Function at 0x10008720
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100129a1
mov eax, dword fs:[0]
push eax
sub esp, 0x114
push ebx
push esi
push edi
mov eax, dword [0x10023330]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x48], ecx
push str.LoadBannerOption_on.
push 1
mov dword [ebp - 4], 0
call fcn.1000bcf0
add esp, 8
call fcn.1000ad40
cmp eax, 1
jne 0x10008775
xor edi, edi
jmp 0x10009ac2
push 0x100146f0
mov ecx, 0x10023878
call dword [sym.imp.mfc140.dll_Ordinal_1529]
mov edi, dword [0x1002386c]
mov esi, dword [0x10023868]
cmp esi, edi
je 0x100087aa
mov ecx, esi
call dword [sym.imp.mfc140.dll_Ordinal_1044]
add esi, 4
cmp esi, edi
jne 0x10008795
mov esi, dword [0x10023868]
mov edi, dword [0x100238e4]
mov dword [0x1002386c], esi
mov esi, dword [0x100238e0]
cmp esi, edi
je 0x100087d5
mov ecx, esi
call dword [sym.imp.mfc140.dll_Ordinal_1044]
add esi, 4
cmp esi, edi
jne 0x100087c0
mov esi, dword [0x100238e0]
mov edi, dword [0x10023858]
mov dword [0x100238e4], esi
mov esi, dword [0x10023854]
cmp esi, edi
je 0x10008805
nop dword [eax + eax]
mov ecx, esi
call dword [sym.imp.mfc140.dll_Ordinal_1044]
add esi, 4
cmp esi, edi
jne 0x100087f0
mov esi, dword [0x10023854]
push 0x100146f0
mov ecx, 0x100238f0
mov dword [0x10023858], esi
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push 0x100146f0
mov ecx, 0x1002389c
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push 0x100146f0
mov ecx, 0x100238ec
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push 0x100146f0
mov ecx, 0x100238a0
call dword [sym.imp.mfc140.dll_Ordinal_1529]
xor ebx, ebx
lea ecx, [ebp - 0x30]
push 0x100146f0
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 0x100146f0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 1
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov edi, 1
mov byte [ebp - 4], 2
push 0x100146f0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x74], edi
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 0x100146f0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 3
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 0x100146f0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 4
mov dword [ebp - 0x78], ebx
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 0x100146f0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0x58], esp
push 0x100146f0
mov byte [ebp - 4], 6
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
lea eax, [ebp + 8]
mov byte [ebp - 4], 7
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
mov byte [ebp - 4], 6
call fcn.1000bab0
add esp, 8
lea ecx, [ebp - 0x4c]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 0x100146f0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10009a81
push 0x10015a80
lea ecx, [ebp - 0x4c]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10009a81
mov eax, dword [ebp - 0x4c]
cmp dword [eax - 0xc], 3
jl 0x10009a81
push str.OPTION.
push edi
call fcn.1000bcf0
add esp, 8
mov dword [ebp - 0x84], ebx
lea ecx, [ebp - 0x4c]
push ebx
call dword [sym.imp.mfc140.dll_Ordinal_5095]
lea ecx, [ebp - 0x84]
push ecx
push 0x10015a84
push eax
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbstok_s]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x10009733
mov edi, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov ebx, dword [ebp - 0x74]
lea ecx, [ebp - 0x10]
push esi
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 9
push dword [eax - 0xc]
lea eax, [ebp - 0xd8]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 3
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10016024
mov ecx, eax
mov byte [ebp - 4], 0xb
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10008a8f
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0xe0]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xc
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x5c]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push str.R::
push 1
mov byte [ebp - 4], 0xd
call fcn.1000bcf0
push dword [ebp - 0x5c]
push 1
call fcn.1000bcf0
add esp, 0x10
lea ecx, [ebp - 0x5c]
push 0x10015a80
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x10008a87
mov eax, dword [ebp - 0x48]
push 1
push dword [eax + 0x20]
call dword [sym.imp.USER32.dll_KillTimer]
lea ecx, [ebp - 0x5c]
jmp 0x100096f3
push 3
lea eax, [ebp - 0xe4]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x1001605c
mov ecx, eax
mov byte [ebp - 4], 0xe
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10008b40
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xf
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140.dll_Ordinal_14328]
push str.L::
push 1
call fcn.1000bcf0
push dword [ebp - 0x1c]
push 1
call fcn.1000bcf0
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
add esp, 0x10
cmp dword [eax - 0xc], 5
setge cl
mov dword [ebp - 0x44], ecx
jmp 0x100096f9
push 3
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10016084
mov ecx, eax
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10008bf4
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_1526]
push str.F::
push 1
call fcn.1000bcf0
push dword [ebp - 0x20]
push 1
call fcn.1000bcf0
mov eax, dword [ebp - 0x20]
add esp, 0x10
cmp dword [eax - 0xc], 5
jge 0x100096f9
push 0x100146f0
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_1529]
jmp 0x100096f9
push 3
lea eax, [ebp - 0x94]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10016098
mov ecx, eax
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10008cb8
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x13
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1526]
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x48]
mov edi, dword [eax - 0xc]
lea eax, [ebp - 0x24]
push eax
lea ecx, [esi + 0x120]
call dword [sym.imp.mfc140.dll_Ordinal_1526]
push str.U::
push 1
call fcn.1000bcf0
push dword [esi + 0x120]
push 1
call fcn.1000bcf0
xor eax, eax
add esp, 0x10
cmp edi, 5
cmovge eax, ebx
mov dword [ebp - 0x74], eax
jmp 0x100096f9
push 2
lea eax, [ebp - 0x9c]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x100160ac
mov ecx, eax
mov byte [ebp - 4], 0x14
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10008ee7
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffc
push eax
lea eax, [ebp - 0xa0]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x15
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push 0x10015a80
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10008ebf
push 0x100146f0
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10008ebf
mov eax, dword [ebp - 0x28]
cmp dword [eax - 0xc], 3
jl 0x10008ebf
push str.P0_
push 1
call fcn.1000bcf0
push dword [ebp - 0x28]
push 1
call fcn.1000bcf0
add esp, 0x10
lea ecx, [ebp - 0x60]
call dword [sym.imp.mfc140.dll_Ordinal_316]
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
push 0x10015bc4
mov byte [ebp - 4], 0x17
call dword [sym.imp.mfc140.dll_Ordinal_310]
push esi
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x18
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x17
push eax
call fcn.1000aa70
add esp, 0xc
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x10015bc4
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 1
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x19
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x17
push eax
call fcn.1000aa70
add esp, 0xc
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x10015bc4
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 2
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x1a
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x17
push eax
call fcn.1000aa70
add esp, 0x10
lea ecx, [ebp - 0x60]
push 0x10015a80
call dword [sym.imp.mfc140.dll_Ordinal_2986]
neg eax
lea ecx, [ebp - 0x50]
push 0x10015a80
sbb eax, eax
neg eax
mov dword [0x10023830], eax
call dword [sym.imp.mfc140.dll_Ordinal_2986]
neg eax
lea ecx, [ebp - 0x30]
push 0x10015a80
sbb esi, esi
and esi, dword [ebp - 0x40]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
neg eax
sbb ebx, ebx
and ebx, esi
lea ecx, [ebp - 0x50]
push 0x100146f0
mov dword [ebp - 0x40], ebx
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10008eae
push 0x100146f0
lea ecx, [ebp - 0x30]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10008eae
mov eax, dword [ebp - 0x30]
cmp dword [eax - 0xc], 6
mov eax, 1
cmovg ebx, eax
mov dword [ebp - 0x40], ebx
lea ecx, [ebp - 0x60]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x28]
jmp 0x100096f3
push 0x100160b0
push 1
mov dword [ebp - 0x40], 0
call fcn.1000bcf0
push dword [ebp - 0x28]
push 1
call fcn.1000bcf0
add esp, 0x10
lea ecx, [ebp - 0x28]
jmp 0x100096f3
push 2
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10016120
mov ecx, eax
mov byte [ebp - 4], 0x1b
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10009095
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffc
push eax
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1c
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x54]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push dword [ebp - 0x54]
mov ebx, dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov byte [ebp - 4], 0x1d
call ebx
push str.P1_
push 1
mov dword [0x1002322c], eax
call fcn.1000bcf0
push dword [ebp - 0x54]
push 1
call fcn.1000bcf0
mov eax, dword [0x1002322c]
add esp, 0x14
dec eax
cmp eax, 0x21c09f
ja 0x10008fb5
push dword [ebp - 0x54]
call ebx
add esp, 4
mov dword [0x1002322c], eax
lea ecx, [ebp - 0x54]
jmp 0x100096f3
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
add esp, 4
call edi
cdq
mov ecx, 0x64
idiv ecx
inc edx
cmp edx, 0x37
jge 0x10008ff0
call edi
cdq
mov ecx, 0xd
idiv ecx
lea ecx, [ebp - 0x54]
inc edx
imul eax, edx, 0x64
mov dword [0x1002322c], eax
jmp 0x100096f3
cmp edx, 0x41
jge 0x10009010
call edi
cdq
mov ecx, 0x16
idiv ecx
lea ecx, [ebp - 0x54]
inc edx
imul eax, edx, 0x64
mov dword [0x1002322c], eax
jmp 0x100096f3
cmp edx, 0x4b
jge 0x10009034
call edi
and eax, 0x8000001f
jns 0x10009023
dec eax
or eax, 0xffffffe0
inc eax
inc eax
lea ecx, [ebp - 0x54]
imul eax, eax, 0x64
mov dword [0x1002322c], eax
jmp 0x100096f3
cmp edx, 0x55
jge 0x10009054
call edi
cdq
mov ecx, 0x2a
idiv ecx
lea ecx, [ebp - 0x54]
inc edx
imul eax, edx, 0x64
mov dword [0x1002322c], eax
jmp 0x100096f3
cmp edx, 0x62
jge 0x10009077
call edi
cdq
mov ecx, 0xc0
idiv ecx
lea ecx, [ebp - 0x54]
inc edx
imul eax, edx, 0x3de
mov dword [0x1002322c], eax
jmp 0x100096f3
call edi
cdq
mov ecx, 0x3df
idiv ecx
lea ecx, [ebp - 0x54]
inc edx
imul eax, edx, 0x3e8
mov dword [0x1002322c], eax
jmp 0x100096f3
push 3
lea eax, [ebp - 0xac]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10016138
mov ecx, eax
mov byte [ebp - 4], 0x1e
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x100091e3
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1f
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x64]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push str.X::_
push 1
mov byte [ebp - 4], 0x20
call fcn.1000bcf0
push dword [ebp - 0x64]
push 1
call fcn.1000bcf0
mov eax, dword [ebp - 0x64]
add esp, 0x10
cmp dword [eax - 0xc], 3
jle 0x100091db
nop
push 0x100146f0
lea ecx, [ebp - 0x34]
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x10015bc4
mov byte [ebp - 4], 0x21
call dword [sym.imp.mfc140.dll_Ordinal_310]
push esi
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x22
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 0x21
push eax
call fcn.1000aa70
add esp, 0x10
lea ecx, [ebp - 0x34]
push 0x100146f0
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x100091c4
mov eax, dword [0x10023858]
lea ecx, [ebp - 0x34]
push ecx
cmp eax, dword [0x1002385c]
je 0x100091b9
mov ecx, eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
add dword [0x10023858], 4
jmp 0x100091c4
push eax
mov ecx, 0x10023854
call fcn.10002980
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x20
call dword [sym.imp.mfc140.dll_Ordinal_1044]
inc esi
cmp esi, 0x63
jl 0x10009140
lea ecx, [ebp - 0x64]
jmp 0x100096f3
push 3
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10016170
mov ecx, eax
mov byte [ebp - 4], 0x23
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x100092f0
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x68]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push 0x100146f0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x25
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push str.C::_0DLL
push 1
call fcn.1000bcf0
push dword [ebp - 0x68]
push 1
call fcn.1000bcf0
add esp, 0x10
lea ecx, [ebp - 0x68]
push 0x10015a80
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x100092b8
push 0x100146f0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x78], eax
call dword [sym.imp.mfc140.dll_Ordinal_1529]
lea ecx, [ebp - 0x68]
jmp 0x100096f3
mov ecx, dword [ebp - 0x48]
lea eax, [ebp - 0xbc]
push eax
mov dword [ebp - 0x78], 1
call fcn.10007040
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x26
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xbc]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x68]
jmp 0x100096f3
push 3
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x100161d4
mov ecx, eax
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10009443
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0xc4]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x6c]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push str.G::
push 1
mov byte [ebp - 4], 0x29
call fcn.1000bcf0
push dword [ebp - 0x6c]
push 1
call fcn.1000bcf0
mov eax, dword [ebp - 0x6c]
add esp, 0x10
cmp dword [eax - 0xc], 3
jle 0x1000943b
nop dword [eax]
push 0x100146f0
lea ecx, [ebp - 0x38]
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x10015bc4
mov byte [ebp - 4], 0x2a
call dword [sym.imp.mfc140.dll_Ordinal_310]
push esi
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x2b
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x2a
push eax
call fcn.1000aa70
add esp, 0x10
lea ecx, [ebp - 0x38]
push 0x100146f0
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10009424
mov eax, dword [0x100238e4]
lea ecx, [ebp - 0x38]
push ecx
cmp eax, dword [0x100238e8]
je 0x10009419
mov ecx, eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
add dword [0x100238e4], 4
jmp 0x10009424
push eax
mov ecx, 0x100238e0
call fcn.10002980
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x29
call dword [sym.imp.mfc140.dll_Ordinal_1044]
inc esi
cmp esi, 0x63
jl 0x100093a0
lea ecx, [ebp - 0x6c]
jmp 0x100096f3
push 3
lea eax, [ebp - 0xc8]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10016200
mov ecx, eax
mov byte [ebp - 4], 0x2c
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x100095c6
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x2d
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x70]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push str.V::
push 1
mov byte [ebp - 4], 0x2e
call fcn.1000bcf0
push dword [ebp - 0x70]
push 1
call fcn.1000bcf0
mov eax, dword [ebp - 0x70]
add esp, 0x10
cmp dword [eax - 0xc], 3
jle 0x10009593
nop dword [eax]
push 0x100146f0
lea ecx, [ebp - 0x3c]
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x10015bc4
mov byte [ebp - 4], 0x2f
call dword [sym.imp.mfc140.dll_Ordinal_310]
push esi
push ecx
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 0x30
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 0x2f
push eax
call fcn.1000aa70
add esp, 0x10
lea ecx, [ebp - 0x3c]
push 0x100146f0
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x10009574
mov eax, dword [0x1002386c]
lea ecx, [ebp - 0x3c]
push ecx
cmp eax, dword [0x10023870]
je 0x10009569
mov ecx, eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
add dword [0x1002386c], 4
jmp 0x10009574
push eax
mov ecx, 0x10023868
call fcn.10002980
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x2e
call dword [sym.imp.mfc140.dll_Ordinal_1044]
inc esi
cmp esi, 0x63
jl 0x100094f0
lea ecx, [ebp - 0x70]
jmp 0x100096f3
mov edi, dword [0x1002386c]
mov esi, dword [0x10023868]
cmp esi, edi
je 0x100095b8
mov ecx, esi
call dword [sym.imp.mfc140.dll_Ordinal_1044]
add esi, 4
cmp esi, edi
jne 0x100095a3
mov esi, dword [0x10023868]
mov dword [0x1002386c], esi
lea ecx, [ebp - 0x70]
jmp 0x100096f3
push 3
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x1001623c
mov ecx, eax
mov byte [ebp - 4], 0x31
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x10]
test esi, esi
jne 0x10009664
mov eax, dword [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0xd4]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x32
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
mov ecx, 0x10023878
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1526]
push str.D::
push 1
call fcn.1000bcf0
push dword [0x10023878]
push 1
call fcn.1000bcf0
add esp, 0x10
jmp 0x100096f9
push 3
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push 0x10016264
mov ecx, eax
mov byte [ebp - 4], 0x33
call dword [sym.imp.mfc140.dll_Ordinal_2986]
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 9
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
test esi, esi
jne 0x100096f9
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x10]
mov eax, dword [eax - 0xc]
add eax, 0xfffffffd
push eax
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_12863]
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x34
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x80]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push str.Q::
push 1
mov byte [ebp - 4], 0x35
call fcn.1000bcf0
push dword [ebp - 0x80]
push 1
call fcn.1000bcf0
add esp, 0x10
lea ecx, [ebp - 0x80]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea eax, [ebp - 0x84]
push eax
push 0x10015a84
push 0
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbstok_s]
add esp, 0xc
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x10]
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov edi, dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
test esi, esi
jne 0x10008983
mov ebx, dword [ebp - 0x40]
mov edi, dword [ebp - 0x74]
inc dword [0x10023838]
mov eax, dword [ebp - 0x44]
cmp eax, 1
jne 0x10009976
push 0x10016290
push eax
call fcn.1000bcf0
add esp, 4
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x100146f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x36
push 0x100146f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov byte [ebp - 4], 8
call fcn.1000c520
add esp, 4
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x100146f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x37
push 0x100146f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov byte [ebp - 4], 8
call fcn.1000c450
add esp, 8
cmp dword [ebp - 0x78], 0
je 0x100098e8
push 0x100146f0
lea ecx, [ebp - 0x2c]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
je 0x100098e8
mov eax, dword [ebp - 0x1c]
cmp dword [eax - 0xc], 5
jle 0x10009973
push str.EXE
push 1
call fcn.1000bcf0
add esp, 8
lea ecx, [ebp - 0x10]
push str._r_nA::
call dword [sym.imp.mfc140.dll_Ordinal_310]
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x3b
push eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1692]
push str._r_nR::
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1696]
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1692]
push str._r_nS::
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1696]
push dword [0x10023208]
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1696]
push str._r_nQ::
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1696]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc140.dll_Ordinal_1692]
call fcn.1000ad40
test eax, eax
jne 0x100098d6
mov dword [ebp - 0x118], eax
xorps xmm0, xmm0
mov dword [ebp - 0x108], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x120]
push eax
movlpd qword [ebp - 0x100], xmm0
movlpd qword [ebp - 0xf8], xmm0
movlpd qword [ebp - 0xf0], xmm0
mov dword [ebp - 0x120], 0x3c
mov dword [ebp - 0x11c], 0x440
mov dword [ebp - 0x114], str.open
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 8
call dword [sym.imp.mfc140.dll_Ordinal_1044]
jmp 0x10009973
push str.DLL
push 1
call fcn.1000bcf0
push 0x168
call sub.mfc140.dll_Ordinal_1507
add esp, 0xc
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x38
test eax, eax
je 0x10009919
push 0
mov ecx, eax
call fcn.10005470
mov esi, eax
jmp 0x1000991b
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push 0
push 0x3e8
mov byte [ebp - 4], 8
call dword [eax + 0x16c]
push ecx
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x20]
mov dword [ebp - 0x18], esp
mov ecx, esp
mov byte [ebp - 4], 0x39
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 0x3a
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push dword [ebp - 0x48]
mov ecx, esi
mov byte [ebp - 4], 8
call fcn.100065e0
mov eax, dword [ebp - 0x44]
cmp ebx, 1
jne 0x10009a83
cmp eax, ebx
je 0x100099e0
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x100146f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x3c
push 0x100146f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov byte [ebp - 4], 8
call fcn.1000c520
add esp, 4
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x100146f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
push ecx
mov ecx, esp
mov byte [ebp - 4], 0x3d
push 0x100146f0
call dword [sym.imp.mfc140.dll_Ordinal_310]
mov byte [ebp - 4], 8
call fcn.1000c450
add esp, 8
push 0x100162e0
push 1
call fcn.1000bcf0
push 0x150
call sub.mfc140.dll_Ordinal_1507
add esp, 0xc
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x3e
test eax, eax
je 0x10009a11
push 0
mov ecx, eax
call fcn.10002e70
mov esi, eax
jmp 0x10009a13
xor esi, esi
mov eax, dword [esi]
mov ecx, esi
push 0
push 0x3ea
mov byte [ebp - 4], 8
call dword [eax + 0x16c]
push ecx
lea eax, [ebp - 0x30]
mov dword [ebp - 0x14], esp
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x20]
mov dword [ebp - 0x18], esp
mov ecx, esp
mov byte [ebp - 4], 0x3f
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x24]
mov dword [ebp - 0x58], esp
mov ecx, esp
mov byte [ebp - 4], 0x40
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x41
mov ecx, esp
push eax
call dword [sym.imp.mfc140.dll_Ordinal_300]
push dword [ebp - 0x48]
mov ecx, esi
mov byte [ebp - 4], 8
call fcn.10004580
jmp 0x10009a83
xor edi, edi
lea ecx, [ebp - 0x4c]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x2c]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x50]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x30]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4