Function at 0x10001250
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x9c
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa0], eax
mov eax, dword [0x1006d200]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x9c], 0xa8e20a24
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], eax
sub eax, 0x811c7be4
je 0x1000752a
jmp 0x10001294
mov eax, dword [ebp - 0xa4]
sub eax, 0x81c95d84
je 0x10007144
jmp 0x100012aa
mov eax, dword [ebp - 0xa4]
sub eax, 0x82454223
je 0x1000518a
jmp 0x100012c0
mov eax, dword [ebp - 0xa4]
sub eax, 0x82a01bc9
je 0x10005d54
jmp 0x100012d6
mov eax, dword [ebp - 0xa4]
sub eax, 0x82b44c27
je 0x10005db4
jmp 0x100012ec
mov eax, dword [ebp - 0xa4]
sub eax, 0x8320049a
je 0x100045b6
jmp 0x10001302
mov eax, dword [ebp - 0xa4]
sub eax, 0x83b77d6a
je 0x10006d81
jmp 0x10001318
mov eax, dword [ebp - 0xa4]
sub eax, 0x83cecd69
je 0x10005b42
jmp 0x1000132e
mov eax, dword [ebp - 0xa4]
sub eax, 0x83edeaf3
je 0x10002ffa
jmp 0x10001344
mov eax, dword [ebp - 0xa4]
sub eax, 0x847adb7a
je 0x10003df4
jmp 0x1000135a
mov eax, dword [ebp - 0xa4]
sub eax, 0x84d0a669
je 0x100063f4
jmp 0x10001370
mov eax, dword [ebp - 0xa4]
sub eax, 0x879410b5
je 0x1000460e
jmp 0x10001386
mov eax, dword [ebp - 0xa4]
sub eax, 0x88415fb2
je 0x10006863
jmp 0x1000139c
mov eax, dword [ebp - 0xa4]
sub eax, 0x88e65f3c
je 0x10004033
jmp 0x100013b2
mov eax, dword [ebp - 0xa4]
sub eax, 0x89f7774e
je 0x10004808
jmp 0x100013c8
mov eax, dword [ebp - 0xa4]
sub eax, 0x8a9c23da
je 0x100070e7
jmp 0x100013de
mov eax, dword [ebp - 0xa4]
sub eax, 0x8ec55a13
je 0x10006add
jmp 0x100013f4
mov eax, dword [ebp - 0xa4]
sub eax, 0x8f0c5e1e
je 0x100064b5
jmp 0x1000140a
mov eax, dword [ebp - 0xa4]
sub eax, 0x8f64b8f7
je 0x10003e13
jmp 0x10001420
mov eax, dword [ebp - 0xa4]
sub eax, 0x90b41682
je 0x100044f4
jmp 0x10001436
mov eax, dword [ebp - 0xa4]
sub eax, 0x9328b6d5
je 0x10006166
jmp 0x1000144c
mov eax, dword [ebp - 0xa4]
sub eax, 0x95e694db
je 0x1000720c
jmp 0x10001462
mov eax, dword [ebp - 0xa4]
sub eax, 0x97467cff
je 0x1000763d
jmp 0x10001478
mov eax, dword [ebp - 0xa4]
sub eax, 0x97e59e43
je 0x10003f96
jmp 0x1000148e
mov eax, dword [ebp - 0xa4]
sub eax, 0x98565362
je 0x1000605d
jmp 0x100014a4
mov eax, dword [ebp - 0xa4]
sub eax, 0x996b9d2c
je 0x100054f9
jmp 0x100014ba
mov eax, dword [ebp - 0xa4]
sub eax, 0x9b292ff7
je 0x10004288
jmp 0x100014d0
mov eax, dword [ebp - 0xa4]
sub eax, 0x9c33014c
je 0x1000737c
jmp 0x100014e6
mov eax, dword [ebp - 0xa4]
sub eax, 0x9cc35e9f
je 0x1000703c
jmp 0x100014fc
mov eax, dword [ebp - 0xa4]
sub eax, 0x9cf33421
je 0x1000762b
jmp 0x10001512
mov eax, dword [ebp - 0xa4]
sub eax, 0x9d2c9afe
je 0x100066ff
jmp 0x10001528
mov eax, dword [ebp - 0xa4]
sub eax, 0x9ee61e38
je 0x100036ec
jmp 0x1000153e
mov eax, dword [ebp - 0xa4]
sub eax, 0x9f822c9b
je 0x10005ff5
jmp 0x10001554
mov eax, dword [ebp - 0xa4]
sub eax, 0xa1110795
je 0x10007683
jmp 0x1000156a
mov eax, dword [ebp - 0xa4]
sub eax, 0xa18a8c16
je 0x10007554
jmp 0x10001580
mov eax, dword [ebp - 0xa4]
sub eax, 0xa1f318cb
je 0x1000761c
jmp 0x10001596
mov eax, dword [ebp - 0xa4]
sub eax, 0xa27a83e2
je 0x10007671
jmp 0x100015ac
mov eax, dword [ebp - 0xa4]
sub eax, 0xa2fc5147
je 0x1000530a
jmp 0x100015c2
mov eax, dword [ebp - 0xa4]
sub eax, 0xa33411a6
je 0x100035f0
jmp 0x100015d8
mov eax, dword [ebp - 0xa4]
sub eax, 0xa494b82e
je 0x10003166
jmp 0x100015ee
mov eax, dword [ebp - 0xa4]
sub eax, 0xa4fc6b02
je 0x100067d5
jmp 0x10001604
mov eax, dword [ebp - 0xa4]
sub eax, 0xa5a71370
je 0x100071de
jmp 0x1000161a
mov eax, dword [ebp - 0xa4]
sub eax, 0xa757fb3c
je 0x10004fb4
jmp 0x10001630
mov eax, dword [ebp - 0xa4]
sub eax, 0xa7d3767a
je 0x10003f3b
jmp 0x10001646
mov eax, dword [ebp - 0xa4]
sub eax, 0xa86b78df
je 0x10003800
jmp 0x1000165c
mov eax, dword [ebp - 0xa4]
sub eax, 0xa8dd234d
je 0x1000343d
jmp 0x10001672
mov eax, dword [ebp - 0xa4]
sub eax, 0xa8e20a24
je 0x10002fd1
jmp 0x10001688
mov eax, dword [ebp - 0xa4]
sub eax, 0xa93e2b8e
je 0x10004dd3
jmp 0x1000169e
mov eax, dword [ebp - 0xa4]
sub eax, 0xa9496c09
je 0x10006345
jmp 0x100016b4
mov eax, dword [ebp - 0xa4]
sub eax, 0xaa05d3d0
je 0x100071bf
jmp 0x100016ca
mov eax, dword [ebp - 0xa4]
sub eax, 0xaa7c76e7
je 0x100047f9
jmp 0x100016e0
mov eax, dword [ebp - 0xa4]
sub eax, 0xaba22071
je 0x10007441
jmp 0x100016f6
mov eax, dword [ebp - 0xa4]
sub eax, 0xabfc3a15
je 0x1000433d
jmp 0x1000170c
mov eax, dword [ebp - 0xa4]
sub eax, 0xaecd6208
je 0x10003f79
jmp 0x10001722
mov eax, dword [ebp - 0xa4]
sub eax, 0xaf8c56ca
je 0x100031ef
jmp 0x10001738
mov eax, dword [ebp - 0xa4]
sub eax, 0xb00684af
je 0x10004d76
jmp 0x1000174e
mov eax, dword [ebp - 0xa4]
sub eax, 0xb161ddbc
je 0x10005eb8
jmp 0x10001764
mov eax, dword [ebp - 0xa4]
sub eax, 0xb23e6bf4
je 0x10006ef9
jmp 0x1000177a
mov eax, dword [ebp - 0xa4]
sub eax, 0xb255f2fa
je 0x10004c54
jmp 0x10001790
mov eax, dword [ebp - 0xa4]
sub eax, 0xb27de163
je 0x1000309d
jmp 0x100017a6
mov eax, dword [ebp - 0xa4]
sub eax, 0xb348ebae
je 0x10005b9b
jmp 0x100017bc
mov eax, dword [ebp - 0xa4]
sub eax, 0xb39553cb
je 0x100040b8
jmp 0x100017d2
mov eax, dword [ebp - 0xa4]
sub eax, 0xb3ad806c
je 0x10006838
jmp 0x100017e8
mov eax, dword [ebp - 0xa4]
sub eax, 0xb3c160f8
je 0x1000656d
jmp 0x100017fe
mov eax, dword [ebp - 0xa4]
sub eax, 0xb4e08140
je 0x1000583b
push eax
mov eax, esp
mov dword [ebp - 0x7c], eax
push eax
mov eax, esp
mov dword [ebp - 0x78], eax
push eax
mov eax, esp
mov dword [ebp - 0x74], eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x9c], 0x83edeaf3
jmp 0x1000768d
mov eax, dword [ebp - 0xa0]
push eax
mov ecx, esp
mov dword [ebp - 0x6c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x68], ecx
sub esp, 0x104
mov ecx, esp
mov dword [ebp - 0x64], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x60], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x5c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x58], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x54], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x50], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x4c], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x48], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x44], ecx
push eax
mov ecx, esp
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x80], eax
movss xmm0, dword [0x100243ac]
movss dword [ebp - 0x84], xmm0
movss xmm0, dword [0x100243a8]
movss dword [ebp - 0x84], xmm0
movss xmm0, dword [0x100243a4]
movss dword [ebp - 0x84], xmm0
mov dl, 1
mov eax, 0x38f87138
mov ecx, 0xb27de163
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
movss xmm0, dword [0x100243a0]
movss dword [ebp - 0x84], xmm0
mov dword [ebp - 0x9c], 0xeb8e5134
jmp 0x1000768d
mov dword [ebp - 0x9c], 0xe296a1b7
jmp 0x1000768d
mov dword [ebp - 0x9c], 0x3ffbcbe4
jmp 0x1000768d
mov dword [ebp - 0x9c], 0xe5818d38
jmp 0x1000768d
mov ecx, dword [0x1006e540]
mov eax, dword [0x1006e53c]
mov edx, ecx
add edx, 0x35847619
sub edx, 1
sub edx, 0x35847619
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd62e5bed
mov ecx, 0xe0e230c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov dword [ebp - 0x9c], 0xba3d7e3e
jmp 0x1000768d
mov eax, dword [0x1006e540]
mov ecx, dword [0x1006e53c]
mov edx, eax
add edx, 0xe033a02d
sub edx, 1
sub edx, 0xe033a02d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x33c70a3
mov ecx, 0x2c37113d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
movss xmm0, dword [0x10024330]
movss dword [ebp - 0x8c], xmm0
mov dword [ebp - 0x9c], 0x8f64b8f7
jmp 0x1000768d
mov ecx, dword [0x1006e540]
mov eax, dword [0x1006e53c]
mov edx, ecx
sub edx, 0x8a0d0451
sub edx, 1
add edx, 0x8a0d0451
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x95e694db
mov ecx, 0x7f7f9719
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
movss xmm0, dword [0x10024328]
movss dword [ebp - 0x8c], xmm0
mov dword [ebp - 0x9c], 0xbdb5b1b9
jmp 0x1000768d
mov dl, 1
mov eax, 0xb39553cb
mov ecx, 0x97e59e43
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
movss xmm0, dword [0x10024320]
movss dword [ebp - 0x8c], xmm0
movss xmm0, dword [0x1002431c]
movss dword [ebp - 0x8c], xmm0
mov dword [ebp - 0x9c], 0x50628d3c
jmp 0x1000768d
mov ecx, dword [0x1006e540]
mov eax, dword [0x1006e53c]
mov edx, ecx
add edx, 0xe8e0d5b4
sub edx, 1
sub edx, 0xe8e0d5b4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcee809dd
mov ecx, 0x4c840e7a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
movss xmm0, dword [0x10024318]
movss dword [ebp - 0x8c], xmm0
mov dword [ebp - 0x9c], 0x444cb561
jmp 0x1000768d
movss xmm0, dword [0x10024300]
movss dword [ebp - 0x90], xmm0
movss xmm0, dword [0x100242fc]
movss dword [ebp - 0x90], xmm0
movss xmm0, dword [0x100242f8]
movss dword [ebp - 0x90], xmm0
mov dword [ebp - 0x9c], 0x11511230
jmp 0x1000768d
mov ecx, dword [0x1006e540]
mov eax, dword [0x1006e53c]
mov edx, ecx
add edx, 0x784f979c
sub edx, 1
sub edx, 0x784f979c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe0e528ec
mov ecx, 0xb6b752b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov dl, 1
mov eax, 0x879410b5
mov ecx, 0xe1ee41f8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov eax, dword [0x1006e540]
mov ecx, dword [0x1006e53c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x57e35f00
mov ecx, 0xb82ef93
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov eax, dword [0x1006e540]
mov ecx, dword [0x1006e53c]
mov edx, eax
sub edx, 0x193eb156
sub edx, 1
add edx, 0x193eb156
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2f140a0c
mov ecx, 0xdbad4b1e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov dword [ebp - 0x9c], 0x89f7774e
jmp 0x1000768d
mov ecx, dword [0x1006e540]
mov eax, dword [0x1006e53c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc03692d1
mov ecx, 0x58a717dd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
movss xmm0, dword [0x100242c0]
movss dword [ebp - 0x94], xmm0
mov dword [ebp - 0x9c], 0x19c0cfcc
jmp 0x1000768d
movss xmm0, dword [0x100242bc]
movss dword [ebp - 0x94], xmm0
mov dword [ebp - 0x9c], 0xb688a8e5
jmp 0x1000768d
mov dl, 1
mov eax, 0x145a83a3
mov ecx, 0x4103ae07
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
movss xmm0, dword [0x100241b8]
movss dword [ebp - 0x94], xmm0
movss xmm0, dword [0x100241b4]
movss dword [ebp - 0x94], xmm0
mov ecx, dword [0x1006e540]
mov eax, dword [0x1006e53c]
mov edx, ecx
sub edx, 0x5bdeff0a
sub edx, 1
add edx, 0x5bdeff0a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6f1b6fd7
mov ecx, 0x377194c9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
movss xmm0, dword [0x1002429c]
movss dword [ebp - 0x94], xmm0
mov dword [ebp - 0x9c], 0x2b25744f
jmp 0x1000768d
movss xmm0, dword [0x1002428c]
movss dword [ebp - 0x98], xmm0
mov dword [ebp - 0x9c], 0x334f0e2b
jmp 0x1000768d
mov dl, 1
mov eax, 0xd8d4167a
mov ecx, 0xb83d1bbc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov dl, 1
mov eax, 0xb348ebae
mov ecx, 0x346abd7a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov eax, dword [ebp - 0x7c]
movss xmm0, dword [0x10024224]
movss dword [eax], xmm0
mov dword [ebp - 0x9c], 0x21fb501b
jmp 0x1000768d
mov dword [ebp - 0x9c], 0xcb959218
jmp 0x1000768d
mov eax, dword [ebp - 0x78]
movss xmm0, dword [0x100241a0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x78]
movss xmm0, dword [0x1002419c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x78]
movss xmm0, dword [0x10024198]
movss dword [eax], xmm0
mov eax, dword [0x1006e540]
mov ecx, dword [0x1006e53c]
mov edx, eax
sub edx, 0xef689a1b
sub edx, 1
add edx, 0xef689a1b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaba22071
mov ecx, 0x33e3fae0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov ecx, dword [0x1006e540]
mov eax, dword [0x1006e53c]
mov edx, ecx
add edx, 0x6e619140
sub edx, 1
sub edx, 0x6e619140
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbffaeaf5
mov ecx, 0xdee8633d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov eax, dword [ebp - 0x78]
movss xmm0, dword [0x1002420c]
movss dword [eax], xmm0
mov dword [ebp - 0x9c], 0x15002080
jmp 0x1000768d
mov dword [ebp - 0x9c], 0xf3e7e651
jmp 0x1000768d
mov eax, dword [ebp - 0x78]
movss xmm0, dword [0x10024200]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x78]
movss xmm0, dword [0x100241fc]
movss dword [eax], xmm0
mov dword [ebp - 0x9c], 0x35be6bc7
jmp 0x1000768d
mov dword [ebp - 0x9c], 0xfebbf867
jmp 0x1000768d
mov eax, dword [0x1006e540]
mov ecx, dword [0x1006e53c]
mov edx, eax
add edx, 0x23f642a8
sub edx, 1
sub edx, 0x23f642a8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc926cc4d
mov ecx, 0xf87207f9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
mov eax, dword [ebp - 0x70]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ecx]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x104
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [ebp - 0x64]
xor ecx, ecx
sub esp, 0x1c
mov dword [esp], eax
mov dword [esp + 4], 0x80000000
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, eax
mov eax, dword [ebp - 0x60]
mov dword [eax], ecx
mov edx, dword [ebp - 0x60]
mov esi, 0xffffffff
mov eax, 0xf18d8d47
mov ecx, 0xb3c160f8
cmp dword [edx], esi
cmove eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov dword [ebp - 0x9c], 0x9cc35e9f
jmp 0x1000768d
mov eax, dword [0x1006e540]
mov ecx, dword [0x1006e53c]
mov edx, eax
add edx, 0x10ce2e88
sub edx, 1
sub edx, 0x10ce2e88
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc22497b3
mov ecx, 0x7268a6e9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, eax
mov eax, dword [ebp - 0x58]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x9c], 0xb3ad806c
jmp 0x1000768d
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x30]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
mov word [eax], 0
mov dword [ebp - 0x9c], 0x88415fb2
jmp 0x1000768d
mov eax, dword [ebp - 0x4c]
movzx eax, word [eax]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 6]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x26], al
mov dword [ebp - 0x9c], 0x4a7ed882
jmp 0x1000768d
mov eax, dword [ebp - 0x44]
mov dword [eax], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax]
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
sub edx, 0x4665e309
add edx, eax
add edx, 0x4665e309
mov eax, dword [ebp - 0x44]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x40]
mov byte [eax], cl
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
add ecx, 0xf8916c78
add ecx, eax
sub ecx, 0xf8916c78
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10018500
add esp, 0xc
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov ecx, dword [0x1006e540]
mov eax, dword [0x1006e53c]
mov edx, ecx
sub edx, 0x667176d3
sub edx, 1
add edx, 0x667176d3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa18a8c16
mov ecx, 0x267f80d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov eax, dword [ebp - 0x4c]
mov ax, word [eax]
mov word [ebp - 0x12], ax
mov eax, dword [0x1006e540]
mov ecx, dword [0x1006e53c]
mov edx, eax
add edx, 0xe3e8558a
sub edx, 1
sub edx, 0xe3e8558a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9cf33421
mov ecx, 0xb4f41d94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov ecx, dword [0x1006e540]
mov eax, dword [0x1006e53c]
mov edx, ecx
sub edx, 0x24128f64
sub edx, 1
add edx, 0x24128f64
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa27a83e2
mov ecx, 0x22dbc766
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
mov eax, dword [0x1006e540]
mov ecx, dword [0x1006e53c]
mov edx, eax
sub edx, 0x79ea1b06
sub edx, 1
add edx, 0x79ea1b06
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa1110795
mov ecx, 0xd3248714
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x9c], eax
jmp 0x1000768d
movss xmm0, dword [0x100241f0]
movss dword [ebp - 0x84], xmm0
mov dword [ebp - 0x9c], 0x384f0c89
jmp 0x1000768d
movss xmm0, dword [0x100241e4]
movss dword [ebp - 0x84], xmm0
mov dword [ebp - 0x9c], 0xf33c885b
jmp 0x1000768d
movss xmm0, dword [0x100241d8]
movss dword [ebp - 0x88], xmm0
mov dword [ebp - 0x9c], 0x73b13585
jmp 0x1000768d
mov dword [ebp - 0x9c], 0xd1287ba5
jmp 0x1000768d
mov dword [ebp - 0x9c], 0x7f7f9719
jmp 0x1000768d
movss xmm0, dword [0x100241b0]
movss dword [ebp - 0x98], xmm0
movss xmm0, dword [0x100241ac]
movss dword [ebp - 0x98], xmm0
mov dword [ebp - 0x9c], 0xe6eb8065
jmp 0x1000768d
mov eax, dword [ebp - 0x78]
movss xmm0, dword [0x100241a0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x78]
movss xmm0, dword [0x1002419c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x78]
movss xmm0, dword [0x10024198]
movss dword [eax], xmm0
mov dword [ebp - 0x9c], 0x82b44c27
jmp 0x1000768d
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x100247f0
call fcn.1001a710
add esp, 8
mov dword [ebp - 0x9c], 0x5d9f34a2
jmp 0x1000768d
mov eax, dword [ebp - 0x44]
mov dword [eax], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0x68]
mov edx, dword [eax]
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x44]
sub esp, 0x10
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0x40]
mov byte [eax], cl
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov edx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, esi
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov eax, dword [eax + 8]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10018500
add esp, 0xc
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x9c], 0x8ec55a13
jmp 0x1000768d
mov dword [ebp - 0x9c], 0x4bd2ac42
jmp 0x1000768d
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x9c], 0x83b77d6a
jmp 0x1000768d
mov ax, word [ebp - 0x12]
mov ax, word [ebp - 0x12]
mov cx, word [ebp - 0x12]
xor eax, eax
sub ax, cx
xor ecx, ecx
sub cx, 1
add ax, cx
xor ecx, ecx
sub cx, ax
mov eax, dword [ebp - 0x4c]
mov word [eax], cx
mov dword [ebp - 0x9c], 0x59b1ff39
jmp 0x1000768d
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x9c], 0x22dbc766
jmp 0x1000768d
mov dword [ebp - 0x9c], 0xd3248714
jmp 0x10001278