Function at 0x10038950
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x44
mov al, byte [ebp + 0xc]
mov byte [ebp - 0x25], al
mov eax, dword [ebp + 8]
mov dword [ebp - 0x24], eax
mov eax, dword [0x100a3b78]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x100a2ffc]
add eax, dword [0x100a3000]
mov ecx, 0xbcb8b010
xor edx, edx
div ecx
mov ecx, 0xd19a07ee
xor edx, edx
div ecx
mov dword [ebp - 0x14], 0xec081360
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x18], ecx
imul eax, eax, 0xc5fb1d3c
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
sub eax, 0x9cd29f35
je 0x10038e2a
jmp 0x100389be
mov eax, dword [ebp - 0x2c]
sub eax, 0x9d936600
je 0x10038d48
jmp 0x100389d1
mov eax, dword [ebp - 0x2c]
sub eax, 0xaeef161d
je 0x10038e51
jmp 0x100389e4
mov eax, dword [ebp - 0x2c]
sub eax, 0xd5c00742
je 0x10038c8a
jmp 0x100389f7
mov eax, dword [ebp - 0x2c]
sub eax, 0xdf590677
je 0x10038bed
jmp 0x10038a0a
mov eax, dword [ebp - 0x2c]
sub eax, 0xec081360
je 0x10038a94
jmp 0x10038a1d
mov eax, dword [ebp - 0x2c]
sub eax, 0xf0fb9948
je 0x10038c28
jmp 0x10038a30
mov eax, dword [ebp - 0x2c]
sub eax, 0xf80367b6
je 0x10038bd0
jmp 0x10038a43
mov eax, dword [ebp - 0x2c]
sub eax, 0xa4461f1
je 0x10038c7c
jmp 0x10038a56
mov eax, dword [ebp - 0x2c]
sub eax, 0x2aba5c80
je 0x10038cc9
jmp 0x10038a69
mov eax, dword [ebp - 0x2c]
sub eax, 0x7998cf66
je 0x10038ab4
jmp 0x10038a7c
mov eax, dword [ebp - 0x2c]
sub eax, 0x7ad3f3de
je 0x10038d33
jmp 0x10038a8f
jmp 0x10038e7d
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov ecx, 0x7998cf66
mov edx, 0x9d936600
cmp esi, 0x7fd8a03a
cmovae ecx, edx
mov dword [eax], ecx
jmp 0x10038e7d
mov edx, dword [ebp - 0x24]
mov bl, byte [ebp - 0x25]
mov eax, dword [0x100a3004]
mov ecx, dword [0x100a3008]
or eax, ecx
add eax, 0x289b52b2
or eax, 0xdb6c9c5d
imul esi, eax, 0x2288e629
push eax
mov edi, esp
mov dword [ebp - 0x34], edi
push eax
mov ecx, esp
mov dword [ebp - 0x40], ecx
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0x3c], eax
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
and bl, 1
mov byte [edi], bl
mov dword [ecx], edx
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1004d140
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
add esp, 0xc
mov dword [ecx], 0x44
mov dword [ecx + 0x2c], 1
mov word [ecx + 0x30], 0
mov edx, dword [edx]
xor edi, edi
sub esp, 0x28
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
sub esp, 0xc
mov dword [esp], 0x20
mov dword [esp + 4], 0x2a
mov dword [esp + 8], 0x2e
call fcn.1001bfa0
mov ecx, dword [ebp - 0x34]
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov cl, byte [ecx]
mov byte [ebp - 0x2d], cl
mov ecx, 0x7998cf66
mov edx, 0xf80367b6
cmp esi, 0x4301f840
cmovb ecx, edx
mov dword [eax], ecx
jmp 0x10038e7d
mov eax, dword [ebp - 0x1c]
mov bl, byte [ebp - 0x2d]
mov ecx, 0xd5c00742
mov edx, 0xdf590677
test bl, 1
cmovne ecx, edx
mov dword [eax], ecx
jmp 0x10038e7d
mov eax, dword [ebp - 0x1c]
mov ecx, dword [0x100a300c]
xor ecx, dword [str._vhoN_]
and ecx, 0x364503b1
add ecx, 0xbdd9a745
imul esi, ecx, 0xe6b0bf92
mov ecx, 0x9cd29f35
mov edx, 0xf0fb9948
cmp esi, 0x904e35d
cmovae ecx, edx
mov dword [eax], ecx
jmp 0x10038e7d
mov eax, dword [ebp - 0x38]
mov esi, dword [0x100a3014]
or esi, dword [0x100a3018]
and esi, 0xc23cd893
xor esi, 0xcaba5198
and esi, 0x77403e6e
mov eax, dword [eax]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x1c]
mov ecx, 0x9cd29f35
mov edx, 0xa4461f1
cmp esi, 0x96a78df4
cmovb ecx, edx
mov dword [eax], ecx
jmp 0x10038e7d
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xd5c00742
jmp 0x10038e7d
mov eax, dword [0x100a301c]
add eax, dword [0x100a3020]
mov ecx, 0x872fb52c
xor edx, edx
div ecx
mov esi, eax
mov eax, dword [ebp - 0x1c]
sub esi, 0x7407493a
sub esi, 0x5473bf5d
mov ecx, 0x2aba5c80
mov edx, 0xaeef161d
cmp esi, 0xc92810ff
cmova ecx, edx
mov dword [eax], ecx
jmp 0x10038e7d
mov eax, dword [0x100a3024]
xor edx, edx
div dword [0x100a3028]
mov esi, eax
mov eax, dword [ebp - 0x38]
xor esi, 0x20134797
sub esi, 0xd1b5bc5e
sub esi, 0x815a5031
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x44], ecx
mov ecx, 0x7ad3f3de
mov edx, 0x2aba5c80
cmp esi, 0x717fa45c
cmovb ecx, edx
mov dword [eax], ecx
jmp 0x10038e7d
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1004977f
mov eax, dword [ebp - 0x44]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edx, dword [ebp - 0x24]
mov bl, byte [ebp - 0x25]
push eax
mov esi, esp
push eax
mov ecx, esp
mov dword [ebp - 0x50], ecx
sub esp, 0x44
mov eax, esp
mov dword [ebp - 0x4c], eax
sub esp, 0x10
mov edi, esp
mov dword [ebp - 0x48], edi
and bl, 1
mov byte [esi], bl
mov dword [ecx], edx
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.1004d140
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
add esp, 0xc
mov dword [ecx], 0x44
mov dword [ecx + 0x2c], 1
mov word [ecx + 0x30], 0
mov edx, dword [edx]
xor esi, esi
sub esp, 0x28
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
sub esp, 0xc
mov dword [esp], 0x20
mov dword [esp + 4], 0x2a
mov dword [esp + 8], 0x2e
call fcn.1001bfa0
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x7998cf66
jmp 0x10038e7d
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xf0fb9948
jmp 0x10038e7d
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 4]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x2aba5c80
jmp 0x100389a8