Function at 0x44c300
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49b63c
mov eax, dword fs:[0]
push eax
sub esp, 0xe4
push ebx
push esi
push edi
mov eax, dword [0x4e3ec8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
push edi
push str.CheckNetworkQuality
lea ecx, [ebp + 8]
mov dword [ebp - 4], edi
xor bl, bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44c463
push str.netsh_wlan_show_interfaces__find__Signal_
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_306]
push edi
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
mov byte [ebp - 4], 1
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea ecx, [ebp - 0x10]
push ecx
call fcn.0047d270
add esp, 0xc
push edi
push str.Signal
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp - 0x10]
test eax, eax
js 0x44c404
push 0x4ae26b
push str.Signal
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push 0x4ae26b
push 0x4b0094
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_11627]
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_13125]
lea edx, [ebp - 0x10]
push edx
lea eax, [ebp - 0x24]
push str.Your_Network_quality_is
push eax
mov bl, 1
call fcn.00401a70
push str..Click__OK_
push eax
lea ecx, [ebp - 0x18]
push ecx
mov byte [ebp - 4], 3
call fcn.004019e0
add esp, 0x18
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 4
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x24]
jmp 0x44c437
push str.Not_able_to_detect_quality_of_network__please_try_after_sometime
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push str.._Click__OK_
lea edx, [ebp - 0x10]
push edx
lea eax, [ebp - 0x18]
push eax
xor bl, bl
call fcn.004019e0
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 5
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 2
call dword [sym.imp.mfc100.dll_Ordinal_901]
push edi
push edi
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call sub.mfc100.dll_Ordinal_1982
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1c]
jmp 0x44cdc4
push edi
push str.OpenZoom
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44c531
lea ecx, [ebp - 0x10]
push 0x4c9930
push ecx
call fcn.00476e10
add esp, 8
push str.Zoom_binZoom.exe
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 6
call dword [sym.imp.mfc100.dll_Ordinal_1483]
push ecx
lea edx, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x14], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x44c509
push str.C:Program_Files__x86_Zoom_binZoom.exe
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
jne 0x44c509
push str.C:Program_FilesZoom_binZoom.exe
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_1316]
push ecx
lea edx, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x14], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
cmp al, 1
jne 0x44c529
push 1
push edi
push edi
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.open
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov bl, 1
lea ecx, [ebp - 0x10]
jmp 0x44cdc4
push edi
push str.checkConnectivity
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
push edi
lea ecx, [ebp + 8]
test eax, eax
js 0x44c653
push 0x4b478c
mov bl, 1
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp + 8]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
dec eax
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 7
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea ecx, [ebp - 0x18]
push ecx
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 8
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea edx, [ebp + 8]
push edx
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_300]
push edi
push ecx
mov eax, esp
mov dword [ebp - 0x14], esp
lea ecx, [ebp - 0x1c]
push ecx
push str.ping__n_2
push eax
mov byte [ebp - 4], 9
call fcn.00401a70
lea edx, [ebp - 0x10]
add esp, 0xc
push edx
call fcn.0047d270
add esp, 0xc
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc100.dll_Ordinal_7832]
push edi
push str.could_not_find_host
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x44c640
push edi
push str.general_failure
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x44c640
push edi
push str.destination_host_unreachable
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44c642
xor bl, bl
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1c]
jmp 0x44cdc4
push str.cleanTempFiles
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44c816
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x4ae26b
call dword [sym.imp.mfc100.dll_Ordinal_310]
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x4afb8c
mov byte [ebp - 4], 0xb
call dword [sym.imp.mfc100.dll_Ordinal_310]
mov byte [ebp - 4], 0
call fcn.00485a00
add esp, 0xc
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.iexplore.exe
call dword [sym.imp.mfc100.dll_Ordinal_310]
call fcn.00481f00
add esp, 8
test al, al
jne 0x44c6c3
push edi
push 1
call fcn.00486340
add esp, 8
lea eax, [ebp - 0x1c]
push eax
call fcn.00476b60
add esp, 4
push 0xffffffffffffffff
push ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
mov bl, 0xc
push str.chrome.exe
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_310]
call fcn.00481f00
add esp, 8
test al, al
jne 0x44c762
lea ecx, [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x18]
push 0x4af5dc
push edx
call fcn.00401a70
push str.AppDataLocalGoogleChromeUser_DataDefaultCache
push eax
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 0xd
call fcn.004019e0
add esp, 0x18
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xf
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea edx, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x14], esp
push edx
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00476ab0
add esp, 4
test al, al
je 0x44c756
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call fcn.004759f0
add esp, 4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 1
call fcn.004762e0
add esp, 4
push str.AppDataLocalLowSunJavaDeploymentcache
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc100.dll_Ordinal_306]
push str.C:Users_
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc100.dll_Ordinal_306]
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x18]
push edx
mov byte [ebp - 4], 0x11
call fcn.004018e0
lea ecx, [ebp - 0x24]
push ecx
push eax
lea edx, [ebp - 0x10]
push edx
mov byte [ebp - 4], 0x12
call fcn.004018e0
add esp, 0x18
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x16
call dword [sym.imp.mfc100.dll_Ordinal_901]
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00476ab0
add esp, 4
test al, al
je 0x44c803
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
call fcn.004759f0
add esp, 4
lea ecx, [ebp - 0x10]
mov bl, 1
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1c]
jmp 0x44cdc4
push edi
push str.PSTfileSize
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44ca07
lea ecx, [ebp - 0x20]
push ecx
call fcn.0047c3d0
add esp, 4
push str.OutlookSearchCatalog
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x17
call dword [sym.imp.mfc100.dll_Ordinal_1483]
xor esi, esi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], esi
lea edx, [ebp - 0x24]
push edx
push 0x20019
push esi
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x18
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x44c8a8
mov eax, dword [ebp - 0x24]
push eax
lea ecx, [ebp - 0x50]
push ecx
call fcn.0048d320
add esp, 8
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x19
call fcn.0044c2c0
lea ecx, [ebp - 0x50]
call fcn.0044ac80
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x40]
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_316]
sub esi, edi
sar esi, 2
mov byte [ebp - 4], 0x1a
test esi, esi
jle 0x44c998
lea esp, [esp]
push edi
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_300]
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x2c], esp
push eax
mov byte [ebp - 4], 0x1b
call dword [sym.imp.mfc100.dll_Ordinal_300]
call fcn.00473a70
add esp, 4
test al, al
je 0x44c981
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
lea ecx, [ebp - 0x18]
push ecx
call fcn.004801e0
push str._and_size_of_pst_is
lea edx, [ebp - 0x10]
push edx
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0x1c
call fcn.004019e0
lea ecx, [ebp - 0x18]
push ecx
push eax
lea edx, [ebp - 0x28]
push edx
mov byte [ebp - 4], 0x1d
call fcn.004018e0
push 0x4b1700
push eax
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 0x1e
call fcn.004019e0
add esp, 0x2c
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1f
call dword [sym.imp.mfc100.dll_Ordinal_1479]
lea ecx, [ebp - 0x30]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x1a
call dword [sym.imp.mfc100.dll_Ordinal_901]
add edi, 4
dec esi
jne 0x44c8d0
push 0
lea ecx, [ebp - 0xf0]
call fcn.0040d1f0
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x20
call dword [sym.imp.mfc100.dll_Ordinal_300]
lea edx, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x21
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x20
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0xf0]
call sub.mfc100.dll_Ordinal_3620
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x1a
call fcn.0040d270
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x40]
call fcn.0044ac80
lea ecx, [ebp - 0x20]
jmp 0x44cdc4
push edi
push str.MapiClientConnections
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44cca2
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.mfc100.dll_Ordinal_300]
push edi
mov bl, 0x22
push 0x4b478c
lea ecx, [ebp + 8]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp + 8]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
dec eax
push eax
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x23
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push edi
push 0x4b4b94
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
mov esi, eax
push esi
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x24
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
dec eax
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push 0x4ae26b
push 0x4b0b4c
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x25
call dword [sym.imp.mfc100.dll_Ordinal_11627]
push edi
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str.ipconfig__all
call dword [sym.imp.mfc100.dll_Ordinal_310]
lea ecx, [ebp - 0x10]
push ecx
call fcn.0047d270
add esp, 0xc
push 0
push ecx
mov edx, esp
mov dword [ebp - 0x2c], esp
lea eax, [ebp - 0x1c]
push eax
push str.ping__n_2
mov bl, 0x26
push edx
mov byte [ebp - 4], bl
call fcn.00401a70
add esp, 0xc
lea ecx, [ebp - 0x14]
push ecx
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x27
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push str.could_not_find_host
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x44cc7d
push 0
push str.general_failure
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x44cc7d
push 0
push str.destination_host_unreachable
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x44cc7d
push 0
push ecx
mov edx, esp
mov dword [ebp - 0x2c], esp
lea eax, [ebp - 0x20]
push eax
push str.ping__n_2
push edx
call fcn.00401a70
lea ecx, [ebp - 0x14]
add esp, 0xc
push ecx
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x28
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push str.could_not_find_host
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x44cc7d
push 0
push str.general_failure
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x44cc7d
push 0
push str.destination_host_unreachable
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
jns 0x44cc7d
push 0
push ecx
mov edx, esp
mov dword [ebp - 0x2c], esp
lea eax, [ebp - 0x1c]
push eax
push str.tracert
push edx
call fcn.00401a70
lea ecx, [ebp - 0x14]
add esp, 0xc
push ecx
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x29
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], bl
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0
push ecx
mov edx, esp
mov dword [ebp - 0x2c], esp
lea eax, [ebp - 0x20]
push eax
push str.tracert
push edx
call fcn.00401a70
lea ecx, [ebp - 0x14]
add esp, 0xc
push ecx
call fcn.0047d270
add esp, 0xc
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0x2a
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov bl, 1
jmp 0x44cc7f
xor bl, bl
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x20]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x28]
jmp 0x44cdc4
push edi
push str.RunExeWithoutAdminRight
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
test eax, eax
js 0x44cdca
push edi
push 0x4b478c
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_4144]
lea ecx, [ebp + 8]
mov esi, eax
call dword [sym.imp.mfc100.dll_Ordinal_5207]
sub eax, esi
dec eax
push eax
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_11781]
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x2b
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc100.dll_Ordinal_901]
push 0x29
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_11744]
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_7487]
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 0x2c
call dword [sym.imp.mfc100.dll_Ordinal_1313]
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call dword [sym.imp.mfc100.dll_Ordinal_901]
call sub.mfc100.dll_Ordinal_1929
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.00405cd0
push 0x4b0cd8
push eax
lea edx, [ebp - 0x14]
push edx
mov byte [ebp - 4], 0x2d
call fcn.004019e0
lea ecx, [ebp + 8]
push ecx
push eax
lea edx, [ebp - 0x18]
push edx
mov byte [ebp - 4], 0x2e
call fcn.004018e0
add esp, 0x18
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x31
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x30]
push 0x4bb4ac
push ecx
call fcn.00401a70
add esp, 0xc
push 5
push edi
mov ecx, eax
call dword [sym.imp.mfc100.dll_Ordinal_1448]
push eax
push str.cmd.exe
push str.open
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x30]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov bl, 1
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc100.dll_Ordinal_901]
lea ecx, [ebp + 8]
call dword [sym.imp.mfc100.dll_Ordinal_901]
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4