Function at 0x10020510
Capabilities:
Create process on windows
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006dda4
mov eax, dword fs:[0]
push eax
sub esp, 0x210
mov eax, dword [0x10088064]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [0x100881a4]
mov edx, 0x10078780
mov ecx, 0x100881a8
call fcn.10019880
test al, al
jne 0x100210f6
call fcn.10020390
test al, al
je 0x100210f6
mov ecx, dword [0x100881b8]
mov eax, 0x7ffffffe
sub eax, ecx
cmp eax, 0x21
jb 0x10021118
cmp dword [0x100881bc], 8
mov eax, 0x100881a8
push ecx
cmovae eax, dword [0x100881a8]
push eax
push 0x21
push str.https:__update.gpt_reboot.moe_v1_
push ecx
push dword [ebp - 0x218]
lea ecx, [ebp - 0x8c]
call fcn.100100f0
push str._manifest.json
lea edx, [ebp - 0x8c]
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xd4]
call fcn.100197e0
add esp, 4
lea ecx, [ebp - 0x8c]
call fcn.1000a990
mov dword [ebp - 0x74], 0
xor eax, eax
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 8
call fcn.10042e60
push 0
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 9
call fcn.10040b90
mov dword [ebp - 0x8c], 0
push 0x4a
xor eax, eax
mov dword [ebp - 0x7c], 0
push str.Mozilla_5.0__Windows_NT_6.1__WOW64__AppleWebKit_537.36__KHTML__like_Gecko_
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
mov byte [ebp - 4], 0xb
call fcn.10006100
mov dword [ebp - 0xa4], 0
xor eax, eax
mov dword [ebp - 0x94], 0
push eax
push 0x10078780
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x90], 7
mov word [ebp - 0xa4], ax
mov byte [ebp - 4], 0xd
call fcn.10006100
mov dword [ebp - 0xbc], 0
xor eax, eax
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], ax
mov byte [ebp - 4], 0xf
push eax
push 0x10078780
lea ecx, [ebp - 0xbc]
call fcn.10006100
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x1f0]
call fcn.100176e0
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], 0x12
push ecx
lea ecx, [ebp - 0xa4]
mov edx, eax
push ecx
lea ecx, [ebp - 0xbc]
push ecx
lea ecx, [ebp - 0x214]
call fcn.10018b10
add esp, 0xc
lea ecx, [ebp - 0x1f0]
call fcn.10017d90
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xa8]
cmp edx, 8
jb 0x10020774
mov ecx, dword [ebp - 0xbc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002076a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002111d
push edx
push ecx
call fcn.1005cd99
add esp, 8
xor eax, eax
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], ax
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x90]
cmp edx, 8
jb 0x100207d5
mov ecx, dword [ebp - 0xa4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100207cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002111d
push edx
push ecx
call fcn.1005cd99
add esp, 8
xor eax, eax
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 7
mov word [ebp - 0xa4], ax
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x78]
cmp edx, 8
jb 0x10020833
mov ecx, dword [ebp - 0x8c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020829
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002111d
push edx
push ecx
call fcn.1005cd99
add esp, 8
xor eax, eax
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0x5c], al
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x48], 0xf
cmp ecx, eax
je 0x1002087a
sub eax, ecx
push eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.1000ccc0
push 0
lea eax, [ebp - 0x208]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x148]
call fcn.100447f0
test al, al
jne 0x100209f4
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x100208d2
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100208c8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
lea ecx, [ebp - 0x214]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
call fcn.10008d10
lea ecx, [ebp - 0x208]
call fcn.10040f70
lea ecx, [ebp - 0x148]
call fcn.10021130
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x1002093f
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020935
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
mov edx, dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp edx, 8
jb 0x1002098d
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020983
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
mov edx, dword [ebp - 0x60]
xor eax, eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp edx, 8
jb 0x100209db
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100209d1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
xor eax, eax
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
jmp 0x100210eb
push str.latest_version
lea ecx, [ebp - 0x208]
call fcn.10041490
mov ecx, eax
call fcn.10042010
push str.latest_version
lea ecx, [ebp - 0x208]
mov bl, al
call fcn.10041490
mov ecx, eax
call fcn.10041f90
test al, al
movzx ecx, bl
mov edi, 1
cmove ecx, edi
test ecx, ecx
je 0x10020b93
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x10020a6d
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10020a63
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
lea ecx, [ebp - 0x214]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
call fcn.10008d10
lea ecx, [ebp - 0x208]
call fcn.10040f70
lea ecx, [ebp - 0x148]
call fcn.10021130
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x10020ada
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020ad0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
mov edx, dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp edx, 8
jb 0x10020b28
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020b1e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
mov edx, dword [ebp - 0x60]
xor eax, eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp edx, 8
jb 0x100209db
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020b70
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
mov dword [ebp - 0x64], 0
xor eax, eax
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
jmp 0x100210eb
push str.latest_version
lea ecx, [ebp - 0x208]
call fcn.10041490
mov ecx, eax
call fcn.100417e0
cmp eax, esi
jg 0x10020d0c
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x10020be6
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10020bdc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
lea ecx, [ebp - 0x214]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
call fcn.10008d10
lea ecx, [ebp - 0x208]
call fcn.10040f70
lea ecx, [ebp - 0x148]
call fcn.10021130
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x10020c53
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020c49
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
mov edx, dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp edx, 8
jb 0x10020ca1
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020c97
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
mov edx, dword [ebp - 0x60]
xor eax, eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
cmp edx, 8
jb 0x100209db
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020ce9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
mov dword [ebp - 0x64], 0
xor eax, eax
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
jmp 0x100210eb
push str.utf8_message
lea ecx, [ebp - 0x208]
call fcn.10041490
mov ecx, eax
call fcn.10042010
test al, al
jne 0x10020d6e
push str.utf8_message
lea ecx, [ebp - 0x208]
call fcn.10041490
mov ecx, eax
call fcn.10042030
test al, al
je 0x10020d6e
push str.utf8_message
lea ecx, [ebp - 0x208]
call fcn.10041490
lea ecx, [ebp - 0xa4]
push ecx
mov ecx, eax
call fcn.100419b0
mov byte [ebp - 4], 0x1a
push 0xfde9
jmp 0x10020edd
push str.message
lea ecx, [ebp - 0x208]
call fcn.10041490
mov ecx, eax
call fcn.10042010
push str.message
lea ecx, [ebp - 0x208]
mov bl, al
call fcn.10041490
mov ecx, eax
call fcn.10042030
test al, al
movzx ecx, bl
cmove ecx, edi
test ecx, ecx
je 0x10020eb6
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x10020de2
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10020dd8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
lea ecx, [ebp - 0x214]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
call fcn.10008d10
lea ecx, [ebp - 0x208]
call fcn.10040f70
lea ecx, [ebp - 0x148]
call fcn.10021130
mov edx, dword [ebp - 0x30]
cmp edx, 8
jb 0x10020e4f
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020e45
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
mov edx, dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp edx, 8
jb 0x10020e9d
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020e93
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021122
push edx
push ecx
call fcn.1005cd99
add esp, 8
xor eax, eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
jmp 0x100210e3
push str.utf8_message
lea ecx, [ebp - 0x208]
call fcn.10041490
lea ecx, [ebp - 0xa4]
push ecx
mov ecx, eax
call fcn.100419b0
mov byte [ebp - 4], 0x1b
push 0x3a8
mov edx, eax
lea ecx, [ebp - 0x8c]
call fcn.100166f0
add esp, 4
lea ecx, [ebp - 0x74]
push eax
call fcn.1000a9f0
lea ecx, [ebp - 0x8c]
call fcn.1000a990
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x19
call fcn.10005f90
push str.update_title
lea ecx, [ebp - 0x208]
call fcn.10041490
mov ecx, eax
call fcn.10042010
test al, al
jne 0x10020fa2
push str.update_title
lea ecx, [ebp - 0x208]
call fcn.10041490
mov ecx, eax
call fcn.10042030
test al, al
je 0x10020fa2
push str.update_title
lea ecx, [ebp - 0x208]
call fcn.10041490
lea ecx, [ebp - 0xa4]
push ecx
mov ecx, eax
call fcn.100419b0
push 0xfde9
mov edx, eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x8c]
call fcn.100166f0
add esp, 4
lea ecx, [ebp - 0x2c]
push eax
call fcn.1000a9f0
lea ecx, [ebp - 0x8c]
call fcn.1000a990
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x19
call fcn.10005f90
jmp 0x10020faf
push str.Update
lea ecx, [ebp - 0x2c]
call fcn.1000a960
push str.info_url
lea ecx, [ebp - 0x208]
call fcn.10041490
mov ecx, eax
call fcn.10042010
test al, al
jne 0x1002103f
push str.info_url
lea ecx, [ebp - 0x208]
call fcn.10041490
mov ecx, eax
call fcn.10042030
test al, al
je 0x1002103f
push str.info_url
lea ecx, [ebp - 0x208]
mov bl, 1
call fcn.10041490
lea ecx, [ebp - 0xa4]
push ecx
mov ecx, eax
call fcn.100419b0
push 0xfde9
mov edx, eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x8c]
call fcn.100166f0
add esp, 4
lea ecx, [ebp - 0x44]
push eax
call fcn.1000a9f0
lea ecx, [ebp - 0x8c]
call fcn.1000a990
lea ecx, [ebp - 0xa4]
call fcn.10005f90
jmp 0x10021041
xor bl, bl
cmp dword [ebp - 0x18], 8
lea edx, [ebp - 0x2c]
push 0
cmovae edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x74]
cmp dword [ebp - 0x60], 8
movzx ecx, bl
cmovae eax, dword [ebp - 0x74]
push ecx
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxExW]
cmp eax, 1
jne 0x10021091
test bl, bl
je 0x100210aa
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
push 1
cmovae eax, dword [ebp - 0x44]
push 0
push 0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x100210aa
cmp eax, 2
je 0x100210aa
push 0x30
push 0x10079a08
push 0x10079a10
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x5c]
call fcn.10005f90
lea ecx, [ebp - 0x214]
call fcn.10008d10
lea ecx, [ebp - 0x208]
call fcn.10040f70
lea ecx, [ebp - 0x148]
call fcn.10021130
lea ecx, [ebp - 0x44]
call fcn.1000a990
lea ecx, [ebp - 0x2c]
call fcn.1000a990
lea ecx, [ebp - 0x74]
call fcn.1000a990
lea ecx, [ebp - 0xd4]
call fcn.1000a990
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1005c833
mov esp, ebp
pop ebp
ret
call fcn.10001ab0
call fcn.10061be0
call fcn.10061be0
int3