Function at 0x10001460
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xb8
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc0], eax
mov eax, dword [0x10068c04]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10069ea8]
mov eax, dword [0x10069ea4]
mov edx, ecx
sub edx, 0x67baf717
sub edx, 1
add edx, 0x67baf717
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0xb6], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0xb5], al
mov dword [ebp - 0xbc], 0xc07e5db7
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xc4], eax
sub eax, 0x88177488
je 0x1000302f
jmp 0x100014e4
mov eax, dword [ebp - 0xc4]
sub eax, 0x888b64bb
je 0x100037f7
jmp 0x100014fa
mov eax, dword [ebp - 0xc4]
sub eax, 0x8963d62f
je 0x1000432e
jmp 0x10001510
mov eax, dword [ebp - 0xc4]
sub eax, 0x8ad9492d
je 0x1000338e
jmp 0x10001526
mov eax, dword [ebp - 0xc4]
sub eax, 0x8bd14367
je 0x10004087
jmp 0x1000153c
mov eax, dword [ebp - 0xc4]
sub eax, 0x8d1005b4
je 0x10004db8
jmp 0x10001552
mov eax, dword [ebp - 0xc4]
sub eax, 0x8d929dc7
je 0x1000249e
jmp 0x10001568
mov eax, dword [ebp - 0xc4]
sub eax, 0x8e431ffd
je 0x10003540
jmp 0x1000157e
mov eax, dword [ebp - 0xc4]
sub eax, 0x8ecf628b
je 0x10004210
jmp 0x10001594
mov eax, dword [ebp - 0xc4]
sub eax, 0x90b2e76d
je 0x1000506a
jmp 0x100015aa
mov eax, dword [ebp - 0xc4]
sub eax, 0x92a71ea9
je 0x10004b99
jmp 0x100015c0
mov eax, dword [ebp - 0xc4]
sub eax, 0x95d8a79d
je 0x1000375d
jmp 0x100015d6
mov eax, dword [ebp - 0xc4]
sub eax, 0x991ab782
je 0x100048ce
jmp 0x100015ec
mov eax, dword [ebp - 0xc4]
sub eax, 0x993869cc
je 0x1000457a
jmp 0x10001602
mov eax, dword [ebp - 0xc4]
sub eax, 0x9a2d74c2
je 0x10004e9e
jmp 0x10001618
mov eax, dword [ebp - 0xc4]
sub eax, 0x9c484f8a
je 0x10004e15
jmp 0x1000162e
mov eax, dword [ebp - 0xc4]
sub eax, 0x9dc7d98a
je 0x10003f27
jmp 0x10001644
mov eax, dword [ebp - 0xc4]
sub eax, 0x9fd5d3d3
je 0x1000482e
jmp 0x1000165a
mov eax, dword [ebp - 0xc4]
sub eax, 0xa2b10562
je 0x10004c7f
jmp 0x10001670
mov eax, dword [ebp - 0xc4]
sub eax, 0xa464edd2
je 0x10005097
jmp 0x10001686
mov eax, dword [ebp - 0xc4]
sub eax, 0xa4b81ba8
je 0x100034ca
jmp 0x1000169c
mov eax, dword [ebp - 0xc4]
sub eax, 0xa6cc45f5
je 0x1000448f
jmp 0x100016b2
mov eax, dword [ebp - 0xc4]
sub eax, 0xa810e2e8
je 0x1000323c
jmp 0x100016c8
mov eax, dword [ebp - 0xc4]
sub eax, 0xaa47e813
je 0x10002761
jmp 0x100016de
mov eax, dword [ebp - 0xc4]
sub eax, 0xaca31774
je 0x10004c8e
jmp 0x100016f4
mov eax, dword [ebp - 0xc4]
sub eax, 0xacb77a37
je 0x10003e52
jmp 0x1000170a
mov eax, dword [ebp - 0xc4]
sub eax, 0xaeba382c
je 0x10003896
jmp 0x10001720
mov eax, dword [ebp - 0xc4]
sub eax, 0xaedbf836
je 0x1000422e
jmp 0x10001736
mov eax, dword [ebp - 0xc4]
sub eax, 0xaef02aa3
je 0x10002786
jmp 0x1000174c
mov eax, dword [ebp - 0xc4]
sub eax, 0xaf527e30
je 0x10004962
jmp 0x10001762
mov eax, dword [ebp - 0xc4]
sub eax, 0xb0c2eef8
je 0x10002e60
jmp 0x10001778
mov eax, dword [ebp - 0xc4]
sub eax, 0xb1fb994c
je 0x10003e01
jmp 0x1000178e
mov eax, dword [ebp - 0xc4]
sub eax, 0xb27d2e01
je 0x10005088
jmp 0x100017a4
mov eax, dword [ebp - 0xc4]
sub eax, 0xb2a56e9a
je 0x10002ece
jmp 0x100017ba
mov eax, dword [ebp - 0xc4]
sub eax, 0xb5b3a171
je 0x10004f2f
jmp 0x100017d0
mov eax, dword [ebp - 0xc4]
sub eax, 0xb74c0484
je 0x100025b7
jmp 0x100017e6
mov eax, dword [ebp - 0xc4]
sub eax, 0xb8d62918
je 0x100042fa
jmp 0x100017fc
mov eax, dword [ebp - 0xc4]
sub eax, 0xba4b18fe
je 0x10002d6d
jmp 0x10001812
mov eax, dword [ebp - 0xc4]
sub eax, 0xba77d5d4
je 0x10004e24
jmp 0x10001828
mov eax, dword [ebp - 0xc4]
sub eax, 0xbb157804
je 0x10002a3a
jmp 0x1000183e
mov eax, dword [ebp - 0xc4]
sub eax, 0xbc2a7915
je 0x100023ad
jmp 0x10001854
mov eax, dword [ebp - 0xc4]
sub eax, 0xbe7208e7
je 0x10002b55
jmp 0x1000186a
mov eax, dword [ebp - 0xc4]
sub eax, 0xc07e5db7
je 0x10002359
jmp 0x10001880
mov eax, dword [ebp - 0xc4]
sub eax, 0xc4e32635
je 0x10002dd0
jmp 0x10001896
mov eax, dword [ebp - 0xc4]
sub eax, 0xc5320a2b
je 0x100032dd
jmp 0x100018ac
mov eax, dword [ebp - 0xc4]
sub eax, 0xc65dd41d
je 0x10004dca
jmp 0x100018c2
mov eax, dword [ebp - 0xc4]
sub eax, 0xc78a992c
je 0x10003c47
jmp 0x100018d8
mov eax, dword [ebp - 0xc4]
sub eax, 0xc8d00f43
je 0x10004c33
jmp 0x100018ee
mov eax, dword [ebp - 0xc4]
sub eax, 0xca9f5927
je 0x100047d9
jmp 0x10001904
mov eax, dword [ebp - 0xc4]
sub eax, 0xcc161ed8
je 0x100037a6
jmp 0x1000191a
mov eax, dword [ebp - 0xc4]
sub eax, 0xce7042b9
je 0x100038ea
jmp 0x10001930
mov eax, dword [ebp - 0xc4]
sub eax, 0xcee834d4
je 0x100036e7
jmp 0x10001946
mov eax, dword [ebp - 0xc4]
sub eax, 0xcef9e570
je 0x10003820
jmp 0x1000195c
mov eax, dword [ebp - 0xc4]
sub eax, 0xd1657377
je 0x10003c90
jmp 0x10001972
mov eax, dword [ebp - 0xc4]
sub eax, 0xd26cee1a
je 0x10003ed6
jmp 0x10001988
mov eax, dword [ebp - 0xc4]
sub eax, 0xd3724166
je 0x10005079
jmp 0x1000199e
mov eax, dword [ebp - 0xc4]
sub eax, 0xd6b2298f
je 0x10002abf
jmp 0x100019b4
mov eax, dword [ebp - 0xc4]
sub eax, 0xd819e695
je 0x1000332e
jmp 0x100019ca
mov eax, dword [ebp - 0xc4]
sub eax, 0xda035fdc
je 0x10004e8f
jmp 0x100019e0
mov eax, dword [ebp - 0xc4]
sub eax, 0xda338ed8
je 0x10004da9
jmp 0x100019f6
mov eax, dword [ebp - 0xc4]
sub eax, 0xda8c7b7d
je 0x1000421f
jmp 0x10001a0c
mov eax, dword [ebp - 0xc4]
sub eax, 0xdff22082
je 0x10002b73
jmp 0x10001a22
mov eax, dword [ebp - 0xc4]
sub eax, 0xe036a4da
je 0x10002752
jmp 0x10001a38
mov eax, dword [ebp - 0xc4]
sub eax, 0xe0a589bc
je 0x100045da
jmp 0x10001a4e
mov eax, dword [ebp - 0xc4]
sub eax, 0xe131d672
je 0x10004858
mov bl, byte [ebp - 0xb6]
mov dh, byte [ebp - 0xb5]
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa2b10562
mov ecx, 0xbc2a7915
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0x9c], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
add edx, 0x5ecea908
sub edx, 1
sub edx, 0x5ecea908
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa2b10562
mov ecx, 0x2b768b0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaca31774
mov ecx, 0x18c5a837
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
add edx, 0x398d99ed
sub edx, 1
sub edx, 0x398d99ed
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xca9f5927
mov ecx, 0x14f785ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov dword [ebp - 0xbc], 0xe5c52903
jmp 0x100051e4
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0xbc], 0xaef02aa3
jmp 0x100051e4
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x6c]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0xbc], 0xe25f4064
jmp 0x100051e4
mov dword [ebp - 0xbc], 0x499306d1
jmp 0x100051e4
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x60]
mov dword [eax], ecx
mov eax, dword [ebp - 0x9c]
mov ecx, 0xffffffff
cmp dword [eax], ecx
sete al
and al, 1
mov byte [ebp - 0x59], al
mov ecx, dword [0x10069ea8]
mov eax, dword [0x10069ea4]
mov edx, ecx
sub edx, 0x1776ec92
sub edx, 1
add edx, 0x1776ec92
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3f5cf160
mov ecx, 0xbe7208e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov dl, byte [ebp - 0x59]
mov eax, 0x743821ba
mov ecx, 0xdff22082
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
add edx, 0xd1e11938
sub edx, 1
sub edx, 0xd1e11938
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xda338ed8
mov ecx, 0xe4ff820f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov dword [ebp - 0xbc], 0x4258e822
jmp 0x100051e4
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov ecx, dword [0x10069ea8]
mov eax, dword [0x10069ea4]
mov edx, ecx
sub edx, 0x19a970
sub edx, 1
add edx, 0x19a970
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9fd5d3d3
mov ecx, 0x35e50e1d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov ecx, dword [0x10069ea8]
mov eax, dword [0x10069ea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8d1005b4
mov ecx, 0xb2a56e9a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [ebp - 0x50]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x49], al
mov ecx, dword [0x10069ea8]
mov eax, dword [0x10069ea4]
mov edx, ecx
add edx, 0x632ebb0d
sub edx, 1
sub edx, 0x632ebb0d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8d1005b4
mov ecx, 0x46a20b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6b658b59
mov ecx, 0x3097ccbc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [ebp - 0x48]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2edca7db
mov ecx, 0xec5e9bd6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
add edx, 0x69007595
sub edx, 1
sub edx, 0x69007595
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5265d2c7
mov ecx, 0xd819e695
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
sub edx, 0xe09417ae
sub edx, 1
add edx, 0xe09417ae
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5265d2c7
mov ecx, 0xeb1986db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov ecx, dword [0x10069ea8]
mov eax, dword [0x10069ea4]
mov edx, ecx
sub edx, 0x79abd6c
sub edx, 1
add edx, 0x79abd6c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xaf527e30
mov ecx, 0x16a44a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov ecx, dword [0x10069ea8]
mov eax, dword [0x10069ea4]
mov edx, ecx
sub edx, 0xf8ea0fd
sub edx, 1
add edx, 0xf8ea0fd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9c484f8a
mov ecx, 0x8e431ffd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x23acd0e9
mov ecx, 0x2375f51d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov ecx, dword [0x10069ea8]
mov eax, dword [0x10069ea4]
mov edx, ecx
sub edx, 0xaec34049
sub edx, 1
add edx, 0xaec34049
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x23acd0e9
mov ecx, 0x95d8a79d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xda035fdc
mov ecx, 0xcc161ed8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
sub edx, 0x98b4e3b
sub edx, 1
add edx, 0x98b4e3b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xda035fdc
mov ecx, 0x888b64bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov dword [ebp - 0xbc], 0x438fa43a
jmp 0x100051e4
mov ecx, dword [0x10069ea8]
mov eax, dword [0x10069ea4]
mov edx, ecx
add edx, 0x86533a5f
sub edx, 1
sub edx, 0x86533a5f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9a2d74c2
mov ecx, 0xaeba382c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [ebp - 0x88]
mov word [eax], 0
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9a2d74c2
mov ecx, 0xce7042b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov dword [ebp - 0xbc], 0xfc9c7068
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe9a4c518
mov ecx, 0xd1657377
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov dword [ebp - 0xbc], 0x3cdb6a2b
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
sub edx, 0xfbe66dc2
sub edx, 1
add edx, 0xfbe66dc2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfd5882f1
mov ecx, 0xacb77a37
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [ebp - 0x30]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x29], al
mov ecx, dword [0x10069ea8]
mov eax, dword [0x10069ea4]
mov edx, ecx
add edx, 0x1f491b37
sub edx, 1
sub edx, 0x1f491b37
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfd5882f1
mov ecx, 0xd26cee1a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
add edx, 0x9728ea1d
sub edx, 1
sub edx, 0x9728ea1d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x79cbee96
mov ecx, 0x9dc7d98a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov dl, byte [ebp - 0x29]
mov eax, 0xe79f568b
mov ecx, 0xda8c7b7d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [ebp - 0x28]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x7c]
mov byte [eax], cl
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x84]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xbc], 0x1624d354
jmp 0x100051e4
mov dword [ebp - 0xbc], 0xda8c7b7d
jmp 0x100051e4
mov dword [ebp - 0xbc], 0xaedbf836
jmp 0x100051e4
mov ecx, dword [0x10069ea8]
mov eax, dword [0x10069ea4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4e29ee5d
mov ecx, 0x593b0044
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov dword [ebp - 0xbc], 0x26aa8826
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
add edx, 0x135819f3
sub edx, 1
sub edx, 0x135819f3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe9ab6bbd
mov ecx, 0xfcce6e42
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
add edx, 0x769eab8a
sub edx, 1
sub edx, 0x769eab8a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x90b2e76d
mov ecx, 0x35e7744c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
add edx, 0xd11bc2dd
sub edx, 1
sub edx, 0xd11bc2dd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd3724166
mov ecx, 0x7bc739df
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
sub edx, 0x2efe0497
sub edx, 1
add edx, 0x2efe0497
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb27d2e01
mov ecx, 0xe9aeb140
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xbc], 0x14f785ec
jmp 0x100051e4
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xbc], 0xc4e32635
jmp 0x100051e4
mov eax, dword [ebp - 0x48]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10069ea8]
mov eax, dword [0x10069ea4]
mov edx, ecx
add edx, 0x45ee4890
sub edx, 1
sub edx, 0x45ee4890
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa464edd2
mov ecx, 0x102a96e9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov dword [ebp - 0xbc], 0x16a44a3
jmp 0x100051e4
mov eax, dword [0x10069ea8]
mov ecx, dword [0x10069ea4]
mov edx, eax
sub edx, 0x95b01097
sub edx, 1
add edx, 0x95b01097
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x10230636
mov ecx, 0x380d102b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xbc], eax
jmp 0x100051e4
mov dword [ebp - 0xbc], 0xfb13c4ea
jmp 0x100051e4
mov dword [ebp - 0xbc], 0xbc2a7915
jmp 0x100051e4
mov ecx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xb4]
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, eax
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xac]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10012680
add esp, 0xc
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0xbc], 0x18c5a837
jmp 0x100051e4
mov dword [ebp - 0xbc], 0xe4ff820f
jmp 0x100051e4
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xbc], 0xb2a56e9a
jmp 0x100051e4
mov dword [ebp - 0xbc], 0x58a28904
jmp 0x100051e4
mov dword [ebp - 0xbc], 0xa4b81ba8
jmp 0x100051e4
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xbc], 0xf0c7f85
jmp 0x100051e4
mov dword [ebp - 0xbc], 0xcc161ed8
jmp 0x100051e4
mov eax, dword [ebp - 0x88]
mov word [eax], 0
mov dword [ebp - 0xbc], 0xaeba382c
jmp 0x100051e4
mov dword [ebp - 0xbc], 0x680faf74
jmp 0x100051e4
mov dword [ebp - 0xbc], 0xa6cc45f5
jmp 0x100051e4
mov dword [ebp - 0xbc], 0x993869cc
jmp 0x100051e4
mov dword [ebp - 0xbc], 0xe9aeb140
jmp 0x100051e4
mov eax, dword [ebp - 0x48]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xbc], 0x991ab782
jmp 0x100051e4
jmp 0x100014c8