Function at 0x10001300
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0xa4
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa8], eax
mov eax, dword [0x1006d004]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
mov edx, ecx
sub edx, 0x551abc44
sub edx, 1
add edx, 0x551abc44
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x9e], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x9d], al
mov dword [ebp - 0xa4], 0x18d06e97
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xac], eax
sub eax, 0x8009a5a9
je 0x10002d09
jmp 0x10001383
mov eax, dword [ebp - 0xac]
sub eax, 0x83ede76c
je 0x10004a09
jmp 0x10001399
mov eax, dword [ebp - 0xac]
sub eax, 0x841e3bb5
je 0x100038dc
jmp 0x100013af
mov eax, dword [ebp - 0xac]
sub eax, 0x85cd21a9
je 0x10003f9e
jmp 0x100013c5
mov eax, dword [ebp - 0xac]
sub eax, 0x862bee19
je 0x10004d38
jmp 0x100013db
mov eax, dword [ebp - 0xac]
sub eax, 0x874bbf2c
je 0x10004cb0
jmp 0x100013f1
mov eax, dword [ebp - 0xac]
sub eax, 0x894b9c91
je 0x10004c0b
jmp 0x10001407
mov eax, dword [ebp - 0xac]
sub eax, 0x8cd14474
je 0x10004c59
jmp 0x1000141d
mov eax, dword [ebp - 0xac]
sub eax, 0x8d931094
je 0x100034e2
jmp 0x10001433
mov eax, dword [ebp - 0xac]
sub eax, 0x90168c73
je 0x10002604
jmp 0x10001449
mov eax, dword [ebp - 0xac]
sub eax, 0x92b8a03a
je 0x10002a39
jmp 0x1000145f
mov eax, dword [ebp - 0xac]
sub eax, 0x931f32e9
je 0x1000269c
jmp 0x10001475
mov eax, dword [ebp - 0xac]
sub eax, 0x9391fb09
je 0x100045ee
jmp 0x1000148b
mov eax, dword [ebp - 0xac]
sub eax, 0x93c877df
je 0x100044c1
jmp 0x100014a1
mov eax, dword [ebp - 0xac]
sub eax, 0x97461841
je 0x10004028
jmp 0x100014b7
mov eax, dword [ebp - 0xac]
sub eax, 0x97624d67
je 0x1000275d
jmp 0x100014cd
mov eax, dword [ebp - 0xac]
sub eax, 0x98503b7f
je 0x10002b07
jmp 0x100014e3
mov eax, dword [ebp - 0xac]
sub eax, 0x986fe094
je 0x10003cdc
jmp 0x100014f9
mov eax, dword [ebp - 0xac]
sub eax, 0x9b720796
je 0x10003edf
jmp 0x1000150f
mov eax, dword [ebp - 0xac]
sub eax, 0x9c6a1123
je 0x100022e6
jmp 0x10001525
mov eax, dword [ebp - 0xac]
sub eax, 0x9c81d541
je 0x10002a05
jmp 0x1000153b
mov eax, dword [ebp - 0xac]
sub eax, 0x9e2027e9
je 0x10004832
jmp 0x10001551
mov eax, dword [ebp - 0xac]
sub eax, 0x9f9901d3
je 0x10004769
jmp 0x10001567
mov eax, dword [ebp - 0xac]
sub eax, 0xa00684fb
je 0x10002f88
jmp 0x1000157d
mov eax, dword [ebp - 0xac]
sub eax, 0xa0fe854e
je 0x10004c89
jmp 0x10001593
mov eax, dword [ebp - 0xac]
sub eax, 0xa1acdfaa
je 0x10002ce3
jmp 0x100015a9
mov eax, dword [ebp - 0xac]
sub eax, 0xa28ef3c1
je 0x10004d47
jmp 0x100015bf
mov eax, dword [ebp - 0xac]
sub eax, 0xa4aeaef6
je 0x10003146
jmp 0x100015d5
mov eax, dword [ebp - 0xac]
sub eax, 0xaba4dee5
je 0x10003ea1
jmp 0x100015eb
mov eax, dword [ebp - 0xac]
sub eax, 0xabc408b7
je 0x100034d3
jmp 0x10001601
mov eax, dword [ebp - 0xac]
sub eax, 0xadf30dce
je 0x10004ba4
jmp 0x10001617
mov eax, dword [ebp - 0xac]
sub eax, 0xb3784c81
je 0x10004bc2
jmp 0x1000162d
mov eax, dword [ebp - 0xac]
sub eax, 0xb3cf9a89
je 0x100048b2
jmp 0x10001643
mov eax, dword [ebp - 0xac]
sub eax, 0xb6284627
je 0x100025b3
jmp 0x10001659
mov eax, dword [ebp - 0xac]
sub eax, 0xb8f81b6d
je 0x10004dd4
jmp 0x1000166f
mov eax, dword [ebp - 0xac]
sub eax, 0xb90fa857
je 0x1000309f
jmp 0x10001685
mov eax, dword [ebp - 0xac]
sub eax, 0xbc4b727b
je 0x10002af8
jmp 0x1000169b
mov eax, dword [ebp - 0xac]
sub eax, 0xbc8fcf6b
je 0x10003814
jmp 0x100016b1
mov eax, dword [ebp - 0xac]
sub eax, 0xbd612c29
je 0x100042d6
jmp 0x100016c7
mov eax, dword [ebp - 0xac]
sub eax, 0xbd9a1aa0
je 0x10004718
jmp 0x100016dd
mov eax, dword [ebp - 0xac]
sub eax, 0xbeee5a25
je 0x100046ad
jmp 0x100016f3
mov eax, dword [ebp - 0xac]
sub eax, 0xc081c955
je 0x1000310e
jmp 0x10001709
mov eax, dword [ebp - 0xac]
sub eax, 0xc52cadae
je 0x1000331e
jmp 0x1000171f
mov eax, dword [ebp - 0xac]
sub eax, 0xc5330230
je 0x10003b7f
jmp 0x10001735
mov eax, dword [ebp - 0xac]
sub eax, 0xc6fd544a
je 0x10002e4d
jmp 0x1000174b
mov eax, dword [ebp - 0xac]
sub eax, 0xccd64ebd
je 0x10003eb0
jmp 0x10001761
mov eax, dword [ebp - 0xac]
sub eax, 0xce135640
je 0x10004a69
jmp 0x10001777
mov eax, dword [ebp - 0xac]
sub eax, 0xcf8a3bfb
je 0x10002b75
jmp 0x1000178d
mov eax, dword [ebp - 0xac]
sub eax, 0xcfe0855c
je 0x1000345d
jmp 0x100017a3
mov eax, dword [ebp - 0xac]
sub eax, 0xd00320d1
je 0x100027f6
jmp 0x100017b9
mov eax, dword [ebp - 0xac]
sub eax, 0xd243f5b8
je 0x10003dcf
jmp 0x100017cf
mov eax, dword [ebp - 0xac]
sub eax, 0xd2679b3e
je 0x1000319e
jmp 0x100017e5
mov eax, dword [ebp - 0xac]
sub eax, 0xd5b7b04e
je 0x100023ba
jmp 0x100017fb
mov eax, dword [ebp - 0xac]
sub eax, 0xd7092dd9
je 0x1000303f
jmp 0x10001811
mov eax, dword [ebp - 0xac]
sub eax, 0xd9677f94
je 0x10003ccd
jmp 0x10001827
mov eax, dword [ebp - 0xac]
sub eax, 0xd9a0b7aa
je 0x100042c5
jmp 0x1000183d
mov eax, dword [ebp - 0xac]
sub eax, 0xdbc2a770
je 0x10003c7a
jmp 0x10001853
mov eax, dword [ebp - 0xac]
sub eax, 0xe15b93de
je 0x10003552
jmp 0x10001869
mov eax, dword [ebp - 0xac]
sub eax, 0xe1cfe994
je 0x100027e7
jmp 0x1000187f
mov eax, dword [ebp - 0xac]
sub eax, 0xe28c7fb0
je 0x100035d3
jmp 0x10001895
mov eax, dword [ebp - 0xac]
sub eax, 0xe5333e2a
je 0x10004c4a
jmp 0x100018ab
mov eax, dword [ebp - 0xac]
sub eax, 0xe5d2e26e
je 0x100023c9
jmp 0x100018c1
mov eax, dword [ebp - 0xac]
sub eax, 0xe88735dd
je 0x1000363a
jmp 0x100018d7
mov eax, dword [ebp - 0xac]
sub eax, 0xe8a295cb
je 0x10004c68
jmp 0x100018ed
mov eax, dword [ebp - 0xac]
sub eax, 0xed105f2f
je 0x10004913
push eax
mov eax, esp
mov dword [ebp - 0x9c], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x94], eax
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
mov edx, ecx
add edx, 0x2499a686
sub edx, 1
sub edx, 0x2499a686
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbd612c29
mov ecx, 0xd5b7b04e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dword [ebp - 0xa4], 0xe5d2e26e
jmp 0x10004e46
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
mov edx, eax
add edx, 0x13409920
sub edx, 1
sub edx, 0x13409920
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb3784c81
mov ecx, 0x73857adb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
mov edx, eax
add edx, 0xebe919cd
sub edx, 1
sub edx, 0xebe919cd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5c33fd12
mov ecx, 0x90168c73
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dword [ebp - 0xa4], 0x67f9e51
jmp 0x10004e46
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
mov edx, eax
add edx, 0xeb120b73
sub edx, 1
sub edx, 0xeb120b73
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x37a42354
mov ecx, 0xfd9f867b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
mov edx, ecx
sub edx, 0x8b2e04d8
sub edx, 1
add edx, 0x8b2e04d8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x48de46ba
mov ecx, 0xe1cfe994
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dword [ebp - 0xa4], 0xd00320d1
jmp 0x10004e46
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x10b0020c
mov ecx, 0xf8e88e85
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dword [ebp - 0xa4], 0xb083a08
jmp 0x10004e46
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
mov edx, ecx
add edx, 0x74da80fd
sub edx, 1
sub edx, 0x74da80fd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x76a47bfb
mov ecx, 0x117511ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dword [ebp - 0xa4], 0x67f9e51
jmp 0x10004e46
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6a4d17e
mov ecx, 0xcf8a3bfb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x50], eax
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6a4d17e
mov ecx, 0x27d5306e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dword [ebp - 0xa4], 0xfb8ad247
jmp 0x10004e46
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x735e1dbc
mov ecx, 0x1e804067
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe5333e2a
mov ecx, 0x514d0eda
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8cd14474
mov ecx, 0x7339b4d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dword [ebp - 0xa4], 0x304490cf
jmp 0x10004e46
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
mov edx, eax
add edx, 0xdbc993a0
sub edx, 1
sub edx, 0xdbc993a0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9391fb09
mov ecx, 0x7bf02b35
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0xa4], 0x6c3f0dfd
jmp 0x10004e46
mov dword [ebp - 0xa4], 0x67f9e51
jmp 0x10004e46
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfac61ef9
mov ecx, 0xee6a2d8f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
mov edx, eax
add edx, 0x3ab9e6cb
sub edx, 1
sub edx, 0x3ab9e6cb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbd9a1aa0
mov ecx, 0x65b48e00
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
mov edx, ecx
sub edx, 0x5303d662
sub edx, 1
add edx, 0x5303d662
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbd9a1aa0
mov ecx, 0xabc408b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dword [ebp - 0xa4], 0x8d931094
jmp 0x10004e46
mov ax, word [ebp - 0x3a]
movzx eax, ax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
add eax, 4
add eax, 2
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xa4], 0x53286c34
jmp 0x10004e46
mov eax, dword [ebp - 0x34]
movzx ecx, word [eax]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x2d], al
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa0fe854e
mov ecx, 0xe28c7fb0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dl, byte [ebp - 0x2d]
mov eax, 0xd243f5b8
mov ecx, 0x556bc047
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
mov edx, ecx
sub edx, 0x57b591e4
sub edx, 1
add edx, 0x57b591e4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x26d71d4
mov ecx, 0x685b02b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov ax, word [ebp - 0x24]
movzx edx, ax
mov ecx, dword [ebp - 0x28]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x70]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001b190
call fcn.10012b50
add esp, 8
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x21], al
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
mov edx, ecx
add edx, 0x516308ff
sub edx, 1
sub edx, 0x516308ff
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb3cf9a89
mov ecx, 0x841e3bb5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dl, byte [ebp - 0x21]
mov eax, 0xfa448622
mov ecx, 0x1cc4f34f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
mov edx, ecx
sub edx, 0xba238201
sub edx, 1
add edx, 0xba238201
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x874bbf2c
mov ecx, 0x3b7672be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov eax, dword [ebp - 0x70]
mov ax, word [eax]
mov word [ebp - 0x14], ax
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x61121997
mov ecx, 0xd9677f94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dword [ebp - 0xa4], 0x986fe094
jmp 0x10004e46
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2580825e
mov ecx, 0xfb111640
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
mov edx, ecx
sub edx, 0x241e5122
sub edx, 1
add edx, 0x241e5122
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x71d45d29
mov ecx, 0x7258b014
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dword [ebp - 0xa4], 0xccd64ebd
jmp 0x10004e46
mov eax, dword [ebp - 0x10]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xa4], 0x9b720796
jmp 0x10004e46
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x17f66c75
mov ecx, 0x2690a844
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
mov edx, ecx
add edx, 0x60012d08
sub edx, 1
sub edx, 0x60012d08
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x10c66bee
mov ecx, 0x97461841
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x17f66c75
mov ecx, 0xc98dff8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10010f90
lea esp, [ebp - 8]
pop esi
pop ebx
pop ebp
ret
mov dword [ebp - 0xa4], 0x9c6a1123
jmp 0x10004e46
mov dword [ebp - 0xa4], 0xf8e88e85
jmp 0x10004e46
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb8f81b6d
mov ecx, 0x5a7e5fe6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dword [ebp - 0xa4], 0xb90fa857
jmp 0x10004e46
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
mov edx, eax
add edx, 0x8c5d2102
sub edx, 1
sub edx, 0x8c5d2102
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1d2c7dae
mov ecx, 0x9f9901d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov eax, dword [ebp - 0x70]
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1d2c7dae
mov ecx, 0x54b89122
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov eax, dword [ebp - 0x74]
mov ecx, dword [0x1006e2a8]
mov eax, dword [0x1006e2a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x56aa2389
mov ecx, 0x6880ca6e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov ax, word [ebp - 0x24]
movzx eax, ax
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
add ecx, 0x436fa149
add ecx, eax
sub ecx, 0x436fa149
mov eax, dword [ebp - 0x70]
movzx eax, word [eax]
imul eax, eax, 0x28
add ecx, 0x93e23402
add ecx, eax
sub ecx, 0x93e23402
mov eax, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001b190
call fcn.10012b50
add esp, 8
mov dword [ebp - 0xa4], 0xbc8fcf6b
jmp 0x10004e46
mov dword [ebp - 0xa4], 0xdbc2a770
jmp 0x10004e46
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1006e2a8]
mov ecx, dword [0x1006e2a4]
mov edx, eax
sub edx, 0x3c64d669
sub edx, 1
add edx, 0x3c64d669
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5c861407
mov ecx, 0x7221f05f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x10004e46
mov dword [ebp - 0xa4], 0x3174e787
jmp 0x10004e46
mov dword [ebp - 0xa4], 0x73857adb
jmp 0x10004e46
mov dword [ebp - 0xa4], 0x66c2d37
jmp 0x10004e46
mov dword [ebp - 0xa4], 0xc6fd544a
jmp 0x10004e46
mov dword [ebp - 0xa4], 0x7339b4d
jmp 0x10004e46
mov dword [ebp - 0xa4], 0x7e291cde
jmp 0x10004e46
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xa4], 0xe15b93de
jmp 0x10004e46
mov dword [ebp - 0xa4], 0xc5330230
jmp 0x10004e46
mov dword [ebp - 0xa4], 0xe480b47
jmp 0x10004e46
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x54]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x88]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov dword [ebp - 0xa4], 0x5eb37749
jmp 0x10004e46
mov dword [ebp - 0xa4], 0x5a7e5fe6
jmp 0x10004e46
jmp 0x10001367