Function at 0x100011f0
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xb8
mov eax, dword [ebp + 8]
mov dword [ebp - 0xbc], eax
mov eax, dword [0x1006ec04]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
mov edx, ecx
sub edx, 0xd0e23d2b
sub edx, 1
add edx, 0xd0e23d2b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0xb2], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0xb1], al
mov dword [ebp - 0xb8], 0xedcb2f30
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xc0], eax
sub eax, 0x80b29a46
je 0x10004bde
jmp 0x10001273
mov eax, dword [ebp - 0xc0]
sub eax, 0x82fda5d2
je 0x100028fd
jmp 0x10001289
mov eax, dword [ebp - 0xc0]
sub eax, 0x84c28d79
je 0x100053de
jmp 0x1000129f
mov eax, dword [ebp - 0xc0]
sub eax, 0x863ca08c
je 0x10004d08
jmp 0x100012b5
mov eax, dword [ebp - 0xc0]
sub eax, 0x89acce81
je 0x1000340a
jmp 0x100012cb
mov eax, dword [ebp - 0xc0]
sub eax, 0x8c09b11f
je 0x10005269
jmp 0x100012e1
mov eax, dword [ebp - 0xc0]
sub eax, 0x8c0df93a
je 0x100037bb
jmp 0x100012f7
mov eax, dword [ebp - 0xc0]
sub eax, 0x8e68d77a
je 0x1000376a
jmp 0x1000130d
mov eax, dword [ebp - 0xc0]
sub eax, 0x91139b04
je 0x1000338d
jmp 0x10001323
mov eax, dword [ebp - 0xc0]
sub eax, 0x911cfd0d
je 0x1000519d
jmp 0x10001339
mov eax, dword [ebp - 0xc0]
sub eax, 0x92b456c0
je 0x1000523c
jmp 0x1000134f
mov eax, dword [ebp - 0xc0]
sub eax, 0x92d0344c
je 0x100031e9
jmp 0x10001365
mov eax, dword [ebp - 0xc0]
sub eax, 0x97a4719b
je 0x10003e76
jmp 0x1000137b
mov eax, dword [ebp - 0xc0]
sub eax, 0x97c7cd39
je 0x10005420
jmp 0x10001391
mov eax, dword [ebp - 0xc0]
sub eax, 0x9800ab1d
je 0x10005522
jmp 0x100013a7
mov eax, dword [ebp - 0xc0]
sub eax, 0xa1777294
je 0x10003e07
jmp 0x100013bd
mov eax, dword [ebp - 0xc0]
sub eax, 0xa5115e4e
je 0x100052b7
jmp 0x100013d3
mov eax, dword [ebp - 0xc0]
sub eax, 0xa517aefc
je 0x10002e6b
jmp 0x100013e9
mov eax, dword [ebp - 0xc0]
sub eax, 0xa6337791
je 0x100035ac
jmp 0x100013ff
mov eax, dword [ebp - 0xc0]
sub eax, 0xa671500a
je 0x10005559
jmp 0x10001415
mov eax, dword [ebp - 0xc0]
sub eax, 0xa67e749d
je 0x10004714
jmp 0x1000142b
mov eax, dword [ebp - 0xc0]
sub eax, 0xa946243c
je 0x10002acd
jmp 0x10001441
mov eax, dword [ebp - 0xc0]
sub eax, 0xacbc64af
je 0x10004388
jmp 0x10001457
mov eax, dword [ebp - 0xc0]
sub eax, 0xad83597c
je 0x10004d51
jmp 0x1000146d
mov eax, dword [ebp - 0xc0]
sub eax, 0xadee5873
je 0x1000399e
jmp 0x10001483
mov eax, dword [ebp - 0xc0]
sub eax, 0xae448526
je 0x10004ebd
jmp 0x10001499
mov eax, dword [ebp - 0xc0]
sub eax, 0xb068a7ba
je 0x10004fb4
jmp 0x100014af
mov eax, dword [ebp - 0xc0]
sub eax, 0xb07a363b
je 0x10003cab
jmp 0x100014c5
mov eax, dword [ebp - 0xc0]
sub eax, 0xb161bcfd
je 0x10004600
jmp 0x100014db
mov eax, dword [ebp - 0xc0]
sub eax, 0xb1ea49fe
je 0x1000525a
jmp 0x100014f1
mov eax, dword [ebp - 0xc0]
sub eax, 0xb1f49288
je 0x10002fb5
jmp 0x10001507
mov eax, dword [ebp - 0xc0]
sub eax, 0xb3eb4a0f
je 0x10003c40
jmp 0x1000151d
mov eax, dword [ebp - 0xc0]
sub eax, 0xb42a6f09
je 0x10004bcf
jmp 0x10001533
mov eax, dword [ebp - 0xc0]
sub eax, 0xb9883a21
je 0x100032ce
jmp 0x10001549
mov eax, dword [ebp - 0xc0]
sub eax, 0xbc0dcdd7
je 0x10002801
jmp 0x1000155f
mov eax, dword [ebp - 0xc0]
sub eax, 0xbc499233
je 0x10004a3c
jmp 0x10001575
mov eax, dword [ebp - 0xc0]
sub eax, 0xbc79b13f
je 0x10004f78
jmp 0x1000158b
mov eax, dword [ebp - 0xc0]
sub eax, 0xbcf16e3e
je 0x10004f2b
jmp 0x100015a1
mov eax, dword [ebp - 0xc0]
sub eax, 0xbf2974ef
je 0x10002946
jmp 0x100015b7
mov eax, dword [ebp - 0xc0]
sub eax, 0xc0dbc982
je 0x10003c9c
jmp 0x100015cd
mov eax, dword [ebp - 0xc0]
sub eax, 0xc112ad82
je 0x1000416b
jmp 0x100015e3
mov eax, dword [ebp - 0xc0]
sub eax, 0xc2c9eaec
je 0x100022a3
jmp 0x100015f9
mov eax, dword [ebp - 0xc0]
sub eax, 0xc322a252
je 0x10003006
jmp 0x1000160f
mov eax, dword [ebp - 0xc0]
sub eax, 0xc41f7cef
je 0x1000380c
jmp 0x10001625
mov eax, dword [ebp - 0xc0]
sub eax, 0xc46a322a
je 0x1000482f
jmp 0x1000163b
mov eax, dword [ebp - 0xc0]
sub eax, 0xc6488552
je 0x10003df8
jmp 0x10001651
mov eax, dword [ebp - 0xc0]
sub eax, 0xc9159acc
je 0x10003110
jmp 0x10001667
mov eax, dword [ebp - 0xc0]
sub eax, 0xc936ec63
je 0x100024bb
jmp 0x1000167d
mov eax, dword [ebp - 0xc0]
sub eax, 0xcbe53191
je 0x10002708
jmp 0x10001693
mov eax, dword [ebp - 0xc0]
sub eax, 0xccd146dd
je 0x1000237d
jmp 0x100016a9
mov eax, dword [ebp - 0xc0]
sub eax, 0xcf24db33
je 0x10002d47
jmp 0x100016bf
mov eax, dword [ebp - 0xc0]
sub eax, 0xd059b476
je 0x10003198
jmp 0x100016d5
mov eax, dword [ebp - 0xc0]
sub eax, 0xd20a0620
je 0x10002aeb
jmp 0x100016eb
mov eax, dword [ebp - 0xc0]
sub eax, 0xd2655da3
je 0x100053f3
jmp 0x10001701
mov eax, dword [ebp - 0xc0]
sub eax, 0xd2e871a7
je 0x10002a2b
jmp 0x10001717
mov eax, dword [ebp - 0xc0]
sub eax, 0xd39ac37f
je 0x100051ac
jmp 0x1000172d
mov eax, dword [ebp - 0xc0]
sub eax, 0xd3ba6321
je 0x10005358
jmp 0x10001743
mov eax, dword [ebp - 0xc0]
sub eax, 0xd40ebe65
je 0x10004cb4
jmp 0x10001759
mov eax, dword [ebp - 0xc0]
sub eax, 0xd630452c
je 0x10003d8e
jmp 0x1000176f
mov eax, dword [ebp - 0xc0]
sub eax, 0xd64c28f9
je 0x10002819
jmp 0x10001785
mov eax, dword [ebp - 0xc0]
sub eax, 0xd7481e43
je 0x10003b25
jmp 0x1000179b
mov eax, dword [ebp - 0xc0]
sub eax, 0xd87e1fb4
je 0x10002582
jmp 0x100017b1
mov eax, dword [ebp - 0xc0]
sub eax, 0xd954a5a1
je 0x10004676
jmp 0x100017c7
mov eax, dword [ebp - 0xc0]
sub eax, 0xda19bbac
je 0x10003baa
jmp 0x100017dd
mov eax, dword [ebp - 0xc0]
sub eax, 0xda3cfccb
je 0x100026b0
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x9c], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
push eax
mov eax, esp
mov dword [ebp - 0x94], eax
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf84fe6af
mov ecx, 0xff760b8e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
add edx, 0xa35e6f8e
sub edx, 1
sub edx, 0xa35e6f8e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeec0cc72
mov ecx, 0x697d26b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
add edx, 0x4af6954a
sub edx, 1
sub edx, 0x4af6954a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2084c3b7
mov ecx, 0x7c86d039
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov dword [ebp - 0xb8], 0x4549d860
jmp 0x10005563
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd39ac37f
mov ecx, 0x6ee4aab3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0xb8], 0xd64c28f9
jmp 0x10005563
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
mov edx, ecx
add edx, 0x4cdd57cb
sub edx, 1
sub edx, 0x4cdd57cb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1182b1c2
mov ecx, 0x7c85aa79
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x617ddcd3
mov ecx, 0xbf2974ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [ebp - 0x68]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x98]
mov dword [eax], ecx
mov eax, dword [ebp - 0x98]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x61], al
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
mov edx, ecx
sub edx, 0x70fae24c
sub edx, 1
add edx, 0x70fae24c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x617ddcd3
mov ecx, 0x65536b51
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
add edx, 0xa721ade
sub edx, 1
sub edx, 0xa721ade
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x688053bd
mov ecx, 0x584192c2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov dl, byte [ebp - 0x61]
mov eax, 0xcf24db33
mov ecx, 0xd20a0620
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
mov edx, ecx
sub edx, 0x50b2868
sub edx, 1
add edx, 0x50b2868
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x22698577
mov ecx, 0x6d4f50d0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
mov edx, ecx
add edx, 0x4f60cda5
sub edx, 1
sub edx, 0x4f60cda5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbc499233
mov ecx, 0xf82abc37
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0xb8], 0xe19c4159
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
add edx, 0xa8d39d33
sub edx, 1
sub edx, 0xa8d39d33
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2c6da74e
mov ecx, 0xc322a252
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
mov edx, ecx
add edx, 0xdb5de479
sub edx, 1
sub edx, 0xdb5de479
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2c6da74e
mov ecx, 0xb7a63ca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xb8], 0x5e8d8977
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
add edx, 0xc491c109
sub edx, 1
sub edx, 0xc491c109
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4ef1e8bc
mov ecx, 0x92d0344c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
mov edx, ecx
sub edx, 0xc53b6e3f
sub edx, 1
add edx, 0xc53b6e3f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x80b29a46
mov ecx, 0x3aa7f9ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
add edx, 0xd7f95220
sub edx, 1
sub edx, 0xd7f95220
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7c826788
mov ecx, 0x78c41348
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov dword [ebp - 0xb8], 0x2a6bc096
jmp 0x10005563
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x92b456c0
mov ecx, 0x434625f0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe60a3e98
mov ecx, 0x1a1f691c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
sub edx, 0x262f832
sub edx, 1
add edx, 0x262f832
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1ea49fe
mov ecx, 0x8c0df93a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
sub edx, 0xdab831a9
sub edx, 1
add edx, 0xdab831a9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1ea49fe
mov ecx, 0xc41f7cef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
add edx, 0x663bd4ae
sub edx, 1
sub edx, 0x663bd4ae
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf303e9ce
mov ecx, 0x54b88b89
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [ebp - 0x84]
movzx eax, word [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov ax, word [eax + 6]
mov word [ebp - 0x3a], ax
mov dword [ebp - 0xb8], 0x22b0c61b
jmp 0x10005563
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
mov edx, ecx
add edx, 0x1ba61dc1
sub edx, 1
sub edx, 0x1ba61dc1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1353627b
mov ecx, 0x2cee9fa9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov edx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x38]
mov eax, 0x69a277cb
mov ecx, 0x5860402d
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
sub edx, 0x921194c1
sub edx, 1
add edx, 0x921194c1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x94e6ac1
mov ecx, 0xc0dbc982
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov dword [ebp - 0xb8], 0xb07a363b
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa5115e4e
mov ecx, 0x532731b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov edx, ecx
add edx, 0x18
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov ax, word [eax + 0x14]
mov word [ebp - 0x2a], ax
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x534c6849
mov ecx, 0xc6488552
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov dword [ebp - 0xb8], 0xa1777294
jmp 0x10005563
mov ax, word [ebp - 0x2a]
movzx edx, ax
mov ecx, dword [ebp - 0x30]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x84]
movzx eax, word [eax]
imul eax, eax, 0x28
sub ecx, 0x8b565063
add ecx, eax
add ecx, 0x8b565063
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001c190
call fcn.10013360
add esp, 8
mov edx, eax
mov eax, 0x97a4719b
mov ecx, 0x14873b2a
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
add edx, 0xa28fbebe
sub edx, 1
sub edx, 0xa28fbebe
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6c9348da
mov ecx, 0x2f129822
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
add edx, 0x990f8506
sub edx, 1
sub edx, 0x990f8506
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x696b7e48
mov ecx, 0x63b8d5a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x14]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x78]
mov byte [eax], cl
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf872e006
mov ecx, 0x25419130
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
mov edx, ecx
sub edx, 0x45c55b49
sub edx, 1
add edx, 0x45c55b49
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4edbfe65
mov ecx, 0xd954a5a1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [ebp - 0x84]
mov ax, word [eax]
add ax, 0xcb14
add ax, 1
sub ax, 0xcb14
mov word [ebp - 0xe], ax
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
mov edx, ecx
add edx, 0x8e021b0
sub edx, 1
sub edx, 0x8e021b0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4edbfe65
mov ecx, 0x72be19a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [ebp - 0x84]
mov cx, word [ebp - 0xe]
mov word [eax], cx
mov dword [ebp - 0xb8], 0x31c61e6d
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
sub edx, 0x629325c0
sub edx, 1
add edx, 0x629325c0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd3ba6321
mov ecx, 0x155a0c00
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x84c28d79
mov ecx, 0xdb1778b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov dword [ebp - 0xb8], 0xb1f49288
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
sub edx, 0x68a2a2a9
sub edx, 1
add edx, 0x68a2a2a9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xec2e09f3
mov ecx, 0x6c90d5bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov dword [ebp - 0xb8], 0x3aa7f9ba
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x97c7cd39
mov ecx, 0xad83597c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x8c]
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
sub edx, 0xeafc4411
sub edx, 1
add edx, 0xeafc4411
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x97c7cd39
mov ecx, 0x2fcc9d25
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov ecx, dword [0x1006fea8]
mov eax, dword [0x1006fea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9800ab1d
mov ecx, 0xbcf16e3e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov ax, word [ebp - 0x3a]
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9800ab1d
mov ecx, 0xbc79b13f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov dword [ebp - 0xb8], 0xe646fa7
jmp 0x10005563
mov eax, dword [0x1006fea8]
mov ecx, dword [0x1006fea4]
mov edx, eax
sub edx, 0xcc4cbd69
sub edx, 1
add edx, 0xcc4cbd69
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2267dea7
mov ecx, 0xaf3c557
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xb8], eax
jmp 0x10005563
mov dword [ebp - 0xb8], 0x4ada8d03
jmp 0x10005563
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xb8], 0xcbe53191
jmp 0x10005563
mov dword [ebp - 0xb8], 0x89acce81
jmp 0x10005563
mov dword [ebp - 0xb8], 0x8c0df93a
jmp 0x10005563
mov eax, dword [ebp - 0x44]
mov eax, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
sub ecx, 0x530077f7
add ecx, eax
add ecx, 0x530077f7
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov word [eax], 0
mov dword [ebp - 0xb8], 0x29ee519c
jmp 0x10005563
mov dword [ebp - 0xb8], 0x532731b9
jmp 0x10005563
mov dword [ebp - 0xb8], 0xc46a322a
jmp 0x10005563
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xb8], 0xdb1778b
jmp 0x10005563
mov dword [ebp - 0xb8], 0xfdbdf5fd
jmp 0x10005563
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xb8], 0xad83597c
jmp 0x10005563
mov ax, word [ebp - 0x3a]
mov dword [ebp - 0xb8], 0xbcf16e3e
jmp 0x10005563
mov dword [ebp - 0xb8], 0x298bae6d
jmp 0x10001257