Function at 0x10031aa9
Capabilities:
Create process on windows
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10087a43
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x27c
push esi
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10031add
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
jmp 0x10032a14
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + 4]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x23c], 2
mov dword [ebp - 0x20c], 1
mov dword [ebp - 0x214], 0xb457102d
mov dword [ebp - 0x21c], 0x6748f69f
mov dword [ebp - 0x224], 0x14b733c6
mov dword [ebp - 0x22c], 0x6b6eb6b9
mov dword [ebp - 0x238], 0xaa29c146
mov dword [ebp - 0x260], 0xfffffff6
mov dword [ebp - 0x254], 0x182abbf9
mov dword [ebp - 0x208], 0xffffffff
mov dword [ebp - 0xb0], 0x5a519d81
mov dword [ebp - 0x58], 0
jmp 0x10031b7f
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10031b95
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x234], 0x865b49d5
jmp 0x10031b78
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x234], 0x4145c174
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x90], 0xcd53bc6e
mov dword [ebp - 0x40], 0xffff
push 2
lea ecx, [ebp - 0x1f0]
call fcn.1001b841
and dword [ebp - 4], 0
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x134], 0xfffffffe
mov dword [ebp - 0x204], 0x9e13c95
mov dword [ebp - 0x68], 0
jmp 0x10031c28
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x10031c44
push dword [ebp - 0x68]
lea ecx, [ebp - 0x1f0]
call fcn.1001b8b2
mov dword [eax], 1
jmp 0x10031c21
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x168]
mov dword [ebp - 0x150], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x150]
mov dword [ebp + eax - 0x168], ecx
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jne 0x10031c90
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
inc eax
je 0x10031e23
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x88], 0x8dc5
mov dword [ebp - 0x10c], 0xb35f1971
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x10031cc9
push 0
call fcn.10030af4
pop ecx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x210], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c]
cmp dword [ebp + eax - 0x168], ecx
jne 0x10031cf9
mov dword [ebp - 0xac], 1
jmp 0x10031d00
and dword [ebp - 0xac], 0
cmp dword [ebp - 0xac], 0x7d6b
je 0x10031d15
mov dword [ebp - 0x70], 1
jmp 0x10031d19
and dword [ebp - 0x70], 0
push 0
lea ecx, [ebp - 0x1f0]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x70]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x168]
cmp eax, dword [ebp - 0x70]
jge 0x10031d49
mov dword [ebp - 0x16c], 1
jmp 0x10031d50
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x200], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x178]
cmp dword [ebp + eax - 0x168], ecx
jge 0x10031d76
mov dword [ebp - 0x80], 1
jmp 0x10031d7a
and dword [ebp - 0x80], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x80]
mov dword [ebp + eax - 0x168], ecx
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x80], eax
jle 0x10031da4
cmp dword [ebp - 0x88], 0
jne 0x10031da4
and dword [ebp - 0x158], 0
jmp 0x10031dae
mov dword [ebp - 0x158], 1
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x3c], eax
jg 0x10031ddd
mov dword [ebp - 0xb8], 1
jmp 0x10031de4
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0x5c6a81d6
jl 0x10031df9
cmp dword [ebp - 0x88], 0
je 0x10031e0e
mov eax, 0x68fc
test eax, eax
je 0x10031e0e
mov dword [ebp - 0x108], 1
jmp 0x10031e15
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x134], eax
jmp 0x10031e37
mov byte [ebp - 0x20], 0
movzx eax, byte [ebp - 0x20]
test eax, eax
je 0x10031e37
push 0
call fcn.1002bb7f
pop ecx
mov eax, dword [ebp - 0x74]
imul eax, dword [ebp - 0x40]
cmp eax, 0x7e12fd89
jge 0x10031e51
mov dword [ebp - 0xc0], 1
jmp 0x10031e58
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x134], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f0]
call fcn.1001b8ad
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x60]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x1c], eax
and dword [ebp - 0x7c], 0
jmp 0x10031e9e
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x28
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x7c], eax
jge 0x10032a14
mov dword [ebp - 0x10], 0
push 2
lea ecx, [ebp - 0x198]
call fcn.1001b841
mov dword [ebp - 4], 1
mov dword [ebp - 0x124], 0xb0cadfb1
push 0x6517
lea eax, [ebp - 0x198]
push eax
push 0x13ae
push 0x6c3f
push 0x6ba3
push 0x3f02
lea eax, [ebp - 0x48]
push eax
push 0x47c
push 0x1eac
push 0
push 0x5a4b
push 0x2c1d
push 0x18e0
push 0x1c66
call fcn.1002dd66
add esp, 0x38
mov dword [ebp - 0x48], 0
jmp 0x10031f31
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10031f47
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x26c], 0xb56cef3c
jmp 0x10031f2a
cmp dword [ebp - 0x10], 0
je 0x100320bd
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
je 0x10031f65
mov dword [ebp - 0x114], 1
jmp 0x10031f6c
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x10031f86
cmp dword [ebp - 0x10], 0
je 0x10031f86
mov dword [ebp - 0xc8], 1
jmp 0x10031f8d
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x114], eax
jne 0x10031fab
mov dword [ebp - 0xd0], 1
jmp 0x10031fb2
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xd0], eax
je 0x10031fc9
mov dword [ebp - 0x154], 1
jmp 0x10031fd0
and dword [ebp - 0x154], 0
push 0
lea ecx, [ebp - 0x198]
call fcn.1001b8b2
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x84]
mov dword [ecx], eax
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x18c]
jge 0x10032028
mov dword [ebp - 0xd8], 1
jmp 0x1003202f
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xd8], eax
jle 0x1003204c
cmp dword [ebp - 0x10], 0
je 0x1003204c
mov dword [ebp - 0x11c], 1
jmp 0x10032053
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x10]
jne 0x1003206d
mov dword [ebp - 0xe0], 1
jmp 0x10032074
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 1
jbe 0x1003208f
push 0
lea ecx, [ebp - 0x198]
call fcn.1001b8b2
cmp dword [eax], 0
jne 0x100320a1
cmp dword [ebp - 0x10], 0
je 0x100320a1
mov dword [ebp - 0x13c], 1
jmp 0x100320a8
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0xfffffff6
jl 0x100320bd
mov dword [ebp - 0xe8], 1
jmp 0x100320c4
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x218], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x26c], 0xffffffff
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x1003210c
push 0xee7
push 0xec4
push 0
call fcn.1002ad15
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x198]
call fcn.1001b8ad
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0
jne 0x100327bc
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x54], 0x664a1160
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x1c4], 0x2b75
mov dword [ebp - 0x1c0], 0x2b75
mov dword [ebp - 0x1bc], 0x2b75
mov dword [ebp - 0x1b8], 0x2b75
lea ecx, [ebp - 0x95]
call fcn.1000db63
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x288]
call fcn.1001b8c1
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1b0]
call fcn.1001b883
mov dword [ebp - 4], 2
mov byte [ebp - 0x1e], 0
movzx eax, byte [ebp - 0x1e]
test eax, eax
je 0x100321c1
push 0x49ab
push 0x6e45
push 0
call fcn.1002b823
add esp, 0xc
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x100321da
cmp dword [ebp - 0x18], 0
je 0x100321da
mov dword [ebp - 0x188], 1
jmp 0x100321e1
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x18], 0
jne 0x100321ff
cmp dword [ebp - 0x18], 0
jne 0x100321ff
and dword [ebp - 0xf0], 0
jmp 0x10032209
mov dword [ebp - 0xf0], 1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x18]
add eax, ecx
cmp eax, dword [ebp - 0xf0]
jge 0x10032232
mov eax, 0x12f3ccd2
test eax, eax
je 0x10032232
mov dword [ebp - 0x14c], 1
jmp 0x10032239
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x18], 0
jne 0x1003225a
mov eax, 0xb4709ba8
test eax, eax
je 0x1003226f
mov eax, 0xb5d1cb6a
test eax, eax
je 0x1003226f
mov dword [ebp - 0xf8], 1
jmp 0x10032276
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x54], 0
je 0x1003229a
mov eax, 0x5f40e13f
test eax, eax
je 0x1003229a
mov dword [ebp - 0x12c], 1
jmp 0x100322a1
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x12c], eax
jne 0x100322be
cmp dword [ebp - 0x24], 0
je 0x100322be
mov dword [ebp - 0x100], 1
jmp 0x100322c5
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 0xfffffffb
ja 0x100323ce
mov dword [ebp - 0x8c], 0xf69a
mov dword [ebp - 0x94], 0x40c8
cmp dword [ebp - 0x54], 0
jne 0x100322ff
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x8c], 0
or eax, 0xffffffff
cmp eax, 0xffffffff
jae 0x10032313
mov dword [ebp - 0x144], 1
jmp 0x1003231a
and dword [ebp - 0x144], 0
push 1
lea ecx, [ebp - 0x1b0]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x144]
sub ecx, dword [ebp - 0x8c]
cmp dword [eax], ecx
jne 0x10032343
mov dword [ebp - 0x180], 1
jmp 0x1003234a
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x94], 0x379a1d12
jne 0x1003236e
mov dword [ebp - 0xa0], 1
jmp 0x10032375
and dword [ebp - 0xa0], 0
push 2
lea ecx, [ebp - 0x1b0]
call fcn.1001b8b2
mov ecx, dword [ebp - 0xa0]
cmp ecx, dword [eax]
jle 0x10032398
mov dword [ebp - 0xb4], 1
jmp 0x1003239f
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0xb4], eax
je 0x100323b9
mov dword [ebp - 0xbc], 1
jmp 0x100323c0
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x24], eax
jmp 0x100324d7
mov dword [ebp - 0xc4], 0x320ba2c
mov dword [ebp - 0x2c], 8
mov dword [ebp - 0x24], 0
jmp 0x100323ef
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffff8
jg 0x1003248e
push 1
lea ecx, [ebp - 0x248]
call fcn.1001b841
mov byte [ebp - 4], 3
mov dword [ebp - 0x174], 0x17c927db
push 0x728
push 0x6f37
push 0x3b1f
push 0x23ea
push 0
push 0x2af0
push 0x96f
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x248]
push eax
push 0x2463
push 0x3bc7
call fcn.100308a0
add esp, 0x2c
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0
call fcn.1002dd12
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x248]
call fcn.1001b8ad
jmp 0x100323e8
cmp dword [ebp - 0x2c], 0
je 0x100324aa
mov byte [ebp - 0x1f], 0
movzx eax, byte [ebp - 0x1f]
test eax, eax
je 0x100324a8
push 0
call fcn.1002bb5e
pop ecx
jmp 0x100324d7
mov dword [ebp - 0x2c], 0
jmp 0x100324ba
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x100324d7
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1b0]
call fcn.1001b8b2
cmp dword [eax], 0
je 0x100324d5
jmp 0x100324d7
jmp 0x100324b3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b0]
call fcn.1001b8ad
push dword [ebp - 0x17c]
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x1c]
push 0x137
push 0x6135
push 0
push 0xc63
push dword [ebp - 0x130]
call fcn.1002faa3
add esp, 0x20
mov dword [ebp - 0x14], 0xed680444
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x1d8], 0xea4c5706
mov dword [ebp - 0x1d4], 0xea4c5706
mov dword [ebp - 0x1d0], 0xea4c5706
mov dword [ebp - 0x1cc], 0xea4c5706
lea ecx, [ebp - 0x75]
call fcn.1000db63
push eax
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x280]
call fcn.1001b8c1
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1e4]
call fcn.1001b883
mov dword [ebp - 4], 4
mov dword [ebp - 0x44], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x14], eax
je 0x1003259f
mov dword [ebp - 0xcc], 1
jmp 0x100325a6
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 7
jb 0x100325bb
mov dword [ebp - 0xd4], 1
jmp 0x100325c2
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xd4], eax
jg 0x100325d9
mov dword [ebp - 0xe4], 1
jmp 0x100325e0
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jge 0x100325f4
mov dword [ebp - 0xdc], 1
jmp 0x100325fb
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 1
ja 0x10032610
mov dword [ebp - 0xec], 1
jmp 0x10032617
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xec]
jge 0x10032631
mov dword [ebp - 0xf4], 1
jmp 0x10032638
and dword [ebp - 0xf4], 0
cmp dword [ebp - 0xf4], 0x977a
jge 0x10032650
mov dword [ebp - 0xfc], 1
jmp 0x10032657
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xfc], eax
jg 0x1003266c
cmp dword [ebp - 0x44], 0
je 0x1003277c
mov dword [ebp - 0x5c], 0
jmp 0x1003267c
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10032692
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x1a4], 5
jmp 0x10032675
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x1a4]
push 3
lea ecx, [ebp - 0x1e4]
call fcn.1001b8b2
add esi, dword [eax]
imul esi, dword [ebp - 0x14]
cmp esi, dword [ebp - 0x14]
jl 0x100326c3
mov dword [ebp - 0x104], 1
jmp 0x100326ca
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x104]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1a4]
je 0x100326ee
mov dword [ebp - 0x110], 1
jmp 0x100326f5
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
add eax, 0xebf3
cmp eax, 0x1355fff8
jge 0x10032723
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1a4], 0
je 0x10032723
mov dword [ebp - 0x118], 1
jmp 0x1003272a
and dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0xffff
jb 0x10032742
mov dword [ebp - 0x120], 1
jmp 0x10032749
and dword [ebp - 0x120], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a4]
cmp eax, dword [ebp - 0x120]
jle 0x1003276a
mov dword [ebp - 0x128], 1
jmp 0x10032771
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x44], eax
jmp 0x100327a8
mov dword [ebp - 0x14], 0
jmp 0x1003278c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x100327a8
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1e4]
call fcn.1001b8b2
mov dword [eax], 0xd3ed23c5
jmp 0x10032785
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
call fcn.1001b8ad
jmp 0x10031e8e
push 4
push 0x1000
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x130]
add ecx, dword [eax + 0xc]
push ecx
push 0x5b1d
push 0x5ddf
call fcn.10028d05
pop ecx
pop ecx
call eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x184]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x9c]
call fcn.10028dcb
add esp, 0xc
mov dword [ebp - 0x38], 0x9fdf99ff
mov dword [ebp - 0x64], 0
jmp 0x10032827
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1003283d
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x278], 0x7812a3cc
jmp 0x10032820
mov dword [ebp - 0x38], 0
jmp 0x1003284d
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffea
jle 0x10032a03
mov dword [ebp - 0x34], 1
imul eax, dword [ebp - 0x34], 0xffff
test eax, eax
jne 0x100328f0
cmp dword [ebp - 0x34], 1
jge 0x1003287f
mov dword [ebp - 0x138], 1
jmp 0x10032886
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 8
jne 0x1003289b
mov dword [ebp - 0x140], 1
jmp 0x100328a2
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x140], eax
jne 0x100328b9
mov dword [ebp - 0x148], 1
jmp 0x100328c0
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x148], eax
jg 0x100328d7
mov dword [ebp - 0xa4], 1
jmp 0x100328de
and dword [ebp - 0xa4], 0
cmp dword [ebp - 0xa4], 0xfffffff7
je 0x100328f0
and dword [ebp - 0xa8], 0
jmp 0x100328fa
mov dword [ebp - 0xa8], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa8]
mov dword [ebp + eax - 0x278], ecx
mov dword [ebp - 0x34], 0
jmp 0x1003291d
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 7
jg 0x100329fe
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x4c], 0
jmp 0x1003293e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x100329f9
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x6c], 0
jmp 0x1003295f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x100329cb
push 1
lea ecx, [ebp - 0x1fc]
call fcn.1001b841
mov dword [ebp - 4], 5
mov dword [ebp - 0x50], 0
jmp 0x10032989
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x100329a2
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1fc]
call fcn.1001b8b2
and dword [eax], 0
jmp 0x10032982
push 0
lea eax, [ebp - 0x1fc]
push eax
call fcn.1002c2a0
pop ecx
pop ecx
push 0
call fcn.1002ba96
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1fc]
call fcn.1001b8ad
jmp 0x10032958
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x100329f4
push 0
push 0
push 0
push 0
push 0xd64
push 1
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
jmp 0x10032937
jmp 0x10032916
jmp 0x10032846
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x9c]
mov dword [eax + 8], ecx
jmp 0x10031e8e
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret