Function at 0x10068d70
Capabilities:
Create thread
Delete file
Execute command
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101dfaf4
mov eax, dword fs:[0]
push eax
sub esp, 0x214
mov eax, dword [0x1026ebc4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, 0x10270120
cmp edi, 0x10270108
je 0x10068dcb
cmp dword [0x1027011c], 0x10
mov eax, 0x10270108
push dword [0x10270118]
cmovae eax, dword [0x10270108]
mov ecx, edi
push eax
call fcn.100505a0
mov esi, dword [0x10270130]
mov eax, 7
cmp esi, eax
mov edx, 0x10270120
cmovb eax, esi
cmp dword [0x10270134], 0x10
cmovae edx, dword [0x10270120]
sub esi, eax
add eax, edx
lea ecx, [esi + 1]
push ecx
push eax
push edx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov dword [0x10270130], esi
mov edx, 8
mov dword [ebp - 0x30], 0
cmp esi, edx
mov dword [ebp - 0x2c], 0
mov eax, 0x10270120
lea ecx, [ebp - 0x40]
cmovb edx, esi
xorps xmm0, xmm0
cmp dword [0x10270134], 0x10
push edx
cmovae eax, dword [0x10270120]
push eax
movups xmmword [ebp - 0x40], xmm0
call fcn.10052900
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x10068e83
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10068e79
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10068e79
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
mov ecx, dword [0x10270130]
mov edi, bind
mov eax, edi
sub eax, ecx
cmp eax, 0x1b
jb 0x10069c9d
cmp dword [0x10270134], 0x10
mov eax, 0x10270120
push ecx
cmovae eax, dword [0x10270120]
push eax
push 0x1b
push str.https:__key_hax.net_newdll_
push ecx
push dword [ebp - 0x164]
lea ecx, [ebp - 0xb8]
call fcn.10052ee0
push 9
push str._name.txt
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0
call fcn.100507f0
mov ecx, 0x10270348
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x28]
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x10068f42
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10068f38
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10068f75
push ecx
push edx
call fcn.101d999a
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xa4]
cmp ecx, 0x10
jb 0x10068f85
mov edx, dword [ebp - 0xb8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10068f7b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10068f7b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
mov ecx, dword [0x10270130]
mov eax, edi
sub eax, ecx
cmp eax, 0x1b
jb 0x10069ca2
cmp dword [0x10270134], 0x10
mov eax, 0x10270120
push ecx
cmovae eax, dword [0x10270120]
push eax
push 0x1b
push str.https:__key_hax.net_newdll_
push ecx
push dword [ebp - 0x164]
lea ecx, [ebp - 0xd0]
call fcn.10052ee0
push 7
push str._id.txt
lea ecx, [ebp - 0xd0]
mov dword [ebp - 4], 1
call fcn.100507f0
mov ecx, 0x10270078
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x28]
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x1006903f
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069035
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10069072
push ecx
push edx
call fcn.101d999a
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0x10
jb 0x10069082
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069078
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10069078
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
mov ecx, dword [0x10270130]
mov eax, edi
sub eax, ecx
cmp eax, 0x1b
jb 0x10069ca7
cmp dword [0x10270134], 0x10
mov eax, 0x10270120
push ecx
cmovae eax, dword [0x10270120]
push eax
push 0x1b
push str.https:__key_hax.net_newdll_
push ecx
push dword [ebp - 0x164]
lea ecx, [ebp - 0xe8]
call fcn.10052ee0
push 0x12
push str._Telegram_link.txt
lea ecx, [ebp - 0xe8]
mov dword [ebp - 4], 2
call fcn.100507f0
mov ecx, 0x10270228
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x28]
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x1006913c
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069132
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006916f
push ecx
push edx
call fcn.101d999a
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xd4]
cmp ecx, 0x10
jb 0x1006917f
mov edx, dword [ebp - 0xe8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069175
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10069175
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
mov ecx, dword [0x10270130]
mov eax, edi
sub eax, ecx
cmp eax, 0x1b
jb 0x10069cac
cmp dword [0x10270134], 0x10
mov eax, 0x10270120
push ecx
cmovae eax, dword [0x10270120]
push eax
push 0x1b
push str.https:__key_hax.net_newdll_
push ecx
push dword [ebp - 0x164]
lea ecx, [ebp - 0x100]
call fcn.10052ee0
push 0x11
push str._discord_link.txt
lea ecx, [ebp - 0x100]
mov dword [ebp - 4], 3
call fcn.100507f0
mov ecx, 0x10270138
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x28]
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x10069239
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006922f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006926c
push ecx
push edx
call fcn.101d999a
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xec]
cmp ecx, 0x10
jb 0x1006927c
mov edx, dword [ebp - 0x100]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069272
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10069272
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
mov ecx, dword [0x10270130]
mov eax, edi
sub eax, ecx
cmp eax, 0x1b
jb 0x10069cb1
cmp dword [0x10270134], 0x10
mov eax, 0x10270120
push ecx
cmovae eax, dword [0x10270120]
push eax
push 0x1b
push str.https:__key_hax.net_newdll_
push ecx
push dword [ebp - 0x164]
lea ecx, [ebp - 0x58]
call fcn.10052ee0
push 0xf
push str._Image_Link.txt
lea ecx, [ebp - 0x58]
mov dword [ebp - 4], 4
call fcn.100507f0
mov ecx, 0x10270168
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x28]
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x10069330
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069326
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1006935d
push ecx
push edx
call fcn.101d999a
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x44]
cmp ecx, 0x10
jb 0x1006936d
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069363
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10069363
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
sub esp, 0x18
mov ecx, esp
push 0x10270348
call fcn.1004ee20
lea ecx, [ebp - 0x58]
call fcn.100684f0
add esp, 0x18
mov ecx, 0x10270240
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x44]
cmp ecx, 0x10
jb 0x100693c8
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100693be
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100693be
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
sub esp, 0x18
mov ecx, esp
push 0x10270078
call fcn.1004ee20
lea ecx, [ebp - 0x58]
call fcn.100684f0
add esp, 0x18
mov ecx, 0x10270198
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x44]
cmp ecx, 0x10
jb 0x10069423
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069419
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10069419
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
sub esp, 0x18
mov ecx, esp
push 0x10270168
call fcn.1004ee20
lea ecx, [ebp - 0x58]
call fcn.100684f0
add esp, 0x18
mov ecx, 0x102701c8
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x44]
cmp ecx, 0x10
jb 0x1006947e
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069474
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10069474
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
sub esp, 0x18
mov ecx, esp
push 0x10270138
call fcn.1004ee20
lea ecx, [ebp - 0x58]
call fcn.100684f0
add esp, 0x18
mov ecx, 0x10270060
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x44]
cmp ecx, 0x10
jb 0x100694d9
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100694cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100694cf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
sub esp, 0x18
mov ecx, esp
push 0x10270228
call fcn.1004ee20
lea ecx, [ebp - 0x58]
call fcn.100684f0
add esp, 0x18
mov ecx, 0x102701f8
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x44]
cmp ecx, 0x10
jb 0x10069534
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006952a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006952a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
mov ecx, dword [0x10270130]
mov eax, edi
sub eax, ecx
cmp eax, 0x1b
jb 0x10069cb6
cmp dword [0x10270134], 0x10
mov eax, 0x10270120
push ecx
cmovae eax, dword [0x10270120]
push eax
push 0x1b
push str.https:__key_hax.net_newdll_
push ecx
push dword [ebp - 0x164]
lea ecx, [ebp - 0x118]
call fcn.10052ee0
sub esp, 0x18
mov dword [ebp - 4], 5
mov esi, esp
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x164], esi
push 0xb
push str._active.txt
call fcn.100507f0
xorps xmm0, xmm0
lea ecx, [ebp - 0x40]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.100684f0
add esp, 0x18
mov ecx, 0x102702e8
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x10069614
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006960a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10069659
push ecx
push edx
call fcn.101d999a
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
cmp ecx, 0x10
jb 0x10069669
mov edx, dword [ebp - 0x118]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006965f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006965f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
mov ecx, dword [0x10270130]
mov eax, edi
sub eax, ecx
cmp eax, 0x1b
jb 0x10069cbb
cmp dword [0x10270134], 0x10
mov eax, 0x10270120
push ecx
cmovae eax, dword [0x10270120]
push eax
push 0x1b
push str.https:__key_hax.net_newdll_
push ecx
push dword [ebp - 0x164]
lea ecx, [ebp - 0x130]
call fcn.10052ee0
sub esp, 0x18
mov dword [ebp - 4], 6
mov esi, esp
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x164], esi
push 0xb
push str._normal.txt
call fcn.100507f0
xorps xmm0, xmm0
lea ecx, [ebp - 0x88]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.100684f0
add esp, 0x18
mov ecx, 0x102700f0
push eax
call fcn.10050d10
mov ecx, dword [ebp - 0x74]
cmp ecx, 0x10
jb 0x1006974f
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10069745
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10069797
push ecx
push edx
call fcn.101d999a
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
cmp ecx, 0x10
jb 0x100697a7
mov edx, dword [ebp - 0x130]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1006979d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1006979d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.101d999a
add esp, 8
mov ecx, dword [0x10270130]
mov eax, edi
sub eax, ecx
cmp eax, 0x1b
jb 0x10069cc0
cmp dword [0x10270134], 0x10
mov eax, 0x10270120
push ecx
cmovae eax, dword [0x10270120]
push eax
push 0x1b
push str.https:__key_hax.net_newdll_
push ecx
push dword [ebp - 0x164]
lea ecx, [ebp - 0x148]
call fcn.10052ee0
sub esp, 0x18
mov dword [ebp - 4], 7
mov esi, esp
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x164], esi
push 0xb
push str._glitch.txt
call fcn.100507f0
xorps xmm0, xmm0
lea ecx, [ebp - 0x160]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.100684f0
add esp, 0x18
mov ecx, 0x10270210
push eax
call fcn.10050d10
lea ecx, [ebp - 0x160]
call fcn.1004a0f0
lea ecx, [ebp - 0x148]
mov dword [ebp - 4], 0xffffffff
call fcn.1004a0f0
mov ecx, dword [0x10270130]
mov eax, edi
sub eax, ecx
cmp eax, 0x1b
jb 0x10069cc5
cmp dword [0x10270134], 0x10
mov eax, 0x10270120
push ecx
cmovae eax, dword [0x10270120]
push eax
push 0x1b
push str.https:__key_hax.net_newdll_
push ecx
push dword [ebp - 0x164]
lea ecx, [ebp - 0xa0]
call fcn.10052ee0
sub esp, 0x18
mov dword [ebp - 4], 8
mov esi, esp
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x164], esi
push 8
push str._hax.txt
call fcn.100507f0
xorps xmm0, xmm0
lea ecx, [ebp - 0x70]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.100684f0
add esp, 0x18
mov ecx, 0x10270318
push eax
call fcn.10050d10
lea ecx, [ebp - 0x70]
call fcn.1004a0f0
lea ecx, [ebp - 0xa0]
mov dword [ebp - 4], 0xffffffff
call fcn.1004a0f0
cmp dword [0x102702fc], 0x10
mov eax, 0x102702e8
push 1
cmovae eax, dword [0x102702e8]
push 0x1025770c
push dword [0x102702f8]
push eax
call fcn.100533c0
cmp dword [0x10270104], 0x10
mov ecx, 0x102700f0
push 1
cmovae ecx, dword [0x102700f0]
push 0x1025770c
push dword [0x10270100]
mov byte [0x10278c19], al
push ecx
call fcn.100533c0
cmp dword [0x10270224], 0x10
mov ecx, 0x10270210
push 1
cmovae ecx, dword [0x10270210]
push 0x1025770c
push dword [0x10270220]
mov byte [0x10278c1a], al
push ecx
call fcn.100533c0
cmp dword [0x1027032c], 0x10
mov ecx, 0x10270318
push 1
cmovae ecx, dword [0x10270318]
push 0x1025770c
push dword [0x10270328]
mov byte [0x10278bf2], al
push ecx
call fcn.100533c0
add esp, 0x40
mov byte [0x10278bf3], al
cmp byte [0x10278c19], 0
jne 0x10069a20
push str.start_cmd.exe__c_CMD__C__TITLE_BpStop__color_3__ECHO_Tools_DISABLE_By_DEVelopER__PAUSE_
lea ecx, [ebp - 0x70]
call fcn.1004ede0
lea ecx, [ebp - 0x70]
call fcn.1004eda0
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
cmp byte [0x10278c1a], 0
mov al, byte [0x10278bf0]
jne 0x10069a39
test al, al
jne 0x10069a39
push str.start_cmd.exe__c_CMD__C__TITLE_BpStop__color_3__ECHO_Tools_Not_Allow_Use_Normal_Bp__PAUSE_
jmp 0x100699fe
cmp byte [0x10278bf2], 0
jne 0x10069a4d
test al, al
je 0x10069a4d
push str.start_cmd.exe__c_CMD__C__TITLE_BpStop__color_3__ECHO_Tools_Not_Allow_Use_Glitch_Bp__PAUSE_
jmp 0x100699fe
cmp dword [0x10270314], 0x10
mov eax, 0x10270300
push 3
cmovae eax, dword [0x10270300]
push 0x102577e8
push dword [0x10270310]
push eax
call fcn.100533c0
add esp, 0x10
test al, al
je 0x10069aff
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0
push 0x60
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 0xf
movups xmmword [ebp - 0x40], xmm0
call fcn.10052f80
mov dword [ebp - 0x40], eax
mov edi, eax
mov dword [ebp - 0x2c], 0x5f
mov ecx, 0x17
mov dword [ebp - 0x30], 0x5d
mov esi, str.start_cmd.exe__c_CMD__C__TITLE_BpStop__color_3__ECHO_Tools_DISABLE_By_DEVelopER__PAUSE_
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov byte [eax + 0x5d], 0
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 0x10
cmovae eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
push 0
push 0
push 0
push 0x10068cf0
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_CreateThread]
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
lea ecx, [ebp - 0x40]
call fcn.1004a0f0
mov edi, bind
mov esi, dword [sym.imp.KERNEL32.DLL_DeleteFileA]
push str.C:WindowsOffline_Web_Pageslogo.png
call esi
push str.C:Name.ttf
call esi
sub esp, 8
lea ecx, [ebp - 0x220]
push 2
push str.C:Name.ttf
call fcn.10050090
mov dword [ebp - 4], 9
mov ecx, dword [0x10270250]
sub edi, ecx
cmp edi, 1
jb 0x10069cca
cmp dword [0x10270254], 0x10
mov eax, 0x10270240
push ecx
cmovae eax, dword [0x10270240]
push eax
push 1
push 0x10257888
push ecx
push dword [ebp - 0x164]
lea ecx, [ebp - 0xa0]
call fcn.10052ee0
push 0x1025788c
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.10051180
add esp, 0xc
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x10069b99
mov eax, dword [eax]
push ecx
mov edx, eax
lea ecx, [ebp - 0x220]
call fcn.1005d530
add esp, 4
lea ecx, [ebp - 0x70]
call fcn.1004a0f0
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 9
call fcn.1004a0f0
lea ecx, [ebp - 0x21c]
call fcn.10050300
test eax, eax
jne 0x10069be9
mov eax, dword [ebp - 0x220]
lea ecx, [ebp - 0x220]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
sub esp, 0x18
mov ecx, esp
push 0x10270198
call fcn.1004ee20
call fcn.100594b0
sub esp, 0x18
xorps xmm0, xmm0
mov eax, esp
mov dword [ebp - 0x164], esp
push 0xd
movups xmmword [eax], xmm0
push str.Version_:_2.9
push eax
mov dword [eax + 0x10], 0xd
mov dword [eax + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
sub esp, 0xc
mov byte [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0x168], esp
push 0x102701f8
call fcn.1004ee20
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x16c], esp
push 0x10270060
call fcn.1004ee20
sub esp, 0x18
mov byte [ebp - 4], 0xe
mov ecx, esp
push 0x102701c8
call fcn.1004ee20
mov byte [ebp - 4], 9
call fcn.10059520
lea ecx, [ebp - 0x220]
call fcn.1004a850
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101d9510
mov esp, ebp
pop ebp
ret
call fcn.10047920
call fcn.10047920
call fcn.10047920
call fcn.10047920
call fcn.10047920
call fcn.10047920
call fcn.10047920
call fcn.10047920
call fcn.10047920
call fcn.10047920
int3