Function at 0x100017b0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xbc
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc4], eax
mov eax, dword [0x1006b204]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc0], 0xec3bf21f
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xc8], eax
sub eax, 0x8258df25
je 0x10004b6a
jmp 0x100017f5
mov eax, dword [ebp - 0xc8]
sub eax, 0x85515399
je 0x10004910
jmp 0x1000180b
mov eax, dword [ebp - 0xc8]
sub eax, 0x86257eab
je 0x1000371f
jmp 0x10001821
mov eax, dword [ebp - 0xc8]
sub eax, 0x86f5e93e
je 0x10004a28
jmp 0x10001837
mov eax, dword [ebp - 0xc8]
sub eax, 0x87b35609
je 0x100036d2
jmp 0x1000184d
mov eax, dword [ebp - 0xc8]
sub eax, 0x88a87034
je 0x100033bc
jmp 0x10001863
mov eax, dword [ebp - 0xc8]
sub eax, 0x891630dc
je 0x10004a13
jmp 0x10001879
mov eax, dword [ebp - 0xc8]
sub eax, 0x8b8b8915
je 0x10004a37
jmp 0x1000188f
mov eax, dword [ebp - 0xc8]
sub eax, 0x8bc3f46d
je 0x100031c7
jmp 0x100018a5
mov eax, dword [ebp - 0xc8]
sub eax, 0x925a193d
je 0x100049e4
jmp 0x100018bb
mov eax, dword [ebp - 0xc8]
sub eax, 0x9466ad94
je 0x10004b94
jmp 0x100018d1
mov eax, dword [ebp - 0xc8]
sub eax, 0x9aff6bf7
je 0x10003abf
jmp 0x100018e7
mov eax, dword [ebp - 0xc8]
sub eax, 0x9b01e7f2
je 0x10004397
jmp 0x100018fd
mov eax, dword [ebp - 0xc8]
sub eax, 0x9b7cb087
je 0x100043c0
jmp 0x10001913
mov eax, dword [ebp - 0xc8]
sub eax, 0x9bae6d43
je 0x1000292d
jmp 0x10001929
mov eax, dword [ebp - 0xc8]
sub eax, 0x9cda131c
je 0x10003bfe
jmp 0x1000193f
mov eax, dword [ebp - 0xc8]
sub eax, 0x9e7f8449
je 0x10004ba3
jmp 0x10001955
mov eax, dword [ebp - 0xc8]
sub eax, 0x9eac6a20
je 0x10003e18
jmp 0x1000196b
mov eax, dword [ebp - 0xc8]
sub eax, 0x9ee9755f
je 0x1000395c
jmp 0x10001981
mov eax, dword [ebp - 0xc8]
sub eax, 0xa041f5f5
je 0x10002e98
jmp 0x10001997
mov eax, dword [ebp - 0xc8]
sub eax, 0xa05020c0
je 0x10004864
jmp 0x100019ad
mov eax, dword [ebp - 0xc8]
sub eax, 0xa13022c2
je 0x10003176
jmp 0x100019c3
mov eax, dword [ebp - 0xc8]
sub eax, 0xa56e560e
je 0x10002db4
jmp 0x100019d9
mov eax, dword [ebp - 0xc8]
sub eax, 0xa69f0014
je 0x100037f8
jmp 0x100019ef
mov eax, dword [ebp - 0xc8]
sub eax, 0xa76036da
je 0x10002a54
jmp 0x10001a05
mov eax, dword [ebp - 0xc8]
sub eax, 0xa83affd7
je 0x10002a03
jmp 0x10001a1b
mov eax, dword [ebp - 0xc8]
sub eax, 0xa9f5dd5e
je 0x1000297e
jmp 0x10001a31
mov eax, dword [ebp - 0xc8]
sub eax, 0xac00b392
je 0x10004759
jmp 0x10001a47
mov eax, dword [ebp - 0xc8]
sub eax, 0xae18a645
je 0x100034c5
jmp 0x10001a5d
mov eax, dword [ebp - 0xc8]
sub eax, 0xae688dde
je 0x10002806
jmp 0x10001a73
mov eax, dword [ebp - 0xc8]
sub eax, 0xaea8d0f4
je 0x10003f08
jmp 0x10001a89
mov eax, dword [ebp - 0xc8]
sub eax, 0xb04d7a75
je 0x1000315c
jmp 0x10001a9f
mov eax, dword [ebp - 0xc8]
sub eax, 0xb1abe0cf
je 0x10003c1c
jmp 0x10001ab5
mov eax, dword [ebp - 0xc8]
sub eax, 0xb570a617
je 0x10004840
jmp 0x10001acb
mov eax, dword [ebp - 0xc8]
sub eax, 0xb63da7ce
je 0x1000390b
jmp 0x10001ae1
mov eax, dword [ebp - 0xc8]
sub eax, 0xb6a6e72e
je 0x10003faf
jmp 0x10001af7
mov eax, dword [ebp - 0xc8]
sub eax, 0xbb0c110b
je 0x10002691
jmp 0x10001b0d
mov eax, dword [ebp - 0xc8]
sub eax, 0xbd04e774
je 0x100048af
jmp 0x10001b23
mov eax, dword [ebp - 0xc8]
sub eax, 0xbd4dc4f2
je 0x10004025
jmp 0x10001b39
mov eax, dword [ebp - 0xc8]
sub eax, 0xbf73a42e
je 0x10003081
jmp 0x10001b4f
mov eax, dword [ebp - 0xc8]
sub eax, 0xbfb3e3c9
je 0x1000332c
jmp 0x10001b65
mov eax, dword [ebp - 0xc8]
sub eax, 0xc0563476
je 0x1000353b
jmp 0x10001b7b
mov eax, dword [ebp - 0xc8]
sub eax, 0xc0d20eb8
je 0x100027ae
jmp 0x10001b91
mov eax, dword [ebp - 0xc8]
sub eax, 0xc15d29e6
je 0x10003465
jmp 0x10001ba7
mov eax, dword [ebp - 0xc8]
sub eax, 0xc33a57f6
je 0x1000281e
jmp 0x10001bbd
mov eax, dword [ebp - 0xc8]
sub eax, 0xc491a883
je 0x100034b6
jmp 0x10001bd3
mov eax, dword [ebp - 0xc8]
sub eax, 0xc63504a4
je 0x100036e1
jmp 0x10001be9
mov eax, dword [ebp - 0xc8]
sub eax, 0xc6f19e49
je 0x10002e89
jmp 0x10001bff
mov eax, dword [ebp - 0xc8]
sub eax, 0xc9957ab7
je 0x10002894
jmp 0x10001c15
mov eax, dword [ebp - 0xc8]
sub eax, 0xcb7eeb18
je 0x100046c0
jmp 0x10001c2b
mov eax, dword [ebp - 0xc8]
sub eax, 0xceb5ff4c
je 0x10004ae2
jmp 0x10001c41
mov eax, dword [ebp - 0xc8]
sub eax, 0xd024017e
je 0x10004beb
jmp 0x10001c57
mov eax, dword [ebp - 0xc8]
sub eax, 0xd02c7acc
je 0x10002f6a
jmp 0x10001c6d
mov eax, dword [ebp - 0xc8]
sub eax, 0xd1cfc0d8
je 0x10002fbb
jmp 0x10001c83
mov eax, dword [ebp - 0xc8]
sub eax, 0xd1faf131
je 0x10003e70
jmp 0x10001c99
mov eax, dword [ebp - 0xc8]
sub eax, 0xd8b6e97f
je 0x100048d0
jmp 0x10001caf
mov eax, dword [ebp - 0xc8]
sub eax, 0xd8d6f8b2
je 0x1000484f
jmp 0x10001cc5
mov eax, dword [ebp - 0xc8]
sub eax, 0xdb3bcb7d
je 0x10003f17
jmp 0x10001cdb
mov eax, dword [ebp - 0xc8]
sub eax, 0xdcc584cf
je 0x1000387d
jmp 0x10001cf1
mov eax, dword [ebp - 0xc8]
sub eax, 0xdd4cf6a0
je 0x10004a04
jmp 0x10001d07
mov eax, dword [ebp - 0xc8]
sub eax, 0xde7b1bdc
je 0x10003807
jmp 0x10001d1d
mov eax, dword [ebp - 0xc8]
sub eax, 0xe02c5910
je 0x100042d4
jmp 0x10001d33
mov eax, dword [ebp - 0xc8]
sub eax, 0xe282960e
je 0x100042c5
jmp 0x10001d49
mov eax, dword [ebp - 0xc8]
sub eax, 0xe4b7b37e
je 0x10002ab0
jmp 0x10001d5f
mov eax, dword [ebp - 0xc8]
sub eax, 0xe5fa59f0
je 0x1000455d
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
mov edx, ecx
add edx, 0xa52d7e9c
sub edx, 1
sub edx, 0xa52d7e9c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd8b6e97f
mov ecx, 0xef1548a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe5fa59f0
mov ecx, 0x6c7a5cb4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0xc0], 0xc33a57f6
jmp 0x10004cbc
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
mov edx, ecx
add edx, 0x518df1b5
sub edx, 1
sub edx, 0x518df1b5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x76c2e642
mov ecx, 0xc9957ab7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [ebp - 0x7c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb0]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x75], al
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
mov edx, eax
add edx, 0x65dff29b
sub edx, 1
sub edx, 0x65dff29b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x76c2e642
mov ecx, 0x75a52df7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
mov edx, eax
sub edx, 0x211a0763
sub edx, 1
add edx, 0x211a0763
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeec29f13
mov ecx, 0xa9f5dd5e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
mov edx, ecx
sub edx, 0xc8700200
sub edx, 1
add edx, 0xc8700200
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xeec29f13
mov ecx, 0x64790513
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
mov edx, eax
sub edx, 0xb0478c48
sub edx, 1
add edx, 0xb0478c48
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1df47a1f
mov ecx, 0xa76036da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
mov edx, eax
add edx, 0xa44defdc
sub edx, 1
sub edx, 0xa44defdc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1df47a1f
mov ecx, 0xe4b7b37e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
mov edx, ecx
add edx, 0x6b422a3b
sub edx, 1
sub edx, 0x6b422a3b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x85515399
mov ecx, 0x7e06ec45
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
mov edx, ecx
add edx, 0xfb3393a5
sub edx, 1
sub edx, 0xfb3393a5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x925a193d
mov ecx, 0x64768509
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0xa041f5f5
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
mov edx, eax
add edx, 0x5ab88ea4
sub edx, 1
sub edx, 0x5ab88ea4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf980ab61
mov ecx, 0x2e9f607c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
mov edx, eax
sub edx, 0xf42a8162
sub edx, 1
add edx, 0xf42a8162
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdd4cf6a0
mov ecx, 0xd1cfc0d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdd4cf6a0
mov ecx, 0xfcb10ac2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
mov edx, ecx
add edx, 0x4e82e420
sub edx, 1
sub edx, 0x4e82e420
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x891630dc
mov ecx, 0xf2a3c27f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov dword [ebp - 0xc0], 0xa13022c2
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
mov edx, eax
sub edx, 0x97f32170
sub edx, 1
add edx, 0x97f32170
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x86f5e93e
mov ecx, 0x8bc3f46d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x86f5e93e
mov ecx, 0x2bd037e1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xc0], 0x7d910b0
jmp 0x10004cbc
mov eax, dword [ebp - 0x54]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x77459174
mov ecx, 0x6044c9a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
mov edx, eax
sub edx, 0x55b1082b
sub edx, 1
add edx, 0x55b1082b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8b8b8915
mov ecx, 0xc491a883
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0xae18a645
jmp 0x10004cbc
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
mov edx, ecx
add edx, 0x46eda1ef
sub edx, 1
sub edx, 0x46eda1ef
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5c7375e1
mov ecx, 0xc0563476
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
mov edx, eax
add edx, 0x65804a7e
sub edx, 1
sub edx, 0x65804a7e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5c7375e1
mov ecx, 0x192e3e5c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0xc63504a4
jmp 0x10004cbc
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x4c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov word [eax], 0
mov dword [ebp - 0xc0], 0x86257eab
jmp 0x10004cbc
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7e824c06
mov ecx, 0x6b1e437b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0xde7b1bdc
jmp 0x10004cbc
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
mov edx, ecx
sub edx, 0x3e63c7c5
sub edx, 1
add edx, 0x3e63c7c5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x78f3dc5e
mov ecx, 0xdcc584cf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [ebp - 0x44]
add eax, 2
mov dword [ebp - 0x40], eax
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
mov edx, ecx
add edx, 0x4e49b3b3
sub edx, 1
sub edx, 0x4e49b3b3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x78f3dc5e
mov ecx, 0xa993a95
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
mov edx, eax
add edx, 0xfacc788f
sub edx, 1
sub edx, 0xfacc788f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xceb5ff4c
mov ecx, 0x9ee9755f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
mov edx, eax
sub edx, 0x5093484d
sub edx, 1
add edx, 0x5093484d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xceb5ff4c
mov ecx, 0x6693de78
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov edx, ecx
add edx, 0x18
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xc0], 0xf694087a
jmp 0x10004cbc
mov dl, byte [ebp - 0x2d]
mov eax, 0xb1abe0cf
mov ecx, 0x2b20613d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
mov edx, ecx
add edx, 0xe050e1d2
sub edx, 1
sub edx, 0xe050e1d2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf8c552ce
mov ecx, 0xfdde1300
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0x7e4c4a85
jmp 0x10004cbc
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0xc]
sub eax, 0x43420fc4
add eax, ecx
add eax, 0x43420fc4
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x20], eax
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8258df25
mov ecx, 0xaea8d0f4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0xdb3bcb7d
jmp 0x10004cbc
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10010030
add esp, 0xc
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0xac]
mov esi, dword [eax]
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, edi
sub esi, eax
mov eax, dword [ebp - 0x88]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x84]
mov byte [eax], cl
mov dword [ebp - 0xc0], 0x2b20613d
jmp 0x10004cbc
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
mov edx, ecx
sub edx, 0x21ca68d
sub edx, 1
add edx, 0x21ca68d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9466ad94
mov ecx, 0xbd4dc4f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9466ad94
mov ecx, 0x322b5172
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0xe02c5910
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0x86257eab
jmp 0x10004cbc
mov eax, dword [ebp - 0x18]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xc0], 0x9b7cb087
jmp 0x10004cbc
mov eax, dword [0x1006c4a8]
mov ecx, dword [0x1006c4a4]
mov edx, eax
sub edx, 0x8dd36511
sub edx, 1
add edx, 0x8dd36511
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd024017e
mov ecx, 0x5cdb534f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xc0], 0x6b9b2328
jmp 0x10004cbc
mov eax, dword [ebp - 0x88]
mov dword [eax], 0
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0xac]
mov edx, dword [eax]
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0x4e59ff98
add edx, eax
add edx, 0x4e59ff98
mov eax, dword [ebp - 0x88]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x84]
mov byte [eax], cl
mov eax, dword [ebp - 0xac]
mov ecx, dword [0x1006c4a8]
mov eax, dword [0x1006c4a4]
mov edx, ecx
add edx, 0x292769d6
sub edx, 1
sub edx, 0x292769d6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7906d0e0
mov ecx, 0xb570a617
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xc0], eax
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0x75ad3b02
jmp 0x10004cbc
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xc0], 0x433b225f
jmp 0x10004cbc
mov ax, word [ebp - 0x1a]
mov ax, word [ebp - 0x1a]
mov ax, word [ebp - 0x1a]
mov ax, word [ebp - 0x1a]
mov ax, word [ebp - 0x1a]
mov ax, word [ebp - 0x1a]
mov ax, word [ebp - 0x1a]
mov cx, word [ebp - 0x1a]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x90]
mov word [eax], cx
mov dword [ebp - 0xc0], 0x64ffd812
jmp 0x10004cbc
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xbc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0xc0], 0x3d3e2cf9
jmp 0x10004cbc
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb4]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.1000fed0
add esp, 0xc
mov dword [ebp - 0xc0], 0xef1548a8
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0x7e06ec45
jmp 0x10004cbc
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xc0], 0x64768509
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0xd1cfc0d8
jmp 0x10004cbc
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xc0], 0xbf73a42e
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0x8bc3f46d
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0xc15d29e6
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0x9ee9755f
jmp 0x10004cbc
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xc0], 0xd1faf131
jmp 0x10004cbc
mov dword [ebp - 0xc0], 0xbd4dc4f2
jmp 0x10004cbc
mov ax, word [ebp - 0x1a]
mov cx, word [ebp - 0x1a]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x90]
mov word [eax], cx
mov dword [ebp - 0xc0], 0x272c8d38
jmp 0x10004cbc
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xc0], 0x5cdb534f
jmp 0x10004cbc
jmp 0x100017d9