Function at 0x10008c60
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10012fb1
mov eax, dword fs:[0]
push eax
sub esp, 0x114
push ebx
push esi
push edi
mov eax, dword [0x10024330]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x48], ecx
push str.LoadBannerOption_on.
push 1
mov dword [ebp - 4], 0
call fcn.1000c220
add esp, 8
call fcn.1000b280
cmp eax, 1
jne 0x10008cb5
xor edi, edi
jmp 0x1000a002
push 0x100156f0
mov ecx, 0x10024878
call dword [sym.imp.mfc140.dll_Ordinal_1529]
mov edi, dword [0x100248e4]
mov esi, dword [0x100248e0]
cmp esi, edi
je 0x10008cea
mov ecx, esi
call dword [sym.imp.mfc140.dll_Ordinal_1044]
add esi, 4
cmp esi, edi
jne 0x10008cd5
mov esi, dword [0x100248e0]
mov edi, dword [0x10024858]
mov dword [0x100248e4], esi
mov esi, dword [0x10024854]
cmp esi, edi
je 0x10008d15
mov ecx, esi
call dword [sym.imp.mfc140.dll_Ordinal_1044]
add esi, 4
cmp esi, edi
jne 0x10008d00
mov esi, dword [0x10024854]
mov edi, dword [0x1002486c]
mov dword [0x10024858], esi
mov esi, dword [0x10024868]
cmp esi, edi
je 0x10008d45
nop dword [eax + eax]
mov ecx, esi
call dword [sym.imp.mfc140.dll_Ordinal_1044]
add esi, 4
cmp esi, edi
jne 0x10008d30
mov esi, dword [0x10024868]
push 0x100156f0
mov ecx, 0x100248ec
mov dword [0x1002486c], esi
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push 0x100156f0
mov ecx, 0x100248a0
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push 0x100156f0
mov ecx, 0x100248f0
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push 0x100156f0
mov ecx, 0x1002489c
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push 0x100156f0
lea ecx, [ebp - 0x50]
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 0x100156f0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call dword [sym.imp.mfc140.dll_Ordinal_310]
xor ebx, ebx
mov byte [ebp - 4], 2
mov edi, 1
mov dword [ebp - 0x40], ebx
push 0x100156f0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x74], edi
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 0x100156f0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 0x100156f0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
mov dword [ebp - 0x78], ebx
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 0x100156f0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0x58], esp
push 0x100156f0
mov byte [ebp - 4], 6
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 7
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
mov byte [ebp - 4], 6
call fcn.1000bff0
add esp, 8
lea ecx, [ebp - 0x4c]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 0x100156f0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10009fc1
push 0x10016a80
lea ecx, [ebp - 0x4c]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10009fc1
mov eax, dword [ebp - 0x4c]
cmp dword [eax - 0xc], 3
jl 0x10009fc1
push str.OPTION.
push edi
call fcn.1000c220
add esp, 8
mov dword [ebp - 0x84], ebx
lea ecx, [ebp - 0x4c]
push ebx
call dword [sym.imp.mfc140.dll_Ordinal_5095]
lea ecx, [ebp - 0x84]
push ecx
push 0x10016a84
push eax
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbstok_s]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x10009c73
mov edi, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ebx, dword [ebp - 0x74]
lea ecx, [ebp - 0x10]
push esi
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 9
push dword [eax - 0xc]
lea eax, [ebp - 0xd8]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 3
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10017080
mov ecx, eax
mov byte [ebp - 4], 0xb
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10008fcf
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0xe0]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xc
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x5c]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push str.R::
push 1
mov byte [ebp - 4], 0xd
call fcn.1000c220
push dword [ebp - 0x5c]
push 1
call fcn.1000c220
add esp, 0x10
lea ecx, [ebp - 0x5c]
push 0x10016a80
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x10008fc7
mov eax, dword [ebp - 0x48]
push 1
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_KillTimer]
lea ecx, [ebp - 0x5c]
jmp 0x10009c33
push 3
lea eax, [ebp - 0xe4]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x100170b8
mov ecx, eax
mov byte [ebp - 4], 0xe
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10009080
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xf
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140.dll_Ordinal_14328]
push str.L::
push 1
call fcn.1000c220
push dword [ebp - 0x1c]
push 1
call fcn.1000c220
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
add esp, 0x10
cmp dword [eax - 0xc], 5
setge cl
mov dword [ebp - 0x44], ecx
jmp 0x10009c39
push 3
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x100170e0
mov ecx, eax
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10009134
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_1526]
push str.F::
push 1
call fcn.1000c220
push dword [ebp - 0x20]
push 1
call fcn.1000c220
mov eax, dword [ebp - 0x20]
add esp, 0x10
cmp dword [eax - 0xc], 5
jge 0x10009c39
push 0x100156f0
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_1529]
jmp 0x10009c39
push 3
lea eax, [ebp - 0x94]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x100170f4
mov ecx, eax
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x100091f8
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x13
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1526]
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x48]
mov edi, dword [eax - 0xc]
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x124]
call dword [sym.imp.mfc140.dll_Ordinal_1526]
push str.U::
push 1
call fcn.1000c220
push dword [esi + 0x124]
push 1
call fcn.1000c220
xor eax, eax
add esp, 0x10
cmp edi, 5
cmovge eax, ebx
mov dword [ebp - 0x74], eax
jmp 0x10009c39
push 2
lea eax, [ebp - 0x9c]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10017108
mov ecx, eax
mov byte [ebp - 4], 0x14
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10009427
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffc
push eax
lea eax, [ebp - 0xa0]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x15
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push 0x10016a80
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x100093ff
push 0x100156f0
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x100093ff
mov eax, dword [ebp - 0x28]
cmp dword [eax - 0xc], 3
jl 0x100093ff
push str.P0_
push 1
call fcn.1000c220
push dword [ebp - 0x28]
push 1
call fcn.1000c220
add esp, 0x10
lea ecx, [ebp - 0x60]
call dword [sym.imp.mfc140.dll_Ordinal_316]
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push 0x10016bc4
mov byte [ebp - 4], 0x17
call dword [sym.imp.mfc140.dll_Ordinal_310]
push esi
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x18
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x17
push eax
call fcn.1000afb0
add esp, 0xc
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x10016bc4
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 1
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x19
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x17
push eax
call fcn.1000afb0
add esp, 0xc
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x10016bc4
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 2
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x1a
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x17
push eax
call fcn.1000afb0
add esp, 0x10
lea ecx, [ebp - 0x60]
push 0x10016a80
call dword [sym.imp.mfc140.dll_Ordinal_2986]
neg eax
lea ecx, [ebp - 0x50]
push 0x10016a80
sbb eax, eax
neg eax
mov dword [0x10024830], eax
call dword [sym.imp.mfc140.dll_Ordinal_2986]
neg eax
lea ecx, [ebp - 0x30]
push 0x10016a80
sbb esi, esi
and esi, dword [ebp - 0x40]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
neg eax
sbb ebx, ebx
and ebx, esi
lea ecx, [ebp - 0x50]
push 0x100156f0
mov dword [ebp - 0x40], ebx
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x100093ee
push 0x100156f0
lea ecx, [ebp - 0x30]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x100093ee
mov eax, dword [ebp - 0x30]
cmp dword [eax - 0xc], 6
mov eax, 1
cmovg ebx, eax
mov dword [ebp - 0x40], ebx
lea ecx, [ebp - 0x60]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x28]
jmp 0x10009c33
push 0x1001710c
push 1
mov dword [ebp - 0x40], 0
call fcn.1000c220
push dword [ebp - 0x28]
push 1
call fcn.1000c220
add esp, 0x10
lea ecx, [ebp - 0x28]
jmp 0x10009c33
push 2
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10017180
mov ecx, eax
mov byte [ebp - 4], 0x1b
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x100095d5
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffc
push eax
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x54]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push dword [ebp - 0x54]
mov ebx, dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov byte [ebp - 4], 0x1d
call ebx
push str.P1_
push 1
mov dword [0x1002422c], eax
call fcn.1000c220
push dword [ebp - 0x54]
push 1
call fcn.1000c220
mov eax, dword [0x1002422c]
add esp, 0x14
dec eax
cmp eax, 0x21c09f
ja 0x100094f5
push dword [ebp - 0x54]
call ebx
add esp, 4
mov dword [0x1002422c], eax
lea ecx, [ebp - 0x54]
jmp 0x10009c33
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
add esp, 4
call edi
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0x37
jge 0x10009530
call edi
cdq
mov ecx, 0xd
idiv ecx
lea ecx, [ebp - 0x54]
inc edx
imul eax, edx, 0x64
mov dword [0x1002422c], eax
jmp 0x10009c33
cmp edx, 0x41
jge 0x10009550
call edi
cdq
mov ecx, 0x16
idiv ecx
lea ecx, [ebp - 0x54]
inc edx
imul eax, edx, 0x64
mov dword [0x1002422c], eax
jmp 0x10009c33
cmp edx, 0x4b
jge 0x10009574
call edi
and eax, 0x8000001f
jns 0x10009563
dec eax
or eax, 0xffffffe0
inc eax
inc eax
lea ecx, [ebp - 0x54]
imul eax, eax, 0x64
mov dword [0x1002422c], eax
jmp 0x10009c33
cmp edx, 0x55
jge 0x10009594
call edi
cdq
mov ecx, 0x2a
idiv ecx
lea ecx, [ebp - 0x54]
inc edx
imul eax, edx, 0x64
mov dword [0x1002422c], eax
jmp 0x10009c33
cmp edx, 0x62
jge 0x100095b7
call edi
cdq
mov ecx, 0xc0
idiv ecx
lea ecx, [ebp - 0x54]
inc edx
imul eax, edx, 0x3de
mov dword [0x1002422c], eax
jmp 0x10009c33
call edi
cdq
mov ecx, 0x3df
idiv ecx
lea ecx, [ebp - 0x54]
inc edx
imul eax, edx, 0x3e8
mov dword [0x1002422c], eax
jmp 0x10009c33
push 3
lea eax, [ebp - 0xac]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10017198
mov ecx, eax
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10009723
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1f
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x64]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push str.X::_
push 1
mov byte [ebp - 4], 0x20
call fcn.1000c220
push dword [ebp - 0x64]
push 1
call fcn.1000c220
mov eax, dword [ebp - 0x64]
add esp, 0x10
cmp dword [eax - 0xc], 3
jle 0x1000971b
nop
push 0x100156f0
lea ecx, [ebp - 0x34]
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x10016bc4
mov byte [ebp - 4], 0x21
call dword [sym.imp.mfc140.dll_Ordinal_310]
push esi
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x22
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x21
push eax
call fcn.1000afb0
add esp, 0x10
lea ecx, [ebp - 0x34]
push 0x100156f0
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10009704
mov eax, dword [0x10024858]
lea ecx, [ebp - 0x34]
push ecx
cmp eax, dword [0x1002485c]
je 0x100096f9
mov ecx, eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
add dword [0x10024858], 4
jmp 0x10009704
push eax
mov ecx, 0x10024854
call fcn.10002980
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x20
call dword [sym.imp.mfc140.dll_Ordinal_1044]
inc esi
cmp esi, 0x63
jl 0x10009680
lea ecx, [ebp - 0x64]
jmp 0x10009c33
push 3
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x100171d0
mov ecx, eax
mov byte [ebp - 4], 0x23
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10009830
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x68]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push 0x100156f0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push str.C::_0DLL
push 1
call fcn.1000c220
push dword [ebp - 0x68]
push 1
call fcn.1000c220
add esp, 0x10
lea ecx, [ebp - 0x68]
push 0x10016a80
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x100097f8
push 0x100156f0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x78], eax
call dword [sym.imp.mfc140.dll_Ordinal_1529]
lea ecx, [ebp - 0x68]
jmp 0x10009c33
mov ecx, dword [ebp - 0x48]
lea eax, [ebp - 0xbc]
push eax
mov dword [ebp - 0x78], 1
call fcn.100070a0
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x26
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xbc]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x68]
jmp 0x10009c33
push 3
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10017234
mov ecx, eax
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10009983
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0xc4]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x6c]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push str.G::
push 1
mov byte [ebp - 4], 0x29
call fcn.1000c220
push dword [ebp - 0x6c]
push 1
call fcn.1000c220
mov eax, dword [ebp - 0x6c]
add esp, 0x10
cmp dword [eax - 0xc], 3
jle 0x1000997b
nop dword [eax]
push 0x100156f0
lea ecx, [ebp - 0x38]
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x10016bc4
mov byte [ebp - 4], 0x2a
call dword [sym.imp.mfc140.dll_Ordinal_310]
push esi
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x2b
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x2a
push eax
call fcn.1000afb0
add esp, 0x10
lea ecx, [ebp - 0x38]
push 0x100156f0
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10009964
mov eax, dword [0x100248e4]
lea ecx, [ebp - 0x38]
push ecx
cmp eax, dword [0x100248e8]
je 0x10009959
mov ecx, eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
add dword [0x100248e4], 4
jmp 0x10009964
push eax
mov ecx, 0x100248e0
call fcn.10002980
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x29
call dword [sym.imp.mfc140.dll_Ordinal_1044]
inc esi
cmp esi, 0x63
jl 0x100098e0
lea ecx, [ebp - 0x6c]
jmp 0x10009c33
push 3
lea eax, [ebp - 0xc8]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10017260
mov ecx, eax
mov byte [ebp - 4], 0x2c
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10009b06
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x70]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push str.V::
push 1
mov byte [ebp - 4], 0x2e
call fcn.1000c220
push dword [ebp - 0x70]
push 1
call fcn.1000c220
mov eax, dword [ebp - 0x70]
add esp, 0x10
cmp dword [eax - 0xc], 3
jle 0x10009ad3
nop dword [eax]
push 0x100156f0
lea ecx, [ebp - 0x3c]
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x10016bc4
mov byte [ebp - 4], 0x2f
call dword [sym.imp.mfc140.dll_Ordinal_310]
push esi
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x30
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x2f
push eax
call fcn.1000afb0
add esp, 0x10
lea ecx, [ebp - 0x3c]
push 0x100156f0
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10009ab4
mov eax, dword [0x1002486c]
lea ecx, [ebp - 0x3c]
push ecx
cmp eax, dword [0x10024870]
je 0x10009aa9
mov ecx, eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
add dword [0x1002486c], 4
jmp 0x10009ab4
push eax
mov ecx, 0x10024868
call fcn.10002980
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc140.dll_Ordinal_1044]
inc esi
cmp esi, 0x63
jl 0x10009a30
lea ecx, [ebp - 0x70]
jmp 0x10009c33
mov edi, dword [0x1002486c]
mov esi, dword [0x10024868]
cmp esi, edi
je 0x10009af8
mov ecx, esi
call dword [sym.imp.mfc140.dll_Ordinal_1044]
add esi, 4
cmp esi, edi
jne 0x10009ae3
mov esi, dword [0x10024868]
mov dword [0x1002486c], esi
lea ecx, [ebp - 0x70]
jmp 0x10009c33
push 3
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x1001729c
mov ecx, eax
mov byte [ebp - 4], 0x31
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10009ba4
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0xd4]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x32
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
mov ecx, 0x10024878
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1526]
push str.D::
push 1
call fcn.1000c220
push dword [0x10024878]
push 1
call fcn.1000c220
add esp, 0x10
jmp 0x10009c39
push 3
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x100172c4
mov ecx, eax
mov byte [ebp - 4], 0x33
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
test esi, esi
jne 0x10009c39
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x34
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x80]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push str.Q::
push 1
mov byte [ebp - 4], 0x35
call fcn.1000c220
push dword [ebp - 0x80]
push 1
call fcn.1000c220
add esp, 0x10
lea ecx, [ebp - 0x80]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x84]
push eax
push 0x10016a84
push 0
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbstok_s]
add esp, 0xc
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x10]
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov edi, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
test esi, esi
jne 0x10008ec3
mov ebx, dword [ebp - 0x40]
mov edi, dword [ebp - 0x74]
inc dword [0x10024838]
mov eax, dword [ebp - 0x44]
cmp eax, 1
jne 0x10009eb6
push 0x100172f0
push eax
call fcn.1000c220
add esp, 4
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x100156f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x36
push 0x100156f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov byte [ebp - 4], 8
call fcn.1000ca50
add esp, 4
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x100156f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x37
push 0x100156f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov byte [ebp - 4], 8
call fcn.1000c980
add esp, 8
cmp dword [ebp - 0x78], 0
je 0x10009e28
push 0x100156f0
lea ecx, [ebp - 0x2c]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10009e28
mov eax, dword [ebp - 0x1c]
cmp dword [eax - 0xc], 5
jle 0x10009eb3
push str.EXE
push 1
call fcn.1000c220
add esp, 8
lea ecx, [ebp - 0x10]
push str._r_nA::
call dword [sym.imp.mfc140.dll_Ordinal_310]
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1692]
push str._r_nR::
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1696]
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1692]
push str._r_nS::
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1696]
push dword [0x10024208]
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1696]
push str._r_nQ::
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1696]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1692]
call fcn.1000b280
test eax, eax
jne 0x10009e16
mov dword [ebp - 0x118], eax
xorps xmm0, xmm0
mov dword [ebp - 0x108], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x120]
push eax
movlpd qword [ebp - 0x100], xmm0
movlpd qword [ebp - 0xf8], xmm0
movlpd qword [ebp - 0xf0], xmm0
mov dword [ebp - 0x120], 0x3c
mov dword [ebp - 0x11c], 0x440
mov dword [ebp - 0x114], str.open
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 8
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x10009eb3
push str.DLL
push 1
call fcn.1000c220
push 0x168
call sub.mfc140.dll_Ordinal_1507
add esp, 0xc
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x38
test eax, eax
je 0x10009e59
push 0
mov ecx, eax
call fcn.10005470
mov esi, eax
jmp 0x10009e5b
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push 0
push 0x3e8
mov byte [ebp - 4], 8
call dword [eax + 0x16c]
push ecx
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x20]
mov dword [ebp - 0x18], esp
mov ecx, esp
mov byte [ebp - 4], 0x39
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x3a
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push dword [ebp - 0x48]
mov ecx, esi
mov byte [ebp - 4], 8
call fcn.100065e0
mov eax, dword [ebp - 0x44]
cmp ebx, 1
jne 0x10009fc3
cmp eax, ebx
je 0x10009f20
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x100156f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x3c
push 0x100156f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov byte [ebp - 4], 8
call fcn.1000ca50
add esp, 4
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x100156f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x3d
push 0x100156f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov byte [ebp - 4], 8
call fcn.1000c980
add esp, 8
push 0x10017340
push 1
call fcn.1000c220
push 0x150
call sub.mfc140.dll_Ordinal_1507
add esp, 0xc
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x3e
test eax, eax
je 0x10009f51
push 0
mov ecx, eax
call fcn.10002e70
mov esi, eax
jmp 0x10009f53
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push 0
push 0x3ea
mov byte [ebp - 4], 8
call dword [eax + 0x16c]
push ecx
lea eax, [ebp - 0x30]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x20]
mov dword [ebp - 0x18], esp
mov ecx, esp
mov byte [ebp - 4], 0x3f
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x24]
mov dword [ebp - 0x58], esp
mov ecx, esp
mov byte [ebp - 4], 0x40
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x41
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push dword [ebp - 0x48]
mov ecx, esi
mov byte [ebp - 4], 8
call fcn.10004580
jmp 0x10009fc3
xor edi, edi
lea ecx, [ebp - 0x4c]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x2c]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x30]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x50]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4