Function at 0x10017500
Capabilities:
Encode data using xor
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006c7bb
mov eax, dword fs:[0]
push eax
sub esp, 0x304
mov eax, dword [0x10084014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x2dc], ebx
mov edi, dword [ebp + 0xc]
lea eax, [ebp - 0xc0]
push 0x98
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea ecx, [ebp - 0xc0]
call fcn.100075f0
push 0
lea eax, [ebp - 0x2d8]
mov dword [ebp - 4], 0
push 8
push eax
call dword [sym.imp.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__]
add esp, 0xc
mov edx, str.DreamSoft_Client__
mov esi, eax
push 0x10005f70
push ecx
lea ecx, [ebp - 0xc0]
call fcn.10008a10
add esp, 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base_____cdecl___class_std::ios_base___]
mov edx, esi
mov ecx, eax
call fcn.10008c50
mov esi, eax
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
mov byte [ecx + esi + 0x40], 0x30
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov ecx, esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
mov edx, 0x1007877c
mov ecx, eax
call fcn.10008a10
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xc0]
call fcn.100075d0
push 0x1fc
lea eax, [ebp - 0x2c0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x28]
add esp, 0xc
mov dword [ebp - 0x2c0], 0x1fc
cmp dword [ebp - 0x14], 0x10
mov dword [ebp - 0x2bc], ebx
cmovae eax, dword [ebp - 0x28]
push eax
lea eax, [ebp - 0x2a8]
mov dword [ebp - 0x2b8], 1
push eax
mov dword [ebp - 0x2b4], 0x17
mov dword [ebp - 0x2b0], 0x500
mov dword [ebp - 0x2ac], edi
call esi
xor al, al
mov byte [ebp - 0x2d4], 0x44
mov byte [ebp - 0x2ca], al
mov cl, 0x36
xor al, byte [ebp - 0x2d4]
mov dl, 0x21
mov byte [ebp - 0x2d3], al
mov bl, 0x25
mov al, byte [ebp - 0x2d4]
mov ah, 0x29
xor cl, al
mov byte [ebp - 0x2c1], 0x30
mov ch, 0x17
mov byte [ebp - 0x2d2], cl
mov dh, 0x2b
mov bh, 0x22
xor dl, al
xor bl, al
mov byte [ebp - 0x2d1], dl
xor ah, al
mov byte [ebp - 0x2d0], bl
xor ch, al
mov byte [ebp - 0x2cf], ah
xor dh, al
mov byte [ebp - 0x2ce], ch
xor bh, al
mov byte [ebp - 0x2cd], dh
mov al, byte [ebp - 0x2c1]
xor al, byte [ebp - 0x2d4]
mov byte [ebp - 0x2cb], al
lea eax, [ebp - 0x2d3]
push eax
lea eax, [ebp - 0x11c]
mov byte [ebp - 0x2cc], bh
push eax
mov byte [ebp - 0x2ca], 0
call esi
movaps xmm0, xmmword [0x1007b1d0]
xor eax, eax
movups xmmword [ebp - 0x310], xmm0
mov dword [ebp - 0x2e0], 0xd554d
movaps xmm0, xmmword [0x1007ac50]
movups xmmword [ebp - 0x300], xmm0
movaps xmm0, xmmword [0x1007af80]
movups xmmword [ebp - 0x2f0], xmm0
nop dword [eax]
mov cl, byte [ebp - 0x310]
xor byte [ebp + eax - 0x30f], cl
inc eax
cmp eax, 0x32
jb 0x10017710
lea eax, [ebp - 0x30f]
mov byte [ebp - 0x2dd], 0
push eax
lea eax, [ebp - 0x220]
push eax
call esi
lea eax, [ebp - 0x2c0]
push eax
push 0
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
push 0
push dword [ebp - 0x2dc]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 0x14]
mov byte [0x1008676c], 1
mov byte [0x100866ff], 1
cmp eax, 0x10
jb 0x10017777
inc eax
push eax
push dword [ebp - 0x28]
call fcn.100026b0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xc0], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x50]
mov dword [ebp + ecx - 0xc4], eax
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xbc], vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
call fcn.100086b0
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x70]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10067dd5
mov esp, ebp
pop ebp
ret