Function at 0x100075a0
Capabilities:
Contain obfuscated stackstrings
Create thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x2a8
mov eax, dword [0x10029040]
xor eax, esp
mov dword [esp + 0x2a4], eax
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push edi
push str.client.dll
call esi
test eax, eax
jne 0x100075e5
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
call edi
push str.client.dll
call esi
test eax, eax
je 0x100075d3
push 0x10
call dword [sym.imp.USER32.dll_MessageBeep]
push str.xxxxxx____xx____xxx____x____xxxxxxxxxxxxx____xxxx____xxx
push 0x10026c20
push str.netc.dll
call fcn.10001320
mov edx, eax
mov dword [0x1002a74c], edx
test edx, edx
je 0x100078ef
mov dword [esp + 8], 0x9045115e
mov dword [esp + 0xc], 0x4c752b28
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], ecx
mov dword [esp + 8], 0x975c0e33
mov dword [esp + 0xc], 0x17eb1495
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], ecx
mov dword [esp + 8], 0xfffeced2
mov dword [esp + 0xc], 0x4ea296ad
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x130], eax
mov dword [esp + 0x134], ecx
mov dword [esp + 8], 0x93de8f48
mov dword [esp + 0xc], 0x58b8603c
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x138], eax
mov dword [esp + 0x13c], ecx
mov dword [esp + 8], 0xb5dde7ab
mov dword [esp + 0xc], 0xe501c7be
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], ecx
mov dword [esp + 8], 0xec00fe4
mov dword [esp + 0xc], 0x92efac03
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], ecx
mov dword [esp + 8], 0xbaec49ba
mov dword [esp + 0xc], 0x840d0092
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], ecx
mov dword [esp + 8], 0x8f03f7ac
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], ecx
mov dword [esp + 8], 0xd70a5d05
mov dword [esp + 0xc], 0x23330b75
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ecx
mov dword [esp + 8], 0xb7386046
mov dword [esp + 0xc], 0x658f70f4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 8], 0xdf8dbdb7
mov dword [esp + 0xc], 0x23cde4cb
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
mov dword [esp + 8], 0xf4b7fc68
mov dword [esp + 0xc], 0x2dcc0152
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
mov dword [esp + 8], 0xc1fd82d9
mov dword [esp + 0xc], 0x8052e7d1
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
mov dword [esp + 8], 0x6f906b8a
mov dword [esp + 0xc], 0xe68ac760
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 8], 0xc2dc699b
mov dword [esp + 0xc], 0x840758b7
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ecx
mov dword [esp + 8], 0x8f03f7ac
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movaps xmm1, xmmword [esp + 0x120]
xorps xmm1, xmmword [esp + 0x60]
movaps xmmword [esp + 0x120], xmm1
movaps xmm1, xmmword [esp + 0x130]
xorps xmm1, xmmword [esp + 0x70]
movaps xmmword [esp + 0x130], xmm1
movaps xmm1, xmmword [esp + 0x140]
xorps xmm1, xmmword [esp + 0x80]
mov dword [esp + 0x98], eax
lea eax, [esp + 0x120]
push edx
push eax
sub esp, 0x18
movaps xmmword [esp + 0x160], xmm1
movaps xmm1, xmmword [esp + 0x170]
mov dword [esp + 0xbc], ecx
mov ecx, esp
xorps xmm1, xmmword [esp + 0xb0]
push str.SigTest.log
movaps xmmword [esp + 0x174], xmm1
call fcn.10001500
call fcn.10001610
mov ecx, dword [0x1002a74c]
mov edx, 0x10001cd0
push 5
push 0x1002a754
call fcn.100019a0
add esp, 0x28
jmp 0x10007bbf
mov dword [esp + 8], 0x8558185e
mov dword [esp + 0xc], 0x36e593a
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], ecx
mov dword [esp + 8], 0xd7560105
mov dword [esp + 0xc], 0xce95080
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], ecx
mov dword [esp + 8], 0xbeadd9d9
mov dword [esp + 0xc], 0x46bf80af
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], ecx
mov dword [esp + 8], 0x92978f1b
mov dword [esp + 0xc], 0x7eec733d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x178], eax
mov dword [esp + 0x17c], ecx
mov dword [esp + 8], 0x9199ecbc
mov dword [esp + 0xc], 0xe53984b0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], ecx
mov dword [esp + 8], 0x6e34bfe
mov dword [esp + 0xc], 0x92eba907
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x188], eax
mov dword [esp + 0x18c], ecx
mov dword [esp + 8], 0xe3b91bee
mov dword [esp + 0xc], 0x840758b7
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x190], eax
mov dword [esp + 0x194], ecx
mov dword [esp + 8], 0x8f03f7ac
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x198], eax
mov dword [esp + 0x19c], ecx
mov dword [esp + 8], 0xd70a5d05
mov dword [esp + 0xc], 0x23330b75
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], ecx
mov dword [esp + 8], 0xb7386046
mov dword [esp + 0xc], 0x658f70f4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 8], 0xdf8dbdb7
mov dword [esp + 0xc], 0x23cde4cb
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
mov dword [esp + 8], 0xf4b7fc68
mov dword [esp + 0xc], 0x2dcc0152
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
mov dword [esp + 8], 0xc1fd82d9
mov dword [esp + 0xc], 0x8052e7d1
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
mov dword [esp + 8], 0x6f906b8a
mov dword [esp + 0xc], 0xe68ac760
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 8], 0xc2dc699b
mov dword [esp + 0xc], 0x840758b7
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ecx
mov dword [esp + 8], 0x8f03f7ac
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movaps xmm1, xmmword [esp + 0x160]
xorps xmm1, xmmword [esp + 0x60]
movaps xmmword [esp + 0x160], xmm1
movaps xmm1, xmmword [esp + 0x170]
xorps xmm1, xmmword [esp + 0x70]
movaps xmmword [esp + 0x170], xmm1
movaps xmm1, xmmword [esp + 0x180]
xorps xmm1, xmmword [esp + 0x80]
mov dword [esp + 0x98], eax
lea eax, [esp + 0x160]
push eax
sub esp, 0x18
movaps xmmword [esp + 0x19c], xmm1
movaps xmm1, xmmword [esp + 0x1ac]
mov dword [esp + 0xb8], ecx
mov ecx, esp
xorps xmm1, xmmword [esp + 0xac]
push str.SigTest.log
movaps xmmword [esp + 0x1b0], xmm1
call fcn.10001500
call fcn.10001610
add esp, 0x1c
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push str.xxxxxxx_____x
push 0x10026c78
push str.client.dll
call fcn.10001320
mov edi, eax
mov dword [0x1002a750], edi
test edi, edi
je 0x10007eb8
mov dword [esp + 8], 0x9045115e
mov dword [esp + 0xc], 0x4c752b28
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], edx
mov dword [esp + 8], 0x975c0e33
mov dword [esp + 0xc], 0x17eb1495
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 8], 0xfffeced2
mov dword [esp + 0xc], 0x4ea296ad
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
mov dword [esp + 8], 0x93de8f48
mov dword [esp + 0xc], 0x58b8603c
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
mov dword [esp + 8], 0xb5dde7ab
mov dword [esp + 0xc], 0xe501c7be
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], ecx
mov dword [esp + 8], 0x1ad20fe4
mov dword [esp + 0xc], 0x92efab0c
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], ecx
mov dword [esp + 8], 0xa1b210c8
mov dword [esp + 0xc], 0xe17531f1
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], ecx
mov dword [esp + 8], 0xf733d78d
mov dword [esp + 0xc], 0xd4c7b1db
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], ecx
mov dword [esp + 8], 0xd70a5d05
mov dword [esp + 0xc], 0x23330b75
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], ecx
mov dword [esp + 8], 0xb7386046
mov dword [esp + 0xc], 0x658f70f4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
mov dword [esp + 8], 0xdf8dbdb7
mov dword [esp + 0xc], 0x23cde4cb
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
mov dword [esp + 8], 0xf4b7fc68
mov dword [esp + 0xc], 0x2dcc0152
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 8], 0xc1fd82d9
mov dword [esp + 0xc], 0x8052e7d1
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 8], 0x6f906b8a
mov dword [esp + 0xc], 0xe68ac760
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
mov dword [esp + 8], 0xc2dc699b
mov dword [esp + 0xc], 0x840758b7
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov dword [esp + 8], 0x8f03f7ac
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movaps xmm1, xmmword [esp + 0x60]
xorps xmm1, xmmword [esp + 0xa0]
movaps xmmword [esp + 0x60], xmm1
movaps xmm1, xmmword [esp + 0x70]
xorps xmm1, xmmword [esp + 0xb0]
movaps xmmword [esp + 0x70], xmm1
movaps xmm1, xmmword [esp + 0x80]
xorps xmm1, xmmword [esp + 0xc0]
mov dword [esp + 0xd8], eax
lea eax, [esp + 0x60]
push edi
push eax
sub esp, 0x18
movaps xmmword [esp + 0xa0], xmm1
movaps xmm1, xmmword [esp + 0xb0]
mov dword [esp + 0xfc], ecx
mov ecx, esp
xorps xmm1, xmmword [esp + 0xf0]
push str.SigTest.log
movaps xmmword [esp + 0xb4], xmm1
call fcn.10001500
call fcn.10001610
mov ecx, dword [0x1002a750]
mov edx, 0x10001b70
push 6
push 0x1002a764
call fcn.100019a0
add esp, 0x28
jmp 0x100081a6
mov dword [esp + 8], 0x8558185e
mov dword [esp + 0xc], 0x36e593a
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1a0], eax
mov dword [esp + 0x1a4], ecx
mov dword [esp + 8], 0xd7560105
mov dword [esp + 0xc], 0xce95080
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1ac], ecx
mov dword [esp + 8], 0xbeadd9d9
mov dword [esp + 0xc], 0x46bf80af
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1b0], eax
mov dword [esp + 0x1b4], ecx
mov dword [esp + 8], 0x92978f1b
mov dword [esp + 0xc], 0x7eec733d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], ecx
mov dword [esp + 8], 0x8399ecbc
mov dword [esp + 0xc], 0xe53e8ba4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1c0], eax
mov dword [esp + 0x1c4], ecx
mov dword [esp + 8], 0x1e938fe
mov dword [esp + 0xc], 0x94e38103
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1c8], eax
mov dword [esp + 0x1cc], ecx
mov dword [esp + 8], 0xabaf49fe
mov dword [esp + 0xc], 0xf06636d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], ecx
mov dword [esp + 8], 0xae6685d9
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1d8], eax
mov dword [esp + 0x1dc], ecx
mov dword [esp + 8], 0xd70a5d05
mov dword [esp + 0xc], 0x23330b75
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], ecx
mov dword [esp + 8], 0xb7386046
mov dword [esp + 0xc], 0x658f70f4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
mov dword [esp + 8], 0xdf8dbdb7
mov dword [esp + 0xc], 0x23cde4cb
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
mov dword [esp + 8], 0xf4b7fc68
mov dword [esp + 0xc], 0x2dcc0152
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 8], 0xc1fd82d9
mov dword [esp + 0xc], 0x8052e7d1
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 8], 0x6f906b8a
mov dword [esp + 0xc], 0xe68ac760
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
mov dword [esp + 8], 0xc2dc699b
mov dword [esp + 0xc], 0x840758b7
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov dword [esp + 8], 0x8f03f7ac
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movaps xmm1, xmmword [esp + 0x1a0]
xorps xmm1, xmmword [esp + 0xa0]
movaps xmmword [esp + 0x1a0], xmm1
movaps xmm1, xmmword [esp + 0x1b0]
xorps xmm1, xmmword [esp + 0xb0]
movaps xmmword [esp + 0x1b0], xmm1
movaps xmm1, xmmword [esp + 0x1c0]
xorps xmm1, xmmword [esp + 0xc0]
mov dword [esp + 0xd8], eax
lea eax, [esp + 0x1a0]
push eax
sub esp, 0x18
movaps xmmword [esp + 0x1dc], xmm1
movaps xmm1, xmmword [esp + 0x1ec]
mov dword [esp + 0xf8], ecx
mov ecx, esp
xorps xmm1, xmmword [esp + 0xec]
push str.SigTest.log
movaps xmmword [esp + 0x1f0], xmm1
call fcn.10001500
call fcn.10001610
add esp, 0x1c
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push str.xxxxxxxxxxx
push 0x10026c94
push str.client.dll
call fcn.10001320
mov edi, eax
mov dword [0x1002a760], edi
test edi, edi
je 0x1000848a
mov dword [esp + 8], 0x9045115e
mov dword [esp + 0xc], 0x4c752b28
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov dword [esp + 0xa0], ecx
mov dword [esp + 0xa4], edx
mov dword [esp + 8], 0x975c0e33
mov dword [esp + 0xc], 0x17eb1495
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], ecx
mov dword [esp + 8], 0xfffeced2
mov dword [esp + 0xc], 0x4ea296ad
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], ecx
mov dword [esp + 8], 0x93de8f48
mov dword [esp + 0xc], 0x58b8603c
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], ecx
mov dword [esp + 8], 0xb5dde7ab
mov dword [esp + 0xc], 0xf206c7be
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov dword [esp + 8], 0xaf70ce3
mov dword [esp + 0xc], 0x94ef9412
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], ecx
mov dword [esp + 8], 0x87ae0ced
mov dword [esp + 0xc], 0xf0693dc1
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], ecx
mov dword [esp + 8], 0xf733d78d
mov dword [esp + 0xc], 0xd4c7b1db
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], ecx
mov dword [esp + 8], 0xd70a5d05
mov dword [esp + 0xc], 0x23330b75
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xb7386046
mov dword [esp + 0xc], 0x658f70f4
mov dword [esp + 0x20], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xdf8dbdb7
mov dword [esp + 0xc], 0x23cde4cb
mov dword [esp + 0x28], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xf4b7fc68
mov dword [esp + 0xc], 0x2dcc0152
mov dword [esp + 0x30], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xc1fd82d9
mov dword [esp + 0xc], 0x8052e7d1
mov dword [esp + 0x38], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0x6f906b8a
mov dword [esp + 0x40], eax
mov dword [esp + 0xc], 0xe68ac760
mov eax, dword [esp + 8]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xc2dc699b
mov dword [esp + 0xc], 0x840758b7
mov dword [esp + 0x48], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x50], eax
mov dword [esp + 8], 0x8f03f7ac
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movaps xmm1, xmmword [esp + 0xa0]
xorps xmm1, xmmword [esp + 0x20]
movaps xmmword [esp + 0xa0], xmm1
movaps xmm1, xmmword [esp + 0xb0]
xorps xmm1, xmmword [esp + 0x30]
movaps xmmword [esp + 0xb0], xmm1
movaps xmm1, xmmword [esp + 0xc0]
xorps xmm1, xmmword [esp + 0x40]
mov dword [esp + 0x58], eax
lea eax, [esp + 0xa0]
push edi
push eax
sub esp, 0x18
movaps xmmword [esp + 0xe0], xmm1
movaps xmm1, xmmword [esp + 0xf0]
mov dword [esp + 0x7c], ecx
mov ecx, esp
xorps xmm1, xmmword [esp + 0x70]
push str.SigTest.log
movaps xmmword [esp + 0xf4], xmm1
call fcn.10001500
call fcn.10001610
mov ecx, dword [0x1002a760]
mov edx, 0x10001d90
push 5
push 0x1002a76c
call fcn.100019a0
add esp, 0x28
jmp 0x1000873c
mov dword [esp + 8], 0x8558185e
mov dword [esp + 0xc], 0x36e593a
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1e0], eax
mov dword [esp + 0x1e4], ecx
mov dword [esp + 8], 0xd7560105
mov dword [esp + 0xc], 0xce95080
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1e8], eax
mov dword [esp + 0x1ec], ecx
mov dword [esp + 8], 0xbeadd9d9
mov dword [esp + 0xc], 0x46bf80af
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1f0], eax
mov dword [esp + 0x1f4], ecx
mov dword [esp + 8], 0x92978f1b
mov dword [esp + 0xc], 0x79ec733d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x1f8], eax
mov dword [esp + 0x1fc], ecx
mov dword [esp + 8], 0xa69aebab
mov dword [esp + 0xc], 0xe50195b4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x200], eax
mov dword [esp + 0x204], ecx
mov dword [esp + 8], 0x1df51df8
mov dword [esp + 0xc], 0x88efb125
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x208], eax
mov dword [esp + 0x20c], ecx
mov dword [esp + 8], 0xabaf49ef
mov dword [esp + 0xc], 0xf06636d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x210], eax
mov dword [esp + 0x214], ecx
mov dword [esp + 8], 0xae6685d9
mov dword [esp + 0xc], 0xd4cde9f4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x218], eax
mov dword [esp + 0x21c], ecx
mov dword [esp + 8], 0xd70a5d05
mov dword [esp + 0xc], 0x23330b75
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xb7386046
mov dword [esp + 0xc], 0x658f70f4
mov dword [esp + 0x20], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xdf8dbdb7
mov dword [esp + 0xc], 0x23cde4cb
mov dword [esp + 0x28], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xf4b7fc68
mov dword [esp + 0xc], 0x2dcc0152
mov dword [esp + 0x30], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xc1fd82d9
mov dword [esp + 0xc], 0x8052e7d1
mov dword [esp + 0x38], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0x6f906b8a
mov dword [esp + 0x40], eax
mov dword [esp + 0xc], 0xe68ac760
mov eax, dword [esp + 8]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xc2dc699b
mov dword [esp + 0xc], 0x840758b7
mov dword [esp + 0x48], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x50], eax
mov dword [esp + 8], 0x8f03f7ac
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movaps xmm1, xmmword [esp + 0x1e0]
xorps xmm1, xmmword [esp + 0x20]
movaps xmmword [esp + 0x1e0], xmm1
movaps xmm1, xmmword [esp + 0x1f0]
xorps xmm1, xmmword [esp + 0x30]
movaps xmmword [esp + 0x1f0], xmm1
movaps xmm1, xmmword [esp + 0x200]
xorps xmm1, xmmword [esp + 0x40]
mov dword [esp + 0x58], eax
lea eax, [esp + 0x1e0]
push eax
sub esp, 0x18
movaps xmmword [esp + 0x21c], xmm1
movaps xmm1, xmmword [esp + 0x22c]
mov dword [esp + 0x78], ecx
mov ecx, esp
xorps xmm1, xmmword [esp + 0x6c]
push str.SigTest.log
movaps xmmword [esp + 0x230], xmm1
call fcn.10001500
call fcn.10001610
add esp, 0x1c
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [esp + 8], 0x9b6b2869
mov dword [esp + 0xc], 0x425c672a
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xf0], eax
mov dword [esp + 0xf4], ecx
mov dword [esp + 8], 0xd14d0222
mov dword [esp + 0xc], 0x65fd1592
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xf8], eax
mov dword [esp + 0xfc], ecx
mov dword [esp + 8], 0xd70a5d05
mov dword [esp + 0xc], 0x23330b75
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xb7386046
mov dword [esp + 0xc], 0x658f70f4
mov dword [esp + 0x10], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xc]
movaps xmm1, xmmword [esp + 0xf0]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
xorps xmm1, xmmword [esp + 0x10]
movaps xmmword [esp + 0xf0], xmm1
mov dword [esp + 8], 0xe26b2869
mov dword [esp + 0xc], 0xd503a5b
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], ecx
mov dword [esp + 8], 0xb7540c22
mov dword [esp + 0xc], 0x658f70f4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], ecx
mov dword [esp + 8], 0xd70a5d05
mov dword [esp + 0xc], 0x23330b75
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0xb7386046
mov dword [esp + 0x14], ecx
mov dword [esp + 0xc], 0x658f70f4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movaps xmm1, xmmword [esp + 0xe0]
mov dword [esp + 0x18], eax
lea eax, [esp + 0xe0]
mov dword [esp + 0x1c], ecx
xorps xmm1, xmmword [esp + 0x10]
push eax
movaps xmmword [esp + 0xe4], xmm1
call esi
lea ecx, [esp + 0xf0]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
mov dword [0x1002a75c], edi
test edi, edi
je 0x10008b67
mov dword [esp + 8], 0x9045115e
mov dword [esp + 0xc], 0x4c752b28
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x220], ecx
mov dword [esp + 0x224], edx
mov dword [esp + 8], 0x975c0e33
mov dword [esp + 0xc], 0x17eb1495
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x228], eax
mov dword [esp + 0x22c], ecx
mov dword [esp + 8], 0xfffeced2
mov dword [esp + 0xc], 0x4ea296ad
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x230], eax
mov dword [esp + 0x234], ecx
mov dword [esp + 8], 0x9ad6b448
mov dword [esp + 0xc], 0xda96d36
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x238], eax
mov dword [esp + 0x23c], ecx
mov dword [esp + 8], 0x8d9cf7b5
mov dword [esp + 0xc], 0xe13d8b8e
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x240], eax
mov dword [esp + 0x244], ecx
mov dword [esp + 8], 0x9e509ee
mov dword [esp + 0xc], 0xc7f8a206
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x248], eax
mov dword [esp + 0x24c], ecx
mov dword [esp + 8], 0xe7a459bb
mov dword [esp + 0xc], 0x840752ef
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x250], eax
mov dword [esp + 0x254], ecx
mov dword [esp + 8], 0x8f03f7ac
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x258], eax
mov dword [esp + 0x25c], ecx
mov dword [esp + 8], 0xd70a5d05
mov dword [esp + 0xc], 0x23330b75
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xb7386046
mov dword [esp + 0xc], 0x658f70f4
mov dword [esp + 0x20], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xdf8dbdb7
mov dword [esp + 0xc], 0x23cde4cb
mov dword [esp + 0x28], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xf4b7fc68
mov dword [esp + 0xc], 0x2dcc0152
mov dword [esp + 0x30], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xc1fd82d9
mov dword [esp + 0xc], 0x8052e7d1
mov dword [esp + 0x38], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0x6f906b8a
mov dword [esp + 0x40], eax
mov dword [esp + 0xc], 0xe68ac760
mov eax, dword [esp + 8]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xc2dc699b
mov dword [esp + 0xc], 0x840758b7
mov dword [esp + 0x48], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x50], eax
mov dword [esp + 8], 0x8f03f7ac
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movaps xmm1, xmmword [esp + 0x220]
xorps xmm1, xmmword [esp + 0x20]
movaps xmmword [esp + 0x220], xmm1
movaps xmm1, xmmword [esp + 0x230]
xorps xmm1, xmmword [esp + 0x30]
movaps xmmword [esp + 0x230], xmm1
movaps xmm1, xmmword [esp + 0x240]
xorps xmm1, xmmword [esp + 0x40]
mov dword [esp + 0x58], eax
lea eax, [esp + 0x220]
push edi
push eax
sub esp, 0x18
movaps xmmword [esp + 0x260], xmm1
movaps xmm1, xmmword [esp + 0x270]
mov dword [esp + 0x7c], ecx
mov ecx, esp
xorps xmm1, xmmword [esp + 0x70]
push str.SigTest.log
movaps xmmword [esp + 0x274], xmm1
call fcn.10001500
call fcn.10001610
mov ecx, dword [0x1002a75c]
mov edx, 0x10002110
push 6
push 0x1002a744
call fcn.100019a0
add esp, 0x28
jmp 0x10008e19
mov dword [esp + 8], 0x8558185e
mov dword [esp + 0xc], 0x36e593a
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x260], eax
mov dword [esp + 0x264], ecx
mov dword [esp + 8], 0xd7560105
mov dword [esp + 0xc], 0xce95080
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x268], eax
mov dword [esp + 0x26c], ecx
mov dword [esp + 8], 0xbeadd9d9
mov dword [esp + 0xc], 0x46bf80af
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x270], eax
mov dword [esp + 0x274], ecx
mov dword [esp + 8], 0x92978f1b
mov dword [esp + 0xc], 0x65ec733d
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x278], eax
mov dword [esp + 0x27c], ecx
mov dword [esp + 8], 0xad99ecb8
mov dword [esp + 0xc], 0xf53ec7b4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x280], eax
mov dword [esp + 0x284], ecx
mov dword [esp + 8], 0x3cf27eb
mov dword [esp + 0xc], 0x84eea60f
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], ecx
mov dword [esp + 8], 0xa7ba0fee
mov dword [esp + 0xc], 0x840d79c5
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x290], eax
mov dword [esp + 0x294], ecx
mov dword [esp + 8], 0x8f03f7ac
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x298], eax
mov dword [esp + 0x29c], ecx
mov dword [esp + 8], 0xd70a5d05
mov dword [esp + 0xc], 0x23330b75
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xb7386046
mov dword [esp + 0xc], 0x658f70f4
mov dword [esp + 0x20], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xdf8dbdb7
mov dword [esp + 0xc], 0x23cde4cb
mov dword [esp + 0x28], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xf4b7fc68
mov dword [esp + 0xc], 0x2dcc0152
mov dword [esp + 0x30], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x34], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xc1fd82d9
mov dword [esp + 0xc], 0x8052e7d1
mov dword [esp + 0x38], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0x6f906b8a
mov dword [esp + 0x40], eax
mov dword [esp + 0xc], 0xe68ac760
mov eax, dword [esp + 8]
mov dword [esp + 0x44], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xc2dc699b
mov dword [esp + 0xc], 0x840758b7
mov dword [esp + 0x48], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x50], eax
mov dword [esp + 8], 0x8f03f7ac
mov dword [esp + 0x54], ecx
mov dword [esp + 0xc], 0xd4cde9fe
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movaps xmm1, xmmword [esp + 0x260]
xorps xmm1, xmmword [esp + 0x20]
movaps xmmword [esp + 0x260], xmm1
movaps xmm1, xmmword [esp + 0x270]
xorps xmm1, xmmword [esp + 0x30]
movaps xmmword [esp + 0x270], xmm1
movaps xmm1, xmmword [esp + 0x280]
xorps xmm1, xmmword [esp + 0x40]
mov dword [esp + 0x58], eax
lea eax, [esp + 0x260]
push eax
sub esp, 0x18
movaps xmmword [esp + 0x29c], xmm1
movaps xmm1, xmmword [esp + 0x2ac]
mov dword [esp + 0x78], ecx
mov ecx, esp
xorps xmm1, xmmword [esp + 0x6c]
push str.SigTest.log
movaps xmmword [esp + 0x2b0], xmm1
call fcn.10001500
call fcn.10001610
add esp, 0x1c
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [esp + 8], 0x886b2869
mov dword [esp + 0xc], 0x4c516401
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], ecx
mov dword [esp + 8], 0xd65d0c29
mov dword [esp + 0xc], 0x658f709a
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], ecx
mov dword [esp + 8], 0xd70a5d05
mov dword [esp + 0xc], 0x23330b75
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], 0xb7386046
mov dword [esp + 0xc], 0x658f70f4
mov dword [esp + 0x10], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], ecx
movaps xmm1, xmmword [esp + 0x10]
xorps xmm1, xmmword [esp + 0x110]
movaps xmmword [esp + 0x110], xmm1
mov dword [esp + 8], 0xe26b2869
mov dword [esp + 0xc], 0xd503a5b
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], ecx
mov dword [esp + 8], 0xb7540c22
mov dword [esp + 0xc], 0x658f70f4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], ecx
mov dword [esp + 8], 0xd70a5d05
mov dword [esp + 0xc], 0x23330b75
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0xb7386046
mov dword [esp + 0x14], ecx
mov dword [esp + 0xc], 0x658f70f4
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x100]
mov dword [esp + 0x1c], ecx
movaps xmm1, xmmword [esp + 0x10]
xorps xmm1, xmmword [esp + 0x100]
push eax
movaps xmmword [esp + 0x104], xmm1
call esi
lea ecx, [esp + 0x110]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push 0
push 0
push 0x100020a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x2ac]
pop edi
pop esi
xor ecx, esp
call fcn.100094c1
mov esp, ebp
pop ebp
ret