Function at 0x100019b0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xb4
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb8], eax
mov eax, dword [0x1006e804]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0xae], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0xad], al
mov dword [ebp - 0xb4], 0xd842f726
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xbc], eax
sub eax, 0x8051d7e2
je 0x100035a1
jmp 0x10001a2b
mov eax, dword [ebp - 0xbc]
sub eax, 0x80a2a056
je 0x100049d1
jmp 0x10001a41
mov eax, dword [ebp - 0xbc]
sub eax, 0x83be3535
je 0x10004f01
jmp 0x10001a57
mov eax, dword [ebp - 0xbc]
sub eax, 0x8444f6d8
je 0x1000387c
jmp 0x10001a6d
mov eax, dword [ebp - 0xbc]
sub eax, 0x8585f5d5
je 0x10004d96
jmp 0x10001a83
mov eax, dword [ebp - 0xbc]
sub eax, 0x8963b022
je 0x10004ee0
jmp 0x10001a99
mov eax, dword [ebp - 0xbc]
sub eax, 0x8a80d956
je 0x10003001
jmp 0x10001aaf
mov eax, dword [ebp - 0xbc]
sub eax, 0x8baefa0d
je 0x10002df9
jmp 0x10001ac5
mov eax, dword [ebp - 0xbc]
sub eax, 0x8d30a814
je 0x10004cab
jmp 0x10001adb
mov eax, dword [ebp - 0xbc]
sub eax, 0x8fcc0115
je 0x10004284
jmp 0x10001af1
mov eax, dword [ebp - 0xbc]
sub eax, 0x902f8901
je 0x10003bad
jmp 0x10001b07
mov eax, dword [ebp - 0xbc]
sub eax, 0x976e1a2c
je 0x10004cea
jmp 0x10001b1d
mov eax, dword [ebp - 0xbc]
sub eax, 0x9e2f1d00
je 0x10004c5e
jmp 0x10001b33
mov eax, dword [ebp - 0xbc]
sub eax, 0xa0eba8d6
je 0x10004cc9
jmp 0x10001b49
mov eax, dword [ebp - 0xbc]
sub eax, 0xa470f2a7
je 0x10002ada
jmp 0x10001b5f
mov eax, dword [ebp - 0xbc]
sub eax, 0xa70ca89d
je 0x10002bc6
jmp 0x10001b75
mov eax, dword [ebp - 0xbc]
sub eax, 0xa7849383
je 0x10004b79
jmp 0x10001b8b
mov eax, dword [ebp - 0xbc]
sub eax, 0xa880edd5
je 0x10004d7b
jmp 0x10001ba1
mov eax, dword [ebp - 0xbc]
sub eax, 0xa8c54600
je 0x100038c5
jmp 0x10001bb7
mov eax, dword [ebp - 0xbc]
sub eax, 0xa8cf971a
je 0x10004f1f
jmp 0x10001bcd
mov eax, dword [ebp - 0xbc]
sub eax, 0xa9a971cb
je 0x10004f70
jmp 0x10001be3
mov eax, dword [ebp - 0xbc]
sub eax, 0xaab30bf7
je 0x10004cf9
jmp 0x10001bf9
mov eax, dword [ebp - 0xbc]
sub eax, 0xabe25c61
je 0x1000380c
jmp 0x10001c0f
mov eax, dword [ebp - 0xbc]
sub eax, 0xacd6bd63
je 0x1000348c
jmp 0x10001c25
mov eax, dword [ebp - 0xbc]
sub eax, 0xad83eba4
je 0x1000381b
jmp 0x10001c3b
mov eax, dword [ebp - 0xbc]
sub eax, 0xaef938d9
je 0x100029ff
jmp 0x10001c51
mov eax, dword [ebp - 0xbc]
sub eax, 0xaf03adc6
je 0x1000326f
jmp 0x10001c67
mov eax, dword [ebp - 0xbc]
sub eax, 0xaf5af3e9
je 0x10002e7e
jmp 0x10001c7d
mov eax, dword [ebp - 0xbc]
sub eax, 0xb027eaf2
je 0x10003fe1
jmp 0x10001c93
mov eax, dword [ebp - 0xbc]
sub eax, 0xb0371f67
je 0x10004cdb
jmp 0x10001ca9
mov eax, dword [ebp - 0xbc]
sub eax, 0xb5c8abf4
je 0x10002ba8
jmp 0x10001cbf
mov eax, dword [ebp - 0xbc]
sub eax, 0xb89389f9
je 0x100027ee
jmp 0x10001cd5
mov eax, dword [ebp - 0xbc]
sub eax, 0xbae3e9b7
je 0x10002cf8
jmp 0x10001ceb
mov eax, dword [ebp - 0xbc]
sub eax, 0xbcf30953
je 0x1000468b
jmp 0x10001d01
mov eax, dword [ebp - 0xbc]
sub eax, 0xbd533491
je 0x10004701
jmp 0x10001d17
mov eax, dword [ebp - 0xbc]
sub eax, 0xbf4c54ee
je 0x10003eb4
jmp 0x10001d2d
mov eax, dword [ebp - 0xbc]
sub eax, 0xc0653b2b
je 0x1000337f
jmp 0x10001d43
mov eax, dword [ebp - 0xbc]
sub eax, 0xc081a015
je 0x1000284e
jmp 0x10001d59
mov eax, dword [ebp - 0xbc]
sub eax, 0xc23075cc
je 0x100032e5
jmp 0x10001d6f
mov eax, dword [ebp - 0xbc]
sub eax, 0xc29d1ee0
je 0x10003a3d
jmp 0x10001d85
mov eax, dword [ebp - 0xbc]
sub eax, 0xc41a4739
je 0x100034c4
jmp 0x10001d9b
mov eax, dword [ebp - 0xbc]
sub eax, 0xc43f8fe8
je 0x10004ef2
jmp 0x10001db1
mov eax, dword [ebp - 0xbc]
sub eax, 0xc47e012a
je 0x10004825
jmp 0x10001dc7
mov eax, dword [ebp - 0xbc]
sub eax, 0xc62aac68
je 0x10002fa1
jmp 0x10001ddd
mov eax, dword [ebp - 0xbc]
sub eax, 0xc637f0d1
je 0x10003089
jmp 0x10001df3
mov eax, dword [ebp - 0xbc]
sub eax, 0xc6b3089a
je 0x10003858
jmp 0x10001e09
mov eax, dword [ebp - 0xbc]
sub eax, 0xc7ede4b4
je 0x10002efe
jmp 0x10001e1f
mov eax, dword [ebp - 0xbc]
sub eax, 0xd0c26d0b
je 0x100045cc
jmp 0x10001e35
mov eax, dword [ebp - 0xbc]
sub eax, 0xd50f69de
je 0x10002b5f
jmp 0x10001e4b
mov eax, dword [ebp - 0xbc]
sub eax, 0xd80c6bb8
je 0x10003de6
jmp 0x10001e61
mov eax, dword [ebp - 0xbc]
sub eax, 0xd842f726
je 0x100026d2
jmp 0x10001e77
mov eax, dword [ebp - 0xbc]
sub eax, 0xdb3355ec
je 0x10002da8
jmp 0x10001e8d
mov eax, dword [ebp - 0xbc]
sub eax, 0xdceab951
je 0x10003e37
jmp 0x10001ea3
mov eax, dword [ebp - 0xbc]
sub eax, 0xdf02a46d
je 0x10002780
jmp 0x10001eb9
mov eax, dword [ebp - 0xbc]
sub eax, 0xdf68ebfe
je 0x100048fc
jmp 0x10001ecf
mov eax, dword [ebp - 0xbc]
sub eax, 0xe0c50413
je 0x10003b7f
jmp 0x10001ee5
mov eax, dword [ebp - 0xbc]
sub eax, 0xe1374e9e
je 0x10004057
jmp 0x10001efb
mov eax, dword [ebp - 0xbc]
sub eax, 0xe174fe99
je 0x1000332e
jmp 0x10001f11
mov eax, dword [ebp - 0xbc]
sub eax, 0xe2d13777
je 0x1000435a
jmp 0x10001f27
mov eax, dword [ebp - 0xbc]
sub eax, 0xe586b3ea
je 0x100034e2
jmp 0x10001f3d
mov eax, dword [ebp - 0xbc]
sub eax, 0xe75758c8
je 0x100034aa
jmp 0x10001f53
mov eax, dword [ebp - 0xbc]
sub eax, 0xe9e0fbe3
je 0x100040d7
jmp 0x10001f69
mov eax, dword [ebp - 0xbc]
sub eax, 0xeb76d45d
je 0x10003617
jmp 0x10001f7f
mov eax, dword [ebp - 0xbc]
sub eax, 0xedceb105
je 0x10004e72
jmp 0x10001f95
mov eax, dword [ebp - 0xbc]
sub eax, 0xede87bb7
je 0x100041a5
mov bl, byte [ebp - 0xae]
mov dh, byte [ebp - 0xad]
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfb459891
mov ecx, 0x759537d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x29b24837
mov ecx, 0xb89389f9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
mov edx, eax
add edx, 0xcd1fb357
sub edx, 1
sub edx, 0xcd1fb357
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x29b24837
mov ecx, 0x108ea96a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
mov edx, ecx
add edx, 0x427fdf18
sub edx, 1
sub edx, 0x427fdf18
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x79df683b
mov ecx, 0x71e24216
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
mov edx, eax
add edx, 0xbd84c811
sub edx, 1
sub edx, 0xbd84c811
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf8e68a74
mov ecx, 0x209cacb6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0x65300676
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8d30a814
mov ecx, 0xb5c8abf4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov dl, byte [ebp - 0x69]
mov eax, 0xa70ca89d
mov ecx, 0x6233bc86
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0x1d7c2a1e
jmp 0x10004fdd
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x64]
mov dword [eax], ecx
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
mov edx, eax
add edx, 0x78f7f372
sub edx, 1
sub edx, 0x78f7f372
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2c6ec619
mov ecx, 0x73fa8ffc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
mov edx, eax
sub edx, 0xb5035e7f
sub edx, 1
add edx, 0xb5035e7f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x742820ff
mov ecx, 0x8baefa0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0x6938a07e
jmp 0x10004fdd
mov eax, dword [ebp - 0x60]
mov ecx, 0xffffffff
cmp eax, ecx
sete al
and al, 1
mov byte [ebp - 0x59], al
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa0eba8d6
mov ecx, 0xc7ede4b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0x5ebd2db8
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
mov edx, eax
add edx, 0xcfe47daf
sub edx, 1
sub edx, 0xcfe47daf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb0371f67
mov ecx, 0x23e779e5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0xb4], 0x76f750ce
jmp 0x10004fdd
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
mov edx, ecx
sub edx, 0x188b6781
sub edx, 1
add edx, 0x188b6781
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x976e1a2c
mov ecx, 0x4361e106
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
mov edx, ecx
add edx, 0xf3af85d7
sub edx, 1
sub edx, 0xf3af85d7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc47e012a
mov ecx, 0xc23075cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3b970f27
mov ecx, 0xe174fe99
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
mov edx, eax
add edx, 0x1be76c96
sub edx, 1
sub edx, 0x1be76c96
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3b970f27
mov ecx, 0xc0653b2b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0x7ba55a30
jmp 0x10004fdd
mov dl, byte [ebp - 0x4d]
mov eax, 0xe75758c8
mov ecx, 0x6d13c377
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0xb4], 0xc41a4739
jmp 0x10004fdd
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xb4], 0xe586b3ea
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x64ee2fdd
mov ecx, 0x45407915
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
mov edx, ecx
sub edx, 0x115180ca
sub edx, 1
add edx, 0x115180ca
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2a2911fe
mov ecx, 0xeb76d45d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
mov edx, ecx
add edx, 0xa868bca6
sub edx, 1
sub edx, 0xa868bca6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x64ee2fdd
mov ecx, 0x74586fc0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0xad83eba4
jmp 0x10004fdd
mov eax, dword [ebp - 0x80]
mov ax, word [eax]
mov word [ebp - 0x3e], ax
mov dword [ebp - 0xb4], 0x28e7beaf
jmp 0x10004fdd
mov eax, dword [ebp - 0x38]
movzx esi, word [eax + 6]
mov edx, dword [ebp - 0x3c]
mov eax, 0x209c266d
mov ecx, 0x8444f6d8
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa880edd5
mov ecx, 0xa8c54600
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
sub eax, 0x9c6af72c
xor ecx, ecx
add ecx, 0x18
add eax, ecx
add eax, 0x9c6af72c
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x30], eax
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
mov edx, ecx
add edx, 0xfdeb75b7
sub edx, 1
sub edx, 0xfdeb75b7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa880edd5
mov ecx, 0x7bb6baa6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0x34fa50e7
jmp 0x10004fdd
mov eax, dword [ebp - 0x78]
mov dword [eax], 0
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xb4], 0x902f8901
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
mov edx, eax
add edx, 0xec0b11a7
sub edx, 1
sub edx, 0xec0b11a7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x80a2a056
mov ecx, 0x25fe7cf8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
mov edx, eax
sub edx, 0x326c7c2a
sub edx, 1
add edx, 0x326c7c2a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xedceb105
mov ecx, 0xdceab951
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xedceb105
mov ecx, 0x77de8a3b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
mov edx, ecx
sub edx, 0x7c863dd
sub edx, 1
add edx, 0x7c863dd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x67ca0c61
mov ecx, 0x4fe0a154
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
mov edx, ecx
add edx, 0xdf7abe43
sub edx, 1
sub edx, 0xdf7abe43
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8963b022
mov ecx, 0xe1374e9e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [ebp - 0x80]
mov ax, word [eax]
mov word [ebp - 0x12], ax
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
mov edx, ecx
sub edx, 0xaa4c6e17
sub edx, 1
add edx, 0xaa4c6e17
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8963b022
mov ecx, 0xe9e0fbe3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0x7ef85d99
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
mov edx, eax
sub edx, 0xa85bd342
sub edx, 1
add edx, 0xa85bd342
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x83be3535
mov ecx, 0x14a4d616
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
mov edx, ecx
sub edx, 0xc45be2dc
sub edx, 1
add edx, 0xc45be2dc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1c46f54b
mov ecx, 0x50cc9809
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x332a62e0
mov ecx, 0x5631bbfb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov ecx, dword [0x1006faa8]
mov eax, dword [0x1006faa4]
mov edx, ecx
add edx, 0xd2e5fe98
sub edx, 1
sub edx, 0xd2e5fe98
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa8cf971a
mov ecx, 0xbd533491
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10011300
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x58]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov dword [ebp - 0xb4], 0xfe8f9623
jmp 0x10004fdd
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov word [eax], 0
mov eax, dword [0x1006faa8]
mov ecx, dword [0x1006faa4]
mov edx, eax
sub edx, 0x9a99e428
sub edx, 1
add edx, 0x9a99e428
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf706cfd0
mov ecx, 0x7e194427
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb4], eax
jmp 0x10004fdd
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
sub edx, 0x81515646
add edx, eax
add edx, 0x81515646
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x24]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x74]
mov byte [eax], cl
mov eax, dword [ebp - 0x9c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0x3ee1e91d
add edx, eax
add edx, 0x3ee1e91d
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub ecx, eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10012090
add esp, 0xc
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb4], 0x25fe7cf8
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0x78253f29
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0xd0c26d0b
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0xd50f69de
jmp 0x10004fdd
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xb4], 0xaf5af3e9
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0xc62aac68
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0xc637f0d1
jmp 0x10004fdd
mov eax, dword [ebp - 0x58]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov ecx, eax
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov dword [ebp - 0xb4], 0x2493dd1d
jmp 0x10004fdd
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xb4], 0xa8c54600
jmp 0x10004fdd
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xb4], 0x498ed4fb
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0xdceab951
jmp 0x10004fdd
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xb4], 0xe1374e9e
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0x32971637
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0x14a4d616
jmp 0x10004fdd
mov dword [ebp - 0xb4], 0xbcf30953
jmp 0x10004fdd
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov cx, word [ebp - 0x12]
add cx, 0x41b8
add cx, 1
sub cx, 0x41b8
mov eax, dword [ebp - 0x80]
mov word [eax], cx
mov dword [ebp - 0xb4], 0x51774756
jmp 0x10004fdd
jmp 0x10001a0f