Function at 0x10072720
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Create process on windows
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1019811b
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x140
mov eax, dword [0x101f6e00]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [ebx + 8]
mov eax, dword [esi + 0x188]
mov dword [0x1027e76c], eax
test edi, edi
je 0x10072938
cmp dword [ebx + 0xc], 1
jne 0x10072938
cmp edi, dword [esi + 0x70]
jne 0x10072ba8
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
cmp dword [esi + 0x8c], edx
jb 0x1007295a
ja 0x100727ac
cmp dword [esi + 0x88], eax
jbe 0x1007295a
mov eax, dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 0
call eax
mov edi, dword [esi + 0x88]
xorps xmm0, xmm0
mov ecx, dword [esi + 0x8c]
sub edi, eax
mov eax, edi
mov dword [ebp - 0xe8], edi
sbb ecx, edx
mov edx, 0x1a9fbe77
mul edx
mov eax, edi
mov dword [ebp - 0xe4], ecx
mov esi, edx
mov edx, 0x624dd2f
mul edx
mov edi, eax
mov dword [ebp - 0x114], edx
mov eax, ecx
mov ecx, 0x1a9fbe77
mul ecx
mov ecx, eax
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0xe4]
mov edx, 0x624dd2f
mul edx
add ecx, esi
mov esi, dword [ebp - 0xe8]
mov dword [ebp - 0x40], edx
mov edx, dword [ebp - 0x20]
adc edx, 0
mov dword [ebp - 0x118], eax
add edi, ecx
mov ecx, dword [ebp - 0x114]
adc ecx, 0
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x118]
adc eax, eax
add ecx, edx
mov edx, dword [ebp - 0x40]
adc edx, eax
mov eax, dword [ebp - 0xe4]
sub esi, ecx
sbb eax, edx
shrd esi, eax, 1
shr eax, 1
add esi, ecx
adc eax, edx
shrd esi, eax, 9
shr eax, 9
push eax
push esi
sub esp, 0x1c
lea eax, [ebp - 0xdd]
mov esi, esp
mov dword [ebp - 0xe8], eax
push 8
mov dword [esi], 0
movups xmmword [esi + 4], xmm0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
call fcn.1013ca30
add esp, 4
mov dword [ebp - 0xec], eax
mov dword [eax], esi
mov dword [eax + 4], 0
mov dword [esi], eax
push 0x20
mov dword [ebp - 4], 0
call fcn.100490d0
mov dword [esi + 4], eax
add esp, 4
mov dword [esi + 0x14], 0x18
mov dword [esi + 0x18], 0x1f
movups xmm0, xmmword [str.please_wait_this_time__d]
movups xmmword [eax], xmm0
movq xmm0, qword [0x101d906c]
movq qword [eax + 0x10], xmm0
mov byte [eax + 0x18], 0
lea eax, [ebp - 0xa4]
push eax
mov dword [ebp - 4], 0xffffffff
call fcn.10052ec0
add esp, 0x28
mov dword [ebp - 4], 1
lea ecx, [eax + 4]
cmp dword [eax + 0x18], 0xf
jbe 0x10072906
mov ecx, dword [ecx]
push ecx
push ecx
push 0xffc5d1bd
call fcn.100e4ef0
lea ecx, [ebp - 0xa4]
call fcn.100477d0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xa4], 0
push 8
push eax
call fcn.1013c8d0
add esp, 8
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1013c8c0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8
mov eax, dword [sym.imp.KERNEL32.dll_GetTickCount64]
call eax
mov ecx, dword [esi + 0x90]
add eax, 0xea60
mov dword [esi + 0x88], eax
mov eax, 0x416960
adc edx, 0
mov dword [esi + 0x8c], edx
call eax
push eax
lea ecx, [ebp - 0x38]
call fcn.10046cb0
mov dword [ebp - 4], 2
lea edx, [ebp - 0x34]
cmp dword [ebp - 0x20], 0xf
xorps xmm0, xmm0
mov dword [ebp - 0x6c], 0
cmova edx, dword [ebp - 0x34]
mov ecx, edx
mov dword [ebp - 0x58], 0
movups xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x54], 0
lea eax, [ecx + 1]
mov dword [ebp - 0xe8], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100729c4
sub ecx, dword [ebp - 0xe8]
push ecx
push edx
lea ecx, [ebp - 0x6c]
call fcn.100484d0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 4
call fcn.100477d0
mov eax, dword [ebp - 0x38]
push 8
push eax
mov dword [ebp - 0x38], 0
call fcn.1013c8d0
xorps xmm0, xmm0
mov dword [ebp - 0x88], 0
lea eax, [ebp - 0xdd]
mov dword [ebp - 0x74], 0
push 8
movups xmmword [ebp - 0x84], xmm0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x4c], eax
call fcn.1013ca30
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x50], eax
add esp, 0xc
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0x88], eax
push 0x30
mov byte [ebp - 4], 5
call fcn.100490d0
movups xmm0, xmmword [str.Please_check_the_characters_you_entered]
mov edx, eax
mov dword [ebp - 0x74], 0x27
mov dword [ebp - 0x84], edx
add esp, 4
mov dword [ebp - 0x70], 0x2f
mov dword [ebp - 0x50], 0
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x101d9088]
movups xmmword [edx + 0x10], xmm0
mov ecx, dword [0x101d9098]
mov dword [edx + 0x20], ecx
mov ax, word [0x101d909c]
mov word [edx + 0x24], ax
mov al, byte [0x101d909e]
mov byte [edx + 0x26], al
mov byte [edx + 0x27], 0
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x10072ec5
cmp eax, 0x14
jne 0x10072ec5
push eax
sub esp, 0x1c
lea eax, [ebp - 0x6c]
mov ecx, esp
push eax
call fcn.10046cb0
call fcn.100b1460
test al, al
je 0x10072ec5
push 4
push 0
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x6c]
call fcn.10046ae0
push 0xffffffffffffffff
push 4
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x6c]
call fcn.10046ae0
push ecx
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 8
call fcn.1006cd20
mov dword [ebp - method.Packet.virtual_0], vtable.Packet.0
mov byte [ebp - 0x11c], 0x59
lea eax, [ebp - 0xdc]
mov byte [ebp - 4], 9
push eax
push ecx
lea ecx, [ebp - 0xc0]
mov byte [ebp - 0x138], 0
call fcn.100711e0
add esp, 4
lea ecx, [ebp - 0x13c]
push eax
push 4
call fcn.10050990
mov ecx, eax
call fcn.10071240
mov ecx, eax
call fcn.10056a80
lea eax, [ebp - 0x13c]
push eax
call fcn.100e0040
lea ecx, [ebp - 0x13c]
call fcn.10050960
lea ecx, [ebp - 0xdc]
call fcn.10046bc0
lea ecx, [ebp - 0xc0]
call fcn.10046bc0
lea ecx, [ebp - 0x88]
call fcn.10046bc0
lea ecx, [ebp - 0x6c]
mov dword [ebp - 4], 0xffffffff
call fcn.10046bc0
cmp edi, dword [esi + 0xa4]
jne 0x10072bcb
push 0
mov ecx, esi
call fcn.10075610
mov ecx, dword [esi + 0xa0]
test ecx, ecx
je 0x10072bcb
push 0
call dword [0x101d64b8]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0xe4], 0
nop dword [eax]
mov ecx, dword [esi + 0x170]
mov eax, 0x66666667
sub ecx, dword [esi + 0x16c]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x20], eax
jb 0x10072c46
push str.vector_subscript_out_of_range
push 0x101d467c
push 0
push 0x762
push 0x101d5190
push 2
call fcn.10143d00
add esp, 0x18
cmp eax, 1
jne 0x10072c28
int3
push 0
push 0x762
push str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.40.33807include_vector
push 0x101d47ac
push str._vector_subscript_out_of_range_
call fcn.10152640
add esp, 0x14
mov eax, dword [esi + 0x16c]
mov ecx, dword [ebp - 0xe4]
cmp edi, dword [ecx + eax + 0x1c]
jne 0x10072e89
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
sub eax, dword [esi + 0x80]
sbb ecx, dword [esi + 0x84]
mov dword [ebp - 0x4c], ecx
js 0x1007307c
jg 0x10072c84
cmp eax, 5
jbe 0x1007307c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
lea ecx, [ebp - 0x110]
mov dword [esi + 0x80], eax
mov dword [esi + 0x84], 0
mov byte [ebp - 0xdd], 0xd4
call fcn.100508a0
mov dword [ebp - 4], 0xb
mov ecx, dword [ebp - 0xf8]
mov eax, ecx
mov edx, dword [ebp - 0xfc]
sub eax, edx
mov dword [ebp - method.Packet.virtual_0], vtable.Packet.0
mov byte [ebp - 0xf0], 0xe9
cmp eax, 0x989680
jb 0x10072cfe
push 0x97
push 0x101d5be8
push str.size_____10000000
call fcn.101598d0
mov ecx, dword [ebp - 0xf8]
add esp, 0xc
mov edx, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x104]
sub ecx, edx
mov edi, dword [ebx + 8]
lea edx, [eax + 1]
cmp ecx, edx
jae 0x10072d22
push edx
lea ecx, [ebp - 0x100]
call fcn.10052c60
mov eax, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0x100]
call fcn.10052c00
mov cl, byte [ebp - 0xdd]
mov byte [eax], cl
mov ecx, dword [ebp - 0x104]
inc ecx
mov dword [ebp - 0x104], ecx
mov dword [ebp - 4], 0xc
mov edx, dword [ebp - 0xf8]
mov eax, edx
sub eax, dword [ebp - 0xfc]
mov byte [ebp - 0xdd], 0
cmp eax, 0x989680
jb 0x10072d89
push 0x97
push 0x101d5be8
push str.size_____10000000
call fcn.101598d0
mov edx, dword [ebp - 0xf8]
add esp, 0xc
mov ecx, dword [ebp - 0x104]
sub edx, dword [ebp - 0xfc]
lea eax, [ecx + 1]
cmp edx, eax
jae 0x10072da8
push eax
lea ecx, [ebp - 0x100]
call fcn.10052c60
mov ecx, dword [ebp - 0x104]
push ecx
lea ecx, [ebp - 0x100]
call fcn.10052c00
mov cl, byte [ebp - 0xdd]
mov byte [eax], cl
mov eax, 0x66666667
mov ecx, dword [esi + 0x170]
sub ecx, dword [esi + 0x16c]
inc dword [ebp - 0x104]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x20], eax
jb 0x10072e28
push str.vector_subscript_out_of_range
push 0x101d467c
push 0
push 0x762
push 0x101d5190
push 2
call fcn.10143d00
add esp, 0x18
cmp eax, 1
jne 0x10072e0a
int3
push 0
push 0x762
push str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.40.33807include_vector
push 0x101d47ac
push str._vector_subscript_out_of_range_
call fcn.10152640
add esp, 0x14
mov eax, dword [esi + 0x16c]
mov ecx, dword [ebp - 0xe4]
push dword [ecx + eax + 0xc]
push dword [ecx + eax + 8]
lea ecx, [ebp - 0x110]
call fcn.100712a0
lea ecx, [ebp - 0x110]
call fcn.100c62b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x100]
mov dword [ebp - method.ByteBuffer.virtual_0], vtable.ByteBuffer.0
call fcn.10052cf0
mov eax, dword [ebp - 0x100]
push 8
push eax
mov dword [ebp - 0x100], 0
call fcn.1013c8d0
add esp, 8
mov eax, dword [ebp - 0xe4]
inc dword [ebp - 0x20]
add eax, 0x28
mov dword [ebp - 0xe4], eax
cmp eax, 0x2d0
jl 0x10072be0
cmp edi, dword [esi + 0x60]
jne 0x1007319f
mov ecx, esi
call fcn.10075220
push edi
mov ecx, esi
call fcn.10079560
mov al, 1
jmp 0x1007293a
cmp dword [ebp - 0x70], 0xf
lea eax, [ebp - 0x84]
push 0
cmova eax, dword [ebp - 0x84]
push eax
push ecx
push 0xffc5d1bd
call fcn.100e4ef0
push 3
lea ecx, [ebp - 0xe8]
call fcn.10139310
mov ecx, dword [ebp - 0x88]
test ecx, ecx
je 0x10072f1d
mov eax, dword [ecx + 4]
mov dword [ecx + 4], 0
test eax, eax
je 0x10072f1d
nop dword [eax]
mov dword [eax], 0
mov eax, dword [eax + 4]
test eax, eax
jne 0x10072f10
lea ecx, [ebp - 0xe8]
call fcn.101393c0
mov eax, dword [ebp - 0x70]
cmp eax, 0xf
jbe 0x10072f8e
mov edi, dword [ebp - 0x84]
lea esi, [eax + 1]
test edi, edi
jne 0x10072f84
test esi, esi
je 0x10072f84
push str.null_pointer_cannot_point_to_a_block_of_non_zero_size
push 0x101d467c
push edi
push 0x3b4
push 0x101d4680
push 2
call fcn.10143d00
add esp, 0x18
cmp eax, 1
jne 0x10072f66
int3
push 0
push 0x3b4
push str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.40.33807includexmemory
push 0x101d47ac
push str._null_pointer_cannot_point_to_a_block_of_non_zero_size_
call fcn.10152640
add esp, 0x14
push esi
push edi
call fcn.10048760
add esp, 8
mov eax, dword [ebp - 0x88]
push 8
push eax
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x70], 0xf
mov byte [ebp - 0x84], 0
mov dword [ebp - 0x88], 0
call fcn.1013c8d0
add esp, 8
lea ecx, [ebp - 0xe8]
push 3
call fcn.10139310
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
je 0x10072fed
mov eax, dword [ecx + 4]
mov dword [ecx + 4], 0
test eax, eax
je 0x10072fed
mov dword [eax], 0
mov eax, dword [eax + 4]
test eax, eax
jne 0x10072fe0
lea ecx, [ebp - 0xe8]
call fcn.101393c0
mov eax, dword [ebp - 0x54]
cmp eax, 0xf
jbe 0x1007305b
mov edi, dword [ebp - 0x68]
lea esi, [eax + 1]
test edi, edi
jne 0x10073051
test esi, esi
je 0x10073051
push str.null_pointer_cannot_point_to_a_block_of_non_zero_size
push 0x101d467c
push edi
push 0x3b4
push 0x101d4680
push 2
call fcn.10143d00
add esp, 0x18
cmp eax, 1
jne 0x10073033
int3
push 0
push 0x3b4
push str.C:Program_FilesMicrosoft_Visual_Studio2022CommunityVCToolsMSVC14.40.33807includexmemory
push 0x101d47ac
push str._null_pointer_cannot_point_to_a_block_of_non_zero_size_
call fcn.10152640
add esp, 0x14
push esi
push edi
call fcn.10048760
add esp, 8
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0xf
mov byte [ebp - 0x68], 0
mov dword [ebp - 0x6c], 0
jmp 0x1007292d
mov dl, 0x28
mov dword [ebp - 0x48], 0x45415c28
mov dword [ebp - 0x44], 0x5a4d084d
xor ecx, ecx
mov dword [ebp - 0x40], 0x95a475a
mov byte [ebp - 0x3c], 0
nop dword [eax]
xor byte [ebp + ecx - 0x47], dl
inc ecx
cmp ecx, 0xb
jae 0x100730af
mov dl, byte [ebp - 0x48]
jmp 0x100730a0
sub esp, 0x1c
mov byte [ebp - 0x3c], 0
mov edx, esp
lea ecx, [ebp - 0x47]
xorps xmm0, xmm0
lea esi, [ecx + 1]
mov dword [edx], 0
movups xmmword [edx + 4], xmm0
mov dword [edx + 0x14], 0
mov dword [edx + 0x18], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100730e0
sub ecx, esi
lea eax, [ebp - 0x47]
push ecx
push eax
mov ecx, edx
call fcn.100484d0
lea eax, [ebp - 0xa4]
push eax
call fcn.10052ec0
add esp, 0x20
mov dword [ebp - 4], 0xa
lea ecx, [eax + 4]
cmp dword [eax + 0x18], 0xf
mov dword [ebp - 0xe4], ecx
jbe 0x10073122
mov ecx, dword [ecx]
mov dword [ebp - 0xe4], ecx
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10073125
sub ecx, edx
mov dword [ebp - 0x20], ecx
lea esi, [ecx + 0x21]
push esi
call fcn.1013d380
add esp, 4
mov edi, eax
mov dword [ebp - 0xe8], edi
push esi
push 0
push edi
call fcn.1013f8f0
add esp, 0xc
lea esi, [edi + 0x20]
push dword [ebp - 0x20]
push dword [ebp - 0xe4]
push esi
call fcn.1013f190
mov eax, dword [ebp - 0x20]
add esp, 0xc
mov dword [edi + 0x14], eax
mov dword [edi + 4], esi
mov dword [edi + 0x18], 0x1f
mov ecx, dword ds:[0xf3690c]
push 0
push 0xa30000
push dword [ebp - 0xe8]
mov eax, dword [0x101d63dc]
call eax
push edi
call fcn.1013c8d0
add esp, 4
jmp 0x10072912
cmp edi, dword [esi + 0x68]
jne 0x100731e9
mov eax, dword [esi]
cmp eax, dword [esi + 4]
jge 0x10073bf4
sub esp, 0x1c
inc eax
mov edi, esp
mov dword [esi], eax
xorps xmm0, xmm0
push 8
mov dword [edi], 0
movups xmmword [edi + 4], xmm0
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
call fcn.1013ca30
add esp, 4
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [edi], eax
jmp 0x10073231
cmp edi, dword [esi + 0x6c]
jne 0x10073268
mov eax, dword [esi]
cmp eax, 1
jle 0x10073bf4
sub esp, 0x1c
dec eax
mov edi, esp
mov dword [esi], eax
xorps xmm0, xmm0
push 8
mov dword [edi], 0
movups xmmword [edi + 4], xmm0
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
call fcn.1013ca30
add esp, 4
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [edi], eax
mov dword [edi + 0x14], 0
mov ecx, esi
mov dword [edi + 0x18], 0xf
mov byte [edi + 4], 0
mov dword [ebp - 4], 0xffffffff
push dword [esi + 8]
push dword [esi]
call fcn.10076850
mov edi, dword [ebx + 8]
mov ecx, esi
push edi
call fcn.10079560
mov al, 1
jmp 0x1007293a
cmp edi, dword [esi + 0x18c]
jne 0x10073327
mov ecx, dword [esi + 0xf4]
mov eax, 0x416960
call eax
push eax
lea ecx, [ebp - 0x6c]
call fcn.10046cb0
mov dword [ebp - 4], 0xf
lea eax, [ebp - 0x68]
cmp dword [ebp - 0x54], 0xf
xorps xmm0, xmm0
cmova eax, dword [ebp - 0x68]
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x40], eax
mov ecx, eax
mov dword [edx], 0
movups xmmword [edx + 4], xmm0
lea eax, [ecx + 1]
mov dword [edx + 0x14], 0
mov dword [edx + 0x18], 0
mov dword [ebp - 0xe8], eax
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100732d0
sub ecx, dword [ebp - 0xe8]
push ecx
push dword [ebp - 0x40]
mov ecx, edx
call fcn.100484d0
push dword [esi + 8]
mov ecx, esi
push dword [esi]
call fcn.10076850
lea ecx, [ebp - 0x6c]
mov dword [ebp - 4], 0xffffffff
call fcn.100477d0
mov eax, dword [ebp - 0x6c]
push 8
push eax
mov dword [ebp - 0x6c], 0
call fcn.1013c8d0
add esp, 8
mov ecx, esi
push edi
call fcn.10079560
mov al, 1
jmp 0x1007293a
cmp edi, dword [esi + 0x78]
jne 0x10073342
mov ecx, esi
call fcn.100799f0
push edi
mov ecx, esi
call fcn.10079560
mov al, 1
jmp 0x1007293a
cmp edi, dword [esi + 0x58]
jne 0x1007335d
mov ecx, esi
call fcn.10079bc0
push edi
mov ecx, esi
call fcn.10079560
mov al, 1
jmp 0x1007293a
cmp edi, dword [esi + 0x5c]
jne 0x1007337b
push 0
push dword [esi + 0x50]
call fcn.100e1860
push edi
mov ecx, esi
call fcn.10079560
mov al, 1
jmp 0x1007293a
cmp edi, dword [esi + 0x74]
jne 0x10073396
mov ecx, esi
call fcn.1007a090
push edi
mov ecx, esi
call fcn.10079560
mov al, 1
jmp 0x1007293a
cmp edi, dword [esi + 0x24]
jne 0x1007354f
cmp dword [esi + 0x4c], 0
je 0x10072938
cmp dword [esi + 0xc], 0
jne 0x100733b6
mov dword [esi + 0xc], 1
push ecx
lea ecx, [ebp - 0x110]
call fcn.1006cd20
mov dword [ebp - method.Packet.virtual_0], vtable.Packet.0
mov byte [ebp - 0xf0], 0xe9
push 0xa8
lea ecx, [ebp - 0x110]
mov dword [ebp - 4], 0x10
call fcn.10050990
push dword [esi + 0x4c]
lea eax, [ebp - 0xdc]
mov byte [ebp - 0x10c], 1
push eax
call fcn.100e7ed0
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.10046b50
push eax
lea ecx, [ebp - 0xa4]
call fcn.10046c60
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x13
call fcn.10046bc0
cmp dword [ebp - 0x90], 0
jne 0x10073454
movzx eax, byte [esi + 0xc]
lea ecx, [ebp - 0x110]
push eax
push dword [esi + 0x14]
push 1
call fcn.10050990
mov ecx, eax
call fcn.10071240
mov ecx, eax
call fcn.10050990
jmp 0x10073498
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xc0]
call fcn.10046cb0
push eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x110]
push dword [esi + 0x14]
push 3
call fcn.10050990
mov ecx, eax
call fcn.10071240
mov ecx, eax
call fcn.10056a80
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x13
call fcn.10046bc0
lea eax, [ebp - 0x110]
push eax
call fcn.100e0040
push 0
push dword [esi + 0x20]
call fcn.100e1860
push 2
push dword [esi + 0x24]
call fcn.100e5090
push 2
push dword [esi + 0x28]
call fcn.100e5090
sub esp, 0x1c
mov dword [esi + 0xc], 1
mov edi, esp
push 1
sub esp, 0x1c
mov ecx, esp
push 0x101d5de4
call fcn.10046c60
push edi
call fcn.10052ec0
add esp, 0x24
push dword [esi + 0x48]
call fcn.100e11c0
push 0x101d47e8
lea ecx, [ebp - 0xc0]
call fcn.10046c60
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x15
mov ecx, dword [esi + 0x4c]
push eax
mov eax, 0x4189a0
call eax
lea ecx, [ebp - 0xc0]
call fcn.10046bc0
lea ecx, [ebp - 0xa4]
call fcn.10046bc0
lea ecx, [ebp - 0x110]
mov dword [ebp - 4], 0xffffffff
call fcn.10050960
mov edi, dword [ebx + 8]
mov ecx, esi
push edi
call fcn.10079560
mov al, 1
jmp 0x1007293a
cmp edi, dword [esi + 0x40]
jne 0x100736c1
mov eax, dword [esi + 0xc]
inc eax
mov dword [esi + 0xc], eax
cmp eax, 0x1c
jle 0x10073570
mov dword [esi + 0xc], 0x1c
mov eax, 0x1c
sub esp, 0x1c
mov edi, esp
push eax
sub esp, 0x1c
mov ecx, esp
push 0x101d5de4
call fcn.10046c60
push edi
call fcn.10052ec0
add esp, 0x24
push dword [esi + 0x48]
call fcn.100e11c0
sub esp, 0x1c
lea eax, [ebp - 0xc0]
mov dword [ebp - 0xe8], esp
push 0x2e
push dword [esi + 0xc]
push eax
call fcn.10109b90
mov ecx, eax
mov dword [ebp - 4], 0x16
call fcn.10046b50
push eax
mov dword [ebp - 0x2c], 0x5e4a6e3f
xor edi, edi
mov dword [ebp - 0x28], 0x4b564b51
mov dword [ebp - 0x24], 0x1a1f0546
mov word [ebp - 0x20], 0x4c
nop dword [eax]
push edi
lea ecx, [ebp - 0x2b]
call fcn.10061240
push edi
lea ecx, [ebp - 0x2b]
mov al, byte [eax]
xor al, byte [ebp - 0x2c]
mov byte [ebp - 0xdd], al
call fcn.10061240
mov cl, byte [ebp - 0xdd]
inc edi
mov byte [eax], cl
cmp edi, 0xc
jb 0x100735e0
push 0xc
lea ecx, [ebp - 0x2b]
call fcn.10061240
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp - 0x2b]
push eax
call fcn.10046c60
push dword [ebp - 0xe8]
call fcn.10052ec0
add esp, 0x24
push dword [esi + 0x38]
call fcn.100e11c0
lea ecx, [ebp - 0xc0]
mov dword [ebp - 4], 0xffffffff
call fcn.10046bc0
mov eax, dword [esi + 0x18]
sub esp, 0x1c
imul eax, dword [esi + 0xc]
xor edi, edi
movaps xmm0, xmmword [0x101dd8f0]
mov dword [ebp - 0xe8], esp
movups xmmword [ebp - 0x2c], xmm0
push eax
nop dword [eax]
push edi
lea ecx, [ebp - 0x2b]
call fcn.100564d0
mov cl, byte [ebp - 0x2c]
push edi
xor cl, byte [eax]
mov byte [ebp - 0xdd], cl
lea ecx, [ebp - 0x2b]
call fcn.100564d0
mov cl, byte [ebp - 0xdd]
inc edi
mov byte [eax], cl
cmp edi, 0xe
jb 0x10073670
push 0xe
lea ecx, [ebp - 0x2b]
call fcn.100564d0
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp - 0x2b]
push eax
call fcn.10046c60
push dword [ebp - 0xe8]
jmp 0x1007381c
cmp edi, dword [esi + 0x44]
jne 0x1007383e
mov eax, dword [esi + 0xc]
test eax, eax
jle 0x100736d5
dec eax
mov dword [esi + 0xc], eax
sub esp, 0x1c
mov edi, esp
push eax
sub esp, 0x1c
mov ecx, esp
push 0x101d5de4
call fcn.10046c60
push edi
call fcn.10052ec0
add esp, 0x24
push dword [esi + 0x48]
call fcn.100e11c0
sub esp, 0x1c
lea eax, [ebp - 0xc0]
mov dword [ebp - 0xe8], esp
push 0x2e
push dword [esi + 0xc]
push eax
call fcn.10109b90
mov ecx, eax
mov dword [ebp - 4], 0x17
call fcn.10046b50
push eax
mov dword [ebp - 0x2c], 0x2f3b1f4e
xor edi, edi
mov dword [ebp - 0x28], 0x3a273a20
mov dword [ebp - 0x24], 0x6b6e7437
mov word [ebp - 0x20], 0x3d
push edi
lea ecx, [ebp - 0x2b]
call fcn.10061240
mov cl, byte [ebp - 0x2c]
push edi
xor cl, byte [eax]
mov byte [ebp - 0xdd], cl
lea ecx, [ebp - 0x2b]
call fcn.10061240
mov cl, byte [ebp - 0xdd]
inc edi
mov byte [eax], cl
cmp edi, 0xc
jb 0x10073741
push 0xc
lea ecx, [ebp - 0x2b]
call fcn.10061240
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp - 0x2b]
push eax
call fcn.10046c60
push dword [ebp - 0xe8]
call fcn.10052ec0
add esp, 0x24
push dword [esi + 0x38]
call fcn.100e11c0
lea ecx, [ebp - 0xc0]
mov dword [ebp - 4], 0xffffffff
call fcn.10046bc0
mov eax, dword [esi + 0x18]
sub esp, 0x1c
imul eax, dword [esi + 0xc]
xor edi, edi
movaps xmm0, xmmword [0x101dd910]
mov dword [ebp - 0xe8], esp
movups xmmword [ebp - 0x2c], xmm0
push eax
nop dword [eax]
push edi
lea ecx, [ebp - 0x2b]
call fcn.100564d0
mov cl, byte [ebp - 0x2c]
push edi
xor cl, byte [eax]
mov byte [ebp - 0xdd], cl
lea ecx, [ebp - 0x2b]
call fcn.100564d0
mov cl, byte [ebp - 0xdd]
inc edi
mov byte [eax], cl
cmp edi, 0xe
jb 0x100737d0
push 0xe
lea ecx, [ebp - 0x2b]
call fcn.100564d0
sub esp, 0x1c
mov ecx, esp
mov byte [eax], 0
lea eax, [ebp - 0x2b]
push eax
call fcn.10046c60
push dword [ebp - 0xe8]
call fcn.10052ec0
add esp, 0x24
push dword [esi + 0x3c]
call fcn.100e11c0
mov edi, dword [ebx + 8]
mov ecx, esi
push edi
call fcn.10079560
mov al, 1
jmp 0x1007293a
cmp edi, dword [esi + 0x28]
jne 0x100738a1
push 0
push dword [esi + 0x20]
call fcn.100e1860
push 2
push dword [esi + 0x24]
call fcn.100e5090
push 2
push dword [esi + 0x28]
call fcn.100e5090
sub esp, 0x1c
mov dword [esi + 0xc], 1
mov edi, esp
push 1
sub esp, 0x1c
mov ecx, esp
push 0x101d5de4
call fcn.10046c60
push edi
call fcn.10052ec0
add esp, 0x24
push dword [esi + 0x48]
call fcn.100e11c0
mov edi, dword [ebx + 8]
mov ecx, esi
push edi
call fcn.10079560
mov al, 1
jmp 0x1007293a
cmp edi, dword [esi + 0x7c]
jne 0x100738be
push 0
mov ecx, esi
call fcn.10075610
push edi
mov ecx, esi
call fcn.10079560
mov al, 1
jmp 0x1007293a
cmp edi, dword [esi + 0x64]
jne 0x10073969
mov eax, dword [0x10297f7c]
mov eax, dword [eax + 0x4d8]
test eax, eax
je 0x10073bf4
cmp dword [eax + 0xa4], 0
je 0x10073bf4
mov dword [ebp - 0x50], 0x57425d32
xor edi, edi
mov word [ebp - 0x4c], 0x5c
push edi
lea ecx, [ebp - 0x4f]
call fcn.1004c000
mov cl, byte [ebp - 0x50]
push edi
xor cl, byte [eax]
mov byte [ebp - 0xdd], cl
lea ecx, [ebp - 0x4f]
call fcn.1004c000
mov cl, byte [ebp - 0xdd]
inc edi
mov byte [eax], cl
cmp edi, 4
jb 0x100738f6
push 4
lea ecx, [ebp - 0x4f]
call fcn.1004c000
push 1
push 0
push 0
mov byte [eax], 0
mov eax, dword [0x10297f7c]
mov ecx, dword [eax + 0x4d8]
add ecx, 0x90
call fcn.10046b50
push eax
lea eax, [ebp - 0x4f]
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov edi, dword [ebx + 8]
mov ecx, esi
push edi
call fcn.10079560
mov al, 1
jmp 0x1007293a
mov eax, dword [esi + 0x110]
lea edx, [esi + 0x108]
sub eax, dword [esi + 0x10c]
xor ecx, ecx
sar eax, 2
mov dword [ebp - 0x20], ecx
test eax, eax
je 0x10073a57
nop dword [eax + eax]
push ecx
mov ecx, edx
call fcn.1007a5b0
cmp edi, dword [eax]
jne 0x10073a33
mov eax, dword [esi + 0x110]
xor edi, edi
sub eax, dword [esi + 0x10c]
sar eax, 2
test eax, eax
je 0x100739e9
nop word [eax + eax]
push edi
lea ecx, [esi + 0x108]
call fcn.1007a5b0
push 2
push dword [eax]
call fcn.100e5090
mov eax, dword [esi + 0x110]
inc edi
sub eax, dword [esi + 0x10c]
sar eax, 2
cmp edi, eax
jb 0x100739c0
mov edi, dword [ebp - 0x20]
lea ecx, [esi + 0x108]
push edi
call fcn.1007a5b0
push 7
push dword [eax]
call fcn.100e5090
sub esp, 0x1c
mov dword [esi], 1
lea eax, [edi + 1]
mov ecx, esp
mov dword [ebp - 0x20], eax
mov dword [esi + 8], eax
push 0x101d47e8
call fcn.10046c60
push dword [esi + 8]
mov ecx, esi
push dword [esi]
call fcn.10076850
mov edi, dword [ebx + 8]
mov ecx, dword [ebp - 0x20]
jmp 0x10073a3a
mov ecx, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x20], ecx
mov eax, dword [esi + 0x110]
lea edx, [esi + 0x108]
sub eax, dword [esi + 0x10c]
sar eax, 2
cmp ecx, eax
jb 0x10073990
xor eax, eax
lea ecx, [esi + 0x128]
mov dword [ebp - 0xe4], eax
push eax
call fcn.1007a540
cmp dword [eax + 0x14], 0
je 0x10073b08
push dword [ebp - 0xe4]
lea ecx, [esi + 0x128]
call fcn.1007a540
cmp edi, dword [eax + 0x14]
jne 0x10073b08
push dword [ebp - 0xe4]
lea ecx, [esi + 0x128]
call fcn.1007a540
lea ecx, [esi + 0x148]
xor edi, edi
mov eax, dword [eax]
mov dword [esi + 0x10], eax
call fcn.1007a8e0
test eax, eax
je 0x10073b01
push edi
call fcn.1007a860
lea ecx, [esi + 0x148]
mov eax, dword [eax + 4]
cmp eax, dword [esi + 0x10]
je 0x10073ad2
inc edi
call fcn.1007a8e0
cmp edi, eax
jb 0x10073ab2
jmp 0x10073b01
push edi
call fcn.1007a860
push edi
lea ecx, [esi + 0x148]
mov eax, dword [eax]
mov dword [esi + 0x14], eax
call fcn.1007a860
push edi
lea ecx, [esi + 0x148]
mov eax, dword [eax + 8]
mov dword [esi + 0x18], eax
call fcn.1007a860
mov eax, dword [eax + 0xc]
mov dword [esi + 0x1c], eax
mov ecx, esi
call fcn.10073c50
mov eax, dword [ebp - 0xe4]
lea ecx, [esi + 0x128]
mov edi, dword [ebx + 8]
inc eax
mov dword [ebp - 0xe4], eax
cmp eax, 0x10
jl 0x10073a65
xor eax, eax
lea ecx, [esi + 0x128]
mov dword [ebp - 0xe4], eax
push eax
call fcn.1007a540
cmp dword [eax + 0x18], 0
je 0x10073bd5
push dword [ebp - 0xe4]
lea ecx, [esi + 0x128]
call fcn.1007a540
mov edi, dword [ebx + 8]
cmp edi, dword [eax + 0x18]
jne 0x10073bd8
push dword [ebp - 0xe4]
lea ecx, [esi + 0x128]
call fcn.1007a540
mov eax, dword [eax]
mov dword [esi + 0x10], eax
test eax, eax
je 0x10073bd8
lea ecx, [esi + 0x148]
xor edi, edi
call fcn.1007a8e0
test eax, eax
je 0x10073bd5
nop dword [eax]
push edi
call fcn.1007a860
lea ecx, [esi + 0x148]
mov eax, dword [eax + 4]
cmp eax, dword [esi + 0x10]
je 0x10073bb0
inc edi
call fcn.1007a8e0
cmp edi, eax
jb 0x10073b90
jmp 0x10073bd5
push edi
call fcn.1007a860
lea ecx, [esi + 0x148]
movzx eax, byte [eax + 0x10]
push eax
push edi
call fcn.1007a860
mov ecx, esi
mov eax, dword [eax + 8]
push eax
push dword [esi + 0x10]
call fcn.100786c0
mov edi, dword [ebx + 8]
mov eax, dword [ebp - 0xe4]
lea ecx, [esi + 0x128]
inc eax
mov dword [ebp - 0xe4], eax
cmp eax, 0x10
jl 0x10073b35
push edi
mov ecx, esi
call fcn.10079560
mov al, 1
jmp 0x1007293a