Function at 0x10063e80
Capabilities:
Create process on windows
Hide graphical window

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x98
mov ecx, dword [0x1023dad4]
push esi
push edi
mov eax, dword [ecx + 0x1cdc]
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1cdc]
mov dword [ebp - 0x20], eax
cmp byte [eax + 0x8f], 0
jne 0x10064885
mov edi, dword [0x1023dad4]
mov ecx, eax
push 0
push dword [ebx + 8]
mov dword [ebp - 0xc], edi
call fcn.1003c7c0
push ecx
mov dword [esp], 0xbf800000
mov esi, eax
push 1
push 0
push dword [ebx + 8]
lea eax, [ebp - 0x4c]
push eax
call fcn.10037b00
mov eax, dword [ebp - 0x20]
add esp, 0xc
movss xmm1, dword [edi + 0x1554]
mulss xmm1, dword [0x10154664]
mov dword [ebp - 0x34], 0x41d20000
movss xmm0, dword [eax + 0xd0]
movss dword [ebp - 0x28], xmm0
movss xmm0, dword [eax + 0xd4]
lea eax, [ebp - 0x54]
addss xmm1, dword [ebp - 0x48]
movss dword [ebp - 8], xmm0
movss xmm0, dword [edi + 0x1550]
mulss xmm0, dword [0x10154664]
mov dword [ebp - 0x38], 0x42ea0000
movss dword [esp + 4], xmm1
addss xmm0, dword [ebp - 0x4c]
movss dword [esp], xmm0
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push eax
call fcn.1003f900
movss xmm2, dword [ebp - 0x28]
lea eax, [ebp - 0x54]
movss xmm3, dword [ebp - 8]
movaps xmm1, xmm2
addss xmm1, dword [ebp - 0x54]
movaps xmm0, xmm3
movss dword [ebp - 0x64], xmm2
addss xmm0, dword [ebp - 0x50]
add esp, 0x10
movss dword [ebp - 0x60], xmm3
movss dword [ebp - 0x5c], xmm1
movss dword [ebp - 0x58], xmm0
movss xmm0, dword [edi + 0x1554]
movss dword [esp], xmm0
push eax
call fcn.1003f2e0
push 0
push 0
lea eax, [ebp - 0x64]
push esi
push eax
call fcn.1003f480
add esp, 0x18
test al, al
je 0x10064885
push 0
lea eax, [ebp - 2]
push eax
lea eax, [ebp - 3]
push eax
lea eax, [ebp - 0x64]
push esi
push eax
call fcn.100769e0
mov ecx, dword fs:[0x2c]
add esp, 0x14
mov byte [ebp - 1], al
mov eax, dword [0x1024918c]
mov edx, dword [ecx + eax*4]
mov ecx, dword [0x102487cc]
cmp ecx, dword [edx + 4]
jg 0x1006488e
push 0x36
call fcn.10034b00
add esp, 4
cmp byte [ebp - 1], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x90], xmm0
je 0x10064037
push 0
push str.modalvkgroup
call fcn.10035aa0
add esp, 8
jmp 0x10064072
cmp byte [ebp - 2], 0
je 0x10064054
push 0
push str.modalvkgroup
call fcn.10035fe0
add esp, 8
test al, al
jne 0x10064054
push 0x38
jmp 0x1006405c
cmp byte [ebp - 3], 0
je 0x10064072
push 0x37
nop dword [eax]
call fcn.10034b00
add esp, 4
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x90], xmm0
call fcn.1002f880
mov edi, eax
xor esi, esi
nop dword [eax + eax]
movss xmm0, dword [esi + 0x102487bc]
sub esp, 8
subss xmm0, dword [ebp + esi - 0x90]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.100f5f0f
movss xmm1, dword [esi + 0x102487bc]
add esp, 8
movss xmm2, dword [ebp + esi - 0x90]
comiss xmm2, xmm1
fstp dword [ebp - 8]
jbe 0x100640e6
movss xmm0, dword [ebp - 8]
mulss xmm0, dword [edi + 0x10]
mulss xmm0, dword [0x1015a748]
addss xmm0, xmm1
minss xmm0, xmm2
movss dword [esi + 0x102487bc], xmm0
jmp 0x1006410d
comiss xmm1, xmm2
jbe 0x1006410d
movss xmm0, dword [ebp - 8]
mulss xmm0, dword [edi + 0x10]
mulss xmm0, dword [0x10154e20]
subss xmm1, xmm0
maxss xmm1, xmm2
movss dword [esi + 0x102487bc], xmm1
add esi, 4
cmp esi, 0xc
jl 0x10064080
mov esi, dword [ebp - 0xc]
push 0x102487bc
movss xmm0, dword [esi + 0x1558]
movss dword [ebp - 0x28], xmm0
call fcn.100349c0
movss xmm0, dword [ebp - 0x28]
movss dword [esp], xmm0
push 0
push eax
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push dword [ebp - 0x64]
call fcn.100423c0
mov eax, dword fs:[0x2c]
add esp, 0x1c
mov ecx, dword [0x1024918c]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x102487d8]
cmp eax, dword [ecx + 4]
jg 0x100648cd
push dword [ebx + 8]
call fcn.10035600
movups xmm0, xmmword [esi + 0x15dc]
add esp, 4
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
mov ecx, 0x102487d0
movups xmmword [ebp - 0x80], xmm0
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.10084fc0
mov esi, dword [ebp - 0x34]
mov eax, dword [0x102487d0]
cmp byte [esi + 0xd], 0
jne 0x100641b5
mov ecx, dword [ebp - 8]
cmp ecx, dword [esi + 0x10]
jae 0x100641b7
mov esi, eax
cmp esi, eax
jne 0x100641fc
lea eax, [ebp - 0x80]
mov ecx, 0x102487d0
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.10085220
lea eax, ds:[ebp - 8]
mov ecx, 0x102487d0
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.10084fc0
mov esi, dword [ebp - 0x34]
cmp byte [esi + 0xd], 0
jne 0x100641f6
mov eax, dword [ebp - 8]
cmp eax, dword [esi + 0x10]
jae 0x100641fc
mov esi, dword [0x102487d0]
movss xmm0, dword [0x102487bc]
sub esp, 8
movss xmm1, dword [ebp - 0x7c]
addss xmm1, dword [ebp - 0x80]
addss xmm0, dword [0x102487c0]
addss xmm1, dword [ebp - 0x78]
addss xmm0, dword [0x102487c4]
divss xmm1, dword [0x10159720]
divss xmm0, dword [0x10159720]
subss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
call fcn.100f5f0f
movss xmm0, dword [0x10154e8c]
add esp, 8
movss xmm1, dword [0x10154540]
fstp dword [ebp - 0x28]
comiss xmm0, dword [ebp - 0x28]
jbe 0x1006427d
movaps xmm3, xmm1
movaps xmm4, xmm1
subss xmm3, dword [ebp - 0x80]
subss xmm4, dword [ebp - 0x7c]
movaps xmm5, xmm1
subss xmm5, dword [ebp - 0x78]
jmp 0x1006428c
movss xmm3, dword [ebp - 0x80]
movss xmm4, dword [ebp - 0x7c]
movss xmm5, dword [ebp - 0x78]
movss xmm2, dword ds:[esi + 0x14]
add esi, 0x14
comiss xmm3, xmm2
movss xmm1, dword [0x101597fc]
jbe 0x100642b9
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
addss xmm0, xmm2
minss xmm0, xmm3
movss dword [esi], xmm0
jmp 0x100642d3
comiss xmm2, xmm3
jbe 0x100642d3
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
subss xmm2, xmm0
maxss xmm2, xmm3
movss dword [esi], xmm2
movss xmm2, dword [esi + 4]
comiss xmm4, xmm2
jbe 0x100642f5
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
addss xmm0, xmm2
minss xmm0, xmm4
movss dword [esi + 4], xmm0
jmp 0x10064310
comiss xmm2, xmm4
jbe 0x10064310
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
subss xmm2, xmm0
maxss xmm2, xmm4
movss dword [esi + 4], xmm2
movss xmm2, dword [esi + 8]
comiss xmm5, xmm2
jbe 0x10064332
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
addss xmm0, xmm2
minss xmm0, xmm5
movss dword [esi + 8], xmm0
jmp 0x1006434d
comiss xmm2, xmm5
jbe 0x1006434d
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
subss xmm2, xmm0
maxss xmm2, xmm5
movss dword [esi + 8], xmm2
movss xmm2, dword [esi + 0xc]
movss xmm3, dword [ebp - 0x74]
comiss xmm3, xmm2
jbe 0x10064374
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
addss xmm0, xmm2
minss xmm0, xmm3
movss dword [esi + 0xc], xmm0
jmp 0x1006438f
comiss xmm2, xmm3
jbe 0x1006438f
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
subss xmm2, xmm0
maxss xmm2, xmm3
movss dword [esi + 0xc], xmm2
push esi
call fcn.10037ca0
push eax
push 0
call fcn.10034220
movss xmm3, dword [ebp - 0x64]
lea eax, [ebp - 0x5c]
movss xmm0, dword [ebp - 0x60]
addss xmm3, dword [ebp - 0x5c]
addss xmm0, dword [ebp - 0x58]
movss xmm4, dword [0x10154664]
movss xmm1, dword [ebp - 0x4c]
movss xmm2, dword [ebp - 0x48]
divss xmm1, xmm4
mov esi, dword [ebx + 8]
push 0
push esi
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x38]
push eax
divss xmm2, xmm4
divss xmm3, xmm4
divss xmm0, xmm4
subss xmm3, xmm1
subss xmm0, xmm2
movss dword [ebp - 0x38], xmm3
movss dword [ebp - 0x34], xmm0
call fcn.10041be0
push 1
call fcn.10034380
add esp, 0x20
lea eax, [ebp - 0x44]
mov dword [esp], 0xbf800000
push 0
push 0
push dword [0x1023b8d0]
push eax
call fcn.10037b00
movss xmm1, dword [ebp - 0x44]
lea eax, [ebp - 0x38]
movss xmm0, dword [ebp - 0x40]
addss xmm1, dword [0x1015973c]
addss xmm0, dword [0x10159758]
push 0
push eax
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x34], xmm0
call fcn.10033800
push 0
push 0
push str.modalvkgroup
call fcn.100358a0
add esp, 0x28
test al, al
je 0x10064885
mov ecx, dword [0x1023dad4]
mov eax, dword [ecx + 0x1cdc]
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1cdc]
mov ecx, dword [0x1024918c]
mov dword [ebp - 0x34], eax
movss xmm0, dword [eax + 0xc]
movss xmm1, dword [eax + 0x18]
movaps xmm2, xmm0
addss xmm2, dword [eax + 0x14]
addss xmm1, dword [eax + 0x10]
movss dword [ebp - 0x80], xmm0
movss xmm0, dword [eax + 0x10]
mov eax, dword [ebp - 0xc]
movss dword [ebp - 0x7c], xmm0
movss dword [ebp - 0x78], xmm2
movss dword [ebp - 0x74], xmm1
movups xmm0, xmmword [eax + 0x15dc]
mov eax, dword fs:[0x2c]
movups xmmword [ebp - 0x90], xmm0
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x102487e4]
cmp eax, dword [ecx + 4]
jg 0x1006491d
push esi
call fcn.10035600
add esp, 4
mov edi, eax
lea eax, [ebp - 8]
mov dword [ebp - 8], edi
mov ecx, 0x102487dc
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.10084fc0
mov esi, dword [ebp - 0x28]
mov eax, dword [0x102487dc]
cmp byte [esi + 0xd], 0
jne 0x10064525
nop dword [eax + eax]
cmp edi, dword [esi + 0x10]
jae 0x10064527
mov esi, eax
cmp esi, eax
jne 0x10064570
lea eax, ds:[ebp - 0x90]
mov ecx, 0x102487dc
push eax
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.10085220
lea eax, [ebp - 8]
mov ecx, 0x102487dc
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.10084fc0
mov esi, dword ds:[ebp - 0x28]
cmp byte [esi + 0xd], 0
jne 0x1006456a
mov eax, dword [ebp - 8]
cmp eax, dword [esi + 0x10]
jae 0x10064570
mov esi, dword [0x102487dc]
mov eax, dword [ebp - 0x20]
sub esp, 8
movss xmm0, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0xc]
movaps xmm1, xmm0
movss dword [ebp - 8], xmm0
mov eax, dword [eax + 8]
movss xmm0, dword [ebp - 0x90]
and eax, 0x4000000
addss xmm1, xmm0
movss dword [ebp - 0x20], xmm0
movss xmm0, dword [ebp - 0x88]
or eax, 0x8000000
shr eax, 0x1a
add eax, eax
movss dword [ebp - 0x28], xmm0
addss xmm1, xmm0
movss xmm0, dword [ecx + eax*8 + 0x15e0]
addss xmm0, dword [ecx + eax*8 + 0x15dc]
divss xmm1, dword [0x10159720]
addss xmm0, dword [ecx + eax*8 + 0x15e4]
divss xmm0, dword [0x10159720]
subss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
call fcn.100f5f0f
movss xmm0, dword [0x1015a714]
add esp, 8
fstp dword [ebp - 0xc]
comiss xmm0, dword [ebp - 0xc]
jbe 0x10064645
movss xmm2, dword [0x10154540]
movaps xmm1, xmm2
subss xmm1, dword [ebp - 0x90]
movss dword [ebp - 0x20], xmm1
movaps xmm1, xmm2
subss xmm2, dword [ebp - 0x88]
subss xmm1, dword [ebp - 0x8c]
movaps xmm0, xmm2
movss dword [ebp - 8], xmm1
movss dword [ebp - 0x28], xmm0
add esi, 0x14
call fcn.1002f880
movss xmm3, dword [esi]
movss xmm4, dword [ebp - 0x20]
comiss xmm4, xmm3
movss xmm1, dword [eax + 0x10]
movss xmm2, dword [0x101597fc]
jbe 0x1006467d
movaps xmm0, xmm1
mulss xmm0, xmm2
addss xmm0, xmm3
minss xmm0, xmm4
movss dword [esi], xmm0
jmp 0x10064695
comiss xmm3, xmm4
jbe 0x10064695
movaps xmm0, xmm1
mulss xmm0, xmm2
subss xmm3, xmm0
maxss xmm3, xmm4
movss dword [esi], xmm3
movss xmm3, dword [esi + 4]
movss xmm4, dword [ebp - 8]
comiss xmm4, xmm3
jbe 0x100646ba
movaps xmm0, xmm1
mulss xmm0, xmm2
addss xmm0, xmm3
minss xmm0, xmm4
movss dword [esi + 4], xmm0
jmp 0x100646d3
comiss xmm3, xmm4
jbe 0x100646d3
movaps xmm0, xmm1
mulss xmm0, xmm2
subss xmm3, xmm0
maxss xmm3, xmm4
movss dword [esi + 4], xmm3
movss xmm3, dword [esi + 8]
movss xmm4, dword [ebp - 0x28]
comiss xmm4, xmm3
jbe 0x100646f8
movaps xmm0, xmm1
mulss xmm0, xmm2
addss xmm0, xmm3
minss xmm0, xmm4
movss dword [esi + 8], xmm0
jmp 0x10064711
comiss xmm3, xmm4
jbe 0x10064711
movaps xmm0, xmm1
mulss xmm0, xmm2
subss xmm3, xmm0
maxss xmm3, xmm4
movss dword [esi + 8], xmm3
movss xmm0, dword [esi + 0xc]
movss xmm3, dword [ebp - 0x84]
comiss xmm3, xmm0
jbe 0x10064736
mulss xmm1, xmm2
addss xmm1, xmm0
minss xmm1, xmm3
movss dword [esi + 0xc], xmm1
jmp 0x1006474c
comiss xmm0, xmm3
jbe 0x1006474c
mulss xmm1, xmm2
subss xmm0, xmm1
maxss xmm0, xmm3
movss dword [esi + 0xc], xmm0
push esi
call fcn.10037ca0
push eax
push 0
call fcn.10034220
movss xmm1, dword [ebp - 0x80]
lea eax, [ebp - 0x78]
addss xmm1, dword [ebp - 0x78]
movss xmm3, dword [ebp - 0x40]
movss xmm4, dword [0x10154664]
movaps xmm0, xmm3
movss xmm2, dword [ebp - 0x44]
addss xmm3, dword [ebp - 0x7c]
divss xmm2, xmm4
push 0
push dword [0x1023b8d0]
divss xmm0, xmm4
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x2c]
push eax
divss xmm1, xmm4
subss xmm3, xmm0
subss xmm1, xmm2
movss dword [ebp - 0x28], xmm3
movss dword [ebp - 0x2c], xmm1
call fcn.10041be0
push 1
call fcn.10034380
mov eax, dword [ebp - 0x34]
movss xmm1, dword [eax + 0x14]
divss xmm1, dword [0x10154664]
movss xmm0, dword [eax + 0x18]
lea eax, [ebp - 0x38]
subss xmm0, dword [ebp - 0x40]
subss xmm1, dword [0x10159758]
push eax
subss xmm0, dword [0x10159730]
movss dword [ebp - 0x38], xmm1
movss dword [ebp - 0x34], xmm0
call fcn.100350c0
push 0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x38], 0x42a00000
push eax
push 0x1016110c
mov dword [ebp - 0x34], 0x41a00000
call fcn.10074e60
add esp, 0x34
test al, al
je 0x10064851
push 0
push 0
push 0
push str.https:__vk.com_epoximotion
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [0x101f6030]
push 6
call fcn.100b2220
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.10035bc0
cmp byte [ebp - 1], 0
jne 0x1006487c
push 0
call fcn.100382a0
add esp, 4
test al, al
je 0x1006487c
lea eax, [ebp - 0x80]
push 0
push eax
call fcn.1003f660
add esp, 8
test al, al
jne 0x1006487c
call fcn.10035bc0
nop dword [eax]
call fcn.10035a40
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x102487cc
call fcn.100d393d
add esp, 4
cmp dword [0x102487cc], 0xffffffff
jne 0x1006400c
push 0x29
call fcn.10034b00
push 0x102487cc
movups xmm0, xmmword ds:[eax]
movups xmmword [0x102487bc], xmm0
call fcn.100d38ec
add esp, 8
jmp 0x1006400c
push 0x102487d8
call fcn.100d393d
add esp, 4
cmp dword [0x102487d8], 0xffffffff
jne 0x10064174
push 0x24
call fcn.100d3891
push 0x10152140
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [0x102487d0], eax
call fcn.100d387c
push 0x102487d8
call fcn.100d38ec
add esp, 0xc
jmp 0x10064174
push 0x102487e4
call fcn.100d393d
add esp, 4
cmp dword [0x102487e4], 0xffffffff
jne 0x100644ed
push 0x24
call fcn.100d3891
push 0x10152210
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [0x102487dc], eax
call fcn.100d387c
push 0x102487e4
call fcn.100d38ec
add esp, 0xc
jmp 0x100644ed