Function at 0x1003ea00
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
push esi
push edi
mov eax, 0xb0c7
mov word [ebp - 0xe0], ax
mov ecx, dword [0x100811b0]
mov edx, dword [0x100811b4]
mov dword [ebp - 0x150], edx
mov byte [ebp - 1], cl
xor eax, eax
mov dword [ebp - 0x2c], 0xdf
mov dword [ebp - 0x28], eax
mov ecx, dword [0x10081190]
mov dword [ebp - 0x24], ecx
mov edx, 0xb18f
mov word [ebp - 0x14], dx
movsx eax, word [0x10081180]
mov dword [ebp - 0x58], eax
mov ecx, dword [0x10081130]
mov edx, dword [0x10081134]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x18], ecx
mov eax, 0xf0
mov word [ebp - 0x40], ax
mov dword [ebp - 0x7c], 0xd8409223
mov ecx, dword [0x100811a4]
xor edx, edx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
xor eax, eax
mov dword [ebp - 0x68], 0x2e4e1313
mov dword [ebp - 0x64], eax
mov cl, byte [0x10081140]
mov byte [ebp - 3], cl
mov edx, dword [0x10081168]
mov eax, dword [0x1008116c]
mov dword [ebp - 0x154], eax
mov byte [ebp - 2], dl
mov ecx, 0xf559
mov word [ebp - 0x20], cx
mov dl, byte [0x10081170]
mov byte [ebp - 0xd], dl
mov al, byte [0x10081063]
mov byte [ebp - 4], al
movsx eax, word [0x100811b8]
cdq
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0x44], 0x479c7c2b
mov dword [ebp - 0x34], 0x9e
mov ecx, dword [0x100811e8]
mov edx, dword [0x100811ec]
mov dword [ebp - 0x158], edx
mov byte [ebp - 0xe], cl
mov eax, dword [0x10081100]
mov ecx, dword [0x10081104]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
mov edx, 0xffffc7c3
mov word [ebp - 0x3c], dx
mov eax, dword [0x100811e8]
mov ecx, dword [0x100811ec]
mov dword [ebp - 0x160], ecx
mov word [ebp - 0x30], ax
mov byte [ebp - 0x19], 0xf
mov dl, byte [0x100811a4]
mov byte [ebp - 0x35], dl
xor eax, eax
mov dword [ebp - 0x17c], 0xb24c160a
mov dword [ebp - 0x178], eax
mov ecx, 0xca5c9
mov dword [ebp - 0x184], 0x2d73a664
mov dword [ebp - 0x180], ecx
mov eax, dword [0x100811ac]
cdq
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], edx
mov dword [ebp - 0x148], 0x6587
mov dl, byte [0x100811a4]
mov byte [ebp - 0x36], dl
mov eax, dword [0x10081198]
mov ecx, dword [0x1008119c]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x190], ecx
movsx eax, word [0x10081184]
cdq
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], edx
movzx dx, byte [0x10081063]
mov word [ebp - 0xf0], dx
movzx eax, byte [0x10081027]
cdq
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], edx
movsx eax, word [0x1008115c]
mov dword [ebp - 0x164], eax
mov cx, word [0x100811a0]
mov word [ebp - 0xe8], cx
mov byte [ebp - 0x37], 0xbb
mov dword [ebp - 0x168], 0xac19
mov edx, 0xd1
mov word [ebp - 0xe4], dx
mov eax, dword [0x1008110c]
add eax, dword [0x100811ac]
mov dword [0x1008110c], eax
mov ecx, dword [0x10081178]
mov edx, dword [0x1008117c]
mov dword [ebp - 0x16c], edx
add ecx, 0xb040dca
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x220], 0x44
push 0x40
push 0
lea eax, [ebp - 0x21c]
push eax
call fcn.1005bc20
add esp, 0xc
movzx ecx, byte [0x1008104f]
cmp dword [ebp - 0x44], ecx
jae 0x1003eec2
mov edx, dword [0x10081150]
mov eax, dword [0x10081154]
mov ecx, dword [ebp - 0x18]
xor esi, esi
mov dword [ebp - 0xf8], edx
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x100], esi
mov edx, dword [ebp - 0xf8]
cmp edx, dword [ebp - 0x104]
jne 0x1003ee94
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x100]
jne 0x1003ee94
mov byte [0x1008108b], 3
movsx ecx, byte [ebp - 1]
movsx edx, word [0x100811a0]
add ecx, edx
movsx eax, byte [ebp - 1]
sub eax, ecx
mov byte [ebp - 1], al
cmp dword [0x100811f0], 0
jne 0x1003ecdf
mov dword [ebp - 0x6c], 1
jmp 0x1003ece6
mov dword [ebp - 0x6c], 0
movzx ecx, byte [ebp - 4]
and ecx, dword [ebp - 0x44]
imul ecx, dword [ebp - 0x6c]
test ecx, ecx
jne 0x1003ecfe
mov dword [ebp - 0x70], 1
jmp 0x1003ed05
mov dword [ebp - 0x70], 0
cmp dword [0x10081170], 0
jne 0x1003ed17
mov dword [ebp - 0x74], 1
jmp 0x1003ed1e
mov dword [ebp - 0x74], 0
mov edx, dword [ebp - 0x70]
xor edx, dword [ebp - 0x74]
mov word [0x100811d8], dx
movsx eax, byte [0x1008108b]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
ja case.default.0x1003ed42
mov ecx, dword [ebp - 0x78]
jmp dword [ecx*4 + 0x1003f75c]
movsx edx, byte [str.Failedtogetdatabas]
movzx eax, byte [0x1008104f]
imul edx, eax
mov byte [str.Failedtogetdatabas], dl
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov dword [0x10081148], ecx
mov dword [0x1008114c], edx
jmp case.default.0x1003ed42
mov eax, dword [ebp - 0x34]
mov ecx, dword [0x100811e8]
mov edx, dword [0x100811ec]
mov dword [ebp - 0x170], edx
add eax, ecx
mov ecx, dword [ebp - 0x34]
sub ecx, eax
mov dword [ebp - 0x34], ecx
cmp dword [0x1008110c], 0
je 0x1003edb8
mov edx, dword [str.5U_]
mov eax, dword [0x100811c4]
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0xd0], eax
jmp 0x1003edcc
movzx eax, word [0x100811a8]
cdq
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], edx
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x24], ecx
jmp case.default.0x1003ed42
mov edx, 0xffffe2ed
mov word [0x10081110], dx
mov eax, dword [ebp - 0x68]
or eax, dword [ebp - 0x64]
je 0x1003ee04
movzx eax, byte [0x1008108a]
cdq
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], edx
jmp 0x1003ee1c
mov ecx, dword [0x10081118]
mov edx, dword [0x1008111c]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xc0], edx
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xc0]
mov dword [0x10081118], eax
mov dword [0x1008111c], ecx
mov edx, 0xcb8
mov word [0x1008115c], dx
jmp case.default.0x1003ed42
movzx eax, word [0x10081158]
imul ecx, eax, 0xdb
mov byte [ebp - 3], cl
mov edx, dword [0x10081120]
sub edx, 1
mov eax, dword [0x10081124]
sbb eax, 0
mov dword [0x10081120], edx
mov dword [0x10081124], eax
movzx ecx, byte [ebp - 2]
not ecx
sub ecx, 0xce
movzx edx, byte [ebp - 2]
sub edx, dword [0x100811f0]
sub ecx, edx
xor eax, eax
mov dword [0x10081130], ecx
mov dword [0x10081134], eax
jmp 0x1003eec0
mov ecx, dword [0x10081cb8]
mov dword [ebp - 0x7c], ecx
mov eax, dword [ebp - 0x24]
cdq
mov ecx, dword [ebp - 0xc]
mov esi, dword [ebp - 8]
sub ecx, eax
sbb esi, edx
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
push esi
push ecx
push eax
push edx
call fcn.1005a880
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], edx
jmp 0x1003ef13
mov ecx, dword [ebp - 0x60]
or ecx, dword [ebp - 0x5c]
je 0x1003ef13
mov edx, 0xb9db
test edx, edx
je 0x1003ef13
mov eax, dword [str.5U_]
mov edx, dword [0x100811c4]
mov cl, 7
call fcn.1005a8c0
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xcc]
mov edx, dword [ebp - 0xc8]
mov cl, 8
call fcn.1005a8c0
mov word [0x100811b8], ax
movsx eax, byte [ebp - 0xd]
add eax, 0x3f91d2e5
mov word [0x100811e0], ax
movzx ecx, byte [0x1008108a]
cmp dword [ebp - 0x24], ecx
jne 0x1003ef4f
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x1003ef4a
mov edx, dword [ebp - 0x80]
push edx
call dword [sym.imp.USER32.dll_GetMenu]
mov dword [ebp - 0x174], eax
call dword [sym.imp.USER32.dll_EndMenu]
mov dword [ebp - 0x130], eax
jmp 0x1003f017
movzx eax, word [ebp - 0x14]
test eax, eax
jne 0x1003ef63
mov dword [ebp - 0x84], 1
jmp 0x1003ef6d
mov dword [ebp - 0x84], 0
mov eax, dword [0x100811ac]
cdq
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x108], edx
mov ecx, dword [0x1008119c]
cmp ecx, dword [ebp - 0x108]
jl 0x1003efa9
jg 0x1003ef9d
mov edx, dword [0x10081198]
cmp edx, dword [ebp - 0x10c]
jbe 0x1003efa9
mov dword [ebp - 0x88], 1
jmp 0x1003efb3
mov dword [ebp - 0x88], 0
movsx eax, word [0x10081110]
imul eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x88]
jl 0x1003f017
mov ecx, 1
imul edx, ecx, 0x23a9
movsx eax, byte [edx + 0x100ad5e8]
movsx ecx, word [0x100811e0]
sub ecx, eax
mov word [0x100811e0], cx
xor edx, edx
mov dword [0x100811d0], 0x5bf14a57
mov dword [0x100811d4], edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
push 0
push 0x67e8d15b
push ecx
push eax
call fcn.1005a880
mov word [0x10081140], ax
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x220]
push eax
push 0
push 0
push 0x8000000
push 0
push 0
push 0
push str.cmd.exe__C_echo_HiddenProcess
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0xec], eax
push 0
push 0xa2
push 0
movzx ecx, byte [0x10081110]
push ecx
push 0
push 0
push 0
call fcn.100350d0
add esp, 0x1c
movzx edx, al
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], 0
je 0x1003f07e
mov dword [ebp - 0x8c], 1
jmp 0x1003f088
mov dword [ebp - 0x8c], 0
cmp dword [ebp - 0x18], 0x2d
je 0x1003f09a
mov dword [ebp - 0x90], 1
jmp 0x1003f0a4
mov dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x90]
je 0x1003f172
movzx ecx, word [ebp - 0x30]
cmp ecx, dword [0x10081138]
je 0x1003f0ce
mov dword [ebp - 0x94], 1
jmp 0x1003f0d8
mov dword [ebp - 0x94], 0
cmp dword [0x100811ac], 0
je 0x1003f0f3
cmp dword [ebp - 0x24], 0
je 0x1003f0f3
mov dword [ebp - 0x98], 1
jmp 0x1003f0fd
mov dword [ebp - 0x98], 0
mov edx, dword [ebp - 0x94]
cmp edx, dword [ebp - 0x98]
je 0x1003f12a
movzx eax, word [ebp - 0x14]
sar eax, 8
cdq
mov dword [0x10081128], eax
mov dword [0x1008112c], edx
mov eax, dword [0x10081cb8]
mov dword [0x100811ac], eax
jmp 0x1003f170
movsx eax, word [0x100811dc]
shl eax, 3
cdq
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edx
movsx ecx, word [0x10081110]
imul edx, ecx, 0xd4
mov byte [ebp - 2], dl
movsx eax, byte [str.Failedtogetdatabas]
cdq
mov ecx, eax
add ecx, dword [0x10081198]
movsx eax, byte [str.Failedtogetdatabas]
cdq
sub eax, ecx
mov byte [str.Failedtogetdatabas], al
jmp 0x1003f1d6
movsx edx, byte [0x1008103b]
not edx
movsx eax, byte [0x1008108b]
cmp edx, eax
jg 0x1003f192
mov dword [ebp - 0x9c], 1
jmp 0x1003f19c
mov dword [ebp - 0x9c], 0
mov ecx, dword [ebp - 0x9c]
not ecx
test ecx, ecx
je 0x1003f1d6
mov dword [ebp - 0x24], 0xa
mov edx, dword [0x10081170]
xor eax, eax
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
push eax
push edx
push esi
push ecx
call fcn.1005a880
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
add ecx, eax
adc esi, edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0xec], 0
je 0x1003f755
movzx edx, word [ebp - 0x14]
test edx, edx
je 0x1003f1f7
movsx eax, byte [ebp - 3]
mov dword [ebp - 0xa0], eax
jmp 0x1003f204
movsx ecx, word [0x10081184]
mov dword [ebp - 0xa0], ecx
mov dx, word [ebp - 0xa0]
mov word [0x100811e0], dx
mov eax, dword [0x10081150]
mov ecx, dword [0x10081154]
not eax
not ecx
push ecx
push eax
mov edx, dword [0x1008119c]
push edx
mov eax, dword [0x10081198]
push eax
call fcn.1005a880
mov ecx, dword [0x100811d0]
mov esi, dword [0x100811d4]
push edx
push eax
push esi
push ecx
call fcn.1005a880
mov word [0x10081180], ax
movzx eax, word [ebp - 0x20]
cdq
add eax, 0x38dbdd71
mov word [ebp - 0x14], ax
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x1003f28d
mov edx, dword [ebp - 0x48]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x48]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [ebp - 0x138], eax
mov ecx, dword [0x10081188]
mov edx, dword [0x1008118c]
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x110], edx
cmp dword [ebp - 0x110], 0
jl 0x1003f2ce
jg 0x1003f2b9
cmp dword [ebp - 0x114], 0
jb 0x1003f2ce
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov ecx, dword [0x10081cb8]
mov dword [ebp - 0x18], ecx
jmp 0x1003f318
cmp dword [ebp - 0x18], 0
je 0x1003f318
mov edx, dword [0x10081198]
add edx, 1
mov eax, dword [0x1008119c]
adc eax, 0
mov dword [0x10081198], edx
mov dword [0x1008119c], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov cl, 3
call fcn.1005a8c0
mov dword [0x100811ac], eax
movzx ecx, byte [0x1008108a]
movsx edx, word [0x100811dc]
and ecx, edx
mov byte [0x1008108a], cl
mov eax, dword [0x10081cb8]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x4c], 0
jmp 0x1003f332
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 0x382
jge 0x1003f37c
mov ecx, 9
mov esi, str.AslpEnvResolveVars
lea edi, [ebp - 0x1dc]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea edx, [ebp - 0x1dc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cdq
mov dword [0x100811d0], eax
mov dword [0x100811d4], edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
add eax, 1
adc ecx, 0
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], ecx
jmp 0x1003f329
mov edx, dword [ebp - 0x54]
add edx, 0x555
mov dword [ebp - 0xfc], edx
movzx eax, word [ebp - 0x20]
add eax, 0xfd1a
mov byte [0x1008108a], al
movzx eax, word [0x10081158]
movsx ecx, byte [ebp - 0xd]
sub eax, ecx
not eax
cdq
mov ecx, eax
mov esi, edx
movzx eax, byte [ebp - 4]
cdq
sub eax, dword [ebp - 0x68]
sbb edx, dword [ebp - 0x64]
push edx
push eax
push esi
push ecx
call fcn.1005a880
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x54]
add edx, 0x5c8
mov dword [ebp - 0xac], edx
mov dword [ebp - 0x50], 0
jmp 0x1003f3e5
mov eax, dword [ebp - 0x50]
add eax, 2
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x56
jge 0x1003f4aa
push 0
push 0
push 0
push 0xd6
movsx eax, word [ebp - 0x3c]
cdq
push edx
push eax
push 0
push 0x63
mov ecx, dword [ebp - 0x5c]
push ecx
mov edx, dword [ebp - 0x60]
push edx
movsx eax, word [ebp - 0x40]
cdq
push edx
push eax
push 0
push 0x19
call fcn.10035970
add esp, 0x38
mov dword [0x10081108], eax
cmp dword [0x10081108], 0
je 0x1003f43a
mov dword [ebp - 0xa4], 1
jmp 0x1003f444
mov dword [ebp - 0xa4], 0
cmp dword [0x10081108], 0x20
je 0x1003f459
mov dword [ebp - 0xa8], 1
jmp 0x1003f463
mov dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xa8]
jle 0x1003f493
mov ecx, dword [0x10081cb8]
mov dword [ebp - 0x58], ecx
movzx edx, byte [ebp - 0x19]
imul eax, edx, 0xf5
movsx ecx, byte [0x1008108b]
add ecx, eax
mov byte [0x1008108b], cl
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
add edx, 1
adc eax, 0
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], eax
jmp 0x1003f3dc
mov ecx, dword [ebp - 0x54]
add ecx, 0x4de
mov dword [ebp - 0x13c], ecx
push 0
push 0xea
push 0
push 0
mov edx, dword [0x1008114c]
push edx
mov eax, dword [0x10081148]
push eax
push 0
push 0xf3
call fcn.10037680
add esp, 0x20
mov byte [0x10081063], al
movzx ecx, byte [0x10081063]
test ecx, ecx
jg 0x1003f510
movzx edx, word [ebp - 0x20]
movsx eax, word [0x100811dc]
not eax
lea eax, [edx + eax - 0x8f]
cdq
mov dword [0x10081100], eax
mov dword [0x10081104], edx
mov ecx, dword [ebp - 0xac]
sub ecx, dword [ebp - 0xfc]
cmp dword [ebp - 0xac], ecx
je 0x1003f755
cmp dword [ebp - 0x18], 0
jne 0x1003f53a
mov dword [ebp - 0xb0], 1
jmp 0x1003f544
mov dword [ebp - 0xb0], 0
mov edx, dword [ebp - 0xb0]
cmp edx, dword [0x100811a4]
ja 0x1003f55e
mov dword [ebp - 0xb4], 1
jmp 0x1003f568
mov dword [ebp - 0xb4], 0
mov eax, dword [0x100811e8]
mov ecx, dword [0x100811ec]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], ecx
cmp dword [ebp - 0x118], 0
jl 0x1003f59f
jg 0x1003f593
cmp dword [ebp - 0x11c], 0x38
jb 0x1003f59f
mov dword [ebp - 0xb8], 1
jmp 0x1003f5a9
mov dword [ebp - 0xb8], 0
mov edx, dword [ebp - 0xb4]
cmp edx, dword [ebp - 0xb8]
jl 0x1003f679
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
movsx eax, byte [ebp - 0xe]
cdq
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], edx
mov edx, dword [ebp - 0x120]
cmp edx, dword [ebp - 0x128]
jb 0x1003f608
ja 0x1003f5fc
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x12c]
jbe 0x1003f608
mov dword [ebp - 0xbc], 1
jmp 0x1003f612
mov dword [ebp - 0xbc], 0
movsx ecx, word [0x100811b8]
movzx edx, word [ebp - 0x30]
not edx
add ecx, edx
cmp dword [ebp - 0xbc], ecx
jg 0x1003f679
cmp dword [0x100811c8], 0
je 0x1003f651
mov eax, dword [0x10081cb8]
mov dword [ebp - 0x58], eax
mov eax, dword [0x10081178]
mov edx, dword [0x1008117c]
mov cl, 5
call fcn.1005a990
mov byte [ebp - 0xe], al
jmp 0x1003f677
mov cl, byte [0x10081063]
sub cl, 1
mov byte [0x10081063], cl
imul edx, dword [0x10081108], 0xdf36b066
mov dword [ebp - 0x18], edx
mov dword [0x1008113c], 0x6384036
jmp 0x1003f6c7
movsx eax, byte [ebp - 1]
add eax, 0xd5
cdq
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], edx
movsx eax, byte [ebp - 3]
test eax, eax
je 0x1003f6ab
mov ecx, dword [0x100810f8]
mov edx, dword [0x100810fc]
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xd8], edx
jmp 0x1003f6bc
movzx eax, byte [ebp - 4]
cdq
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], edx
mov ax, word [ebp - 0xdc]
mov word [ebp - 0x14], ax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x140], edx
add ecx, 0x21
movsx eax, word [0x10081110]
cdq
sub eax, ecx
mov word [0x10081110], ax
mov eax, dword [0x10081138]
add eax, 0xa0
cdq
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x15c], edx
sub ecx, dword [0x10081198]
not ecx
sub eax, ecx
mov word [0x100811d8], ax
mov eax, dword [ebp - 0x1b4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10081178]
mov edx, dword [0x1008117c]
mov dword [ebp - 0x144], edx
sub ecx, 0xffff2ebf
not ecx
mov dword [ebp - 0x58], ecx
mov eax, 0xffffe12b
mov word [0x1008115c], ax
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x1b0]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
mov esp, ebp
pop ebp
ret