Function at 0x10001000
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
cmp eax, 1
jne 0x10001394
call sub.kernel32.dll_IsDebuggerPresent
or eax, eax
je 0x10001032
push 0x30
push 0x100034c4
push 0x100034d1
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.kernel32.dll_ExitProcess
mov eax, dword [ebp + 8]
mov dword [section..bss], eax
mov eax, 0
mov byte [0x10002048], al
mov byte [0x10002049], al
mov byte [0x1000204a], al
inc al
mov byte [0x10002057], al
push 0
call sub.kernel32.dll_GetModuleHandleA
or eax, eax
jne 0x1000107e
push 0x10
push 0x100034c4
push 0x100035cf
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.kernel32.dll_ExitProcess
mov dword [0x10002004], eax
push 0x100030d9
push 0x100030b2
call fcn.1000139d
or eax, eax
jne 0x100010b0
push 0x10
push 0x100034c4
push 0x10003628
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.kernel32.dll_ExitProcess
mov dword [0x10002030], eax
add eax, 5
mov dword [0x10002034], eax
mov eax, dword [0x10002030]
push eax
mov eax, 0x100014e9
push eax
call fcn.10001769
push str.EnumFontFamiliesExA
push str.gdi32.dll
call fcn.1000139d
or eax, eax
jne 0x100010fb
push 0x10
push 0x100034c4
push 0x10003628
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.kernel32.dll_ExitProcess
mov dword [0x10002038], eax
add eax, 5
mov dword [0x1000203c], eax
mov eax, dword [0x10002038]
push eax
mov eax, 0x100014d4
push eax
call fcn.10001769
push str.CreateFontA
push str.gdi32.dll
call fcn.1000139d
or eax, eax
jne 0x10001146
push 0x10
push 0x100034c4
push 0x10003628
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.kernel32.dll_ExitProcess
mov dword [0x10002008], eax
add eax, 5
mov dword [0x1000200c], eax
mov eax, dword [0x10002008]
push eax
mov eax, 0x10001756
push eax
call fcn.10001769
push 0x10003097
push str.kernelbase.dll
call fcn.1000139d
or eax, eax
jne 0x100011ad
push 0x10003097
push 0x1000308a
call fcn.1000139d
or eax, eax
jne 0x10001248
push 0x10
push 0x100034c4
push 0x10003628
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.kernel32.dll_ExitProcess
pushal
push eax
mov eax, dword [0x10002004]
add eax, dword [0x10003137]
push eax
push 0x10004077
push 0x40
push 6
push eax
call sub.kernel32.dll_VirtualProtect
or eax, eax
jne 0x100011e8
push 0x10
push 0x100034c4
push 0x10003576
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.kernel32.dll_ExitProcess
pop ebx
mov byte [ebx], 0xff
mov byte [ebx + 1], 0x15
pop eax
mov dword [0x1000204f], eax
mov eax, 0x1000204f
mov dword [ebx + 2], eax
mov eax, dword [0x10002004]
add eax, dword [0x1000313b]
push eax
push 0x10004077
push 0x40
push 6
push eax
call sub.kernel32.dll_VirtualProtect
or eax, eax
jne 0x10001237
push 0x10
push 0x100034c4
push 0x10003576
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.kernel32.dll_ExitProcess
pop ebx
mov byte [ebx], 0xff
mov byte [ebx + 1], 0x15
mov eax, 0x1000204f
mov dword [ebx + 2], eax
popal
mov dword [0x10002010], eax
add eax, 5
mov dword [0x10002014], eax
mov eax, dword [0x10002010]
push eax
mov eax, 0x1000158e
push eax
call fcn.10001769
push str.SetFilePointer
push str.kernelbase.dll
call fcn.1000139d
or eax, eax
jne 0x100012a6
push str.SetFilePointer
push 0x1000308a
call fcn.1000139d
or eax, eax
jne 0x100012a6
push 0x10
push 0x100034c4
push 0x10003628
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.kernel32.dll_ExitProcess
mov dword [0x10002018], eax
add eax, 5
mov dword [0x1000201c], eax
mov eax, dword [0x10002018]
push eax
mov eax, 0x100015d2
push eax
call fcn.10001769
push str.UpdateWindow
push 0x100030b2
call fcn.1000139d
or eax, eax
jne 0x100012f1
push 0x10
push 0x100034c4
push 0x10003628
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.kernel32.dll_ExitProcess
mov dword [0x10002028], eax
add eax, 5
mov dword [0x1000202c], eax
mov eax, dword [0x10002028]
push eax
mov eax, 0x1000150e
push eax
call fcn.10001769
push 0x100030bd
push 0x100030b2
call fcn.1000139d
or eax, eax
jne 0x1000133c
push 0x10
push 0x100034c4
push 0x10003628
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.kernel32.dll_ExitProcess
mov dword [0x10002020], eax
add eax, 5
mov dword [0x10002024], eax
mov eax, dword [0x10002020]
push eax
mov eax, 0x10001535
push eax
call fcn.10001769
mov eax, dword [0x10002004]
add eax, dword [0x100030e5]
mov dword [0x10002040], eax
add eax, 7
mov dword [0x10002044], eax
mov eax, dword [0x10002040]
push eax
mov eax, 0
cmp eax, 1
jne 0x10001389
mov eax, 0x100017e4
jmp 0x1000138e
mov eax, 0x100018bc
push eax
call fcn.10001769
mov eax, 1
leave
ret 0xc