Function at 0x10062f20
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1e4
push ebx
push esi
push edi
mov eax, dword [0x100c3110]
mov ecx, dword [0x100c3114]
mov dword [ebp - 0x164], ecx
mov word [ebp - 0xf4], ax
mov dword [ebp - 0x18], 0x3345f396
mov edx, 0xffffb7a0
mov word [ebp - 8], dx
xor eax, eax
mov dword [ebp - 0x38], 0x22d26b75
mov dword [ebp - 0x34], eax
movsx eax, word [0x100c3118]
cdq
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
xor ecx, ecx
mov dword [ebp - 0x4c], 0x3b78
mov dword [ebp - 0x48], ecx
mov edx, dword [0x100c30c8]
mov eax, dword [0x100c30cc]
mov dword [ebp - 0x160], eax
mov byte [ebp - 1], dl
xor ecx, ecx
mov dword [ebp - 0x5c], 0x603e5660
mov dword [ebp - 0x58], ecx
mov dx, word [0x100c3088]
mov word [ebp - 0x54], dx
mov dword [ebp - 0x28], 0x49a09f2e
xor eax, eax
mov dword [ebp - 0x70], 0xa8
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x60], 0xd0d7b0db
xor ecx, ecx
mov dword [ebp - 0x80], 3
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x44], 0x2b2123bf
mov byte [ebp - 0x19], 0x9c
mov edx, dword [0x100c30d8]
mov eax, dword [0x100c30dc]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0x9b
xor ecx, ecx
mov dword [ebp - 0x68], 0xc34bde4f
mov dword [ebp - 0x64], ecx
mov byte [ebp - 2], 0xa6
movsx edx, word [0x100c3090]
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x3c], 0x413c
mov ax, word [0x100c30fc]
mov word [ebp - 0x50], ax
movzx cx, byte [0x100c3063]
mov word [ebp - 0xf8], cx
mov dx, word [0x100c30a0]
mov word [ebp - 0x2c], dx
mov eax, dword [0x100c30d0]
mov ecx, dword [0x100c30d4]
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x30], eax
mov edx, dword [0x100c30d0]
mov eax, dword [0x100c30d4]
mov dword [ebp - 0x154], eax
mov byte [ebp - 0x71], dl
mov cx, word [0x100c3118]
mov word [ebp - 0xfc], cx
mov edx, dword [0x100c3120]
mov eax, dword [0x100c3124]
mov dword [ebp - 0x15c], eax
mov byte [ebp - 0x72], dl
mov ecx, dword [0x100c30f8]
mov dword [ebp - 0x168], ecx
movsx eax, byte [str.NDisablePerfBackoff]
cdq
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], edx
mov dl, byte [0x100c30a0]
mov byte [ebp - 0x75], dl
mov al, byte [0x100c30a0]
mov byte [ebp - 0x73], al
mov ecx, 0x51e
mov word [ebp - 0x100], cx
movzx eax, byte [0x100c3063]
cdq
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], edx
mov edx, 0xfffff59e
mov word [ebp - 0xe4], dx
mov eax, dword [0x100c30d0]
mov ecx, dword [0x100c30d4]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], ecx
movsx eax, byte [0x100c3075]
cdq
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], edx
mov dl, byte [0x100c3062]
mov byte [ebp - 0x74], dl
mov dword [ebp - 0x12c], 0xd5
mov dword [ebp - 0x130], 0x72
mov eax, dword [0x100c30b8]
mov ecx, dword [0x100c30bc]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
movzx edx, byte [0x100c303b]
mov dword [ebp - 0x134], edx
mov eax, dword [ebp - 0x30]
cdq
mov ecx, eax
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x138], eax
add ecx, edx
mov eax, dword [ebp - 0x30]
cdq
add eax, ecx
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x28]
imul edx, ecx
mov dword [ebp - 0x28], edx
xor eax, eax
mov dword [ebp - 0x70], 0x2596
mov dword [ebp - 0x6c], eax
mov ecx, dword [0x100c3b38]
xor edx, edx
mov dword [0x100c3080], ecx
mov dword [0x100c3084], edx
movzx eax, byte [ebp - 2]
and eax, 0x4615
mov word [0x100c30e0], ax
mov dword [ebp - 0x1e4], 0x44
push 0x40
push 0
lea ecx, [ebp - 0x1e0]
push ecx
call fcn.1008ff10
add esp, 0xc
cmp dword [ebp - 0x40], 0
jne 0x100631d0
mov dword [ebp - 0x88], 1
jmp 0x100631da
mov dword [ebp - 0x88], 0
movsx eax, word [0x100c3090]
cdq
mov ecx, eax
sub ecx, dword [0x100c3080]
movsx eax, byte [0x100c3027]
add eax, dword [ebp - 0x88]
cdq
add ecx, eax
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x13c], eax
add ecx, edx
mov byte [0x100c3062], cl
mov ecx, dword [0x100c30d8]
add ecx, 0xd0f9ffdb
mov edx, dword [0x100c30dc]
adc edx, 0x3d87e
mov dword [0x100c30f0], ecx
mov dword [0x100c30f4], edx
xor eax, eax
mov dword [ebp - 0x24], 0x2b
mov dword [ebp - 0x20], eax
movsx eax, word [ebp - 8]
sub eax, 0x248
cdq
mov dword [0x100c30c0], eax
mov dword [0x100c30c4], edx
mov dword [ebp - 0x40], 8
movsx ecx, word [0x100c308c]
sub ecx, 0x5f190ec1
xor edx, edx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x80]
add eax, 0xe9
mov word [0x100c30e0], ax
cmp dword [ebp - 0x44], 0
je 0x10063296
mov ecx, dword [ebp - 0x40]
xor edx, edx
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0xac], edx
jmp 0x100632a8
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], ecx
mov dl, byte [ebp - 0xb0]
mov byte [ebp - 1], dl
mov eax, 8
mov word [0x100c30a0], ax
mov ecx, dword [0x100c30d8]
add ecx, 6
mov byte [ebp - 2], cl
mov edx, dword [0x100c30c8]
mov eax, dword [0x100c30cc]
mov dword [ebp - 0x140], eax
and edx, 0x4d62974e
mov word [0x100c3090], dx
mov ecx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x10]
not ecx
not esi
movsx eax, word [ebp - 0x54]
cdq
add ecx, eax
adc esi, edx
mov dword [0x100c3120], ecx
mov dword [0x100c3124], esi
lea edx, [ebp - 0x1a0]
push edx
lea eax, [ebp - 0x1e4]
push eax
push 0
push 0
push 0x8000000
push 0
push 0
push 0
push str.cmd.exe__C_echo_HiddenProcess
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov dword [ebp - 0xe8], eax
movzx eax, byte [0x100c3063]
cdq
push edx
push eax
call fcn.1004e550
add esp, 8
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], 0
ja 0x10063367
jb 0x1006335b
cmp dword [ebp - 0x24], 0
jae 0x10063367
mov dword [ebp - 0x8c], 1
jmp 0x10063371
mov dword [ebp - 0x8c], 0
cmp dword [ebp - 0x20], 0
ja 0x1006338b
jb 0x1006337f
cmp dword [ebp - 0x24], 0x5e
jae 0x1006338b
mov dword [ebp - 0x90], 1
jmp 0x10063395
mov dword [ebp - 0x90], 0
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [ebp - 0x90]
jne 0x10063793
push 0xaf
call fcn.1004f040
add esp, 4
movzx eax, ax
cdq
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x108], edx
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jg 0x10063704
jl 0x100633ec
cmp dword [ebp - 0x108], 0
jae 0x10063704
movsx ecx, word [0x100c3088]
movzx edx, byte [0x100c3063]
cmp ecx, edx
jg 0x1006340a
mov dword [ebp - 0x94], 1
jmp 0x10063414
mov dword [ebp - 0x94], 0
movsx eax, word [0x100c3088]
cmp eax, 0x29
jg 0x1006342c
mov dword [ebp - 0x98], 1
jmp 0x10063436
mov dword [ebp - 0x98], 0
mov ecx, dword [ebp - 0x94]
cmp ecx, dword [ebp - 0x98]
jne 0x100634a3
mov edx, dword [ebp - 0x24]
xor edx, 0x99a39779
mov eax, dword [ebp - 0x20]
xor eax, 0x102e6
mov dword [0x100c3120], edx
mov dword [0x100c3124], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x83
mov word [0x100c308c], cx
mov dx, word [0x100c3b38]
mov word [ebp - 8], dx
mov eax, dword [ebp - 0x18]
add eax, 0x15
mov word [0x100c3090], ax
mov ecx, dword [ebp - 0x18]
xor edx, edx
add ecx, 0xd7711f82
adc edx, 0x65494
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], edx
jmp 0x100636ff
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov edx, dword [ebp - 0x110]
or edx, dword [ebp - 0x10c]
jne 0x100634d6
cmp dword [ebp - 0x3c], 0
je 0x100634d6
xorps xmm0, xmm0
movlpd qword [ebp - 0xb8], xmm0
jmp 0x100634e8
xor eax, eax
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xb4], eax
mov ecx, dword [0x100c3100]
mov edx, dword [0x100c3104]
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xec], edx
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0xf0]
jne 0x10063528
mov ecx, dword [ebp - 0xb4]
cmp ecx, dword [ebp - 0xec]
jne 0x10063528
mov dword [ebp - 0x9c], 1
jmp 0x10063532
mov dword [ebp - 0x9c], 0
mov edx, dword [ebp - 0x9c]
not edx
test edx, edx
je 0x100635ba
mov eax, dword [ebp - 0x24]
or eax, dword [ebp - 0x20]
je 0x1006355a
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xbc], edx
jmp 0x1006356e
movsx eax, word [0x100c3090]
cdq
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], edx
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x3c], eax
mov ecx, 4
imul edx, ecx, 0x4e96
mov eax, dword [ebp - 0xc]
sub eax, dword [edx + 0x10155538]
mov dword [ebp - 0xc], eax
movsx ecx, byte [str.NDisablePerfBackoff]
shl ecx, 4
mov dword [ebp - 0xc], ecx
mov edx, 0xffffdc0b
mov word [ebp - 8], dx
xor eax, eax
mov dword [0x100c3120], 0xdd
mov dword [0x100c3124], eax
jmp 0x100636ff
movsx ecx, word [0x100c30fc]
test ecx, ecx
je 0x10063622
mov eax, dword [0x100c30f8]
add eax, 0x8414
cdq
mov ecx, dword [0x100c3098]
mov esi, dword [0x100c309c]
sub ecx, eax
sbb esi, edx
mov dword [0x100c3098], ecx
mov dword [0x100c309c], esi
mov edx, dword [ebp - 0x18]
shl edx, 3
mov byte [0x100c3062], dl
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x144], ecx
sub eax, 0x5c
mov dword [ebp - 0x18], eax
movsx eax, word [0x100c308c]
cdq
mov dword [0x100c30f0], eax
mov dword [0x100c30f4], edx
jmp 0x100636ff
cmp dword [ebp - 0x60], 0
je 0x100636ff
movzx edx, word [0x100c30e0]
test edx, edx
jne 0x10063643
mov dword [ebp - 0xa0], 1
jmp 0x1006364d
mov dword [ebp - 0xa0], 0
movzx eax, word [ebp - 0x50]
xor eax, dword [ebp - 0xa0]
jne 0x1006366d
xor ecx, ecx
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0xc4], ecx
jmp 0x10063678
xorps xmm0, xmm0
movlpd qword [ebp - 0xc8], xmm0
mov edx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
movsx ecx, word [0x100c308c]
add ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
movsx eax, byte [0x100c3027]
cdq
mov ecx, dword [ebp - 0x6c]
push ecx
mov ecx, dword [ebp - 0x70]
push ecx
push edx
push eax
call fcn.1008eb70
mov byte [0x100c3027], al
movsx eax, word [0x100c3118]
cdq
push 0x46180
push 0x8f251daa
push edx
push eax
call fcn.1008eb70
mov word [ebp - 0x54], ax
mov dl, byte [0x100c3b38]
mov byte [0x100c3027], dl
mov eax, dword [0x100c30d0]
mov ecx, dword [0x100c30d4]
push 0
push 0x8cc0
push ecx
push eax
call fcn.1008eb70
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
jmp 0x1006378e
mov dx, word [ebp - 0x2c]
add dx, 1
mov word [ebp - 0x2c], dx
mov eax, dword [ebp - 0x70]
add eax, 0xc9cb0a40
mov dword [ebp - 0x18], eax
movsx eax, byte [0x100c3075]
add eax, 0x36ad
cdq
mov ecx, dword [ebp - 0x5c]
mov esi, dword [ebp - 0x58]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], esi
imul edx, dword [ebp - 0x18], 0x6eb59dca
movsx eax, byte [ebp - 1]
sub eax, edx
mov byte [ebp - 1], al
mov dword [ebp - 0x40], 0x8286b75a
cmp dword [ebp - 0x3c], 0
je 0x1006376f
mov ecx, dword [0x100c3080]
mov edx, dword [0x100c3084]
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xcc], edx
jmp 0x10063783
movzx eax, byte [0x100c303b]
cdq
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], edx
mov al, byte [ebp - 0xd0]
mov byte [0x100c3027], al
jmp 0x1006386e
movsx eax, word [0x100c3088]
cdq
mov ecx, eax
mov esi, edx
mov edx, dword [0x100c309c]
sub ecx, dword [0x100c3098]
sbb esi, edx
movzx eax, word [0x100c30e0]
cdq
sub ecx, eax
sbb esi, edx
mov dword [0x100c30d8], ecx
mov dword [0x100c30dc], esi
imul eax, dword [ebp - 0x30], 0x270e
mov dword [ebp - 0x30], eax
mov ecx, dword [0x100c30c0]
mov edx, dword [0x100c30c4]
add ecx, dword [ebp - 0x4c]
adc edx, dword [ebp - 0x48]
or ecx, dword [ebp - 0x4c]
or edx, dword [ebp - 0x48]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x148], ecx
sub eax, 0x4db42aa8
mov dword [ebp - 0x40], eax
mov edx, dword [0x100c30f8]
sub edx, dword [ebp - 0x44]
mov eax, dword [0x100c30f8]
sub eax, edx
mov dword [0x100c30f8], eax
xor ecx, ecx
mov edx, dword [0x100c30d8]
sub edx, dword [0x100c310c]
mov eax, dword [0x100c30dc]
sbb eax, ecx
mov dword [ebp - 0x118], edx
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp - 0x118]
or ecx, dword [ebp - 0x114]
jne 0x10063851
mov dword [ebp - 0xa4], 1
jmp 0x1006385b
mov dword [ebp - 0xa4], 0
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x44]
imul edx, dword [ebp - 0xa4]
mov byte [str.NDisablePerfBackoff], dl
cmp dword [ebp - 0xe8], 0
je 0x10063ccc
movsx eax, word [ebp - 8]
cmp eax, dword [ebp - 0x60]
jb 0x10063890
mov dword [ebp - 0xa8], 1
jmp 0x1006389a
mov dword [ebp - 0xa8], 0
mov ecx, dword [ebp - 0xa8]
not ecx
add ecx, dword [0x100c3108]
je 0x100639a9
movsx eax, word [0x100c3088]
cdq
push edx
push eax
mov edx, dword [0x100c3124]
push edx
mov eax, dword [0x100c3120]
push eax
push 0
push 0x5f
movsx eax, byte [ebp - 1]
cdq
push edx
push eax
call fcn.100502f0
add esp, 0x20
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], edx
mov ecx, dword [ebp - 0x4c]
or ecx, dword [ebp - 0x48]
je 0x100639a9
movzx edx, word [ebp - 0x50]
test edx, edx
jne 0x100638fb
mov eax, 0x68
test eax, eax
je 0x10063938
mov ecx, 8
mov word [ebp - 0x2c], cx
mov edx, dword [0x100c310c]
xor eax, eax
mov ecx, dword [0x100c3098]
mov esi, dword [0x100c309c]
push esi
push ecx
push eax
push edx
call fcn.1008eb70
mov edx, dword [0x100c310c]
sub edx, eax
mov dword [0x100c310c], edx
mov byte [0x100c3075], 0x6a
jmp 0x100639a9
mov eax, 2
imul ecx, eax, 0x61c0
movsx eax, word [ecx + 0x1013f1e8]
cdq
mov dword [0x100c3080], eax
mov dword [0x100c3084], edx
movsx edx, word [0x100c3088]
imul eax, edx, 0x18937716
movsx ecx, byte [0x100c3075]
sub ecx, eax
mov byte [0x100c3075], cl
mov edx, dword [ebp - 0x40]
xor eax, eax
push 0xd9010
push 0xc9f3f332
push eax
push edx
call fcn.1008eb70
mov word [0x100c30e0], ax
movsx eax, byte [str.NDisablePerfBackoff]
cdq
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], edx
mov ecx, dword [ebp - 0x30]
shl ecx, 2
mov word [0x100c3090], cx
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x64]
sub edx, 0x6f
sbb eax, 0
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x14c], edx
add ecx, 0xba96f846
mov dword [ebp - 0x30], ecx
movzx eax, word [0x100c30e0]
sub eax, 0x6a90
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
add ecx, 0xf5
mov dword [ebp - 0x3c], ecx
movzx eax, byte [0x100c3063]
sub eax, 0x27
cdq
mov dword [0x100c30d0], eax
mov dword [0x100c30d4], edx
mov edx, dword [ebp - 0x1a0]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
mov word [ebp - 8], ax
movzx eax, word [0x100c30b0]
cdq
mov ecx, dword [0x100c3120]
mov esi, dword [0x100c3124]
add ecx, eax
adc esi, edx
mov edx, dword [0x100c3120]
mov eax, dword [0x100c3124]
push esi
push ecx
push eax
push edx
call fcn.1008eb70
mov dword [0x100c3120], eax
mov dword [0x100c3124], edx
movzx eax, byte [0x100c303b]
cdq
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x60]
add ecx, 0x7a7
mov dword [ebp - 0xc], ecx
mov edx, dword [0x100c30d0]
mov eax, dword [0x100c30d4]
mov dword [ebp - 0x150], eax
sub edx, 0xa68c3b16
mov word [0x100c308c], dx
mov eax, dword [0x100c30e8]
mov edx, dword [0x100c30ec]
mov cl, 7
call fcn.1008ec80
mov dword [ebp - 0x18], eax
movzx eax, byte [ebp - 0x19]
cdq
mov ecx, dword [0x100c3080]
sub ecx, eax
mov eax, dword [0x100c3084]
sbb eax, edx
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x120]
or ecx, dword [ebp - 0x11c]
jne 0x10063add
xor edx, edx
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0xd4], edx
jmp 0x10063ae8
xorps xmm0, xmm0
movlpd qword [ebp - 0xd8], xmm0
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd4]
mov dword [0x100c30c8], eax
mov dword [0x100c30cc], ecx
movsx edx, word [ebp - 8]
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 0
je 0x10063b24
cmp dword [ebp - 0x84], 1
je 0x10063be4
jmp 0x10063cbf
mov eax, dword [ebp - 0x44]
cdq
mov ecx, eax
add ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x44]
cdq
add eax, ecx
mov dword [ebp - 0x44], eax
imul eax, dword [0x100c3108], 0xa4
cdq
mov dword [0x100c3110], eax
mov dword [0x100c3114], edx
mov edx, dword [ebp - 0x18]
add edx, 0x1aa60aca
mov dword [0x100c30f8], edx
mov eax, 0x4db2
mov word [0x100c30fc], ax
mov ecx, dword [0x100c30c8]
mov esi, dword [0x100c30cc]
add ecx, 0xdd84
adc esi, 0
mov edx, dword [0x100c30f8]
xor edx, 0x4742129c
xor eax, eax
and ecx, edx
and esi, eax
mov eax, dword [ebp - 0xc]
not eax
cdq
mov edi, eax
mov ebx, edx
movzx eax, byte [0x100c3063]
cdq
add eax, 0xc12aa228
adc edx, 0x26f61
not eax
not edx
xor edi, eax
xor ebx, edx
push ebx
push edi
push esi
push ecx
call fcn.1008eb70
mov word [ebp - 8], ax
mov ecx, dword [0x100c30c0]
mov edx, dword [0x100c30c4]
mov eax, dword [ebp - 0x64]
add ecx, dword [ebp - 0x68]
adc edx, eax
mov dword [0x100c30c0], ecx
mov dword [0x100c30c4], edx
jmp 0x10063cbf
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x58]
push 0
push 0x84dd6180
push edx
push ecx
call fcn.1008eb70
mov dword [ebp - 0x3c], eax
mov dword [0x100c30f8], 0xadba
movzx eax, byte [0x100c3062]
not eax
movsx ecx, word [0x100c3088]
add eax, ecx
not eax
cdq
add eax, dword [0x100c30f0]
adc edx, dword [0x100c30f4]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
mov edx, dword [ebp - 0x6c]
push edx
mov eax, dword [ebp - 0x70]
push eax
mov ecx, dword [ebp - 0x7c]
push ecx
mov edx, dword [ebp - 0x80]
push edx
call fcn.1008eb70
not eax
not edx
mov ecx, dword [ebp - 0x60]
xor esi, esi
push esi
push ecx
push edx
push eax
call fcn.1008eb70
mov byte [ebp - 2], al
mov edx, dword [0x100c30c8]
mov eax, dword [0x100c30cc]
mov dword [ebp - 0x128], edx
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x128]
or ecx, dword [ebp - 0x124]
je 0x10063c8d
mov eax, dword [ebp - 0xc]
cdq
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], edx
jmp 0x10063c9f
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xdc], eax
mov cx, word [ebp - 0xe0]
mov word [0x100c308c], cx
mov dx, word [0x100c30e0]
add dx, 1
mov word [0x100c30e0], dx
mov eax, dword [ebp - 0x19c]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret