Function at 0x100df1b0
Capabilities:
Check if file exists
Delete registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101a3b3f
mov eax, dword fs:[0]
push eax
sub esp, 0x3ac
mov eax, dword [0x10222354]
xor eax, ebp
mov dword [ebp - 0x24], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 2
mov ecx, 0x102248a0
call fcn.1000bbf0
push eax
lea ecx, [ebp - 0x1c]
call fcn.100157f0
mov byte [ebp - 4], 3
push 0x101c58b8
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x20]
push ecx
call fcn.1008d070
add esp, 0xc
mov byte [ebp - 4], 4
movzx edx, byte [ebp + 8]
test edx, edx
je 0x100df4ed
lea ecx, [ebp - 0x234]
call fcn.10003f70
mov byte [ebp - 4], 5
push 0
push 0
push 0x2001f
push 0
push 0
lea ecx, [ebp - 0x20]
call fcn.10007f90
push eax
push SysReAllocStringLen
lea ecx, [ebp - 0x234]
call fcn.10004140
push 0
lea ecx, [ebp + 0xc]
call fcn.10007f90
push eax
push 0x101c58c0
lea ecx, [ebp - 0x234]
call fcn.100e1450
push 0
mov ecx, 0x10224a04
call fcn.10007fa0
push eax
push 0x101c58c4
lea ecx, [ebp - 0x234]
call fcn.100e1450
lea ecx, [ebp - 0x234]
call fcn.100040f0
push 0
push 0
push 0x2001f
push 0
push 0
lea ecx, [ebp - 0x1c]
call fcn.10007f90
push eax
push SysReAllocStringLen
lea ecx, [ebp - 0x234]
call fcn.10004140
push 0
lea ecx, [ebp + 0xc]
call fcn.10007f90
push eax
push 0x101c58d0
lea ecx, [ebp - 0x234]
call fcn.100e1450
push 0
mov ecx, 0x10224a04
call fcn.10007fa0
push eax
push 0x101c58d4
lea ecx, [ebp - 0x234]
call fcn.100e1450
push 0
lea ecx, [ebp - 0x20]
call fcn.10007f90
push eax
push str.CurVer
lea ecx, [ebp - 0x234]
call fcn.100e1450
lea ecx, [ebp - 0x234]
call fcn.100040f0
push 0
push 0
push 0x2001f
push 0
push 0
push 0x101c58f0
push SysReAllocStringLen
lea ecx, [ebp - 0x234]
call fcn.10004140
push 0
lea ecx, [ebp + 0xc]
call fcn.10007f90
push eax
mov ecx, 0x10224a04
call fcn.10007fa0
push eax
lea ecx, [ebp - 0x234]
call fcn.100e1450
lea ecx, [ebp - 0x234]
call fcn.100040f0
push 0x101c58fc
lea ecx, [ebp - 0x238]
call fcn.1000ba00
mov byte [ebp - 4], 6
mov ecx, 0x10224a04
call fcn.10007fa0
push eax
lea ecx, [ebp - 0x238]
call fcn.100240f0
push 0
push 0
push 0x2001f
push 0
push 0
lea ecx, [ebp - 0x238]
call fcn.10007f90
push eax
push SysReAllocStringLen
lea ecx, [ebp - 0x234]
call fcn.10004140
push 0
lea ecx, [ebp - 0x20]
call fcn.10007f90
push eax
push str.ProgID
lea ecx, [ebp - 0x234]
call fcn.100e1450
push 0
lea ecx, [ebp - 0x1c]
call fcn.10007f90
push eax
push str.VersionIndependentProgID
lea ecx, [ebp - 0x234]
call fcn.100e1450
push 0
push str.EC4085F2_8DB3_45a6_AD0B_CA289F3C5D7E
push 0x101c59a0
lea ecx, [ebp - 0x234]
call fcn.100e1450
push 0x104
lea eax, [ebp - 0x22c]
push eax
mov ecx, 0x10224a9c
call fcn.10094f60
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x22c]
push ecx
lea ecx, [ebp - 0x23c]
call fcn.1000ba00
mov byte [ebp - 4], 7
push 0
lea ecx, [ebp - 0x23c]
call fcn.10007fa0
push eax
push 0x101c59b0
lea ecx, [ebp - 0x234]
call fcn.100e1450
push str.ThreadingModel
push str.Apartment
push str.InprocServer32
lea ecx, [ebp - 0x234]
call fcn.100e1450
lea ecx, [ebp - 0x234]
call fcn.100040f0
push 0
push 0
push 0x2001f
push 0
push 0
push str.SYSTEMCurrentControlSetControlSession_Manager_
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x234]
call fcn.10004140
push str.PendingFileRenameOperations
lea ecx, [ebp - 0x234]
call fcn.100040c0
lea ecx, [ebp - 0x234]
call fcn.100040f0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x23c]
call fcn.1000ba80
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x238]
call fcn.1000ba80
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x234]
call fcn.10003fa0
jmp 0x100df62d
lea ecx, [ebp - 0x244]
call fcn.10003f70
mov byte [ebp - 4], 8
push 0
push 0
push 0x2001f
push 0
push 0
push 0x101c5ac4
push SysReAllocStringLen
lea ecx, [ebp - 0x244]
call fcn.10004140
mov ecx, 0x10224a04
call fcn.10007fa0
push eax
lea ecx, [ebp - 0x244]
call fcn.10004230
mov ecx, 0x10224a04
call fcn.10007fa0
push eax
lea ecx, [ebp - 0x244]
call fcn.10004030
lea ecx, [ebp - 0x244]
call fcn.100040f0
push 0x2001f
push 0
push SysReAllocStringLen
lea ecx, [ebp - 0x244]
call fcn.100041c0
lea ecx, [ebp - 0x20]
call fcn.10007f90
push eax
lea ecx, [ebp - 0x244]
call fcn.10004230
lea ecx, [ebp - 0x20]
call fcn.10007f90
push eax
lea ecx, [ebp - 0x244]
call fcn.10004030
lea ecx, [ebp - 0x244]
call fcn.100040f0
push 0x2001f
push 0
push SysReAllocStringLen
lea ecx, [ebp - 0x244]
call fcn.100041c0
lea ecx, [ebp - 0x1c]
call fcn.10007f90
push eax
lea ecx, [ebp - 0x244]
call fcn.10004230
lea ecx, [ebp - 0x1c]
call fcn.10007f90
push eax
lea ecx, [ebp - 0x244]
call fcn.10004030
lea ecx, [ebp - 0x244]
call fcn.100040f0
push 0x2001f
push 0x101c5ad8
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x244]
call fcn.100041c0
push 0x101c5b84
lea ecx, [ebp - 0x244]
call fcn.100040c0
lea ecx, [ebp - 0x244]
call fcn.100040f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x244]
call fcn.10003fa0
mov dword [ebp - 0x18], 0
push 0
lea edx, [ebp - 0x18]
push edx
push 0
push 0x20006
push 0
push 0
push 0
push 0x101c5b88
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
movzx eax, byte [ebp + 8]
test eax, eax
je 0x100df68a
mov byte [ebp - 0x245], 0
push 1
lea ecx, [ebp - 0x245]
push ecx
push 3
push 0
mov ecx, 0x10224a04
call fcn.10007fa0
push eax
mov edx, dword [ebp - 0x18]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x100df69f
mov ecx, 0x10224a04
call fcn.10007fa0
push eax
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov ecx, dword [ebp - 0x18]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
movzx edx, byte [ebp + 8]
test edx, edx
jne 0x100dfb70
lea ecx, [ebp - 0x254]
call fcn.10003f70
mov byte [ebp - 4], 9
push 0x2001f
push str.SoftwareMicrosoftInternet_ExplorerSearch
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x254]
call fcn.100041c0
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jne 0x100df7b1
push ecx
mov ecx, esp
mov dword [ebp - 0x268], esp
push 0x101c5c40
call fcn.1000ba00
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x2e8], eax
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x26c], esp
push 0x101c5c44
call fcn.1000ba00
mov dword [ebp - 0x2ec], eax
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp - 0x2f0], ecx
mov byte [ebp - 4], 0xb
push ecx
mov ecx, esp
mov dword [ebp - 0x270], esp
push str.OldAssitant1
call fcn.1000ba00
mov dword [ebp - 0x2f4], eax
lea edx, [ebp - 0x258]
push edx
mov byte [ebp - 4], 9
call fcn.100dd430
add esp, 0x10
mov dword [ebp - 0x2f8], eax
mov byte [ebp - 4], 0xc
push 1
lea ecx, [ebp - 0x258]
call fcn.10007fa0
push eax
push 0x101c5c64
lea ecx, [ebp - 0x254]
call fcn.100048c0
lea ecx, [ebp - 0x254]
call fcn.100040f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x258]
call fcn.1000ba80
push 0x2001f
push str.SoftwareMicrosoftInternet_ExplorerMain
push SysReAllocStringLen
lea ecx, [ebp - 0x254]
call fcn.100041c0
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jne 0x100dfb17
push ecx
mov ecx, esp
mov dword [ebp - 0x274], esp
push 0x101c5c84
call fcn.1000ba00
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x300], eax
mov byte [ebp - 4], 0xd
push ecx
mov ecx, esp
mov dword [ebp - 0x278], esp
push 0x101c5cdc
call fcn.1000ba00
mov dword [ebp - 0x304], eax
mov ecx, dword [ebp - 0x304]
mov dword [ebp - 0x308], ecx
mov byte [ebp - 4], 0xe
push ecx
mov ecx, esp
mov dword [ebp - 0x27c], esp
push str.OldAssitant5
call fcn.1000ba00
mov dword [ebp - 0x30c], eax
lea edx, [ebp - 0x25c]
push edx
mov byte [ebp - 4], 9
call fcn.100dd430
add esp, 0x10
mov dword [ebp - 0x310], eax
mov byte [ebp - 4], 0xf
push 1
lea ecx, [ebp - 0x25c]
call fcn.10007fa0
push eax
push str.Use_Search_Asst
lea ecx, [ebp - 0x254]
call fcn.100048c0
push ecx
mov ecx, esp
mov dword [ebp - 0x280], esp
push 0x101c5d1c
call fcn.1000ba00
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x318], eax
mov byte [ebp - 4], 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x284], esp
push 0x101c5d20
call fcn.1000ba00
mov dword [ebp - 0x31c], eax
mov ecx, dword [ebp - 0x31c]
mov dword [ebp - 0x320], ecx
mov byte [ebp - 4], 0x11
push ecx
mov ecx, esp
mov dword [ebp - 0x288], esp
push str.OldAssitant2
call fcn.1000ba00
mov dword [ebp - 0x324], eax
lea edx, [ebp - 0x28c]
push edx
mov byte [ebp - 4], 0xf
call fcn.100dd430
add esp, 0x10
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x32c], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x32c]
push ecx
lea ecx, [ebp - 0x25c]
call fcn.10007b80
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x28c]
call fcn.1000ba80
push 1
lea ecx, [ebp - 0x25c]
call fcn.10007fa0
push eax
push str.Search_Page
lea ecx, [ebp - 0x254]
call fcn.100048c0
push ecx
mov ecx, esp
mov dword [ebp - 0x290], esp
push 0x101c5d58
call fcn.1000ba00
mov dword [ebp - 0x330], eax
mov edx, dword [ebp - 0x330]
mov dword [ebp - 0x334], edx
mov byte [ebp - 4], 0x13
push ecx
mov ecx, esp
mov dword [ebp - 0x294], esp
push 0x101c5d5c
call fcn.1000ba00
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x33c], eax
mov byte [ebp - 4], 0x14
push ecx
mov ecx, esp
mov dword [ebp - 0x298], esp
push str.OldAssitant3
call fcn.1000ba00
mov dword [ebp - 0x340], eax
lea ecx, [ebp - 0x29c]
push ecx
mov byte [ebp - 4], 0xf
call fcn.100dd430
add esp, 0x10
mov dword [ebp - 0x344], eax
mov edx, dword [ebp - 0x344]
mov dword [ebp - 0x348], edx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x348]
push eax
lea ecx, [ebp - 0x25c]
call fcn.10007b80
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x29c]
call fcn.1000ba80
push 1
lea ecx, [ebp - 0x25c]
call fcn.10007fa0
push eax
push str.Search_Bar
lea ecx, [ebp - 0x254]
call fcn.100048c0
push ecx
mov ecx, esp
mov dword [ebp - 0x2a0], esp
push 0x101c5d94
call fcn.1000ba00
mov dword [ebp - 0x34c], eax
mov ecx, dword [ebp - 0x34c]
mov dword [ebp - 0x350], ecx
mov byte [ebp - 4], 0x16
push ecx
mov ecx, esp
mov dword [ebp - 0x2a4], esp
push 0x101c5d98
call fcn.1000ba00
mov dword [ebp - 0x354], eax
mov edx, dword [ebp - 0x354]
mov dword [ebp - 0x358], edx
mov byte [ebp - 4], 0x17
push ecx
mov ecx, esp
mov dword [ebp - 0x2a8], esp
push str.OldAssitant4
call fcn.1000ba00
mov dword [ebp - 0x35c], eax
lea eax, [ebp - 0x2ac]
push eax
mov byte [ebp - 4], 0xf
call fcn.100dd430
add esp, 0x10
mov dword [ebp - 0x360], eax
mov ecx, dword [ebp - 0x360]
mov dword [ebp - 0x364], ecx
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x364]
push edx
lea ecx, [ebp - 0x25c]
call fcn.10007b80
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2ac]
call fcn.1000ba80
push 1
lea ecx, [ebp - 0x25c]
call fcn.10007fa0
push eax
push str.SearchAssistant
lea ecx, [ebp - 0x254]
call fcn.100048c0
lea ecx, [ebp - 0x254]
call fcn.100040f0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x25c]
call fcn.1000ba80
push 0x2001f
push str.SoftwareMicrosoftInternet_ExplorerToolbarWebBrowser_
push SysReAllocStringLen
lea ecx, [ebp - 0x254]
call fcn.100041c0
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jne 0x100dfb61
mov ecx, 0x10224a04
call fcn.10007fa0
push eax
lea ecx, [ebp - 0x254]
call fcn.100040c0
lea ecx, [ebp - 0x254]
call fcn.100040f0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x254]
call fcn.10003fa0
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x100dfbf1
push ecx
mov ecx, esp
mov dword [ebp - 0x2b0], esp
lea edx, [ebp + 0x18]
push edx
call fcn.1000b9e0
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x36c], eax
mov byte [ebp - 4], 0x19
push ecx
mov ecx, esp
mov dword [ebp - 0x2b4], esp
lea edx, [ebp + 0x14]
push edx
call fcn.1000b9e0
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x374], eax
mov byte [ebp - 4], 0x1a
push ecx
mov ecx, esp
mov dword [ebp - 0x2b8], esp
lea edx, [ebp + 0xc]
push edx
call fcn.1000b9e0
mov dword [ebp - 0x378], eax
movzx eax, byte [ebp + 8]
push eax
mov byte [ebp - 4], 4
call fcn.100e0c60
add esp, 0x10
lea ecx, [ebp - 0x14]
call fcn.10003f70
mov byte [ebp - 4], 0x1b
movzx ecx, byte [ebp + 8]
test ecx, ecx
je 0x100dfe7b
push str.favicon.ico
lea ecx, [ebp - 0x2bc]
call fcn.100157f0
mov byte [ebp - 4], 0x1c
lea edx, [ebp - 0x2bc]
push edx
push 1
lea eax, [ebp - 0x2c0]
push eax
call fcn.100de0f0
add esp, 8
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0x37c]
mov dword [ebp - 0x380], ecx
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x380]
push edx
lea eax, [ebp - 0x2c4]
push eax
call fcn.10007ea0
add esp, 0xc
mov dword [ebp - 0x384], eax
mov ecx, dword [ebp - 0x384]
mov dword [ebp - 0x388], ecx
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x388]
call fcn.10007f90
push eax
lea ecx, [ebp - 0x260]
call fcn.10007b00
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x2c4]
call fcn.1000ba80
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x2c0]
call fcn.1000ba80
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x2bc]
call fcn.1000ba80
lea ecx, [ebp - 0x260]
call fcn.10009e70
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x100dfe2a
push 0
push 0
push 0x2001f
push 0
push 0
mov ecx, 0x10224a04
call fcn.10007fa0
push eax
push str.SOFTWAREMicrosoftInternet_ExplorerExtensions_
lea ecx, [ebp - 0x2c8]
call fcn.1000ba00
mov dword [ebp - 0x38c], eax
mov edx, dword [ebp - 0x38c]
mov dword [ebp - 0x390], edx
mov byte [ebp - 4], 0x23
mov eax, dword [ebp - 0x390]
push eax
lea ecx, [ebp - 0x2cc]
push ecx
call fcn.1008d070
add esp, 0xc
mov dword [ebp - 0x394], eax
mov ecx, dword [ebp - 0x394]
call fcn.10007f90
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x14]
call fcn.10004140
lea ecx, [ebp - 0x2cc]
call fcn.1000ba80
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x2c8]
call fcn.1000ba80
push 1
lea ecx, [ebp + 0xc]
call fcn.10007fa0
push eax
push str.ButtonText
lea ecx, [ebp - 0x14]
call fcn.100048c0
push 1
push str.1FBA04EE_3024_11d2_8F1F_0000F87ABD16
push 0x101c5f28
lea ecx, [ebp - 0x14]
call fcn.100048c0
push 1
push 0x101c5f34
push str.Default_Visible
lea ecx, [ebp - 0x14]
call fcn.100048c0
push 1
lea ecx, [ebp - 0x260]
call fcn.10009e70
push eax
push str.HotIcon
lea ecx, [ebp - 0x14]
call fcn.100048c0
push 1
lea ecx, [ebp - 0x260]
call fcn.10009e70
push eax
push str.Icon
lea ecx, [ebp - 0x14]
call fcn.100048c0
push 1
lea ecx, [ebp + 0xc]
call fcn.10007fa0
push eax
push str.MenuStatusBar
lea ecx, [ebp - 0x14]
call fcn.100048c0
push 1
lea ecx, [ebp + 0xc]
call fcn.10007fa0
push eax
push str.MenuText
lea ecx, [ebp - 0x14]
call fcn.100048c0
push 1
mov ecx, 0x10224a04
call fcn.10007fa0
push eax
push str.ClsidExtension
lea ecx, [ebp - 0x14]
call fcn.100048c0
lea ecx, [ebp - 0x14]
call fcn.100040f0
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x2d0], esp
push 0x10224a04
call fcn.1000b9e0
mov dword [ebp - 0x398], eax
mov edx, dword [ebp - 0x398]
mov dword [ebp - 0x39c], edx
mov byte [ebp - 4], 0x24
call fcn.100e08e0
push eax
mov byte [ebp - 4], 0x22
call fcn.100ae590
add esp, 0xc
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x260]
call fcn.10009fb0
jmp 0x100dffdc
push 0
push 0
push 0x2001f
push 0
push 0
push str.SOFTWAREMicrosoftInternet_ExplorerExtensions
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x14]
call fcn.10004140
mov ecx, 0x10224a04
call fcn.10007fa0
push eax
lea ecx, [ebp - 0x14]
call fcn.10004030
lea ecx, [ebp - 0x14]
call fcn.100040f0
push 0
push 0
push 0x2001f
push 0
push 0
push str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_SettingsUser_AgentPost_Platform
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x14]
call fcn.10004140
push 0x101c60d4
lea ecx, [ebp - 0x264]
call fcn.1000ba00
mov byte [ebp - 4], 0x25
push ecx
mov ecx, esp
mov dword [ebp - 0x2d4], esp
push 0x101c60d8
call fcn.1000ba00
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x3a4], eax
mov byte [ebp - 4], 0x26
push ecx
mov ecx, esp
mov dword [ebp - 0x2d8], esp
lea edx, [ebp - 0x264]
push edx
call fcn.1000b9e0
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x3ac], eax
mov byte [ebp - 4], 0x27
push ecx
mov ecx, esp
mov dword [ebp - 0x2dc], esp
push str.UserAgent
call fcn.1000ba00
mov dword [ebp - 0x3b0], eax
lea ecx, [ebp - 0x2e0]
push ecx
mov byte [ebp - 4], 0x25
call fcn.100dd430
add esp, 0x10
mov dword [ebp - 0x3b4], eax
mov edx, dword [ebp - 0x3b4]
mov dword [ebp - 0x3b8], edx
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x3b8]
push eax
lea ecx, [ebp - 0x264]
call fcn.10007b80
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x2e0]
call fcn.1000ba80
lea ecx, [ebp - 0x264]
call fcn.10008000
movzx ecx, al
test ecx, ecx
jne 0x100dffc5
lea ecx, [ebp - 0x264]
call fcn.10007fa0
push eax
lea ecx, [ebp - 0x14]
call fcn.100040c0
lea ecx, [ebp - 0x14]
call fcn.100040f0
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x264]
call fcn.1000ba80
movzx edx, byte [ebp + 8]
test edx, edx
jne 0x100dffe9
call fcn.100e0050
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x14]
call fcn.10003fa0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20]
call fcn.1000ba80
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c]
call fcn.1000ba80
mov byte [ebp - 4], 1
lea ecx, [ebp + 0xc]
call fcn.1000ba80
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x14]
call fcn.1000ba80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x18]
call fcn.1000ba80
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.10165d18
mov esp, ebp
pop ebp
ret