Function at 0x10001430
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1bc
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c0], eax
mov eax, dword [0x1006ca04]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1bc], 0xd4622f97
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c4], eax
sub eax, 0x80df03dd
je 0x100031d3
jmp 0x10001474
mov eax, dword [ebp - 0x1c4]
sub eax, 0x84ab175c
je 0x10002669
jmp 0x1000148a
mov eax, dword [ebp - 0x1c4]
sub eax, 0x864c0907
je 0x10002344
jmp 0x100014a0
mov eax, dword [ebp - 0x1c4]
sub eax, 0x869fcc8f
je 0x1000248a
jmp 0x100014b6
mov eax, dword [ebp - 0x1c4]
sub eax, 0x87c53be1
je 0x10003116
jmp 0x100014cc
mov eax, dword [ebp - 0x1c4]
sub eax, 0x8b4a0842
je 0x1000362d
jmp 0x100014e2
mov eax, dword [ebp - 0x1c4]
sub eax, 0x8b5976a1
je 0x100035e4
jmp 0x100014f8
mov eax, dword [ebp - 0x1c4]
sub eax, 0x8f89f7f1
je 0x10004289
jmp 0x1000150e
mov eax, dword [ebp - 0x1c4]
sub eax, 0x90dc4c1a
je 0x100046c8
jmp 0x10001524
mov eax, dword [ebp - 0x1c4]
sub eax, 0x937ebc6d
je 0x100045fb
jmp 0x1000153a
mov eax, dword [ebp - 0x1c4]
sub eax, 0x93d982c9
je 0x100039f5
jmp 0x10001550
mov eax, dword [ebp - 0x1c4]
sub eax, 0x95309f32
je 0x100021e9
jmp 0x10001566
mov eax, dword [ebp - 0x1c4]
sub eax, 0x95378e67
je 0x10004764
jmp 0x1000157c
mov eax, dword [ebp - 0x1c4]
sub eax, 0x95a1a3ee
je 0x10002b01
jmp 0x10001592
mov eax, dword [ebp - 0x1c4]
sub eax, 0x975e9240
je 0x10002899
jmp 0x100015a8
mov eax, dword [ebp - 0x1c4]
sub eax, 0x98039011
je 0x1000405e
jmp 0x100015be
mov eax, dword [ebp - 0x1c4]
sub eax, 0x9ae9962a
je 0x10003dcc
jmp 0x100015d4
mov eax, dword [ebp - 0x1c4]
sub eax, 0x9b1f0ad9
je 0x100029e2
jmp 0x100015ea
mov eax, dword [ebp - 0x1c4]
sub eax, 0x9b261b09
je 0x100031a6
jmp 0x10001600
mov eax, dword [ebp - 0x1c4]
sub eax, 0x9da4ad07
je 0x100041dc
jmp 0x10001616
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa23d452c
je 0x100023ae
jmp 0x1000162c
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa2622fcb
je 0x10003300
jmp 0x10001642
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa3097ef3
je 0x10003a6b
jmp 0x10001658
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa3557f06
je 0x1000404f
jmp 0x1000166e
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa598ef75
je 0x1000315f
jmp 0x10001684
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa5ee6752
je 0x10003abc
jmp 0x1000169a
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa60627c9
je 0x10003e54
jmp 0x100016b0
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa6c83eb6
je 0x10004785
jmp 0x100016c6
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa732d64b
je 0x100033f3
jmp 0x100016dc
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa73acbe4
je 0x10004586
jmp 0x100016f2
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa7520e44
je 0x1000444a
jmp 0x10001708
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa8403468
je 0x100024ea
jmp 0x1000171e
mov eax, dword [ebp - 0x1c4]
sub eax, 0xa97fdd5a
je 0x10002cf2
jmp 0x10001734
mov eax, dword [ebp - 0x1c4]
sub eax, 0xaac7307c
je 0x10003d5e
jmp 0x1000174a
mov eax, dword [ebp - 0x1c4]
sub eax, 0xac094047
je 0x1000427a
jmp 0x10001760
mov eax, dword [ebp - 0x1c4]
sub eax, 0xac4b103c
je 0x10004526
jmp 0x10001776
mov eax, dword [ebp - 0x1c4]
sub eax, 0xac792518
je 0x10004664
jmp 0x1000178c
mov eax, dword [ebp - 0x1c4]
sub eax, 0xaefce633
je 0x1000329a
jmp 0x100017a2
mov eax, dword [ebp - 0x1c4]
sub eax, 0xb2dade6b
je 0x100036c0
jmp 0x100017b8
mov eax, dword [ebp - 0x1c4]
sub eax, 0xb402f6a2
je 0x10003ecf
jmp 0x100017ce
mov eax, dword [ebp - 0x1c4]
sub eax, 0xb4cf495a
je 0x10002cd1
jmp 0x100017e4
mov eax, dword [ebp - 0x1c4]
sub eax, 0xb4d32692
je 0x10004577
jmp 0x100017fa
mov eax, dword [ebp - 0x1c4]
sub eax, 0xb703676a
je 0x100042f7
jmp 0x10001810
mov eax, dword [ebp - 0x1c4]
sub eax, 0xb8345039
je 0x10004646
jmp 0x10001826
mov eax, dword [ebp - 0x1c4]
sub eax, 0xb991c42b
je 0x10002bad
jmp 0x1000183c
mov eax, dword [ebp - 0x1c4]
sub eax, 0xbabdd3d9
je 0x10003d4f
jmp 0x10001852
mov eax, dword [ebp - 0x1c4]
sub eax, 0xbe3dca36
je 0x10003d18
jmp 0x10001868
mov eax, dword [ebp - 0x1c4]
sub eax, 0xc0fad209
je 0x100025ec
jmp 0x1000187e
mov eax, dword [ebp - 0x1c4]
sub eax, 0xc198c948
je 0x1000279f
jmp 0x10001894
mov eax, dword [ebp - 0x1c4]
sub eax, 0xc1c9344a
je 0x10002b1c
jmp 0x100018aa
mov eax, dword [ebp - 0x1c4]
sub eax, 0xc42b29df
je 0x10003f61
jmp 0x100018c0
mov eax, dword [ebp - 0x1c4]
sub eax, 0xc7fe21bf
je 0x10004701
jmp 0x100018d6
mov eax, dword [ebp - 0x1c4]
sub eax, 0xca7d864f
je 0x100045dd
jmp 0x100018ec
mov eax, dword [ebp - 0x1c4]
sub eax, 0xcf0024d7
je 0x100037df
jmp 0x10001902
mov eax, dword [ebp - 0x1c4]
sub eax, 0xcfe3c44a
je 0x100037d0
jmp 0x10001918
mov eax, dword [ebp - 0x1c4]
sub eax, 0xd1220c98
je 0x10002e0b
jmp 0x1000192e
mov eax, dword [ebp - 0x1c4]
sub eax, 0xd29179db
je 0x10004655
jmp 0x10001944
mov eax, dword [ebp - 0x1c4]
sub eax, 0xd29c2328
je 0x10002f5c
jmp 0x1000195a
mov eax, dword [ebp - 0x1c4]
sub eax, 0xd449eb60
je 0x10002839
jmp 0x10001970
mov eax, dword [ebp - 0x1c4]
sub eax, 0xd4622f97
je 0x10002105
jmp 0x10001986
mov eax, dword [ebp - 0x1c4]
sub eax, 0xd91e5135
je 0x100043c5
jmp 0x1000199c
mov eax, dword [ebp - 0x1c4]
sub eax, 0xd9e2ae15
je 0x10004734
jmp 0x100019b2
mov eax, dword [ebp - 0x1c4]
sub eax, 0xdc5ffa59
je 0x10003461
jmp 0x100019c8
mov eax, dword [ebp - 0x1c4]
sub eax, 0xdc9c7f56
je 0x10003ca2
jmp 0x100019de
mov eax, dword [ebp - 0x1c4]
sub eax, 0xdcf864cb
je 0x10004082
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
mov edx, eax
sub edx, 0x19674d06
sub edx, 1
add edx, 0x19674d06
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x77cd697a
mov ecx, 0xfd2653e0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x198], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x19c], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.100109e0
add esp, 0xc
mov eax, dword [ebp - 0x198]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
setne al
and al, 1
mov byte [ebp - 0x181], al
mov dword [ebp - 0x1bc], 0xe35ef27e
jmp 0x100047ce
mov dl, byte [ebp - 0x181]
mov eax, 0x6b032ac1
mov ecx, 0xa8403468
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa73acbe4
mov ecx, 0x16d05565
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
mov edx, eax
sub edx, 0x6697a61e
sub edx, 1
add edx, 0x6697a61e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x50cc1352
mov ecx, 0xa29085d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
mov edx, eax
sub edx, 0x4d6a628c
sub edx, 1
add edx, 0x4d6a628c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3c857074
mov ecx, 0x618116
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x17c]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x110]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x1bc], 0x84ab175c
jmp 0x100047ce
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x1bc], 0xfb90ef55
jmp 0x100047ce
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xca7d864f
mov ecx, 0x12c293b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x39acf366
jmp 0x100047ce
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
mov edx, ecx
add edx, 0x5bec2001
sub edx, 1
sub edx, 0x5bec2001
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc991ac3
mov ecx, 0x4a938778
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x14910470
jmp 0x100047ce
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1bc], 0xc1c9344a
jmp 0x100047ce
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1bc], 0x4880c98f
jmp 0x100047ce
mov eax, dword [ebp - 0x164]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x15d], al
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
mov edx, eax
sub edx, 0xe7b86eb7
sub edx, 1
add edx, 0xe7b86eb7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x43758c1a
mov ecx, 0x16c4cd10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov dl, byte [ebp - 0x15d]
mov eax, 0xa97fdd5a
mov ecx, 0xd40887e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x1bc], 0x430e816f
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x7ca99c85
jmp 0x100047ce
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xac792518
mov ecx, 0xf443c183
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x18769b08
mov ecx, 0xa598ef75
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x3c2071fc
jmp 0x100047ce
mov eax, dword [ebp - 0x194]
movzx eax, word [eax]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x1b8]
add eax, 4
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1bc], 0x80df03dd
jmp 0x100047ce
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
mov edx, eax
add edx, 0x1123764a
sub edx, 1
sub edx, 0x1123764a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9da4ad07
mov ecx, 0x6e6df5e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [ebp - 0x148]
movzx ecx, word [eax + 2]
mov eax, dword [ebp - 0x14c]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x141], al
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x90dc4c1a
mov ecx, 0xa2622fcb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9da4ad07
mov ecx, 0x5da19bd5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x70ffc34c
mov ecx, 0xdc5ffa59
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
mov edx, ecx
sub edx, 0x39d66d37
sub edx, 1
add edx, 0x39d66d37
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x70ffc34c
mov ecx, 0xdd00f7e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x363040c3
mov ecx, 0x8b4a0842
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [ebp - 0x1b8]
sub eax, 0x38cac530
xor ecx, ecx
add ecx, 0x18
add eax, ecx
add eax, 0x38cac530
mov dword [ebp - 0x140], eax
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
mov edx, ecx
sub edx, 0x9b0e89b2
sub edx, 1
add edx, 0x9b0e89b2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x363040c3
mov ecx, 0xb2dade6b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
mov edx, eax
sub edx, 0xd7e3d191
sub edx, 1
add edx, 0xd7e3d191
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xde8819aa
mov ecx, 0x33a0f4e1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0xcf0024d7
jmp 0x100047ce
mov eax, dword [ebp - 0x1b8]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x140]
add ecx, 0x1da8e851
add ecx, eax
sub ecx, 0x1da8e851
mov eax, dword [ebp - 0x194]
movzx eax, word [eax]
imul edx, eax, 0x28
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x190]
mov dword [eax], ecx
mov eax, dword [ebp - 0x190]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001a190
call fcn.10011970
add esp, 8
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x1bc], 0x74be6e53
jmp 0x100047ce
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
mov edx, ecx
sub edx, 0xc8a2e0a1
sub edx, 1
add edx, 0xc8a2e0a1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa7520e44
mov ecx, 0xa3097ef3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
mov edx, eax
add edx, 0xbda9b27d
sub edx, 1
sub edx, 0xbda9b27d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa7520e44
mov ecx, 0xa5ee6752
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4fd6fd78
mov ecx, 0x6eb51382
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
mov edx, ecx
add edx, 0x600118c5
sub edx, 1
sub edx, 0x600118c5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5aeacd7d
mov ecx, 0xbe3dca36
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0xfd09a6e2
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x9b261b09
jmp 0x100047ce
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd9e2ae15
mov ecx, 0x9ae9962a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [ebp - 0x1a8]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
mov edx, ecx
sub edx, 0xa0fee794
sub edx, 1
add edx, 0xa0fee794
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd9e2ae15
mov ecx, 0xa60627c9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x2ec515de
jmp 0x100047ce
mov eax, dword [ebp - 0x120]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x19c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x11690651
mov ecx, 0xc42b29df
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x39acf366
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0xe1c3df9b
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x975e9240
jmp 0x100047ce
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa6c83eb6
mov ecx, 0x23ceaf86
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x6e6df5e2
jmp 0x100047ce
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5f2f8c5d
mov ecx, 0xb703676a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov eax, dword [0x1006dca8]
mov ecx, dword [0x1006dca4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5f2f8c5d
mov ecx, 0x63ffd73a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov ecx, dword [0x1006dca8]
mov eax, dword [0x1006dca4]
mov edx, ecx
add edx, 0x86c8b3f1
sub edx, 1
sub edx, 0x86c8b3f1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1bd5b9a0
mov ecx, 0x2805b1ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0xa3097ef3
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x2a657594
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x2173eecd
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x16d05565
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0xc198c948
jmp 0x100047ce
mov eax, dword [ebp - 0x16c]
xor ecx, ecx
sub esp, 0x18
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0x1bc], 0xfb34924c
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x68e9bd8c
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x354fd02a
jmp 0x100047ce
mov eax, dword [ebp - 0x158]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1bc], 0xf443c183
jmp 0x100047ce
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x1bc], 0xaefce633
jmp 0x100047ce
mov dword [ebp - 0x1bc], 0x30d7421f
jmp 0x100047ce
mov eax, dword [ebp - 0x1a8]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1bc], 0x9ae9962a
jmp 0x100047ce
mov eax, dword [ebp - 0x15c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x1bc], 0x4153f760
jmp 0x100047ce
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x1bc], 0x23ceaf86
jmp 0x100047ce
jmp 0x10001458