Function at 0x10068c30
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x50
mov al, byte [ebp + 0xc]
mov byte [ebp - 0x25], al
mov eax, dword [ebp + 8]
mov dword [ebp - 0x24], eax
mov eax, dword [0x100ff7a8]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [str.frCA]
add eax, dword [0x100fe300]
xor eax, 0x7e13ff9b
and eax, 0x38226fb6
or eax, 0xc5df42ed
imul eax, eax, 0x7452a47e
or eax, 0x316f8e5e
and eax, 0xa0b50066
add eax, 0xd715fd8c
add eax, 0x29274ba0
add eax, 0xaeaa5e89
imul eax, eax, 0xdd18172f
imul eax, eax, 0x3c29b8fc
sub eax, 0x2b9e2f86
xor eax, 0x5813c5f2
and eax, 0xe3f1f881
add eax, 0xf5120ab0
imul eax, eax, 0xc2785d54
mov ecx, 0x68b8b44
xor edx, edx
div ecx
sub eax, 0x480c2b5c
and eax, 0x132aeb00
sub eax, 0x3e3b992b
imul eax, eax, 0x1b5c1b1
xor eax, 0xaa6cfe49
and eax, 0xd4d88078
sub eax, 0x694c4727
mov ecx, 0x861aa88f
xor edx, edx
div ecx
and eax, 0xce1e0e59
imul eax, eax, 0x24d4a3b1
xor eax, 0x3b92acc1
add eax, 0x57ffbd5c
xor eax, 0xf80c037c
sub eax, 0x58230f0d
mov ecx, 0x981d39cb
xor edx, edx
div ecx
or eax, 0xe5658af
mov ecx, 0x5b850f34
xor edx, edx
div ecx
and eax, 0x520f9998
imul eax, eax, 0xc29d4743
sub eax, 0x6bf4f701
add eax, 0xb0746102
and eax, 0x9780661e
xor eax, 0x9aa07dc
sub eax, 0xc0a5f50e
and eax, 0xe5299562
mov ecx, 0x64a6f9ea
xor edx, edx
div ecx
imul eax, eax, 0xa1afe5e4
imul eax, eax, 0x3ad83b3b
or eax, 0x9ae56661
or eax, 0xdc3b194c
and eax, 0x4dd934dd
sub eax, 0xe0f37b57
imul eax, eax, 0x559d6c06
and eax, 0x1849a857
imul eax, eax, 0x6d41b6bf
add eax, 0x773a474b
imul eax, eax, 0xc6ba7bbb
mov dword [ebp - 0x14], 0x90a471d9
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x18], ecx
or eax, 0x105bf438
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
sub eax, 0x90a471d9
je 0x10068f01
jmp 0x10068db9
mov eax, dword [ebp - 0x2c]
sub eax, 0x99a0b807
je 0x100698fa
jmp 0x10068dcc
mov eax, dword [ebp - 0x2c]
sub eax, 0x9cc86786
je 0x10069ba8
jmp 0x10068ddf
mov eax, dword [ebp - 0x2c]
sub eax, 0xa1de97d6
je 0x1006943b
jmp 0x10068df2
mov eax, dword [ebp - 0x2c]
sub eax, 0xc205ecb7
je 0x10069b77
jmp 0x10068e05
mov eax, dword [ebp - 0x2c]
sub eax, 0xcd820207
je 0x10069b4d
jmp 0x10068e18
mov eax, dword [ebp - 0x2c]
sub eax, 0xd627b96e
je 0x100691e8
jmp 0x10068e2b
mov eax, dword [ebp - 0x2c]
sub eax, 0xe3bc53ff
je 0x10069079
jmp 0x10068e3e
mov eax, dword [ebp - 0x2c]
sub eax, 0xe70218f2
je 0x10069755
jmp 0x10068e51
mov eax, dword [ebp - 0x2c]
sub eax, 0xed03216d
je 0x100695bb
jmp 0x10068e64
mov eax, dword [ebp - 0x2c]
sub eax, 0x133a0be6
je 0x10069b5b
jmp 0x10068e77
mov eax, dword [ebp - 0x2c]
sub eax, 0x18620e16
je 0x100692ca
jmp 0x10068e8a
mov eax, dword [ebp - 0x2c]
sub eax, 0x27d16d1c
je 0x1006990f
jmp 0x10068e9d
mov eax, dword [ebp - 0x2c]
sub eax, 0x298a8a35
je 0x10069a76
jmp 0x10068eb0
mov eax, dword [ebp - 0x2c]
sub eax, 0x33292698
je 0x10068f21
jmp 0x10068ec3
mov eax, dword [ebp - 0x2c]
sub eax, 0x47c68516
je 0x1006959e
jmp 0x10068ed6
mov eax, dword [ebp - 0x2c]
sub eax, 0x668641c7
je 0x10069b69
jmp 0x10068ee9
mov eax, dword [ebp - 0x2c]
sub eax, 0x68a1d00a
je 0x100695e2
jmp 0x10068efc
jmp 0x10069c63
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov ecx, 0x133a0be6
mov edx, 0x33292698
cmp esi, 0x29fa6e65
cmovne ecx, edx
mov dword [eax], ecx
jmp 0x10069c63
mov eax, dword [0x100fe304]
xor eax, dword [0x100fe308]
imul eax, eax, 0x829608e5
or eax, 0x4ac439e
sub eax, 0x5f028a33
and eax, 0x67299f3b
xor eax, 0x3b711367
xor eax, 0x88551484
imul eax, eax, 0xb34f4f1b
xor eax, 0x7f4f682d
or eax, 0xd56b531a
add eax, 0xde46825c
imul eax, eax, 0x34a7c8db
add eax, 0xf3564444
and eax, 0xf3cad195
and eax, 0x8f523311
add eax, 0x5e4541ac
xor eax, 0xd43c96b4
or eax, 0xee733fc1
xor eax, 0x7632e4c
or eax, 0x5f3cfdeb
xor eax, 0xd7ea20ec
sub eax, 0x47f4fb7e
add eax, 0x6fc12fdf
xor eax, 0xc61598cb
mov ecx, 0xa01f0771
xor edx, edx
div ecx
imul eax, eax, 0x476cca2f
sub eax, 0x890fdbfa
and eax, 0xc5d0c704
or eax, 0xdd889571
add eax, 0xe983cf42
mov ecx, 0x5f792e2
xor edx, edx
div ecx
xor eax, 0xbc0c1ec5
sub eax, 0xe89a534b
xor eax, 0xac2137ae
and eax, 0x3054c8bd
add eax, 0xd7277a8b
add eax, 0xf002d6ab
or eax, 0x6ceb0fa1
imul eax, eax, 0xe07dea59
add eax, 0xf2788702
and eax, 0x7ec8d1ac
mov ecx, 0x6838aada
xor edx, edx
div ecx
sub eax, 0x5b7fa7a4
and eax, 0xebf3d59f
imul eax, eax, 0xd6a90e90
sub eax, 0x657fdf59
or eax, 0xbdcf7a24
add eax, 0x3feac366
or eax, 0x946d9286
add eax, 0x8de6a5f9
mov ecx, 0xb1d5c6fa
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, 0x89d0629e
xor ecx, 0xae01b388
imul esi, ecx, 0xf5645e90
and esi, 0x6d33f85c
and esi, 0x5f6e2a8c
mov ecx, 0xe3bc53ff
mov edx, 0x33292698
cmp esi, 0x90c09c00
cmovae ecx, edx
mov dword [eax], ecx
jmp 0x10069c63
mov eax, dword [0x100fe30c]
xor eax, dword [0x100fe310]
or eax, 0xeb7b9745
sub eax, 0x9a48c7f3
xor eax, 0x2284d9b
or eax, 0x3a9a42ec
and eax, 0xdeb2bcb1
mov ecx, 0x9bb327b
xor edx, edx
div ecx
add eax, 0x668d7e45
or eax, 0xf668585c
sub eax, 0xbf572dda
imul eax, eax, 0x1d0d2b21
mov ecx, 0x7b3a4aa8
xor edx, edx
div ecx
xor eax, 0x94228e6
mov ecx, 0xa6bc37b5
xor edx, edx
div ecx
add eax, 0x85697c27
and eax, 0x3f6c0b07
or eax, 0x299a96ed
add eax, 0x6b9b90e5
and eax, 0xc93e76dd
mov ecx, 0x92d2cf3
xor edx, edx
div ecx
sub eax, 0x68aee5cd
add eax, 0x914afdce
imul eax, eax, 0xb4a73d4
and eax, 0xeff31b36
imul eax, eax, 0x67d9b257
imul eax, eax, 0x5046ab32
imul eax, eax, 0x50521ff
mov ecx, 0x380e18c9
xor edx, edx
div ecx
or eax, 0x7a122ab8
imul eax, eax, 0xe2b7a1d3
or eax, 0xaa5d28bd
add eax, 0xdfd4db24
mov ecx, 0x7fcf61d7
xor edx, edx
div ecx
and eax, 0x9d103a58
add eax, 0x14665028
and eax, 0x4546135d
imul eax, eax, 0xc131fada
and eax, 0x772d6f3f
sub eax, 0x7b354df
mov ecx, 0xe0968e1c
xor edx, edx
div ecx
mov ecx, 0xc401b06
xor edx, edx
div ecx
xor eax, 0xedba260b
xor eax, 0x7be69cc0
sub eax, 0xa40b282a
or eax, 0x900661d4
xor eax, 0x9c64835b
imul eax, eax, 0x46f7ca28
or eax, 0xba35c41d
sub eax, 0xc45e8b76
mov ecx, 0x176270c1
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, 0x4b49cc0f
sub ecx, 0x33780e7b
sub ecx, 0x6c669d7
xor ecx, 0x90d35b08
imul esi, ecx, 0x413eb83d
add esi, 0xb6c353f4
mov ecx, 0x27d16d1c
mov edx, 0xd627b96e
cmp esi, 0xdb944658
cmovbe ecx, edx
mov dword [eax], ecx
jmp 0x10069c63
mov edx, dword [ebp - 0x24]
mov bl, byte [ebp - 0x25]
mov esi, 0x213458a7
push eax
mov edi, esp
mov dword [ebp - 0x34], edi
push eax
mov ecx, esp
mov dword [ebp - 0x40], ecx
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0x3c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
and bl, 1
mov byte [edi], bl
mov dword [ecx], edx
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.100a9c60
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
add esp, 0xc
mov dword [ecx], 0x44
mov dword [ecx + 0x2c], 1
mov word [ecx + 0x30], 0
mov edx, dword [edx]
xor edi, edi
sub esp, 0x28
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov cl, byte [ecx]
mov byte [ebp - 0x2d], cl
mov ecx, 0x18620e16
mov edx, 0x27d16d1c
cmp esi, 0x23141565
cmova ecx, edx
mov dword [eax], ecx
jmp 0x10069c63
mov eax, dword [0x100fe31c]
xor edx, edx
div dword [0x100fe320]
or eax, 0x44da12be
or eax, 0x2b9587a1
add eax, 0xf3da7e03
mov ecx, 0x3c5f27a0
xor edx, edx
div ecx
xor eax, 0x7390b9bf
or eax, 0xd0455139
mov ecx, 0x706e43da
xor edx, edx
div ecx
add eax, 0x4821c149
mov ecx, 0x2e783022
xor edx, edx
div ecx
or eax, 0x45325196
xor eax, 0xb9a751bf
mov ecx, 0x6361962c
xor edx, edx
div ecx
mov ecx, 0x3a24b197
xor edx, edx
div ecx
sub eax, 0x6025efdb
or eax, 0xf7450298
xor eax, 0xce9438f
and eax, 0x4e97db94
add eax, 0x84aa66f0
add eax, 0xc3dccfba
and eax, 0xd173a295
xor eax, 0x242d7196
add eax, 0x5c687702
or eax, 0xfe4a071
or eax, 0x769122c4
xor eax, 0x3bad56cd
mov ecx, 0x9acc1fdd
xor edx, edx
div ecx
and eax, 0xabf46f2d
xor eax, 0xf2a5581e
and eax, 0x3d549dcd
and eax, 0xb661b8e2
and eax, 0x8aeea23b
add eax, 0x2b474058
or eax, 0xa20586d7
and eax, 0x92514f94
imul eax, eax, 0x9c82aad0
add eax, 0xe182ed5b
xor eax, 0x457e2e01
mov ecx, 0xc651c9db
xor edx, edx
div ecx
sub eax, 0xf08c7a03
mov ecx, 0x7d1747a4
xor edx, edx
div ecx
xor eax, 0xd546c62e
mov ecx, 0xec701abf
xor edx, edx
div ecx
or eax, 0xf20363c3
add eax, 0x2d978ca2
and eax, 0x330163a2
mov ecx, 0x1d61c357
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x1c]
xor ecx, 0xfddc1981
and ecx, 0x4b2732cd
sub ecx, 0x1391edbf
or ecx, 0x69415938
imul ecx, ecx, 0xe03fcbdf
add ecx, 0x201a1516
add ecx, 0xd13a33c
imul esi, ecx, 0xf286a31e
or esi, 0xd1dc3a80
mov ecx, 0x668641c7
mov edx, 0xa1de97d6
cmp esi, 0x268cf250
cmovae ecx, edx
mov dword [eax], ecx
jmp 0x10069c63
mov eax, dword [0x100fe324]
or eax, dword [0x100fe328]
or eax, 0x394c5e0d
mov ecx, 0x33c9aeb4
xor edx, edx
div ecx
imul eax, eax, 0x255487d8
sub eax, 0xe1e1bb47
or eax, 0x982e5a25
sub eax, 0xc115a51a
imul eax, eax, 0x36670c91
and eax, 0x76b6276a
imul eax, eax, 0x8ed3a31e
sub eax, 0x6d64612c
add eax, 0x63b01242
xor eax, 0x2840a3cd
or eax, 0xcf386c3e
imul eax, eax, 0x7d654d3e
mov ecx, 0x2a4c757c
xor edx, edx
div ecx
and eax, 0x382afdab
or eax, 0x1f9df30b
mov ecx, 0x474acbf3
xor edx, edx
div ecx
add eax, 0x9a221708
xor eax, 0xd5ced11
imul eax, eax, 0xdbba62bc
or eax, 0xc1b1947f
imul eax, eax, 0x336e74b0
add eax, 0x7a59765e
or eax, 0x53979dbf
add eax, 0xa23f1e97
imul eax, eax, 0xcaea004f
and eax, 0x9cda3c44
and eax, 0x7239fed9
or eax, 0xb69b0f37
and eax, 0x7c59a9b8
imul eax, eax, 0x6e3e981
add eax, 0x547d60de
add eax, 0xbe247942
mov ecx, 0x65417f7b
xor edx, edx
div ecx
xor eax, 0x5ee1d073
imul eax, eax, 0x15a38539
add eax, 0xf77f41f8
mov ecx, 0x226bbca1
xor edx, edx
div ecx
and eax, 0x5d70dcbb
and eax, 0xfb897b62
mov ecx, 0x58bd2896
xor edx, edx
div ecx
sub eax, 0x8fd77a28
sub eax, 0x32bcad08
and eax, 0x836f3f1a
and eax, 0x64fcc9a7
xor eax, 0x534f8faa
or eax, 0x26c51288
or eax, 0x387645bd
and eax, 0x81ad7d2d
sub eax, 0xdfad41bd
imul eax, eax, 0xfc80a366
add eax, 0x6e2baa07
and eax, 0x37758767
mov ecx, 0xa175165c
xor edx, edx
div ecx
mov esi, eax
mov eax, dword [ebp - 0x1c]
mov ecx, 0x47c68516
mov edx, 0xa1de97d6
cmp esi, 0xae2a0a9
cmove ecx, edx
mov dword [eax], ecx
jmp 0x10069c63
mov eax, dword [ebp - 0x1c]
mov bl, byte [ebp - 0x2d]
mov ecx, 0x68a1d00a
mov edx, 0xed03216d
test bl, 1
cmovne ecx, edx
mov dword [eax], ecx
jmp 0x10069c63
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x68a1d00a
jmp 0x10069c63
mov eax, dword [0x100fe32c]
imul eax, dword [0x100fe330]
imul eax, eax, 0x7db574d
mov ecx, 0x4e66cd45
xor edx, edx
div ecx
sub eax, 0xfca04fbb
mov ecx, 0x13940465
xor edx, edx
div ecx
imul eax, eax, 0x856c5cd6
sub eax, 0x26e57325
imul eax, eax, 0xbd050162
imul eax, eax, 0x7588420e
mov ecx, 0x2e0f4b07
xor edx, edx
div ecx
imul eax, eax, 0xd82ed0c9
add eax, 0xf15eb4a8
imul eax, eax, 0xc4bef227
imul eax, eax, 0x8dd938e4
imul eax, eax, 0xc641ed2
or eax, 0xea309d93
or eax, 0x6fe8754b
imul eax, eax, 0xfd1dcc63
sub eax, 0x3b6751be
sub eax, 0x89350f89
imul eax, eax, 0xe2369fda
or eax, 0xd6488da2
mov ecx, 0x2c809351
xor edx, edx
div ecx
xor eax, 0xcac29e81
add eax, 0x6fd7e9fc
add eax, 0x70b8453f
imul eax, eax, 0x6bb919f2
mov ecx, 0x4e94a0c6
xor edx, edx
div ecx
sub eax, 0xc57d50e3
sub eax, 0xaeafc1c6
mov ecx, 0xbdf595ec
xor edx, edx
div ecx
or eax, 0x64dce46d
or eax, 0x26bf18ad
or eax, 0x6f6e2d55
xor eax, 0x591854aa
xor eax, 0x68c0086
or eax, 0x33d80069
add eax, 0xfdd15288
imul eax, eax, 0xa5614795
sub eax, 0xfa3b5e60
or eax, 0x59bf0a5d
mov ecx, 0x7bf529d4
xor edx, edx
div ecx
add eax, 0x55b2670c
imul eax, eax, 0x32936eb9
sub eax, 0xc532c293
or eax, 0xb5211f53
add eax, 0x1622324e
mov ecx, 0x923a9167
xor edx, edx
div ecx
mov esi, eax
mov eax, dword [ebp - 0x1c]
add esi, 0xdd83418a
xor esi, 0x8319a5b5
xor esi, 0x72951723
add esi, 0xa08e025e
add esi, 0x1f40a812
add esi, 0x46d28234
or esi, 0x12f35fe6
xor esi, 0x36f4552
mov ecx, 0xe70218f2
mov edx, 0xc205ecb7
cmp esi, 0xdd4ae509
cmove ecx, edx
mov dword [eax], ecx
jmp 0x10069c63
mov eax, dword [str..7_w]
or eax, dword [0x100fe338]
add eax, 0xf8e5cea5
mov ecx, 0x92081b19
xor edx, edx
div ecx
mov ecx, 0xcb3004d3
xor edx, edx
div ecx
xor eax, 0x44972c33
imul eax, eax, 0x95b47b11
or eax, 0x198c2855
xor eax, 0x932c44ce
mov ecx, 0x31a5a678
xor edx, edx
div ecx
add eax, 0x49568b91
add eax, 0x5422cbc5
add eax, 0x174b048a
or eax, 0xa9ea78e3
xor eax, 0x7c10eb94
mov ecx, 0x38917e9c
xor edx, edx
div ecx
add eax, 0x801acbf4
mov ecx, 0x6e54d73e
xor edx, edx
div ecx
add eax, 0xa1b42f98
add eax, 0x31394f02
xor eax, 0xcf26676
add eax, 0x3c86fed9
xor eax, 0xfd172df3
and eax, 0xe9a90f54
or eax, 0x69723a2f
or eax, 0xd6b95772
sub eax, 0x655a2fa3
imul eax, eax, 0xa944bd2c
and eax, 0xc7526840
sub eax, 0x937247bf
mov ecx, 0x7ea43818
xor edx, edx
div ecx
mov ecx, 0x9f650950
xor edx, edx
div ecx
imul eax, eax, 0xc57e21b6
mov ecx, 0x2d630c4b
xor edx, edx
div ecx
add eax, 0xdd45d6ab
and eax, 0x4a112f1e
or eax, 0xa217f26a
or eax, 0x50f4aa32
xor eax, 0xd6928b15
xor eax, 0x59c16363
imul eax, eax, 0x7c4d5d0a
add eax, 0x820dda72
mov ecx, 0xd036108d
xor edx, edx
div ecx
add eax, 0x48a47cac
add eax, 0xbf7addd4
mov ecx, 0x1527cf11
xor edx, edx
div ecx
and eax, 0xfc038bbc
add eax, 0xe5b1d96e
mov ecx, 0x6f99d777
xor edx, edx
div ecx
sub eax, 0x6a325a18
or eax, 0xcb51b011
sub eax, 0xbef7eb7e
and eax, 0x17ff6e61
mov ecx, 0x673b39e4
xor edx, edx
div ecx
mov ecx, 0x9ee396c5
xor edx, edx
div ecx
sub eax, 0xd08fccd6
mov ecx, 0x30baa5f4
xor edx, edx
div ecx
mov esi, eax
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x44], ecx
mov ecx, 0xe70218f2
mov edx, 0x99a0b807
cmp esi, 0x5697c460
cmovne ecx, edx
mov dword [eax], ecx
jmp 0x10069c63
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100a629f
mov eax, dword [ebp - 0x44]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [0x100fe33c]
and eax, dword [0x100fe340]
and eax, 0xc0596e6a
mov ecx, 0x9658cf2b
xor edx, edx
div ecx
or eax, 0xbc1930ba
sub eax, 0x4f9cc122
or eax, 0x63e083b7
imul eax, eax, 0x292a2b09
and eax, 0x5556d52c
and eax, 0x311ae31f
imul eax, eax, 0x1abba8f3
sub eax, 0x78a70307
imul eax, eax, 0xb65e5b36
sub eax, 0x49690a8a
mov ecx, 0x27ed2c1b
xor edx, edx
div ecx
add eax, 0xcf7ba257
and eax, 0x7488fcf4
and eax, 0x8fc65c50
mov ecx, 0xe66e3bbf
xor edx, edx
div ecx
sub eax, 0x10bfab25
and eax, 0xb6a1739f
xor eax, 0xa6f529f2
imul eax, eax, 0xe5a050a9
sub eax, 0x8de316fd
sub eax, 0x50fcef84
or eax, 0xf6cd8cd8
or eax, 0x21a64e30
xor eax, 0x94c36cc5
and eax, 0x98725031
mov ecx, 0x4d32e6f3
xor edx, edx
div ecx
sub eax, 0x121d4440
and eax, 0xe5e37e11
add eax, 0x1125633d
and eax, 0x9bf6b170
xor eax, 0x81235137
and eax, 0xfef5749c
add eax, 0x80135920
mov ecx, 0x23917ea9
xor edx, edx
div ecx
add eax, 0xfe7cfc4b
add eax, 0x5b4aa9b5
and eax, 0xeb6e1f48
mov ecx, 0xb158fd4
xor edx, edx
div ecx
imul eax, eax, 0x9afd751e
imul eax, eax, 0x2034c811
sub eax, 0x347cc0b9
add eax, 0x8b3457d0
and eax, 0x818bc573
add eax, 0x705f38ff
mov ecx, 0x20e5250d
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, 0x82e850df
and ecx, 0x7dc653ca
imul ecx, ecx, 0xe1964f36
imul ecx, ecx, 0x360a27d8
add ecx, 0xe37d68d5
or ecx, 0x93ab3534
sub ecx, 0xa5020c91
imul esi, ecx, 0xeb6c9274
mov ecx, 0x298a8a35
mov edx, 0x9cc86786
cmp esi, 0xd6a43e28
cmove ecx, edx
mov dword [eax], ecx
jmp 0x10069c63
mov edx, dword [ebp - 0x24]
mov bl, byte [ebp - 0x25]
mov esi, 0x1448420
push eax
mov edi, esp
push eax
mov ecx, esp
mov dword [ebp - 0x50], ecx
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0x4c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x4c]
and bl, 1
mov byte [edi], bl
mov dword [ecx], edx
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.100a9c60
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
add esp, 0xc
mov dword [ecx], 0x44
mov dword [ecx + 0x2c], 1
mov word [ecx + 0x30], 0
mov edx, dword [edx]
xor edi, edi
sub esp, 0x28
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov eax, dword [ebp - 0x1c]
mov ecx, 0x298a8a35
mov edx, 0xcd820207
cmp esi, 0x28dc661d
cmovne ecx, edx
mov dword [eax], ecx
jmp 0x10069c63
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xd627b96e
jmp 0x10069c63
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x33292698
jmp 0x10069c63
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xa1de97d6
jmp 0x10069c63
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xe70218f2
jmp 0x10069c63
mov edx, dword [ebp - 0x24]
mov bl, byte [ebp - 0x25]
push eax
mov esi, esp
push eax
mov ecx, esp
mov dword [ebp - 0x5c], ecx
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0x58], eax
sub esp, 0x10
mov edi, esp
mov dword [ebp - 0x54], edi
and bl, 1
mov byte [esi], bl
mov dword [ecx], edx
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.100a9c60
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x54]
add esp, 0xc
mov dword [ecx], 0x44
mov dword [ecx + 0x2c], 1
mov word [ecx + 0x30], 0
mov edx, dword [edx]
xor esi, esi
sub esp, 0x28
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x298a8a35
jmp 0x10068da3