Function at 0x100097c0
Capabilities:
Create process on windows
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c3a58
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x1010b824]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp dword [ebp + 0x1c], 0
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0x14]
mov esi, dword [ebp + 0x18]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], 1
jne 0x10009d86
mov ebx, dword [ebp + 0xc]
cmp ebx, 0x110
jne 0x10009848
sub esp, 8
mov dword [edi + 0x398], 1
mov ecx, edi
call fcn.1000a4d0
mov dword [esi], eax
cmp dword [edi + 0x398], 0
je 0x10009d22
mov eax, 1
jmp 0x10009d88
cmp ebx, 0x10
je 0x10009da6
cmp ebx, 5
jne 0x100098d4
cmp dword [edi + 0x39c], 0
mov dword [edi + 0x398], 0
je 0x100098c9
push 0xffffffffffffffff
push str.btn_max
lea ecx, [edi + 4]
call fcn.10025bbc
push 0xffffffffffffffff
push str.btn_restore
lea ecx, [edi + 4]
mov dword [ebp - 0x2c], eax
call fcn.10025bbc
mov esi, dword [ebp - 0x2c]
test esi, esi
je 0x100098c6
test eax, eax
je 0x100098c6
mov ecx, dword [ebp - 0x28]
cmp ecx, 2
jne 0x100098ae
push 0
push 1
mov ecx, eax
call fcn.10028aaa
push 0
push 0
jmp 0x100098bf
test ecx, ecx
jne 0x100098c6
push ecx
push ecx
mov ecx, eax
call fcn.10028aaa
push 0
push 1
mov ecx, esi
call fcn.10028aaa
mov esi, dword [ebp - 0x24]
mov dword [esi], 0
jmp 0x10009831
cmp ebx, 0x113
jne 0x10009940
mov dword [edi + 0x398], 0
cmp ecx, 0x989681
jne 0x100098c9
mov eax, dword [edi + 0x760]
test eax, eax
je 0x100098c9
cmp dword [eax + 0x170], 3
jne 0x100098c9
push 0xffffffffffffffff
push str.tab_installing
lea ecx, [edi + 4]
call fcn.1000fdc0
test eax, eax
je 0x100098c9
mov ecx, dword [eax + 0x1cc]
mov esi, dword [eax + 0x170]
dec ecx
cmp esi, ecx
sbb ecx, ecx
lea edx, [esi + 1]
and ecx, edx
push ecx
mov ecx, eax
call fcn.10039943
mov esi, dword [ebp - 0x24]
mov dword [esi], 0
jmp 0x10009831
cmp ebx, 0x84d
jne 0x100099d2
sub eax, 0x201
je 0x100099a1
sub eax, 3
jne 0x100099c3
push str.smenu
push str.menu_tray
lea ecx, [edi + 0x7a0]
call fcn.1003fcfc
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push 0
push dword [edi + 0x244]
lea ecx, [edi + 0x7a0]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0
call fcn.100404b7
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009838
push dword [edi + 0x244]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x100099b5
push 1
jmp 0x100099b7
push 6
push dword [edi + 0x244]
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009838
cmp ebx, 0x111
jne 0x10009a00
mov eax, ecx
mov dword [edi + 0x398], 1
shr eax, 0x10
test eax, eax
jne 0x100098c9
cmp cx, 6
je 0x10009db4
jmp 0x100098c9
cmp ebx, 0x590
jne 0x10009a1f
sub esp, 8
push ecx
push ecx
mov ecx, edi
call fcn.1000b5f0
cmp dword [ebp - 0x20], 0
mov dword [esi], eax
jmp 0x10009838
cmp ebx, 0x52c
jne 0x10009a78
mov ecx, dword [edi + 0x770]
test ecx, ecx
je 0x10009a40
call fcn.10026c85
test eax, eax
je 0x10009a40
push 1
push 1
jmp 0x10009a5e
mov ecx, dword [edi + 0x770]
test ecx, ecx
je 0x100099c3
call fcn.10026c85
test eax, eax
jne 0x100099c3
push 1
push eax
mov ecx, dword [edi + 0x764]
call fcn.10025b16
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009838
cmp ebx, 0x52e
jne 0x10009a90
mov dword [esi], 0
mov eax, 1
jmp 0x10009d88
cmp ebx, 0x52f
jne 0x10009aad
sub esp, 0x10
mov ecx, edi
call fcn.1000b910
cmp dword [ebp - 0x20], 0
mov dword [esi], eax
jmp 0x10009838
cmp ebx, 0x530
jne 0x10009b58
cmp dword [edi + 0x760], 0
je 0x100099c3
push 0x100f03f8
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov ecx, dword [edi + 0x774]
lea edx, [ebp - 0x2c]
push 0
push edx
mov eax, dword [ecx]
call dword [eax + 0x38]
lea ecx, [edi + 0x7c4]
mov dword [ebp - 4], 0
push eax
call fcn.10001540
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff4
cmp ecx, dword [section..data]
je 0x10009b1f
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x10009b1f
push ecx
call fcn.100209bc
add esp, 4
push ecx
lea eax, [edi + 0x7c4]
mov dword [ebp - 4], 0xffffffff
mov ecx, esp
push eax
call fcn.100017c0
mov ecx, edi
call fcn.1000be40
mov ecx, dword [edi + 0x760]
push 3
call fcn.10039943
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009838
cmp ebx, 0x536
jne 0x10009b84
mov ecx, dword [edi + 0x760]
test ecx, ecx
je 0x100099c3
push 0
call fcn.10039943
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009838
cmp ebx, 0x540
je 0x10009b60
cmp ebx, 0x541
je 0x10009a80
cmp ebx, 0x542
je 0x10009a80
cmp ebx, 0x543
jne 0x10009bc1
sub esp, 0x10
mov ecx, edi
call fcn.1000c770
cmp dword [ebp - 0x20], 0
mov dword [esi], eax
jmp 0x10009838
cmp ebx, 0x562
jne 0x10009bde
sub esp, 0x10
mov ecx, edi
call fcn.1000c450
cmp dword [ebp - 0x20], 0
mov dword [esi], eax
jmp 0x10009838
cmp ebx, 0x561
jne 0x10009c0a
mov ecx, dword [edi + 0x760]
test ecx, ecx
je 0x100099c3
push 6
call fcn.10039943
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009838
cmp ebx, 0x563
jne 0x10009d22
mov esi, dword [0x1010b004]
push 0x66
call fcn.100209c1
add esp, 4
test eax, eax
je 0x10009c57
push 0x58
lea esi, [eax + 0xc]
mov dword [eax], 1
xor ecx, ecx
mov dword [eax + 4], 0x2c
push str.http:__q.url.cn_cdtfvl__typewpaqidiantrue
mov dword [eax + 8], 0x2c
push esi
mov word [eax + 0x64], cx
call fcn.10085a20
add esp, 0xc
cmp dword [esi - 8], 0
jle 0x10009ce2
xorps xmm0, xmm0
mov dword [ebp - 0x6c], 0
lea eax, [ebp - 0x74]
movlpd qword [ebp - 0x60], xmm0
push eax
movlpd qword [ebp - 0x54], xmm0
movlpd qword [ebp - 0x4c], xmm0
movlpd qword [ebp - 0x44], xmm0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x74], 0x3c
mov dword [ebp - 0x70], 0x400
mov dword [ebp - 0x68], str.open
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x58], 3
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x10009ce2
cmp dword [esi - 8], eax
jle 0x10009ce2
mov ax, word [0x100f0bcc]
movq xmm0, qword [str.open]
push 1
push 0
push 0
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x1c]
push esi
push eax
push 0
movq qword [ebp - 0x1c], xmm0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
add esi, 0xfffffff4
mov dword [ebp - 4], 2
cmp esi, dword [section..data]
je 0x10009d09
or eax, 0xffffffff
lock xadd dword [esi], eax
dec eax
test eax, eax
jg 0x10009d09
push esi
call fcn.100209bc
add esp, 4
mov esi, dword [ebp - 0x24]
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009838
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x30]
lea ecx, [edi + 0x238]
push dword [ebp - 0x28]
push ebx
call fcn.1003a9fc
mov dword [esi], eax
test eax, eax
jne 0x10009d52
lea eax, [ebx - 0x132]
cmp eax, 6
ja 0x10009d52
mov dword [ebp - 0x20], 0
jmp 0x10009d5c
cmp dword [ebp - 0x20], 0
jne 0x1000983e
mov esi, dword [edi + 0x394]
mov ecx, edi
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x30]
push dword [ebp - 0x28]
push ebx
push dword [ebp + 8]
call fcn.10017f90
mov dword [edi + 0x394], esi
test eax, eax
jne 0x1000983e
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1008370a
mov esp, ebp
pop ebp
ret 0x18
push 1
mov ecx, edi
call fcn.10009770
call fcn.1000b280
mov ecx, edi
call fcn.1000b280
int3