
je 0x10001f6c
jmp 0x1000150f
mov eax, dword [ebp - 0x188]
sub eax, 0x3818fce
je 0x1000260a
jmp 0x10001525
mov eax, dword [ebp - 0x188]
sub eax, 0x42a1f84
je 0x1000268a
jmp 0x1000153b
mov eax, dword [ebp - 0x188]
sub eax, 0x8bc4048
je 0x10001d10
jmp 0x10001551
mov eax, dword [ebp - 0x188]
sub eax, 0xb43c6a5
je 0x10001b33
jmp 0x10001567
mov eax, dword [ebp - 0x188]
sub eax, 0xcf15e02
je 0x10002699
jmp 0x1000157d
mov eax, dword [ebp - 0x188]
sub eax, 0x1052bd40
je 0x100017e2
jmp 0x10001593
mov eax, dword [ebp - 0x188]
sub eax, 0x1198d6ad
je 0x1000251a
jmp 0x100015a9
mov eax, dword [ebp - 0x188]
sub eax, 0x12fa91e6
je 0x100026b6
jmp 0x100015bf
mov eax, dword [ebp - 0x188]
sub eax, 0x13db8f8a
je 0x10002444
jmp 0x100015d5
mov eax, dword [ebp - 0x188]
sub eax, 0x1a7839c1
je 0x100025a6
jmp 0x100015eb
mov eax, dword [ebp - 0x188]
sub eax, 0x1a82a8a1
je 0x100021ef
jmp 0x10001601
mov eax, dword [ebp - 0x188]
sub eax, 0x222b1f50
je 0x10001992
jmp 0x10001617
mov eax, dword [ebp - 0x188]
sub eax, 0x22a07af3
je 0x1000233c
jmp 0x1000162d
mov eax, dword [ebp - 0x188]
sub eax, 0x2aca7d6b
je 0x10002453
jmp 0x10001643
mov eax, dword [ebp - 0x188]
sub eax, 0x2e73a20e
je 0x10001f0d
jmp 0x10001659
mov eax, dword [ebp - 0x188]
sub eax, 0x39e88b84
je 0x10001e44
jmp 0x1000166f
mov eax, dword [ebp - 0x188]
sub eax, 0x50f043ef
je 0x10001b6f
jmp 0x10001685
mov eax, dword [ebp - 0x188]
sub eax, 0x516b9db9
je 0x10002321
jmp 0x1000169b
mov eax, dword [ebp - 0x188]
sub eax, 0x5bfa2b73
je 0x10001b7e
jmp 0x100016b1
mov eax, dword [ebp - 0x188]
sub eax, 0x5cbd51b2
je 0x10002037
jmp 0x100016c7
mov eax, dword [ebp - 0x188]
sub eax, 0x60d2baf0
je 0x10001dfb
jmp 0x100016dd
mov eax, dword [ebp - 0x188]
sub eax, 0x67946d1e
je 0x10001cb5
jmp 0x100016f3
mov eax, dword [ebp - 0x188]
sub eax, 0x6cd2efb1
je 0x10002129
jmp 0x10001709
mov eax, dword [ebp - 0x188]
sub eax, 0x701fc69c
je 0x10001dec
jmp 0x1000171f
mov eax, dword [ebp - 0x188]
sub eax, 0x75920679
je 0x100019b5
jmp 0x10001735
mov eax, dword [ebp - 0x188]
sub eax, 0x79a36e9c
je 0x100019c4
jmp 0x1000174b
mov eax, dword [ebp - 0x188]
sub eax, 0x79d5ebd1
je 0x10001b14
jmp 0x10001761
mov eax, dword [ebp - 0x188]
sub eax, 0x7b4988d6
je 0x10002506
jmp 0x10001777
mov eax, dword [ebp - 0x188]
sub eax, 0x7db4fd12
je 0x10001d7e
jmp 0x1000178d
mov eax, dword [ebp - 0x188]
sub eax, 0x7f211020
je 0x10001ab4
jmp 0x100017a3
jmp 0x100026f3
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x184], 0x8018b978
jmp 0x100026f3
mov eax, 0x1052bd40
mov ecx, 0x8b3b2509
cmp dword [ebp - 0x15c], 0
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov dword [ebp - 0x184], 0xf4fb3a0b
jmp 0x100026f3
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp - 0x158]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x184], 0xd906ba83
jmp 0x100026f3
mov ecx, dword [0x1009e148]
mov eax, dword [0x1009e144]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1198d6ad
mov ecx, 0xd8ef5f08
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x15c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x164], eax
mov ecx, dword [0x1009e148]
mov eax, dword [0x1009e144]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1198d6ad
mov ecx, 0xf1324adc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov dword [ebp - 0x184], 0x222b1f50
jmp 0x100026f3
mov edx, 0xffffffff
mov eax, 0x79a36e9c
mov ecx, 0x75920679
cmp dword [ebp - 0x164], edx
cmove eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov dword [ebp - 0x184], 0xf4fb3a0b
jmp 0x100026f3
mov ecx, dword [0x1009e148]
mov eax, dword [0x1009e144]
mov edx, ecx
add edx, 0x3469952b
sub edx, 1
sub edx, 0x3469952b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdb341922
mov ecx, 0xb07219be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x150], eax
mov ecx, dword [0x1009e148]
mov eax, dword [0x1009e144]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdb341922
mov ecx, 0x7f211020
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov dword [ebp - 0x184], 0xbfc48803
jmp 0x100026f3
mov eax, dword [ebp - 0x150]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x184], 0x79d5ebd1
jmp 0x100026f3
mov eax, 0xb43c6a5
mov ecx, 0x5bfa2b73
cmp dword [ebp - 0x168], 0
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x184], 0xb7effaf1
jmp 0x100026f3
mov eax, dword [ebp - 0x14c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x184], 0x50f043ef
jmp 0x100026f3
mov dword [ebp - 0x184], 0xf4fb3a0b
jmp 0x100026f3
mov ecx, dword [0x1009e148]
mov eax, dword [0x1009e144]
mov edx, ecx
add edx, 0xbf7de7ef
sub edx, 1
sub edx, 0xbf7de7ef
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1a7839c1
mov ecx, 0xe3a160d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov eax, dword [ebp - 0x168]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x16c], eax
mov eax, dword [0x1009e148]
mov ecx, dword [0x1009e144]
mov edx, eax
sub edx, 0x42e95b9e
sub edx, 1
add edx, 0x42e95b9e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1a7839c1
mov ecx, 0x93aaf52d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov dword [ebp - 0x184], 0x80e42d74
jmp 0x100026f3
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x184], 0x67946d1e
jmp 0x100026f3
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x170]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x174], eax
mov word [ebp - 0x176], 0
mov dword [ebp - 0x184], 0xd743d2af
jmp 0x100026f3
movzx eax, word [ebp - 0x176]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x184], 0x8bc4048
jmp 0x100026f3
mov ecx, dword [0x1009e148]
mov eax, dword [0x1009e144]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd23a2e38
mov ecx, 0x7db4fd12
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov eax, dword [ebp - 0x140]
movzx ecx, word [eax + 6]
mov eax, dword [ebp - 0x144]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x139], al
mov eax, dword [0x1009e148]
mov ecx, dword [0x1009e144]
mov edx, eax
add edx, 0x4a67c39c
sub edx, 1
sub edx, 0x4a67c39c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd23a2e38
mov ecx, 0x701fc69c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov dword [ebp - 0x184], 0x60d2baf0
jmp 0x100026f3
mov dl, byte [ebp - 0x139]
mov eax, 0x516b9db9
mov ecx, 0x99a7695d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov eax, dword [ebp - 0x174]
add eax, 0x91ad5be
add eax, 0x18
sub eax, 0x91ad5be
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x184], 0x39e88b84
jmp 0x100026f3
mov eax, dword [ebp - 0x174]
movzx ecx, word [eax + 0x14]
mov eax, dword [ebp - 0x138]
sub eax, 0x538d863e
add eax, ecx
add eax, 0x538d863e
movzx ecx, word [ebp - 0x176]
imul edx, ecx, 0x28
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x184], 0xa967b5f9
jmp 0x100026f3
mov ecx, dword [ebp - 0x134]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001b3b0
call fcn.100118a0
mov edx, eax
mov eax, 0xd3ead40d
mov ecx, 0x877b12fd
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov eax, dword [0x1009e148]
mov ecx, dword [0x1009e144]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3818fce
mov ecx, 0x2e73a20e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x130], eax
mov eax, dword [0x1009e148]
mov ecx, dword [0x1009e144]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3818fce
mov ecx, 0xfaccb9b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov dword [ebp - 0x184], 0xb0590f75
jmp 0x100026f3
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x17c]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x17d], al
mov edx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + 0xc]
sub edx, 0x33ff05d1
add edx, eax
add edx, 0x33ff05d1
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + 0xc]
add ecx, 0x1c72960d
add ecx, eax
sub ecx, 0x1c72960d
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.1000f690
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x184], 0x5cbd51b2
jmp 0x100026f3
mov eax, dword [0x1009e148]
mov ecx, dword [0x1009e144]
mov edx, eax
sub edx, 0x559e667d
sub edx, 1
add edx, 0x559e667d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xca8d31e6
mov ecx, 0x91c56d69
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov eax, dword [ebp - 0x17c]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x160]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + 0xc]
add esi, 0x404c7d2b
add esi, eax
sub esi, 0x404c7d2b
mov ecx, dword [ebp - 0x12c]
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x17d], al
mov eax, dword [0x1009e148]
mov ecx, dword [0x1009e144]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xca8d31e6
mov ecx, 0x6cd2efb1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov dword [ebp - 0x184], 0x877b12fd
jmp 0x100026f3
mov ecx, dword [0x1009e148]
mov eax, dword [0x1009e144]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x42a1f84
mov ecx, 0xe2859cd9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov eax, dword [0x1009e148]
mov ecx, dword [0x1009e144]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x42a1f84
mov ecx, 0x1a82a8a1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov dword [ebp - 0x184], 0x9b95e487
jmp 0x100026f3
mov ax, word [ebp - 0x176]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x126], ax
mov dword [ebp - 0x184], 0xc38fd915
jmp 0x100026f3
mov ecx, dword [0x1009e148]
mov eax, dword [0x1009e144]
mov edx, ecx
add edx, 0x3d02f116
sub edx, 1
sub edx, 0x3d02f116
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcf15e02
mov ecx, 0x9f22d974
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov ax, word [ebp - 0x126]
mov word [ebp - 0x176], ax
mov eax, dword [0x1009e148]
mov ecx, dword [0x1009e144]
mov edx, eax
add edx, 0x5144cc43
sub edx, 1
sub edx, 0x5144cc43
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcf15e02
mov ecx, 0xd7abdb54
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov dword [ebp - 0x184], 0xcf472e9f
jmp 0x100026f3
mov dword [ebp - 0x184], 0xd743d2af
jmp 0x100026f3
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x184], 0x22a07af3
jmp 0x100026f3
mov ecx, dword [0x1009e148]
mov eax, dword [0x1009e144]
mov edx, ecx
add edx, 0x7cfb4f83
sub edx, 1
sub edx, 0x7cfb4f83
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x12fa91e6
mov ecx, 0xca96216a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x168]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov ecx, dword [0x1009e148]
mov eax, dword [0x1009e144]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x12fa91e6
mov ecx, 0x13db8f8a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov dword [ebp - 0x184], 0x2aca7d6b
jmp 0x100026f3
mov eax, dword [ebp - 0x158]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x184], 0xf4fb3a0b
jmp 0x100026f3
mov eax, dword [0x1009e148]
mov ecx, dword [0x1009e144]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdb531444
mov ecx, 0xc231098a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov eax, dword [0x1009e148]
mov ecx, dword [0x1009e144]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdb531444
mov ecx, 0x7b4988d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100026f3
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.1000e930
add esp, 0x19c
pop esi
pop ebx
pop ebp
ret
lea eax, [ebp - 0x110]
mov ecx, dword [ebp - 0x15c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
sub esp, 0xc
lea eax, [ebp - 0x110]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x184], 0xd8ef5f08
jmp 0x100026f3
mov dword [ebp - 0x184], 0xb07219be
jmp 0x100026f3
mov eax, dword [ebp - 0x168]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
sub esp, 0x14
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x184], 0xe3a160d3
jmp 0x100026f3
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x184], 0x7db4fd12
jmp 0x100026f3
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x184], 0x2e73a20e
jmp 0x100026f3
mov eax, dword [ebp - 0x17c]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x160]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + 0xc]
sub esi, 0x78a55010
add esi, eax
add esi, 0x78a55010
mov ecx, dword [ebp - 0x12c]
lea eax, [ebp - 0x120]
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x17d], al
mov dword [ebp - 0x184], 0x91c56d69
jmp 0x100026f3
mov dword [ebp - 0x184], 0xe2859cd9
jmp 0x100026f3
mov ax, word [ebp - 0x126]
mov word [ebp - 0x176], ax
mov dword [ebp - 0x184], 0x9f22d974
jmp 0x100026f3
mov eax, dword [ebp - 0x124]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [ebp - 0x168]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x184], 0xca96216a
jmp 0x100026f3
mov dword [ebp - 0x184], 0xc231098a
jmp 0x10001233