Function at 0x100b15ce
Capabilities:
Create process on windows
Get comspec environment variable
Query environment variable
Resume thread
Self delete

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x58
mov eax, dword [0x1019350c]
mov ecx, dword [0x10193510]
lea edx, [eax - 1]
imul edx, eax
test dl, 1
sete byte [ebp - 0x2d]
cmp ecx, 0xa
setl byte [ebp - 0x2e]
mov esi, dword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
xor edi, edi
mov eax, 0xe9c5c36
cmp eax, 0xfd71676a
jle 0x100b168c
cmp eax, 0x3d966ba9
jg 0x100b170c
cmp eax, 0x1d2c7b0c
jg 0x100b17f2
cmp eax, 0xdcdb28b
jg 0x100b1987
cmp eax, 0x61c3028
jle 0x100b1c5c
cmp eax, 0xadeef07
jle 0x100b217b
cmp eax, 0xc547269
jg 0x100b29fd
cmp eax, 0xadeef08
je 0x100b3767
cmp eax, 0xb6d8e70
je 0x100b3784
cmp eax, 0xb836194
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe5bc0db8
mov ecx, 0x24587ba9
jmp 0x100b4c80
cmp eax, 0xbbc6ab73
jle 0x100b176e
cmp eax, 0xdaa03c56
jg 0x100b185c
cmp eax, 0xce16f68b
jg 0x100b19e6
cmp eax, 0xc611824c
jle 0x100b1ceb
cmp eax, 0xca7568fa
jle 0x100b21c4
cmp eax, 0xcbec31e4
jg 0x100b2a28
cmp eax, 0xca7568fb
je 0x100b37a1
cmp eax, 0xcab8e5a5
je 0x100b37ab
cmp eax, 0xcbe7786a
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe5c4eb5
mov ecx, 0xf6cf96fb
jmp 0x100b4c80
cmp eax, 0x5ea97327
jg 0x100b18b3
cmp eax, 0x4e9fe53e
jg 0x100b1a48
cmp eax, 0x4548cc79
jle 0x100b1d3f
cmp eax, 0x48eb6661
jle 0x100b220d
cmp eax, 0x4b31f4c2
jg 0x100b2a66
cmp eax, 0x48eb6662
je 0x100b37c8
cmp eax, 0x49184b8f
je 0x100b3817
cmp eax, 0x4ac11e9a
jne 0x100b1609
mov eax, 0xda54403e
jmp 0x100b1609
cmp eax, 0x9d5b911d
jg 0x100b191d
cmp eax, 0x8e6e8889
jg 0x100b1aa7
cmp eax, 0x8656ff60
jle 0x100b1d93
cmp eax, 0x88bf4d2e
jle 0x100b2256
cmp eax, 0x8b34c810
jg 0x100b2a91
cmp eax, 0x88bf4d2f
je 0x100b3821
cmp eax, 0x88cf5090
je 0x100b383e
cmp eax, 0x8a55cce7
jne 0x100b1609
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x87f1c6f6
mov ecx, 0x2b3e9554
jmp 0x100b4c80
cmp eax, 0x29f47659
jg 0x100b1b06
cmp eax, 0x2227229c
jle 0x100b1de7
cmp eax, 0x24587ba8
jle 0x100b229f
cmp eax, 0x278d0a6c
jg 0x100b2abc
cmp eax, 0x24587ba9
je 0x100b3848
cmp eax, 0x252f0bd8
je 0x100b3852
cmp eax, 0x26e05228
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x635e69ce
mov ecx, 0x1376b5b0
jmp 0x100b4c80
cmp eax, 0xee42e503
jg 0x100b1b65
cmp eax, 0xe5bc0db7
jle 0x100b1e28
cmp eax, 0xe81bdc3c
jle 0x100b22e8
cmp eax, 0xeb6318d9
jg 0x100b2ae7
cmp eax, 0xe81bdc3d
je 0x100b386f
cmp eax, 0xe833728e
je 0x100b388c
cmp eax, 0xeb2d32d3
jne 0x100b1609
mov eax, 0x4550ce12
jmp 0x100b1609
cmp eax, 0x6fb451db
jg 0x100b1bc4
cmp eax, 0x679f96fc
jle 0x100b1e7c
cmp eax, 0x69a3992f
jle 0x100b233d
cmp eax, 0x6bf023c9
jg 0x100b2b25
cmp eax, 0x69a39930
je 0x100b38a9
cmp eax, 0x69bd24e6
je 0x100b38b3
cmp eax, 0x6a8b24ee
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x88cf5090
mov ecx, 0xeb2d32d3
jmp 0x100b4c80
cmp eax, 0xad8a4081
jle 0x100b1c10
cmp eax, 0xb3d35b8f
jle 0x100b1ebd
cmp eax, 0xb9a92381
jle 0x100b2386
cmp eax, 0xbb00985e
jg 0x100b2b7c
cmp eax, 0xb9a92382
je 0x100b38d0
cmp eax, 0xb9f81f79
je 0x100b38e0
cmp eax, 0xb9fd40d3
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xef12692e
mov ecx, 0x6cd42a4d
jmp 0x100b4c80
cmp eax, 0x15013dc6
jle 0x100b1f11
cmp eax, 0x1b39e633
jle 0x100b23cf
cmp eax, 0x1bc1c66c
jg 0x100b2bba
cmp eax, 0x1b39e634
je 0x100b38ea
cmp eax, 0x1b813e29
je 0x100b3907
cmp eax, 0x1b8ef87a
jne 0x100b1609
mov eax, dword [ebp - 0x2c]
push 0x104
push dword [ebp - 0x24]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, 0x5817afce
jmp 0x100b1609
cmp eax, 0xd57696af
jle 0x100b1f65
cmp eax, 0xd7879eb4
jle 0x100b2418
cmp eax, 0xd8c3e2df
jg 0x100b2bf8
cmp eax, 0xd7879eb5
je 0x100b3924
cmp eax, 0xd844da3c
je 0x100b3941
cmp eax, 0xd85c1216
jne 0x100b1609
mov eax, dword [ebp - 0x28]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2d8089ee
mov ecx, 0xa877c473
jmp 0x100b4c80
cmp eax, 0x5817afcd
jle 0x100b1fb9
cmp eax, 0x5a285ff2
jle 0x100b244e
cmp eax, 0x5c2f0f62
jg 0x100b2c36
cmp eax, 0x5a285ff3
je 0x100b395e
cmp eax, 0x5ac28afa
je 0x100b3968
cmp eax, 0x5ba91215
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3477155d
mov ecx, 0xd1989e34
jmp 0x100b4c80
cmp eax, 0x966a9ec9
jle 0x100b1ffa
cmp eax, 0x9a2e2213
jle 0x100b2484
cmp eax, 0x9bbd4092
jg 0x100b2c74
cmp eax, 0x9a2e2214
je 0x100b3985
cmp eax, 0x9ac1ff3a
je 0x100b398f
cmp eax, 0x9bb661bd
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa6b937eb
mov ecx, 0x2227229d
jmp 0x100b4c80
cmp eax, 0x31560622
jle 0x100b204e
cmp eax, 0x3477155c
jle 0x100b24cd
cmp eax, 0x39a141ed
jg 0x100b2cb2
cmp eax, 0x3477155d
je 0x100b39ac
cmp eax, 0x3531b831
je 0x100b39c9
cmp eax, 0x361c629e
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1fc34456
mov ecx, 0xbb9e85b8
jmp 0x100b4c80
cmp eax, 0xf34f1085
jle 0x100b208f
cmp eax, 0xf5c1d894
jle 0x100b2503
cmp eax, 0xfba3b4c8
jg 0x100b2cdd
cmp eax, 0xf5c1d895
je 0x100b3a3f
cmp eax, 0xf6cf96fb
je 0x100b3a4c
cmp eax, 0xf85862bb
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xecb431ae
mov ecx, 0x99c190db
jmp 0x100b4c80
cmp eax, 0x7a569a35
jle 0x100b20d3
cmp eax, 0x7c00df99
jle 0x100b254c
cmp eax, 0x7e25d234
jg 0x100b2d08
cmp eax, 0x7c00df9a
je 0x100b3a69
cmp eax, 0x7c3a0337
je 0x100b3a86
cmp eax, 0x7dc91e95
jne 0x100b1609
mov eax, 0xfbeb02e2
jmp 0x100b1609
cmp eax, 0xa5fa4193
jle 0x100b2127
cmp eax, 0xa877c472
jg 0x100b2582
cmp eax, 0xa7aaa325
jg 0x100b2dc7
cmp eax, 0xa5fa4194
je 0x100b3a90
cmp eax, 0xa65b74ef
je 0x100b3aad
cmp eax, 0xa6b937eb
jne 0x100b1609
mov eax, 0x9bb661bd
jmp 0x100b1609
cmp eax, 0x158ef8d
jg 0x100b25b8
cmp eax, 0xff47a74b
jle 0x100b2e66
cmp eax, 0xff47a74c
je 0x100b3aca
cmp eax, 0xffeee1bd
je 0x100b3ad4
cmp eax, 0x938508
jne 0x100b1609
push 0x100
push dword [ebp - 0x3c]
call esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 0xf
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
sub esp, 0x28
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], edi
movaps xmm0, xmmword [0x1017f400]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], edx
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov eax, 0x6295a115
jmp 0x100b1609
cmp eax, 0xbdf36d2c
jg 0x100b260c
cmp eax, 0xbc4e2331
jle 0x100b2e99
cmp eax, 0xbc4e2332
je 0x100b3ade
cmp eax, 0xbd650eaf
je 0x100b3afb
cmp eax, 0xbd884858
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x50c136cb
mov ecx, 0x7224dd0f
jmp 0x100b4c80
cmp eax, 0x42f3c370
jg 0x100b2645
cmp eax, 0x3ed63ca8
jle 0x100b2ecc
cmp eax, 0x3ed63ca9
je 0x100b3b11
cmp eax, 0x41aa87da
je 0x100b3b2e
cmp eax, 0x42ba0c2f
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf3b14c1f
mov ecx, 0x29f4765a
jmp 0x100b4c80
cmp eax, 0x83b9650b
jg 0x100b267b
cmp eax, 0x82f37413
jle 0x100b2f02
cmp eax, 0x82f37414
je 0x100b3b38
cmp eax, 0x830899a8
je 0x100b3b42
cmp eax, 0x8326ff84
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2c52df03
mov ecx, 0x10315bfb
jmp 0x100b4c80
cmp eax, 0x20342ff9
jg 0x100b26c4
cmp eax, 0x1fc34455
jle 0x100b2f35
cmp eax, 0x1fc34456
je 0x100b3b67
cmp eax, 0x1fcd012a
je 0x100b3b71
cmp eax, 0x1ffb98e0
jne 0x100b1609
mov eax, 0x18b750a9
jmp 0x100b1609
cmp eax, 0xe0d7d70d
jg 0x100b270d
cmp eax, 0xdd05b854
jle 0x100b2f55
cmp eax, 0xdd05b855
je 0x100b3b8e
cmp eax, 0xdd703089
je 0x100b3bb6
cmp eax, 0xddba7b43
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x31e108b1
mov ecx, 0xe3d50227
jmp 0x100b4c80
cmp eax, 0x62ef38cc
jg 0x100b2749
cmp eax, 0x621c42bd
jle 0x100b2f88
cmp eax, 0x621c42be
je 0x100b3bd3
cmp eax, 0x6295a115
je 0x100b3bdd
cmp eax, 0x62e31ef0
jne 0x100b1609
mov eax, 0xf1ede4b5
jmp 0x100b1609
cmp eax, 0xb1239fd2
jg 0x100b277f
cmp eax, 0xb0bf4ca9
jle 0x100b2fbb
cmp eax, 0xb0bf4caa
je 0x100b3c4e
cmp eax, 0xb0e4cd44
je 0x100b3c7c
cmp eax, 0xb10ddb9e
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1c6d751f
mov ecx, 0x3525994
jmp 0x100b4c80
cmp eax, 0x10315bfa
jg 0x100b27b5
cmp eax, 0xe5c4eb4
jle 0x100b2fee
cmp eax, 0xe5c4eb5
je 0x100b3c86
cmp eax, 0xe9c5c36
je 0x100b3c90
cmp eax, 0xea73991
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xff47a74c
mov ecx, 0x3030daa3
jmp 0x100b4c80
cmp eax, 0xd0df0338
jg 0x100b27fe
cmp eax, 0xcfc6b507
jle 0x100b300e
cmp eax, 0xcfc6b508
je 0x100b3cae
cmp eax, 0xd0a41e55
je 0x100b3ccb
cmp eax, 0xd0c0aae0
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xef12692e
mov ecx, 0x42f3c371
jmp 0x100b4c80
cmp eax, 0x5237d772
jg 0x100b2847
cmp eax, 0x5093780a
jle 0x100b3041
cmp eax, 0x5093780b
je 0x100b3ce8
cmp eax, 0x50c136cb
je 0x100b3d05
cmp eax, 0x5107ca66
jne 0x100b1609
mov eax, 0x98c4d0f7
jmp 0x100b1609
cmp eax, 0x93a6afd7
jg 0x100b28a3
cmp eax, 0x91f8214d
jle 0x100b3074
cmp eax, 0x91f8214e
je 0x100b3d0f
cmp eax, 0x9291370d
je 0x100b3d19
cmp eax, 0x9386b19e
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4449282b
mov ecx, 0x7a569a36
jmp 0x100b4c80
cmp eax, 0x2cfd6480
jg 0x100b28ec
cmp eax, 0x2b5edfb0
jle 0x100b309f
cmp eax, 0x2b5edfb1
je 0x100b3d36
cmp eax, 0x2bc24348
je 0x100b3d40
cmp eax, 0x2c52df03
jne 0x100b1609
mov eax, 0x10315bfb
jmp 0x100b1609
cmp eax, 0xf11db1e7
jg 0x100b2935
cmp eax, 0xef8c74c8
jle 0x100b30d2
cmp eax, 0xef8c74c9
je 0x100b3d4d
cmp eax, 0xefc3a828
je 0x100b3d57
cmp eax, 0xf06290ff
jne 0x100b1609
mov eax, dword [ebp - 0x38]
mov eax, 0xfba3b4c9
jmp 0x100b1609
cmp eax, 0x755cc72d
jg 0x100b297e
cmp eax, 0x719393b0
jle 0x100b3105
cmp eax, 0x719393b1
je 0x100b3d64
cmp eax, 0x7224dd0f
je 0x100b3d6e
cmp eax, 0x74e37cc7
jne 0x100b1609
mov eax, dword [ebp - 0x2c]
push 0x104
push dword [ebp - 0x24]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, 0x951bc2cb
jmp 0x100b1609
cmp eax, 0x9facceeb
jg 0x100b29c7
cmp eax, 0x9ec7e89a
jle 0x100b3138
cmp eax, 0x9ec7e89b
je 0x100b3d78
cmp eax, 0x9f0fd5fc
je 0x100b3d95
cmp eax, 0x9f87923e
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa6b937eb
mov ecx, 0x9bb661bd
jmp 0x100b4c80
cmp eax, 0x695efb2
jle 0x100b3158
cmp eax, 0x695efb3
je 0x100b3db2
cmp eax, 0xa8a7c03
je 0x100b3dcf
cmp eax, 0xac887d6
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x938508
mov ecx, 0x6295a115
jmp 0x100b4c80
cmp eax, 0xc71c0d10
jle 0x100b31af
cmp eax, 0xc71c0d11
je 0x100b3dec
cmp eax, 0xc86afb30
je 0x100b3e09
cmp eax, 0xca290ebc
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3384fd2a
mov ecx, 0xd57696b0
jmp 0x100b4c80
cmp eax, 0x482a39e4
jle 0x100b31cf
cmp eax, 0x482a39e5
je 0x100b3e13
cmp eax, 0x48305ff8
je 0x100b3e1d
cmp eax, 0x48c6eb9e
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbb098c6b
mov ecx, 0x1fcd012a
jmp 0x100b4c80
cmp eax, 0x8794bd2d
jle 0x100b3202
cmp eax, 0x8794bd2e
je 0x100b3e27
cmp eax, 0x87f1c6f6
je 0x100b3e44
cmp eax, 0x88bda6ec
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe498109e
mov ecx, 0xe30743c4
jmp 0x100b4c80
cmp eax, 0x2284ae29
jle 0x100b322e
cmp eax, 0x2284ae2a
je 0x100b3e5d
cmp eax, 0x2400a6e4
je 0x100b3e67
cmp eax, 0x243cf9ae
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf4e1d8e1
mov ecx, 0x6e706c35
jmp 0x100b4c80
cmp eax, 0xe5db7680
jle 0x100b3261
cmp eax, 0xe5db7681
je 0x100b3e78
cmp eax, 0xe612394e
je 0x100b3e82
cmp eax, 0xe6f61eb9
jne 0x100b1609
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd4fe3e7
mov ecx, 0xccd13550
jmp 0x100b4c80
cmp eax, 0x687f2703
jle 0x100b3294
cmp eax, 0x687f2704
je 0x100b3e9f
cmp eax, 0x687fe530
je 0x100b3ebc
cmp eax, 0x697e13ca
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8326ff84
mov ecx, 0xa65b74ef
jmp 0x100b4c80
cmp eax, 0xb76fdacf
jle 0x100b32c6
cmp eax, 0xb76fdad0
je 0x100b3ed9
cmp eax, 0xb796e88a
je 0x100b3ee3
cmp eax, 0xb8bce781
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x88bda6ec
mov ecx, 0x4548cc7a
jmp 0x100b4c80
cmp eax, 0x18b750a8
jle 0x100b330a
cmp eax, 0x18b750a9
je 0x100b3f00
cmp eax, 0x18eba2fe
je 0x100b3f1d
cmp eax, 0x19baec87
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc71c0d11
mov ecx, 0xbdf83044
jmp 0x100b4c80
cmp eax, 0xd6cd73d5
jle 0x100b3336
cmp eax, 0xd6cd73d6
je 0x100b3f3d
cmp eax, 0xd6ecba85
je 0x100b3f5a
cmp eax, 0xd73ad4d5
jne 0x100b1609
mov eax, 0x20a6c092
jmp 0x100b1609
cmp eax, 0x58419e75
jle 0x100b3369
cmp eax, 0x58419e76
je 0x100b3f64
cmp eax, 0x587df766
je 0x100b3f81
cmp eax, 0x593cfea6
jne 0x100b1609
mov eax, 0xed6d44d9
jmp 0x100b1609
cmp eax, 0x986b906b
jle 0x100b339c
cmp eax, 0x986b906c
je 0x100b3fa1
cmp eax, 0x98c4d0f7
je 0x100b3fbe
cmp eax, 0x99c190db
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xecb431ae
mov ecx, 0xb9fd40d3
jmp 0x100b4c80
cmp eax, 0x31e108b0
jle 0x100b33cf
cmp eax, 0x31e108b1
je 0x100b3fdb
cmp eax, 0x3384fd2a
je 0x100b3ff8
cmp eax, 0x33f30954
jne 0x100b1609
mov eax, 0xa65b74ef
jmp 0x100b1609
cmp eax, 0xf3a63625
jle 0x100b340a
cmp eax, 0xf3a63626
je 0x100b4002
cmp eax, 0xf3b14c1f
je 0x100b4018
cmp eax, 0xf4e1d8e1
jne 0x100b1609
push 0x104
push dword [ebp - 0x1c]
push str.COMSPEC
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, 0x6e706c35
jmp 0x100b1609
cmp eax, 0x7b34a1a0
jle 0x100b343d
cmp eax, 0x7b34a1a1
je 0x100b4022
cmp eax, 0x7bd1be57
je 0x100b402c
cmp eax, 0x7bee7648
jne 0x100b1609
mov eax, 0x5ea97328
jmp 0x100b1609
cmp eax, 0xaaefb986
jle 0x100b3470
cmp eax, 0xaaefb987
je 0x100b4049
cmp eax, 0xab5d08e3
je 0x100b4066
cmp eax, 0xacd9c24e
jne 0x100b1609
mov eax, 0xd8c3e2e0
jmp 0x100b1609
cmp eax, 0x2348f2c
jle 0x100b34a3
cmp eax, 0x2348f2d
je 0x100b4083
cmp eax, 0x3525994
je 0x100b40a0
cmp eax, 0x5d32029
jne 0x100b1609
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0x20
push eax
call esi
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x93a6afd8
mov ecx, 0xc6c6d08f
jmp 0x100b4c80
cmp eax, 0xc0a5c048
jle 0x100b34d6
cmp eax, 0xc0a5c049
je 0x100b40bd
cmp eax, 0xc1bbeb6b
je 0x100b40e0
cmp eax, 0xc4ff2c84
jne 0x100b1609
mov eax, dword [ebp - 0x2c]
mov eax, 0xd2694ad6
jmp 0x100b1609
cmp eax, 0x4449282a
jle 0x100b3509
cmp eax, 0x4449282b
je 0x100b40ea
cmp eax, 0x44e482bd
je 0x100b4107
cmp eax, 0x45258c0f
jne 0x100b1609
mov eax, 0xd6cd73d6
jmp 0x100b1609
cmp eax, 0x84f6377c
jle 0x100b3529
cmp eax, 0x84f6377d
je 0x100b4124
cmp eax, 0x860fdc4a
je 0x100b412e
cmp eax, 0x861de187
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9386b19e
mov ecx, 0xcbe7786a
jmp 0x100b4c80
cmp eax, 0x20a6c091
jle 0x100b354c
cmp eax, 0x20a6c092
je 0x100b414b
cmp eax, 0x211ff888
je 0x100b4168
cmp eax, 0x216280f3
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcbec31e5
mov ecx, 0x94b1843c
jmp 0x100b4c80
cmp eax, 0xe30743c3
jle 0x100b357f
cmp eax, 0xe30743c4
je 0x100b4185
cmp eax, 0xe3d50227
je 0x100b41a8
cmp eax, 0xe498109e
jne 0x100b1609
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, 0xe30743c4
jmp 0x100b1609
cmp eax, 0x64b8f7a3
jle 0x100b35b2
cmp eax, 0x64b8f7a4
je 0x100b41c5
cmp eax, 0x67068da7
je 0x100b41e2
cmp eax, 0x6766a345
jne 0x100b1609
mov eax, 0x2348f2d
jmp 0x100b1609
cmp eax, 0xb1a4a65f
jle 0x100b35e5
cmp eax, 0xb1a4a660
je 0x100b41fc
cmp eax, 0xb2735658
je 0x100b4254
cmp eax, 0xb29bdc75
jne 0x100b1609
mov eax, 0x4bbf1e4a
jmp 0x100b1609
cmp eax, 0x136d61ae
jle 0x100b3618
cmp eax, 0x136d61af
je 0x100b425e
cmp eax, 0x1376b5b0
je 0x100b427b
cmp eax, 0x1379ebb4
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf2497aca
mov ecx, 0x5237d773
jmp 0x100b4c80
cmp eax, 0xd2694ad5
jle 0x100b364b
cmp eax, 0xd2694ad6
je 0x100b4298
cmp eax, 0xd28253e3
je 0x100b42bb
cmp eax, 0xd4f0d339
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5a285ff3
mov ecx, 0x20342ffa
jmp 0x100b4c80
cmp eax, 0x52ede9dd
jle 0x100b367e
cmp eax, 0x52ede9de
je 0x100b42d8
cmp eax, 0x5583e939
je 0x100b42e2
cmp eax, 0x56c1c928
jne 0x100b1609
mov eax, dword [ebp - 0x20]
push 0x104
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
mov dword [ebp - 0x38], eax
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x67068da7
mov ecx, 0xd0c0aae0
jmp 0x100b4c80
cmp eax, 0x94b1843b
jle 0x100b369e
cmp eax, 0x94b1843c
je 0x100b42ff
cmp eax, 0x951bc2cb
je 0x100b431c
cmp eax, 0x964bfa89
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8e2730ea
mov ecx, 0x9291370d
jmp 0x100b4c80
cmp eax, 0x3030daa2
jle 0x100b36be
cmp eax, 0x3030daa3
je 0x100b434c
cmp eax, 0x30a670af
je 0x100b4369
cmp eax, 0x30ce68f2
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1d2c7b0d
mov ecx, 0xcab8e5a5
jmp 0x100b4c80
cmp eax, 0xf1ede4b4
jle 0x100b36e1
cmp eax, 0xf1ede4b5
je 0x100b4398
cmp eax, 0xf2497aca
je 0x100b43b5
cmp eax, 0xf3116781
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x28d2f458
mov ecx, 0xfd71676b
jmp 0x100b4c80
cmp eax, 0x75d88f42
jle 0x100b3701
cmp eax, 0x75d88f43
je 0x100b43bf
cmp eax, 0x76f57eb5
je 0x100b43dc
cmp eax, 0x79debd54
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7dc91e95
mov ecx, 0xfbeb02e2
jmp 0x100b4c80
cmp eax, 0xa09023a3
jle 0x100b3734
cmp eax, 0xa09023a4
je 0x100b43e6
cmp eax, 0xa482de93
je 0x100b4403
cmp eax, 0xa527de97
jne 0x100b1609
mov eax, 0x7b09661a
jmp 0x100b1609
cmp eax, 0xc54726a
je 0x100b4420
cmp eax, 0xcd6cc6a
je 0x100b443d
cmp eax, 0xd4fe3e7
jne 0x100b1609
mov eax, 0xccd13550
jmp 0x100b1609
cmp eax, 0xcbec31e5
je 0x100b445a
cmp eax, 0xccd13550
je 0x100b4464
cmp eax, 0xccf6cee5
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x88bda6ec
mov ecx, 0x7c00df9a
jmp 0x100b4c80
cmp eax, 0x4b31f4c3
je 0x100b4481
cmp eax, 0x4bbf1e4a
je 0x100b449e
cmp eax, 0x4e67cc30
jne 0x100b1609
mov eax, 0x3d966baa
jmp 0x100b1609
cmp eax, 0x8b34c811
je 0x100b44bb
cmp eax, 0x8e12ea88
je 0x100b44c5
cmp eax, 0x8e2730ea
jne 0x100b1609
mov eax, 0x9291370d
jmp 0x100b1609
cmp eax, 0x278d0a6d
je 0x100b44e2
cmp eax, 0x2804e0cd
je 0x100b44ec
cmp eax, 0x28d2f458
jne 0x100b1609
mov eax, 0xfd71676b
jmp 0x100b1609
cmp eax, 0xeb6318da
je 0x100b4509
cmp eax, 0xecb431ae
je 0x100b4526
cmp eax, 0xed6d44d9
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc4ff2c84
mov ecx, 0xd2694ad6
jmp 0x100b4c80
cmp eax, 0x6bf023ca
je 0x100b4530
cmp eax, 0x6cd42a4d
je 0x100b454d
cmp eax, 0x6e706c35
jne 0x100b1609
push 0x104
push dword [ebp - 0x1c]
push str.COMSPEC
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
test eax, eax
setne byte [ebp - 0x31]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf4e1d8e1
mov ecx, 0x861de187
jmp 0x100b4c80
cmp eax, 0xbb00985f
je 0x100b456a
cmp eax, 0xbb098c6b
je 0x100b4597
cmp eax, 0xbb9e85b8
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9fbf4d97
mov ecx, 0x5839a5f9
jmp 0x100b4c80
cmp eax, 0x1bc1c66d
je 0x100b45a1
cmp eax, 0x1c6d751f
je 0x100b4617
cmp eax, 0x1cdefbcc
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1b39e634
mov ecx, 0x252f0bd8
jmp 0x100b4c80
cmp eax, 0xd8c3e2e0
je 0x100b4621
cmp eax, 0xd99f4456
je 0x100b463e
cmp eax, 0xda54403e
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4ac11e9a
mov ecx, 0x3ed63ca9
jmp 0x100b4c80
cmp eax, 0x5c2f0f63
je 0x100b465b
cmp eax, 0x5cd0af4b
je 0x100b4668
cmp eax, 0x5d570bd4
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd28253e3
mov ecx, 0x31560623
jmp 0x100b4c80
cmp eax, 0x9bbd4093
je 0x100b4694
cmp eax, 0x9bf2eca7
je 0x100b46b1
cmp eax, 0x9ce3ab12
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdd703089
mov ecx, 0x1379ebb4
jmp 0x100b4c80
cmp eax, 0x39a141ee
je 0x100b46bb
cmp eax, 0x3b10d28a
je 0x100b46d4
cmp eax, 0x3b457d1f
jne 0x100b1609
mov eax, 0xb17a761e
jmp 0x100b1609
cmp eax, 0xfba3b4c9
je 0x100b473f
cmp eax, 0xfbeb02e2
je 0x100b4764
cmp eax, 0xfd0ce96c
jne 0x100b1609
mov eax, 0xd7879eb5
jmp 0x100b1609
cmp eax, 0x7e25d235
je 0x100b4781
cmp eax, 0x7f460e6c
je 0x100b479e
cmp eax, 0x7f88f424
jne 0x100b1609
push str.__c_del
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp - 0x20]
push dword [ebp - 0x18]
call ebx
push str.___nul
push dword [ebp - 0x18]
call ebx
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
call ebx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
xorps xmm0, xmm0
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x30], xmm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
movups xmmword [eax], xmm0
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x2c], 1
mov eax, dword [ebp - 0x10]
mov word [eax + 0x30], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3531b831
mov ecx, 0x9ce3ab12
jmp 0x100b4c80
cmp eax, 0xa7f4650e
je 0x100b47bb
cmp eax, 0xa8396176
jne 0x100b4c92
push str.__c_del
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp - 0x20]
push dword [ebp - 0x18]
call ebx
push str.___nul
push dword [ebp - 0x18]
call ebx
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
call ebx
mov eax, dword [ebp - 0x10]
xorps xmm0, xmm0
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x30], xmm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0x14]
movups xmmword [eax], xmm0
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x2c], 1
mov eax, dword [ebp - 0x10]
mov word [eax + 0x30], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1bc1c66d
mov ecx, 0x9e0bd1af
jmp 0x100b4c80
cmp eax, 0xfd71676b
je 0x100b47d8
cmp eax, 0xfd72fc45
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2284ae2a
mov ecx, 0x697e13ca
jmp 0x100b4c80
cmp eax, 0xbbc6ab74
je 0x100b47f5
cmp eax, 0xbc3b17c8
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x74e37cc7
mov ecx, 0x951bc2cb
jmp 0x100b4c80
cmp eax, 0x3d966baa
je 0x100b47ff
cmp eax, 0x3e03633f
jne 0x100b1609
mov eax, dword [ebp - 0x44]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x83ca15ff
mov ecx, 0x9bf2eca7
jmp 0x100b4c80
cmp eax, 0x810861ec
je 0x100b481c
cmp eax, 0x8144206b
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7c3a0337
mov ecx, 0x2cfd6481
jmp 0x100b4c80
cmp eax, 0x1d2c7b0d
je 0x100b4839
cmp eax, 0x1db3e940
jne 0x100b1609
mov eax, 0xe20e079a
jmp 0x100b1609
cmp eax, 0xdaa03c57
je 0x100b4843
cmp eax, 0xdb650719
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb2735658
mov ecx, 0xf34f1086
jmp 0x100b4c80
cmp eax, 0x5ea97328
je 0x100b4860
cmp eax, 0x5ed6e5f3
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8b34c811
mov ecx, 0x9a2e2214
jmp 0x100b4c80
cmp eax, 0xad8a4082
je 0x100b487d
cmp eax, 0xb007a919
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x986b906c
mov ecx, 0x48c6eb9e
jmp 0x100b4c80
cmp eax, 0xdcdb28c
je 0x100b488a
cmp eax, 0xe2c0462
jne 0x100b1609
mov eax, 0xbc4e2332
jmp 0x100b1609
cmp eax, 0xce16f68c
je 0x100b4894
cmp eax, 0xcf07ae54
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7bee7648
mov ecx, 0x5ea97328
jmp 0x100b4c80
cmp eax, 0x4e9fe53f
je 0x100b48b1
cmp eax, 0x4fe7a65b
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x49184b8f
mov ecx, 0xb8bce781
jmp 0x100b4c80
cmp eax, 0x8e6e888a
je 0x100b48bb
cmp eax, 0x8e75fabc
jne 0x100b1609
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0x20
push eax
call esi
mov eax, 0xdd05b855
jmp 0x100b1609
cmp eax, 0x29f4765a
je 0x100b48d8
cmp eax, 0x2b3e9554
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3477155d
mov ecx, 0xd4f0d339
jmp 0x100b4c80
cmp eax, 0xee42e504
je 0x100b48f5
cmp eax, 0xef12692e
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x679f96fd
mov ecx, 0xbb00985f
jmp 0x100b4c80
cmp eax, 0x6fb451dc
je 0x100b4912
cmp eax, 0x71210af3
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc71c0d11
mov ecx, 0x9f87923e
jmp 0x100b4c80
cmp eax, 0x9d5b911e
je 0x100b491c
cmp eax, 0x9e0bd1af
jne 0x100b1609
mov eax, 0x687f2704
jmp 0x100b1609
cmp eax, 0x61c3029
je 0x100b493c
cmp eax, 0x67db67a
jne 0x100b1609
push 0x40
push dword [ebp - 0x40]
call esi
mov esi, dword [ebp - 0x14]
push 0xfffffffffffffff1
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push dword [esi + 4]
mov esi, dword [sym.imp.KERNEL32.dll_SetPriorityClass]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb0bf4caa
mov ecx, 0x75d88f43
jmp 0x100b4c80
cmp eax, 0xc611824d
je 0x100b4959
cmp eax, 0xc6c6d08f
jne 0x100b1609
mov eax, 0xe3d50227
jmp 0x100b1609
cmp eax, 0x4548cc7a
je 0x100b4985
cmp eax, 0x4550ce12
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x719393b1
mov ecx, 0x9ec7e89b
jmp 0x100b4c80
cmp eax, 0x8656ff61
je 0x100b49a2
cmp eax, 0x86c956e5
jne 0x100b1609
cmp byte [ebp - 0x30], 0
mov eax, 0x9ac1ff3a
mov ecx, 0x695efb3
cmovne eax, ecx
jmp 0x100b1609
cmp eax, 0x2227229d
je 0x100b49bf
cmp eax, 0x22409665
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x986b906c
mov ecx, 0xc54726a
jmp 0x100b4c80
cmp eax, 0xe5bc0db8
je 0x100b49c9
cmp eax, 0xe5d7e5ef
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbdf36d2d
mov ecx, 0xa482de93
jmp 0x100b4c80
cmp eax, 0x679f96fd
je 0x100b49d3
cmp eax, 0x6863cdd0
jne 0x100b1609
cmp byte [ebp - 0x33], 0
mov eax, 0xc611824d
mov ecx, 0x9ac1ff3a
cmovne eax, ecx
xor ecx, ecx
inc ecx
mov dword [ebp - 0x54], ecx
jmp 0x100b1609
cmp eax, 0xb3d35b90
je 0x100b49ed
cmp eax, 0xb5b760b4
jne 0x100b1609
push 0x40
push dword [ebp - 0x40]
call esi
mov esi, dword [ebp - 0x14]
push 0xfffffffffffffff1
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push dword [esi + 4]
mov esi, dword [sym.imp.KERNEL32.dll_SetPriorityClass]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, 0xb1239fd3
jmp 0x100b1609
cmp eax, 0x15013dc7
je 0x100b4a0a
cmp eax, 0x172fda49
jne 0x100b1609
cmp byte [ebp - 0x32], 0
mov eax, 0x136d61af
mov ecx, 0xd5c4233a
cmovne eax, ecx
jmp 0x100b1609
cmp eax, 0xd57696b0
je 0x100b4a27
cmp eax, 0xd5c4233a
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf1747eb1
mov ecx, 0xcd6cc6a
jmp 0x100b4c80
cmp eax, 0x5817afce
je 0x100b4a44
cmp eax, 0x5839a5f9
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb0bf4caa
mov ecx, 0x67db67a
jmp 0x100b4c80
cmp eax, 0x966a9eca
je 0x100b4a86
cmp eax, 0x96706d55
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa527de97
mov ecx, 0x7b09661a
jmp 0x100b4c80
cmp eax, 0x31560623
je 0x100b4aa3
cmp eax, 0x31bc8425
jne 0x100b1609
cmp dword [ebp - 0x44], 0
sete byte [ebp - 0x33]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf5c1d895
mov ecx, 0x860fdc4a
jmp 0x100b4c80
cmp eax, 0xf34f1086
je 0x100b4ac0
cmp eax, 0xf3a14505
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd28253e3
mov ecx, 0x75bd064b
jmp 0x100b4c80
cmp eax, 0x7a569a36
je 0x100b4ad0
cmp eax, 0x7b09661a
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xa527de97
mov ecx, 0x22409665
jmp 0x100b4c80
cmp eax, 0xa877c473
je 0x100b4b00
cmp eax, 0xaa2c2007
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd0a41e55
mov ecx, 0xf3116781
jmp 0x100b4c80
cmp eax, 0x158ef8e
je 0x100b4b0a
cmp eax, 0x21940e6
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfd0ce96c
mov ecx, 0xd7879eb5
jmp 0x100b4c80
cmp eax, 0xbdf36d2d
je 0x100b4b17
cmp eax, 0xbdf83044
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf06290ff
mov ecx, 0xfba3b4c9
jmp 0x100b4c80
cmp eax, 0x42f3c371
je 0x100b4b34
cmp eax, 0x432ffee1
jne 0x100b1609
mov eax, 0xa5fa4194
jmp 0x100b1609
cmp eax, 0x83b9650c
je 0x100b4b51
cmp eax, 0x83ca15ff
jne 0x100b1609
mov eax, dword [ebp - 0x44]
mov eax, 0x3e03633f
jmp 0x100b1609
cmp eax, 0x20342ffa
je 0x100b4b6e
cmp eax, 0x207e08af
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb9f81f79
mov ecx, 0xddba7b43
jmp 0x100b4c80
cmp eax, 0xe0d7d70e
je 0x100b4b8b
cmp eax, 0xe20e079a
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1db3e940
mov ecx, 0x6863cdd0
jmp 0x100b4c80
cmp eax, 0x62ef38cd
je 0x100b4b95
cmp eax, 0x635e69ce
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2d8089ee
mov ecx, 0xd85c1216
jmp 0x100b4c80
cmp eax, 0xb1239fd3
je 0x100b4ba6
cmp eax, 0xb17a761e
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2b5edfb1
mov ecx, 0x5093780b
jmp 0x100b4c80
cmp eax, 0x10315bfb
je 0x100b4be7
cmp eax, 0x10410b46
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc86afb30
mov ecx, 0xe0d7d70e
jmp 0x100b4c80
cmp eax, 0xd0df0339
je 0x100b4c01
cmp eax, 0xd1989e34
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x87f1c6f6
mov ecx, 0x8a55cce7
jmp 0x100b4c80
cmp eax, 0x5237d773
je 0x100b4c0b
cmp eax, 0x52b7104c
jne 0x100b1609
mov eax, 0xcf07ae54
jmp 0x100b1609
cmp eax, 0x93a6afd8
je 0x100b4c25
cmp eax, 0x93dcc843
jne 0x100b1609
mov eax, 0x4b31f4c3
jmp 0x100b1609
cmp eax, 0x2cfd6481
je 0x100b4c3a
cmp eax, 0x2d8089ee
jne 0x100b1609
mov eax, dword [ebp - 0x28]
mov eax, 0xd85c1216
jmp 0x100b1609
cmp eax, 0xf11db1e8
je 0x100b4c54
cmp eax, 0xf1747eb1
jne 0x100b1609
mov eax, 0xcd6cc6a
jmp 0x100b1609
cmp eax, 0x755cc72e
je 0x100b4c5e
cmp eax, 0x75bd064b
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb2735658
mov ecx, 0xdb650719
jmp 0x100b4c80
cmp eax, 0x9facceec
je 0x100b4c68
cmp eax, 0x9fbf4d97
jne 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb5b760b4
mov ecx, 0xb1239fd3
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1fc34456
mov ecx, 0x361c629e
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb1a4a660
mov ecx, 0x3b10d28a
jmp 0x100b4c80
mov eax, 0xab5d08e3
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1d2c7b0d
mov ecx, 0x2400a6e4
jmp 0x100b4c80
push eax
sub esp, 0x100
mov eax, esp
mov dword [ebp - 0x24], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x28], eax
sub esp, 0x104
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0x10], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x14], eax
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbbc6ab74
mov ecx, 0x687fe530
jmp 0x100b4c80
mov eax, 0x4fe7a65b
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb76fdad0
mov ecx, 0x3b457d1f
jmp 0x100b4c80
mov eax, 0x6a8b24ee
jmp 0x100b1609
mov eax, 0x58419e76
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x82f37414
mov ecx, 0xd844da3c
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x755cc72e
mov ecx, 0x810861ec
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9386b19e
mov ecx, 0x243cf9ae
jmp 0x100b4c80
mov eax, 0xb3d35b90
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1b8ef87a
mov ecx, 0x5817afce
jmp 0x100b4c80
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, 0x30a670af
jmp 0x100b1609
mov eax, 0x207e08af
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb76fdad0
mov ecx, 0x88bf4d2f
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x635e69ce
mov ecx, 0x211ff888
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xfd0ce96c
mov ecx, 0xf3a63626
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x82f37414
mov ecx, 0xa7aaa326
jmp 0x100b4c80
mov eax, 0x20342ffa
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb796e88a
mov ecx, 0x2804e0cd
jmp 0x100b4c80
mov eax, 0xadeef08
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x52ede9de
mov ecx, 0xcfc6b508
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x39a141ee
mov ecx, 0x5cd0af4b
jmp 0x100b4c80
push str.__c_del
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp - 0x20]
push dword [ebp - 0x18]
call ebx
push str.___nul
push dword [ebp - 0x18]
call ebx
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
call ebx
mov eax, dword [ebp - 0x10]
xorps xmm0, xmm0
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x30], xmm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0x14]
movups xmmword [eax], xmm0
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x2c], 1
mov eax, dword [ebp - 0x10]
mov word [eax + 0x30], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov eax, 0x7f88f424
jmp 0x100b1609
mov eax, dword [ebp - 0x44]
mov eax, 0x31bc8425
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe5c4eb5
mov ecx, 0xb0e4cd44
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xacd9c24e
mov ecx, 0xd8c3e2e0
jmp 0x100b4c80
mov eax, 0x2cfd6481
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x432ffee1
mov ecx, 0x7f460e6c
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4ac11e9a
mov ecx, 0xda54403e
jmp 0x100b4c80
mov eax, 0x3030daa3
jmp 0x100b1609
mov eax, 0x4548cc7a
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x158ef8e
mov ecx, 0x830899a8
jmp 0x100b4c80
cmp byte [ebp - 0x31], 0
mov eax, 0x9ac1ff3a
mov ecx, 0x964bfa89
cmovne eax, ecx
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8326ff84
mov ecx, 0xa8a7c03
jmp 0x100b4c80
mov eax, 0xce16f68c
jmp 0x100b1609
mov eax, 0xd844da3c
jmp 0x100b1609
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x158ef8e
mov ecx, 0xe5d7e5ef
jmp 0x100b4c80
mov eax, 0x361c629e
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbb098c6b
mov ecx, 0x86c956e5
jmp 0x100b4c80
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0x20
push eax
call esi
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8e75fabc
mov ecx, 0xaaefb987
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1bc1c66d
mov ecx, 0xa8396176
jmp 0x100b4c80
mov eax, 0x83b9650c
jmp 0x100b1609
push 0x100
push dword [ebp - 0x3c]
call esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 0xf
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
sub esp, 0x28
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], edi
movaps xmm0, xmmword [0x1017f400]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], edx
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
setne byte [ebp - 0x32]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x938508
mov ecx, 0x7bd1be57
jmp 0x100b4c80
push 0x40
push dword [ebp - 0x40]
call esi
mov esi, dword [ebp - 0x14]
push 0xfffffffffffffff1
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push dword [esi + 4]
mov esi, dword [sym.imp.KERNEL32.dll_SetPriorityClass]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, 0x67db67a
jmp 0x100b1609
mov eax, 0x64b8f7a4
jmp 0x100b1609
mov eax, 0xf6cf96fb
jmp 0x100b1609
mov cl, byte [ebp - 0x2d]
cmp byte [ebp - 0x2e], 0
mov eax, 0x62e31ef0
mov edx, 0xf1ede4b5
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x52ede9de
mov ecx, 0xd99f4456
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7b34a1a1
mov ecx, 0x15013dc7
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2b5edfb1
mov ecx, 0x1cdefbcc
jmp 0x100b4c80
mov eax, 0xbd884858
jmp 0x100b1609
mov eax, 0x966a9eca
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8e2730ea
mov ecx, 0x5583e939
jmp 0x100b4c80
mov eax, 0x5093780b
jmp 0x100b1609
mov eax, dword [ebp - 0x28]
mov eax, 0xc0a5c049
jmp 0x100b1609
mov eax, 0x6cd42a4d
jmp 0x100b1609
mov eax, dword [ebp - 0x38]
mov eax, 0x587df766
jmp 0x100b1609
mov eax, 0x9ec7e89b
jmp 0x100b1609
mov eax, 0xe81bdc3d
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x719393b1
mov ecx, 0x19baec87
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x50c136cb
mov ecx, 0xbd884858
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb29bdc75
mov ecx, 0x4bbf1e4a
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd6ecba85
mov ecx, 0x8794bd2e
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xefc3a828
mov ecx, 0x587df766
jmp 0x100b4c80
mov eax, 0x10410b46
jmp 0x100b1609
mov eax, 0x9bbd4093
jmp 0x100b1609
mov eax, 0xd1989e34
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd6ecba85
mov ecx, 0x62ef38cd
jmp 0x100b4c80
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, 0x8a55cce7
jmp 0x100b1609
mov eax, 0xfd72fc45
jmp 0x100b1609
mov dword [ebp - 0x54], 0
mov eax, 0xc611824d
jmp 0x100b1609
mov eax, 0x69bd24e6
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd0df0339
mov ecx, 0xb007a919
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3531b831
mov ecx, 0x7f88f424
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x42ba0c2f
mov ecx, 0xea73991
jmp 0x100b4c80
mov eax, 0x88bf4d2f
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x83ca15ff
mov ecx, 0x3e03633f
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x69a39930
mov ecx, 0xb3d35b90
jmp 0x100b4c80
mov eax, dword [ebp - 0x2c]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5c2f0f63
mov ecx, 0x593cfea6
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x45258c0f
mov ecx, 0xdcdb28c
jmp 0x100b4c80
mov eax, 0x8794bd2e
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1c6d751f
mov ecx, 0xb10ddb9e
jmp 0x100b4c80
mov eax, dword [ebp - 0x38]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xefc3a828
mov ecx, 0x84f6377d
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc86afb30
mov ecx, 0x10410b46
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5107ca66
mov ecx, 0x52b7104c
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x93a6afd8
mov ecx, 0x5d32029
jmp 0x100b4c80
mov eax, 0xca290ebc
jmp 0x100b1609
cmp byte [ebp - 0x2f], 0
mov eax, 0x9ac1ff3a
mov ecx, 0xf85862bb
cmovne eax, ecx
jmp 0x100b1609
mov eax, 0x29f4765a
jmp 0x100b1609
mov eax, 0x15013dc7
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb6d8e70
mov ecx, 0x79debd54
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x31e108b1
mov ecx, 0x9f0fd5fc
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xca7568fb
mov ecx, 0xaa2c2007
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6766a345
mov ecx, 0x4e9fe53f
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xdd703089
mov ecx, 0x687f2704
jmp 0x100b4c80
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2bc24348
mov ecx, 0x26e05228
jmp 0x100b4c80
mov eax, 0x243cf9ae
jmp 0x100b1609
push 0x104
push dword [ebp - 0x1c]
push str.COMSPEC
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, 0x7a569a36
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xeb6318da
mov ecx, 0xdaa03c57
jmp 0x100b4c80
mov eax, 0xbdf83044
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb796e88a
mov ecx, 0x8e6e888a
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x49184b8f
mov ecx, 0x4fe7a65b
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2bc24348
mov ecx, 0xc0a5c049
jmp 0x100b4c80
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe498109e
mov ecx, 0xffeee1bd
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8e75fabc
mov ecx, 0xdd05b855
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x3384fd2a
mov ecx, 0xca290ebc
jmp 0x100b4c80
mov eax, dword [ebp - 0x20]
push 0x104
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
mov eax, 0x56c1c928
jmp 0x100b1609
push 0x100
push dword [ebp - 0x3c]
call esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 0xf
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
sub esp, 0x28
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], edi
movaps xmm0, xmmword [0x1017f400]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], edx
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov eax, 0x3b10d28a
jmp 0x100b1609
mov eax, 0xdb650719
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb9f81f79
mov ecx, 0x207e08af
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5107ca66
mov ecx, 0x98c4d0f7
jmp 0x100b4c80
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xc4ff2c84
mov ecx, 0x44e482bd
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x45258c0f
mov ecx, 0xd6cd73d6
jmp 0x100b4c80
mov eax, 0xcfc6b508
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xeb6318da
mov ecx, 0xed6d44d9
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xcbec31e5
mov ecx, 0x5d570bd4
jmp 0x100b4c80
mov eax, dword [ebp - 0x2c]
push 0x104
push dword [ebp - 0x24]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x74e37cc7
mov ecx, 0xe5db7681
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xff47a74c
mov ecx, 0xd73ad4d5
jmp 0x100b4c80
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb9a92382
mov ecx, 0xccf6cee5
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x62e31ef0
mov ecx, 0x61c3029
jmp 0x100b4c80
mov eax, 0x5237d773
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x9fbf4d97
mov ecx, 0x8144206b
jmp 0x100b4c80
mov eax, 0x5839a5f9
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x278d0a6d
mov ecx, 0x6bf023ca
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8b34c811
mov ecx, 0x5ed6e5f3
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd0df0339
mov ecx, 0xe612394e
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf1747eb1
mov ecx, 0xee42e504
jmp 0x100b4c80
mov eax, 0x94b1843c
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd4fe3e7
mov ecx, 0x5ac28afa
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x93dcc843
mov ecx, 0xa7f4650e
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb29bdc75
mov ecx, 0x1b813e29
jmp 0x100b4c80
mov eax, 0x5ed6e5f3
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6766a345
mov ecx, 0x2348f2d
jmp 0x100b4c80
mov eax, 0xa09023a4
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf5c1d895
mov ecx, 0x31bc8425
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5c2f0f63
mov ecx, 0x18eba2fe
jmp 0x100b4c80
mov eax, 0x99c190db
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbc3b17c8
mov ecx, 0x69bd24e6
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x67068da7
mov ecx, 0x56c1c928
jmp 0x100b4c80
mov eax, dword [ebp - 0x20]
push 0x104
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x679f96fd
mov ecx, 0xef8c74c9
jmp 0x100b4c80
mov eax, 0x1fcd012a
jmp 0x100b1609
push str.__c_del
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp - 0x20]
push dword [ebp - 0x18]
call ebx
push str.___nul
push dword [ebp - 0x18]
call ebx
push dword [ebp - 0x18]
push dword [ebp - 0x1c]
call ebx
mov eax, dword [ebp - 0x10]
xorps xmm0, xmm0
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x30], xmm0
mov dword [eax + 0x40], 0
mov eax, dword [ebp - 0x14]
movups xmmword [eax], xmm0
mov eax, dword [ebp - 0x10]
mov dword [eax], 0x44
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x2c], 1
mov eax, dword [ebp - 0x10]
mov word [eax + 0x30], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov eax, 0xa8396176
jmp 0x100b1609
mov eax, 0xb10ddb9e
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xacd9c24e
mov ecx, 0x91f8214e
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8e12ea88
mov ecx, 0x8656ff61
jmp 0x100b4c80
mov eax, dword [ebp - 0x2c]
mov eax, 0x18eba2fe
jmp 0x100b1609
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x39a141ee
mov ecx, 0x48305ff8
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x482a39e5
mov ecx, 0xf3a14505
jmp 0x100b4c80
mov eax, 0x2804e0cd
jmp 0x100b1609
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, 0x5cd0af4b
jmp 0x100b1609
push 0x100
push dword [ebp - 0x3c]
call esi
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 0xf
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
sub esp, 0x28
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], edi
movaps xmm0, xmmword [0x1017f400]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], edx
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb1a4a660
mov ecx, 0x6fb451dc
jmp 0x100b4c80
cmp dword [ebp - 0x38], 0
setne byte [ebp - 0x30]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf06290ff
mov ecx, 0x71210af3
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7dc91e95
mov ecx, 0x172fda49
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbc3b17c8
mov ecx, 0x21940e6
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8e12ea88
mov ecx, 0x30ce68f2
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1b39e634
mov ecx, 0xb17a761e
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x28d2f458
mov ecx, 0xbd650eaf
jmp 0x100b4c80
mov eax, 0x48eb6662
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2284ae2a
mov ecx, 0xfd72fc45
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x755cc72e
mov ecx, 0x5ba91215
jmp 0x100b4c80
mov eax, 0xcab8e5a5
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xe5bc0db8
mov ecx, 0xb836194
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7bee7648
mov ecx, 0xe833728e
jmp 0x100b4c80
mov eax, dword [ebp - 0x14]
mov eax, 0x9d5b911e
jmp 0x100b1609
mov eax, 0x31560623
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbbc6ab74
mov ecx, 0x48eb6662
jmp 0x100b4c80
mov eax, 0x8656ff61
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1db3e940
mov ecx, 0xe20e079a
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf3b14c1f
mov ecx, 0x41aa87da
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbdf36d2d
mov ecx, 0xbc4e2332
jmp 0x100b4c80
mov eax, 0xac887d6
jmp 0x100b1609
mov eax, dword [ebp - 0x14]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xad8a4082
mov ecx, 0xe2c0462
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x42ba0c2f
mov ecx, 0xce16f68c
jmp 0x100b4c80
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x58]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x93dcc843
mov ecx, 0x4b31f4c3
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb9a92382
mov ecx, 0x30a670af
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x432ffee1
mov ecx, 0xa5fa4194
jmp 0x100b4c80
mov eax, 0x96706d55
jmp 0x100b1609
mov eax, 0xb836194
jmp 0x100b1609
mov eax, dword [ebp - 0x20]
push 0x104
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
mov eax, 0xbb00985f
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x69a39930
mov ecx, 0x9facceec
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7b34a1a1
mov ecx, 0x621c42be
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd0a41e55
mov ecx, 0x83b9650c
jmp 0x100b4c80
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
push 0x104
push dword [ebp - 0x20]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
setne byte [ebp - 0x2f]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x1b8ef87a
mov ecx, 0x7e25d235
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x278d0a6d
mov ecx, 0xa09023a4
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x482a39e5
mov ecx, 0x9bbd4093
jmp 0x100b4c80
xor eax, eax
inc eax
mov dword [ebp - 0x50], eax
mov eax, 0xe6f61eb9
jmp 0x100b1609
push 0x104
push dword [ebp - 0x1c]
push str.COMSPEC
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x4449282b
mov ecx, 0xc1bbeb6b
jmp 0x100b4c80
mov eax, 0x211ff888
jmp 0x100b1609
mov eax, dword [ebp - 0x14]
mov eax, 0x830899a8
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xad8a4082
mov ecx, 0x9d5b911e
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x88cf5090
mov ecx, 0x6a8b24ee
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xca7568fb
mov ecx, 0xab5d08e3
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5a285ff3
mov ecx, 0x4e67cc30
jmp 0x100b4c80
mov eax, 0xc54726a
jmp 0x100b1609
mov dword [ebp - 0x50], 0
mov eax, 0xe6f61eb9
jmp 0x100b1609
push 0x40
push dword [ebp - 0x40]
call esi
mov esi, dword [ebp - 0x14]
push 0xfffffffffffffff1
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push dword [esi + 4]
mov esi, dword [sym.imp.KERNEL32.dll_SetPriorityClass]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb5b760b4
mov ecx, 0x76f57eb5
jmp 0x100b4c80
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x2c52df03
mov ecx, 0x33f30954
jmp 0x100b4c80
mov eax, 0xe612394e
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf2497aca
mov ecx, 0x1ffb98e0
jmp 0x100b4c80
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push 0x20
push eax
call esi
mov eax, 0x5d32029
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x7c3a0337
mov ecx, 0xf11db1e8
jmp 0x100b4c80
mov eax, 0x216280f3
jmp 0x100b1609
mov eax, 0x810861ec
jmp 0x100b1609
mov eax, dword [0x1019350c]
lea ecx, [eax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb6d8e70
mov ecx, 0xac887d6
cmove eax, ecx
cmp dword [0x10193510], 0xa
cmovl eax, ecx
jmp 0x100b1609
cmp eax, 0xa7aaa326
jne 0x100b1609
mov eax, dword [ebp - 0x64]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret