Function at 0x10001300
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xa4
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa8], eax
mov eax, dword [0x1006d604]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
mov edx, ecx
add edx, 0x97c0216a
sub edx, 1
sub edx, 0x97c0216a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x9e], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x9d], al
mov dword [ebp - 0xa4], 0x106c5be3
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xac], eax
sub eax, 0x800f75d4
je 0x100036df
jmp 0x10001383
mov eax, dword [ebp - 0xac]
sub eax, 0x80c6d53d
je 0x100038a5
jmp 0x10001399
mov eax, dword [ebp - 0xac]
sub eax, 0x82401424
je 0x100040d8
jmp 0x100013af
mov eax, dword [ebp - 0xac]
sub eax, 0x84832d49
je 0x10002b57
jmp 0x100013c5
mov eax, dword [ebp - 0xac]
sub eax, 0x88f8cf45
je 0x1000314a
jmp 0x100013db
mov eax, dword [ebp - 0xac]
sub eax, 0x8a1b5411
je 0x10002b1c
jmp 0x100013f1
mov eax, dword [ebp - 0xac]
sub eax, 0x8b0971fa
je 0x100028f9
jmp 0x10001407
mov eax, dword [ebp - 0xac]
sub eax, 0x8fc99e58
je 0x10002383
jmp 0x1000141d
mov eax, dword [ebp - 0xac]
sub eax, 0x904ccc3b
je 0x10003b0e
jmp 0x10001433
mov eax, dword [ebp - 0xac]
sub eax, 0x904d4fff
je 0x1000322e
jmp 0x10001449
mov eax, dword [ebp - 0xac]
sub eax, 0x9389e35b
je 0x1000361d
jmp 0x1000145f
mov eax, dword [ebp - 0xac]
sub eax, 0x96ac0294
je 0x10002fe0
jmp 0x10001475
mov eax, dword [ebp - 0xac]
sub eax, 0x970b597b
je 0x10002d93
jmp 0x1000148b
mov eax, dword [ebp - 0xac]
sub eax, 0x983c6424
je 0x1000355e
jmp 0x100014a1
mov eax, dword [ebp - 0xac]
sub eax, 0x98df2b5c
je 0x10003292
jmp 0x100014b7
mov eax, dword [ebp - 0xac]
sub eax, 0x9a8cd3ce
je 0x100021b6
jmp 0x100014cd
mov eax, dword [ebp - 0xac]
sub eax, 0x9ca68db3
je 0x1000349f
jmp 0x100014e3
mov eax, dword [ebp - 0xac]
sub eax, 0x9fa01959
je 0x100041a3
jmp 0x100014f9
mov eax, dword [ebp - 0xac]
sub eax, 0xa024c70d
je 0x10002cf0
jmp 0x1000150f
mov eax, dword [ebp - 0xac]
sub eax, 0xa08c8dcb
je 0x10004008
jmp 0x10001525
mov eax, dword [ebp - 0xac]
sub eax, 0xa0ba5b0c
je 0x10003708
jmp 0x1000153b
mov eax, dword [ebp - 0xac]
sub eax, 0xa0df21e6
je 0x10003c48
jmp 0x10001551
mov eax, dword [ebp - 0xac]
sub eax, 0xa3260592
je 0x100040c6
jmp 0x10001567
mov eax, dword [ebp - 0xac]
sub eax, 0xa33eaed9
je 0x10003c36
jmp 0x1000157d
mov eax, dword [ebp - 0xac]
sub eax, 0xa6353559
je 0x100041d6
jmp 0x10001593
mov eax, dword [ebp - 0xac]
sub eax, 0xa785aa7b
je 0x1000397b
jmp 0x100015a9
mov eax, dword [ebp - 0xac]
sub eax, 0xab842b0f
je 0x1000252f
jmp 0x100015bf
mov eax, dword [ebp - 0xac]
sub eax, 0xab87b227
je 0x10003e10
jmp 0x100015d5
mov eax, dword [ebp - 0xac]
sub eax, 0xac21258a
je 0x10003f49
jmp 0x100015eb
mov eax, dword [ebp - 0xac]
sub eax, 0xaf1da179
je 0x100040b7
jmp 0x10001601
mov eax, dword [ebp - 0xac]
sub eax, 0xb4c76102
je 0x10002ba8
jmp 0x10001617
mov eax, dword [ebp - 0xac]
sub eax, 0xbbd159e0
je 0x10004082
jmp 0x1000162d
mov eax, dword [ebp - 0xac]
sub eax, 0xbbf71f19
je 0x10003e01
jmp 0x10001643
mov eax, dword [ebp - 0xac]
sub eax, 0xbd10f818
je 0x10003a89
jmp 0x10001659
mov eax, dword [ebp - 0xac]
sub eax, 0xbe261f18
je 0x10002f08
jmp 0x1000166f
mov eax, dword [ebp - 0xac]
sub eax, 0xbf43ff2f
je 0x10003351
jmp 0x10001685
mov eax, dword [ebp - 0xac]
sub eax, 0xc552087c
je 0x1000341a
jmp 0x1000169b
mov eax, dword [ebp - 0xac]
sub eax, 0xc6c0d8e7
je 0x10003cb6
jmp 0x100016b1
mov eax, dword [ebp - 0xac]
sub eax, 0xc82bc4cf
je 0x10003b2e
jmp 0x100016c7
mov eax, dword [ebp - 0xac]
sub eax, 0xc87ee6ba
je 0x1000368e
jmp 0x100016dd
mov eax, dword [ebp - 0xac]
sub eax, 0xc931ba92
je 0x10003776
jmp 0x100016f3
mov eax, dword [ebp - 0xac]
sub eax, 0xcd293aa4
je 0x10002617
jmp 0x10001709
mov eax, dword [ebp - 0xac]
sub eax, 0xcd434eee
je 0x100040a8
jmp 0x1000171f
mov eax, dword [ebp - 0xac]
sub eax, 0xcf45e0fe
je 0x10002608
jmp 0x10001735
mov eax, dword [ebp - 0xac]
sub eax, 0xd32a54df
je 0x10003645
jmp 0x1000174b
mov eax, dword [ebp - 0xac]
sub eax, 0xd45e49c6
je 0x100031b1
jmp 0x10001761
mov eax, dword [ebp - 0xac]
sub eax, 0xd4912277
je 0x100036ee
jmp 0x10001777
mov eax, dword [ebp - 0xac]
sub eax, 0xd5c1a355
je 0x1000272b
jmp 0x1000178d
mov eax, dword [ebp - 0xac]
sub eax, 0xd795eabd
je 0x100038b4
jmp 0x100017a3
mov eax, dword [ebp - 0xac]
sub eax, 0xd7e91218
je 0x10002c7a
jmp 0x100017b9
mov eax, dword [ebp - 0xac]
sub eax, 0xd86d7da1
je 0x10003300
jmp 0x100017cf
mov eax, dword [ebp - 0xac]
sub eax, 0xdf27ecff
je 0x10002e92
jmp 0x100017e5
mov eax, dword [ebp - 0xac]
sub eax, 0xe223f1ef
je 0x100035af
jmp 0x100017fb
mov eax, dword [ebp - 0xac]
sub eax, 0xe2e6b187
je 0x10002e3c
jmp 0x10001811
mov eax, dword [ebp - 0xac]
sub eax, 0xe3bf4c67
je 0x100027f2
jmp 0x10001827
mov eax, dword [ebp - 0xac]
sub eax, 0xe470a5ed
je 0x10002f8f
jmp 0x1000183d
mov eax, dword [ebp - 0xac]
sub eax, 0xe823ecdc
je 0x100020fc
jmp 0x10001853
mov eax, dword [ebp - 0xac]
sub eax, 0xe906e8a2
je 0x1000244a
jmp 0x10001869
mov eax, dword [ebp - 0xac]
sub eax, 0xea134628
je 0x10002908
jmp 0x1000187f
mov eax, dword [ebp - 0xac]
sub eax, 0xeaa5c7e0
je 0x10001fe4
jmp 0x10001895
mov eax, dword [ebp - 0xac]
sub eax, 0xeb882a3d
je 0x100020ed
jmp 0x100018ab
mov eax, dword [ebp - 0xac]
sub eax, 0xeff5fe8e
je 0x10003a1d
jmp 0x100018c1
mov eax, dword [ebp - 0xac]
sub eax, 0xf0d7e056
je 0x10002258
jmp 0x100018d7
mov eax, dword [ebp - 0xac]
sub eax, 0xf2d9d3a3
je 0x10003bab
jmp 0x100018ed
mov eax, dword [ebp - 0xac]
sub eax, 0xf42bcbe9
je 0x10002f80
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
mov edx, ecx
add edx, 0x3417c2fa
sub edx, 1
sub edx, 0x3417c2fa
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4414e35d
mov ecx, 0x5a26f682
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dword [ebp - 0xa4], 0xe823ecdc
jmp 0x10004203
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0xa4], 0x1fc7cfa8
jmp 0x10004203
mov ecx, dword [ebp - 0xa8]
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x9c]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov eax, dword [ebp - 0x98]
mov dword [eax], ecx
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
sub edx, 0x48a05171
sub edx, 1
add edx, 0x48a05171
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x36926730
mov ecx, 0x3aca9fc6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [ebp - 0x94]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10010cb0
add esp, 0xc
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x5d], al
mov dword [ebp - 0xa4], 0x2d2496f
jmp 0x10004203
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
sub edx, 0xd6e1429a
sub edx, 1
add edx, 0xd6e1429a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc82bc4cf
mov ecx, 0x819bc9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
add edx, 0xe1784a23
sub edx, 1
sub edx, 0xe1784a23
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3af8c0de
mov ecx, 0x664a667d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dword [ebp - 0xa4], 0x904ccc3b
jmp 0x10004203
mov dword [ebp - 0xa4], 0xcd293aa4
jmp 0x10004203
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0xa4], 0x49294381
jmp 0x10004203
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
mov edx, ecx
sub edx, 0x64509bcc
sub edx, 1
add edx, 0x64509bcc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x43d8b525
mov ecx, 0x10c04f7c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dword [ebp - 0xa4], 0x904ccc3b
jmp 0x10004203
mov dword [ebp - 0xa4], 0xea134628
jmp 0x10004203
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
add edx, 0xbf85c167
sub edx, 1
sub edx, 0xbf85c167
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbbd159e0
mov ecx, 0x7a8e34be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [ebp - 0x48]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x41], al
mov dword [ebp - 0xa4], 0x2c7fbcf9
jmp 0x10004203
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
sub edx, 0x57f1aa87
sub edx, 1
add edx, 0x57f1aa87
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa0df21e6
mov ecx, 0xb4c76102
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
mov edx, ecx
sub edx, 0x86a10dbb
sub edx, 1
add edx, 0x86a10dbb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa0df21e6
mov ecx, 0xfa849341
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
mov edx, ecx
add edx, 0x9081691
sub edx, 1
sub edx, 0x9081691
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcd434eee
mov ecx, 0xa024c70d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dword [ebp - 0xa4], 0x4f0481cf
jmp 0x10004203
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
sub edx, 0xac1b3955
sub edx, 1
add edx, 0xac1b3955
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaf1da179
mov ecx, 0xfe345d8f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov dword [ebp - 0xa4], 0x640ae27e
jmp 0x10004203
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
mov edx, ecx
sub edx, 0x5b0dfa2e
sub edx, 1
add edx, 0x5b0dfa2e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa3260592
mov ecx, 0xbe261f18
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [ebp - 0x70]
mov ax, word [eax]
mov word [ebp - 0x3a], ax
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa3260592
mov ecx, 0xf42bcbe9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
sub edx, 0x84b145f6
sub edx, 1
add edx, 0x84b145f6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2cbc69
mov ecx, 0x96ac0294
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov ax, word [ebp - 0x3a]
movzx eax, ax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
mov edx, ecx
add edx, 0xa318ab81
sub edx, 1
sub edx, 0xa318ab81
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2cbc69
mov ecx, 0x2b62f3fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dl, byte [ebp - 0x2d]
mov eax, 0xd4912277
mov ecx, 0x1125f018
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, eax
xor eax, eax
mov edx, eax
add edx, 0x18
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x70]
mov ax, word [eax]
mov word [ebp - 0x28], ax
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x82401424
mov ecx, 0x904d4fff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dword [ebp - 0xa4], 0xfd93dd1a
jmp 0x10004203
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x53f59562
mov ecx, 0xd86d7da1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
sub edx, 0x8544646a
sub edx, 1
add edx, 0x8544646a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x53f59562
mov ecx, 0xbf43ff2f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dl, byte [ebp - 0x25]
mov eax, 0x43365bb
mov ecx, 0x31b4e67a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dword [ebp - 0xa4], 0x5fa60dba
jmp 0x10004203
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, esi
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10010e10
add esp, 0xc
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x8c]
mov esi, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add esi, 0x68f138a1
add esi, eax
sub esi, 0x68f138a1
mov eax, dword [ebp - 0x68]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x64]
mov byte [eax], cl
mov dword [ebp - 0xa4], 0x31b4e67a
jmp 0x10004203
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
add edx, 0xc618dbdb
sub edx, 1
sub edx, 0xc618dbdb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x44cdd64f
mov ecx, 0xe223f1ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [ebp - 0x70]
mov ax, word [eax]
xor ecx, ecx
sub cx, ax
xor eax, eax
sub ax, 1
add cx, ax
xor eax, eax
sub ax, cx
mov word [ebp - 0x16], ax
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
add edx, 0xbfa7febb
sub edx, 1
sub edx, 0xbfa7febb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x44cdd64f
mov ecx, 0x9389e35b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dword [ebp - 0xa4], 0x6835e8df
jmp 0x10004203
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x43e5d0c8
mov ecx, 0xc87ee6ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
sub edx, 0xdc05d3fd
sub edx, 1
add edx, 0xdc05d3fd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x43e5d0c8
mov ecx, 0x800f75d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dword [ebp - 0xa4], 0xdf27ecff
jmp 0x10004203
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xa4], 0xa0ba5b0c
jmp 0x10004203
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1fdf1e93
mov ecx, 0xc931ba92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
mov edx, ecx
sub edx, 0xd3a0c515
sub edx, 1
add edx, 0xd3a0c515
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1fdf1e93
mov ecx, 0x25b6a89a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dword [ebp - 0xa4], 0xd795eabd
jmp 0x10004203
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
mov edx, ecx
add edx, 0xdea41e60
sub edx, 1
sub edx, 0xdea41e60
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2b16ca76
mov ecx, 0xae976e4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
sub edx, 0x85417bd0
sub edx, 1
add edx, 0x85417bd0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x25e565ea
mov ecx, 0x3f780f4c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x35efd08
mov ecx, 0xbd10f818
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
mov edx, ecx
add edx, 0xf0384818
sub edx, 1
sub edx, 0xf0384818
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x25e565ea
mov ecx, 0x502caa13
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10010080
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0xa4], 0x819bc9d
jmp 0x10004203
mov eax, dword [ebp - 0x90]
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
mov edx, ecx
add edx, 0xa49484e1
sub edx, 1
sub edx, 0xa49484e1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x215f03b
mov ecx, 0x33a90263
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xa4], 0x6479dda0
jmp 0x10004203
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2e52eb95
mov ecx, 0xc6c0d8e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [ebp - 0x84]
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2e52eb95
mov ecx, 0x4c545117
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dword [ebp - 0xa4], 0xe223f1ef
jmp 0x10004203
mov ecx, dword [0x1006e8a8]
mov eax, dword [0x1006e8a4]
mov edx, ecx
add edx, 0xffc557b8
sub edx, 1
sub edx, 0xffc557b8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x55c7cc28
mov ecx, 0xd9adb3e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov eax, dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1006e8a8]
mov ecx, dword [0x1006e8a4]
mov edx, eax
sub edx, 0x9e43b78e
sub edx, 1
add edx, 0x9e43b78e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa6353559
mov ecx, 0x1172d5f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004203
mov dword [ebp - 0xa4], 0x59ec0785
jmp 0x10004203
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
mov dword [ebp - 0xa4], 0x7a8e34be
jmp 0x10004203
mov dword [ebp - 0xa4], 0xd7e91218
jmp 0x10004203
mov dword [ebp - 0xa4], 0x970b597b
jmp 0x10004203
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xa4], 0xbe261f18
jmp 0x10004203
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xa4], 0xd45e49c6
jmp 0x10004203
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xa4], 0x1fc69068
jmp 0x10004203
mov eax, dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa4], 0xac21258a
jmp 0x10001367