Function at 0x1000d3a0
Capabilities:
Create process on windows
Get system information on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005c766
mov eax, dword fs:[0]
push eax
sub esp, 0x174
mov eax, dword [0x10073068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x168], edx
mov dword [ebp - 0x14c], ecx
push 0
xorps xmm0, xmm0
mov dword [ebp - 0xfc], 0
push 0x1006b324
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x90], 0
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
call fcn.1000b7f0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x40]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0
push 0x1006b324
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x2c], 0
call fcn.1000b7f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x58]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
push 0x1006b324
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x44], 0
call fcn.1000b7f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x88]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
push 0x1006b324
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 0
call fcn.1000b7f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
push 0
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push 0x1006b324
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
call fcn.1000b7f0
push str.WINDIR
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.1003e380
add esp, 0xc
test eax, eax
je 0x1000d64b
mov ecx, dword [ebp - 0x14]
cmp ecx, 8
jb 0x1000d52f
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d525
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x74]
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp ecx, 8
jb 0x1000d580
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d576
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x44]
cmp ecx, 8
jb 0x1000d5ba
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d5b0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x2c]
cmp ecx, 8
jb 0x1000d5f4
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d5ea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x5c]
cmp ecx, 8
jb 0x1000d62e
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d624
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10036bdc
mov esp, ebp
pop ebp
ret
push 0x1006b638
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.1003e380
add esp, 0xc
test eax, eax
jne 0x1000d4f5
cmp dword [ebp - 0xfc], eax
je 0x1000ea39
cmp dword [ebp - 0x100], eax
je 0x1000ea39
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
cmp word [ebp - 0xb4], 9
lea ecx, [ebp - 0x180]
push 0x11
jne 0x1000db36
mov edx, 0x10073b78
call fcn.10002170
add esp, 4
mov esi, eax
mov byte [ebp - 4], 5
xorps xmm0, xmm0
mov edx, dword [ebp - 0xfc]
mov ecx, edx
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000d6e5
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x128]
call fcn.1000b7f0
push esi
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 6
push eax
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x144]
call fcn.1000c5f0
push 0x1006b37c
lea edx, [ebp - 0x144]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x164]
call fcn.1000b280
mov esi, eax
add esp, 4
lea eax, [ebp - 0x70]
cmp eax, esi
je 0x1000d7a2
mov ecx, dword [ebp - 0x5c]
cmp ecx, 8
jb 0x1000d77e
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d774
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb6d
push ecx
push edx
call fcn.10036bea
add esp, 8
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x60], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ecx, dword [ebp - 0x150]
cmp ecx, 8
jb 0x1000d7e2
mov edx, dword [ebp - 0x164]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d7d8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb6d
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 7
mov word [ebp - 0x164], ax
cmp ecx, 8
jb 0x1000d843
mov edx, dword [ebp - 0x144]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d839
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb6d
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 7
mov word [ebp - 0x144], ax
cmp ecx, 8
jb 0x1000d8a4
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d89a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb6d
push ecx
push edx
call fcn.10036bea
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x16c]
cmp ecx, 8
jb 0x1000d8e8
mov edx, dword [ebp - 0x180]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d8de
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb6d
push ecx
push edx
call fcn.10036bea
add esp, 8
push 0x16
mov edx, 0x10073be4
lea ecx, [ebp - 0x180]
call fcn.10002170
add esp, 4
mov esi, eax
mov byte [ebp - 4], 8
xorps xmm0, xmm0
mov edx, dword [ebp - 0xfc]
mov ecx, edx
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
lea edi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000d930
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x128]
call fcn.1000b7f0
push esi
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 9
push eax
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x144]
call fcn.1000c5f0
push 0x1006b37c
lea edx, [ebp - 0x144]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x164]
call fcn.1000b280
mov esi, eax
add esp, 4
lea eax, [ebp - 0x40]
cmp eax, esi
je 0x1000d9ed
mov ecx, dword [ebp - 0x2c]
cmp ecx, 8
jb 0x1000d9c9
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d9bf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb72
push ecx
push edx
call fcn.10036bea
add esp, 8
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ecx, dword [ebp - 0x150]
cmp ecx, 8
jb 0x1000da2d
mov edx, dword [ebp - 0x164]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000da23
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb72
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 7
mov word [ebp - 0x164], ax
cmp ecx, 8
jb 0x1000da8e
mov edx, dword [ebp - 0x144]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000da84
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb72
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 7
mov word [ebp - 0x144], ax
cmp ecx, 8
jb 0x1000daef
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000dae5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb72
push ecx
push edx
call fcn.10036bea
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x16c]
cmp ecx, 8
jb 0x1000dfc3
mov edx, dword [ebp - 0x180]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000dfb9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb72
jmp 0x1000dfb9
mov edx, 0x10073b8c
call fcn.10002170
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0xb
xorps xmm0, xmm0
mov edx, dword [ebp - 0xfc]
mov ecx, edx
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000db72
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x128]
call fcn.1000b7f0
push esi
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0xc
push eax
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x144]
call fcn.1000c5f0
push 0x1006b37c
lea edx, [ebp - 0x144]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x164]
call fcn.1000b280
mov esi, eax
add esp, 4
lea eax, [ebp - 0x70]
cmp eax, esi
je 0x1000dc2f
mov ecx, dword [ebp - 0x5c]
cmp ecx, 8
jb 0x1000dc0b
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000dc01
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb77
push ecx
push edx
call fcn.10036bea
add esp, 8
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x60], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ecx, dword [ebp - 0x150]
cmp ecx, 8
jb 0x1000dc6f
mov edx, dword [ebp - 0x164]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000dc65
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb77
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 7
mov word [ebp - 0x164], ax
cmp ecx, 8
jb 0x1000dcd0
mov edx, dword [ebp - 0x144]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000dcc6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb77
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 7
mov word [ebp - 0x144], ax
cmp ecx, 8
jb 0x1000dd31
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000dd27
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb77
push ecx
push edx
call fcn.10036bea
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x16c]
cmp ecx, 8
jb 0x1000dd75
mov edx, dword [ebp - 0x180]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000dd6b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb77
push ecx
push edx
call fcn.10036bea
add esp, 8
push 0x16
mov edx, 0x10073bfc
lea ecx, [ebp - 0x180]
call fcn.10002170
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0xe
xorps xmm0, xmm0
mov edx, dword [ebp - 0xfc]
mov ecx, edx
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
lea edi, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000ddc0
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x128]
call fcn.1000b7f0
push esi
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0xf
push eax
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x144]
call fcn.1000c5f0
push 0x1006b37c
lea edx, [ebp - 0x144]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x164]
call fcn.1000b280
mov esi, eax
add esp, 4
lea eax, [ebp - 0x40]
cmp eax, esi
je 0x1000de7d
mov ecx, dword [ebp - 0x2c]
cmp ecx, 8
jb 0x1000de59
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000de4f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb7c
push ecx
push edx
call fcn.10036bea
add esp, 8
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ecx, dword [ebp - 0x150]
cmp ecx, 8
jb 0x1000debd
mov edx, dword [ebp - 0x164]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000deb3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb7c
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 7
mov word [ebp - 0x164], ax
cmp ecx, 8
jb 0x1000df1e
mov edx, dword [ebp - 0x144]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000df14
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb7c
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 7
mov word [ebp - 0x144], ax
cmp ecx, 8
jb 0x1000df7f
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000df75
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb7c
push ecx
push edx
call fcn.10036bea
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x16c]
cmp ecx, 8
jb 0x1000dfc3
mov edx, dword [ebp - 0x180]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000dfb9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb7c
push ecx
push edx
call fcn.10036bea
add esp, 8
push 0x1d
mov edx, 0x10073ba4
lea ecx, [ebp - 0x180]
call fcn.10002170
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0x11
xorps xmm0, xmm0
mov edx, dword [ebp - 0x100]
mov ecx, edx
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
lea edi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000e007
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x128]
call fcn.1000b7f0
push esi
lea eax, [ebp - 0x128]
mov byte [ebp - 4], 0x12
push eax
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x144]
call fcn.1000c5f0
push 0x1006b37c
lea edx, [ebp - 0x144]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x164]
call fcn.1000b280
mov esi, eax
add esp, 4
lea eax, [ebp - 0x58]
cmp eax, esi
je 0x1000e0c4
mov ecx, dword [ebp - 0x44]
cmp ecx, 8
jb 0x1000e0a0
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e096
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb81
push ecx
push edx
call fcn.10036bea
add esp, 8
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x58], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x48], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ecx, dword [ebp - 0x150]
cmp ecx, 8
jb 0x1000e104
mov edx, dword [ebp - 0x164]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e0fa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb81
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 7
mov word [ebp - 0x164], ax
cmp ecx, 8
jb 0x1000e165
mov edx, dword [ebp - 0x144]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e15b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb81
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 7
mov word [ebp - 0x144], ax
cmp ecx, 8
jb 0x1000e1c6
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e1bc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb81
push ecx
push edx
call fcn.10036bea
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x16c]
cmp ecx, 8
jb 0x1000e20a
mov edx, dword [ebp - 0x180]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e200
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb81
push ecx
push edx
call fcn.10036bea
add esp, 8
push 2
mov edx, 0x10073ba0
lea ecx, [ebp - 0x180]
call fcn.10002170
push 0x1006b37c
mov edx, eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x164]
call fcn.1000b280
mov esi, eax
add esp, 8
lea eax, [ebp - 0x88]
cmp eax, esi
je 0x1000e2a5
mov ecx, dword [ebp - 0x74]
cmp ecx, 8
jb 0x1000e27e
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e274
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb86
push ecx
push edx
call fcn.10036bea
add esp, 8
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x88], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x78], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ecx, dword [ebp - 0x150]
cmp ecx, 8
jb 0x1000e2e5
mov edx, dword [ebp - 0x164]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e2db
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb86
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 7
mov word [ebp - 0x164], ax
cmp ecx, 8
jb 0x1000e346
mov edx, dword [ebp - 0x180]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e33c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb86
push ecx
push edx
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x30]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 1
jb 0x1000eb8b
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
lea edx, [ecx + 1]
mov dword [ebp - 0x118], 0
cmovae eax, dword [ebp - 0x40]
lea edi, [ebp - 0x128]
mov esi, 7
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x114], 0
xorps xmm0, xmm0
mov dword [ebp - 0x12c], edx
movups xmmword [ebp - 0x128], xmm0
cmp edx, esi
jbe 0x1000e438
mov esi, edx
or esi, 7
cmp esi, 0x7ffffffe
jbe 0x1000e3bf
mov eax, 0x7fffffff
mov esi, 0x7ffffffe
add eax, eax
jmp 0x1000e3e0
mov eax, 0xa
cmp esi, eax
cmovb esi, eax
lea eax, [esi + 1]
cmp eax, 0x7fffffff
ja 0x1000eb90
add eax, eax
cmp eax, 0x1000
jb 0x1000e410
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x1000eb90
push ecx
call fcn.10036c1b
add esp, 4
test eax, eax
je 0x1000eb95
mov ecx, dword [ebp - 0x30]
lea edi, [eax + 0x23]
mov edx, dword [ebp - 0x12c]
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000e42c
test eax, eax
je 0x1000e42a
push eax
call fcn.10036c1b
mov ecx, dword [ebp - 0x30]
add esp, 4
mov edx, dword [ebp - 0x12c]
mov edi, eax
jmp 0x1000e42c
xor edi, edi
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x128], edi
mov dword [ebp - 0x114], esi
lea esi, [ecx + ecx]
push esi
push eax
push edi
mov dword [ebp - 0x118], edx
call fcn.100383a0
mov eax, 0x20
xor ecx, ecx
mov word [esi + edi], ax
add esp, 0xc
mov eax, dword [ebp - 0x12c]
mov word [edi + eax*2], cx
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x58]
cmp dword [ebp - 0x44], 8
mov ecx, dword [ebp - 0x118]
cmovae edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x114]
mov edi, dword [ebp - 0x48]
sub eax, ecx
mov dword [ebp - 0x148], ecx
cmp edi, eax
ja 0x1000e4d5
cmp dword [ebp - 0x114], 8
lea eax, [ecx + edi]
lea esi, [ebp - 0x128]
mov dword [ebp - 0x118], eax
cmovae esi, dword [ebp - 0x128]
lea eax, [edi + edi]
push eax
push edx
lea ecx, [esi + ecx*2]
push ecx
call fcn.100383a0
mov eax, dword [ebp - 0x148]
add esp, 0xc
add eax, edi
xor ecx, ecx
mov word [esi + eax*2], cx
lea eax, [ebp - 0x128]
jmp 0x1000e4f0
push edi
push edx
mov byte [ebp - 0x148], 0
lea ecx, [ebp - 0x128]
push dword [ebp - 0x148]
push edi
call fcn.1000cea0
mov dword [ebp - 0x134], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x144], xmm0
mov dword [ebp - 0x130], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x144], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x134], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
push 0x1006b37c
lea edx, [ebp - 0x144]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x164]
call fcn.1000b280
mov esi, eax
add esp, 4
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x1000e5ca
mov ecx, dword [ebp - 0x14]
cmp ecx, 8
jb 0x1000e598
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e58e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb95
push ecx
push edx
call fcn.10036bea
add esp, 8
mov dword [ebp - 0x18], 0
xor eax, eax
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ecx, dword [ebp - 0x150]
cmp ecx, 8
jb 0x1000e60a
mov edx, dword [ebp - 0x164]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e600
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb95
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x130]
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 7
mov word [ebp - 0x164], ax
cmp ecx, 8
jb 0x1000e66b
mov edx, dword [ebp - 0x144]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e661
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb95
push ecx
push edx
call fcn.10036bea
add esp, 8
xor eax, eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 7
mov word [ebp - 0x144], ax
cmp ecx, 8
jb 0x1000e6cc
mov edx, dword [ebp - 0x128]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e6c2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb95
push ecx
push edx
call fcn.10036bea
add esp, 8
cmp dword [ebp - 0x14], 8
lea esi, [ebp - 0x28]
cmovae esi, dword [ebp - 0x28]
cmp dword [ebp - 0x168], 0
jne 0x1000e858
sub esp, 0x18
lea eax, [ebp - 0x58]
mov ecx, esp
push eax
call fcn.10007e60
call fcn.1000d080
add esp, 0x18
cmp eax, 1
jg 0x1000e89f
jne 0x1000e858
mov ecx, dword [ebp - 0x14]
cmp ecx, 8
jb 0x1000e743
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e739
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x74]
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp ecx, 8
jb 0x1000e794
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e78a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x44]
cmp ecx, 8
jb 0x1000e7ce
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e7c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x1000e814
lea ecx, [eax*2 + 2]
mov eax, dword [ebp - 0x40]
mov edx, eax
cmp ecx, 0x1000
jb 0x1000e80a
mov eax, dword [edx - 4]
add ecx, 0x23
sub edx, eax
mov dword [ebp - 0x12c], eax
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x1000eb68
mov eax, dword [ebp - 0x12c]
push ecx
push eax
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x5c]
cmp ecx, 8
jb 0x1000e84e
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e844
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov eax, 1
jmp 0x1000d630
push 0x44
lea eax, [ebp - 0xf8]
xorps xmm0, xmm0
push 0
push eax
movups xmmword [ebp - 0x110], xmm0
call fcn.10038920
add esp, 0xc
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0xf8]
push eax
push 0
push 0
push 0x8000000
push 0
push 0
push 0
push esi
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x1000e8a7
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push dword [ebp - 0x110]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [ebp - 0x10c]
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp - 0x14c]
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
push 0
push esi
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push esi
call edi
mov ecx, dword [ebp - 0x14]
cmp ecx, 8
jb 0x1000e920
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e916
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x74]
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp ecx, 8
jb 0x1000e971
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e967
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov eax, dword [ebp - 0x44]
cmp eax, 8
jb 0x1000e9ab
mov edx, dword [ebp - 0x58]
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000e9a1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x1000e9f1
lea ecx, [eax*2 + 2]
mov eax, dword [ebp - 0x40]
mov edx, eax
cmp ecx, 0x1000
jb 0x1000e9e7
mov eax, dword [edx - 4]
add ecx, 0x23
sub edx, eax
mov dword [ebp - 0x12c], eax
lea eax, [edx - 4]
cmp eax, 0x1f
ja 0x1000eb68
mov eax, dword [ebp - 0x12c]
push ecx
push eax
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x5c]
cmp ecx, 8
jb 0x1000e84e
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000ea25
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov eax, 1
jmp 0x1000d630
mov ecx, dword [ebp - 0x14]
cmp ecx, 8
jb 0x1000ea73
mov edx, dword [ebp - 0x28]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000ea69
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x74]
xor eax, eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp ecx, 8
jb 0x1000eac4
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000eaba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x44]
cmp ecx, 8
jb 0x1000eafa
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000eaf0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x2c]
cmp ecx, 8
jb 0x1000eb30
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000eb26
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000eb68
push ecx
push edx
call fcn.10036bea
add esp, 8
mov ecx, dword [ebp - 0x5c]
cmp ecx, 8
jb 0x1000d62e
mov edx, dword [ebp - 0x70]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d624
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000d624
call fcn.1003da55
call fcn.1003da55
call fcn.1003da55
call fcn.1003da55
call fcn.1003da55
call fcn.1003da55
call fcn.1003da55
call fcn.10001320
call fcn.10001250
call fcn.1003da55
int3