Function at 0x100331bc
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10074b21
mov eax, dword fs:[0]
push eax
sub esp, 0x654
mov eax, dword [0x1044a964]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x604], 0
xor eax, eax
test eax, eax
je 0x10032af1
jne 0x10032af0
call 0x93071b78
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
dec ebp
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10032aff
jmp 0x10032b01
je 0x10032afc
clc
jae 0x10032b06
and dword [ebp + 0x35], ecx
add dword cs:[eax], eax
add byte [ebx], dh
rol byte [ebx], 1
ret 0xea81
xor eax, 0x12e
xor edx, eax
add eax, edx
sub edx, 0x12e
push eax
pop edx
xor edx, 0x38a
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x12e
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x10032b4e
jmp 0x10032b49
call 0x10032b50
jae 0x10032b49
add esp, 4
jmp 0x10032b55
dec dword [esp]
jno 0x10032b5a
jns 0x10032b45
jp 0x10032b5e
add esp, 4
popf
jmp 0x10032b65
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10032b7e
jne 0x10032b7e
call 0x1fc35ed2
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x10032b94
mov al, 0x66
pushfd
pushf
push 0xa
jae 0x10032ba1
jmp 0x10032b9c
call 0x10032ba3
jae 0x10032b9c
add esp, 4
jmp 0x10032ba8
dec dword [esp]
jno 0x10032bad
jns 0x10032b98
jp 0x10032bb1
add esp, 4
popf
jmp 0x10032bb8
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x12f
xor edx, eax
add eax, edx
sub edx, 0x12f
push eax
pop edx
xor edx, 0x38d
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x12f
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x10032c0c
jmp 0x10032c0e
je 0x10032c09
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10032c28
jne 0x10032c27
call 0x93071caf
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10032c36
jne 0x10032c36
call 0xadfb200
invalid
mov byte [ebp - 0x524], 0x6d
mov byte [ebp - 0x523], 0x31
mov byte [ebp - 0x522], 0x37
mov byte [ebp - 0x521], 0
lea eax, [ebp - 0x524]
push eax
lea ecx, [ebp - 0x660]
call fcn.100036a0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x660]
push ecx
push 0x103dc860
lea edx, [ebp - 0x544]
push edx
call fcn.10033b70
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x660]
call fcn.100037b0
xor eax, eax
test eax, eax
je 0x10032c9e
jne 0x10032c9d
call 0x93071d25
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
dec ebp
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10032cac
jmp 0x10032cae
je 0x10032ca9
clc
jae 0x10032cb3
cmp byte [ebp + 0x35], cl
aas
add dword [eax], eax
add byte [ebx], dh
rol byte [ebx], 1
ret 0xea81
xor eax, 0x13f
xor edx, eax
add eax, edx
sub edx, 0x13f
push eax
pop edx
xor edx, 0x3bd
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x13f
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x10032cfb
jmp 0x10032cf6
call 0x10032cfd
jae 0x10032cf6
add esp, 4
jmp 0x10032d02
dec dword [esp]
jno 0x10032d07
jns 0x10032cf2
jp 0x10032d0b
add esp, 4
popf
jmp 0x10032d12
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10032d2b
jne 0x10032d2b
call 0x1fc3607f
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x10032d41
or byte [ebx], cl
pushf
push 0xa
jae 0x10032d4e
jmp 0x10032d49
call 0x10032d50
jae 0x10032d49
add esp, 4
jmp 0x10032d55
dec dword [esp]
jno 0x10032d5a
jns 0x10032d45
jp 0x10032d5e
add esp, 4
popf
jmp 0x10032d65
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x140
xor edx, eax
add eax, edx
sub edx, 0x140
push eax
pop edx
xor edx, 0x3c0
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x140
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x10032db9
jmp 0x10032dbb
je 0x10032db6
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10032dd5
jne 0x10032dd4
call 0x93071e5c
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10032de3
jne 0x10032de3
call 0x17969a4f
adc byte [ebp - 0x5437b], cl
call dword [eax - 0x18]
cld
invalid
push 0x1007936c
lea eax, [ebp - 0x544]
push eax
call fcn.100290f0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x10032e15
mov edx, dword [ebp + 8]
push edx
call fcn.10041dc0
add esp, 4
push 0x90
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
test eax, eax
je 0x10032e1e
jne 0x10032e1d
call 0x93071ea5
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
add byte [ebx + edi*8 - 8], dh
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10032e2c
jmp 0x10032e2e
je 0x10032e29
clc
jae 0x10032e33
add byte cs:[0x145], dh
xor eax, 0x145
xor edx, eax
add eax, edx
sub edx, 0x145
push eax
pop edx
xor edx, 0x3cf
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x145
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x10032e7b
jmp 0x10032e76
call 0x10032e7d
jae 0x10032e76
add esp, 4
jmp 0x10032e82
dec dword [esp]
jno 0x10032e87
jns 0x10032e72
jp 0x10032e8b
add esp, 4
popf
jmp 0x10032e92
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10032eab
jne 0x10032eab
call 0x1fc361ff
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x10032ec1
add esp, dword [ebx + 0x66]
pushfd
pushf
push 0xa
jae 0x10032ece
jmp 0x10032ec9
call 0x10032ed0
jae 0x10032ec9
add esp, 4
jmp 0x10032ed5
dec dword [esp]
jno 0x10032eda
jns 0x10032ec5
jp 0x10032ede
add esp, 4
popf
jmp 0x10032ee5
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x146
xor edx, eax
add eax, edx
sub edx, 0x146
push eax
pop edx
xor edx, 0x3d2
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x146
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x10032f39
jmp 0x10032f3b
je 0x10032f36
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10032f55
jne 0x10032f54
call 0x93071fdc
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x10032f63
jne 0x10032f63
call 0x36eb2fd1
sbb byte [eax], al
add byte [ebx - 0x7a76fb3c], al
aam 0xfa
invalid
push 0
call fcn.10034790
add esp, 4
mov dword [ebp - 0x52c], eax
mov dword [ebp - 0x528], edx
lea eax, [ebp - 0x52c]
push eax
call 0x10034780
add esp, 4
mov ecx, 9
mov esi, eax
lea edi, [ebp - 0x628]
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x3c], 0x25
mov byte [ebp - 0x3b], 0x30
mov byte [ebp - 0x3a], 0x32
mov byte [ebp - 0x39], 0x64
mov byte [ebp - 0x38], 0x3a
mov byte [ebp - 0x37], 0x25
mov byte [ebp - 0x36], 0x30
mov byte [ebp - 0x35], 0x32
mov byte [ebp - 0x34], 0x64
mov byte [ebp - 0x33], 0x3a
mov byte [ebp - 0x32], 0x25
mov byte [ebp - 0x31], 0x30
mov byte [ebp - 0x30], 0x32
mov byte [ebp - 0x2f], 0x64
mov byte [ebp - 0x2e], 0x20
mov byte [ebp - 0x2d], 0x2d
mov byte [ebp - 0x2c], 0x20
mov byte [ebp - 0x2b], 0x25
mov byte [ebp - 0x2a], 0x30
mov byte [ebp - 0x29], 0x32
mov byte [ebp - 0x28], 0x64
mov byte [ebp - 0x27], 0x3a
mov byte [ebp - 0x26], 0x25
mov byte [ebp - 0x25], 0x30
mov byte [ebp - 0x24], 0x32
mov byte [ebp - 0x23], 0x64
mov byte [ebp - 0x22], 0x3a
mov byte [ebp - 0x21], 0x25
mov byte [ebp - 0x20], 0x64
mov byte [ebp - 0x1f], 0x20
mov byte [ebp - 0x1e], 0x3a
mov byte [ebp - 0x1d], 0x20
mov byte [ebp - 0x1c], 0
mov ecx, dword [ebp - 0x614]
add ecx, 0x76c
push ecx
mov edx, dword [ebp - 0x618]
add edx, 1
push edx
mov eax, dword [ebp - 0x61c]
push eax
mov ecx, dword [ebp - 0x628]
push ecx
mov edx, dword [ebp - 0x624]
push edx
mov eax, dword [ebp - 0x620]
push eax
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x520]
push edx
call fcn.1000de50
add esp, 0x20
mov byte [ebp - 0x18], 0x6f
mov byte [ebp - 0x17], 0x70
mov byte [ebp - 0x16], 0x65
mov byte [ebp - 0x15], 0x6e
mov byte [ebp - 0x14], 0
push 0xb0
lea ecx, [ebp - 0x5f4]
call fcn.1000fc10
mov eax, 0x9927f350
push eax
lea ecx, [ebp - 0x638]
call fcn.100293c0
mov dword [ebp - 0x5f8], eax
mov ecx, dword [ebp - 0x5f8]
mov dword [ebp - 0x5fc], ecx
mov byte [ebp - 4], 3
push 1
push 0x40
push 8
mov edx, dword [ebp - 0x5fc]
push edx
lea ecx, [ebp - 0x5f4]
call fcn.10006150
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x638]
call fcn.10029a20
lea eax, [ebp - 0x520]
push eax
lea ecx, [ebp - 0x5f4]
push ecx
call fcn.10005550
add esp, 8
mov edx, dword [ebp + 8]
push edx
push eax
call fcn.10005550
add esp, 8
lea ecx, [ebp - 0x5f4]
call fcn.1000fca0
xor eax, eax
test eax, eax
je 0x1003310a
jne 0x10033109
call 0x93072191
rol byte [ebx + eax*4], 0xf0
add eax, 0x3eb037c
and dword [ebx + edi*8 - 8], esi
xor eax, 3
add eax, 4
xor eax, 5
jl 0x10033118
jmp 0x1003311a
je 0x10033115
clc
jae 0x1003311f
out 0x21, eax
xor eax, 0x158
xor edx, eax
add eax, edx
sub edx, 0x158
push eax
pop edx
xor edx, 0x408
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x158
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
pushf
push 0xa
jae 0x10033167
jmp 0x10033162
call 0x10033169
jae 0x10033162
add esp, 4
jmp 0x1003316e
dec dword [esp]
jno 0x10033173
jns 0x1003315e
jp 0x10033177
add esp, 4
popf
jmp 0x1003317e
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
je 0x10033197
jne 0x10033197
call 0x1fc364eb
wait
rcl byte [edx + 0x33], 0xd0
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
clc
jae 0x100331ad
mov esp, 0x6a9c6684
or dh, byte [ebx + 7]
pushf
push 0xa
jae 0x100331ba
jmp 0x100331b5
call 0x100331bc
jae 0x100331b5
add esp, 4
jmp 0x100331c1
dec dword [esp]
jno 0x100331c6
jns 0x100331b1
jp 0x100331ca
add esp, 4
popf
jmp 0x100331d1
push eax
push edx
xor edx, 0x90
push edx
sub edx, 0x80
pop eax
add eax, edx
pop edx
pop eax
xor eax, 0x159
xor edx, eax
add eax, edx
sub edx, 0x159
push eax
pop edx
xor edx, 0x40b
nop
nop
xor ecx, ecx
xor eax, eax
mov ecx, 0x159
add ecx, 3
sub ecx, eax
nop
push eax
pop ecx
xor eax, eax
nop
nop
push eax
xor eax, eax
pop eax
xor edx, edx
xor eax, edx
push ecx
pop ecx
xor eax, eax
nop
jl 0x10033225
jmp 0x10033227
je 0x10033222
push eax
xor eax, eax
setnp al
push edx
xor edx, eax
shl edx, 2
xchg edx, eax
pop edx
or eax, ecx
pop eax
xor eax, eax
test eax, eax
je 0x10033241
jne 0x10033240
call 0x930722c8
rol byte [ebx + eax*4], 0xf0
add eax, 0x1750374
xor eax, 3
add eax, 4
xor eax, 5
je 0x1003324f
jne 0x1003324f
call 0x54c30af4
adc byte [ebx - 0x275cfe40], al
mov edi, 0x3d831044
fdivr dword [edi + 0x73021044]
cmp edi, dword [ecx - 0x66d80cb0]
mov eax, dword [0x1044bfd8]
add eax, 1
mov dword [0x1044bfd8], eax
cmp dword [0x1044bfd8], 2
jae 0x100332a0
mov ecx, 0x9927f350
push ecx
lea ecx, [ebp - 0x648]
call fcn.100293c0
mov dword [ebp - 0x600], eax
push 5
push 0
push 0
mov edx, dword [ebp - 0x600]
push edx
lea eax, [ebp - 0x18]
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x648]
call fcn.10029a20
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5f4]
call fcn.100070b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x544]
call fcn.100037b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004ce42
mov esp, ebp
pop ebp
ret