Function at 0x10001840
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xa8
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb0], eax
mov eax, dword [0x10064804]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xac], 0xc76627ab
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xb4], eax
sub eax, 0x818a8aeb
je 0x1000462f
jmp 0x10001885
mov eax, dword [ebp - 0xb4]
sub eax, 0x81e9a8e3
je 0x100047ee
jmp 0x1000189b
mov eax, dword [ebp - 0xb4]
sub eax, 0x85e90a9c
je 0x10004a6f
jmp 0x100018b1
mov eax, dword [ebp - 0xb4]
sub eax, 0x85ea6e84
je 0x10003de6
jmp 0x100018c7
mov eax, dword [ebp - 0xb4]
sub eax, 0x862e3bc4
je 0x10002617
jmp 0x100018dd
mov eax, dword [ebp - 0xb4]
sub eax, 0x86844278
je 0x10003fc2
jmp 0x100018f3
mov eax, dword [ebp - 0xb4]
sub eax, 0x89dac88b
je 0x10004281
jmp 0x10001909
mov eax, dword [ebp - 0xb4]
sub eax, 0x8ba9249e
je 0x100043bb
jmp 0x1000191f
mov eax, dword [ebp - 0xb4]
sub eax, 0x8db376c8
je 0x10002931
jmp 0x10001935
mov eax, dword [ebp - 0xb4]
sub eax, 0x90de3666
je 0x10003668
jmp 0x1000194b
mov eax, dword [ebp - 0xb4]
sub eax, 0x92ce3ac5
je 0x100048dd
jmp 0x10001961
mov eax, dword [ebp - 0xb4]
sub eax, 0x9531ee88
je 0x10003ba9
jmp 0x10001977
mov eax, dword [ebp - 0xb4]
sub eax, 0x96e402a6
je 0x100044d3
jmp 0x1000198d
mov eax, dword [ebp - 0xb4]
sub eax, 0x9814f2c5
je 0x10002dcc
jmp 0x100019a3
mov eax, dword [ebp - 0xb4]
sub eax, 0x9da657d9
je 0x10003831
jmp 0x100019b9
mov eax, dword [ebp - 0xb4]
sub eax, 0x9f6e8c34
je 0x10003986
jmp 0x100019cf
mov eax, dword [ebp - 0xb4]
sub eax, 0xa0090d21
je 0x10003f54
jmp 0x100019e5
mov eax, dword [ebp - 0xb4]
sub eax, 0xa3a79a42
je 0x100039f9
jmp 0x100019fb
mov eax, dword [ebp - 0xb4]
sub eax, 0xa5014270
je 0x10004029
jmp 0x10001a11
mov eax, dword [ebp - 0xb4]
sub eax, 0xa89d5808
je 0x100031d6
jmp 0x10001a27
mov eax, dword [ebp - 0xb4]
sub eax, 0xa89fc6af
je 0x10003461
jmp 0x10001a3d
mov eax, dword [ebp - 0xb4]
sub eax, 0xad079b05
je 0x10004a32
jmp 0x10001a53
mov eax, dword [ebp - 0xb4]
sub eax, 0xb234715c
je 0x10002991
jmp 0x10001a69
mov eax, dword [ebp - 0xb4]
sub eax, 0xb2773b01
je 0x10002ec3
jmp 0x10001a7f
mov eax, dword [ebp - 0xb4]
sub eax, 0xb38e24db
je 0x100049c3
jmp 0x10001a95
mov eax, dword [ebp - 0xb4]
sub eax, 0xb40e4055
je 0x10002b62
jmp 0x10001aab
mov eax, dword [ebp - 0xb4]
sub eax, 0xb6ca138f
je 0x10002cb5
jmp 0x10001ac1
mov eax, dword [ebp - 0xb4]
sub eax, 0xb6fbc37a
je 0x100049f0
jmp 0x10001ad7
mov eax, dword [ebp - 0xb4]
sub eax, 0xb7ff5ae8
je 0x10003a89
jmp 0x10001aed
mov eax, dword [ebp - 0xb4]
sub eax, 0xbe400fed
je 0x10002e2f
jmp 0x10001b03
mov eax, dword [ebp - 0xb4]
sub eax, 0xc02e1af4
je 0x10002eb4
jmp 0x10001b19
mov eax, dword [ebp - 0xb4]
sub eax, 0xc03ddd7d
je 0x10004550
jmp 0x10001b2f
mov eax, dword [ebp - 0xb4]
sub eax, 0xc43192ae
je 0x100037ac
jmp 0x10001b45
mov eax, dword [ebp - 0xb4]
sub eax, 0xc49a83fa
je 0x1000313b
jmp 0x10001b5b
mov eax, dword [ebp - 0xb4]
sub eax, 0xc5a4da43
je 0x10002b80
jmp 0x10001b71
mov eax, dword [ebp - 0xb4]
sub eax, 0xc5d84409
je 0x10004924
jmp 0x10001b87
mov eax, dword [ebp - 0xb4]
sub eax, 0xc76627ab
je 0x10002558
jmp 0x10001b9d
mov eax, dword [ebp - 0xb4]
sub eax, 0xc95371bc
je 0x100038dd
jmp 0x10001bb3
mov eax, dword [ebp - 0xb4]
sub eax, 0xc9f39550
je 0x10002bee
jmp 0x10001bc9
mov eax, dword [ebp - 0xb4]
sub eax, 0xcb076605
je 0x10002c3f
jmp 0x10001bdf
mov eax, dword [ebp - 0xb4]
sub eax, 0xcd57896d
je 0x100025c6
jmp 0x10001bf5
mov eax, dword [ebp - 0xb4]
sub eax, 0xcdc259b9
je 0x10002f5e
jmp 0x10001c0b
mov eax, dword [ebp - 0xb4]
sub eax, 0xce12ed07
je 0x10004a60
jmp 0x10001c21
mov eax, dword [ebp - 0xb4]
sub eax, 0xce7ad97b
je 0x100042e1
jmp 0x10001c37
mov eax, dword [ebp - 0xb4]
sub eax, 0xd0296145
je 0x100030ea
jmp 0x10001c4d
mov eax, dword [ebp - 0xb4]
sub eax, 0xd858ca25
je 0x10003349
jmp 0x10001c63
mov eax, dword [ebp - 0xb4]
sub eax, 0xd8eea422
je 0x10002718
jmp 0x10001c79
mov eax, dword [ebp - 0xb4]
sub eax, 0xd8f2606e
je 0x100040e8
jmp 0x10001c8f
mov eax, dword [ebp - 0xb4]
sub eax, 0xd979233d
je 0x10003511
jmp 0x10001ca5
mov eax, dword [ebp - 0xb4]
sub eax, 0xdacf625f
je 0x1000268d
jmp 0x10001cbb
mov eax, dword [ebp - 0xb4]
sub eax, 0xde9c1e7a
je 0x1000469d
jmp 0x10001cd1
mov eax, dword [ebp - 0xb4]
sub eax, 0xe1b75588
je 0x10004c08
jmp 0x10001ce7
mov eax, dword [ebp - 0xb4]
sub eax, 0xe24b40ce
je 0x10002a14
jmp 0x10001cfd
mov eax, dword [ebp - 0xb4]
sub eax, 0xe3edd454
je 0x100033a9
jmp 0x10001d13
mov eax, dword [ebp - 0xb4]
sub eax, 0xe497ec2a
je 0x10003677
jmp 0x10001d29
mov eax, dword [ebp - 0xb4]
sub eax, 0xe584560e
je 0x10002727
jmp 0x10001d3f
mov eax, dword [ebp - 0xb4]
sub eax, 0xe5e8b5db
je 0x10003822
jmp 0x10001d55
mov eax, dword [ebp - 0xb4]
sub eax, 0xe6b1e2de
je 0x10004139
jmp 0x10001d6b
mov eax, dword [ebp - 0xb4]
sub eax, 0xe93690d6
je 0x100044a3
jmp 0x10001d81
mov eax, dword [ebp - 0xb4]
sub eax, 0xeb0af54c
je 0x10003c5c
jmp 0x10001d97
mov eax, dword [ebp - 0xb4]
sub eax, 0xeb492d1d
je 0x100034c0
jmp 0x10001dad
mov eax, dword [ebp - 0xb4]
sub eax, 0xebbd9322
je 0x10004a97
jmp 0x10001dc3
mov eax, dword [ebp - 0xb4]
sub eax, 0xecb1f058
je 0x10003a40
jmp 0x10001dd9
mov eax, dword [ebp - 0xb4]
sub eax, 0xedc1691e
je 0x100044c4
jmp 0x10001def
mov eax, dword [ebp - 0xb4]
sub eax, 0xef1a9819
je 0x10002b53
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xadc5362
mov ecx, 0xcd57896d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
mov edx, eax
add edx, 0xcc95b048
sub edx, 1
sub edx, 0xcc95b048
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xadc5362
mov ecx, 0x862e3bc4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
mov edx, ecx
sub edx, 0x9f0458cf
sub edx, 1
add edx, 0x9f0458cf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xedc1691e
mov ecx, 0xdacf625f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0x9c], eax
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
mov edx, ecx
sub edx, 0xae297123
sub edx, 1
add edx, 0xae297123
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xedc1691e
mov ecx, 0xd8eea422
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov dword [ebp - 0xac], 0xe584560e
jmp 0x10004ccd
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x96e402a6
mov ecx, 0x4e95d567
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
mov edx, eax
sub edx, 0xe434f80e
sub edx, 1
add edx, 0xe434f80e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x388b66ff
mov ecx, 0x12b8e075
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa0]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov dword [ebp - 0xac], 0xf0138957
jmp 0x10004ccd
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0xac], 0x3f26308c
jmp 0x10004ccd
mov dl, byte [ebp - 0x61]
mov eax, 0x9814f2c5
mov ecx, 0xc5a4da43
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb38e24db
mov ecx, 0xc9f39550
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
mov edx, eax
sub edx, 0x7faab0c1
sub edx, 1
add edx, 0x7faab0c1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb38e24db
mov ecx, 0xcb076605
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
mov edx, ecx
add edx, 0xc032708
sub edx, 1
sub edx, 0xc032708
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7caf434a
mov ecx, 0xb6ca138f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x755e96f9
mov ecx, 0x301e025
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0xac], 0x55026c31
jmp 0x10004ccd
mov eax, dword [ebp - 0x60]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x5c], eax
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x51c31e81
mov ecx, 0xc02e1af4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov dword [ebp - 0xac], 0xb2773b01
jmp 0x10004ccd
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0xac], 0xf8b2d39d
jmp 0x10004ccd
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
mov edx, ecx
sub edx, 0x95cd2f31
sub edx, 1
add edx, 0x95cd2f31
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x427f9e42
mov ecx, 0x12641f56
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
mov edx, eax
add edx, 0xbc678909
sub edx, 1
sub edx, 0xbc678909
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb6fbc37a
mov ecx, 0xc49a83fa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov dword [ebp - 0xac], 0x6745f920
jmp 0x10004ccd
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6c5d7296
mov ecx, 0x4862cf78
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
mov edx, eax
sub edx, 0x44d9235b
sub edx, 1
add edx, 0x44d9235b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x818a8aeb
mov ecx, 0xe3edd454
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
mov edx, eax
add edx, 0xbfb805d0
sub edx, 1
sub edx, 0xbfb805d0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2c0f8887
mov ecx, 0x72f0f88d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x98]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov dword [ebp - 0xac], 0xeb492d1d
jmp 0x10004ccd
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
mov edx, eax
sub edx, 0xfb5d0804
sub edx, 1
add edx, 0xfb5d0804
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2ff5d458
mov ecx, 0xd979233d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x84]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x3c]
sub eax, 0x5d8892c7
add eax, ecx
add eax, 0x5d8892c7
mov dword [ebp - 0x4c], eax
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2ff5d458
mov ecx, 0xf5c292c7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov dword [ebp - 0xac], 0xe497ec2a
jmp 0x10004ccd
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6724c569
mov ecx, 0x40b9e864
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
mov edx, ecx
add edx, 0xfccacfc9
sub edx, 1
sub edx, 0xfccacfc9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6724c569
mov ecx, 0xe5e8b5db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov dword [ebp - 0xac], 0x9da657d9
jmp 0x10004ccd
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
mov edx, eax
sub edx, 0xce9ccc58
sub edx, 1
add edx, 0xce9ccc58
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7a299a2
mov ecx, 0x4ae7a62b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xce12ed07
mov ecx, 0x5d6cfb6f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov ax, word [ebp - 0x46]
movzx eax, ax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xac], 0x2017f9b7
jmp 0x10004ccd
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
sub ecx, 0xa7643376
add ecx, eax
add ecx, 0xa7643376
mov eax, dword [ebp - 0x7c]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xac], 0xecb1f058
jmp 0x10004ccd
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x85e90a9c
mov ecx, 0xb7ff5ae8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov ecx, dword [ebp - 0x34]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001a190
call fcn.100114e0
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x2d], al
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x85e90a9c
mov ecx, 0x23b3f519
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x70]
mov byte [eax], cl
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
mov edx, eax
add edx, 0xac3e1500
sub edx, 1
sub edx, 0xac3e1500
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xebbd9322
mov ecx, 0xeb0af54c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov dword [ebp - 0xac], 0x1ce4ac29
jmp 0x10004ccd
mov eax, dword [ebp - 0x7c]
mov ax, word [eax]
mov word [ebp - 0x16], ax
mov dword [ebp - 0xac], 0x507c8bdd
jmp 0x10004ccd
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xed4ba92
mov ecx, 0x86844278
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov dword [ebp - 0xac], 0x392a87
jmp 0x10004ccd
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
mov edx, ecx
sub edx, 0x67d91be
sub edx, 1
add edx, 0x67d91be
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfad5419d
mov ecx, 0x20c85106
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
mov edx, eax
add edx, 0x9d8370c9
sub edx, 1
sub edx, 0x9d8370c9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3c18aaa3
mov ecx, 0xe6b1e2de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
mov edx, eax
add edx, 0x63542651
sub edx, 1
sub edx, 0x63542651
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3c18aaa3
mov ecx, 0x4e0f93b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
mov edx, eax
sub edx, 0x96b717ad
sub edx, 1
add edx, 0x96b717ad
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x34f1876
mov ecx, 0x7e434113
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [0x10065aa8]
mov ecx, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x752e8d2c
mov ecx, 0x246123bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov dword [ebp - 0xac], 0x351046c8
jmp 0x10004ccd
mov dword [ebp - 0xac], 0x7200f077
jmp 0x10004ccd
mov dword [ebp - 0xac], 0xdacf625f
jmp 0x10004ccd
mov dword [ebp - 0xac], 0x4e95d567
jmp 0x10004ccd
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
mov edx, ecx
sub edx, 0xbb3999f3
sub edx, 1
add edx, 0xbb3999f3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe1b75588
mov ecx, 0x4d2792aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5aeacf4c
mov ecx, 0xde9c1e7a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov eax, dword [ebp - 0x50]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10065aa8]
mov eax, dword [0x10065aa4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5aeacf4c
mov ecx, 0x111ae5d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xac], eax
jmp 0x10004ccd
mov dword [ebp - 0xac], 0x40b9e864
jmp 0x10004ccd
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xac], 0xd8f2606e
jmp 0x10004ccd
mov eax, dword [ebp - 0xa8]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xac], 0x19040668
jmp 0x10004ccd
mov dword [ebp - 0xac], 0xc9f39550
jmp 0x10004ccd
mov dword [ebp - 0xac], 0xd0296145
jmp 0x10004ccd
mov dword [ebp - 0xac], 0x37de32bb
jmp 0x10004ccd
mov dword [ebp - 0xac], 0x5d6cfb6f
jmp 0x10004ccd
mov ecx, dword [ebp - 0x34]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001a190
call fcn.100114e0
add esp, 8
mov dword [ebp - 0xac], 0xb7ff5ae8
jmp 0x10004ccd
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x70]
mov byte [eax], cl
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xac], 0x9531ee88
jmp 0x10004ccd
mov dword [ebp - 0xac], 0xc03ddd7d
jmp 0x10004ccd
jmp 0x10001869