Function at 0x10010a89
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x6c
cmp byte [ebp + 0xc], 0
push ebx
push esi
push edi
push 0
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], ecx
pop esi
je 0x10010c48
mov dword [esp + 0x18], 0x200a
cmp dword [esp + 0x18], 0x228a
jle 0x10010b25
mov edi, esi
mov dword [esp + 0x14], esi
mov ebx, esi
mov dword [esp + 0x10], esi
mov eax, edi
cdq
idiv ebx
mov ebx, 0x1be6
mov edi, edx
mov eax, edi
lea ecx, [esp + 0x30]
cdq
push edx
push eax
call fcn.10002a51
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10010aec
mov eax, dword [eax]
push eax
call fcn.1004498a
pop ecx
push esi
push 1
lea ecx, [esp + 0x38]
call fcn.10001643
inc edi
dec ebx
jne 0x10010ad4
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
inc ebx
mov dword [esp + 0x10], ebx
cmp ebx, 0x72c0
jl 0x10010ac8
inc edi
mov dword [esp + 0x14], edi
cmp edi, 0xe0b
jl 0x10010ac2
cmp dword [esp + 0x18], 0x1dff
jge 0x10010b3a
push str.cxxbz_jkuqbl_jjhwgv_ivegfvg_iopwk_jvy_bjtvagb_ygbtuy_xsezs_looybus
call fcn.1004498a
pop ecx
mov dword [esp + 0x20], 0x2632
cmp dword [esp + 0x20], 0x29b5
jle 0x10010beb
mov ebx, esi
mov dword [esp + 0x1c], esi
mov edi, esi
mov dword [esp + 0x10], esi
mov eax, edi
mov dword [esp + 0x14], 0x5a74
mov dword [esp + 0x18], eax
mov edi, ebx
mov ecx, eax
sar edi, cl
mov ebx, esi
mov ecx, ebx
mov eax, edi
sar eax, cl
lea ecx, [esp + 0x48]
cdq
push edx
push eax
call fcn.10002a51
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10010b8e
mov eax, dword [eax]
push eax
call fcn.1004498a
pop ecx
push esi
push 1
lea ecx, [esp + 0x50]
call fcn.10001643
inc ebx
cmp ebx, 0x5690
jl 0x10010b72
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
dec eax
dec dword [esp + 0x14]
mov dword [esp + 0x18], eax
jne 0x10010b6a
mov edi, dword [esp + 0x10]
inc edi
mov dword [esp + 0x10], edi
cmp edi, 0x7b1e
jl 0x10010b5c
inc ebx
mov dword [esp + 0x1c], ebx
cmp ebx, 0x2a9c
jl 0x10010b56
push 0x1311
push esi
call dword [sym.imp.KERNEL32.dll_WinExec]
cmp dword [esp + 0x20], 0x2374
jge 0x10010c00
push str.ibyjffi_tzlx_pedeybiym_zbobxgxhq_hco_mzarmp_ryayvj_rhyduill
call fcn.1004498a
pop ecx
mov edi, dword [ebp + 0x14]
cmp dword [edi], esi
jbe 0x10010cea
mov ebx, dword [esp + 0x28]
call fcn.1000e5ba
push 0x34
pop ecx
xor edx, edx
div ecx
push 0x1a
mov eax, edx
pop ecx
cmp eax, ecx
jge 0x10010c29
movsx edx, byte [ebx]
jmp 0x10010c33
cdq
idiv ecx
mov eax, dword [esp + 0x2c]
movsx eax, byte [eax]
mov ecx, dword [ebp + 0x1c]
add edx, eax
push edx
call fcn.100110df
inc esi
cmp esi, dword [edi]
jb 0x10010c0f
jmp 0x10010cea
mov dword [esp + 0x1c], 0x5c0
cmp dword [esp + 0x1c], 0x5e2
jle 0x10010cb6
mov edi, esi
mov ebx, esi
mov ecx, esi
mov dword [esp + 0x20], esi
mov eax, ebx
shl eax, cl
lea ecx, [esp + 0x60]
and eax, edi
cdq
push edx
push eax
call fcn.10002a51
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10010c80
mov eax, dword [eax]
push eax
call fcn.1004498a
pop ecx
push esi
push 1
lea ecx, [esp + 0x68]
call fcn.10001643
mov ecx, dword [esp + 0x20]
inc ecx
mov dword [esp + 0x20], ecx
cmp ecx, 0x3471
jl 0x10010c64
inc ebx
cmp ebx, 0x75ad
jl 0x10010c5e
inc edi
cmp edi, 0x68c3
jl 0x10010c5c
cmp dword [esp + 0x1c], 0x258
jge 0x10010ccb
push str.xavxkhrn_xjccs_cpiwm_qwsw_ygn_zksxf_yyv_sghf_chhipturc_ihltr_zzgvryy
call fcn.1004498a
pop ecx
mov edx, dword [ebp + 8]
mov dword [edx], esi
cmp dword [edx], 2
jge 0x10010cea
mov esi, dword [ebp + 0x18]
mov ecx, dword [edx]
mov eax, dword [esi]
mov dword [eax + ecx*4], 0xf34fda0e
inc dword [edx]
cmp dword [edx], 2
jl 0x10010cd8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret