Function at 0x10065aa0
Capabilities:
Create process on windows
Encode data using xor
Hide graphical window

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x98
mov ecx, dword [0x1023dad4]
push esi
push edi
mov eax, dword [ecx + 0x1cdc]
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1cdc]
mov dword [ebp - 0x30], eax
cmp byte [eax + 0x8f], 0
jne 0x100664d6
mov edi, dword [0x1023dad4]
mov ecx, eax
push 0
push dword [ebx + 8]
mov dword [ebp - 0x18], edi
call fcn.1003c7c0
push ecx
mov dword [esp], 0xbf800000
mov esi, eax
push 1
push 0
push dword [ebx + 8]
lea eax, [ebp - 0x90]
push eax
call fcn.10037b00
mov eax, dword [ebp - 0x30]
add esp, 0xc
movss xmm1, dword [edi + 0x1554]
mulss xmm1, dword [0x10154664]
mov dword [ebp - 0xc], 0x41d20000
movss xmm0, dword [eax + 0xd0]
movss dword [ebp - 0x48], xmm0
movss xmm0, dword [eax + 0xd4]
lea eax, [ebp - 0x98]
addss xmm1, dword [ebp - 0x8c]
movss dword [ebp - 4], xmm0
movss xmm0, dword [edi + 0x1550]
mulss xmm0, dword [0x10154664]
mov dword [ebp - 0x10], 0x42ea0000
movss dword [esp + 4], xmm1
addss xmm0, dword [ebp - 0x90]
movss dword [esp], xmm0
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push eax
call fcn.1003f900
movss xmm2, dword ds:[ebp - 0x48]
lea eax, [ebp - 0x98]
movss xmm3, dword [ebp - 4]
movaps xmm1, xmm2
addss xmm1, dword [ebp - 0x98]
movaps xmm0, xmm3
movss dword [ebp - 0x80], xmm2
addss xmm0, dword [ebp - 0x94]
add esp, 0x10
movss dword [ebp - 0x7c], xmm3
movss dword [ebp - 0x78], xmm1
movss dword [ebp - 0x74], xmm0
movss xmm0, dword [edi + 0x1554]
movss dword [esp], xmm0
push eax
call fcn.1003f2e0
push 0
push 0
lea eax, [ebp - 0x80]
push esi
push eax
call fcn.1003f480
add esp, 0x18
test al, al
je 0x100664d6
push 0
lea eax, [ebp - 6]
push eax
lea eax, [ebp - 7]
push eax
lea eax, [ebp - 0x80]
push esi
push eax
call fcn.100769e0
push 0x3c
mov byte [ebp - 5], al
call fcn.10034b00
mov ecx, dword [0x1024918c]
add esp, 0x18
movups xmm0, xmmword [eax]
mov eax, dword fs:[0x2c]
movaps xmmword [ebp - 0x40], xmm0
movaps xmmword [ebp - 0x70], xmm0
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10248824]
cmp eax, dword [ecx + 4]
jg 0x100664df
cmp byte [ebp - 5], 0
je 0x10065c63
push 0
push str.modaldiscord
call fcn.10035aa0
add esp, 8
jmp 0x10065c99
cmp byte [ebp - 6], 0
je 0x10065c82
push 0
push str.modaldiscord
call fcn.10035fe0
add esp, 8
test al, al
jne 0x10065c82
push 0x3e
jmp 0x10065c8a
cmp byte [ebp - 7], 0
je 0x10065c99
push 0x3d
call fcn.10034b00
add esp, 4
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x70], xmm0
call fcn.1002f880
mov edi, eax
xor esi, esi
movss xmm0, dword [esi + 0x10248814]
sub esp, 8
subss xmm0, dword [ebp + esi - 0x70]
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.100f5f0f
movss xmm1, dword [esi + 0x10248814]
add esp, 8
movss xmm2, dword [ebp + esi - 0x70]
comiss xmm2, xmm1
fstp dword [ebp - 4]
jbe 0x10065d02
movss xmm0, dword [ebp - 4]
mulss xmm0, dword [edi + 0x10]
mulss xmm0, dword [0x1015a748]
addss xmm0, xmm1
minss xmm0, xmm2
movss dword [esi + 0x10248814], xmm0
jmp 0x10065d29
comiss xmm1, xmm2
jbe 0x10065d29
movss xmm0, dword [ebp - 4]
mulss xmm0, dword [edi + 0x10]
mulss xmm0, dword [0x10154e20]
subss xmm1, xmm0
maxss xmm1, xmm2
movss dword [esi + 0x10248814], xmm1
add esi, 4
cmp esi, 0xc
jl 0x10065ca2
mov esi, dword [ebp - 0x18]
push 0x10248814
movss xmm0, dword [esi + 0x1558]
movss dword [ebp - 0x48], xmm0
call fcn.100349c0
movss xmm0, dword [ebp - 0x48]
movss dword [esp], xmm0
push 0
push eax
push dword [ebp - 0x74]
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
push dword [ebp - 0x80]
call fcn.100423c0
mov eax, dword fs:[0x2c]
add esp, 0x1c
mov ecx, dword [0x1024918c]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x10248830]
cmp eax, dword [ecx + 4]
jg 0x10066516
push dword [ebx + 8]
call fcn.10035600
movups xmm0, xmmword [esi + 0x15dc]
add esp, 4
mov dword [ebp - 4], eax
lea eax, [ebp - 4]
mov ecx, 0x10248828
movups xmmword [ebp - 0x40], xmm0
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.10084fc0
mov esi, dword [ebp - 0xc]
mov eax, dword [0x10248828]
cmp byte [esi + 0xd], 0
jne 0x10065dd1
mov ecx, dword [ebp - 4]
cmp ecx, dword [esi + 0x10]
jae 0x10065dd3
mov esi, eax
cmp esi, eax
jne 0x10065e16
lea eax, [ebp - 0x40]
mov ecx, 0x10248828
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10085220
lea eax, [ebp - 4]
mov ecx, 0x10248828
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.10084fc0
mov esi, dword [ebp - 0xc]
cmp byte [esi + 0xd], 0
jne 0x10065e10
mov eax, dword [ebp - 4]
cmp eax, dword [esi + 0x10]
jae 0x10065e16
mov esi, dword [0x10248828]
movss xmm0, dword [0x10248814]
sub esp, 8
movss xmm1, dword [ebp - 0x3c]
addss xmm1, dword [ebp - 0x40]
addss xmm0, dword [0x10248818]
addss xmm1, dword [ebp - 0x38]
addss xmm0, dword [0x1024881c]
divss xmm1, dword [0x10159720]
divss xmm0, dword [0x10159720]
subss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
call fcn.100f5f0f
movss xmm0, dword [0x10154e8c]
add esp, 8
movss xmm1, dword [0x10154540]
fstp dword [ebp - 0x48]
comiss xmm0, dword [ebp - 0x48]
jbe 0x10065e9c
movaps xmm3, xmm1
movaps xmm4, xmm1
subss xmm3, dword [ebp - 0x40]
subss xmm4, dword [ebp - 0x3c]
movaps xmm5, xmm1
subss xmm5, dword [ebp - 0x38]
jmp 0x10065eab
movss xmm3, dword [ebp - 0x40]
movss xmm4, dword [ebp - 0x3c]
movss xmm5, dword [ebp - 0x38]
movss xmm2, dword ds:[esi + 0x14]
add esi, 0x14
comiss xmm3, xmm2
movss xmm1, dword [0x101597fc]
jbe 0x10065ed9
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
addss xmm0, xmm2
minss xmm0, xmm3
movss dword [esi], xmm0
jmp 0x10065ef3
comiss xmm2, xmm3
jbe 0x10065ef3
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
subss xmm2, xmm0
maxss xmm2, xmm3
movss dword [esi], xmm2
movss xmm2, dword [esi + 4]
comiss xmm4, xmm2
jbe 0x10065f15
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
addss xmm0, xmm2
minss xmm0, xmm4
movss dword [esi + 4], xmm0
jmp 0x10065f30
comiss xmm2, xmm4
jbe 0x10065f30
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
subss xmm2, xmm0
maxss xmm2, xmm4
movss dword [esi + 4], xmm2
movss xmm2, dword [esi + 8]
comiss xmm5, xmm2
jbe 0x10065f52
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
addss xmm0, xmm2
minss xmm0, xmm5
movss dword [esi + 8], xmm0
jmp 0x10065f6d
comiss xmm2, xmm5
jbe 0x10065f6d
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
subss xmm2, xmm0
maxss xmm2, xmm5
movss dword [esi + 8], xmm2
movss xmm2, dword [esi + 0xc]
movss xmm3, dword [ebp - 0x34]
comiss xmm3, xmm2
jbe 0x10065f94
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
addss xmm0, xmm2
minss xmm0, xmm3
movss dword [esi + 0xc], xmm0
jmp 0x10065faf
comiss xmm2, xmm3
jbe 0x10065faf
movss xmm0, dword [edi + 0x10]
mulss xmm0, xmm1
subss xmm2, xmm0
maxss xmm2, xmm3
movss dword [esi + 0xc], xmm2
push esi
call fcn.10037ca0
push eax
push 0
call fcn.10034220
movss xmm3, dword ds:[ebp - 0x80]
lea eax, [ebp - 0x78]
movss xmm0, dword [ebp - 0x7c]
addss xmm3, dword [ebp - 0x78]
addss xmm0, dword [ebp - 0x74]
movss xmm4, dword [0x10154664]
movss xmm1, dword [ebp - 0x90]
movss xmm2, dword [ebp - 0x8c]
divss xmm1, xmm4
mov esi, dword [ebx + 8]
push 0
push esi
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x10]
push eax
divss xmm2, xmm4
divss xmm3, xmm4
divss xmm0, xmm4
subss xmm3, xmm1
subss xmm0, xmm2
movss dword [ebp - 0x10], xmm3
movss dword [ebp - 0xc], xmm0
call fcn.10041be0
push 1
call fcn.10034380
add esp, 0x20
lea eax, [ebp - 0x88]
mov dword [esp], 0xbf800000
push 0
push 0
push dword [0x1023b8d8]
push eax
call fcn.10037b00
movss xmm1, dword ds:[ebp - 0x88]
lea eax, [ebp - 0x10]
movss xmm0, dword [ebp - 0x84]
addss xmm1, dword [0x1015973c]
addss xmm0, dword [0x10159758]
push 0
push eax
movss dword [ebp - 0x10], xmm1
movss dword [ebp - 0xc], xmm0
call fcn.10033800
push 0
push 0
push str.modaldiscord
call fcn.100358a0
add esp, 0x28
test al, al
je 0x100664d6
mov ecx, dword [0x1023dad4]
mov eax, dword [ecx + 0x1cdc]
mov byte [eax + 0x8c], 1
mov eax, dword [ecx + 0x1cdc]
mov ecx, dword [0x1024918c]
mov dword [ebp - 0xc], eax
movss xmm0, dword [eax + 0xc]
movss xmm1, dword [eax + 0x18]
movaps xmm2, xmm0
addss xmm2, dword [eax + 0x14]
addss xmm1, dword [eax + 0x10]
movss dword [ebp - 0x40], xmm0
movss xmm0, dword [eax + 0x10]
mov eax, dword [ebp - 0x18]
movss dword [ebp - 0x3c], xmm0
movss dword [ebp - 0x38], xmm2
movss dword [ebp - 0x34], xmm1
movups xmm0, xmmword [eax + 0x15dc]
mov eax, dword fs:[0x2c]
movups xmmword [ebp - 0x70], xmm0
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x1024883c]
cmp eax, dword [ecx + 4]
jg 0x1006656d
push esi
call fcn.10035600
add esp, 4
mov edi, eax
lea eax, [ebp - 4]
mov dword [ebp - 4], edi
mov ecx, 0x10248834
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.10084fc0
mov esi, dword [ebp - 0x48]
mov eax, dword [0x10248834]
cmp byte [esi + 0xd], 0
jne 0x1006614b
cmp edi, dword [esi + 0x10]
jae 0x1006614d
mov esi, eax
cmp esi, eax
jne 0x10066190
lea eax, [ebp - 0x70]
mov ecx, 0x10248834
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10085220
lea eax, [ebp - 4]
mov ecx, 0x10248834
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.10084fc0
mov esi, dword [ebp - 0x48]
cmp byte [esi + 0xd], 0
jne 0x1006618a
mov eax, dword [ebp - 4]
cmp eax, dword [esi + 0x10]
jae 0x10066190
mov esi, dword [0x10248834]
mov eax, dword [ebp - 0x30]
sub esp, 8
movss xmm0, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x18]
movaps xmm1, xmm0
movss dword [ebp - 4], xmm0
mov eax, dword [eax + 8]
movss xmm0, dword [ebp - 0x70]
and eax, 0x4000000
addss xmm1, xmm0
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [ebp - 0x68]
or eax, 0x8000000
shr eax, 0x1a
add eax, eax
movss dword [ebp - 0x48], xmm0
addss xmm1, xmm0
movss xmm0, dword [ecx + eax*8 + 0x15e0]
addss xmm0, dword [ecx + eax*8 + 0x15dc]
divss xmm1, dword [0x10159720]
addss xmm0, dword [ecx + eax*8 + 0x15e4]
divss xmm0, dword [0x10159720]
subss xmm1, xmm0
cvtps2pd xmm0, xmm1
movsd qword [esp], xmm0
call fcn.100f5f0f
movss xmm0, dword [0x1015a714]
add esp, 8
fstp dword [ebp - 0x18]
comiss xmm0, dword [ebp - 0x18]
jbe 0x10066253
movss xmm2, dword [0x10154540]
movaps xmm1, xmm2
subss xmm1, dword [ebp - 0x70]
movss dword [ebp - 0x30], xmm1
movaps xmm1, xmm2
subss xmm2, dword [ebp - 0x68]
subss xmm1, dword [ebp - 0x6c]
movaps xmm0, xmm2
movss dword [ebp - 4], xmm1
movss dword [ebp - 0x48], xmm0
add esi, 0x14
call fcn.1002f880
movss xmm3, dword [esi]
movss xmm4, dword [ebp - 0x30]
comiss xmm4, xmm3
movss xmm1, dword [eax + 0x10]
movss xmm2, dword [0x101597fc]
jbe 0x1006628b
movaps xmm0, xmm1
mulss xmm0, xmm2
addss xmm0, xmm3
minss xmm0, xmm4
movss dword [esi], xmm0
jmp 0x100662a3
comiss xmm3, xmm4
jbe 0x100662a3
movaps xmm0, xmm1
mulss xmm0, xmm2
subss xmm3, xmm0
maxss xmm3, xmm4
movss dword [esi], xmm3
movss xmm3, dword [esi + 4]
movss xmm4, dword [ebp - 4]
comiss xmm4, xmm3
jbe 0x100662c8
movaps xmm0, xmm1
mulss xmm0, xmm2
addss xmm0, xmm3
minss xmm0, xmm4
movss dword [esi + 4], xmm0
jmp 0x100662e1
comiss xmm3, xmm4
jbe 0x100662e1
movaps xmm0, xmm1
mulss xmm0, xmm2
subss xmm3, xmm0
maxss xmm3, xmm4
movss dword [esi + 4], xmm3
movss xmm3, dword [esi + 8]
movss xmm4, dword [ebp - 0x48]
comiss xmm4, xmm3
jbe 0x10066306
movaps xmm0, xmm1
mulss xmm0, xmm2
addss xmm0, xmm3
minss xmm0, xmm4
movss dword [esi + 8], xmm0
jmp 0x1006631f
comiss xmm3, xmm4
jbe 0x1006631f
movaps xmm0, xmm1
mulss xmm0, xmm2
subss xmm3, xmm0
maxss xmm3, xmm4
movss dword [esi + 8], xmm3
movss xmm0, dword [esi + 0xc]
movss xmm3, dword [ebp - 0x64]
comiss xmm3, xmm0
jbe 0x10066342
mulss xmm1, xmm2
addss xmm1, xmm0
minss xmm1, xmm3
movss dword [esi + 0xc], xmm1
jmp 0x10066358
comiss xmm0, xmm3
jbe 0x10066358
mulss xmm1, xmm2
subss xmm0, xmm1
maxss xmm0, xmm3
movss dword [esi + 0xc], xmm0
push esi
call fcn.10037ca0
push eax
push 0
call fcn.10034220
movss xmm1, dword [ebp - 0x40]
lea eax, [ebp - 0x38]
addss xmm1, dword [ebp - 0x38]
movss xmm3, dword [ebp - 0x84]
movss xmm4, dword [0x10154664]
movaps xmm0, xmm3
movss xmm2, dword [ebp - 0x88]
addss xmm3, dword [ebp - 0x3c]
divss xmm2, xmm4
push 0
push dword [0x1023b8d8]
divss xmm0, xmm4
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x4c]
push eax
divss xmm1, xmm4
subss xmm3, xmm0
subss xmm1, xmm2
movss dword [ebp - 0x48], xmm3
movss dword [ebp - 0x4c], xmm1
call fcn.10041be0
push 1
call fcn.10034380
mov eax, dword [ebp - 0xc]
movss xmm1, dword [eax + 0x14]
divss xmm1, dword [0x10154664]
movss xmm0, dword [eax + 0x18]
lea eax, [ebp - 0x10]
subss xmm0, dword [ebp - 0x84]
subss xmm1, dword [0x10159758]
push eax
subss xmm0, dword [0x10159730]
movss dword [ebp - 0x10], xmm1
movss dword [ebp - 0xc], xmm0
call fcn.100350c0
push 0
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x42a00000
push eax
push 0x1016110c
mov dword [ebp - 0xc], 0x41a00000
call fcn.10074e60
add esp, 0x34
test al, al
je 0x100664a5
movaps xmm0, xmmword [0x10161a60]
xor ecx, ecx
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x60], 0x1a52521b
mov dword [ebp - 0x5c], 0xc7f5471
mov dword [ebp - 0x58], 0x4d516502
mov word [ebp - 0x54], 0x5071
mov byte [ebp - 0x52], 0
nop
mov al, byte [ebp - 0x70]
xor byte [ebp + ecx - 0x6f], al
inc ecx
cmp ecx, 0x1d
jb 0x10066460
push 0
push 0
push 0
lea eax, [ebp - 0x6f]
mov byte [ebp - 0x52], 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [0x101f6030]
push 6
call fcn.100b2220
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
nop dword [eax]
call fcn.10035bc0
cmp byte [ebp - 5], 0
jne 0x100664d1
push 0
call fcn.100382a0
add esp, 4
test al, al
je 0x100664d1
lea eax, ds:[ebp - 0x40]
push 0
push eax
call fcn.1003f660
add esp, 8
test al, al
jne 0x100664d1
call fcn.10035bc0
call fcn.10035a40
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x10248824
call fcn.100d393d
add esp, 4
cmp dword [0x10248824], 0xffffffff
jne 0x10065c4c
movaps xmm0, xmmword [ebp - 0x40]
push 0x10248824
movups xmmword [0x10248814], xmm0
call fcn.100d38ec
add esp, 4
jmp 0x10065c4c
push 0x10248830
nop dword [eax + eax]
call fcn.100d393d
add esp, 4
cmp dword [0x10248830], 0xffffffff
jne 0x10065d90
push 0x24
call fcn.100d3891
push 0x10152130
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [0x10248828], eax
call fcn.100d387c
push 0x10248830
nop
call fcn.100d38ec
add esp, 0xc
jmp 0x10065d90
push 0x1024883c
call fcn.100d393d
add esp, 4
cmp dword [0x1024883c], 0xffffffff
jne 0x10066118
push 0x24
call fcn.100d3891
push 0x10152200
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [0x10248834], eax
call fcn.100d387c
push 0x1024883c
call fcn.100d38ec
add esp, 0xc
jmp 0x10066118