Function at 0x100070cf
Capabilities:
Create thread

Disassembly:
push 0xc8
mov eax, 0x10034366
call fcn.1001d3c1
xor ebx, ebx
push ebx
push ebx
lea eax, [ebp - 0x40]
call fcn.100126b0
push dword [ebp + 8]
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 2
call fcn.10001ec6
lea eax, [ebp - 0xd4]
push eax
mov byte [ebp - 4], 3
call fcn.1000e621
lea ecx, [ebp - 0x40]
push ecx
lea ecx, [ebp - 0x28]
push ecx
push eax
mov byte [ebp - 4], 4
call fcn.1000e685
lea eax, [ebp - 0xd4]
call fcn.10006e63
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10002257
push str.PrimaryInfoChangeNotify
lea ecx, [ebp - 0x28]
call fcn.10001ec6
push 0x100385f0
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 5
call fcn.10006de8
add esp, 0xc
push ebx
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10002257
push str.DriveSpaceNotify
lea ecx, [ebp - 0x28]
call fcn.10001ec6
push 0x10037fc8
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 6
call fcn.10006de8
add esp, 0xc
push ebx
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10002257
push str.BanRegistry
lea ecx, [ebp - 0x28]
call fcn.10001ec6
push 0x10037c38
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 7
call fcn.10006de8
add esp, 0xc
push ebx
mov byte [ebp - 4], 2
push esi
lea ecx, [ebp - 0x28]
call fcn.10002257
push str.BanControlPannel
lea ecx, [ebp - 0x28]
call fcn.10001ec6
push 0x10037ca4
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 8
call fcn.10006de8
add esp, 0xc
push ebx
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10002257
push str.BanTaskmgr
lea ecx, [ebp - 0x28]
call fcn.10001ec6
push 0x10037d14
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 9
call fcn.10006de8
add esp, 0xc
push ebx
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10002257
push str.BanModifyIp
lea ecx, [ebp - 0x28]
call fcn.10001ec6
push 0x10038678
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0xa
call fcn.10006de8
add esp, 0xc
push ebx
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10002257
push str.IpMacBinding
lea ecx, [ebp - 0x28]
call fcn.10001ec6
push 0x1003869c
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0xb
call fcn.10006de8
add esp, 0xc
push ebx
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10002257
push str.EnableFirewall
lea ecx, [ebp - 0x28]
call fcn.10001ec6
push 0x10038120
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0xc
call fcn.10006de8
add esp, 0xc
push ebx
push esi
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 2
call fcn.10002257
cmp dword [0x10044398], ebx
je 0x10007345
push str.BanGuest
lea ecx, [ebp - 0x28]
call fcn.10001ec6
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 0xd
call fcn.100012b0
mov byte [0x1004437f], al
movzx eax, al
push eax
push str.disable_guest:_d
call fcn.1001b29e
add esp, 0x10
cmp byte [0x1004437f], bl
je 0x1000733b
cmp dword [0x100443a8], ebx
jne 0x1000733b
push ebx
push ebx
push ebx
push 0x10009f09
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x100443a8], eax
push ebx
push esi
lea ecx, [ebp - 0x28]
call fcn.10002257
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x40]
call fcn.10011a13
call fcn.1001d499
ret