Function at 0x10001590
Capabilities:
Allocate or change rwx memory
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
sub esp, 0x1c8
mov eax, dword [ebp + 8]
mov eax, dword [0x1006f204]
xor eax, ebp
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x184], eax
lea eax, [ebp - 0x11c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0xc
call fcn.10010520
mov dword [ebp - 0x1b0], 0xef6c8cce
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b4], eax
sub eax, 0x81b3ffe5
je 0x100028c2
jmp 0x100015fa
mov eax, dword [ebp - 0x1b4]
sub eax, 0x82af1f67
je 0x100049a5
jmp 0x10001610
mov eax, dword [ebp - 0x1b4]
sub eax, 0x8305c0ec
je 0x10003337
jmp 0x10001626
mov eax, dword [ebp - 0x1b4]
sub eax, 0x838ad845
je 0x10002fdf
jmp 0x1000163c
mov eax, dword [ebp - 0x1b4]
sub eax, 0x8496284e
je 0x100036a5
jmp 0x10001652
mov eax, dword [ebp - 0x1b4]
sub eax, 0x84bedabc
je 0x1000489a
jmp 0x10001668
mov eax, dword [ebp - 0x1b4]
sub eax, 0x875538ad
je 0x10004987
jmp 0x1000167e
mov eax, dword [ebp - 0x1b4]
sub eax, 0x891f1da6
je 0x1000365d
jmp 0x10001694
mov eax, dword [ebp - 0x1b4]
sub eax, 0x8e3ce4cc
je 0x10002551
jmp 0x100016aa
mov eax, dword [ebp - 0x1b4]
sub eax, 0x8f7bc6c2
je 0x100037f8
jmp 0x100016c0
mov eax, dword [ebp - 0x1b4]
sub eax, 0x92fd8485
je 0x1000402c
jmp 0x100016d6
mov eax, dword [ebp - 0x1b4]
sub eax, 0x978630fe
je 0x10002c6b
jmp 0x100016ec
mov eax, dword [ebp - 0x1b4]
sub eax, 0x9d119f37
je 0x100029ae
jmp 0x10001702
mov eax, dword [ebp - 0x1b4]
sub eax, 0x9d8651b8
je 0x10004250
jmp 0x10001718
mov eax, dword [ebp - 0x1b4]
sub eax, 0x9e98534e
je 0x10002eb8
jmp 0x1000172e
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa0b5fa48
je 0x10003d41
jmp 0x10001744
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa109f4f5
je 0x10003639
jmp 0x1000175a
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa3019939
je 0x100023c4
jmp 0x10001770
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa55884ba
je 0x100048d6
jmp 0x10001786
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa733fac7
je 0x100026a2
jmp 0x1000179c
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa7ac30b5
je 0x10003184
jmp 0x100017b2
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa7f4c3c3
je 0x10002b55
jmp 0x100017c8
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa81d4cb5
je 0x100029ff
jmp 0x100017de
mov eax, dword [ebp - 0x1b4]
sub eax, 0xa9cb4356
je 0x1000413c
jmp 0x100017f4
mov eax, dword [ebp - 0x1b4]
sub eax, 0xac984eba
je 0x100024cc
jmp 0x1000180a
mov eax, dword [ebp - 0x1b4]
sub eax, 0xb8f2035f
je 0x10004936
jmp 0x10001820
mov eax, dword [ebp - 0x1b4]
sub eax, 0xb90ec25a
je 0x1000276f
jmp 0x10001836
mov eax, dword [ebp - 0x1b4]
sub eax, 0xb95455e6
je 0x10002c41
jmp 0x1000184c
mov eax, dword [ebp - 0x1b4]
sub eax, 0xbaaa27cb
je 0x10004678
jmp 0x10001862
mov eax, dword [ebp - 0x1b4]
sub eax, 0xbcb0821a
je 0x10003274
jmp 0x10001878
mov eax, dword [ebp - 0x1b4]
sub eax, 0xbec3ad2a
je 0x100031fa
jmp 0x1000188e
mov eax, dword [ebp - 0x1b4]
sub eax, 0xc0cfb002
je 0x10003b2f
jmp 0x100018a4
mov eax, dword [ebp - 0x1b4]
sub eax, 0xc3516448
je 0x10004757
jmp 0x100018ba
mov eax, dword [ebp - 0x1b4]
sub eax, 0xc364925b
je 0x10004906
jmp 0x100018d0
mov eax, dword [ebp - 0x1b4]
sub eax, 0xc46067cc
je 0x100026fa
jmp 0x100018e6
mov eax, dword [ebp - 0x1b4]
sub eax, 0xc493f0e7
je 0x10004969
jmp 0x100018fc
mov eax, dword [ebp - 0x1b4]
sub eax, 0xc4ccf258
je 0x10002dbc
jmp 0x10001912
mov eax, dword [ebp - 0x1b4]
sub eax, 0xc79d2d07
je 0x1000371e
jmp 0x10001928
mov eax, dword [ebp - 0x1b4]
sub eax, 0xc8a90509
je 0x1000452b
jmp 0x1000193e
mov eax, dword [ebp - 0x1b4]
sub eax, 0xcddd90b5
je 0x1000249e
jmp 0x10001954
mov eax, dword [ebp - 0x1b4]
sub eax, 0xd34d0e09
je 0x10003599
jmp 0x1000196a
mov eax, dword [ebp - 0x1b4]
sub eax, 0xd44b6e6e
je 0x10004945
jmp 0x10001980
mov eax, dword [ebp - 0x1b4]
sub eax, 0xd4a124b7
je 0x10002e2a
jmp 0x10001996
mov eax, dword [ebp - 0x1b4]
sub eax, 0xd5e95339
je 0x10003d99
jmp 0x100019ac
mov eax, dword [ebp - 0x1b4]
sub eax, 0xda1fc795
je 0x10004a01
jmp 0x100019c2
mov eax, dword [ebp - 0x1b4]
sub eax, 0xdf89b950
je 0x100049c2
jmp 0x100019d8
mov eax, dword [ebp - 0x1b4]
sub eax, 0xe1bf21e2
je 0x100048c7
jmp 0x100019ee
mov eax, dword [ebp - 0x1b4]
sub eax, 0xe3233c78
je 0x100048f1
jmp 0x10001a04
mov eax, dword [ebp - 0x1b4]
sub eax, 0xe6990f53
je 0x10004241
jmp 0x10001a1a
mov eax, dword [ebp - 0x1b4]
sub eax, 0xe7b31e0b
je 0x10003fdb
jmp 0x10001a30
mov eax, dword [ebp - 0x1b4]
sub eax, 0xe96e6f9d
je 0x100048a9
jmp 0x10001a46
mov eax, dword [ebp - 0x1b4]
sub eax, 0xe984c2ec
je 0x100045d8
jmp 0x10001a5c
mov eax, dword [ebp - 0x1b4]
sub eax, 0xeadab799
je 0x100032d4
jmp 0x10001a72
mov eax, dword [ebp - 0x1b4]
sub eax, 0xeafde819
je 0x10004954
jmp 0x10001a88
mov eax, dword [ebp - 0x1b4]
sub eax, 0xebdb8529
je 0x100022e5
jmp 0x10001a9e
mov eax, dword [ebp - 0x1b4]
sub eax, 0xec49e48e
je 0x10004811
jmp 0x10001ab4
mov eax, dword [ebp - 0x1b4]
sub eax, 0xed630704
je 0x10004726
jmp 0x10001aca
mov eax, dword [ebp - 0x1b4]
sub eax, 0xed6b2e69
je 0x100034f7
jmp 0x10001ae0
mov eax, dword [ebp - 0x1b4]
sub eax, 0xed9fce45
je 0x1000487f
jmp 0x10001af6
mov eax, dword [ebp - 0x1b4]
sub eax, 0xef6c8cce
je 0x100022cd
jmp 0x10001b0c
mov eax, dword [ebp - 0x1b4]
sub eax, 0xf1175ac2
je 0x1000407d
jmp 0x10001b22
mov eax, dword [ebp - 0x1b4]
sub eax, 0xf18b436f
je 0x10002f09
jmp 0x10001b38
mov eax, dword [ebp - 0x1b4]
sub eax, 0xf3b88803
je 0x1000437d
jmp 0x10001b4e
mov eax, dword [ebp - 0x1b4]
sub eax, 0xf5bc9cd4
je 0x100046cf
jmp 0x10001b64
mov eax, dword [ebp - 0x1b4]
sub eax, 0xf7a243e1
je 0x10003c4e
mov eax, dword [ebp + 8]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x1b0], 0xebdb8529
jmp 0x10004a32
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
sub edx, 0x5d37a57b
sub edx, 1
add edx, 0x5d37a57b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4ea39ef3
mov ecx, 0x5978db06
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x6e2c851d
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x41a72101
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x1c6f3a52
jmp 0x10004a32
mov ecx, dword [ebp - 0x188]
mov edx, dword [ebp - 0x184]
lea eax, [ebp - 0x11c]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xc
call sub.KERNEL32.dll_K32GetModuleInformation
sub esp, 0x10
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x178], eax
mov ecx, dword [0x100704a8]
mov eax, dword [0x100704a4]
mov edx, ecx
add edx, 0x6f6fc80e
sub edx, 1
sub edx, 0x6f6fc80e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7bb12045
mov ecx, 0x560638b3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x6ab32877
jmp 0x10004a32
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x110]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x170], eax
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
sub edx, 0xbcbede78
sub edx, 1
add edx, 0xbcbede78
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc8a90509
mov ecx, 0xb90ec25a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x5c43de46
jmp 0x10004a32
mov ecx, dword [0x100704a8]
mov eax, dword [0x100704a4]
mov edx, ecx
add edx, 0xc9a0d1f9
sub edx, 1
sub edx, 0xc9a0d1f9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe96e6f9d
mov ecx, 0x92609b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
add edx, 0xc2eafd8d
sub edx, 1
sub edx, 0xc2eafd8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6115e514
mov ecx, 0xa81d4cb5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x190], eax
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
add edx, 0xa8ce6f4f
sub edx, 1
sub edx, 0xa8ce6f4f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6115e514
mov ecx, 0x4fe2c72b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov ecx, dword [0x100704a8]
mov eax, dword [0x100704a4]
mov edx, ecx
sub edx, 0xc09e6305
sub edx, 1
add edx, 0xc09e6305
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe984c2ec
mov ecx, 0x59093a58
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x1c6f3a52
jmp 0x10004a32
mov eax, dword [ebp - 0x168]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x1000002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
sub esp, 0x18
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x1b0], 0x18629612
jmp 0x10004a32
mov ecx, dword [0x100704a8]
mov eax, dword [0x100704a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa55884ba
mov ecx, 0xd4a124b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x160], eax
mov ecx, dword [0x100704a8]
mov eax, dword [0x100704a4]
mov edx, ecx
sub edx, 0xcbc71da1
sub edx, 1
add edx, 0xcbc71da1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa55884ba
mov ecx, 0x9e98534e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
add edx, 0xc57d3232
sub edx, 1
sub edx, 0xc57d3232
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x22da4fad
mov ecx, 0xf18b436f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x3c67c96c
jmp 0x10004a32
mov eax, dword [ebp - 0x160]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x159], al
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
add edx, 0xbb3fc520
sub edx, 1
sub edx, 0xbb3fc520
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe3233c78
mov ecx, 0x45876c42
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov ecx, dword [0x100704a8]
mov eax, dword [0x100704a4]
mov edx, ecx
sub edx, 0x647d6de3
sub edx, 1
add edx, 0x647d6de3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc364925b
mov ecx, 0xbec3ad2a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x158], eax
mov ecx, dword [0x100704a8]
mov eax, dword [0x100704a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc364925b
mov ecx, 0xbcb0821a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x68ee8417
jmp 0x10004a32
mov eax, dword [ebp - 0x158]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
sub edx, 0x4d04bd69
sub edx, 1
add edx, 0x4d04bd69
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5317a42e
mov ecx, 0x8305c0ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x7f0a1c39
jmp 0x10004a32
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
add edx, 0xed2d119b
sub edx, 1
sub edx, 0xed2d119b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd44b6e6e
mov ecx, 0x4c1303d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [ebp - 0x150]
mov edx, dword [eax + 0x3c]
mov eax, dword [ebp - 0x154]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x14c], eax
mov ecx, dword [0x100704a8]
mov eax, dword [0x100704a4]
mov edx, ecx
add edx, 0x4f893137
sub edx, 1
sub edx, 0x4f893137
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfef7b2d7
mov ecx, 0x76103644
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x1a0], eax
mov word [ebp - 0x1a2], 0
mov dword [ebp - 0x1b0], 0x891f1da6
jmp 0x10004a32
movzx eax, word [ebp - 0x1a2]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1b0], 0x77e7d111
jmp 0x10004a32
mov dl, byte [ebp - 0x141]
mov eax, 0x70cec0e7
mov ecx, 0x645be615
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
add edx, 0x86989cab
sub edx, 1
sub edx, 0x86989cab
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeafde819
mov ecx, 0x7b5e34ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
sub edx, 0x62daf621
sub edx, 1
add edx, 0x62daf621
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xed630704
mov ecx, 0x4fbe873a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
add edx, 0x6fdb5e8e
sub edx, 1
sub edx, 0x6fdb5e8e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x56721120
mov ecx, 0x5f816fbf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x5fbab126
jmp 0x10004a32
mov ax, word [ebp - 0x1a2]
add ax, 0xcfc1
add ax, 1
sub ax, 0xcfc1
mov word [ebp - 0x126], ax
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
add edx, 0x9465811b
sub edx, 1
sub edx, 0x9465811b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4f73461
mov ecx, 0x82f2892
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
add edx, 0x87fe0413
sub edx, 1
sub edx, 0x87fe0413
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdf89b950
mov ecx, 0x92fd8485
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
sub edx, 0xcc9c195e
sub edx, 1
add edx, 0xcc9c195e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdf89b950
mov ecx, 0xf1175ac2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
sub edx, 0xff98aaac
sub edx, 1
add edx, 0xff98aaac
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x123121a5
mov ecx, 0x307c1d9c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x891f1da6
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x9d8651b8
jmp 0x10004a32
mov ecx, dword [0x100704a8]
mov eax, dword [0x100704a4]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x26e8c1e8
mov ecx, 0x10745870
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xda1fc795
mov ecx, 0x52651dda
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x1b0], 0xc46067cc
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x59093a58
jmp 0x10004a32
mov eax, dword [ebp - 0x160]
mov eax, dword [0x100704a8]
mov ecx, dword [0x100704a4]
mov edx, eax
add edx, 0x6c691cd7
sub edx, 1
sub edx, 0x6c691cd7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7ac1d77c
mov ecx, 0xf5bc9cd4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1b0], eax
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x25671cc2
jmp 0x10004a32
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1a8], eax
mov ecx, dword [ebp - 0x1a8]
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0x1001a190
call fcn.100114b0
mov dword [ebp - 0x1b0], 0x4fbe873a
jmp 0x10004a32
mov dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax + 8]
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x1a8]
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
lea eax, [ebp - 0x120]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x40
mov dword [esp + 0xc], eax
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
sub esp, 0x10
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x1a9], al
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x1a8]
mov edx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor edx, edx
sub edx, eax
mov ecx, dword [ebp - 0x198]
mov eax, dword [ebp - 0x1a8]
mov eax, dword [eax + 0xc]
add ecx, 0x33a01a32
add ecx, eax
sub ecx, 0x33a01a32
mov eax, dword [ebp - 0x1a8]
mov eax, dword [eax + 8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.10010680
mov dword [ebp - 0x1b0], 0xfb2d790b
jmp 0x10004a32
mov ax, word [ebp - 0x126]
mov word [ebp - 0x1a2], ax
mov dword [ebp - 0x1b0], 0x36dff780
jmp 0x10004a32
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x1b0], 0xf8e908c9
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x1af9b240
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x92609b5
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x364b6096
jmp 0x10004a32
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1b0], 0xd4a124b7
jmp 0x10004a32
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x1b0], 0x838ad845
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0xbec3ad2a
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x3f2d2404
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0xed6b2e69
jmp 0x10004a32
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x1b0], 0x7b5e34ce
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x783406be
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0xf7a243e1
jmp 0x10004a32
mov ax, word [ebp - 0x126]
mov word [ebp - 0x1a2], ax
mov dword [ebp - 0x1b0], 0x16dae6e0
jmp 0x10004a32
mov dword [ebp - 0x1b0], 0x92fd8485
jmp 0x10004a32
mov eax, dword [ebp - 0x194]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x1b0], 0x52651dda
jmp 0x10004a32
jmp 0x100015de