Function at 0x10016970
Capabilities:
Create process on windows
Create thread
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1018bd0d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x524
push esi
push edi
push 0
push 0
push 0
push 0x10019a80
push 0
mov esi, ecx
mov dword [ebp - 0xac], 0
push 0
mov dword [ebp - 0x78], esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [esi + 0x28], 0xa
jne 0x10016f9e
cmp dword [esi + 0x40], 0x40
jne 0x10016f9e
xorps xmm0, xmm0
mov dword [ebp - 0x13c], 0
movups xmmword [ebp - 0x14c], xmm0
mov dword [ebp - 0x138], 0xf
movups xmmword [ebp - 0x1a4], xmm0
mov byte [ebp - 0x14c], 0
lea eax, [ebp - 0x1a4]
mov dword [ebp - 4], 0
push eax
call dword [sym.imp.RPCRT4.dll_UuidCreate]
lea eax, [ebp - 0xa8]
mov dword [ebp - 0xa8], 0
push eax
lea eax, [ebp - 0x1a4]
push eax
call dword [sym.imp.RPCRT4.dll_UuidToStringA]
test eax, eax
jne 0x10016a58
mov edx, dword [ebp - 0xa8]
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10016a35
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x14c]
call fcn.10010860
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.RPCRT4.dll_RpcStringFreeA]
xorps xmm0, xmm0
mov dword [ebp - 0x10c], 0
movups xmmword [ebp - 0x11c], xmm0
mov dword [ebp - 0x108], 0xf
mov byte [ebp - 0x11c], 0
mov ecx, 0x10
mov byte [ebp - 4], 1
cmp dword [ebp - 0x13c], ecx
lea eax, [ebp - 0x14c]
movups xmmword [ebp - 0x64], xmm0
cmovb ecx, dword [ebp - 0x13c]
cmp dword [ebp - 0x138], 0xf
push ecx
cmova eax, dword [ebp - 0x14c]
lea ecx, [ebp - 0x64]
push eax
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
call fcn.10003a40
movups xmm0, xmmword [ebp - 0x64]
lea ecx, [ebp - 0x64]
mov byte [ebp - 0x64], 0
movups xmmword [ebp - 0x34], xmm0
movups xmmword [ebp - 0x11c], xmm0
movq xmm0, qword [ebp - 0x54]
movq qword [ebp - 0x10c], xmm0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0xf
call fcn.10003ba0
lea eax, [ebp - 0xd]
mov word [ebp - 0x1f], 0x2d
push eax
lea eax, [ebp - 0x1e]
mov byte [ebp - 0x1d], 0
push eax
lea eax, [ebp - 0x1f]
push eax
lea ecx, [ebp - 0xc4]
call fcn.100055e0
cmp dword [ebp - 0x108], 0xf
lea ecx, [ebp - 0x11c]
push dword [ebp - 0x10c]
cmova ecx, dword [ebp - 0x34]
push ecx
push 0
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 2
call fcn.10017c50
mov dword [ebp - 0xdc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xec], xmm0
mov dword [ebp - 0xd8], 0
movups xmm0, xmmword [eax]
mov byte [ebp - 4], 1
movups xmmword [ebp - 0xec], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xdc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0xb0]
cmp ecx, 0xf
jbe 0x10016bc9
mov edx, dword [ebp - 0xc4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10016bbf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10016bbf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1013141d
add esp, 8
lea eax, [esi + 0x30]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.10005f60
mov edi, eax
add esp, 0xc
lea eax, [esi + 0x1cc]
cmp eax, edi
je 0x10016c22
mov ecx, eax
call fcn.10003ba0
movups xmm0, xmmword [edi]
movups xmmword [esi + 0x1cc], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x1dc], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
lea ecx, [ebp - 0xa0]
call fcn.10003ba0
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 1
call fcn.10003ba0
lea eax, [ebp - 0x30c]
push eax
call fcn.10010df0
add esp, 4
mov byte [ebp - 4], 4
call fcn.10134400
cmp dword [esi + 0x14], 0xf
mov ecx, eax
mov dword [ebp - 0x7c], ecx
mov eax, esi
mov dword [ebp - 0x2e], 0xb1a9b2fa
mov dword [ebp - 0x2a], 0x878b9385
mov word [ebp - 0x26], 0xd9
mov byte [ebp - 0x24], 1
jbe 0x10016c7b
mov eax, dword [esi]
push 0
push eax
push ecx
call fcn.10133100
add esp, 0xc
mov dword [ebp - 0x1b], 0xb2bfb3fa
mov edi, eax
mov dword [ebp - 0x17], 0x100dc85
mov dword [ebp - 0x4a], 0xbcb0b8fa
xor ecx, ecx
mov dword [ebp - 0x46], 0xde9b848b
mov word [ebp - 0x42], 0x100
mov dword [ebp - 0x6c], 0xacbfb5fa
mov dword [ebp - 0x68], 0x100dc88
mov dword [ebp - 0x83], 0xadbbabfa
mov word [ebp - 0x7f], 0xdd
mov byte [ebp - 0x7d], 1
mov dword [ebp - 0x57], 0xbaaea4a8
mov dword [ebp - 0x53], 0x8a8c88dd
mov word [ebp - 0x4f], 0x90
mov byte [ebp - 0x4d], 1
nop word [eax + eax]
mov al, cl
sub al, 0x24
xor byte [ebp + ecx - 0x83], al
inc ecx
cmp ecx, 5
jb 0x10016cf0
lea eax, [ebp - 0xd]
mov byte [ebp - 0x7d], 0
push eax
lea eax, [ebp - 0x7e]
push eax
lea eax, [ebp - 0x83]
push eax
lea ecx, [ebp - 0x134]
call fcn.100055e0
cmp byte [ebp - 0x4d], 0
mov byte [ebp - 4], 5
je 0x10016d42
xor ecx, ecx
nop dword [eax + eax]
mov al, cl
sub al, 0x24
xor byte [ebp + ecx - 0x57], al
inc ecx
cmp ecx, 9
jb 0x10016d30
mov byte [ebp - 0x4d], 0
lea eax, [ebp - 0xd]
push eax
lea eax, [ebp - 0x4e]
push eax
lea eax, [ebp - 0x57]
push eax
lea ecx, [ebp - 0xc4]
call fcn.100055e0
lea eax, [ebp - 0x134]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0x76]
lea ecx, [ebp - 0xa0]
call fcn.1000c880
mov ecx, dword [ebp - 0xb0]
mov byte [ebp - 4], 5
cmp ecx, 0xf
jbe 0x10016db3
mov edx, dword [ebp - 0xc4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10016da9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016de3
push ecx
push edx
call fcn.1013141d
add esp, 8
mov ecx, dword [ebp - 0x120]
mov byte [ebp - 4], 4
cmp ecx, 0xf
jbe 0x10016df3
mov edx, dword [ebp - 0x134]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10016de9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10016de9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1013141d
add esp, 8
lea eax, [esi + 0x48]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x1bc]
push eax
call fcn.10005f60
lea ecx, [ebp - 0x6c]
mov byte [ebp - 4], 8
push ecx
push eax
lea eax, [ebp - 0x3e8]
push eax
call fcn.10006100
lea ecx, [ebp - 0x30c]
mov byte [ebp - 4], 9
push ecx
push eax
lea eax, [ebp - 0x3d0]
push eax
call fcn.10005f60
lea ecx, [ebp - 0x4a]
mov byte [ebp - 4], 0xa
push ecx
push eax
lea eax, [ebp - 0x3b8]
push eax
call fcn.100061f0
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0xb
push ecx
push eax
lea eax, [ebp - 0x3a0]
push eax
call fcn.10005f60
lea ecx, [ebp - 0x1b]
mov byte [ebp - 4], 0xc
push ecx
push eax
lea eax, [ebp - 0x388]
push eax
call fcn.10006100
add esp, 0x48
push edi
push eax
lea eax, [ebp - 0x370]
mov byte [ebp - 4], 0xd
push eax
call fcn.10005fc0
lea ecx, [ebp - 0x2e]
mov byte [ebp - 4], 0xe
push ecx
push eax
lea eax, [ebp - 0x358]
push eax
call fcn.100062c0
lea ecx, [esi + 0x18]
mov byte [ebp - 4], 0xf
push ecx
push eax
lea eax, [ebp - 0x194]
push eax
call fcn.10005f60
add esp, 0x24
lea ecx, [ebp - 0x358]
call fcn.10003ba0
lea ecx, [ebp - 0x370]
call fcn.10003ba0
lea ecx, [ebp - 0x388]
call fcn.10003ba0
lea ecx, [ebp - 0x3a0]
call fcn.10003ba0
lea ecx, [ebp - 0x3b8]
call fcn.10003ba0
lea ecx, [ebp - 0x3d0]
call fcn.10003ba0
lea ecx, [ebp - 0x3e8]
call fcn.10003ba0
lea ecx, [ebp - 0x1bc]
call fcn.10003ba0
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x19
call fcn.10003ba0
cmp dword [esi + 0x8c], 0xf
lea edi, [esi + 0x78]
mov ecx, edi
jbe 0x10016f3e
mov ecx, dword [edi]
lea eax, [esi + 0x78]
mov dword [ebp - 0x20], eax
jmp 0x10016f41
mov dword [ebp - 0x20], edi
push 0
push 0x10196d99
push dword [edi + 0x10]
push ecx
call fcn.10008500
add esp, 0x10
test al, al
je 0x10016f65
cmp dword [esi + 0x88], 0
je 0x10017398
push 0
push edi
lea ecx, [ebp - 0xc4]
call fcn.10005760
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 0x1a
push eax
call fcn.10015ad0
add esp, 4
mov byte [ebp - 0xd], al
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0x19
call fcn.10010160
cmp byte [ebp - 0xd], 0
jne 0x10016fa6
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
cmp dword [edi + 0x14], 0xf
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
jbe 0x10016fba
mov edi, dword [edi]
lea eax, [esi + 0x78]
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x278], 0x10198fe4
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push 0
push 0
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x278]
mov dword [ebp - 0xac], 0x103fc
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_istream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov eax, dword [ebp - 0x278]
mov dword [ebp - 4], 0x1c
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x278]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x27c], eax
lea ecx, [ebp - 0x268]
call fcn.1000c3f0
push 0x40
push 1
push edi
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 0x1d
call fcn.1001a350
test eax, eax
jne 0x10017065
mov eax, dword [ebp - 0x278]
lea ecx, [ebp - 0x278]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x278]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x278]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x27c], eax
xorps xmm0, xmm0
mov dword [ebp - 0xdc], 0
movups xmmword [ebp - 0xec], xmm0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
movups xmmword [ebp - 0xc4], xmm0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0xf
mov byte [ebp - 0xc4], 0
mov eax, dword [ebp - 0x278]
lea ecx, [ebp - 0x278]
push 0xa
mov byte [ebp - 4], 0x20
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.10008bc0
movaps xmm0, xmmword [0x1019a550]
lea eax, [ebp - 0x164]
push dword [ebp - 0x20]
movups xmmword [ebp - 0x33e], xmm0
push 0x1019860c
movaps xmm0, xmmword [0x1019a570]
movups xmmword [ebp - 0x32e], xmm0
push eax
movaps xmm0, xmmword [0x1019a3f0]
movups xmmword [ebp - 0x31e], xmm0
mov word [ebp - 0x30e], 0x100
call fcn.100060a0
lea ecx, [ebp - 0x33e]
mov byte [ebp - 4], 0x21
push ecx
push eax
lea eax, [ebp - 0x400]
push eax
call fcn.100063b0
add esp, 0x24
cmp dword [eax + 0x14], 0xf
jbe 0x1001716e
mov eax, dword [eax]
xorps xmm0, xmm0
mov dword [ebp - 0x124], 0
push 0x10198fec
movups xmmword [ebp - 0x134], xmm0
push eax
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
mov dword [ebp - 0xac], 0x303fc
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov edi, eax
add esp, 8
mov eax, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], edi
mov byte [ebp - 4], 0x24
test edi, edi
je 0x10017bff
push edi
lea eax, [ebp - 0x530]
push 0x80
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
add esp, 0xc
test eax, eax
je 0x1001722c
nop
lea ecx, [ebp - 0x530]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100171f0
sub ecx, edx
lea eax, [ebp - 0x530]
push ecx
push eax
lea ecx, [ebp - 0x134]
call fcn.10010860
push edi
lea eax, [ebp - 0x530]
push 0x80
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
add esp, 0xc
test eax, eax
jne 0x100171e0
lea eax, [esi + 0x78]
mov dword [ebp - 0x20], eax
push edi
mov byte [ebp - 4], 0x26
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
add esp, 4
lea eax, [ebp - 0x134]
lea ecx, [ebp - 0xc4]
push eax
call fcn.1000e360
lea ecx, [ebp - 0x134]
mov edi, 0x103fc
call fcn.10003ba0
lea ecx, [ebp - 0x400]
call fcn.10003ba0
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x20
call fcn.10003ba0
lea eax, [ebp - 0xec]
mov dword [ebp - 0x40], 0xb4b1a9fa
push eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x3c], 0xdf8f85
mov byte [ebp - 0x38], 1
call fcn.10010b50
push eax
lea eax, [ebp - 0x164]
push eax
call fcn.100060a0
add esp, 0xc
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
mov byte [ebp - 4], 0x27
jbe 0x100172b6
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x194]
call fcn.100103d0
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], 0x20
call fcn.10003ba0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], 0xbeb6a9fa
mov dword [ebp - 0x3c], 0xdf8993
mov byte [ebp - 0x38], 1
call fcn.10010b50
push eax
lea eax, [ebp - 0x164]
push eax
call fcn.100060a0
add esp, 0xc
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
mov byte [ebp - 4], 0x28
jbe 0x1001730e
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x194]
call fcn.100103d0
lea ecx, [ebp - 0x164]
call fcn.10003ba0
mov ecx, dword [ebp - 0xb0]
mov byte [ebp - 4], 0x1f
cmp ecx, 0xf
jbe 0x10017366
mov edx, dword [ebp - 0xc4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001735c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1001735c
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.1013141d
add esp, 8
mov eax, dword [ebp - 0xd8]
cmp eax, 0xf
jbe 0x10017387
push eax
push dword [ebp - 0xec]
lea eax, [ebp - 0xec]
push eax
call fcn.1000f200
add esp, 0xc
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x19
call fcn.1000e9c0
jmp 0x1001739d
mov edi, 0x3fc
push dword [ebp - 0x7c]
call fcn.101343c0
sub esp, 0x14
lea eax, [esi + 0x60]
mov ecx, esp
mov dword [ebp - 0x7c], esp
push eax
call fcn.1000c790
sub esp, 0x18
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x194]
mov ecx, esp
push eax
call fcn.1000c790
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x19
push eax
call fcn.1001b130
add esp, 0x34
cmp dword [ebp - 0xf4], 0x10
movaps xmm0, xmmword [0x1019a3a0]
mov byte [ebp - 4], 0x2a
movups xmmword [ebp - 0x34], xmm0
mov byte [ebp - 0x24], 1
jne 0x10017449
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x34]
call fcn.1001d7c0
mov ecx, eax
or edi, 0x8000
cmp dword [ecx + 0x14], 0xf
mov edx, dword [ecx + 0x10]
jbe 0x1001741c
mov ecx, dword [ecx]
cmp dword [ebp - 0xf0], 0xf
lea eax, [ebp - 0x104]
push edx
cmova eax, dword [ebp - 0x104]
push ecx
push dword [ebp - 0xf4]
push eax
call fcn.10008500
add esp, 0x10
mov byte [ebp - 0xd], 1
test al, al
jne 0x1001744d
mov byte [ebp - 0xd], 0
test edi, 0x8000
je 0x10017460
lea ecx, [ebp - 0x164]
call fcn.10003ba0
cmp byte [ebp - 0xd], 0
jne 0x10016f9e
push 0
push 1
sub esp, 0x28
mov eax, esp
mov dword [eax + 0x24], 0
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.10009e80
add esp, 0x38
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xacadb8b1
mov dword [ebp - 0x18], 0x878681
mov byte [ebp - 0x14], 1
call fcn.1000e840
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0xd4]
call fcn.1000e6b0
lea ecx, [ebp - 0x17c]
push ecx
mov ecx, eax
call fcn.10005ed0
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x2e
call fcn.10003ba0
push 1
lea ecx, [ebp - 0x4b0]
call fcn.1000cb60
lea eax, [ebp - 0xd]
mov byte [ebp - 4], 0x2f
push eax
push 0x20
lea ecx, [ebp - 0x88]
call fcn.1000cf90
mov eax, dword [ebp - 0x84]
lea ecx, [ebp - 0x104]
mov edi, dword [ebp - 0x88]
sub eax, edi
cmp dword [ebp - 0xf0], 0xf
mov edx, dword [esi + 0x40]
cmova ecx, dword [ebp - 0x104]
add esi, 0x30
mov byte [ebp - 4], 0x30
cmp dword [esi + 0x14], 0xf
jbe 0x1001753e
mov esi, dword [esi]
push eax
push edi
push dword [ebp - 0xf4]
push ecx
push edx
push esi
call fcn.10064fd0
add esp, 0x18
cmp edi, dword [ebp - 0x84]
je 0x100175bf
nop dword [eax]
mov al, byte [edi]
lea ecx, [ebp - 0x4a0]
push 0x10016910
mov byte [ebp - 0xd], al
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base_____cdecl___class_std::ios_base___]
mov esi, eax
push 0x30
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::fill_char_]
push 0
lea eax, [ebp - 0x34]
push 2
push eax
call sub.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__
push dword [eax + 0xc]
mov ecx, dword [eax]
push dword [eax + 8]
mov eax, dword [esi]
mov eax, dword [eax + 4]
add eax, esi
push eax
call ecx
movzx eax, byte [ebp - 0xd]
add esp, 0x18
mov ecx, esi
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
inc edi
cmp edi, dword [ebp - 0x84]
jne 0x10017560
cmp dword [0x1118e014], 0xf
lea eax, [ebp - 0x164]
mov esi, section..data
lea ecx, [ebp - 0x4b0]
cmova esi, dword [section..data]
push eax
call fcn.1001d870
cmp dword [eax + 0x14], 0xf
jbe 0x100175ec
mov eax, dword [eax]
movd xmm1, dword [esi]
lea ecx, [ebp - 0x164]
movd xmm0, dword [eax]
punpcklbw xmm0, xmm0
punpcklbw xmm1, xmm1
punpcklwd xmm0, xmm0
punpcklwd xmm1, xmm1
psrad xmm0, 0x18
psrad xmm1, 0x18
xorps xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
orps xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
orps xmm1, xmm0
movd esi, xmm1
call fcn.10003ba0
test esi, esi
je 0x1001768c
sub esp, 0x18
mov eax, closesocket
mov ecx, esp
mov dword [ebp - 0x7c], ecx
mov edx, dword [ebp - 0x16c]
sub eax, edx
cmp eax, 0x6b
jb 0x10017c3e
cmp dword [ebp - 0x168], 0xf
lea eax, [ebp - 0x17c]
push edx
cmova eax, dword [ebp - 0x17c]
push eax
push 0x6b
push 0x10198650
lea eax, [ebp - 0x17c]
push eax
push dword [ebp - 0x76]
call fcn.1000ca10
call fcn.10015330
add esp, 0x18
sub esp, 0x10
lea eax, [ebp - 0xd4]
mov ecx, esp
push eax
call fcn.1000c470
mov edi, dword [ebp - 0x78]
mov ecx, edi
call fcn.100183c0
mov dword [ebp - 0x1c], 0xbcbda8af
xor ecx, ecx
mov dword [ebp - 0x18], 0x919285
mov byte [ebp - 0x14], 1
nop dword [eax + eax]
mov al, cl
sub al, 0x24
xor byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 7
jb 0x100176c0
lea eax, [ebp - 0xd]
mov byte [ebp - 0x14], 0
push eax
lea eax, [ebp - 0x15]
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xa0]
call fcn.100055e0
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x31
push eax
lea ecx, [ebp - 0xd4]
call fcn.1000e6b0
xor edx, edx
mov byte [ebp - 4], 0x30
cmp byte [eax], 4
lea ecx, [eax + 8]
cmovne ecx, edx
mov al, byte [ecx]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 0xd], al
call fcn.10003ba0
cmp byte [ebp - 0xd], 0
je 0x10017938
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x2f], 0x8ca9b8b2
push eax
lea ecx, [ebp - 0x2f]
mov dword [ebp - 0x2b], 0x8a919285
mov dword [ebp - 0x27], 0x1008b8b
call fcn.1000e8c0
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0xd4]
call fcn.1000e6b0
xor edx, edx
mov byte [ebp - 4], 0x30
cmp byte [eax], 4
lea ecx, [eax + 8]
cmovne ecx, edx
mov al, byte [ecx]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 0xd], al
call fcn.10003ba0
cmp byte [ebp - 0xd], 0
je 0x1001778f
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x57], 0xacadb8af
xor ecx, ecx
mov dword [ebp - 0x53], 0x8a8c8e89
mov word [ebp - 0x4f], 0x80
mov byte [ebp - 0x4d], 1
nop dword [eax]
mov al, cl
sub al, 0x24
xor byte [ebp + ecx - 0x57], al
inc ecx
cmp ecx, 9
jb 0x100177b0
lea eax, [ebp - 0xd]
mov byte [ebp - 0x4d], 0
push eax
lea eax, [ebp - 0x4e]
push eax
lea eax, [ebp - 0x57]
push eax
lea ecx, [ebp - 0xa0]
call fcn.100055e0
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0xd4]
call fcn.1000e6b0
cmp byte [eax], 3
jne 0x100177f9
mov eax, dword [eax + 8]
jmp 0x100177fb
xor eax, eax
cmp dword [eax + 0x14], 0xf
mov ecx, eax
jbe 0x10017805
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [edi + 0x1b4]
call fcn.10010860
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x30
call fcn.10003ba0
lea eax, [ebp - 0xa0]
mov byte [0x112e9bc0], 1
push eax
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xb6aeadbd
mov dword [ebp - 0x18], 0x8d878e
mov byte [ebp - 0x14], 1
call fcn.1000e840
sub esp, 0x10
mov byte [ebp - 4], 0x34
lea eax, [ebp - 0xa0]
mov esi, esp
lea ecx, [ebp - 0xd4]
push eax
call fcn.1000e6b0
push eax
mov ecx, esi
call fcn.1000c470
mov ecx, edi
call fcn.10018280
lea ecx, [ebp - 0xa0]
call fcn.10003ba0
lea ecx, [ebp - 0x88]
call fcn.1000df00
mov eax, dword [ebp - 0x4b0]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x4b0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x4b4], eax
lea ecx, [ebp - 0x498]
call fcn.1000d9d0
lea ecx, [ebp - 0x490]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x448]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x17c]
call fcn.10003ba0
push dword [ebp - 0xd4]
lea ecx, [ebp - 0xcc]
call fcn.100137a0
lea ecx, [ebp - 0x104]
call fcn.10003ba0
lea ecx, [ebp - 0x194]
call fcn.10003ba0
lea ecx, [ebp - 0x30c]
call fcn.10003ba0
lea ecx, [ebp - 0x11c]
call fcn.10003ba0
lea ecx, [ebp - 0x14c]
call fcn.10003ba0
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
xorps xmm0, xmm0
mov dword [ebp - 0x2f], 0xbea8b3b5
push 0x18
mov dword [ebp - 0x2b], 0x9586888c
mov dword [ebp - 0x27], 0x1009781
movq qword [ebp - 0x54], xmm0
mov byte [ebp - 0x5c], 3
call fcn.101313ed
mov esi, eax
add esp, 4
lea eax, [ebp - 0xd]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], eax
cmp byte [ebp - 0x24], 0
mov byte [ebp - 4], 0x35
je 0x10017992
xor ecx, ecx
nop word [eax + eax]
mov al, cl
sub al, 0x24
xor byte [ebp + ecx - 0x2f], al
inc ecx
cmp ecx, 0xa
jb 0x10017980
mov byte [ebp - 0x24], 0
lea eax, [ebp - 0xa1]
mov ecx, esi
push eax
lea eax, [ebp - 0x25]
push eax
lea eax, [ebp - 0x2f]
push eax
call fcn.100055e0
mov dword [ebp - 0x54], esi
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0x6d]
mov dword [ebp - 0x6d], 0xacadb8b1
mov dword [ebp - 0x69], 0x878681
mov byte [ebp - 0x65], 1
call fcn.1000e840
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0xd4]
call fcn.1000e6b0
push eax
call fcn.1000e3a0
add esp, 8
mov byte [ebp - 0xd], al
lea ecx, [ebp - 0xa0]
call fcn.10003ba0
push 3
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x30
call fcn.100137a0
cmp byte [ebp - 0xd], 0
je 0x10017880
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x4a], 0xb1a9b2b8
push eax
lea ecx, [ebp - 0x4a]
mov dword [ebp - 0x46], 0x87838e8c
mov word [ebp - 0x42], 0x100
call fcn.1000e880
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x38
push eax
lea ecx, [ebp - 0xd4]
call fcn.1000e6b0
lea ecx, [ebp - 0xc4]
push ecx
mov ecx, eax
call fcn.10005ed0
lea ecx, [ebp - 0xa0]
call fcn.10003ba0
lea eax, [ebp - 0xc4]
push 0x10196d9a
push eax
call fcn.10005cc0
add esp, 8
test al, al
je 0x10017bc5
movaps xmm0, xmmword [0x1019a4b0]
lea ecx, [ebp - 0x2f4]
movups xmmword [ebp - 0x2f4], xmm0
push 0x10
movaps xmm0, xmmword [0x1019a4d0]
movups xmmword [ebp - 0x2e4], xmm0
push 0
movaps xmm0, xmmword [0x1019a400]
movups xmmword [ebp - 0x2d4], xmm0
mov dword [ebp - 0x1c4], 0x7662796f
movaps xmm0, xmmword [0x1019a460]
movups xmmword [ebp - 0x2c4], xmm0
mov word [ebp - 0x1c0], 0x3e
movaps xmm0, xmmword [0x1019a420]
movups xmmword [ebp - 0x2b4], xmm0
mov byte [ebp - 0x1be], 1
movaps xmm0, xmmword [0x1019a430]
movups xmmword [ebp - 0x2a4], xmm0
movaps xmm0, xmmword [0x1019a440]
movups xmmword [ebp - 0x294], xmm0
movaps xmm0, xmmword [0x1019a3e0]
movups xmmword [ebp - 0x284], xmm0
movaps xmm0, xmmword [0x1019a3c0]
movups xmmword [ebp - 0x274], xmm0
movaps xmm0, xmmword [0x1019a3d0]
movups xmmword [ebp - 0x264], xmm0
movaps xmm0, xmmword [0x1019a590]
movups xmmword [ebp - 0x254], xmm0
movaps xmm0, xmmword [0x1019a580]
movups xmmword [ebp - 0x244], xmm0
movaps xmm0, xmmword [0x1019a530]
movups xmmword [ebp - 0x234], xmm0
movaps xmm0, xmmword [0x1019a540]
movups xmmword [ebp - 0x224], xmm0
movaps xmm0, xmmword [0x1019a520]
movups xmmword [ebp - 0x214], xmm0
movaps xmm0, xmmword [0x1019a510]
movups xmmword [ebp - 0x204], xmm0
movaps xmm0, xmmword [0x1019a490]
movups xmmword [ebp - 0x1f4], xmm0
movaps xmm0, xmmword [0x1019a4f0]
movups xmmword [ebp - 0x1e4], xmm0
movaps xmm0, xmmword [0x1019a450]
movups xmmword [ebp - 0x1d4], xmm0
call fcn.10010b80
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x10017bf7
lea ecx, [ebp - 0xc4]
call fcn.10010d30
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x78], 0xb1bbadb3
mov esi, eax
mov word [ebp - 0x74], 0x100
call fcn.10010b10
push 1
push 0
push 0
push esi
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
movaps xmm0, xmmword [0x1019a3b0]
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x5d]
mov byte [ebp - 0x4d], 1
movups xmmword [ebp - 0x5d], xmm0
call fcn.1000e8a0
lea eax, [ebp - 0x1bc]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x30]
call fcn.1000d670
push 0x11181114
lea eax, [ebp - 0x30]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
call fcn.10005290
int3