Function at 0x10069060
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Encode data using xor
Hide graphical window

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x98
mov ecx, dword [0x10240b04]
push esi
push edi
mov eax, dword [ecx + 0x1cdc]
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1cdc]
mov dword [ebp - 0x30], eax
cmp byte [eax + 0x8f], 0
jne 0x10069a96
mov edi, dword [0x10240b04]
mov ecx, eax
push 0
push dword [ebx + 8]
mov dword [ebp - 0x18], edi
call fcn.10040260
push ecx
mov dword [esp], 0xbf800000
mov esi, eax
push 1
push 0
push dword [ebx + 8]
lea eax, [ebp - 0x90]
push eax
call fcn.1003b5a0
mov eax, dword [ebp - 0x30]
add esp, 0xc
movss xmm1, dword [edi + 0x1554]
mulss xmm1, dword [0x10157684]
mov dword [ebp - 0xc], 0x41d20000
movss xmm0, dword [eax + 0xd0]
movss dword [ebp - 0x48], xmm0
movss xmm0, dword [eax + 0xd4]
lea eax, [ebp - 0x98]
addss xmm1, dword [ebp - 0x8c]
movss dword [ebp - 4], xmm0
movss xmm0, dword [edi + 0x1550]
mulss xmm0, dword [0x10157684]
mov dword [ebp - 0x10], 0x42ea0000
movss dword [esp + 4], xmm1
addss xmm0, dword [ebp - 0x90]
movss dword [esp], xmm0
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push eax
call fcn.10043280
movss xmm2, dword ds:[ebp - 0x48]
lea eax, [ebp - 0x98]
movss xmm3, dword [ebp - 4]
movaps xmm1, xmm2
addss xmm1, dword [ebp - 0x98]
movaps xmm0, xmm3
movss dword [ebp - 0x80], xmm2
addss xmm0, dword [ebp - 0x94]
add esp, 0x10
movss dword [ebp - 0x7c], xmm3
movss dword [ebp - 0x78], xmm1
movss dword [ebp - 0x74], xmm0
movss xmm0, dword [edi + 0x1554]
movss dword [esp], xmm0
push eax
call fcn.10042c60
push 0
push 0
lea eax, [ebp - 0x80]
push esi
push eax
call fcn.10042e00
add esp, 0x18
test al, al
je 0x10069a96
push 0
lea eax, [ebp - 6]
push eax
lea eax, [ebp - 7]
push eax
lea eax, [ebp - 0x80]
push esi
push eax
call fcn.1007a220
push 0x3c
mov byte [ebp - 5], al
call fcn.100385a0
mov ecx, dword [0x1024c214]
add esp, 0x18
movups xmm0, xmmword [eax]
mov eax, dword fs:[0x2c]
movaps xmmword [ebp - 0x40], xmm0
movaps xmmword [ebp - 0x70], xmm0
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1024b854]
cmp eax, dword [ecx + 4]
jg 0x10069a9f
cmp byte [ebp - 5], 0
je 0x10069223
push 0
push str.modaldiscord
call fcn.10039540
add esp, 8
jmp 0x10069259
cmp byte [ebp - 6], 0
je 0x10069242
push 0
push str.modaldiscord
call fcn.10039a80
add esp, 8
test al, al
jne 0x10069242
push 0x3e
jmp 0x1006924a
cmp byte [ebp - 7], 0
je 0x10069259
push 0x3d
call fcn.100385a0
add esp, 4
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x70], xmm0
call fcn.10033380
mov edi, eax
xor esi, esi
movss xmm0, dword [esi + 0x1024b844]
sub esp, 8
subss xmm0, dword [ebp + esi - 0x70]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.100f917f
movss xmm1, dword [esi + 0x1024b844]
add esp, 8
movss xmm2, dword [ebp + esi - 0x70]
comiss xmm2, xmm1
fstp dword [ebp - 4]
jbe 0x100692c2
movss xmm0, dword [ebp - 4]
mulss xmm0, dword [edi + 0x10]
mulss xmm0, dword [0x1015d7c0]
addss xmm0, xmm1
minss xmm0, xmm2
movss dword [esi + 0x1024b844], xmm0
jmp 0x100692e9
comiss xmm1, xmm2
jbe 0x100692e9
movss xmm0, dword [ebp - 4]
mulss xmm0, dword [edi + 0x10]
mulss xmm0, dword [0x10157e34]
subss xmm1, xmm0
maxss xmm1, xmm2
movss dword [esi + 0x1024b844], xmm1
add esi, 4
cmp esi, 0xc
jl 0x10069262
mov esi, dword [ebp - 0x18]
push 0x1024b844
movss xmm0, dword [esi + 0x1558]
movss dword [ebp - 0x48], xmm0
call fcn.10038460
movss xmm0, dword [ebp - 0x48]
movss dword [esp], xmm0
push 0
push eax
push dword [ebp - 0x74]
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
push dword [ebp - 0x80]
call fcn.10045d40
mov eax, dword fs:[0x2c]
add esp, 0x1c
mov ecx, dword [0x1024c214]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1024b860]
cmp eax, dword [ecx + 4]
jg 0x10069ad6
push dword [ebx + 8]
call fcn.100390a0
movups xmm0, xmmword [esi + 0x15dc]
add esp, 4
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
mov ecx, 0x1024b858
movups xmmword [ebp - 0x40], xmm0
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.100887e0
mov esi, dword [ebp - 0xc]
mov eax, dword [0x1024b858]
cmp byte [esi + 0xd], 0
jne 0x10069391
mov ecx, dword [ebp - 4]
cmp ecx, dword [esi + 0x10]
jae 0x10069393
mov esi, eax
cmp esi, eax
jne 0x100693d6
lea eax, [ebp - 0x40]
mov ecx, 0x1024b858
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10088a40
lea eax, [ebp - 4]
mov ecx, 0x1024b858
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.100887e0
mov esi, dword [ebp - 0xc]
cmp byte [esi + 0xd], 0
jne 0x100693d0
mov eax, dword [ebp - 4]
cmp eax, dword [esi + 0x10]
jae 0x100693d6
mov esi, dword [0x1024b858]
movss xmm0, dword [0x1024b844]
sub esp, 8
movss xmm1, dword [ebp - 0x3c]
addss xmm1, dword [ebp - 0x40]
addss xmm0, dword [0x1024b848]
addss xmm1, dword [ebp - 0x38]
addss xmm0, dword [0x1024b84c]
divss xmm1, dword [0x1015c778]
divss xmm0, dword [0x1015c778]
subss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
call fcn.100f917f
movss xmm0, dword [0x10157fcc]
add esp, 8
movss xmm1, dword [0x10157560]
fstp dword [ebp - 0x48]
comiss xmm0, dword [ebp - 0x48]
jbe 0x1006945c
movaps xmm3, xmm1
movaps xmm4, xmm1
subss xmm3, dword [ebp - 0x40]
subss xmm4, dword [ebp - 0x3c]
movaps xmm5, xmm1
subss xmm5, dword [ebp - 0x38]
jmp 0x1006946b
movss xmm3, dword [ebp - 0x40]
movss xmm4, dword [ebp - 0x3c]
movss xmm5, dword [ebp - 0x38]
movss xmm2, dword ds:[esi + 0x14]
add esi, 0x14
comiss xmm3, xmm2
movss xmm1, dword [0x1015c870]
jbe 0x10069499
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
addss xmm0, xmm2
minss xmm0, xmm3
movss dword [esi], xmm0
jmp 0x100694b3
comiss xmm2, xmm3
jbe 0x100694b3
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
subss xmm2, xmm0
maxss xmm2, xmm3
movss dword [esi], xmm2
movss xmm2, dword [esi + 4]
comiss xmm4, xmm2
jbe 0x100694d5
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
addss xmm0, xmm2
minss xmm0, xmm4
movss dword [esi + 4], xmm0
jmp 0x100694f0
comiss xmm2, xmm4
jbe 0x100694f0
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
subss xmm2, xmm0
maxss xmm2, xmm4
movss dword [esi + 4], xmm2
movss xmm2, dword [esi + 8]
comiss xmm5, xmm2
jbe 0x10069512
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
addss xmm0, xmm2
minss xmm0, xmm5
movss dword [esi + 8], xmm0
jmp 0x1006952d
comiss xmm2, xmm5
jbe 0x1006952d
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
subss xmm2, xmm0
maxss xmm2, xmm5
movss dword [esi + 8], xmm2
movss xmm2, dword [esi + 0xc]
movss xmm3, dword [ebp - 0x34]
comiss xmm3, xmm2
jbe 0x10069554
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
addss xmm0, xmm2
minss xmm0, xmm3
movss dword [esi + 0xc], xmm0
jmp 0x1006956f
comiss xmm2, xmm3
jbe 0x1006956f
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
subss xmm2, xmm0
maxss xmm2, xmm3
movss dword [esi + 0xc], xmm2
push esi
call fcn.1003b740
push eax
push 0
call fcn.10037cc0
movss xmm3, dword ds:[ebp - 0x80]
lea eax, [ebp - 0x78]
movss xmm0, dword [ebp - 0x7c]
addss xmm3, dword [ebp - 0x78]
addss xmm0, dword [ebp - 0x74]
movss xmm4, dword [0x10157684]
movss xmm1, dword [ebp - 0x90]
movss xmm2, dword [ebp - 0x8c]
divss xmm1, xmm4
mov esi, dword [ebx + 8]
push 0
push esi
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x10]
push eax
divss xmm2, xmm4
divss xmm3, xmm4
divss xmm0, xmm4
subss xmm3, xmm1
subss xmm0, xmm2
movss dword [ebp - 0x10], xmm3
movss dword [ebp - 0xc], xmm0
call fcn.10045560
push 1
call fcn.10037e20
add esp, 0x20
lea eax, [ebp - 0x88]
mov dword [esp], 0xbf800000
push 0
push 0
push dword [0x1023e8d8]
push eax
call fcn.1003b5a0
movss xmm1, dword ds:[ebp - 0x88]
lea eax, [ebp - 0x10]
movss xmm0, dword [ebp - 0x84]
addss xmm1, dword [0x1015c794]
addss xmm0, dword [0x1015c7b0]
push 0
push eax
movss dword [ebp - 0x10], xmm1
movss dword [ebp - 0xc], xmm0
call fcn.100372a0
push 0
push 0
push str.modaldiscord
call fcn.10039340
add esp, 0x28
test al, al
je 0x10069a96
mov ecx, dword [0x10240b04]
mov eax, dword [ecx + 0x1cdc]
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1cdc]
mov ecx, dword [0x1024c214]
mov dword [ebp - 0xc], eax
movss xmm0, dword [eax + 0xc]
movss xmm1, dword [eax + 0x18]
movaps xmm2, xmm0
addss xmm2, dword [eax + 0x14]
addss xmm1, dword [eax + 0x10]
movss dword [ebp - 0x40], xmm0
movss xmm0, dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
movss dword [ebp - 0x3c], xmm0
movss dword [ebp - 0x38], xmm2
movss dword [ebp - 0x34], xmm1
movups xmm0, xmmword [eax + 0x15dc]
mov eax, dword fs:[0x2c]
movups xmmword [ebp - 0x70], xmm0
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1024b86c]
cmp eax, dword [ecx + 4]
jg 0x10069b2d
push esi
call fcn.100390a0
add esp, 4
mov edi, eax
lea eax, [ebp - 4]
mov dword [ebp - 4], edi
mov ecx, 0x1024b864
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.100887e0
mov esi, dword [ebp - 0x48]
mov eax, dword [0x1024b864]
cmp byte [esi + 0xd], 0
jne 0x1006970b
cmp edi, dword [esi + 0x10]
jae 0x1006970d
mov esi, eax
cmp esi, eax
jne 0x10069750
lea eax, [ebp - 0x70]
mov ecx, 0x1024b864
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10088a40
lea eax, [ebp - 4]
mov ecx, 0x1024b864
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.100887e0
mov esi, dword [ebp - 0x48]
cmp byte [esi + 0xd], 0
jne 0x1006974a
mov eax, dword [ebp - 4]
cmp eax, dword [esi + 0x10]
jae 0x10069750
mov esi, dword [0x1024b864]
mov eax, dword [ebp - 0x30]
sub esp, 8
movss xmm0, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x18]
movaps xmm1, xmm0
movss dword [ebp - 4], xmm0
mov eax, dword [eax + 8]
movss xmm0, dword [ebp - 0x70]
and eax, 0x4000000
addss xmm1, xmm0
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [ebp - 0x68]
or eax, 0x8000000
shr eax, 0x1a
add eax, eax
movss dword [ebp - 0x48], xmm0
addss xmm1, xmm0
movss xmm0, dword [ecx + eax*8 + 0x15e0]
addss xmm0, dword [ecx + eax*8 + 0x15dc]
divss xmm1, dword [0x1015c778]
addss xmm0, dword [ecx + eax*8 + 0x15e4]
divss xmm0, dword [0x1015c778]
subss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
call fcn.100f917f
movss xmm0, dword [0x1015d78c]
add esp, 8
fstp dword [ebp - 0x18]
comiss xmm0, dword [ebp - 0x18]
jbe 0x10069813
movss xmm2, dword [0x10157560]
movaps xmm1, xmm2
subss xmm1, dword [ebp - 0x70]
movss dword [ebp - 0x30], xmm1
movaps xmm1, xmm2
subss xmm2, dword [ebp - 0x68]
subss xmm1, dword [ebp - 0x6c]
movaps xmm0, xmm2
movss dword [ebp - 4], xmm1
movss dword [ebp - 0x48], xmm0
add esi, 0x14
call fcn.10033380
movss xmm3, dword [esi]
movss xmm4, dword [ebp - 0x30]
comiss xmm4, xmm3
movss xmm1, dword [eax + 0x10]
movss xmm2, dword [0x1015c870]
jbe 0x1006984b
movaps xmm0, xmm1
mulss xmm0, xmm2
addss xmm0, xmm3
minss xmm0, xmm4
movss dword [esi], xmm0
jmp 0x10069863
comiss xmm3, xmm4
jbe 0x10069863
movaps xmm0, xmm1
mulss xmm0, xmm2
subss xmm3, xmm0
maxss xmm3, xmm4
movss dword [esi], xmm3
movss xmm3, dword [esi + 4]
movss xmm4, dword [ebp - 4]
comiss xmm4, xmm3
jbe 0x10069888
movaps xmm0, xmm1
mulss xmm0, xmm2
addss xmm0, xmm3
minss xmm0, xmm4
movss dword [esi + 4], xmm0
jmp 0x100698a1
comiss xmm3, xmm4
jbe 0x100698a1
movaps xmm0, xmm1
mulss xmm0, xmm2
subss xmm3, xmm0
maxss xmm3, xmm4
movss dword [esi + 4], xmm3
movss xmm3, dword [esi + 8]
movss xmm4, dword [ebp - 0x48]
comiss xmm4, xmm3
jbe 0x100698c6
movaps xmm0, xmm1
mulss xmm0, xmm2
addss xmm0, xmm3
minss xmm0, xmm4
movss dword [esi + 8], xmm0
jmp 0x100698df
comiss xmm3, xmm4
jbe 0x100698df
movaps xmm0, xmm1
mulss xmm0, xmm2
subss xmm3, xmm0
maxss xmm3, xmm4
movss dword [esi + 8], xmm3
movss xmm0, dword [esi + 0xc]
movss xmm3, dword [ebp - 0x64]
comiss xmm3, xmm0
jbe 0x10069902
mulss xmm1, xmm2
addss xmm1, xmm0
minss xmm1, xmm3
movss dword [esi + 0xc], xmm1
jmp 0x10069918
comiss xmm0, xmm3
jbe 0x10069918
mulss xmm1, xmm2
subss xmm0, xmm1
maxss xmm0, xmm3
movss dword [esi + 0xc], xmm0
push esi
call fcn.1003b740
push eax
push 0
call fcn.10037cc0
movss xmm1, dword [ebp - 0x40]
lea eax, [ebp - 0x38]
addss xmm1, dword [ebp - 0x38]
movss xmm3, dword [ebp - 0x84]
movss xmm4, dword [0x10157684]
movaps xmm0, xmm3
movss xmm2, dword [ebp - 0x88]
addss xmm3, dword [ebp - 0x3c]
divss xmm2, xmm4
push 0
push dword [0x1023e8d8]
divss xmm0, xmm4
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x4c]
push eax
divss xmm1, xmm4
subss xmm3, xmm0
subss xmm1, xmm2
movss dword [ebp - 0x48], xmm3
movss dword [ebp - 0x4c], xmm1
call fcn.10045560
push 1
call fcn.10037e20
mov eax, dword [ebp - 0xc]
movss xmm1, dword [eax + 0x14]
divss xmm1, dword [0x10157684]
movss xmm0, dword [eax + 0x18]
lea eax, [ebp - 0x10]
subss xmm0, dword [ebp - 0x84]
subss xmm1, dword [0x1015c7b0]
push eax
subss xmm0, dword [0x1015c788]
movss dword [ebp - 0x10], xmm1
movss dword [ebp - 0xc], xmm0
call fcn.10038b60
push 0
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x42a00000
push eax
push 0x10164168
mov dword [ebp - 0xc], 0x41a00000
call fcn.100784c0
add esp, 0x34
test al, al
je 0x10069a65
movaps xmm0, xmmword [0x10164b60]
xor ecx, ecx
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x60], 0x337b7b32
mov dword [ebp - 0x5c], 0x25567d58
mov dword [ebp - 0x58], 0x64784c2b
mov word [ebp - 0x54], 0x7958
mov byte [ebp - 0x52], 0
nop
mov al, byte [ebp - 0x70]
xor byte [ebp + ecx - 0x6f], al
inc ecx
cmp ecx, 0x1d
jb 0x10069a20
push 0
push 0
push 0
lea eax, [ebp - 0x6f]
mov byte [ebp - 0x52], 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [0x101f9038]
push 6
call fcn.100b4ec0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
nop dword [eax]
call fcn.10039660
cmp byte [ebp - 5], 0
jne 0x10069a91
push 0
call fcn.1003bd40
add esp, 4
test al, al
je 0x10069a91
lea eax, ds:[ebp - 0x40]
push 0
push eax
call fcn.10042fe0
add esp, 8
test al, al
jne 0x10069a91
call fcn.10039660
call fcn.100394e0
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x1024b854
call fcn.100d69b1
add esp, 4
cmp dword [0x1024b854], 0xffffffff
jne 0x1006920c
movaps xmm0, xmmword [ebp - 0x40]
push 0x1024b854
movups xmmword [0x1024b844], xmm0
call fcn.100d6960
add esp, 4
jmp 0x1006920c
push 0x1024b860
nop dword [eax + eax]
call fcn.100d69b1
add esp, 4
cmp dword [0x1024b860], 0xffffffff
jne 0x10069350
push 0x24
call fcn.100d6905
push 0x10155450
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [0x1024b858], eax
call fcn.100d68f0
push 0x1024b860
nop
call fcn.100d6960
add esp, 0xc
jmp 0x10069350
push 0x1024b86c
call fcn.100d69b1
add esp, 4
cmp dword [0x1024b86c], 0xffffffff
jne 0x100696d8
push 0x24
call fcn.100d6905
push 0x10155510
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [0x1024b864], eax
call fcn.100d68f0
push 0x1024b86c
call fcn.100d6960
add esp, 0xc
jmp 0x100696d8