Function at 0x10001400
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x98
mov eax, dword [ebp + 8]
mov dword [ebp - 0x9c], eax
mov eax, dword [0x1006ea04]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
sub edx, 0x989b9d1d
sub edx, 1
add edx, 0x989b9d1d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x92], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x91], al
mov dword [ebp - 0x98], 0xf190efaf
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xa0], eax
sub eax, 0x80f0ab56
je 0x1000406e
jmp 0x10001483
mov eax, dword [ebp - 0xa0]
sub eax, 0x81d59866
je 0x10004a03
jmp 0x10001499
mov eax, dword [ebp - 0xa0]
sub eax, 0x82b5006f
je 0x10004a42
jmp 0x100014af
mov eax, dword [ebp - 0xa0]
sub eax, 0x8382b525
je 0x100039b4
jmp 0x100014c5
mov eax, dword [ebp - 0xa0]
sub eax, 0x83bff85f
je 0x1000448d
jmp 0x100014db
mov eax, dword [ebp - 0xa0]
sub eax, 0x85db75f1
je 0x10002d9c
jmp 0x100014f1
mov eax, dword [ebp - 0xa0]
sub eax, 0x885fc9c5
je 0x100032e4
jmp 0x10001507
mov eax, dword [ebp - 0xa0]
sub eax, 0x898c191c
je 0x100036d1
jmp 0x1000151d
mov eax, dword [ebp - 0xa0]
sub eax, 0x89a23561
je 0x10002e29
jmp 0x10001533
mov eax, dword [ebp - 0xa0]
sub eax, 0x89b604b8
je 0x1000461a
jmp 0x10001549
mov eax, dword [ebp - 0xa0]
sub eax, 0x8a8effbc
je 0x10003284
jmp 0x1000155f
mov eax, dword [ebp - 0xa0]
sub eax, 0x8af5b4b5
je 0x1000433e
jmp 0x10001575
mov eax, dword [ebp - 0xa0]
sub eax, 0x8bb39a81
je 0x10004661
jmp 0x1000158b
mov eax, dword [ebp - 0xa0]
sub eax, 0x8d1526e6
je 0x1000496e
jmp 0x100015a1
mov eax, dword [ebp - 0xa0]
sub eax, 0x926273ea
je 0x10002ca9
jmp 0x100015b7
mov eax, dword [ebp - 0xa0]
sub eax, 0x92d3ca5a
je 0x10004a99
jmp 0x100015cd
mov eax, dword [ebp - 0xa0]
sub eax, 0x933ec7de
je 0x100042e4
jmp 0x100015e3
mov eax, dword [ebp - 0xa0]
sub eax, 0x94663fdf
je 0x10003731
jmp 0x100015f9
mov eax, dword [ebp - 0xa0]
sub eax, 0x9570865c
je 0x100039fc
jmp 0x1000160f
mov eax, dword [ebp - 0xa0]
sub eax, 0x95db41d4
je 0x10002387
jmp 0x10001625
mov eax, dword [ebp - 0xa0]
sub eax, 0x969b230e
je 0x100034ad
jmp 0x1000163b
mov eax, dword [ebp - 0xa0]
sub eax, 0x9761bfd7
je 0x10002294
jmp 0x10001651
mov eax, dword [ebp - 0xa0]
sub eax, 0x9a9a0cad
je 0x10002467
jmp 0x10001667
mov eax, dword [ebp - 0xa0]
sub eax, 0x9c85e653
je 0x10004293
jmp 0x1000167d
mov eax, dword [ebp - 0xa0]
sub eax, 0x9dcd7aec
je 0x100040d1
jmp 0x10001693
mov eax, dword [ebp - 0xa0]
sub eax, 0x9ef6673f
je 0x1000396b
jmp 0x100016a9
mov eax, dword [ebp - 0xa0]
sub eax, 0x9ff1ee22
je 0x10002d17
jmp 0x100016bf
mov eax, dword [ebp - 0xa0]
sub eax, 0xa00b54c0
je 0x1000279a
jmp 0x100016d5
mov eax, dword [ebp - 0xa0]
sub eax, 0xa016b637
je 0x10002b47
jmp 0x100016eb
mov eax, dword [ebp - 0xa0]
sub eax, 0xa0f8f70a
je 0x100022dd
jmp 0x10001701
mov eax, dword [ebp - 0xa0]
sub eax, 0xa1ab31e1
je 0x10003b5a
jmp 0x10001717
mov eax, dword [ebp - 0xa0]
sub eax, 0xa254b0a4
je 0x1000447c
jmp 0x1000172d
mov eax, dword [ebp - 0xa0]
sub eax, 0xa43ea30d
je 0x100039dc
jmp 0x10001743
mov eax, dword [ebp - 0xa0]
sub eax, 0xa596ac24
je 0x100046d7
jmp 0x10001759
mov eax, dword [ebp - 0xa0]
sub eax, 0xa65acfad
je 0x1000497d
jmp 0x1000176f
mov eax, dword [ebp - 0xa0]
sub eax, 0xa8e56bf4
je 0x1000305a
jmp 0x10001785
mov eax, dword [ebp - 0xa0]
sub eax, 0xaa558808
je 0x1000343f
jmp 0x1000179b
mov eax, dword [ebp - 0xa0]
sub eax, 0xad3d49f0
je 0x10003bc8
jmp 0x100017b1
mov eax, dword [ebp - 0xa0]
sub eax, 0xadf42056
je 0x1000232f
jmp 0x100017c7
mov eax, dword [ebp - 0xa0]
sub eax, 0xb20a51e1
je 0x1000475c
jmp 0x100017dd
mov eax, dword [ebp - 0xa0]
sub eax, 0xb297532a
je 0x100026d3
jmp 0x100017f3
mov eax, dword [ebp - 0xa0]
sub eax, 0xb45bcea8
je 0x10002eff
jmp 0x10001809
mov eax, dword [ebp - 0xa0]
sub eax, 0xb76effa2
je 0x10002fd5
jmp 0x1000181f
mov eax, dword [ebp - 0xa0]
sub eax, 0xb8a80150
je 0x10003e18
jmp 0x10001835
mov eax, dword [ebp - 0xa0]
sub eax, 0xb91f7983
je 0x10003e09
jmp 0x1000184b
mov eax, dword [ebp - 0xa0]
sub eax, 0xbc2c6fe6
je 0x10002d26
jmp 0x10001861
mov eax, dword [ebp - 0xa0]
sub eax, 0xbd594e5e
je 0x1000358d
jmp 0x10001877
mov eax, dword [ebp - 0xa0]
sub eax, 0xbd79cc9d
je 0x1000261a
jmp 0x1000188d
mov eax, dword [ebp - 0xa0]
sub eax, 0xbec8b008
je 0x1000434d
jmp 0x100018a3
mov eax, dword [ebp - 0xa0]
sub eax, 0xc10ebd45
je 0x1000294a
jmp 0x100018b9
mov eax, dword [ebp - 0xa0]
sub eax, 0xc213857c
je 0x10003f4d
jmp 0x100018cf
mov eax, dword [ebp - 0xa0]
sub eax, 0xc3d7104f
je 0x10002577
jmp 0x100018e5
mov eax, dword [ebp - 0xa0]
sub eax, 0xc63b87f3
je 0x10003121
jmp 0x100018fb
mov eax, dword [ebp - 0xa0]
sub eax, 0xc7491822
je 0x10004b4e
jmp 0x10001911
mov eax, dword [ebp - 0xa0]
sub eax, 0xcb35593c
je 0x100039c3
jmp 0x10001927
mov eax, dword [ebp - 0xa0]
sub eax, 0xcc514a7a
je 0x10004147
jmp 0x1000193d
mov eax, dword [ebp - 0xa0]
sub eax, 0xcd25f99d
je 0x10003c19
jmp 0x10001953
mov eax, dword [ebp - 0xa0]
sub eax, 0xd282b52e
je 0x100044a2
jmp 0x10001969
mov eax, dword [ebp - 0xa0]
sub eax, 0xd4da060c
je 0x10004941
jmp 0x1000197f
mov eax, dword [ebp - 0xa0]
sub eax, 0xd6b15a48
je 0x10004b8d
jmp 0x10001995
mov eax, dword [ebp - 0xa0]
sub eax, 0xd78bf380
je 0x1000233e
jmp 0x100019ab
mov eax, dword [ebp - 0xa0]
sub eax, 0xd8864ddb
je 0x10002a63
jmp 0x100019c1
mov eax, dword [ebp - 0xa0]
sub eax, 0xd8d87b42
je 0x100047fc
jmp 0x100019d7
mov eax, dword [ebp - 0xa0]
sub eax, 0xd96bcad9
je 0x10002f7c
jmp 0x100019ed
mov eax, dword [ebp - 0xa0]
sub eax, 0xdc0a19fc
je 0x100045c0
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1af1e628
mov ecx, 0xa0f8f70a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1af1e628
mov ecx, 0xadf42056
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0xd78bf380
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8d1526e6
mov ecx, 0x95db41d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
push eax
mov eax, esp
mov dword [ebp - 0x70], eax
push eax
mov eax, esp
mov dword [ebp - 0x6c], eax
push eax
mov eax, esp
mov dword [ebp - 0x68], eax
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
sub edx, 0x73e3c0b
sub edx, 1
add edx, 0x73e3c0b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8d1526e6
mov ecx, 0x49d97b4f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov ecx, dword [ebp - 0x9c]
push eax
mov eax, esp
mov dword [ebp - 0x64], eax
push eax
mov eax, esp
mov dword [ebp - 0x60], eax
push eax
mov eax, esp
mov dword [ebp - 0x5c], eax
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10011280
add esp, 0xc
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x51], al
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
add edx, 0x6cd448f6
sub edx, 1
sub edx, 0x6cd448f6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa65acfad
mov ecx, 0x5332c8d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dl, byte [ebp - 0x51]
mov eax, 0xdc253741
mov ecx, 0x44c45488
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
sub edx, 0x9cbbd285
sub edx, 1
add edx, 0x9cbbd285
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x83bff85f
mov ecx, 0xf9367697
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
add edx, 0xe25ecd28
sub edx, 1
sub edx, 0xe25ecd28
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdae1cae
mov ecx, 0x647cacbf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd282b52e
mov ecx, 0x49363028
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
add edx, 0x58aca127
sub edx, 1
sub edx, 0x58aca127
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdc0a19fc
mov ecx, 0xfaf3ec62
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
add edx, 0xe5e5062d
sub edx, 1
sub edx, 0xe5e5062d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x398ae5d7
mov ecx, 0xf3c199aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0x53ec67f6
jmp 0x10004c50
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x89b604b8
mov ecx, 0x9ff1ee22
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0xa254b0a4
jmp 0x10004c50
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
add edx, 0x747af5e2
sub edx, 1
sub edx, 0x747af5e2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3897da52
mov ecx, 0x85db75f1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
add edx, 0xdee3603
sub edx, 1
sub edx, 0xdee3603
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3897da52
mov ecx, 0x4fb464ca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
add edx, 0xeefa7708
sub edx, 1
sub edx, 0xeefa7708
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x82b5006f
mov ecx, 0x1ddf8072
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0x1fe20218
jmp 0x10004c50
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x40]
mov dword [eax], ecx
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
add edx, 0x1f0d5d2e
sub edx, 1
sub edx, 0x1f0d5d2e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4dcd1b11
mov ecx, 0xb76effa2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0xe301a208
jmp 0x10004c50
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
add edx, 0xbdcc0faa
sub edx, 1
sub edx, 0xbdcc0faa
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xde31231a
mov ecx, 0x656feeb1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4b8120cb
mov ecx, 0xf2258dff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0x380c34d
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
sub edx, 0x34f75426
sub edx, 1
add edx, 0x34f75426
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x57c82c56
mov ecx, 0x4bcb2f37
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1bec8fe9
mov ecx, 0x969b230e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [ebp - 0x34]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x70]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
mov word [eax], 0
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
add edx, 0xe627a87d
sub edx, 1
sub edx, 0xe627a87d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1bec8fe9
mov ecx, 0xbd594e5e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0x38821b04
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
sub edx, 0x4250e791
sub edx, 1
add edx, 0x4250e791
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ec70a2
mov ecx, 0xf9c84a1e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
sub edx, 0x2c2e50e9
sub edx, 1
add edx, 0x2c2e50e9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc7491822
mov ecx, 0x43bbf583
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa88a276
mov ecx, 0x8382b525
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0xcb35593c
jmp 0x10004c50
mov eax, dword [ebp - 0x2c]
movzx eax, word [eax + 6]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x98], 0xa43ea30d
jmp 0x10004c50
mov edx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x28]
mov eax, 0x9c85e653
mov ecx, 0x9570865c
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
xor eax, eax
mov edx, eax
add edx, 0x18
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
movzx edx, word [eax + 0x14]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x64]
movzx eax, word [eax]
imul eax, eax, 0x28
add ecx, 0xab970b5
add ecx, eax
sub ecx, 0xab970b5
mov eax, dword [ebp - 0x60]
mov dword [eax], ecx
mov dword [ebp - 0x98], 0x70f8f5ed
jmp 0x10004c50
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x211cf65d
mov ecx, 0xad3d49f0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
add edx, 0xa5ffa5db
sub edx, 1
sub edx, 0xa5ffa5db
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x322717c2
mov ecx, 0xcd25f99d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [ebp - 0x5c]
mov dword [eax], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
sub edx, 0xd979b173
sub edx, 1
add edx, 0xd979b173
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x322717c2
mov ecx, 0xf22f792c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0xb8a80150
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd6b15a48
mov ecx, 0x6de03a62
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x58]
mov byte [eax], cl
mov eax, dword [ebp - 0x80]
mov edx, dword [eax]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add edx, 0x7bc5724c
add edx, eax
sub edx, 0x7bc5724c
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub ecx, eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.100113e0
add esp, 0xc
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x80]
mov esi, dword [eax]
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub esi, 0xa567f27b
add esi, eax
add esi, 0xa567f27b
mov eax, dword [ebp - 0x5c]
sub esp, 0x10
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x58]
mov byte [eax], cl
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
sub edx, 0x1dcfa8bc
sub edx, 1
add edx, 0x1dcfa8bc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7cbfd296
mov ecx, 0x80f0ab56
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0xf2dd2293
jmp 0x10004c50
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
sub edx, 0x1784539e
sub edx, 1
add edx, 0x1784539e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd4da060c
mov ecx, 0xcc514a7a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
add edx, 0x76270186
sub edx, 1
sub edx, 0x76270186
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4cb92d63
mov ecx, 0x32dbbc46
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
sub edx, 0x8938a0a2
sub edx, 1
add edx, 0x8938a0a2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfd4a3c4
mov ecx, 0x933ec7de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfd4a3c4
mov ecx, 0x8af5b4b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0xbec8b008
jmp 0x10004c50
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
add edx, 0xd123afe3
sub edx, 1
sub edx, 0xd123afe3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2033cb7d
mov ecx, 0xfac386d5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10010650
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x98], 0xbd79cc9d
jmp 0x10004c50
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
add edx, 0xc085b4cf
sub edx, 1
sub edx, 0xc085b4cf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5dcf4fbb
mov ecx, 0x1f2496c6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0x926273ea
jmp 0x10004c50
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
add edx, 0x2170a3d7
sub edx, 1
sub edx, 0x2170a3d7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf2a91819
mov ecx, 0xa596ac24
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov ecx, dword [0x1006fca8]
mov eax, dword [0x1006fca4]
mov edx, ecx
sub edx, 0x53d8d74c
sub edx, 1
add edx, 0x53d8d74c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf2a91819
mov ecx, 0x2cd35129
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov eax, dword [0x1006fca8]
mov ecx, dword [0x1006fca4]
mov edx, eax
sub edx, 0x3106f3a5
sub edx, 1
add edx, 0x3106f3a5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3e98932e
mov ecx, 0xe35e8a40
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x98], eax
jmp 0x10004c50
mov dword [ebp - 0x98], 0x70782be0
jmp 0x10004c50
mov dword [ebp - 0x98], 0xcc514a7a
jmp 0x10004c50
mov dword [ebp - 0x98], 0x95db41d4
jmp 0x10004c50
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x88]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10011280
add esp, 0xc
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x98], 0x9a9a0cad
jmp 0x10004c50
mov dword [ebp - 0x98], 0x26af6ab4
jmp 0x10004c50
mov eax, dword [ebp - 0x44]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x98], 0x1ddf8072
jmp 0x10004c50
mov eax, dword [ebp - 0x38]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x98], 0x2dceb4d6
jmp 0x10004c50
mov dword [ebp - 0x98], 0x43bbf583
jmp 0x10004c50
mov dword [ebp - 0x98], 0x6de03a62
jmp 0x10004c50
jmp 0x10001467