Function at 0x10001340
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1ac
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1b4], eax
mov eax, dword [0x1006cc04]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1b0], 0xa1ea141e
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b8], eax
sub eax, 0x8289e2e6
je 0x10005935
jmp 0x10001385
mov eax, dword [ebp - 0x1b8]
sub eax, 0x831bd0e4
je 0x10004e79
jmp 0x1000139b
mov eax, dword [ebp - 0x1b8]
sub eax, 0x850ed491
je 0x10002fd3
jmp 0x100013b1
mov eax, dword [ebp - 0x1b8]
sub eax, 0x86cd0b8b
je 0x100047ed
jmp 0x100013c7
mov eax, dword [ebp - 0x1b8]
sub eax, 0x874e131b
je 0x10004da5
jmp 0x100013dd
mov eax, dword [ebp - 0x1b8]
sub eax, 0x877249f5
je 0x10005967
jmp 0x100013f3
mov eax, dword [ebp - 0x1b8]
sub eax, 0x87b33179
je 0x100033eb
jmp 0x10001409
mov eax, dword [ebp - 0x1b8]
sub eax, 0x87b34449
je 0x10005823
jmp 0x1000141f
mov eax, dword [ebp - 0x1b8]
sub eax, 0x87c03d10
je 0x1000495d
jmp 0x10001435
mov eax, dword [ebp - 0x1b8]
sub eax, 0x8802f95b
je 0x100049a6
jmp 0x1000144b
mov eax, dword [ebp - 0x1b8]
sub eax, 0x896865d1
je 0x10004d96
jmp 0x10001461
mov eax, dword [ebp - 0x1b8]
sub eax, 0x8c742ca3
je 0x10003de2
jmp 0x10001477
mov eax, dword [ebp - 0x1b8]
sub eax, 0x8dac4983
je 0x10003d2b
jmp 0x1000148d
mov eax, dword [ebp - 0x1b8]
sub eax, 0x8e214647
je 0x100041ef
jmp 0x100014a3
mov eax, dword [ebp - 0x1b8]
sub eax, 0x8f9d4722
je 0x10002d40
jmp 0x100014b9
mov eax, dword [ebp - 0x1b8]
sub eax, 0x909de475
je 0x10004863
jmp 0x100014cf
mov eax, dword [ebp - 0x1b8]
sub eax, 0x90f5d065
je 0x1000578a
jmp 0x100014e5
mov eax, dword [ebp - 0x1b8]
sub eax, 0x92c46c6f
je 0x10002683
jmp 0x100014fb
mov eax, dword [ebp - 0x1b8]
sub eax, 0x930f225b
je 0x100028b7
jmp 0x10001511
mov eax, dword [ebp - 0x1b8]
sub eax, 0x959d00ee
je 0x100048b4
jmp 0x10001527
mov eax, dword [ebp - 0x1b8]
sub eax, 0x9703ec88
je 0x10004683
jmp 0x1000153d
mov eax, dword [ebp - 0x1b8]
sub eax, 0x97789375
je 0x10004734
jmp 0x10001553
mov eax, dword [ebp - 0x1b8]
sub eax, 0x97cf600a
je 0x100027bc
jmp 0x10001569
mov eax, dword [ebp - 0x1b8]
sub eax, 0x9e0ad257
je 0x100056f7
jmp 0x1000157f
mov eax, dword [ebp - 0x1b8]
sub eax, 0x9e9be173
je 0x10005721
jmp 0x10001595
mov eax, dword [ebp - 0x1b8]
sub eax, 0x9f1b3ef1
je 0x10005999
jmp 0x100015ab
mov eax, dword [ebp - 0x1b8]
sub eax, 0x9f790b60
je 0x1000477d
jmp 0x100015c1
mov eax, dword [ebp - 0x1b8]
sub eax, 0xa076ded6
je 0x10005883
jmp 0x100015d7
mov eax, dword [ebp - 0x1b8]
sub eax, 0xa1ea141e
je 0x10002478
jmp 0x100015ed
mov eax, dword [ebp - 0x1b8]
sub eax, 0xa1ea8faf
je 0x10004f7a
jmp 0x10001603
mov eax, dword [ebp - 0x1b8]
sub eax, 0xa28df8a1
je 0x10004bc3
jmp 0x10001619
mov eax, dword [ebp - 0x1b8]
sub eax, 0xa32222c7
je 0x10004240
jmp 0x1000162f
mov eax, dword [ebp - 0x1b8]
sub eax, 0xa3a6c546
je 0x10003461
jmp 0x10001645
mov eax, dword [ebp - 0x1b8]
sub eax, 0xa6baaddf
je 0x10002e2b
jmp 0x1000165b
mov eax, dword [ebp - 0x1b8]
sub eax, 0xa6dbeb95
je 0x1000597c
jmp 0x10001671
mov eax, dword [ebp - 0x1b8]
sub eax, 0xa7c6cc40
je 0x1000565b
jmp 0x10001687
mov eax, dword [ebp - 0x1b8]
sub eax, 0xa9fdb149
je 0x100049f7
jmp 0x1000169d
mov eax, dword [ebp - 0x1b8]
sub eax, 0xab3cc5e2
je 0x10002e83
jmp 0x100016b3
mov eax, dword [ebp - 0x1b8]
sub eax, 0xab62b165
je 0x10003fc9
jmp 0x100016c9
mov eax, dword [ebp - 0x1b8]
sub eax, 0xab87a26c
je 0x100050a4
jmp 0x100016df
mov eax, dword [ebp - 0x1b8]
sub eax, 0xb0acb30a
je 0x10002f4e
jmp 0x100016f5
mov eax, dword [ebp - 0x1b8]
sub eax, 0xb25fc75d
je 0x100057d9
jmp 0x1000170b
mov eax, dword [ebp - 0x1b8]
sub eax, 0xb5a2546b
je 0x100036e4
jmp 0x10001721
mov eax, dword [ebp - 0x1b8]
sub eax, 0xb9dfde1f
je 0x10002841
jmp 0x10001737
mov eax, dword [ebp - 0x1b8]
sub eax, 0xbb1fbb8b
je 0x10003521
jmp 0x1000174d
mov eax, dword [ebp - 0x1b8]
sub eax, 0xbc87bed7
je 0x100056e2
jmp 0x10001763
mov eax, dword [ebp - 0x1b8]
sub eax, 0xbf3ad713
je 0x1000522f
jmp 0x10001779
mov eax, dword [ebp - 0x1b8]
sub eax, 0xc0405bac
je 0x10003504
jmp 0x1000178f
mov eax, dword [ebp - 0x1b8]
sub eax, 0xc1d2e7af
je 0x10003b86
jmp 0x100017a5
mov eax, dword [ebp - 0x1b8]
sub eax, 0xc47090ea
je 0x10005706
jmp 0x100017bb
mov eax, dword [ebp - 0x1b8]
sub eax, 0xc57315ea
je 0x100025a9
jmp 0x100017d1
mov eax, dword [ebp - 0x1b8]
sub eax, 0xc58c5a43
je 0x10004c8a
jmp 0x100017e7
mov eax, dword [ebp - 0x1b8]
sub eax, 0xc5fcd9c8
je 0x1000531f
jmp 0x100017fd
mov eax, dword [ebp - 0x1b8]
sub eax, 0xc9c7bbac
je 0x1000382d
jmp 0x10001813
mov eax, dword [ebp - 0x1b8]
sub eax, 0xca288c39
je 0x100058f3
jmp 0x10001829
mov eax, dword [ebp - 0x1b8]
sub eax, 0xcc4eab3a
je 0x10004ae3
jmp 0x1000183f
mov eax, dword [ebp - 0x1b8]
sub eax, 0xcc80f85a
je 0x10005020
jmp 0x10001855
mov eax, dword [ebp - 0x1b8]
sub eax, 0xcce4b7c2
je 0x100046d4
jmp 0x1000186b
mov eax, dword [ebp - 0x1b8]
sub eax, 0xcdb79b4b
je 0x100024c9
jmp 0x10001881
mov eax, dword [ebp - 0x1b8]
sub eax, 0xce3ceb0c
je 0x1000378d
jmp 0x10001897
mov eax, dword [ebp - 0x1b8]
sub eax, 0xcfc4c608
je 0x100033ce
jmp 0x100018ad
mov eax, dword [ebp - 0x1b8]
sub eax, 0xd0401c06
je 0x10003360
jmp 0x100018c3
mov eax, dword [ebp - 0x1b8]
sub eax, 0xd1cfeabd
je 0x10005814
jmp 0x100018d9
mov eax, dword [ebp - 0x1b8]
sub eax, 0xd1e483ee
je 0x10004cc9
jmp 0x100018ef
mov eax, dword [ebp - 0x1b8]
sub eax, 0xd21be4da
je 0x10004eef
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
add edx, 0x27ec0e43
sub edx, 1
sub edx, 0x27ec0e43
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf7c2e800
mov ecx, 0xcdb79b4b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [ebp - 0x1b4]
push eax
mov ecx, esp
mov dword [ebp - 0x19c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x198], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x194], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x190], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x18c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x188], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x184], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x180], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x1a0], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x1a4], eax
lea eax, [ebp - 0x120]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10011b00
add esp, 0xc
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
add edx, 0xbae412ca
sub edx, 1
sub edx, 0xbae412ca
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf7c2e800
mov ecx, 0xc57315ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov dword [ebp - 0x1b0], 0xd9f95c61
jmp 0x10005ad8
mov dword [ebp - 0x1b0], 0x59b65b0a
jmp 0x10005ad8
mov dword [ebp - 0x1b0], 0x407a6886
jmp 0x10005ad8
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
mov edx, ecx
sub edx, 0xb3a79ab7
sub edx, 1
add edx, 0xb3a79ab7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2907bc15
mov ecx, 0x930f225b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa28df8a1
mov ecx, 0x3d7c2b68
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
sub edx, 0xfa7e6850
sub edx, 1
add edx, 0xfa7e6850
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5d13f3c1
mov ecx, 0x620f42d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov dword [ebp - 0x1b0], 0xfc2ce265
jmp 0x10005ad8
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc47090ea
mov ecx, 0xe88cbeda
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
mov edx, ecx
add edx, 0xd6256273
sub edx, 1
sub edx, 0xd6256273
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfe8a92b
mov ecx, 0x56bff405
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
lea eax, [ebp - 0x114]
mov ecx, dword [ebp - 0x1a8]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x19c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x19c]
mov esi, 0xffffffff
mov eax, 0xf6b2696b
mov ecx, 0x77f7ba86
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x160]
mov dword [eax], ecx
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
sub edx, 0xf79c1b04
sub edx, 1
add edx, 0xf79c1b04
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x874e131b
mov ecx, 0x7cd4044c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [ebp - 0x198]
mov eax, dword [eax]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x1b0], 0x87b33179
jmp 0x10005ad8
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
mov edx, ecx
sub edx, 0xe08eb57c
sub edx, 1
add edx, 0xe08eb57c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x831bd0e4
mov ecx, 0xa3a6c546
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [ebp - 0x15c]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x155], al
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x831bd0e4
mov ecx, 0x67882736
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x1b0], 0xbb1fbb8b
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
sub edx, 0x5f4de24d
sub edx, 1
add edx, 0x5f4de24d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa1ea8faf
mov ecx, 0xef950022
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
sub edx, 0x65441ad0
sub edx, 1
add edx, 0x65441ad0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1b2dcaf9
mov ecx, 0x3d7508ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [ebp - 0x198]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
add edx, 0x159ddba8
sub edx, 1
sub edx, 0x159ddba8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x90f5d065
mov ecx, 0x5d276fc4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb25fc75d
mov ecx, 0x2a3b1be0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [ebp - 0x190]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x150]
add ecx, 0x7cdd86df
add ecx, eax
sub ecx, 0x7cdd86df
mov eax, dword [ebp - 0x18c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x188]
mov word [eax], 0
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
add edx, 0x8258e2c2
sub edx, 1
sub edx, 0x8258e2c2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x72eb496
mov ecx, 0xe592b0dd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xff94a7a7
mov ecx, 0xf3fa1fda
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [ebp - 0x148]
mov ax, word [eax + 2]
mov word [ebp - 0x144], ax
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
mov edx, ecx
add edx, 0x2d901605
sub edx, 1
sub edx, 0x2d901605
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x87b34449
mov ecx, 0x6e0a04ca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov ax, word [ebp - 0x144]
movzx ecx, ax
mov eax, dword [ebp - 0x14c]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x141], al
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
mov edx, ecx
sub edx, 0x2a03a1b4
sub edx, 1
add edx, 0x2a03a1b4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdaf0b6c3
mov ecx, 0x3f83ce81
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
sub edx, 0xd6f09c53
sub edx, 1
add edx, 0xd6f09c53
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4dee65c7
mov ecx, 0xa32222c7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
mov edx, ecx
add edx, 0xdb5fec75
sub edx, 1
sub edx, 0xdb5fec75
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4dee65c7
mov ecx, 0x46b82a98
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
sub edx, 0xe43676f4
sub edx, 1
add edx, 0xe43676f4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6681bf2b
mov ecx, 0xcce4b7c2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
sub edx, 0x1022f235
sub edx, 1
add edx, 0x1022f235
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6681bf2b
mov ecx, 0xd6985761
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xca288c39
mov ecx, 0x9f790b60
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [ebp - 0x188]
mov ax, word [eax]
mov word [ebp - 0x128], ax
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
add edx, 0x976579f4
sub edx, 1
sub edx, 0x976579f4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xca288c39
mov ecx, 0x78057dd2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov ax, word [ebp - 0x128]
xor ecx, ecx
sub cx, 1
sub ax, cx
mov word [ebp - 0x126], ax
mov dword [ebp - 0x1b0], 0x2d60c814
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
sub edx, 0x280827ef
sub edx, 1
add edx, 0x280827ef
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x116d8f9b
mov ecx, 0x959d00ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [ebp - 0x124]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1a4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
mov edx, ecx
add edx, 0x7be8cf29
sub edx, 1
sub edx, 0x7be8cf29
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x116d8f9b
mov ecx, 0x4e2ec226
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x339a2b21
mov ecx, 0x8802f95b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
sub edx, 0xe8bf6cdf
sub edx, 1
add edx, 0xe8bf6cdf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x339a2b21
mov ecx, 0xa9fdb149
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
mov edx, ecx
add edx, 0x351e419e
sub edx, 1
sub edx, 0x351e419e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x79542806
mov ecx, 0xe9380793
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xde2e106b
mov ecx, 0xe3809905
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
sub edx, 0x1df9a40e
sub edx, 1
add edx, 0x1df9a40e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd2c7a07d
mov ecx, 0x2b052445
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov dword [ebp - 0x1b0], 0x3d7c2b68
jmp 0x10005ad8
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
mov edx, ecx
add edx, 0xe527561b
sub edx, 1
sub edx, 0xe527561b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8289e2e6
mov ecx, 0x6188780
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov dword [ebp - 0x1b0], 0x66fccf4b
jmp 0x10005ad8
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x10e7219b
mov ecx, 0xe82f0d27
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
mov edx, ecx
sub edx, 0x4d2ba062
sub edx, 1
add edx, 0x4d2ba062
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x877249f5
mov ecx, 0xd21be4da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [ebp - 0x154]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1b0], 0xef950022
jmp 0x10005ad8
mov ecx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x190]
mov dword [eax], ecx
mov ecx, dword [0x1006dea8]
mov eax, dword [0x1006dea4]
mov edx, ecx
sub edx, 0xdd193319
sub edx, 1
add edx, 0xdd193319
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa6dbeb95
mov ecx, 0xab87a26c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov dword [ebp - 0x1b0], 0x2b306758
jmp 0x10005ad8
mov eax, dword [ebp - 0x148]
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
mov edx, eax
sub edx, 0x5b6211c8
sub edx, 1
add edx, 0x5b6211c8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x438e16a0
mov ecx, 0xea56cb8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov eax, dword [ebp - 0x180]
mov dword [eax], 0
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x180]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x17c]
mov byte [eax], cl
mov eax, dword [ebp - 0x184]
mov eax, dword [ebp - 0x194]
mov eax, dword [ebp - 0x184]
mov eax, dword [ebp - 0x184]
mov eax, dword [0x1006dea8]
mov ecx, dword [0x1006dea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfd34f160
mov ecx, 0x56af48a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10005ad8
mov dword [ebp - 0x1b0], 0x5dcc2773
jmp 0x10005ad8
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1b0], 0xf33543d
jmp 0x10005ad8
mov dword [ebp - 0x1b0], 0x33eec2ed
jmp 0x10005ad8
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1b0], 0xe88cbeda
jmp 0x10005ad8
mov dword [ebp - 0x1b0], 0x4db0089
jmp 0x10005ad8
mov eax, dword [ebp - 0x198]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x194]
mov dword [eax], ecx
mov dword [ebp - 0x1b0], 0xce3ceb0c
jmp 0x10005ad8
mov dword [ebp - 0x1b0], 0x2a3b1be0
jmp 0x10005ad8
mov dword [ebp - 0x1b0], 0xeed9d4a1
jmp 0x10005ad8
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x1b0], 0x8c742ca3
jmp 0x10005ad8
mov eax, dword [ebp - 0x180]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov esi, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
xor esi, esi
sub esi, edi
add eax, esi
xor esi, esi
sub esi, eax
mov eax, dword [ebp - 0x180]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x17c]
mov byte [eax], cl
mov dword [ebp - 0x1b0], 0xf8be3ab7
jmp 0x10005ad8
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x1b0], 0x9f790b60
jmp 0x10005ad8
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1b0], 0x6188780
jmp 0x10005ad8
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1b0], 0xd21be4da
jmp 0x10005ad8
mov ecx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x190]
mov dword [eax], ecx
mov dword [ebp - 0x1b0], 0xcc80f85a
jmp 0x10005ad8
mov eax, dword [ebp - 0x190]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
add ecx, 0xe566cc41
add ecx, eax
sub ecx, 0xe566cc41
mov eax, dword [ebp - 0x18c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x188]
mov word [eax], 0
mov dword [ebp - 0x1b0], 0x32c43294
jmp 0x10005ad8
jmp 0x10001369