Function at 0x100b64d0
Capabilities:
Create process on windows
Enumerate files on windows
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1017b7cc
mov eax, dword fs:[0]
push eax
mov eax, 0x22c4
call fcn.10141130
mov eax, dword [0x101e8118]
xor eax, ebp
mov dword [ebp - 0x58], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x2080], esp
push 1
push eax
call fcn.100addf0
add esp, 8
mov dword [ebp - 0x2150], eax
mov ecx, dword [ebp - 0x2150]
mov dword [ebp - 0x2154], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 4], 0xffffffff
call fcn.100d1d90
add esp, 8
push 0
mov ecx, 0x101ea5f0
call fcn.10005f10
push eax
push 0x1019900c
lea edx, [ebp - 0x67c]
push edx
call fcn.1013b37a
add esp, 0xc
lea eax, [ebp - 0x67c]
push eax
push str.CLSID_s
lea ecx, [ebp - 0x3a4]
push ecx
call fcn.1013b37a
add esp, 0xc
mov dword [ebp - 0x270], 0
push 0
lea edx, [ebp - 0x270]
push edx
push 0
push 0x20006
push 0
push 0
push 0
push 0x10199028
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push 0
push 0
push 3
push 0
lea eax, [ebp - 0x67c]
push eax
mov ecx, dword [ebp - 0x270]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, dword [ebp - 0x270]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
push 1
mov ecx, 0x101ea630
call fcn.100bb2d0
mov dword [ebp - 0x1bf0], eax
push 0
lea eax, [ebp - 0x270]
push eax
push 0
push 0x20006
push 0
push 0
push 0
lea ecx, [ebp - 0x3a4]
push ecx
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
push 0
lea edx, [ebp - 0x19dc]
push edx
call fcn.100addf0
add esp, 8
mov dword [ebp - 4], 1
push 0
lea ecx, [ebp - 0x19dc]
call fcn.10005f10
push eax
push 0x10199084
lea eax, [ebp - 0x5b4]
push eax
call fcn.1013b37a
add esp, 0xc
push 0xdc
call fcn.1013b73e
add esp, 4
mov dword [ebp - 0x2088], eax
mov byte [ebp - 4], 2
cmp dword [ebp - 0x2088], 0
je 0x100b667e
push 0
mov ecx, dword [ebp - 0x2088]
call fcn.10090a40
mov dword [ebp - 0x2158], eax
jmp 0x100b6688
mov dword [ebp - 0x2158], 0
mov ecx, dword [ebp - 0x2158]
mov dword [ebp - 0x2084], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2084]
mov dword [ebp - 0x19e0], edx
push 0
push 0
push 0
push 0
push 0x1019909c
mov eax, dword [ebp - 0x19e0]
push eax
lea ecx, [ebp - 0x54]
call fcn.10108be0
mov byte [ebp - 4], 3
push 0
lea ecx, [ebp - 0x5b4]
push ecx
lea ecx, [ebp - 0x54]
call fcn.10108d30
lea ecx, [ebp - 0x54]
call fcn.10090a20
cmp eax, 0xffffff92
je 0x100b6780
lea ecx, [ebp - 0x54]
call fcn.10090a20
test eax, eax
je 0x100b6780
lea ecx, [ebp - 0x54]
call fcn.10090a20
cmp eax, 0xffffff96
je 0x100b6780
mov edx, dword [ebp - 0x19e0]
mov dword [ebp - 0x2090], edx
mov eax, dword [ebp - 0x2090]
mov dword [ebp - 0x208c], eax
cmp dword [ebp - 0x208c], 0
je 0x100b6741
push 1
mov ecx, dword [ebp - 0x208c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x208c]
mov eax, dword [edx + 8]
call eax
mov dword [ebp - 0x215c], eax
jmp 0x100b674b
mov dword [ebp - 0x215c], 0
mov ecx, dword [ebp - 0x1bf0]
mov dword [ebp - 0x2094], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x54]
call fcn.10108cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19dc]
call fcn.10006030
mov eax, dword [ebp - 0x2094]
jmp 0x100b77f2
mov ecx, dword [ebp - 0x19e0]
add ecx, 0x10
call fcn.100059c0
shl eax, 1
push eax
push 0
mov ecx, dword [ebp - 0x19e0]
add ecx, 0x10
call fcn.10005f10
push eax
push 1
push 0
push 0
mov edx, dword [ebp - 0x270]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 0x270]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
mov ecx, esp
mov dword [ebp - 0x2098], esp
push 0x101990ac
call fcn.100057d0
mov dword [ebp - 0x2160], eax
mov ecx, dword [ebp - 0x2160]
mov dword [ebp - 0x2164], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x19e0]
mov eax, dword [edx + 0x20]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x209c], esp
push 0x101990b0
call fcn.100057d0
mov dword [ebp - 0x2168], eax
mov ecx, dword [ebp - 0x2168]
mov dword [ebp - 0x216c], ecx
mov byte [ebp - 4], 5
mov byte [ebp - 4], 3
call fcn.100ad710
add esp, 0xc
push 1
call fcn.100d0a40
add esp, 4
mov edx, dword [ebp - 0x19e0]
add edx, 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x20a0], esp
push edx
call fcn.10005780
mov dword [ebp - 0x2170], eax
mov eax, dword [ebp - 0x2170]
mov dword [ebp - 0x2174], eax
mov byte [ebp - 4], 6
push 1
mov byte [ebp - 4], 3
call fcn.100af020
add esp, 8
lea ecx, [ebp - 0x3a8]
push ecx
call fcn.100d0d30
add esp, 4
mov byte [ebp - 4], 7
push ecx
mov ecx, esp
mov dword [ebp - 0x20a4], esp
push 0x101990c0
call fcn.100057d0
mov dword [ebp - 0x2178], eax
mov edx, dword [ebp - 0x2178]
mov dword [ebp - 0x217c], edx
mov byte [ebp - 4], 8
push ecx
mov esi, esp
mov dword [ebp - 0x20a8], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x20ac], esp
push 0x101990c4
call fcn.100057d0
mov dword [ebp - 0x2180], eax
mov eax, dword [ebp - 0x2180]
mov dword [ebp - 0x2184], eax
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x20b0], esp
lea edx, [ebp - 0x3a8]
push edx
call fcn.10005780
mov dword [ebp - 0x2188], eax
mov eax, dword [ebp - 0x2188]
mov dword [ebp - 0x218c], eax
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x20b4], esp
push 0x101990c8
call fcn.100057d0
mov dword [ebp - 0x2190], eax
mov ecx, dword [ebp - 0x2190]
mov dword [ebp - 0x2194], ecx
mov byte [ebp - 4], 0xb
push esi
mov byte [ebp - 4], 8
call fcn.100ad100
add esp, 0x10
mov dword [ebp - 0x2198], eax
mov edx, dword [ebp - 0x2198]
mov dword [ebp - 0x219c], edx
mov byte [ebp - 4], 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x20b8], esp
push 0x101990e0
call fcn.100057d0
mov dword [ebp - 0x21a0], eax
mov eax, dword [ebp - 0x21a0]
mov dword [ebp - 0x21a4], eax
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 7
call fcn.100ad390
add esp, 0xc
lea ecx, [ebp - 0x19d4]
call fcn.100d4490
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x19e0]
mov dword [ebp - 0x824], ecx
mov edx, dword [ebp - 0x19e0]
cmp dword [edx + 0xbc], 0
je 0x100b6b3f
mov dword [ebp - 0x205c], 0
jmp 0x100b69d3
mov eax, dword [ebp - 0x205c]
add eax, 1
mov dword [ebp - 0x205c], eax
mov ecx, dword [ebp - 0x19e0]
mov ecx, dword [ecx + 0xbc]
add ecx, 0x10
call fcn.10004710
cmp dword [ebp - 0x205c], eax
jae 0x100b6b3f
lea edx, [ebp - 0x19d4]
test edx, edx
je 0x100b6a0b
lea eax, [ebp - 0x1910]
mov dword [ebp - 0x21a8], eax
jmp 0x100b6a15
mov dword [ebp - 0x21a8], 0
mov ecx, dword [ebp - 0x205c]
push ecx
mov edx, dword [ebp - 0x19e0]
mov ecx, dword [edx + 0xbc]
add ecx, 0x10
call fcn.100045d0
mov eax, dword [eax]
mov dword [ebp - 0x21ac], eax
mov ecx, dword [ebp - 0x21a8]
push ecx
push 0x101990f8
mov edx, dword [ebp - 0x21ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x21ac]
mov edx, dword [eax + 0x30]
call edx
mov eax, dword [ebp - 0x205c]
push eax
mov ecx, dword [ebp - 0x19e0]
mov ecx, dword [ecx + 0xbc]
add ecx, 0x10
call fcn.100045d0
mov edx, dword [eax]
mov dword [ebp - 0x21b0], edx
push 0x10199110
push 0x10199114
mov eax, dword [ebp - 0x21b0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x21b0]
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x2060], eax
push str.ManualUpdate
mov ecx, dword [ebp - 0x2060]
push ecx
call fcn.1013b348
add esp, 8
test eax, eax
jne 0x100b6b28
lea edx, [ebp - 0x19d4]
test edx, edx
je 0x100b6acd
lea eax, [ebp - 0x1910]
mov dword [ebp - 0x21b4], eax
jmp 0x100b6ad7
mov dword [ebp - 0x21b4], 0
mov ecx, dword [ebp - 0x205c]
push ecx
mov edx, dword [ebp - 0x19e0]
mov ecx, dword [edx + 0xbc]
add ecx, 0x10
call fcn.100045d0
mov eax, dword [eax]
mov dword [ebp - 0x21b8], eax
mov ecx, dword [ebp - 0x21b4]
push ecx
mov edx, dword [ebp - 0x21b8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x21b8]
mov edx, dword [eax + 0x2c]
call edx
mov eax, dword [ebp - 0x2060]
push eax
lea ecx, [ebp - 0x1910]
call fcn.100de3c0
jmp 0x100b6b3f
mov ecx, dword [ebp - 0x2060]
push ecx
lea ecx, [ebp - 0x1910]
call fcn.100de3c0
jmp 0x100b69c4
call fcn.1008fef0
push ecx
mov ecx, esp
mov dword [ebp - 0x20bc], esp
push 0x1019913c
call fcn.100057d0
mov dword [ebp - 0x21bc], eax
mov edx, dword [ebp - 0x21bc]
mov dword [ebp - 0x21c0], edx
mov byte [ebp - 4], 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x20c0], esp
push 0x10199140
call fcn.100057d0
mov dword [ebp - 0x21c4], eax
mov eax, dword [ebp - 0x21c4]
mov dword [ebp - 0x21c8], eax
mov byte [ebp - 4], 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x20c4], esp
push 0x10199144
call fcn.100057d0
mov dword [ebp - 0x21cc], eax
mov ecx, dword [ebp - 0x21cc]
mov dword [ebp - 0x21d0], ecx
mov byte [ebp - 4], 0x11
lea edx, [ebp - 0x1e04]
push edx
mov byte [ebp - 4], 0xe
call fcn.100ad100
add esp, 0x10
mov dword [ebp - 0x21d4], eax
mov byte [ebp - 4], 0x12
push 0x10199158
lea eax, [ebp - 0x1e04]
push eax
call fcn.10006460
movzx ecx, al
test ecx, ecx
je 0x100b6c7f
push ecx
mov ecx, esp
mov dword [ebp - 0x20c8], esp
push 0x1019915c
call fcn.100057d0
mov dword [ebp - 0x21d8], eax
mov edx, dword [ebp - 0x21d8]
mov dword [ebp - 0x21dc], edx
mov byte [ebp - 4], 0x13
push ecx
mov ecx, esp
mov dword [ebp - 0x20cc], esp
push 0x10199160
call fcn.100057d0
mov dword [ebp - 0x21e0], eax
mov eax, dword [ebp - 0x21e0]
mov dword [ebp - 0x21e4], eax
mov byte [ebp - 4], 0x14
push ecx
mov ecx, esp
mov dword [ebp - 0x20d0], esp
push 0x10199164
call fcn.100057d0
mov dword [ebp - 0x21e8], eax
mov ecx, dword [ebp - 0x21e8]
mov dword [ebp - 0x21ec], ecx
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x12
call fcn.100ad390
add esp, 0xc
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x26c], 0
push 0x208
lea edx, [ebp - 0x1dfc]
push edx
mov ecx, 0x101ea630
call fcn.10086950
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
lea eax, [ebp - 0x1dfc]
push eax
call fcn.100abd90
add esp, 8
mov dword [ebp - 0x19e4], eax
cmp dword [ebp - 0x19e4], 0
je 0x100b6cd8
mov ecx, dword [ebp - 0x19e4]
mov word [ecx], 0
push 0x10199178
lea edx, [ebp - 0x1dfc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x1dfc]
push eax
lea ecx, [ebp - 0x264]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x1019917c
lea edx, [ebp - 0x264]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x2054]
push eax
lea ecx, [ebp - 0x264]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov dword [ebp - 0x2058], eax
cmp dword [ebp - 0x2058], 0xffffffff
je 0x100b6e03
lea edx, [ebp - 0x1dfc]
push edx
lea eax, [ebp - 0x1bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x2028]
push ecx
lea edx, [ebp - 0x1bec]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x1bec]
push eax
call fcn.10090c40
mov dword [ebp - 0x19d8], eax
cmp dword [ebp - 0x19d8], 0
je 0x100b6dda
push 0x10199188
mov ecx, dword [ebp - 0x19d8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x10], eax
push 0x10199194
mov edx, dword [ebp - 0x19d8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0
je 0x100b6dcd
cmp dword [ebp - 0x10], 0
je 0x100b6dcd
call dword [ebp - 0x26c]
movzx eax, al
test eax, eax
je 0x100b6dcd
push 0
push str.Registration
call dword [ebp - 0x10]
mov ecx, dword [ebp - 0x19d8]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea edx, [ebp - 0x2054]
push edx
mov eax, dword [ebp - 0x2058]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x100b6d37
mov ecx, dword [ebp - 0x2058]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
push str.affid.dat
push 0
lea edx, [ebp - 0x20d4]
push edx
call fcn.100addf0
add esp, 8
mov dword [ebp - 0x21f0], eax
mov eax, dword [ebp - 0x21f0]
mov dword [ebp - 0x21f4], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x21f4]
push ecx
lea edx, [ebp - 0x1e00]
push edx
call fcn.10019630
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x20d4]
call fcn.10006030
push 0x101991d0
push 0
lea ecx, [ebp - 0x1e00]
call fcn.10005f10
push eax
call fcn.1013a36c
add esp, 8
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
je 0x100b6fc2
push 0x1000
call fcn.10139b2d
add esp, 4
mov dword [ebp - 0x20d8], eax
mov eax, dword [ebp - 0x20d8]
mov dword [ebp - 0x2068], eax
mov ecx, dword [ebp - 0x268]
push ecx
push 0x400
mov edx, dword [ebp - 0x2068]
push edx
call fcn.1014052d
add esp, 0xc
mov eax, dword [ebp - 0x2068]
push eax
lea ecx, [ebp - 0x2064]
call fcn.100057d0
mov byte [ebp - 4], 0x19
push 0x101991d4
push 0x101991d8
lea ecx, [ebp - 0x2064]
call fcn.10005ad0
push 0x101991dc
push 0x101991e0
lea ecx, [ebp - 0x2064]
call fcn.10005ad0
push ecx
mov ecx, esp
mov dword [ebp - 0x20dc], esp
push 0x101991e4
call fcn.100057d0
mov dword [ebp - 0x21f8], eax
mov ecx, dword [ebp - 0x21f8]
mov dword [ebp - 0x21fc], ecx
mov byte [ebp - 4], 0x1a
push 0
lea ecx, [ebp - 0x2064]
call fcn.10005f10
push ecx
mov ecx, esp
mov dword [ebp - 0x20e0], esp
push eax
call fcn.100057d0
mov dword [ebp - 0x2200], eax
mov edx, dword [ebp - 0x2200]
mov dword [ebp - 0x2204], edx
mov byte [ebp - 4], 0x1b
push ecx
mov ecx, esp
mov dword [ebp - 0x20e4], esp
push 0x101991e8
call fcn.100057d0
mov dword [ebp - 0x2208], eax
mov eax, dword [ebp - 0x2208]
mov dword [ebp - 0x220c], eax
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 0x19
call fcn.100ad390
add esp, 0xc
mov ecx, dword [ebp - 0x2068]
mov dword [ebp - 0x20e8], ecx
mov edx, dword [ebp - 0x20e8]
push edx
call fcn.10139d64
add esp, 4
mov eax, dword [ebp - 0x268]
push eax
call fcn.1013a442
add esp, 4
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2064]
call fcn.10006030
cmp dword [ebp - 0x19e0], 0
je 0x100b773e
mov ecx, dword [ebp - 0x19e0]
cmp dword [ecx + 0xb8], 0
je 0x100b773e
mov dword [ebp - 0x2070], 0
jmp 0x100b6ffd
mov edx, dword [ebp - 0x2070]
add edx, 1
mov dword [ebp - 0x2070], edx
mov eax, dword [ebp - 0x19e0]
mov ecx, dword [eax + 0xb8]
add ecx, 0x7c
call fcn.1003bde0
cmp dword [ebp - 0x2070], eax
jae 0x100b707d
lea ecx, [ebp - 0x19d4]
test ecx, ecx
je 0x100b7031
lea edx, [ebp - 0x1910]
mov dword [ebp - 0x2210], edx
jmp 0x100b703b
mov dword [ebp - 0x2210], 0
mov eax, dword [ebp - 0x2070]
push eax
mov ecx, dword [ebp - 0x19e0]
mov ecx, dword [ecx + 0xb8]
add ecx, 0x7c
call fcn.1003be20
mov edx, dword [eax]
mov dword [ebp - 0x2214], edx
mov eax, dword [ebp - 0x2210]
push eax
mov ecx, dword [ebp - 0x2214]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x2214]
mov eax, dword [edx + 0x24]
call eax
jmp 0x100b6fee
mov dword [ebp - 0x2070], 0
jmp 0x100b7098
mov ecx, dword [ebp - 0x2070]
add ecx, 1
mov dword [ebp - 0x2070], ecx
mov edx, dword [ebp - 0x19e0]
mov ecx, dword [edx + 0xb8]
add ecx, 0x6c
call fcn.1003bcb0
cmp dword [ebp - 0x2070], eax
jae 0x100b7118
lea eax, [ebp - 0x19d4]
test eax, eax
je 0x100b70cc
lea ecx, [ebp - 0x1910]
mov dword [ebp - 0x2218], ecx
jmp 0x100b70d6
mov dword [ebp - 0x2218], 0
mov edx, dword [ebp - 0x2070]
push edx
mov eax, dword [ebp - 0x19e0]
mov ecx, dword [eax + 0xb8]
add ecx, 0x6c
call fcn.1003bcf0
mov ecx, dword [eax]
mov dword [ebp - 0x221c], ecx
mov edx, dword [ebp - 0x2218]
push edx
mov eax, dword [ebp - 0x221c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x221c]
mov eax, dword [edx + 0x24]
call eax
jmp 0x100b7089
lea ecx, [ebp - 0x207c]
call fcn.10005760
mov byte [ebp - 4], 0x1d
mov byte [ebp - 0x2071], 0
push 0x10199200
lea ecx, [ebp - 0x1e04]
push ecx
call fcn.10006460
movzx edx, al
test edx, edx
je 0x100b724a
push ecx
mov ecx, esp
mov dword [ebp - 0x20ec], esp
push 0x10199204
call fcn.100057d0
mov dword [ebp - 0x2220], eax
mov eax, dword [ebp - 0x2220]
mov dword [ebp - 0x2224], eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x20f0]
push ecx
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x19e0]
call fcn.100945d0
mov dword [ebp - 0x2228], eax
mov edx, dword [ebp - 0x2228]
mov dword [ebp - 0x222c], edx
mov byte [ebp - 4], 0x1f
mov eax, dword [ebp - 0x222c]
push eax
lea ecx, [ebp - 0x207c]
call fcn.10005a10
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x20f0]
call fcn.10006030
lea ecx, [ebp - 0x207c]
call fcn.100059e0
test eax, eax
je 0x100b7245
push ecx
mov ecx, esp
mov dword [ebp - 0x20f4], esp
push str.firstUrl
call fcn.100057d0
mov dword [ebp - 0x2230], eax
mov ecx, dword [ebp - 0x2230]
mov dword [ebp - 0x2234], ecx
mov byte [ebp - 4], 0x20
lea edx, [ebp - 0x20f8]
push edx
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x19e0]
call fcn.100945d0
mov dword [ebp - 0x2238], eax
mov eax, dword [ebp - 0x2238]
mov dword [ebp - 0x223c], eax
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x223c]
push ecx
lea ecx, [ebp - 0x207c]
call fcn.10005a10
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x20f8]
call fcn.10006030
jmp 0x100b73d5
push ecx
mov ecx, esp
mov dword [ebp - 0x20fc], esp
push 0x1019922c
call fcn.100057d0
mov dword [ebp - 0x2240], eax
mov edx, dword [ebp - 0x2240]
mov dword [ebp - 0x2244], edx
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x2100]
push eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x19e0]
call fcn.100945d0
mov dword [ebp - 0x2248], eax
mov ecx, dword [ebp - 0x2248]
mov dword [ebp - 0x224c], ecx
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x224c]
push edx
lea ecx, [ebp - 0x207c]
call fcn.10005a10
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2100]
call fcn.10006030
push ecx
mov ecx, esp
mov dword [ebp - 0x2104], esp
push 0x1019924c
call fcn.100057d0
mov dword [ebp - 0x2250], eax
mov eax, dword [ebp - 0x2250]
mov dword [ebp - 0x2254], eax
mov byte [ebp - 4], 0x24
push ecx
mov ecx, esp
mov dword [ebp - 0x2108], esp
push 0x10199250
call fcn.100057d0
mov dword [ebp - 0x2258], eax
mov ecx, dword [ebp - 0x2258]
mov dword [ebp - 0x225c], ecx
mov byte [ebp - 4], 0x25
push ecx
mov ecx, esp
mov dword [ebp - 0x210c], esp
push 0x10199254
call fcn.100057d0
mov dword [ebp - 0x2260], eax
mov edx, dword [ebp - 0x2260]
mov dword [ebp - 0x2264], edx
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], 0x1d
call fcn.100ad390
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x2110], esp
push 0x10199268
call fcn.100057d0
mov dword [ebp - 0x2268], eax
mov eax, dword [ebp - 0x2268]
mov dword [ebp - 0x226c], eax
mov byte [ebp - 4], 0x27
push ecx
mov ecx, esp
mov dword [ebp - 0x2114], esp
push 0x1019926c
call fcn.100057d0
mov dword [ebp - 0x2270], eax
mov ecx, dword [ebp - 0x2270]
mov dword [ebp - 0x2274], ecx
mov byte [ebp - 4], 0x28
push ecx
mov ecx, esp
mov dword [ebp - 0x2118], esp
push 0x10199270
call fcn.100057d0
mov dword [ebp - 0x2278], eax
mov edx, dword [ebp - 0x2278]
mov dword [ebp - 0x227c], edx
mov byte [ebp - 4], 0x29
mov byte [ebp - 4], 0x1d
call fcn.100ad390
add esp, 0xc
mov byte [ebp - 0x2071], 1
lea ecx, [ebp - 0x207c]
call fcn.100059e0
test eax, eax
je 0x100b73f4
push 0x10199294
lea ecx, [ebp - 0x207c]
call fcn.10005aa0
lea ecx, [ebp - 0x207c]
call fcn.100059c0
lea eax, [eax + eax + 2]
push eax
call fcn.1013edb0
add esp, 4
mov dword [ebp - 0x2078], eax
push 0
lea ecx, [ebp - 0x207c]
call fcn.10005f10
push eax
push 0x101992ac
mov ecx, dword [ebp - 0x2078]
push ecx
call fcn.1013b37a
add esp, 0xc
lea edx, [ebp - 0x2078]
push edx
call fcn.100de410
add esp, 4
mov eax, dword [ebp - 0x2078]
push eax
lea ecx, [ebp - 0x207c]
call fcn.10005aa0
mov ecx, dword [ebp - 0x2078]
push ecx
call fcn.1013f51e
add esp, 4
push 0
mov ecx, 0x101ea5f0
call fcn.10005f10
push eax
lea ecx, [ebp - 0x206c]
call fcn.10004780
mov byte [ebp - 4], 0x2a
push 0x101992b4
lea edx, [ebp - 0x207c]
push edx
call fcn.1008d870
movzx eax, al
test eax, eax
je 0x100b74a3
movzx ecx, byte [ebp - 0x2071]
test ecx, ecx
je 0x100b74b2
movzx edx, byte [ebp - 0x2071]
test edx, edx
je 0x100b768f
push 0x101992cc
lea ecx, [ebp - 0x207c]
call fcn.10005d90
cmp eax, 0xffffffff
jne 0x100b7584
push 0x101992dc
lea ecx, [ebp - 0x207c]
call fcn.10005d90
cmp eax, 0xffffffff
jne 0x100b7584
push 0x101992f0
lea ecx, [ebp - 0x207c]
call fcn.10005d90
cmp eax, 0xffffffff
jne 0x100b7584
lea eax, [ebp - 0x207c]
push eax
push 0
lea ecx, [ebp - 0x211c]
push ecx
call fcn.100addf0
add esp, 8
mov dword [ebp - 0x2280], eax
mov edx, dword [ebp - 0x2280]
mov dword [ebp - 0x2284], edx
mov byte [ebp - 4], 0x2b
mov eax, dword [ebp - 0x2284]
push eax
lea ecx, [ebp - 0x2120]
push ecx
call fcn.10019590
mov dword [ebp - 0x2288], eax
mov edx, dword [ebp - 0x2288]
mov dword [ebp - 0x228c], edx
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x228c]
push eax
lea ecx, [ebp - 0x207c]
call fcn.10005a10
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x2120]
call fcn.10006030
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x211c]
call fcn.10006030
push ecx
mov ecx, esp
mov dword [ebp - 0x2124], esp
push 0x10199308
call fcn.100057d0
mov dword [ebp - 0x2290], eax
mov ecx, dword [ebp - 0x2290]
mov dword [ebp - 0x2294], ecx
mov byte [ebp - 4], 0x2d
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x2128], esp
push 0x1019930c
call fcn.100057d0
mov dword [ebp - 0x2298], eax
mov edx, dword [ebp - 0x2298]
mov dword [ebp - 0x229c], edx
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0x2a
call fcn.100ad710
add esp, 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x212c], esp
push 0x10199334
call fcn.100057d0
mov dword [ebp - 0x22a0], eax
mov eax, dword [ebp - 0x22a0]
mov dword [ebp - 0x22a4], eax
mov byte [ebp - 4], 0x2f
push ecx
mov ecx, esp
mov dword [ebp - 0x2130], esp
push 0x10199338
call fcn.100057d0
mov dword [ebp - 0x22a8], eax
mov ecx, dword [ebp - 0x22a8]
mov dword [ebp - 0x22ac], ecx
mov byte [ebp - 4], 0x30
push ecx
mov ecx, esp
mov dword [ebp - 0x2134], esp
push 0x1019933c
call fcn.100057d0
mov dword [ebp - 0x22b0], eax
mov edx, dword [ebp - 0x22b0]
mov dword [ebp - 0x22b4], edx
mov byte [ebp - 4], 0x31
mov byte [ebp - 4], 0x2a
call fcn.100ad390
add esp, 0xc
push 5
push 0
push 0
lea ecx, [ebp - 0x207c]
call fcn.10005f10
push eax
push 0x1019934c
push 0x10199368
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x824], 0
push ecx
mov ecx, esp
mov dword [ebp - 0x2138], esp
push 0x10199374
call fcn.100057d0
mov dword [ebp - 0x22b8], eax
mov eax, dword [ebp - 0x22b8]
mov dword [ebp - 0x22bc], eax
mov byte [ebp - 4], 0x32
push ecx
mov ecx, esp
mov dword [ebp - 0x213c], esp
push 0x10199378
call fcn.100057d0
mov dword [ebp - 0x22c0], eax
mov ecx, dword [ebp - 0x22c0]
mov dword [ebp - 0x22c4], ecx
mov byte [ebp - 4], 0x33
push ecx
mov ecx, esp
mov dword [ebp - 0x2140], esp
push 0x1019937c
call fcn.100057d0
mov dword [ebp - 0x22c8], eax
mov edx, dword [ebp - 0x22c8]
mov dword [ebp - 0x22cc], edx
mov byte [ebp - 4], 0x34
mov byte [ebp - 4], 0x2a
call fcn.100ad390
add esp, 0xc
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x206c]
call fcn.10004820
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x207c]
call fcn.10006030
mov eax, dword [ebp - 0x19e0]
mov dword [ebp - 0x2148], eax
mov ecx, dword [ebp - 0x2148]
mov dword [ebp - 0x2144], ecx
cmp dword [ebp - 0x2144], 0
je 0x100b777c
push 1
mov edx, dword [ebp - 0x2144]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2144]
mov edx, dword [eax + 8]
call edx
mov dword [ebp - 0x22d0], eax
jmp 0x100b7786
mov dword [ebp - 0x22d0], 0
mov eax, dword [ebp - 0x1bf0]
mov dword [ebp - 0x214c], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1e00]
call fcn.10006030
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1e04]
call fcn.10006030
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x19d4]
call fcn.100d4dd0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3a8]
call fcn.10006030
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x54]
call fcn.10108cc0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19dc]
call fcn.10006030
mov eax, dword [ebp - 0x214c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x58]
xor ecx, ebp
call fcn.1013a297
mov esp, ebp
pop ebp
ret