Function at 0x100f0410
Capabilities:
Create process on windows
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x90c
mov eax, dword [0x1022c684]
xor eax, ebp
mov dword [ebp - 0x58], eax
push esi
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x78c], esp
push 1
push eax
call fcn.100e14d0
add esp, 8
call fcn.10108730
add esp, 8
mov ecx, 0x1022edbc
call fcn.100043a0
push eax
push 0x101d45f8
push 0x64
lea ecx, [ebp - 0x258]
push ecx
call fcn.1017057f
add esp, 0x10
lea edx, [ebp - 0x258]
push edx
push str.CLSID_s
push 0x96
lea eax, [ebp - 0x188]
push eax
call fcn.1017057f
add esp, 0x10
mov dword [ebp - 0x54], 0
push 0
lea ecx, [ebp - 0x54]
push ecx
push 0
push 0x20006
push 0
push 0
push 0
push 0x101d4618
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push 0
push 0
push 3
push 0
lea edx, [ebp - 0x258]
push edx
mov eax, dword [ebp - 0x54]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ecx, dword [ebp - 0x54]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
push 1
mov ecx, 0x1022ee50
call fcn.100f2ae0
mov dword [ebp - 0x754], eax
push 0
lea edx, [ebp - 0x54]
push edx
push 0
push 0x20006
push 0
push 0
push 0
lea eax, [ebp - 0x188]
push eax
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea ecx, [ebp - 0x750]
push ecx
call fcn.100aa3f0
add esp, 4
push 0x178
call fcn.1017072e
add esp, 4
mov dword [ebp - 0x794], eax
cmp dword [ebp - 0x794], 0
je 0x100f0549
push 0
mov ecx, dword [ebp - 0x794]
call fcn.100b3210
mov dword [ebp - 0x8d8], eax
jmp 0x100f0553
mov dword [ebp - 0x8d8], 0
mov edx, dword [ebp - 0x8d8]
mov dword [ebp - 0x790], edx
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0x74c], eax
push 0
push 0
push 0
push 0
push 0x101d4674
mov ecx, dword [ebp - 0x74c]
push ecx
lea ecx, [ebp - 0x50]
call fcn.10151310
push 0
lea ecx, [ebp - 0x750]
call fcn.10004390
push eax
lea ecx, [ebp - 0x50]
call fcn.10151430
lea ecx, [ebp - 0x50]
call fcn.100aa630
cmp eax, 0xffffff92
je 0x100f0639
lea ecx, [ebp - 0x50]
call fcn.100aa630
test eax, eax
je 0x100f0639
lea ecx, [ebp - 0x50]
call fcn.100aa630
cmp eax, 0xffffff96
je 0x100f0639
mov edx, dword [ebp - 0x74c]
mov dword [ebp - 0x79c], edx
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x798], 0
je 0x100f0605
push 1
mov ecx, dword [ebp - 0x798]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x798]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x8dc], eax
jmp 0x100f060f
mov dword [ebp - 0x8dc], 0
mov ecx, dword [ebp - 0x754]
mov dword [ebp - 0x7a0], ecx
lea ecx, [ebp - 0x50]
call fcn.101513f0
lea ecx, [ebp - 0x750]
call fcn.10005e00
mov eax, dword [ebp - 0x7a0]
jmp 0x100f1718
mov ecx, dword [ebp - 0x74c]
add ecx, 0x10
call fcn.10005e60
shl eax, 1
push eax
mov ecx, dword [ebp - 0x74c]
add ecx, 0x10
call fcn.100043a0
push eax
push 1
push 0
push 0
mov edx, dword [ebp - 0x54]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 0x54]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
mov ecx, esp
mov dword [ebp - 0x7a4], esp
push 0x101d4684
call fcn.10005d80
mov ecx, dword [ebp - 0x74c]
add ecx, 0x10
push ecx
mov edx, esp
mov dword [ebp - 0x7a8], esp
push ecx
mov ecx, edx
call fcn.10005d60
push ecx
mov ecx, esp
mov dword [ebp - 0x7ac], esp
push 0x101d4688
call fcn.10005d80
call fcn.100e0b60
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x7b0], esp
push 0x101d46a4
call fcn.10005d80
mov eax, dword [ebp - 0x74c]
mov ecx, dword [eax + 0x38]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x7b4], esp
push 0x101d46a8
call fcn.10005d80
call fcn.100e0ee0
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x7b8], esp
push 0x101d46b8
call fcn.10005d80
mov edx, dword [ebp - 0x74c]
mov eax, dword [edx + 0x50]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x7bc], esp
push 0x101d46bc
call fcn.10005d80
call fcn.100e0ee0
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x7c0], esp
push 0x101d46c4
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x7c4], esp
push 0x101d46c8
call fcn.10005d80
push 0
call fcn.101767be
add esp, 4
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x7c8], esp
push 0x101d46cc
call fcn.10005d80
call fcn.100e0cf0
add esp, 0xc
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x7cc], esp
push str.rtime
call fcn.10005d80
call fcn.100e0ee0
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x7d0], esp
push 0x101d46e4
call fcn.10005d80
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x7d4], esp
push 0x101d46e8
call fcn.10005d80
call fcn.100e0ee0
add esp, 0xc
push 1
call fcn.10107180
add esp, 4
push 0
push 0
push str._regserver
push str.IE8GuardWorkaround.exe
push 1
lea ecx, [ebp - 0x7d8]
push ecx
call fcn.100e14d0
add esp, 8
push eax
lea edx, [ebp - 0x7dc]
push edx
call fcn.10090bb0
add esp, 0xc
mov ecx, eax
call fcn.10004390
push eax
push 0x101d4748
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x7dc]
call fcn.10005e00
lea ecx, [ebp - 0x7d8]
call fcn.10005e00
mov ecx, dword [ebp - 0x74c]
add ecx, 0x2c
call fcn.10004400
movzx eax, al
test eax, eax
jne 0x100f0886
push ecx
mov ecx, esp
mov dword [ebp - 0x7e0], esp
push 0x101d4754
call fcn.10005d80
mov ecx, dword [ebp - 0x74c]
add ecx, 0x30
push ecx
mov edx, esp
mov dword [ebp - 0x7e4], esp
push ecx
mov ecx, edx
call fcn.10005d60
push ecx
mov ecx, esp
mov dword [ebp - 0x7e8], esp
push 0x101d4758
call fcn.10005d80
push 0
call fcn.100e49c0
add esp, 0x10
mov eax, dword [ebp - 0x74c]
add eax, 0x14
push ecx
mov ecx, esp
mov dword [ebp - 0x7ec], esp
push eax
call fcn.10005d60
mov ecx, dword [ebp - 0x74c]
add ecx, 0x30
push ecx
mov edx, esp
mov dword [ebp - 0x7f0], esp
push ecx
mov ecx, edx
call fcn.10005d60
mov eax, dword [ebp - 0x74c]
cmp dword [eax + 0x48], 1
sete cl
movzx edx, cl
push edx
mov eax, dword [ebp - 0x74c]
add eax, 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x7f4], esp
push eax
call fcn.10005d60
push 1
call fcn.100e2e80
add esp, 0x14
lea ecx, [ebp - 0x18c]
push ecx
call fcn.10107470
add esp, 4
push ecx
mov ecx, esp
mov dword [ebp - 0x7f8], esp
push 0x101d475c
call fcn.10005d80
push ecx
mov esi, esp
mov dword [ebp - 0x7fc], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x800], esp
push 0x101d4760
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x804], esp
lea edx, [ebp - 0x18c]
push edx
call fcn.10005d60
push ecx
mov ecx, esp
mov dword [ebp - 0x808], esp
push 0x101d4764
call fcn.10005d80
push esi
call fcn.100e0810
add esp, 0xc
mov ecx, esp
mov dword [ebp - 0x80c], esp
push 0x101d477c
call fcn.10005d80
call fcn.100e0b60
add esp, 0xc
lea eax, [ebp - 0x810]
push eax
call fcn.10108b20
add esp, 4
push eax
lea ecx, [ebp - 0x18c]
call fcn.10003ea0
lea ecx, [ebp - 0x810]
call fcn.10005e00
push ecx
mov ecx, esp
mov dword [ebp - 0x814], esp
push 0x101d4794
call fcn.10005d80
push ecx
mov esi, esp
mov dword [ebp - 0x818], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x81c], esp
push 0x101d4798
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x820], esp
lea edx, [ebp - 0x18c]
push edx
call fcn.10005d60
push ecx
mov ecx, esp
mov dword [ebp - 0x824], esp
push 0x101d479c
call fcn.10005d80
push esi
call fcn.100e0810
add esp, 0xc
mov ecx, esp
mov dword [ebp - 0x828], esp
push 0x101d47ac
call fcn.10005d80
call fcn.100e0b60
add esp, 0xc
cmp dword [ebp - 0x74c], 0
je 0x100f0ae2
mov ecx, dword [ebp - 0x74c]
add ecx, 0x1c
call fcn.10004400
movzx eax, al
test eax, eax
jne 0x100f0ae2
mov dword [ebp - 0x54], 0
push str.Software_
lea ecx, [ebp - 0x75c]
call fcn.10005d80
mov ecx, dword [ebp - 0x74c]
add ecx, 0x1c
push ecx
lea ecx, [ebp - 0x75c]
call fcn.100257b0
push 0
lea edx, [ebp - 0x54]
push edx
push 0
push 0x20006
push 0
push 0
push 0
lea ecx, [ebp - 0x75c]
call fcn.10004390
push eax
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push 0x101d47d0
lea ecx, [ebp - 0x75c]
call fcn.10005e20
lea ecx, [ebp - 0x75c]
call fcn.10005e60
shl eax, 1
push eax
lea ecx, [ebp - 0x75c]
call fcn.100043a0
push eax
push 1
push 0
push 0x101d47d4
mov eax, dword [ebp - 0x54]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ecx, dword [ebp - 0x54]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x75c]
call fcn.10005e00
lea ecx, [ebp - 0x748]
call fcn.10111080
mov edx, dword [ebp - 0x74c]
mov dword [ebp - 0x4b0], edx
mov eax, dword [ebp - 0x74c]
cmp dword [eax + 0x130], 0
je 0x100f0c9e
mov dword [ebp - 0x760], 0
jmp 0x100f0b27
mov ecx, dword [ebp - 0x760]
add ecx, 1
mov dword [ebp - 0x760], ecx
mov edx, dword [ebp - 0x74c]
mov ecx, dword [edx + 0x130]
add ecx, 0x10
call fcn.10004b60
cmp dword [ebp - 0x760], eax
jae 0x100f0c9e
lea eax, [ebp - 0x748]
test eax, eax
je 0x100f0b65
lea ecx, [ebp - 0x748]
add ecx, 0xc4
mov dword [ebp - 0x8e0], ecx
jmp 0x100f0b6f
mov dword [ebp - 0x8e0], 0
mov edx, dword [ebp - 0x760]
push edx
mov eax, dword [ebp - 0x74c]
mov ecx, dword [eax + 0x130]
add ecx, 0x10
call fcn.100045f0
mov ecx, dword [eax]
mov dword [ebp - 0x8e4], ecx
mov edx, dword [ebp - 0x8e0]
push edx
push 0x101d47e8
mov eax, dword [ebp - 0x8e4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8e4]
mov eax, dword [edx + 0x30]
call eax
mov ecx, dword [ebp - 0x760]
push ecx
mov edx, dword [ebp - 0x74c]
mov ecx, dword [edx + 0x130]
add ecx, 0x10
call fcn.100045f0
mov eax, dword [eax]
mov dword [ebp - 0x8e8], eax
push 0x101d4800
push 0x101d4804
mov ecx, dword [ebp - 0x8e8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x8e8]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x764], eax
push str.ManualUpdate
mov ecx, dword [ebp - 0x764]
push ecx
call fcn.1016f1ec
add esp, 8
test eax, eax
jne 0x100f0c87
lea edx, [ebp - 0x748]
test edx, edx
je 0x100f0c2c
lea eax, [ebp - 0x748]
add eax, 0xc4
mov dword [ebp - 0x8ec], eax
jmp 0x100f0c36
mov dword [ebp - 0x8ec], 0
mov ecx, dword [ebp - 0x760]
push ecx
mov edx, dword [ebp - 0x74c]
mov ecx, dword [edx + 0x130]
add ecx, 0x10
call fcn.100045f0
mov eax, dword [eax]
mov dword [ebp - 0x8f0], eax
mov ecx, dword [ebp - 0x8ec]
push ecx
mov edx, dword [ebp - 0x8f0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8f0]
mov edx, dword [eax + 0x2c]
call edx
mov eax, dword [ebp - 0x764]
push eax
lea ecx, [ebp - 0x684]
call fcn.1011c420
jmp 0x100f0c9e
mov ecx, dword [ebp - 0x764]
push ecx
lea ecx, [ebp - 0x684]
call fcn.1011c420
jmp 0x100f0b18
call fcn.100a8340
push ecx
mov ecx, esp
mov dword [ebp - 0x82c], esp
push 0x101d482c
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x830], esp
push 0x101d4830
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x834], esp
push 0x101d4834
call fcn.10005d80
lea edx, [ebp - 0x758]
push edx
call fcn.100e0810
add esp, 0x10
push 0x101d4848
lea eax, [ebp - 0x758]
push eax
call fcn.10004370
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x100f0d47
push ecx
mov ecx, esp
mov dword [ebp - 0x838], esp
push 0x101d484c
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x83c], esp
push 0x101d4850
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x840], esp
push 0x101d4854
call fcn.10005d80
call fcn.100e0b60
add esp, 0xc
call fcn.100a8720
push ecx
mov ecx, esp
mov dword [ebp - 0x844], esp
push 0x101d4868
call fcn.10005d80
mov ecx, dword [ebp - 0x74c]
add ecx, 0x20
call fcn.100043a0
push ecx
mov ecx, esp
mov dword [ebp - 0x848], esp
push eax
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x84c], esp
push 0x101d486c
call fcn.10005d80
call fcn.100e0b60
add esp, 0xc
cmp dword [ebp - 0x74c], 0
je 0x100f0ddc
mov edx, dword [ebp - 0x74c]
cmp dword [edx + 0x12c], 0
je 0x100f0ddc
mov eax, dword [ebp - 0x74c]
mov ecx, dword [eax + 0x12c]
cmp dword [ecx + 0x44], 0
je 0x100f0ddc
mov edx, dword [ebp - 0x74c]
mov eax, dword [edx + 0x12c]
mov ecx, dword [eax + 0x44]
add ecx, 0x10
push ecx
call fcn.1010b380
add esp, 4
cmp dword [ebp - 0x74c], 0
je 0x100f1676
mov edx, dword [ebp - 0x74c]
cmp dword [edx + 0x12c], 0
je 0x100f1676
mov dword [ebp - 0x76c], 0
jmp 0x100f0e17
mov eax, dword [ebp - 0x76c]
add eax, 1
mov dword [ebp - 0x76c], eax
mov ecx, dword [ebp - 0x74c]
mov ecx, dword [ecx + 0x12c]
add ecx, 0x7c
call fcn.1003d030
cmp dword [ebp - 0x76c], eax
jae 0x100f0e9c
lea edx, [ebp - 0x748]
test edx, edx
je 0x100f0e50
lea eax, [ebp - 0x748]
add eax, 0xc4
mov dword [ebp - 0x8f4], eax
jmp 0x100f0e5a
mov dword [ebp - 0x8f4], 0
mov ecx, dword [ebp - 0x76c]
push ecx
mov edx, dword [ebp - 0x74c]
mov ecx, dword [edx + 0x12c]
add ecx, 0x7c
call fcn.1003d050
mov eax, dword [eax]
mov dword [ebp - 0x8f8], eax
mov ecx, dword [ebp - 0x8f4]
push ecx
mov edx, dword [ebp - 0x8f8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8f8]
mov edx, dword [eax + 0x24]
call edx
jmp 0x100f0e08
mov dword [ebp - 0x76c], 0
jmp 0x100f0eb7
mov eax, dword [ebp - 0x76c]
add eax, 1
mov dword [ebp - 0x76c], eax
mov ecx, dword [ebp - 0x74c]
mov ecx, dword [ecx + 0x12c]
add ecx, 0x64
call fcn.1003cf10
cmp dword [ebp - 0x76c], eax
jae 0x100f0f3c
lea edx, [ebp - 0x748]
test edx, edx
je 0x100f0ef0
lea eax, [ebp - 0x748]
add eax, 0xc4
mov dword [ebp - 0x8fc], eax
jmp 0x100f0efa
mov dword [ebp - 0x8fc], 0
mov ecx, dword [ebp - 0x76c]
push ecx
mov edx, dword [ebp - 0x74c]
mov ecx, dword [edx + 0x12c]
add ecx, 0x64
call fcn.1003cf30
mov eax, dword [eax]
mov dword [ebp - 0x900], eax
mov ecx, dword [ebp - 0x8fc]
push ecx
mov edx, dword [ebp - 0x900]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x900]
mov edx, dword [eax + 0x24]
call edx
jmp 0x100f0ea8
lea eax, [ebp - 0x748]
test eax, eax
je 0x100f0f5a
lea ecx, [ebp - 0x748]
add ecx, 0xc4
mov dword [ebp - 0x904], ecx
jmp 0x100f0f64
mov dword [ebp - 0x904], 0
mov edx, dword [ebp - 0x904]
push edx
call fcn.100f1f60
add esp, 4
call fcn.100f21f0
lea ecx, [ebp - 0x778]
call fcn.10005d40
mov byte [ebp - 0x76d], 0
push 0x101d487c
lea eax, [ebp - 0x758]
push eax
call fcn.10004370
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x100f1038
push ecx
mov ecx, esp
mov dword [ebp - 0x850], esp
push 0x101d4880
call fcn.10005d80
lea edx, [ebp - 0x854]
push edx
mov ecx, dword [ebp - 0x74c]
call fcn.100b3770
push eax
lea ecx, [ebp - 0x778]
call fcn.10003ea0
lea ecx, [ebp - 0x854]
call fcn.10005e00
lea ecx, [ebp - 0x778]
call fcn.10004400
movzx eax, al
test eax, eax
je 0x100f1033
push ecx
mov ecx, esp
mov dword [ebp - 0x858], esp
push str.firstUrl
call fcn.10005d80
lea ecx, [ebp - 0x85c]
push ecx
mov ecx, dword [ebp - 0x74c]
call fcn.100b3770
push eax
lea ecx, [ebp - 0x778]
call fcn.10003ea0
lea ecx, [ebp - 0x85c]
call fcn.10005e00
jmp 0x100f10bc
push ecx
mov ecx, esp
mov dword [ebp - 0x860], esp
push 0x101d48a8
call fcn.10005d80
lea edx, [ebp - 0x864]
push edx
mov ecx, dword [ebp - 0x74c]
call fcn.100b3770
push eax
lea ecx, [ebp - 0x778]
call fcn.10003ea0
lea ecx, [ebp - 0x864]
call fcn.10005e00
push ecx
mov ecx, esp
mov dword [ebp - 0x868], esp
push 0x101d48c8
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x86c], esp
push 0x101d48cc
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x870], esp
push 0x101d48d0
call fcn.10005d80
call fcn.100e0b60
add esp, 0xc
mov byte [ebp - 0x76d], 1
lea ecx, [ebp - 0x778]
call fcn.10004400
movzx eax, al
test eax, eax
je 0x100f10de
push 0x101d48e4
lea ecx, [ebp - 0x778]
call fcn.10005e20
push ecx
mov ecx, esp
mov dword [ebp - 0x874], esp
push 0x101d48fc
call fcn.10005d80
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x878], esp
push str.needSetHomepage
call fcn.10005d80
call fcn.100e0ee0
add esp, 0xc
lea ecx, [ebp - 0x778]
call fcn.10005e60
lea ecx, [eax + eax + 2]
push ecx
call fcn.1017085c
add esp, 4
mov dword [ebp - 0x774], eax
lea ecx, [ebp - 0x778]
call fcn.100043a0
push eax
push 0x101d4920
lea ecx, [ebp - 0x778]
call fcn.10005e60
add eax, 1
push eax
mov edx, dword [ebp - 0x774]
push edx
call fcn.1017057f
add esp, 0x10
lea eax, [ebp - 0x774]
push eax
call fcn.1011d660
add esp, 4
push 0xfde9
push 0xa
lea ecx, [ebp - 0x774]
push ecx
lea ecx, [ebp - 0x684]
call fcn.1011fb20
mov edx, dword [ebp - 0x774]
push edx
lea ecx, [ebp - 0x778]
call fcn.10005e20
mov eax, dword [ebp - 0x774]
push eax
call fcn.10170e80
add esp, 4
lea ecx, [ebp - 0x748]
call fcn.10131450
lea ecx, [ebp - 0x748]
test ecx, ecx
je 0x100f11cd
lea edx, [ebp - 0x748]
add edx, 0xc4
mov dword [ebp - 0x908], edx
jmp 0x100f11d7
mov dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x908]
push eax
mov ecx, dword [ebp - 0x74c]
mov edx, dword [ecx + 0x12c]
mov eax, dword [ebp - 0x74c]
mov ecx, dword [eax + 0x12c]
mov edx, dword [edx]
mov eax, dword [edx + 0x24]
call eax
call fcn.100a8cb0
mov dword [ebp - 0x4b0], 0
push ecx
mov ecx, esp
mov dword [ebp - 0x87c], esp
push 0x101d4928
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x880], esp
push 0x101d492c
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x884], esp
push 0x101d4930
call fcn.10005d80
call fcn.100e0b60
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x888], esp
push 0x101d4940
call fcn.10005d80
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x88c], esp
push str.DeskbarMode
call fcn.10005d80
call fcn.100e0cf0
add esp, 0xc
cmp eax, 1
jne 0x100f128d
push 0x101d4548
call dword [sym.imp.SHELL32.dll_SHLoadInProc]
mov ecx, 0x1022edbc
call fcn.10004390
push eax
lea ecx, [ebp - 0x768]
call fcn.10003dd0
push 0x101d495c
lea ecx, [ebp - 0x778]
push ecx
call fcn.1000c4e0
add esp, 8
movzx edx, al
test edx, edx
je 0x100f12c9
movzx eax, byte [ebp - 0x76d]
test eax, eax
je 0x100f12d8
movzx ecx, byte [ebp - 0x76d]
test ecx, ecx
je 0x100f1489
push 0
push 0x101d4974
lea ecx, [ebp - 0x778]
call fcn.10004220
cmp eax, 0xffffffff
jne 0x100f1367
push 0
push 0x101d4984
lea ecx, [ebp - 0x778]
call fcn.10004220
cmp eax, 0xffffffff
jne 0x100f1367
push 0
push 0x101d4998
lea ecx, [ebp - 0x778]
call fcn.10004220
cmp eax, 0xffffffff
jne 0x100f1367
lea edx, [ebp - 0x778]
push edx
push 0
lea eax, [ebp - 0x890]
push eax
call fcn.100e14d0
add esp, 8
push eax
lea ecx, [ebp - 0x894]
push ecx
call fcn.100042a0
add esp, 0xc
push eax
lea ecx, [ebp - 0x778]
call fcn.10003ea0
lea ecx, [ebp - 0x894]
call fcn.10005e00
lea ecx, [ebp - 0x890]
call fcn.10005e00
push ecx
mov ecx, esp
mov dword [ebp - 0x898], esp
push 0x101d49b0
call fcn.10005d80
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x89c], esp
push 0x101d49b4
call fcn.10005d80
call fcn.100e0ee0
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x8a0], esp
push 0x101d49dc
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x8a4], esp
push 0x101d49e0
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x8a8], esp
push 0x101d49e4
call fcn.10005d80
call fcn.100e0b60
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x8ac], esp
push 0x101d49f4
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x8b0], esp
push 0x101d49f8
call fcn.10005d80
push ecx
mov ecx, esp
mov dword [ebp - 0x8b4], esp
push 0x101d4a00
call fcn.10005d80
lea edx, [ebp - 0x77c]
push edx
call fcn.100e0810
add esp, 0x10
push 0x101d49fc
lea eax, [ebp - 0x77c]
push eax
call fcn.10004370
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x100f145c
push 1
push 0
push 0
lea ecx, [ebp - 0x778]
call fcn.100043a0
push eax
push 0x101d4a60
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x100f147e
push 5
push 0
lea ecx, [ebp - 0x778]
call fcn.100043a0
push eax
push 0x101d4a6c
push 0x101d4a88
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [ebp - 0x77c]
call fcn.10005e00
mov edx, dword [ebp - 0x74c]
cmp dword [edx + 0x80], 0
je 0x100f1660
push 0x101d4a94
mov eax, dword [ebp - 0x74c]
mov ecx, dword [eax + 0x80]
add ecx, 0x58
push ecx
call fcn.1000c4e0
add esp, 8
movzx edx, al
test edx, edx
je 0x100f1660
lea ecx, [ebp - 0x788]
call fcn.10005d40
push 0x101d4a98
lea ecx, [ebp - 0x788]
call fcn.10005e20
mov eax, dword [ebp - 0x74c]
add eax, 0x18
push eax
push 1
lea ecx, [ebp - 0x8b8]
push ecx
call fcn.100e14d0
add esp, 8
push eax
lea edx, [ebp - 0x8bc]
push edx
call fcn.100042a0
add esp, 0xc
push eax
lea ecx, [ebp - 0x788]
call fcn.100257b0
lea ecx, [ebp - 0x8bc]
call fcn.10005e00
lea ecx, [ebp - 0x8b8]
call fcn.10005e00
push str..dll_MENU_PROXY
lea ecx, [ebp - 0x788]
call fcn.10025620
lea ecx, [ebp - 0x784]
call fcn.10020e50
push 0
push 0
push 0x2001f
push 0
push 0
push 0x101d4ac8
push SysReAllocString
lea ecx, [ebp - 0x784]
call fcn.10021020
push 0
push 0
push 0x2001f
push 0
push 0
mov eax, dword [ebp - 0x74c]
mov ecx, dword [eax + 0x80]
add ecx, 0x58
call fcn.10004390
push eax
lea ecx, [ebp - 0x784]
call fcn.10020ea0
push eax
lea ecx, [ebp - 0x784]
call fcn.10021020
push 1
lea ecx, [ebp - 0x788]
call fcn.10004390
push eax
push 0
lea ecx, [ebp - 0x784]
call fcn.100217a0
push str.selectedtext
mov ecx, dword [ebp - 0x74c]
mov edx, dword [ecx + 0x80]
add edx, 0x60
push edx
call fcn.10004370
add esp, 8
movzx eax, al
test eax, eax
je 0x100f15f3
push 0x10
push str.Contexts
lea ecx, [ebp - 0x784]
call fcn.10021770
lea ecx, [ebp - 0x784]
call fcn.10020fd0
push ecx
mov ecx, esp
mov dword [ebp - 0x8c0], esp
push 0x101d4b54
call fcn.10005d80
mov ecx, dword [ebp - 0x74c]
mov edx, dword [ecx + 0x80]
add edx, 0x58
push ecx
mov ecx, esp
mov dword [ebp - 0x8c4], esp
push edx
call fcn.10005d60
push ecx
mov ecx, esp
mov dword [ebp - 0x8c8], esp
push 0x101d4b58
call fcn.10005d80
call fcn.100e0b60
add esp, 0xc
lea ecx, [ebp - 0x784]
call fcn.10020e80
lea ecx, [ebp - 0x788]
call fcn.10005e00
lea ecx, [ebp - 0x768]
call fcn.100058a0
lea ecx, [ebp - 0x778]
call fcn.10005e00
mov eax, dword [ebp - 0x74c]
add eax, 0x10
push eax
push 1
call fcn.100e39b0
add esp, 8
mov ecx, dword [ebp - 0x74c]
mov dword [ebp - 0x8d0], ecx
mov edx, dword [ebp - 0x8d0]
mov dword [ebp - 0x8cc], edx
cmp dword [ebp - 0x8cc], 0
je 0x100f16c8
push 1
mov eax, dword [ebp - 0x8cc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8cc]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x90c], eax
jmp 0x100f16d2
mov dword [ebp - 0x90c], 0
mov ecx, dword [ebp - 0x754]
mov dword [ebp - 0x8d4], ecx
lea ecx, [ebp - 0x758]
call fcn.10005e00
lea ecx, [ebp - 0x748]
call fcn.10111ba0
lea ecx, [ebp - 0x18c]
call fcn.10005e00
lea ecx, [ebp - 0x50]
call fcn.101513f0
lea ecx, [ebp - 0x750]
call fcn.10005e00
mov eax, dword [ebp - 0x8d4]
pop esi
mov ecx, dword [ebp - 0x58]
xor ecx, ebp
call fcn.1016f6a2
mov esp, ebp
pop ebp
ret